create-windy 0.9.1 → 0.10.0

package/dist/cli.js

@@ -33,7 +33,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __require = import.meta.require;
 
-// ../../node_modules/.bun/cli-width@4.1.0/node_modules/cli-width/index.js
+// ../../node_modules/cli-width/index.js
 var require_cli_width = __commonJS((exports, module2) => {
   module2.exports = cliWidth;
   function normalizeOpts(options) {
@@ -73,7 +73,7 @@ var require_cli_width = __commonJS((exports, module2) => {
   }
 });
 
-// ../../node_modules/.bun/mute-stream@3.0.0/node_modules/mute-stream/lib/index.js
+// ../../node_modules/mute-stream/lib/index.js
 var require_lib = __commonJS((exports, module2) => {
   var Stream = __require("stream");
 
@@ -310,6 +310,48 @@ function optionalModule(name, label, description, dependencies) {
   };
 }
 
+// src/optional-module-media.ts
+var mediaOptionalModule = {
+  ...optionalModule("system.media-runtime", "\u5A92\u4F53\u8FD0\u884C\u65F6", "\u53D7\u6CBB\u7406\u7684\u6587\u6863\u3001\u8BED\u97F3\u3001\u5D4C\u5165\u4E0E\u516C\u5171\u6587\u4EF6\u5F15\u7528\u3002", ["system", "system.audit", "system.storage"]),
+  runtimeActivation: "physical-only",
+  fileRoots: [
+    "apps/document-server",
+    "apps/speech-server",
+    "apps/embedding-server",
+    "apps/server/src/ai-runtime-readiness",
+    "apps/server/src/app/document-output-artifact-bindings.ts",
+    "apps/server/src/app/speech-output-artifact-bindings.ts",
+    "apps/server/src/ai-artifact",
+    "apps/server/src/ai-runtime-security",
+    "apps/server/src/media-runtime",
+    "apps/server/src/ai-output-artifact",
+    "apps/server/src/document",
+    "apps/server/src/speech",
+    "apps/server/src/embedding",
+    "apps/server/src/module-host/ai-operation-port.ts",
+    "apps/server/src/module-host/ai-operation-port.test.ts",
+    "scripts/provision-speech-readiness.ts",
+    "packages/database/src/ai-output-artifacts.test.ts",
+    "packages/modules/src/system-media-api-bindings.ts"
+  ],
+  documentation: [
+    "docs/architecture/ai-runtime-readiness.md",
+    "docs/platform/document-ai-runtime.md",
+    "docs/platform/speech-ai-runtime.md",
+    "docs/platform/embedding-ai-runtime.md"
+  ],
+  schemaFiles: [
+    "packages/database/src/schema/embedding-runtime.ts",
+    "packages/database/src/schema/ai-output-artifacts.ts"
+  ],
+  databaseStatementTokens: ["windy_media_runtime_access"],
+  databaseTables: [
+    "embedding_run_bindings",
+    "ai_output_artifact_scopes",
+    "ai_output_artifacts"
+  ]
+};
+
 // src/optional-module-agent.ts
 var agentOptionalModule = {
   ...optionalModule("system.agent", "Agent Tool", "\u53D7\u63A7 Agent \u5DE5\u5177\u5BBF\u4E3B\u3002", [
@@ -317,7 +359,8 @@ var agentOptionalModule = {
     "system.audit",
     "system.storage",
     "system.scheduler",
-    "system.workflow"
+    "system.workflow",
+    "system.media-runtime"
   ]),
   registryDependencies: [
     { sourceName: "fflate", name: "fflate", version: "0.8.3" },
@@ -336,15 +379,11 @@ var agentOptionalModule = {
   fileRoots: [
     "apps/agent-server",
     "apps/server/scripts/check-dsh-platform-example.ts",
-    "apps/document-server",
-    "apps/speech-server",
-    "apps/embedding-server",
     "apps/server/src/agent",
     "apps/server/src/agent-skills",
     "deploy/dsh",
     "apps/server/src/agent-workflow",
     "apps/server/src/ai-runtime-report",
-    "apps/server/src/ai-runtime-readiness",
     "apps/server/src/app/ai-screenshot-intake-binding.ts",
     "apps/server/src/app/agent-runtime-composition.ts",
     "apps/server/src/app/workbench-public-origin.ts",
@@ -370,16 +409,7 @@ var agentOptionalModule = {
     "apps/server/src/app/dsh-workbench.ts",
     "apps/server/src/app/client-agent-host-auth-binding.ts",
     "apps/server/src/app/client-agent-workflow-artifact-binding.ts",
-    "apps/server/src/app/document-output-artifact-bindings.ts",
-    "apps/server/src/app/speech-output-artifact-bindings.ts",
-    "apps/server/src/ai-artifact",
-    "apps/server/src/ai-output-artifact",
-    "apps/server/src/document",
-    "apps/server/src/speech",
-    "apps/server/src/embedding",
     "apps/server/src/mcp",
-    "apps/server/src/module-host/ai-operation-port.ts",
-    "apps/server/src/module-host/ai-operation-port.test.ts",
     "apps/server/src/module-host/agent-session-memory-port.ts",
     "apps/server/src/module-host/agent-source-invalidation-port.ts",
     "apps/server/src/module-host/workflow-input-artifact-port.ts",
@@ -395,12 +425,12 @@ var agentOptionalModule = {
     "apps/web/src/pages/system/AiRuntimePage.vue",
     "apps/web/src/pages/system/AgentToolsPage.vue",
     "apps/web/src/pages/system/SystemAgentSkillsPage.vue",
-    "apps/web/src/pages/system/SystemAgentSkillsPage.webtest.ts",
     "apps/web/src/pages/system/components/agent-skills",
     "apps/web/src/pages/system/composables/useAgentSkillsGovernance.ts",
     "apps/web/src/pages/system/composables/useAgentWorkflowPresets.ts",
     "apps/web/src/services/agent-skills-api.ts",
     "apps/web/src/pages/system/AgentDebugPage.vue",
+    "apps/web/src/pages/system/AgentNativePage.vue",
     "apps/web/src/pages/system/components/agent-workbench",
     "apps/web/src/pages/system/composables/useAgentWorkbench.ts",
     "apps/web/src/pages/system/composables/useAgentWorkbench.webtest.ts",
@@ -426,7 +456,6 @@ var agentOptionalModule = {
     "apps/web/src/services/agent-session-api.webtest.ts",
     "apps/web/src/services/ai-runtime-api.ts",
     "apps/web/src/services/ai-runtime-api.webtest.ts",
-    "scripts/provision-speech-readiness.ts",
     "packages/modules/src/system-agent-admin-registration.test.ts",
     "packages/modules/src/system-agent-admin-menus.ts",
     "packages/modules/src/system-agent-admin-bindings.ts",
@@ -445,7 +474,6 @@ var agentOptionalModule = {
     "packages/server-sdk/src/workflow-input-artifact-validation.contract.test.ts",
     "packages/server-sdk/src/workflow-input-materialization-handler.ts",
     "packages/database/src/agent-runtime-schema.test.ts",
-    "packages/database/src/ai-output-artifacts.test.ts",
     "packages/shared/src/agent-admin-catalog.ts",
     "packages/shared/src/agent-workbench.ts",
     "packages/shared/src/agent-skills.ts",
@@ -472,9 +500,7 @@ var agentOptionalModule = {
     "docs/development/dsh-plugins.md",
     "docs/architecture/agent-runtime-compatibility.md",
     "docs/architecture/agent-workflow.md",
-    "docs/architecture/durable-jobs.md",
     "docs/architecture/ai-egress.md",
-    "docs/architecture/ai-runtime-readiness.md",
     "docs/architecture/ai-runtime.md",
     "docs/architecture/mcp-business-capabilities.md",
     "docs/operations/agent-session-memory.md",
@@ -492,10 +518,7 @@ var agentOptionalModule = {
     "docs/platform/agent-tool-sandbox.md",
     "docs/platform/agent-production-store.md",
     "docs/platform/agent-run-reattachment.md",
-    "docs/platform/background-ai-operations.md",
-    "docs/platform/document-ai-runtime.md",
-    "docs/platform/speech-ai-runtime.md",
-    "docs/platform/embedding-ai-runtime.md"
+    "docs/platform/background-ai-operations.md"
   ],
   schemaFiles: [
     "packages/database/src/schema/agent-runtime.ts",
@@ -508,9 +531,7 @@ var agentOptionalModule = {
     "packages/database/src/schema/agent-workflow-effects.ts",
     "packages/database/src/schema/agent-workflow-evaluation.ts",
     "packages/database/src/schema/client-agent.ts",
-    "packages/database/src/schema/client-agent-workflow-artifact.ts",
-    "packages/database/src/schema/embedding-runtime.ts",
-    "packages/database/src/schema/ai-output-artifacts.ts"
+    "packages/database/src/schema/client-agent-workflow-artifact.ts"
   ],
   databaseTables: [
     "agent_operation_releases",
@@ -526,9 +547,6 @@ var agentOptionalModule = {
     "client_agent_sessions",
     "client_agent_receipts",
     "client_agent_workflow_artifacts",
-    "embedding_run_bindings",
-    "ai_output_artifact_scopes",
-    "ai_output_artifacts",
     "agent_sessions",
     "agent_session_events",
     "agent_session_checkpoints",
@@ -612,6 +630,7 @@ var storageOptionalModule = {
 // src/optional-module-distribution.ts
 var optionalModuleManifests = [
   storageOptionalModule,
+  mediaOptionalModule,
   agentOptionalModule,
   {
     ...optionalModule("system.scheduler", "\u4EFB\u52A1\u8C03\u5EA6", "\u4EFB\u52A1\u3001\u91CD\u8BD5\u3001\u5386\u53F2\u548C\u6062\u590D\u3002", ["system", "system.audit"]),
@@ -808,6 +827,9 @@ var platformModules = [
   {
     ...module("system.settings", "\u5E73\u53F0\u8BBE\u7F6E", "\u54C1\u724C\u3001Logo \u4E0E\u6C34\u5370\u3002", "recommended", ["system"]),
     runtimeActivation: "physical-only",
+    registryDependencies: [
+      { sourceName: "yaml", name: "yaml", version: "2.9.0" }
+    ],
     fileRoots: [
       "apps/server/src/settings",
       "apps/web/src/pages/settings",
@@ -822,7 +844,10 @@ var platformModules = [
       "packages/modules/src/system-api-watermark.ts",
       "packages/modules/src/system-watermark-policy.test.ts"
     ],
-    documentation: ["docs/platform/platform-shell-settings.md"],
+    documentation: [
+      "docs/platform/platform-shell-settings.md",
+      "docs/operations/admin-settings-yaml.md"
+    ],
     databaseTables: [
       "platform_branding_settings",
       "platform_watermark_policies"
@@ -1025,6 +1050,170 @@ function module(name, label, description, selection, dependencies = []) {
   };
 }
 
+// src/environment-profile.ts
+import { readFileSync, statSync } from "fs";
+
+// ../shared/src/environment-policy.ts
+var AI_RUNTIME_KINDS = [
+  "agent",
+  "document",
+  "speech",
+  "embedding"
+];
+function object(value, required, optional = []) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    throw new Error("\u73AF\u5883\u9884\u8BBE\u5FC5\u987B\u4E3A\u5BF9\u8C61");
+  const record = value;
+  if (required.some((key) => !Object.hasOwn(record, key)) || Object.keys(record).some((key) => ![...required, ...optional].includes(key)))
+    throw new Error("\u73AF\u5883\u9884\u8BBE\u7F3A\u5C11\u5FC5\u9700\u5B57\u6BB5\u6216\u5305\u542B\u672A\u77E5\u5B57\u6BB5");
+  return record;
+}
+function strings(value, pattern, max = 128) {
+  if (!Array.isArray(value) || value.length > max || value.some((item) => typeof item !== "string" || item.length > 128 || !pattern.test(item)) || new Set(value).size !== value.length)
+    throw new Error("\u73AF\u5883\u9884\u8BBE\u5217\u8868\u65E0\u6548\u6216\u91CD\u590D");
+  return value;
+}
+function parseEnvironmentPolicy(value) {
+  const root = object(value, ["schemaVersion", "build", "features"], ["runtime", "antivirus"]);
+  if (root.schemaVersion !== 1)
+    throw new Error("\u4E0D\u652F\u6301\u7684\u73AF\u5883\u9884\u8BBE\u7248\u672C");
+  const build = object(root.build, ["modules"], ["runtimes"]);
+  const modules = strings(build.modules, /^[a-z][a-z0-9.-]*$/);
+  if (!Array.isArray(root.features) || root.features.length > 128)
+    throw new Error("\u529F\u80FD\u8BC4\u4F30\u914D\u7F6E\u8D85\u51FA\u4E0A\u9650");
+  const features = root.features.map((value2) => {
+    const row = object(value2, ["key", "title", "execution"], [
+      "recommendedEnabled",
+      "supportedPlatforms",
+      "supportedArchitectures",
+      "minMemoryGiB",
+      "requiredEnvironmentKeys"
+    ]);
+    const [key] = strings([row.key], /^[a-z][a-z0-9.-]*$/);
+    if (typeof row.title !== "string" || !row.title.trim() || row.title.length > 120)
+      throw new Error("\u529F\u80FD\u8BC4\u4F30\u6807\u9898\u65E0\u6548");
+    if (!["none", "cpu", "local-gpu", "remote"].includes(String(row.execution)))
+      throw new Error("\u529F\u80FD\u6267\u884C\u65B9\u5F0F\u65E0\u6548");
+    if (row.recommendedEnabled !== undefined && typeof row.recommendedEnabled !== "boolean")
+      throw new Error("\u63A8\u8350\u5F00\u5173\u5FC5\u987B\u4E3A\u5E03\u5C14\u503C");
+    if (row.minMemoryGiB !== undefined && (typeof row.minMemoryGiB !== "number" || !Number.isFinite(row.minMemoryGiB) || row.minMemoryGiB <= 0 || row.minMemoryGiB > 65536))
+      throw new Error("\u6700\u4F4E\u5185\u5B58\u8981\u6C42\u65E0\u6548");
+    return {
+      key,
+      title: row.title,
+      execution: row.execution,
+      ...row.recommendedEnabled === undefined ? {} : { recommendedEnabled: row.recommendedEnabled },
+      ...row.minMemoryGiB === undefined ? {} : { minMemoryGiB: row.minMemoryGiB },
+      ...row.supportedPlatforms === undefined ? {} : {
+        supportedPlatforms: strings(row.supportedPlatforms, /^(linux|darwin|win32)$/)
+      },
+      ...row.supportedArchitectures === undefined ? {} : {
+        supportedArchitectures: strings(row.supportedArchitectures, /^(x64|arm64|arm|ia32|ppc64|s390x|riscv64|loong64)$/)
+      },
+      ...row.requiredEnvironmentKeys === undefined ? {} : {
+        requiredEnvironmentKeys: strings(row.requiredEnvironmentKeys, /^[A-Z][A-Z0-9_]*$/)
+      }
+    };
+  });
+  if (new Set(features.map(({ key }) => key)).size !== features.length)
+    throw new Error("\u529F\u80FD\u8BC4\u4F30 Key \u91CD\u590D");
+  const runtime = Object.hasOwn(root, "runtime") ? parseRuntimeSwitches(root.runtime) : undefined;
+  const runtimes = Object.hasOwn(build, "runtimes") ? parseRuntimeSwitches(build.runtimes) : undefined;
+  for (const kind of AI_RUNTIME_KINDS) {
+    if (runtimes?.[kind] === false && runtime?.[kind] === true)
+      throw new Error(`\u8FD0\u884C\u65F6\u672A\u968F\u5305\u4EA4\u4ED8\uFF1A${kind}`);
+  }
+  const antivirus = Object.hasOwn(root, "antivirus") ? parseAntivirusPolicy(root.antivirus) : undefined;
+  return {
+    schemaVersion: 1,
+    build: { modules, ...runtimes ? { runtimes } : {} },
+    features,
+    ...runtime ? { runtime } : {},
+    ...antivirus ? { antivirus } : {}
+  };
+}
+function parseRuntimeSwitches(value) {
+  const switches = object(value, [], [...AI_RUNTIME_KINDS]);
+  const runtime = {};
+  for (const kind of AI_RUNTIME_KINDS) {
+    if (!Object.hasOwn(switches, kind))
+      continue;
+    const enabled = switches[kind];
+    if (typeof enabled !== "boolean")
+      throw new Error("\u8FD0\u884C\u65F6\u5F00\u5173\u5FC5\u987B\u4E3A\u5E03\u5C14\u503C");
+    runtime[kind] = enabled;
+  }
+  return runtime;
+}
+function parseAntivirusPolicy(value) {
+  const { packaged, enabled } = object(value, ["packaged", "enabled"]);
+  if (typeof packaged !== "boolean" || typeof enabled !== "boolean")
+    throw new Error("\u75C5\u6BD2\u626B\u63CF\u4EA4\u4ED8\u548C\u542F\u7528\u8BBE\u7F6E\u5FC5\u987B\u4E3A\u5E03\u5C14\u503C");
+  if (enabled && !packaged)
+    throw new Error("\u75C5\u6BD2\u626B\u63CF\u672A\u968F\u9879\u76EE\u4EA4\u4ED8\uFF0C\u4E0D\u80FD\u542F\u7528");
+  return { packaged, enabled };
+}
+
+// src/environment-profile.ts
+function readEnvironmentProfile(path) {
+  const metadata = statSync(path);
+  if (!metadata.isFile() || metadata.size > 128 * 1024)
+    throw new Error("\u73AF\u5883\u9884\u8BBE\u5FC5\u987B\u4E3A\u4E0D\u8D85\u8FC7 128 KiB \u7684\u666E\u901A\u6587\u4EF6");
+  const source = readFileSync(path, "utf8");
+  if (Buffer.byteLength(source, "utf8") > 128 * 1024)
+    throw new Error("\u73AF\u5883\u9884\u8BBE\u6587\u4EF6\u4E0D\u80FD\u8D85\u8FC7 128 KiB");
+  return parseEnvironmentPolicy(Bun.YAML.parse(source));
+}
+function environmentProfileModules(profile) {
+  const selected = resolveModuleSelection({
+    requested: profile.build.modules,
+    includeRecommended: false
+  });
+  for (const kind of AI_RUNTIME_KINDS) {
+    const module2 = runtimeDistributionModule(kind);
+    if (!selected.includes(module2) && (profile.build.runtimes?.[kind] === true || profile.runtime?.[kind] === true))
+      throw new Error(`\u8FD0\u884C\u65F6 ${kind} \u9700\u8981\u9009\u62E9 ${module2} \u6A21\u5757`);
+  }
+  return selected;
+}
+function runtimeDistributionModule(kind) {
+  return kind === "agent" ? "system.agent" : "system.media-runtime";
+}
+function starterEnvironmentProfile(selectedModules, profile) {
+  const source = `# Windy \u73AF\u5883\u4E0E\u529F\u80FD\u9884\u8BBE\uFF08\u9879\u76EE\u6240\u6709\u8005\u7EF4\u62A4\uFF09
+# build.modules \u4EC5\u5728 create-windy --environment-profile \u9996\u6B21\u751F\u6210\u65F6\u7528\u4E8E\u7269\u7406\u88C1\u526A\u3002
+# \u5FC5\u9700\u6A21\u5757\u4E0E\u4F9D\u8D56\u4F1A\u81EA\u52A8\u8865\u9F50\uFF1B\u8FD9\u91CC\u8BB0\u5F55\u5B9E\u9645\u4EA4\u4ED8\u96C6\u5408\u3002
+# \u4FEE\u6539\u5DF2\u6709\u9879\u76EE\u7684\u6B64\u6587\u4EF6\u4E0D\u4F1A\u5220\u9664\u5DF2\u6784\u5EFA\u4EE3\u7801\uFF0C\u540E\u7EED\u88C1\u526A\u9700\u8D70\u6B63\u5F0F\u751F\u6210/\u5347\u7EA7\u6D41\u7A0B\u3002
+# features \u662F\u73AF\u5883\u8BC4\u4F30\u5EFA\u8BAE\uFF0C\u4E0D\u81EA\u52A8\u5F00\u5173\u529F\u80FD\uFF1B\u7BA1\u7406\u5458\u786E\u8BA4\u540E\u901A\u8FC7 Feature \u7BA1\u7406\u5E94\u7528\u3002
+# Server \u4EC5\u5728 WINDY_ENVIRONMENT_PROFILE_FILE \u663E\u5F0F\u6307\u5411\u6B64\u6587\u4EF6\u65F6\u52A0\u8F7D\u8BC4\u4F30\u7B56\u7565\u3002
+# CPU OCR \u9009\u62E9 system.media-runtime\uFF0C\u901A\u8FC7 build.runtimes \u548C runtime \u542F\u7528 document\u3002
+# PLATFORM_ENABLE_AI_RUNTIME \u63A7\u5236\u5171\u4EAB\u8FD0\u884C\u65F6\uFF0C\u4E0D\u80FD\u5F53\u4F5C\u7EAF Agent \u5F00\u5173\u3002
+# \u75C5\u6BD2\u626B\u63CF\u662F\u72EC\u7ACB\u53EF\u9009\u80FD\u529B\uFF0C\u6309\u660E\u786E\u9884\u8BBE\u9009\u62E9\u626B\u63CF\u6216\u4E0D\u626B\u63CF\uFF0C\u4E0E GPU \u72B6\u6001\u65E0\u5173\u3002
+${Bun.YAML.stringify({
+    schemaVersion: 1,
+    build: {
+      modules: [...selectedModules],
+      ...profile?.build.runtimes ? { runtimes: profile.build.runtimes } : {}
+    },
+    ...profile?.runtime ? { runtime: profile.runtime } : {},
+    ...profile?.antivirus ? { antivirus: profile.antivirus } : {},
+    features: profile?.features ?? []
+  })}
+# features \u793A\u4F8B\uFF08\u66FF\u6362\u4E3A\u672C\u9879\u76EE Manifest \u4E2D\u771F\u5B9E\u5B58\u5728\u7684 Feature Key \u540E\u518D\u586B\u5199\uFF09\uFF1A
+# - key: example.cpu-ocr
+#   title: CPU \u6587\u6863\u8BC6\u522B
+#   execution: cpu
+#   recommendedEnabled: true
+#   supportedPlatforms: [linux]
+#   supportedArchitectures: [arm64, x64]
+#   requiredEnvironmentKeys: [DOCUMENT_SERVER_URL]
+# \u8BBE\u5907\u63A2\u6D4B\u3001\u8F6F\u4EF6\u9002\u914D\u3001\u670D\u52A1 readiness \u4E0E\u8BC6\u522B\u8D28\u91CF\u662F\u4E0D\u540C\u8BC1\u636E\uFF1B\u672A\u77E5\u4E0D\u7B49\u4E8E\u4E0D\u652F\u6301\u3002
+`;
+  if (Buffer.byteLength(source, "utf8") > 128 * 1024)
+    throw new Error("\u751F\u6210\u7684\u73AF\u5883\u9884\u8BBE\u4E0D\u80FD\u8D85\u8FC7 128 KiB\uFF0C\u8BF7\u7F29\u51CF\u529F\u80FD\u8BC4\u4F30\u6761\u76EE");
+  return source;
+}
+
 // src/arguments.ts
 function parseArguments(args) {
   if (args.includes("--help") || args.includes("-h"))
@@ -1042,13 +1231,19 @@ function parseArguments(args) {
   if (includeAll && noOptionalModules) {
     throw new Error("--all-modules \u4E0D\u80FD\u4E0E --no-optional-modules \u540C\u65F6\u4F7F\u7528");
   }
+  const environmentProfilePath = readValue(args, "--environment-profile");
+  if (args.includes("--environment-profile") && (!environmentProfilePath || environmentProfilePath.startsWith("--")))
+    throw new Error("--environment-profile \u9700\u8981 YAML \u6216 JSON \u6587\u4EF6\u8DEF\u5F84");
+  if (environmentProfilePath && (requestedModules.length || includeAll || noOptionalModules))
+    throw new Error("--environment-profile \u4E0D\u80FD\u4E0E\u6A21\u5757\u9009\u62E9\u53C2\u6570\u540C\u65F6\u4F7F\u7528");
+  const environmentProfile = environmentProfilePath ? readEnvironmentProfile(environmentProfilePath) : undefined;
   const projectLicense = readProjectLicense(args);
-  const selectedModules = resolveModuleSelection({
+  const selectedModules = environmentProfile ? environmentProfileModules(environmentProfile) : resolveModuleSelection({
     requested: requestedModules,
     includeRecommended: !noOptionalModules,
     includeAll
   });
-  const explicitSelection = requestedModules.length > 0 || includeAll || noOptionalModules;
+  const explicitSelection = requestedModules.length > 0 || includeAll || noOptionalModules || Boolean(environmentProfile);
   return {
     projectName,
     targetDirectory: resolve(process.cwd(), projectName),
@@ -1057,6 +1252,7 @@ function parseArguments(args) {
     verify: args.includes("--verify"),
     keepOnError: args.includes("--keep-on-error"),
     selectedModules,
+    ...environmentProfile ? { environmentProfile } : {},
     includeExample: selectedModules.includes("work-order"),
     includeOxc: !args.includes("--no-oxc"),
     projectLicense,
@@ -1068,6 +1264,7 @@ function parseArguments(args) {
 function readProjectName(args) {
   const flagsWithValues = new Set([
     "--profile",
+    "--environment-profile",
     "--module",
     "--license",
     "--license-holder"
@@ -1117,6 +1314,7 @@ var helpText = `create-windy <\u9879\u76EE\u540D> [\u9009\u9879]
 
 \u9009\u9879\uFF1A
   --profile private-enterprise  \u5355\u7EC4\u7EC7\u3001\u5355\u79DF\u6237\u3001\u79C1\u6709\u90E8\u7F72 profile
+  --environment-profile <\u6587\u4EF6>   \u4ECE YAML/JSON build.modules \u9009\u62E9\u6A21\u5757\u5E76\u53D1\u653E\u73AF\u5883\u8BC4\u4F30\u5EFA\u8BAE
   --skip-install                \u751F\u6210\u6216\u66F4\u65B0\u65F6\u4E0D\u6267\u884C bun install
   --verify                      \u5B89\u88C5\u540E\u6267\u884C lint\uFF08\u82E5\u6709\uFF09\u3001typecheck\u3001test \u548C build
   --keep-on-error               \u5931\u8D25\u65F6\u4FDD\u7559\u65B0\u751F\u6210\u76EE\u5F55\u7528\u4E8E\u8BCA\u65AD
@@ -1585,6 +1783,7 @@ var ignoredFiles = new Set([
   ".windy/update-state.json"
 ]);
 var projectOwnedRoots = [
+  "windy.environment.yaml",
   "windy.modules.json",
   "module-schema.lineages.json",
   "module-schema",
@@ -1735,7 +1934,7 @@ import {
   fchmodSync,
   fstatSync as fstatSync2,
   fsyncSync as fsyncSync2,
-  readFileSync,
+  readFileSync as readFileSync2,
   writeSync
 } from "fs";
 import { open as open3 } from "fs/promises";
@@ -2189,7 +2388,7 @@ function readFileAt(parent) {
     const info = fstatSync2(fd);
     if (!info.isFile())
       throw new Error(`\u4E8B\u52A1\u76EE\u6807\u4E0D\u662F\u666E\u901A\u6587\u4EF6\uFF1A${parent.leaf}`);
-    return readFileSync(fd);
+    return readFileSync2(fd);
   } finally {
     closeSync2(fd);
   }
@@ -3100,16 +3299,26 @@ var textExtensions = new Set([
   ".yaml",
   ".yml"
 ]);
-async function materializeSelectedModules(targetDirectory, selectedNames) {
-  selectedModuleManifests(selectedNames);
+async function materializeSelectedModules(targetDirectory, selectedNames, excludedRuntimeApps = []) {
+  const retainedDependencies = new Set(selectedModuleManifests(selectedNames).flatMap(({ registryDependencies }) => registryDependencies).flatMap(({ sourceName, name }) => [sourceName, name]));
   const selected = new Set(selectedNames);
   const removed = moduleDistributionCatalog.filter(({ name }) => !selected.has(name));
-  const removedPackageNames = await readRemovedPackageNames(targetDirectory, removed.flatMap(({ packages }) => packages));
+  const removedPackageNames = await readRemovedPackageNames(targetDirectory, [
+    ...removed.flatMap(({ packages }) => packages),
+    ...excludedRuntimeApps
+  ]);
   for (const dependency of removed.flatMap(({ registryDependencies }) => registryDependencies)) {
-    removedPackageNames.add(dependency.sourceName);
-    removedPackageNames.add(dependency.name);
-  }
-  await stripModuleBlocks(targetDirectory, selected);
+    if (!retainedDependencies.has(dependency.sourceName))
+      removedPackageNames.add(dependency.sourceName);
+    if (!retainedDependencies.has(dependency.name))
+      removedPackageNames.add(dependency.name);
+  }
+  const agent = moduleDistributionCatalog.find(({ name }) => name === "system.agent");
+  const includeAgentUi = selected.has("system.agent") && !excludedRuntimeApps.includes("apps/agent-server");
+  const sourceTags = new Set(selected);
+  if (includeAgentUi)
+    sourceTags.add("system.agent-ui");
+  await stripModuleBlocks(targetDirectory, sourceTags);
   await pruneDatabaseArtifacts(targetDirectory, [
     ...removed.flatMap(({ databaseTables, transientDatabaseTables }) => [
       ...databaseTables,
@@ -3117,12 +3326,16 @@ async function materializeSelectedModules(targetDirectory, selectedNames) {
     ]),
     ...moduleDistributionCatalog.filter(({ databaseLineageOwner }) => databaseLineageOwner === "module").flatMap(({ databaseTables }) => databaseTables)
   ], removed.flatMap(({ databaseStatementTokens }) => databaseStatementTokens));
-  const removedRoots = collapseRemovalRoots(removed.flatMap((manifest) => [
-    ...manifest.packages,
-    ...manifest.fileRoots,
-    ...manifest.documentation,
-    ...manifest.schemaFiles
-  ]));
+  const removedRoots = collapseRemovalRoots([
+    ...removed.flatMap((manifest) => [
+      ...manifest.packages,
+      ...manifest.fileRoots,
+      ...manifest.documentation,
+      ...manifest.schemaFiles
+    ]),
+    ...excludedRuntimeApps,
+    ...!includeAgentUi && agent ? agent.fileRoots.filter((path) => path.startsWith("apps/web/src/") || path === "packages/modules/src/system-agent-admin-menus.ts" || path === "packages/modules/src/system-agent-admin-registration.test.ts") : []
+  ]);
   await Promise.all([...new Set(removedRoots)].map((path) => rm3(join8(targetDirectory, path), { recursive: true, force: true })));
   await pruneWorkspaceReferences(targetDirectory, removedPackageNames, removedRoots);
 }
@@ -3178,7 +3391,10 @@ async function readRemovedPackageNames(root, roots) {
   const names = new Set;
   for (const packageRoot2 of roots) {
     try {
-      const value = JSON.parse(await readFile6(join8(root, packageRoot2, "package.json"), "utf8"));
+      const directory = join8(root, packageRoot2);
+      if (!(await lstat3(directory)).isDirectory())
+        continue;
+      const value = JSON.parse(await readFile6(join8(directory, "package.json"), "utf8"));
       if (value.name)
         names.add(value.name);
     } catch (error) {
@@ -3211,7 +3427,12 @@ async function pruneWorkspaceReferences(root, removedPackages, removedRoots) {
       continue;
     const source = await readFile6(path, "utf8");
     const output = source.split(`
-`).filter((line) => !removedRoots.some((root2) => line.includes(root2))).join(`
+`).map((line) => {
+      for (const removed of removedRoots) {
+        line = line.replaceAll(`,"--filter","!./${removed}"`, "");
+      }
+      return line;
+    }).filter((line) => !removedRoots.some((root2) => line.includes(root2))).join(`
 `);
     if (output !== source)
       await writeFile5(path, output);
@@ -3327,15 +3548,12 @@ var starterServerBuild = `    build:
 function agentWorkflowServerEnvironment(includeAgent) {
   return includeAgent ? "      WINDY_AGENT_WORKFLOW_MODEL_PRICING_JSON: ${WINDY_AGENT_WORKFLOW_MODEL_PRICING_JSON:-}" : "";
 }
-function optionalComposeVolumes(includeAgent, includeSearch, includeStorage) {
+function optionalComposeVolumes(include, includeSearch, includeStorage) {
   return [
-    ...includeAgent ? [
-      "  agent-run-data:",
-      "  tool-sandbox-ipc:",
-      "  document-run-data:",
-      "  speech-run-data:",
-      "  embedding-run-data:"
-    ] : [],
+    ...include("agent") ? ["  agent-run-data:", "  tool-sandbox-ipc:"] : [],
+    ...include("document") ? ["  document-run-data:"] : [],
+    ...include("speech") ? ["  speech-run-data:"] : [],
+    ...include("embedding") ? ["  embedding-run-data:"] : [],
     ...includeSearch ? ["  opensearch-data:"] : [],
     ...includeStorage ? ["  server-storage-data:"] : []
   ].join(`
@@ -3442,7 +3660,8 @@ ${starterServerBuild}
         condition: service_completed_successfully
       server:
         condition: service_started
-  document-server:
+`;
+var documentComposeService = `  document-server:
     profiles: ["document"]
     build:
       context: .
@@ -3466,7 +3685,8 @@ ${starterServerBuild}
       server:
         condition: service_started
 
-  speech-server:
+`;
+var speechComposeService = `  speech-server:
     profiles: ["speech"]
     build:
       context: .
@@ -3498,7 +3718,8 @@ ${starterServerBuild}
       server:
         condition: service_started
 
-  embedding-server:
+`;
+var embeddingComposeService = `  embedding-server:
     profiles: ["embedding"]
     build:
       context: .
@@ -3606,10 +3827,10 @@ __STORAGE_SERVER_ENV__
       WINDY_CONTAINERIZED: "1"
       BUN_CONFIG_NO_CLEAR_TERMINAL_ON_RELOAD: "true"
       WINDY_SYSTEM_USAGE_PATHS: /app/data/audit
-      PLATFORM_ENABLE_AI: \${PLATFORM_ENABLE_AI:-false}
-      AGENT_SERVER_URL: http://agent-server:8080
+      PLATFORM_ENABLE_AI_RUNTIME: \${PLATFORM_ENABLE_AI_RUNTIME:-\${PLATFORM_ENABLE_AI:-false}}
+__ENVIRONMENT_PROFILE_ENV__
+__AGENT_SERVER_ENV__
       WINDY_PUBLIC_BASE_URL: "\${WINDY_PUBLIC_BASE_URL:-}"
-      AGENT_TOOL_HOST_URL: http://server:9747
 __TOOL_SANDBOX_SERVER_ENV__
       AGENT_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
 __AGENT_WORKFLOW_SERVER_ENV__
@@ -3628,6 +3849,7 @@ __OPENSEARCH_SERVER_ENV__
       - ./apps/server:/app/apps/server
       - ./packages:/app/packages
       - server-audit-data:/app/data/audit
+__ENVIRONMENT_PROFILE_VOLUME__
 __STORAGE_SERVER_VOLUME__
 __TOOL_SANDBOX_SERVER_VOLUME__
     depends_on:
@@ -3670,17 +3892,30 @@ volumes:
   server-audit-data:
 __OPTIONAL_VOLUMES__
 `;
-function starterComposeFor(includeAgent, includeSearch = true, includeStorage = true) {
+function starterComposeFor(includeAgent, includeSearch = true, includeStorage = true, profile, includeMedia = includeAgent) {
+  const include = (kind) => (kind === "agent" ? includeAgent : includeMedia) && profile?.build?.[kind] !== false;
+  const starts = (kind) => include(kind) && profile?.runtime?.[kind] === true;
+  const services = [
+    ["agent", agentComposeService],
+    ["document", documentComposeService],
+    ["speech", speechComposeService],
+    ["embedding", embeddingComposeService]
+  ];
+  const aiServices = services.filter(([kind]) => include(kind)).map(([kind, source]) => starts(kind) ? source.replaceAll(`    profiles: ["${kind}"]
+`, "") : source).join("");
+  const hasProfile = !!(profile?.build || profile?.runtime || profile?.mountEnvironment);
+  const startAi = services.some(([kind]) => starts(kind));
   return starterComposeBase.replace(`  web:
-`, `${includeAgent ? agentComposeService : ""}  web:
-`).replace("__TOOL_SANDBOX_SERVER_ENV__", includeAgent ? "      TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock" : "").replace("__AGENT_WORKFLOW_SERVER_ENV__", agentWorkflowServerEnvironment(includeAgent)).replace("__TOOL_SANDBOX_SERVER_VOLUME__", includeAgent ? "      - tool-sandbox-ipc:/run/windy-tool-sandbox" : "").replace("__STORAGE_SERVER_ENV__", includeStorage ? "      WINDY_STORAGE_ROOT: /app/data/storage" : "").replace("__STORAGE_SERVER_VOLUME__", includeStorage ? "      - server-storage-data:/app/data/storage" : "").replace("__OPENSEARCH_SERVER_ENV__", includeSearch ? `      OPENSEARCH_URL: \${OPENSEARCH_URL:-}
+`, `${aiServices}  web:
+`).replace("__ENVIRONMENT_PROFILE_ENV__", hasProfile ? "      WINDY_ENVIRONMENT_PROFILE_FILE: /app/windy.environment.yaml" : "").replace("__ENVIRONMENT_PROFILE_VOLUME__", hasProfile ? "      - ./windy.environment.yaml:/app/windy.environment.yaml:ro" : "").replace("__AGENT_SERVER_ENV__", include("agent") ? `      AGENT_SERVER_URL: http://agent-server:8080
+      AGENT_TOOL_HOST_URL: http://server:9747` : "").replace("${PLATFORM_ENABLE_AI:-false}", startAi ? "${PLATFORM_ENABLE_AI:-true}" : "${PLATFORM_ENABLE_AI:-false}").replace("${DOCUMENT_SERVER_URL:-}", starts("document") ? "${DOCUMENT_SERVER_URL:-http://document-server:8090}" : "${DOCUMENT_SERVER_URL:-}").replace("${SPEECH_SERVER_URL:-}", starts("speech") ? "${SPEECH_SERVER_URL:-http://speech-server:8091}" : "${SPEECH_SERVER_URL:-}").replace("${EMBEDDING_SERVER_URL:-}", starts("embedding") ? "${EMBEDDING_SERVER_URL:-http://embedding-server:8092}" : "${EMBEDDING_SERVER_URL:-}").replace("__TOOL_SANDBOX_SERVER_ENV__", include("agent") ? "      TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock" : "").replace("__AGENT_WORKFLOW_SERVER_ENV__", agentWorkflowServerEnvironment(include("agent"))).replace("__TOOL_SANDBOX_SERVER_VOLUME__", include("agent") ? "      - tool-sandbox-ipc:/run/windy-tool-sandbox" : "").replace("__STORAGE_SERVER_ENV__", includeStorage ? "      WINDY_STORAGE_ROOT: /app/data/storage" : "").replace("__STORAGE_SERVER_VOLUME__", includeStorage ? "      - server-storage-data:/app/data/storage" : "").replace("__OPENSEARCH_SERVER_ENV__", includeSearch ? `      OPENSEARCH_URL: \${OPENSEARCH_URL:-}
       OPENSEARCH_USERNAME: \${OPENSEARCH_USERNAME:-}
       OPENSEARCH_PASSWORD: \${OPENSEARCH_PASSWORD:-}
-      OPENSEARCH_WORK_ORDER_INDEX: \${OPENSEARCH_WORK_ORDER_INDEX:-windy-work-orders-v1}` : "").replace("__OPENSEARCH_SERVICE__", includeSearch ? openSearchComposeService : "").replace("__OPTIONAL_VOLUMES__", optionalComposeVolumes(includeAgent, includeSearch, includeStorage));
+      OPENSEARCH_WORK_ORDER_INDEX: \${OPENSEARCH_WORK_ORDER_INDEX:-windy-work-orders-v1}` : "").replace("__OPENSEARCH_SERVICE__", includeSearch ? openSearchComposeService : "").replace("__OPTIONAL_VOLUMES__", optionalComposeVolumes(include, includeSearch, includeStorage));
 }
 var starterCompose = starterComposeFor(true);
 // src/runtime-environment-example.ts
-function environmentExample(includeExample, includeAgent = true, includeSearch = true, includeStorage = true) {
+function environmentExample(includeExample, includeMedia = true, includeSearch = true, includeStorage = true, excludedRuntimes = []) {
   return `# \u590D\u5236\u4E3A .env \u540E\u586B\u5199\u3002\u4E0D\u8981\u63D0\u4EA4\u771F\u5B9E\u5BC6\u7801\u3002
 POSTGRES_PASSWORD=
 WINDY_BOOTSTRAP_ADMIN_PASSWORD=
@@ -3689,11 +3924,14 @@ ${includeStorage ? `
 # \u5982\u9700\u72EC\u7ACB\u6302\u8F7D\u62A5\u544A\u6682\u5B58\u76EE\u5F55\uFF0C\u8BF7\u540C\u65F6\u4FEE\u6539 Compose volume\u3002
 # WINDY_REPORT_STAGING_ROOT=/app/data/storage/report-staging
 ` : ""}
-${includeAgent ? `
-# Agent profile \u4EC5\u7531\u670D\u52A1\u7AEF Agent Runtime \u8BFB\u53D6\uFF1B\u4E0D\u8981\u4F7F\u7528 VITE_ \u524D\u7F00\u3002
-PLATFORM_ENABLE_AI=false
+${includeMedia ? `
+# \u5171\u4EAB AI Runtime \u5305\u62EC CPU OCR \u7684 Document Runtime\uFF1B\u4E0D\u662F\u4EC5\u63A7\u5236\u5927\u6A21\u578B\u3002
+# \u65E7\u540D PLATFORM_ENABLE_AI \u4ECD\u517C\u5BB9\uFF0C\u5EFA\u8BAE\u53EA\u914D\u7F6E\u5176\u4E2D\u4E00\u4E2A\uFF1B\u4E0D\u8981\u4F7F\u7528 VITE_ \u524D\u7F00\u3002
+# \u7559\u7A7A\u65F6\u4F7F\u7528\u751F\u6210\u7684 Compose \u9ED8\u8BA4\u503C\uFF1B\u9700\u8981\u8986\u76D6\u65F6\u518D\u53D6\u6D88\u6CE8\u91CA\u3002
+# PLATFORM_ENABLE_AI_RUNTIME=false
 AGENT_SERVER_INTERNAL_TOKEN=
-AGENT_INTERNAL_OUTPUT_ENCRYPTION_SECRET=
+AI_ARTIFACT_ENCRYPTION_SECRET=
+${!excludedRuntimes.includes("agent") ? `AGENT_INTERNAL_OUTPUT_ENCRYPTION_SECRET=
 # Model \u8282\u70B9\u542F\u7528\u524D\u5FC5\u987B\u586B\u5165\u7531\u8FD0\u7EF4\u51BB\u7ED3\u7684 deployment/model \u4EF7\u683C\u76EE\u5F55\uFF1B\u7F3A\u5931\u65F6 readiness \u660E\u786E unavailable\u3002
 WINDY_AGENT_WORKFLOW_MODEL_PRICING_JSON=
 # \u975E Compose \u90E8\u7F72\u9700\u6307\u5411 Windy Server\uFF1B\u957F\u671F Session \u7684\u6A21\u578B\u8C03\u7528\u4F1A fail closed\u3002
@@ -3710,12 +3948,16 @@ AGENT_DSH_USER_EXTENSIONS=1
 # \u6784\u5EFA\u671F\u955C\u50CF\u6E90\u4ECD\u9700\u7B26\u5408\u9501\u6587\u4EF6\u7684hash\uFF1B\u8FD0\u884C\u65F6\u4E0D\u4E0B\u8F7D\u539F\u751F\u4F9D\u8D56\u3002
 # WINDY_AGENT_NATIVE_REGISTRY=https://registry.npmjs.org
 # WINDY_PYPI_INDEX_URL=https://pypi.org/simple
-AI_ARTIFACT_ENCRYPTION_SECRET=
 # \u5F00\u53D1\u7559\u7A7A\u65F6\u5DE5\u4F5C\u53F0\u8DDF\u968F\u6D4F\u89C8\u5668\u540C\u6E90 Host\uFF0C\u652F\u6301 Web \u7AEF\u53E3\u548C\u52A8\u6001\u5C40\u57DF\u7F51\u5730\u5740\u3002
 # HTTPS \u53CD\u5411\u4EE3\u7406\u6216\u751F\u4EA7 Client Agent Session \u5FC5\u987B\u586B\u5199\u7528\u6237\u5B9E\u9645\u8BBF\u95EE\u7684 Web origin\u3002
 # WINDY_PUBLIC_BASE_URL=https://windy.example
 WINDY_PUBLIC_BASE_URL=
-DOCUMENT_SERVER_URL=
+` : ""}
+${!excludedRuntimes.includes("document") || !excludedRuntimes.includes("speech") ? `AI_OUTPUT_ARTIFACT_REFERENCE_SECRET=
+DOCUMENT_OUTPUT_ARTIFACT_SINK_IDENTITY=
+DOCUMENT_OUTPUT_ARTIFACT_SINK_RELEASE_DIGEST=
+` : ""}
+${!excludedRuntimes.includes("document") ? `DOCUMENT_SERVER_URL=
 DOCUMENT_ARTIFACT_URL=
 DOCUMENT_OUTPUT_ARTIFACT_URL=
 DOCUMENT_ADAPTER_URL=
@@ -3724,12 +3966,10 @@ DOCUMENT_DEPLOYMENT_KEY=
 DOCUMENT_DEPLOYMENT_IDENTITY=
 DOCUMENT_RELEASE_DIGEST=
 DOCUMENT_OFFERS_DIGEST=
-AI_OUTPUT_ARTIFACT_REFERENCE_SECRET=
-DOCUMENT_OUTPUT_ARTIFACT_SINK_IDENTITY=
-DOCUMENT_OUTPUT_ARTIFACT_SINK_RELEASE_DIGEST=
 # DOCUMENT_ADAPTER_CAPABILITIES=document.ocr,document.layout,document.table
 # DOCUMENT_MAX_UNITS=500
-SPEECH_SERVER_URL=
+` : ""}
+${!excludedRuntimes.includes("speech") ? `SPEECH_SERVER_URL=
 SPEECH_ARTIFACT_URL=
 SPEECH_OUTPUT_ARTIFACT_URL=
 SPEECH_ADAPTER_URL=
@@ -3748,7 +3988,8 @@ SPEECH_OFFERS_DIGEST=
 # SPEECH_MAX_QUEUE_DEPTH=0
 # SPEECH_READINESS_TIMEOUT_SECONDS=5
 # SPEECH_READINESS_TTL_SECONDS=60
-EMBEDDING_SERVER_URL=
+` : ""}
+${!excludedRuntimes.includes("embedding") ? `EMBEDDING_SERVER_URL=
 EMBEDDING_ARTIFACT_URL=
 EMBEDDING_RUN_ARTIFACT_URL=
 EMBEDDING_ADAPTER_URL=
@@ -3775,7 +4016,8 @@ EMBEDDING_RUN_ENCRYPTION_SECRET=
 # EMBEDDING_READINESS_TIMEOUT_SECONDS=5
 # EMBEDDING_READINESS_TTL_SECONDS=60
 # EMBEDDING_RUN_TERMINAL_TTL_SECONDS=604800
-QWEN_API_URL=
+` : ""}
+${!excludedRuntimes.includes("agent") ? `QWEN_API_URL=
 QWEN_API_KEY=
 QWEN_MODEL=
 # QWEN_STRUCTURED_OUTPUT_MODE=json_schema
@@ -3800,6 +4042,7 @@ AI_PROVIDER_HTTPS_HOST_ALLOWLIST=
 # AI_PROVIDER_MAX_ARTIFACTS=16
 # AI_PROVIDER_MAX_PIXELS_PER_ARTIFACT=100000000
 ` : ""}
+` : ""}
 
 ${includeSearch ? `# OpenSearch profile \u9ED8\u8BA4\u4E0D\u542F\u52A8\uFF1Bbun run dev:search \u4F1A\u53EA\u5411 Server \u6CE8\u5165\u5BB9\u5668\u5185\u5730\u5740\u3002
 OPENSEARCH_URL=
@@ -3818,7 +4061,7 @@ OPENSEARCH_PASSWORD=
 `;
 }
 // src/starter-docs-readme.ts
-function starterDocsReadme(includeOfflineLicense = true, includeAgent = true, includeOperations = true, includeStorage = true) {
+function starterDocsReadme(includeOfflineLicense = true, includeAgent = true, includeOperations = true, includeStorage = true, includeMedia = includeAgent) {
   return `# Windy Starter \u6587\u6863
 
 \u672C\u76EE\u5F55\u53EA\u5305\u542B\u5BA2\u6237\u8FD0\u884C\u9879\u76EE\u9700\u8981\u7684\u5E73\u53F0\u67B6\u6784\u3001\u5F00\u53D1\u63A5\u5165\u548C\u8FD0\u7EF4\u53EF\u89C2\u6D4B\u6027\u6587\u6863\u3002
@@ -3830,20 +4073,22 @@ License \u7B7E\u53D1\u4E2D\u5FC3\u3001\u72EC\u7ACB\u7B7E\u540D\u670D\u52A1\u3001
 - \u6570\u636E\u5E93\uFF1A\u4E1A\u52A1\u8868\u4F7F\u7528 [Migration Bundle \u4E0E\u72EC\u7ACB Drizzle lineage](./architecture/migration-bundle.md)\u3002
 - \u5E73\u53F0\u5F00\u53D1\uFF1A\u4ECE [\u7CFB\u7EDF CRUD API](./platform/system-crud-api.md) \u548C [CRUD \u751F\u6210\u5668](./development/crud-generator.md) \u5F00\u59CB\u3002
 - Web \u4E1A\u52A1\u9875\u9762\uFF1A[project-owned \u4E1A\u52A1 Web \u8DEF\u7531](./development/business-web-routes.md)\u3002
+- \u73AF\u5883\u9002\u914D\uFF1A[\u73AF\u5883\u80FD\u529B\u8BC4\u4F30\u4E0E\u6784\u5EFA\u9884\u8BBE](./operations/environment-capabilities.md)\u3002
 - \u90E8\u7F72\u671F\u6A21\u5757\u7BA1\u7406\uFF1A[\u6A21\u5757\u751F\u547D\u5468\u671F](./development/module-lifecycle.md)\u3002
 - \u4E1A\u52A1\u6A21\u5757\u5F00\u53D1\uFF1A[windy-business-module Skill](../.agents/skills/windy-business-module/SKILL.md)\u3002
 ${includeStorage ? "- \u5927\u62A5\u544A\u5BFC\u5165\uFF1A[\u53D7\u6CBB\u7406\u7684\u5927\u62A5\u544A\u6682\u5B58](./architecture/report-staging.md)\u3002" : ""}
 ${includeOfflineLicense ? "- License \u6D88\u8D39\u7AEF\uFF1A[\u79BB\u7EBF\u6FC0\u6D3B\u4E0E\u5B89\u88C5\u534F\u8BAE](./license/license-offline-activation-code.md)\u4E0E[\u624B\u673A\u626B\u7801\u914D\u5BF9\u6FC0\u6D3B](./license/license-pairing-activation.md)\uFF1B\u8FD0\u884C\u65F6\u80FD\u529B\u7531 npm \u4F9D\u8D56 `@southwind-ai/license` \u63D0\u4F9B\u3002" : ""}
 - \u8FD0\u7EF4\uFF1A[\u53EF\u89C2\u6D4B\u6027](./operations/observability.md)${includeOperations ? " \u4E0E [\u8FD0\u7EF4\u603B\u89C8](./platform/operations-overview.md)" : ""}\u3002
 - \u4EA4\u4ED8\uFF1A[\u6309 registry digest \u4E0E OCI blob \u5DEE\u91CF\u53D1\u5E03](./operations/incremental-delivery.md)\u3002
-${includeAgent ? "- Agent\u3001\u591A\u6A21\u6001 Runtime \u4E0E MCP\uFF1A[Agent Harness](./architecture/agent-harness.md)\u3001[Agent Runtime \u63A5\u5165](./platform/agent-runtime.md)\u3001[Session/Memory \u8FD0\u7EF4](./operations/agent-session-memory.md)\u3001[Session \u6545\u969C\u901F\u67E5](./operations/agent-session-troubleshooting.md)\u3001[Agent Workflow](./architecture/agent-workflow.md)\u3001[Workflow \u6062\u590D\u8FD0\u7EF4](./operations/agent-workflow-recovery.md)\u3001[Document AI Runtime](./platform/document-ai-runtime.md)\u3001[Speech AI Runtime](./platform/speech-ai-runtime.md)\u3001[\u53D7\u63A7\u5DE5\u5177](./platform/agent-tools.md)\u4E0E[MCP \u4E1A\u52A1\u80FD\u529B](./architecture/mcp-business-capabilities.md)\u3002" : ""}
+${includeAgent ? "- Agent \u4E0E MCP\uFF1A[Agent Harness](./architecture/agent-harness.md)\u3001[Agent Runtime \u63A5\u5165](./platform/agent-runtime.md)\u3001[Session/Memory \u8FD0\u7EF4](./operations/agent-session-memory.md)\u3001[Session \u6545\u969C\u901F\u67E5](./operations/agent-session-troubleshooting.md)\u3001[Agent Workflow](./architecture/agent-workflow.md)\u3001[Workflow \u6062\u590D\u8FD0\u7EF4](./operations/agent-workflow-recovery.md)\u3001[\u53D7\u63A7\u5DE5\u5177](./platform/agent-tools.md)\u4E0E[MCP \u4E1A\u52A1\u80FD\u529B](./architecture/mcp-business-capabilities.md)\u3002" : ""}
+${includeMedia ? "- \u5A92\u4F53\u8FD0\u884C\u65F6\uFF1A[Document/OCR](./platform/document-ai-runtime.md)\u3001[Speech](./platform/speech-ai-runtime.md)\u4E0E [Embedding](./platform/embedding-ai-runtime.md)\u3002" : ""}
 - \u6570\u636E\u8FC1\u79FB\uFF1A[\u65E7\u7CFB\u7EDF\u6570\u636E\u8FC1\u79FB\u7B56\u7565](./operations/legacy-data-migration.md)\u3002
 `;
 }
 // src/project-files.ts
-function starterReadme(projectName, includeExample = true, includeOxc = true, projectLicense = "UNLICENSED", selectedModules = []) {
+function starterReadme(projectName, includeExample = true, includeOxc = true, projectLicense = "UNLICENSED", selectedModules = [], includeAgentRuntime = selectedModules.includes("system.agent"), excludedRuntimes = []) {
   const selected = new Set(selectedModules);
-  const includeAgent = selected.has("system.agent");
+  const includeAgent = includeAgentRuntime;
   const includeSearch = selected.has("system.search");
   const toggleableModule = moduleDistributionCatalog.find(({ name, selection, runtimeActivation }) => selected.has(name) && selection !== "required" && runtimeActivation === "toggle" && !moduleDistributionCatalog.some((candidate) => selected.has(candidate.name) && candidate.dependencies.includes(name)))?.name;
   const moduleActivationCommands = toggleableModule ? [
@@ -3919,7 +4164,7 @@ ${includeAgent ? `
 ## DSH Agent profile
 
 Agent Runtime \u9ED8\u8BA4\u4E0D\u542F\u52A8\u3002\u5148\u5728\u4EC5\u4F9B\u672C\u673A\u4F7F\u7528\u7684 \`.env\` \u4E2D\u8BBE\u7F6E
-\`PLATFORM_ENABLE_AI=true\`\u3001\`AGENT_SERVER_INTERNAL_TOKEN\`\u3001\`QWEN_API_URL\`\u3001
+\`PLATFORM_ENABLE_AI_RUNTIME=true\`\u3001\`AGENT_SERVER_INTERNAL_TOKEN\`\u3001\`QWEN_API_URL\`\u3001
 \`QWEN_API_KEY\` \u4E0E \`QWEN_MODEL\`\uFF0C\u518D\u8FD0\u884C\uFF1A
 
 \`\`\`bash
@@ -3931,39 +4176,28 @@ bun run dev:agent
 \u73AF\u5883\u6216\u8FD4\u56DE\u7ED9\u5BA2\u6237\u7AEF\u3002\u516C\u7F51 HTTPS Endpoint \u7684\u4E3B\u673A\u5FC5\u987B\u663E\u5F0F\u52A0\u5165
 \`AI_PROVIDER_HTTPS_HOST_ALLOWLIST\`\u3002\u8FD0\u884C\u4E0E\u6A21\u5757
 \u63A5\u5165\u7EC6\u8282\u89C1 [Agent Runtime \u63A5\u5165](./docs/platform/agent-runtime.md)\u53CA
-[DSH \u90E8\u7F72\u4E0E\u8FC1\u79FB](./docs/operations/dsh-agent-migration.md)\u3002Agent Server \u4EE5 Node 24.7+
+[DSH \u90E8\u7F72\u4E0E\u8FC1\u79FB](./docs/operations/dsh-agent-migration.md)\u3002Agent Server \u4EE5 Node 24.9+
 \u6267\u884C\uFF0C\u4F7F\u7528\u65B0 SQLite \u6570\u636E\u8DEF\u5F84\uFF1B\u539F\u751F\u5DE5\u4F5C\u53F0\u9700\u8981 Linux \u9694\u79BB\u80FD\u529B\u3002\u5168\u5C40\u5BB9\u91CF\u9ED8\u8BA4 1 \u65F6\u4E3A\u65E2\u6709
 \u8C03\u7528\u94FE\u9884\u7559\uFF0C\u5DE5\u4F5C\u53F0\u4F1A\u660E\u786E\u663E\u793A\u5BB9\u91CF\u672A\u5F00\u653E\u3002\u4E2A\u4EBA\u6269\u5C55\u9ED8\u8BA4\u5F00\u653E\uFF0C\u7531\u90E8\u7F72\u5F00\u5173\u63A7\u5236\u3002
 
-Document Runtime \u540C\u6837\u9ED8\u8BA4\u5173\u95ED\u3002\u914D\u7F6E\u81F3\u5C11 32 \u5B57\u7B26\u7684
-\`AI_ARTIFACT_ENCRYPTION_SECRET\`\u3001\u672C\u5730\u6216\u5185\u7F51 \`DOCUMENT_ADAPTER_URL\` \u53CA\u5176
-capability \u540E\u8FD0\u884C\uFF1A
-
-\`\`\`bash
-bun run dev:document
-\`\`\`
-
-\u8BE5 profile \u53EA\u63A5\u53D7\u5E73\u53F0\u7B7E\u53D1\u7684\u77ED\u65F6 opaque ArtifactRef\uFF1B\u4E1A\u52A1\u4E0D\u5F97\u4F20 Base64\u3001\u5BBF\u4E3B\u8DEF\u5F84\u6216
-\u4EFB\u610F\u516C\u7F51 URL\u3002\u672A\u914D\u7F6E Document Adapter \u65F6\u4EC5\u5BF9\u5E94 Operation \u8FD4\u56DE\u7A33\u5B9A unavailable\uFF0C
-\u666E\u901A\u4E1A\u52A1\u4E0E\u6587\u672C Agent \u4E0D\u53D7\u5F71\u54CD\u3002\u8BE6\u89C1
-[Document AI Runtime](./docs/platform/document-ai-runtime.md)\u3002
-
-\u6279\u91CF\u8BED\u97F3\u8F6C\u5199\u4F7F\u7528\u72EC\u7ACB Speech profile\u3002\u914D\u7F6E\u672C\u5730/\u5185\u7F51
-\`SPEECH_ADAPTER_URL\` \u4E0E capability \u540E\u8FD0\u884C\uFF1A
-
-\`\`\`bash
-bun run dev:speech
-\`\`\`
-
-Speech Runtime \u53EA\u63A5\u6536\u6388\u6743 Artifact\uFF0C\u8D1F\u8D23\u683C\u5F0F\u5F52\u4E00\u5316\u3001VAD/\u65F6\u95F4\u6233\u5951\u7EA6\u3001\u7A33\u5B9A\u5206\u6BB5\u4E0E\u7ED3\u679C
-Artifact\uFF1B\u5B9E\u65F6 ASR\u3001TTS \u548C Dictation \u5C1A\u672A\u5F00\u653E\u3002\u8BE6\u89C1
-[Speech AI Runtime](./docs/platform/speech-ai-runtime.md)\u3002
-
 \u5F00\u53D1\u4E0E\u5BA1\u8BA1\u7EDF\u4E00\u4F7F\u7528 Windy \u4E3B\u7AD9\uFF1A\`/admin/system/ai-runtime\` \u63D0\u4F9B\u53D7\u6743\u9650\u4FDD\u62A4\u7684 Run\u3001
 Provider Attempt \u4E0E\u8131\u654F Trajectory\uFF1B\u4E1A\u52A1\u6A21\u5757\u53EF\u901A\u8FC7 \`registerAgentSessionProviders()\`
 \u6CE8\u518C\u5386\u53F2\u4F1A\u8BDD\u53EA\u8BFB\u6295\u5F71\u3002\u4E24\u8005\u5747\u590D\u7528\u5F53\u524D\u767B\u5F55\u8EAB\u4EFD\u3001Manifest Feature/RBAC \u4E0E Audit\uFF0C\u4E0D\u521B\u5EFA
 \u7B2C\u4E8C\u79CD\u8C03\u8BD5 Token\uFF0C\u4E5F\u4E0D\u4F1A\u5C55\u793A\u8F93\u5165\u8F93\u51FA\u6B63\u6587\u3001Tool \u53C2\u6570\u6216 Provider \u539F\u59CB\u54CD\u5E94\u3002
 ` : ""}
+${selected.has("system.media-runtime") ? `
+## \u5A92\u4F53\u8FD0\u884C\u65F6
+
+\u5728 \`windy.environment.yaml\` \u4E2D\u8BBE\u7F6E\u5DF2\u4EA4\u4ED8\u80FD\u529B\u7684 \`runtime\` \u5F00\u5173\u3002\u4FEE\u6539\u540E\u91CD\u542F Server\u3002
+\u53EA\u5728\u672C\u5730 \`.env\` \u914D\u7F6E\u5171\u4EAB\u5185\u90E8\u4EE4\u724C \`AGENT_SERVER_INTERNAL_TOKEN\`\u3001\u81F3\u5C11 32 \u5B57\u7B26\u7684
+\`AI_ARTIFACT_ENCRYPTION_SECRET\` \u548C\u5404 Adapter \u7684\u8FDE\u63A5\u4FE1\u606F\u3002\u4E1A\u52A1\u4EC5\u4F20\u5E73\u53F0\u7B7E\u53D1\u7684 ArtifactRef\u3002
+${!excludedRuntimes.includes("document") ? "- Document/OCR\uFF1A\u914D\u7F6E `DOCUMENT_ADAPTER_URL`\uFF0C\u4F7F\u7528 `bun run dev:document`\u3002\u8BE6\u89C1 [Document AI Runtime](./docs/platform/document-ai-runtime.md)\u3002" : ""}
+${!excludedRuntimes.includes("speech") ? "- Speech\uFF1A\u914D\u7F6E `SPEECH_ADAPTER_URL`\uFF0C\u4F7F\u7528 `bun run dev:speech`\u3002\u8BE6\u89C1 [Speech AI Runtime](./docs/platform/speech-ai-runtime.md)\u3002" : ""}
+${!excludedRuntimes.includes("embedding") ? "- Embedding\uFF1A\u914D\u7F6E `EMBEDDING_ADAPTER_URL`\u3002\u8BE6\u89C1 [Embedding AI Runtime](./docs/platform/embedding-ai-runtime.md)\u3002" : ""}
+
+\u4EE5 YAML \u663E\u5F0F\u5F00\u542F\u5E76\u751F\u6210\u7684\u670D\u52A1\u968F\u9ED8\u8BA4 Compose \u542F\u52A8\u3002\u8BE6\u89C1
+[\u73AF\u5883\u9884\u8BBE\u4E0E\u4EA4\u4ED8\u8FB9\u754C](./docs/operations/environment-capabilities.md)\u3002
+` : ""}
 ${includeSearch ? `
 ## OpenSearch \u641C\u7D22 profile
 
@@ -4114,7 +4348,8 @@ var migrationCliDependencies = {
   "drizzle-orm": "^0.45.2",
   pg: "^8.22.0"
 };
-function createStarterPackage(source, projectName, includeOxc = true, projectLicense = "UNLICENSED", selectedModules = [], generatorVersion) {
+function createStarterPackage(source, projectName, includeOxc = true, projectLicense = "UNLICENSED", selectedModules = [], generatorVersion, disabledRuntimes = []) {
+  const includeRuntime = (kind) => selectedModules.includes(kind === "agent" ? "system.agent" : "system.media-runtime") && !disabledRuntimes.includes(kind);
   const { "lint-staged": sourceLintStaged, ...sourceWithoutLintStaged } = source;
   const devDependencies = { ...source.devDependencies };
   if (!includeOxc) {
@@ -4129,7 +4364,11 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
     private: true,
     license: projectLicense,
     packageManager: "bun@1.3.14",
-    engines: { ...source.engines, bun: ">=1.3.14", node: ">=24.7.0" },
+    engines: {
+      ...source.engines,
+      bun: ">=1.3.14",
+      node: selectedModules.includes("system.agent") ? ">=24.9.0" : ">=24.7.0"
+    },
     ...includeOxc ? { "lint-staged": sourceLintStaged ?? defaultLintStaged } : {},
     scripts: {
       ...includeOxc ? {
@@ -4141,24 +4380,32 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
       ...selectedModules.includes("system.search") ? {
         "dev:search": "OPENSEARCH_URL=http://opensearch:9200 docker compose --profile search up --build"
       } : {},
-      ...selectedModules.includes("system.agent") ? {
+      ...includeRuntime("agent") ? {
         "dev:agent": "bun run docker:sync && docker compose --profile agent up --build",
         "check:agent": "bun run --cwd apps/agent-server typecheck",
-        "test:agent": "bun run --cwd apps/agent-server test",
-        "dev:speech": "PLATFORM_ENABLE_AI=true SPEECH_SERVER_URL=http://speech-server:8091 docker compose --profile agent --profile speech up --build",
+        "test:agent": "bun run --cwd apps/agent-server test"
+      } : {},
+      ...includeRuntime("speech") ? {
+        "dev:speech": "PLATFORM_ENABLE_AI_RUNTIME=true SPEECH_SERVER_URL=http://speech-server:8091 docker compose --profile speech up --build",
         "speech:pins": "bun run scripts/provision-speech-readiness.ts"
       } : {},
+      ...includeRuntime("document") ? {
+        "dev:document": "PLATFORM_ENABLE_AI_RUNTIME=true DOCUMENT_SERVER_URL=http://document-server:8090 docker compose --profile document up --build"
+      } : {},
+      ...includeRuntime("embedding") ? {
+        "dev:embedding": "PLATFORM_ENABLE_AI_RUNTIME=true EMBEDDING_SERVER_URL=http://embedding-server:8092 docker compose --profile embedding up --build"
+      } : {},
       ...generatorVersion ? { windy: "create-windy" } : {},
       "dev:web": "bun run --cwd apps/web dev",
       "dev:server": "bun run --cwd apps/server dev",
-      build: selectedModules.includes("system.agent") ? "bun run --cwd apps/agent-server build && bun run --cwd apps/web build" : "bun run --cwd apps/web build",
+      build: includeRuntime("agent") ? "bun run --cwd apps/agent-server build && bun run --cwd apps/web build" : "bun run --cwd apps/web build",
       "db:generate": "drizzle-kit generate --config drizzle.config.ts",
       "db:migrate": "drizzle-kit migrate --config drizzle.config.ts",
       "generate:crud": "bun run packages/crud-generator/src/cli.ts",
       typecheck: [
         "bun run --cwd apps/web typecheck",
         "bun run --cwd apps/server typecheck",
-        ...selectedModules.includes("system.agent") ? ["bun run --cwd apps/agent-server typecheck"] : [],
+        ...includeRuntime("agent") ? ["bun run --cwd apps/agent-server typecheck"] : [],
         "bun run --cwd packages/ai-client typecheck",
         "bun run --cwd packages/jobs typecheck",
         "bun run --cwd packages/shared typecheck",
@@ -4172,7 +4419,7 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
         format: "oxfmt",
         "format:staged": "lint-staged"
       } : {},
-      test: "bun test && bun run --cwd apps/web test" + (selectedModules.includes("system.agent") ? " && bun run test:agent" : "")
+      test: "bun test && bun run --cwd apps/web test" + (includeRuntime("agent") ? " && bun run test:agent" : "")
     },
     devDependencies: {
       ...migrationCliDependencies,
@@ -4198,7 +4445,9 @@ var templateRootFiles = [
   "package.json",
   "scripts/notification-postgres-regression.ts",
   "scripts/lib/postgres-regression.ts",
-  "scripts/provision-speech-readiness.ts"
+  "scripts/provision-speech-readiness.ts",
+  "scripts/operations/collect-device-info.py",
+  "deploy/environment/windy.environment.example.yaml"
 ];
 var templateDirectories = [
   ".agents/skills/windy-business-module",
@@ -4223,6 +4472,7 @@ var templateDirectories = [
   "packages/storage"
 ];
 var templateDocumentationFiles = [
+  "docs/operations/environment-capabilities.md",
   "docs/operations/legacy-data-migration.md",
   "docs/adr/0003-agent-session-event-source.md",
   "docs/adr/0004-embedded-dsh-runtime.md",
@@ -4261,6 +4511,7 @@ var templateDocumentationFiles = [
   "docs/development/custom-error-pages.md",
   "docs/development/custom-login-page.md",
   "docs/development/module-lifecycle.md",
+  "docs/development/performance-engineering.md",
   "docs/development/ui-component-gallery.md",
   "docs/license/license-offline-activation-code.md",
   "docs/license/license-pairing-activation.md",
@@ -4295,6 +4546,7 @@ var templateDocumentationFiles = [
   "docs/platform/organization-membership.md",
   "docs/platform/platform-authentication.md",
   "docs/platform/platform-shell-settings.md",
+  "docs/operations/admin-settings-yaml.md",
   "docs/platform/scheduled-task-executor.md",
   "docs/platform/speech-ai-runtime.md",
   "docs/platform/system-crud-api.md",
@@ -4369,7 +4621,7 @@ function parseGenerationProvenance(content) {
   }
   return parsed;
 }
-async function writeGenerationProvenance(targetDirectory, metadata, profile, selectedModules, includeOxc, legalLicense) {
+async function writeGenerationProvenance(targetDirectory, metadata, profile, selectedModules, includeOxc, legalLicense, environmentProfile) {
   const requested = selectedModuleManifests(selectedModules);
   const versions = new Map(metadata.modules.map((item) => [item.name, item]));
   const modules = requested.map(({ name }) => {
@@ -4388,6 +4640,7 @@ async function writeGenerationProvenance(targetDirectory, metadata, profile, sel
       codeQuality: includeOxc ? "oxc" : "none"
     },
     legalLicense,
+    ...environmentProfile ? { environmentProfile: parseEnvironmentPolicy(environmentProfile) } : {},
     appliedRecipes: [],
     managedFilesManifest: ".windy/files.json",
     choices: {
@@ -4411,6 +4664,13 @@ function isGenerationProvenance(value) {
     return false;
   const metadata = value;
   const toolchain = metadata.toolchain;
+  if (Object.hasOwn(metadata, "environmentProfile")) {
+    try {
+      parseEnvironmentPolicy(metadata.environmentProfile);
+    } catch {
+      return false;
+    }
+  }
   const choices = metadata.choices;
   return typeof metadata.windyVersion === "string" && metadata.profile === "private-enterprise" && toolchain?.runtime === "bun" && (toolchain?.codeQuality === "oxc" || toolchain?.codeQuality === "none") && (metadata.legalLicense === "UNLICENSED" || metadata.legalLicense === "MIT" || metadata.legalLicense === "Apache-2.0") && Array.isArray(metadata.appliedRecipes) && metadata.appliedRecipes.every((item) => typeof item === "string") && metadata.managedFilesManifest === ".windy/files.json" && typeof choices?.includeExample === "boolean" && typeof choices.includeOxc === "boolean";
 }
@@ -4608,26 +4868,46 @@ async function generateProject(input) {
   const includeOxc = input.includeOxc ?? true;
   const projectLicense = input.projectLicense ?? "UNLICENSED";
   const templateMetadata = await readTemplateMetadata(input.sourceRoot);
-  const selectedModules = input.selectedModules ?? templateMetadata.modules.filter(({ name }) => requestedIncludeExample || name !== "work-order").map(({ name }) => name);
+  if (input.environmentProfile?.antivirus?.packaged) {
+    throw new Error("Windy \u901A\u7528\u751F\u6210\u5668\u4E0D\u5305\u542B\u75C5\u6BD2\u626B\u63CF\u5668\uFF0C\u8BF7\u7531\u9879\u76EE\u4EA4\u4ED8\u626B\u63CF\u5668\u540E\u914D\u7F6E\u73AF\u5883\u9884\u8BBE");
+  }
+  const selectedModules = (input.environmentProfile ? environmentProfileModules(input.environmentProfile) : input.selectedModules) ?? templateMetadata.modules.filter(({ name }) => requestedIncludeExample || name !== "work-order").map(({ name }) => name);
   const includeExample = selectedModules.includes("work-order");
   for (const relativePath2 of generationTemplatePaths(true, includeOxc)) {
     await copyTree(await resolveTemplateSource(input.sourceRoot, relativePath2), join12(input.targetDirectory, relativePath2));
   }
-  await materializeSelectedModules(input.targetDirectory, selectedModules);
+  const disabledRuntimes = AI_RUNTIME_KINDS.filter((kind) => !selectedModules.includes(runtimeDistributionModule(kind)) || input.environmentProfile?.build.runtimes?.[kind] === false);
+  await materializeSelectedModules(input.targetDirectory, selectedModules, disabledRuntimes.flatMap((kind) => kind === "agent" ? [
+    "apps/agent-server",
+    "apps/server/scripts/check-dsh-platform-example.ts"
+  ] : [`apps/${kind}-server`]));
+  await mkdir3(join12(input.targetDirectory, "apps/server/src/system"), {
+    recursive: true
+  });
+  await writeFile9(join12(input.targetDirectory, "apps/server/src/system/ai-runtime-build.ts"), `// Generated by create-windy from the runtime delivery selection.
+` + `import type { AiRuntimeKind } from "@southwind-ai/shared";
+
+` + `export const excludedAiRuntimes: readonly AiRuntimeKind[] = ${JSON.stringify(disabledRuntimes)};
+`);
   await materializeRegistryDependencies(input.targetDirectory, selectedModuleManifests(selectedModules).flatMap(({ registryDependencies }) => registryDependencies));
   const packagePath = join12(input.targetDirectory, "package.json");
   const packageJson = JSON.parse(await readFile10(packagePath, "utf8"));
-  await writeFile9(packagePath, `${JSON.stringify(createStarterPackage(packageJson, input.projectName, includeOxc, projectLicense, selectedModules, templateMetadata.generatorVersion), null, 2)}
+  await writeFile9(packagePath, `${JSON.stringify(createStarterPackage(packageJson, input.projectName, includeOxc, projectLicense, selectedModules, templateMetadata.generatorVersion, disabledRuntimes), null, 2)}
 `);
-  await writeFile9(join12(input.targetDirectory, "docker-compose.yml"), starterComposeFor(selectedModules.includes("system.agent"), selectedModules.includes("system.search"), selectedModules.includes("system.storage")));
-  await writeFile9(join12(input.targetDirectory, ".env.example"), environmentExample(includeExample, selectedModules.includes("system.agent"), selectedModules.includes("system.search"), selectedModules.includes("system.storage")));
-  await writeFile9(join12(input.targetDirectory, "README.md"), starterReadme(input.projectName, includeExample, includeOxc, projectLicense, selectedModules));
-  await writeFile9(join12(input.targetDirectory, "docs/README.md"), starterDocsReadme(selectedModules.includes("system.license"), selectedModules.includes("system.agent"), selectedModules.includes("system.operations"), selectedModules.includes("system.storage")));
+  await writeFile9(join12(input.targetDirectory, "docker-compose.yml"), starterComposeFor(selectedModules.includes("system.agent"), selectedModules.includes("system.search"), selectedModules.includes("system.storage"), {
+    build: input.environmentProfile?.build.runtimes,
+    runtime: input.environmentProfile?.runtime,
+    mountEnvironment: true
+  }, selectedModules.includes("system.media-runtime")));
+  await writeFile9(join12(input.targetDirectory, ".env.example"), environmentExample(includeExample, selectedModules.includes("system.media-runtime"), selectedModules.includes("system.search"), selectedModules.includes("system.storage"), disabledRuntimes));
+  await writeFile9(join12(input.targetDirectory, "README.md"), starterReadme(input.projectName, includeExample, includeOxc, projectLicense, selectedModules, !disabledRuntimes.includes("agent"), disabledRuntimes));
+  await writeFile9(join12(input.targetDirectory, "docs/README.md"), starterDocsReadme(selectedModules.includes("system.license"), !disabledRuntimes.includes("agent"), selectedModules.includes("system.operations"), selectedModules.includes("system.storage"), selectedModules.includes("system.media-runtime")));
+  await writeFile9(join12(input.targetDirectory, "windy.environment.yaml"), starterEnvironmentProfile(selectedModules, input.environmentProfile));
   await reflectCodeQualityChoice(input.targetDirectory, includeOxc);
   await applyWindyBaseLicense(input.targetDirectory);
   await applyProjectLicense(input.targetDirectory, projectLicense, input.licenseHolder);
   await prepareCustomerDockerfiles(input.targetDirectory);
-  await writeGenerationProvenance(input.targetDirectory, templateMetadata, input.profile ?? starterProfile.key, selectedModules, includeOxc, projectLicense);
+  await writeGenerationProvenance(input.targetDirectory, templateMetadata, input.profile ?? starterProfile.key, selectedModules, includeOxc, projectLicense, input.environmentProfile);
   await writeInitialProjectModuleRegistry(input.targetDirectory, selectedModules);
   await rm4(join12(input.targetDirectory, "bun.lock"), { force: true });
   await writeManagedFilesManifest(input.targetDirectory, templateMetadata.generatorVersion);
@@ -4741,6 +5021,7 @@ async function createProject(options, dependencies = {}) {
       includeExample: options.includeExample,
       includeOxc: options.includeOxc,
       selectedModules: options.selectedModules,
+      environmentProfile: options.environmentProfile,
       projectLicense: options.projectLicense,
       licenseHolder: options.licenseHolder,
       profile: options.profile
@@ -4814,7 +5095,7 @@ function isMissing6(error) {
 import { createInterface as createInterface2 } from "readline/promises";
 import { stdin, stdout } from "process";
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/key.js
+// ../../node_modules/@inquirer/core/dist/lib/key.js
 var keybindings = ["emacs", "vim"];
 var keybindingLookup = new Set(keybindings);
 function isKeybinding(value) {
@@ -4831,7 +5112,7 @@ var isDownKey = (key, keybindings2 = []) => key.name === "down" || keybindings2.
 var isSpaceKey = (key) => key.name === "space";
 var isNumberKey = (key) => "1234567890".includes(key.name);
 var isEnterKey = (key) => key.name === "enter" || key.name === "return";
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/errors.js
+// ../../node_modules/@inquirer/core/dist/lib/errors.js
 class AbortPromptError extends Error {
   name = "AbortPromptError";
   message = "Prompt was aborted";
@@ -4857,10 +5138,10 @@ class HookError extends Error {
 class ValidationError extends Error {
   name = "ValidationError";
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-state.js
+// ../../node_modules/@inquirer/core/dist/lib/use-state.js
 import { AsyncResource as AsyncResource2 } from "async_hooks";
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/hook-engine.js
+// ../../node_modules/@inquirer/core/dist/lib/hook-engine.js
 import { AsyncLocalStorage, AsyncResource } from "async_hooks";
 var hookStorage = new AsyncLocalStorage;
 function createStore(rl) {
@@ -4876,16 +5157,14 @@ function createStore(rl) {
 }
 function withHooks(rl, cb) {
   const store = createStore(rl);
-  return hookStorage.run(store, () => {
-    function cycle(render) {
-      store.handleChange = () => {
-        store.index = 0;
-        render();
-      };
-      store.handleChange();
-    }
-    return cb(cycle);
-  });
+  function cycle(render) {
+    store.handleChange = () => {
+      store.index = 0;
+      render();
+    };
+    store.handleChange();
+  }
+  return hookStorage.run(store, () => cb(cycle));
 }
 function getStore() {
   const store = hookStorage.getStore();
@@ -4965,15 +5244,20 @@ var effectScheduler = {
   }
 };
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-state.js
+// ../../node_modules/@inquirer/core/dist/lib/use-state.js
 function isFactory(value) {
   return typeof value === "function";
 }
+function isReducer(value) {
+  return typeof value === "function";
+}
 function useState(defaultValue) {
   return withPointer((pointer) => {
     const setState = AsyncResource2.bind(function setState2(newValue) {
-      if (pointer.get() !== newValue) {
-        pointer.set(newValue);
+      const currentValue = pointer.get();
+      const nextValue = isReducer(newValue) ? newValue(currentValue) : newValue;
+      if (!Object.is(currentValue, nextValue)) {
+        pointer.set(nextValue);
         handleChange();
       }
     });
@@ -4986,7 +5270,7 @@ function useState(defaultValue) {
   });
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-effect.js
+// ../../node_modules/@inquirer/core/dist/lib/use-effect.js
 function useEffect(cb, depArray) {
   withPointer((pointer) => {
     const oldDeps = pointer.get();
@@ -4998,10 +5282,10 @@ function useEffect(cb, depArray) {
   });
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/theme.js
+// ../../node_modules/@inquirer/core/dist/lib/theme.js
 import { styleText } from "util";
 
-// ../../node_modules/.bun/@inquirer+figures@2.0.7/node_modules/@inquirer/figures/dist/index.js
+// ../../node_modules/@inquirer/figures/dist/index.js
 import process2 from "process";
 function isUnicodeSupported() {
   if (!process2.platform.startsWith("win")) {
@@ -5290,7 +5574,7 @@ var figures = shouldUseMain ? mainSymbols : fallbackSymbols;
 var dist_default = figures;
 var replacements = Object.entries(specialMainSymbols);
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/theme.js
+// ../../node_modules/@inquirer/core/dist/lib/theme.js
 var defaultTheme = {
   prefix: {
     idle: styleText("blue", "?"),
@@ -5318,7 +5602,7 @@ function getDefaultTheme() {
   };
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/make-theme.js
+// ../../node_modules/@inquirer/core/dist/lib/make-theme.js
 function isPlainObject(value) {
   if (typeof value !== "object" || value === null)
     return false;
@@ -5346,7 +5630,7 @@ function makeTheme(...themes) {
   return deepMerge(...themesToMerge);
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-prefix.js
+// ../../node_modules/@inquirer/core/dist/lib/use-prefix.js
 function usePrefix({ status = "idle", theme }) {
   const [showLoader, setShowLoader] = useState(false);
   const [tick, setTick] = useState(0);
@@ -5376,11 +5660,11 @@ function usePrefix({ status = "idle", theme }) {
   const iconName = status === "loading" ? "idle" : status;
   return typeof prefix === "string" ? prefix : prefix[iconName] ?? prefix["idle"];
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-memo.js
+// ../../node_modules/@inquirer/core/dist/lib/use-memo.js
 function useMemo(fn, dependencies) {
   return withPointer((pointer) => {
     const prev = pointer.get();
-    if (!prev || prev.dependencies.length !== dependencies.length || prev.dependencies.some((dep, i) => dep !== dependencies[i])) {
+    if (!pointer.initialized || prev.dependencies.length !== dependencies.length || prev.dependencies.some((dep, i) => dep !== dependencies[i])) {
       const value = fn();
       pointer.set({ value, dependencies });
       return value;
@@ -5388,12 +5672,12 @@ function useMemo(fn, dependencies) {
     return prev.value;
   });
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-ref.js
+// ../../node_modules/@inquirer/core/dist/lib/use-ref.js
 function useRef(val) {
   return useState({ current: val })[0];
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-keypress.js
+// ../../node_modules/@inquirer/core/dist/lib/use-keypress.js
 function useKeypress(userHandler) {
   const signal = useRef(userHandler);
   signal.current = userHandler;
@@ -5411,10 +5695,10 @@ function useKeypress(userHandler) {
     };
   }, []);
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/utils.js
+// ../../node_modules/@inquirer/core/dist/lib/utils.js
 var import_cli_width = __toESM(require_cli_width(), 1);
 
-// ../../node_modules/.bun/fast-string-truncated-width@3.0.3/node_modules/fast-string-truncated-width/dist/utils.js
+// ../../node_modules/fast-string-truncated-width/dist/utils.js
 var getCodePointsLength = (() => {
   const SURROGATE_PAIR_RE = /[\uD800-\uDBFF][\uDC00-\uDFFF]/g;
   return (input) => {
@@ -5433,7 +5717,7 @@ var isWideNotCJKTNotEmoji = (x) => {
   return x === 8987 || x === 9001 || x >= 12272 && x <= 12287 || x >= 12289 && x <= 12350 || x >= 12441 && x <= 12543 || x >= 12549 && x <= 12591 || x >= 12593 && x <= 12686 || x >= 12688 && x <= 12771 || x >= 12783 && x <= 12830 || x >= 12832 && x <= 12871 || x >= 12880 && x <= 19903 || x >= 65040 && x <= 65049 || x >= 65072 && x <= 65106 || x >= 65108 && x <= 65126 || x >= 65128 && x <= 65131 || x >= 127488 && x <= 127490 || x >= 127504 && x <= 127547 || x >= 127552 && x <= 127560 || x >= 131072 && x <= 196605 || x >= 196608 && x <= 262141;
 };
 
-// ../../node_modules/.bun/fast-string-truncated-width@3.0.3/node_modules/fast-string-truncated-width/dist/index.js
+// ../../node_modules/fast-string-truncated-width/dist/index.js
 var ANSI_RE = /[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]|\u001b\]8;[^;]*;.*?(?:\u0007|\u001b\u005c)/y;
 var CONTROL_RE = /[\x00-\x08\x0A-\x1F\x7F-\x9F]{1,1000}/y;
 var CJKT_WIDE_RE = /(?:(?![\uFF61-\uFF9F\uFF00-\uFFEF])[\p{Script=Han}\p{Script=Hiragana}\p{Script=Katakana}\p{Script=Hangul}\p{Script=Tangut}]){1,1000}/yu;
@@ -5532,7 +5816,7 @@ var getStringTruncatedWidth = (input, truncationOptions = {}, widthOptions = {})
 };
 var dist_default2 = getStringTruncatedWidth;
 
-// ../../node_modules/.bun/fast-string-width@3.0.2/node_modules/fast-string-width/dist/index.js
+// ../../node_modules/fast-string-width/dist/index.js
 var NO_TRUNCATION2 = {
   limit: Infinity,
   ellipsis: "",
@@ -5543,7 +5827,7 @@ var fastStringWidth = (input, options = {}) => {
 };
 var dist_default3 = fastStringWidth;
 
-// ../../node_modules/.bun/fast-wrap-ansi@0.2.2/node_modules/fast-wrap-ansi/lib/main.js
+// ../../node_modules/fast-wrap-ansi/lib/main.js
 var ESC = "\x1B";
 var CSI = "\x9B";
 var END_CODE = 39;
@@ -5755,7 +6039,7 @@ function wrapAnsi(string, columns, options) {
 `);
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/utils.js
+// ../../node_modules/@inquirer/core/dist/lib/utils.js
 function breakLines(content, width) {
   return content.split(`
 `).flatMap((line) => wrapAnsi(line, width, { trim: false, wordWrap: false }).split(`
@@ -5766,7 +6050,7 @@ function readlineWidth() {
   return import_cli_width.default({ defaultWidth: 80, output: readline().output });
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/pagination/use-pagination.js
+// ../../node_modules/@inquirer/core/dist/lib/pagination/use-pagination.js
 function usePointerPosition({ active, renderedItems, pageSize, loop }) {
   const state = useRef({
     lastPointer: active,
@@ -5832,12 +6116,25 @@ function usePagination({ items, active, renderItem, pageSize, loop = true }) {
   return pageBuffer.filter((line) => typeof line === "string").join(`
 `);
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/create-prompt.js
-var import_mute_stream = __toESM(require_lib(), 1);
+// ../../node_modules/@inquirer/core/dist/lib/create-prompt.js
 import * as readline2 from "readline";
 import { AsyncResource as AsyncResource3 } from "async_hooks";
 
-// ../../node_modules/.bun/signal-exit@4.1.0/node_modules/signal-exit/dist/mjs/signals.js
+// ../../node_modules/@inquirer/type/dist/utils.js
+function withResolver() {
+  let resolve6;
+  let reject;
+  const promise = new Promise((res, rej) => {
+    resolve6 = res;
+    reject = rej;
+  });
+  return { promise, resolve: resolve6, reject };
+}
+
+// ../../node_modules/@inquirer/core/dist/lib/create-prompt.js
+var import_mute_stream = __toESM(require_lib(), 1);
+
+// ../../node_modules/signal-exit/dist/mjs/signals.js
 var signals = [];
 signals.push("SIGHUP", "SIGINT", "SIGTERM");
 if (process.platform !== "win32") {
@@ -5847,7 +6144,7 @@ if (process.platform === "linux") {
   signals.push("SIGIO", "SIGPOLL", "SIGPWR", "SIGSTKFLT");
 }
 
-// ../../node_modules/.bun/signal-exit@4.1.0/node_modules/signal-exit/dist/mjs/index.js
+// ../../node_modules/signal-exit/dist/mjs/index.js
 var processOk = (process3) => !!process3 && typeof process3 === "object" && typeof process3.removeListener === "function" && typeof process3.emit === "function" && typeof process3.reallyExit === "function" && typeof process3.listeners === "function" && typeof process3.kill === "function" && typeof process3.pid === "number" && typeof process3.on === "function";
 var kExitEmitter = Symbol.for("signal-exit emitter");
 var global = globalThis;
@@ -6045,10 +6342,10 @@ var {
   unload
 } = signalExitWrap(processOk(process3) ? new SignalExit(process3) : new SignalExitFallback);
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/screen-manager.js
+// ../../node_modules/@inquirer/core/dist/lib/screen-manager.js
 import { stripVTControlCharacters } from "util";
 
-// ../../node_modules/.bun/@inquirer+ansi@2.0.7/node_modules/@inquirer/ansi/dist/index.js
+// ../../node_modules/@inquirer/ansi/dist/index.js
 var ESC2 = "\x1B[";
 var cursorLeft = ESC2 + "G";
 var cursorHide = ESC2 + "?25l";
@@ -6064,7 +6361,7 @@ var cursorTo = (x, y) => {
 var eraseLine = ESC2 + "2K";
 var eraseLines = (lines) => lines > 0 ? (eraseLine + cursorUp(1)).repeat(lines - 1) + eraseLine + cursorLeft : "";
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/screen-manager.js
+// ../../node_modules/@inquirer/core/dist/lib/screen-manager.js
 var height = (content) => content.split(`
 `).length;
 var lastLine = (content) => content.split(`
@@ -6130,22 +6427,18 @@ class ScreenManager {
   }
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/promise-polyfill.js
-class PromisePolyfill extends Promise {
-  static withResolver() {
-    let resolve6;
-    let reject;
-    const promise = new Promise((res, rej) => {
-      resolve6 = res;
-      reject = rej;
-    });
-    return { promise, resolve: resolve6, reject };
-  }
-}
-
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/create-prompt.js
+// ../../node_modules/@inquirer/core/dist/lib/create-prompt.js
 import path from "path";
 var nativeSetImmediate = globalThis.setImmediate;
+var nativeClearImmediate = globalThis.clearImmediate;
+function listenTo(target, event, listener) {
+  if ("on" in target) {
+    target.on(event, listener);
+    return () => target.removeListener(event, listener);
+  }
+  target.addEventListener(event, listener);
+  return () => target.removeEventListener(event, listener);
+}
 function getCallSites() {
   const savedPrepareStackTrace = Error.prepareStackTrace;
   let result = [];
@@ -6176,38 +6469,46 @@ function createPrompt(view) {
     });
     output.mute();
     const screen = new ScreenManager(rl);
-    const { promise, resolve: resolve6, reject } = PromisePolyfill.withResolver();
-    const cancel = () => reject(new CancelPromptError);
-    if (signal) {
-      const abort = () => reject(new AbortPromptError({ cause: signal.reason }));
-      if (signal.aborted) {
-        abort();
-        return Object.assign(promise, { cancel });
-      }
-      signal.addEventListener("abort", abort);
-      cleanups.add(() => signal.removeEventListener("abort", abort));
-    }
-    cleanups.add(onExit((code, signal2) => {
-      reject(new ExitPromptError(`User force closed the prompt with ${code} ${signal2}`));
-    }));
-    const sigint = () => reject(new ExitPromptError(`User force closed the prompt with SIGINT`));
-    rl.on("SIGINT", sigint);
-    cleanups.add(() => rl.removeListener("SIGINT", sigint));
+    const { promise, resolve: resolve6, reject } = withResolver();
     return withHooks(rl, (cycle) => {
-      const hooksCleanup = AsyncResource3.bind(() => effectScheduler.clearAll());
-      rl.on("close", hooksCleanup);
-      cleanups.add(() => rl.removeListener("close", hooksCleanup));
+      const clearEffects = AsyncResource3.bind(() => effectScheduler.clearAll());
+      const settlePrompt = (settle) => {
+        try {
+          clearEffects();
+          settle();
+        } catch (error) {
+          reject(error);
+        }
+      };
+      const resolvePrompt = (value) => settlePrompt(() => resolve6(value));
+      const rejectPrompt = (error) => settlePrompt(() => reject(error));
+      const promptPromise = Object.assign(promise.finally(() => {
+        cleanups.forEach((cleanup) => cleanup());
+        screen.done({ clearContent: Boolean(context.clearPromptOnDone) });
+        output.end();
+      }).then(() => promise), { cancel: () => rejectPrompt(new CancelPromptError) });
+      if (signal) {
+        const abort = () => rejectPrompt(new AbortPromptError({ cause: signal.reason }));
+        if (signal.aborted) {
+          abort();
+          return promptPromise;
+        }
+        cleanups.add(listenTo(signal, "abort", abort));
+      }
+      cleanups.add(onExit((code, signal2) => {
+        rejectPrompt(new ExitPromptError(`User force closed the prompt with ${code} ${signal2}`));
+      }));
+      cleanups.add(listenTo(rl, "SIGINT", () => rejectPrompt(new ExitPromptError(`User force closed the prompt with SIGINT`))));
+      cleanups.add(listenTo(rl, "close", clearEffects));
       const startCycle = () => {
-        const checkCursorPos = () => screen.checkCursorPos();
-        rl.input.on("keypress", checkCursorPos);
-        cleanups.add(() => rl.input.removeListener("keypress", checkCursorPos));
+        cleanups.add(listenTo(rl.input, "keypress", () => screen.checkCursorPos()));
         let pendingDone = null;
         cycle(() => {
           let effectsSettled = false;
           try {
             const nextView = view(config, (value) => {
               if (effectsSettled) {
-                resolve6(value);
+                resolvePrompt(value);
               } else {
                 pendingDone = { value };
               }
@@ -6224,37 +6525,28 @@ function createPrompt(view) {
             screen.render(content, bottomContent);
             effectScheduler.run();
           } catch (error) {
-            reject(error);
+            rejectPrompt(error);
           }
           effectsSettled = true;
           if (pendingDone !== null) {
             const { value } = pendingDone;
             pendingDone = null;
-            resolve6(value);
+            resolvePrompt(value);
           }
         });
       };
-      if ("readableFlowing" in input) {
-        nativeSetImmediate(startCycle);
+      if ("readableFlowing" in input && input.isTTY) {
+        const immediate = nativeSetImmediate(startCycle);
+        cleanups.add(() => nativeClearImmediate(immediate));
       } else {
         startCycle();
       }
-      return Object.assign(promise.then((answer) => {
-        effectScheduler.clearAll();
-        return answer;
-      }, (error) => {
-        effectScheduler.clearAll();
-        throw error;
-      }).finally(() => {
-        cleanups.forEach((cleanup) => cleanup());
-        screen.done({ clearContent: Boolean(context.clearPromptOnDone) });
-        output.end();
-      }).then(() => promise), { cancel });
+      return promptPromise;
     });
   };
   return prompt;
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/Separator.js
+// ../../node_modules/@inquirer/core/dist/lib/Separator.js
 import { styleText as styleText2 } from "util";
 class Separator {
   separator = styleText2("dim", Array.from({ length: 15 }).join(dist_default.line));
@@ -6268,7 +6560,7 @@ class Separator {
     return Boolean(choice && typeof choice === "object" && "type" in choice && choice.type === "separator");
   }
 }
-// ../../node_modules/.bun/@inquirer+checkbox@5.2.1+7cb241fc07b679d9/node_modules/@inquirer/checkbox/dist/index.js
+// ../../node_modules/@inquirer/checkbox/dist/index.js
 import { styleText as styleText3 } from "util";
 var checkboxTheme = {
   icon: {
@@ -6352,9 +6644,13 @@ var dist_default4 = createPrompt((config, done) => {
   const [active, setActive] = useState(bounds.first);
   const [errorMsg, setError] = useState();
   useKeypress(async (key) => {
+    if (status !== "idle")
+      return;
     if (isEnterKey(key)) {
+      setStatus("loading");
       const selection = items.filter(isChecked);
       const isValid = await validate([...selection]);
+      setStatus("idle");
       if (required && !selection.length) {
         setError("At least one choice must be selected");
       } else if (isValid === true) {
@@ -8715,7 +9011,8 @@ var recipes = [
   { id: "starter-0.8.1-to-0.8.2", from: "0.8.1", to: "0.8.2" },
   { id: "starter-0.8.2-to-0.8.3", from: "0.8.2", to: "0.8.3" },
   { id: "starter-0.8.3-to-0.9.0", from: "0.8.3", to: "0.9.0" },
-  { id: "starter-0.9.0-to-0.9.1", from: "0.9.0", to: "0.9.1" }
+  { id: "starter-0.9.0-to-0.9.1", from: "0.9.0", to: "0.9.1" },
+  { id: "starter-0.9.1-to-0.10.0", from: "0.9.1", to: "0.10.0" }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
   if (compareVersions2(sourceVersion, minimumSupportedUpdateVersion) < 0) {
@@ -8762,6 +9059,33 @@ function parseVersion2(version) {
 // src/update/updater.ts
 import { rm as rm8 } from "fs/promises";
 
+// src/update/module-selection.ts
+function resolveUpdateTargetModules(sourceModules, explicitTarget) {
+  return explicitTarget ? [...explicitTarget] : resolveModuleSelection({
+    requested: sourceModules,
+    includeRecommended: false
+  });
+}
+function environmentProfileForUpdate(profile, selectedModules) {
+  if (!profile)
+    return;
+  const runtimes = profile.build.runtimes ? { ...profile.build.runtimes } : undefined;
+  const runtime = profile.runtime ? { ...profile.runtime } : undefined;
+  for (const kind of AI_RUNTIME_KINDS) {
+    if (selectedModules.includes(runtimeDistributionModule(kind)))
+      continue;
+    if (runtimes)
+      delete runtimes[kind];
+    if (runtime)
+      delete runtime[kind];
+  }
+  return {
+    ...profile,
+    build: { modules: [...selectedModules], ...runtimes ? { runtimes } : {} },
+    ...runtime ? { runtime } : {}
+  };
+}
+
 // src/update/artifacts.ts
 import { mkdtemp, readFile as readFile15 } from "fs/promises";
 import { tmpdir } from "os";
@@ -8972,7 +9296,6 @@ async function generatePublicArtifactProject(temporaryRoot, label, projectName,
     "--yes",
     "--skip-install",
     "--no-git",
-    "--no-optional-modules",
     "--license",
     provenance.legalLicense
   ];
@@ -8981,9 +9304,16 @@ async function generatePublicArtifactProject(temporaryRoot, label, projectName,
   if (provenance.legalLicense === "MIT") {
     args.push("--license-holder", "Windy project owner");
   }
-  for (const { name } of provenance.modules) {
-    if (!requiredModuleNames.includes(name)) {
-      args.push("--module", name);
+  if (provenance.environmentProfile) {
+    const path2 = join18(temporaryRoot, `${label}.environment.json`);
+    await writeFile10(path2, JSON.stringify(provenance.environmentProfile));
+    args.push("--environment-profile", path2);
+  } else {
+    args.push("--no-optional-modules");
+    for (const { name } of provenance.modules) {
+      if (!requiredModuleNames.includes(name)) {
+        args.push("--module", name);
+      }
     }
   }
   await assertProcess("bun", args, parent);
@@ -9094,12 +9424,14 @@ class PublishedArtifactProvider {
       throw new Error("Project Lock \u4E0E\u6765\u6E90 registry artifact \u7684 template commit \u4E0D\u4E00\u81F4");
     }
     await generatePublicArtifactProject(temporaryRoot, "base", projectName, baseArtifact.root, provenance);
+    const selectedModules = targetModules ?? provenance.modules.map(({ name }) => name);
     await generateProject({
       sourceRoot: await resolveTemplateRoot(),
       targetDirectory,
       projectName,
-      selectedModules: targetModules ?? provenance.modules.map(({ name }) => name),
-      includeExample: (targetModules ?? provenance.modules.map(({ name }) => name)).includes("work-order"),
+      selectedModules,
+      environmentProfile: environmentProfileForUpdate(provenance.environmentProfile, selectedModules),
+      includeExample: selectedModules.includes("work-order"),
       includeOxc: provenance.choices.includeOxc,
       projectLicense: provenance.legalLicense,
       licenseHolder: provenance.legalLicense === "MIT" ? "Windy project owner" : undefined,
@@ -9120,660 +9452,262 @@ async function readProjectName2(projectDirectory) {
   return source.name || basename10(projectDirectory);
 }
 
-// src/update/planner.ts
-import { readFile as readFile23 } from "fs/promises";
-import { dirname as dirname9, join as join29 } from "path";
+// src/update/admin-settings-yaml-plan.ts
+import { join as join25 } from "path";
 
-// src/update/docker-copy-update-plan.ts
-async function deriveDockerfilePlans(files, snapshots, paths, targetWorkspaceManifests) {
-  const rootPackage = virtualPathContent("package.json", files, snapshots, targetWorkspaceManifests);
-  if (!rootPackage)
-    return;
-  const rootManifest = parsePackage(rootPackage, "package.json");
-  const workspacePatterns = rootManifest.workspaces ?? [];
-  const packages = [];
-  for (const path2 of [
-    ...new Set([...paths, ...targetWorkspaceManifests.keys()])
-  ].filter((path3) => path3.endsWith("package.json"))) {
-    const directory = path2 === "package.json" ? "." : path2.slice(0, -13);
-    if (directory === ".")
-      continue;
-    if (!workspacePatterns.some((pattern) => matchesWorkspace(pattern, directory))) {
-      continue;
-    }
-    const content = virtualPathContent(path2, files, snapshots, targetWorkspaceManifests);
-    if (!content)
-      continue;
-    const manifest = parsePackage(content, path2);
-    packages.push({
-      name: manifest.name,
-      directory,
-      dependencies: [
-        ...Object.keys(manifest.dependencies ?? {}),
-        ...Object.keys(manifest.devDependencies ?? {})
-      ],
-      workspaceDependencies: Object.entries({
-        ...manifest.dependencies,
-        ...manifest.devDependencies
-      }).filter(([, range]) => range.startsWith("workspace:")).map(([name]) => name)
-    });
+// src/update/planner-snapshots.ts
+import { readFile as readFile17, stat as stat2 } from "fs/promises";
+import { join as join24 } from "path";
+
+// src/update/recipe-admin-api.ts
+var apiRecipes = [
+  {
+    path: "apps/web/src/services/platform-settings-api.ts",
+    beforeImport: 'import { apiRequest } from "./http";',
+    afterImport: 'import { apiRequest, apiResponse } from "./http";',
+    addedImport: "apiResponse",
+    marker: 'const WATERMARK_YAML_PATH = "/system/settings/watermark/yaml";',
+    symbols: [
+      "WATERMARK_YAML_PATH",
+      "WatermarkYamlPreview",
+      "exportWatermarkYaml",
+      "previewWatermarkYaml",
+      "importWatermarkYaml"
+    ]
+  },
+  {
+    path: "apps/web/src/services/diagnostics-api.ts",
+    beforeImport: 'import type { DiagnosticRecord } from "@southwind-ai/shared";',
+    afterImport: 'import type { DiagnosticRecord, PageResult } from "@southwind-ai/shared";',
+    addedImport: "PageResult",
+    marker: "export function listDiagnostics(",
+    symbols: ["listDiagnostics"]
   }
-  packages.sort((left, right) => left.directory.localeCompare(right.directory));
-  for (const target of dockerfileCopyTargets) {
-    const dockerPlan = files.find(({ path: path2 }) => path2 === target.dockerfilePath);
-    if (!dockerPlan || dockerPlan.conflict)
-      continue;
-    const dockerSource = virtualContent(dockerPlan, snapshots);
-    if (!dockerSource)
-      continue;
-    const source = new TextDecoder().decode(dockerSource);
-    if (!hasDockerfileCopyAnchors(source, target)) {
-      dockerPlan.conflict = "Dockerfile \u7F3A\u5C11 0.6.6 \u57FA\u7EBF\u7684 COPY \u951A\u70B9\uFF0C\u5DF2\u505C\u6B62\u81EA\u52A8\u8FC1\u79FB\u65E7\u683C\u5F0F";
-      continue;
-    }
-    let next;
-    try {
-      next = syncDockerfileSource(source, target, packages);
-    } catch (error) {
-      dockerPlan.conflict = error instanceof Error ? error.message : "Docker COPY \u951A\u70B9\u65E0\u6548";
-      continue;
+];
+var adminApiRecipePaths = apiRecipes.map(({ path: path2 }) => path2);
+function isAdminApiRecipePath(path2) {
+  return adminApiRecipePaths.includes(path2);
+}
+function addAdminApiExports(path2, source, target) {
+  const recipe = apiRecipes.find((item) => item.path === path2);
+  if (!recipe || !target)
+    return { error: "Admin API recipe \u76EE\u6807\u7F3A\u5931" };
+  if (occurrences(target, recipe.marker) !== 1 || occurrences(target, recipe.afterImport) !== 1) {
+    return { error: "Admin API recipe \u76EE\u6807\u951A\u70B9\u4E0D\u552F\u4E00" };
+  }
+  const block = target.slice(target.indexOf(recipe.marker)).trimEnd();
+  if (recipe.symbols.some((symbol) => !block.includes(symbol))) {
+    return { error: "Admin API recipe \u76EE\u6807\u5BFC\u51FA\u4E0D\u5B8C\u6574" };
+  }
+  if (recipe.symbols.some((symbol) => source.includes(symbol))) {
+    const blockIndex = source.indexOf(block);
+    const remainder = blockIndex < 0 ? source : source.slice(0, blockIndex) + source.slice(blockIndex + block.length);
+    if (blockIndex < 0 || occurrences(source, block) !== 1 || occurrences(source, recipe.afterImport) !== 1 || occurrences(source, recipe.beforeImport) !== 0 || recipe.symbols.some((symbol) => remainder.includes(symbol))) {
+      return { error: "Admin API recipe \u5DF2\u6709\u5BFC\u51FA\u4E0D\u5B8C\u6574\u3001\u91CD\u590D\u6216\u5DF2\u88AB\u4FEE\u6539" };
     }
-    if (next === source)
-      continue;
-    dockerPlan.action = "update";
-    dockerPlan.reason = "\u6309\u4E8B\u52A1\u5B89\u5168 workspace \u89C6\u56FE\u540C\u6B65 Docker COPY \u6E05\u5355";
-    dockerPlan.content = new TextEncoder().encode(next);
+    return { content: source };
   }
-}
-function virtualPathContent(path2, files, snapshots, targetWorkspaceManifests) {
-  const plan = files.find((item) => item.path === path2);
-  return plan ? virtualContent(plan, snapshots) : snapshots.get(path2) ?? targetWorkspaceManifests.get(path2);
-}
-function virtualContent(plan, snapshots) {
-  if (plan.action === "delete")
-    return;
-  if (plan.action === "create" || plan.action === "update")
-    return plan.content;
-  return snapshots.get(plan.path);
-}
-function parsePackage(content, path2) {
-  try {
-    return JSON.parse(new TextDecoder().decode(content));
-  } catch (error) {
-    throw new Error(`\u65E0\u6CD5\u89E3\u6790 Docker workspace \u8F93\u5165\uFF1A${path2}`, {
-      cause: error
-    });
+  if (occurrences(source, recipe.beforeImport) !== 1 || occurrences(source, recipe.afterImport) !== 0 || new RegExp(`\\b${recipe.addedImport}\\b`).test(source)) {
+    return { error: "Admin API recipe \u539F\u59CB import \u951A\u70B9\u4E0D\u552F\u4E00" };
   }
+  return {
+    content: source.replace(recipe.beforeImport, recipe.afterImport) + `${source.endsWith(`
+`) ? `
+` : `
+
+`}${block}
+`
+  };
 }
-function matchesWorkspace(pattern, directory) {
-  return pattern.endsWith("/*") && directory.startsWith(pattern.slice(0, -1));
+function occurrences(source, value) {
+  return source.split(value).length - 1;
 }
 
-// src/update/migration-reconciler.ts
-import { readFile as readFile19 } from "fs/promises";
+// src/update/planner-file.ts
+import { readFile as readFile16 } from "fs/promises";
 import { join as join23 } from "path";
 
-// src/update/migration-adoption.ts
-import { readFile as readFile18 } from "fs/promises";
-import { join as join22 } from "path";
-
-// src/update/migration-project-file.ts
-import { readFile as readFile16 } from "fs/promises";
-import { join as join21 } from "path";
-async function readProjectJson(input, path2) {
-  const content = await readProjectFile(input, path2);
-  if (!content) {
-    const error = new Error(`\u5F53\u524D\u9879\u76EE\u6587\u4EF6\u7F3A\u5931\uFF1A${path2}`);
-    error.code = "ENOENT";
-    throw error;
-  }
-  return JSON.parse(new TextDecoder().decode(content));
+// src/update/planner-file-support.ts
+function readyPlannedFile(path2, ownership, action, reason, expectedProjectContent, content) {
+  return {
+    path: path2,
+    ownership,
+    action,
+    reason,
+    expectedProjectContent,
+    content
+  };
 }
-async function readProjectFile(input, path2) {
-  if (input.projectSnapshots?.has(path2)) {
-    return input.projectSnapshots.get(path2);
-  }
-  let content;
-  try {
-    content = await readFile16(join21(input.projectDirectory, path2));
-  } catch (error) {
-    if (!isMissingFileError(error))
-      throw error;
-  }
-  if (input.projectSnapshots) {
-    input.projectSnapshots.set(path2, content);
-  }
-  return content;
+function expectationForSnapshot(content) {
+  return content ? { kind: "hash", value: hashContent(content) } : { kind: "missing" };
 }
-function isMissingFileError(error) {
-  return error instanceof Error && "code" in error && error.code === "ENOENT";
+function conflict(path2, ownership, reason, expectedProjectContent) {
+  return {
+    path: path2,
+    ownership,
+    action: "preserve",
+    reason: "\u5BA2\u6237\u5DF2\u4FEE\u6539",
+    expectedProjectContent,
+    conflict: reason
+  };
 }
+// src/update/merge.ts
+import { mkdtemp as mkdtemp2, rm as rm6, writeFile as writeFile12 } from "fs/promises";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join21 } from "path";
 
-// src/update/migration-history.ts
-import { readFile as readFile17 } from "fs/promises";
-var drizzleRoot = "packages/database/drizzle";
-var journalPath = `${drizzleRoot}/meta/_journal.json`;
-var migrationPattern = /^(\d{4})_(.+)$/;
-function snapshotPath(tag) {
-  const match = migrationPattern.exec(tag);
-  if (!match) {
-    throw new Error(`${journalPath}\uFF1Amigration tag \u683C\u5F0F\u65E0\u6548\uFF1A${tag}`);
+// src/update/merge-convergent-additions.ts
+async function reconcileConvergentAdditions(input) {
+  const [oursDiff, theirsDiff] = await Promise.all([
+    diff(input.root, input.basePath, input.oursPath),
+    diff(input.root, input.basePath, input.theirsPath)
+  ]);
+  if (oursDiff === undefined || theirsDiff === undefined)
+    return;
+  const oursAdditions = pureAdditions(oursDiff);
+  const theirsAdditions = pureAdditions(theirsDiff);
+  const oursByContent = new Map;
+  for (const addition of oursAdditions) {
+    const key = addition.lines.join(`
+`);
+    oursByContent.set(key, [...oursByContent.get(key) ?? [], addition]);
   }
-  return `${drizzleRoot}/meta/${match[1]}_snapshot.json`;
-}
-function validateUniqueNames(journal, label, conflicts) {
-  const seen = new Set;
-  for (const { tag } of journal.entries) {
-    const name = stableName(tag);
-    if (seen.has(name)) {
-      conflicts.push(`${journalPath}\uFF1A${label}\u5B58\u5728\u91CD\u590D migration \u540D\u79F0 ${name}`);
+  const decode = (content) => new TextDecoder().decode(content);
+  const baseLines = decode(input.base).split(`
+`);
+  const oursLines = decode(input.ours).split(`
+`);
+  const theirsLines = decode(input.theirs).split(`
+`);
+  const mergedLines = input.merged.split(`
+`);
+  const convergent = theirsAdditions.flatMap((addition) => {
+    if (!isSubstantial(addition.lines) || !isNamedClassMethod(addition.lines)) {
+      return [];
     }
-    seen.add(name);
+    const key = addition.lines.join(`
+`);
+    const matchingOurs = oursByContent.get(key);
+    if (matchingOurs?.length !== 1)
+      return [];
+    if (theirsAdditions.filter((candidate2) => candidate2.lines.join(`
+`) === key).length !== 1) {
+      return [];
+    }
+    const oursContainer = enclosingClass(oursLines, matchingOurs[0]);
+    const theirsContainer = enclosingClass(theirsLines, addition);
+    if (!oursContainer || oursContainer !== theirsContainer)
+      return [];
+    return countSequence(baseLines, addition.lines) === 0 && countSequence(oursLines, addition.lines) === 1 && countSequence(theirsLines, addition.lines) === 1 && countSequence(mergedLines, addition.lines) > 1 ? [{ ours: matchingOurs[0], theirs: addition }] : [];
+  });
+  if (convergent.length !== 1)
+    return;
+  const candidate = convergent[0];
+  if (!candidate)
+    return;
+  const oursWithout = withoutAddition(oursLines, candidate.ours);
+  const theirsWithout = withoutAddition(theirsLines, candidate.theirs);
+  if (!oursWithout || !theirsWithout || !sameLines(oursWithout, theirsWithout)) {
+    return;
   }
+  return input.ours;
 }
-function stableName(tag) {
-  return migrationPattern.exec(tag)?.[2] ?? tag;
+async function diff(root, basePath, branchPath) {
+  const result = await captureProcess("git", ["diff", "--no-index", "--unified=0", "--no-color", basePath, branchPath], root);
+  return result.code === 0 || result.code === 1 ? result.stdout : undefined;
 }
-function highestPrefix(journal) {
-  return Math.max(-1, ...journal.entries.map(({ tag }) => Number(migrationPattern.exec(tag)?.[1] ?? -1)));
+function pureAdditions(diff2) {
+  const lines = diff2.split(`
+`);
+  const additions = [];
+  for (let index = 0;index < lines.length; index += 1) {
+    const match = /^@@ -\d+(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/.exec(lines[index] ?? "");
+    if (!match)
+      continue;
+    const oldCount = match[1] === undefined ? 1 : Number(match[1]);
+    const start = Number(match[2]);
+    const newCount = match[3] === undefined ? 1 : Number(match[3]);
+    if (oldCount !== 0 || newCount === 0)
+      continue;
+    const added = [];
+    for (let cursor = index + 1;cursor < lines.length; cursor += 1) {
+      const line = lines[cursor] ?? "";
+      if (line.startsWith("@@ "))
+        break;
+      if (line.startsWith("+"))
+        added.push(line.slice(1));
+    }
+    if (added.length === newCount)
+      additions.push({ start, lines: added });
+  }
+  return additions;
 }
-function highestIndex(journal) {
-  return Math.max(-1, ...journal.entries.map(({ idx }) => idx));
+function isSubstantial(lines) {
+  return lines.filter((line) => line.trim()).length >= 3 && lines.join(`
+`).length >= 32;
 }
-function isDrizzleHistoryPath(path2) {
-  return path2 === journalPath || isMigrationArtifact(path2);
+function isNamedClassMethod(lines) {
+  const first = lines.find((line) => line.trim())?.trim() ?? "";
+  const last = [...lines].reverse().find((line) => line.trim())?.trim() ?? "";
+  return /^(?:(?:public|protected|private|static|abstract|override|async|declare|get|set)\s+)*(?:\*\s*)?[A-Za-z_$][\w$]*\s*(?:<[^>{}]*>)?\s*\(/.test(first) && lines.some((line) => line.includes("{")) && /^}\s*;?$/.test(last);
 }
-function isMigrationArtifact(path2) {
-  return isSqlMigration(path2) || new RegExp(`^${drizzleRoot}/meta/\\d{4}_snapshot\\.json$`).test(path2);
+function enclosingClass(lines, addition) {
+  const memberIndent = leadingWhitespace(addition.lines.find((line) => line.trim()) ?? "");
+  for (let index = addition.start - 2;index >= 0; index -= 1) {
+    const line = lines[index] ?? "";
+    if (!line.trim() || leadingWhitespace(line) >= memberIndent)
+      continue;
+    const match = /^(\s*)(?:(?:export|default|abstract|declare)\s+)*class\s+([A-Za-z_$][\w$]*)\b/.exec(line);
+    if (!match)
+      return;
+    const name = match[2] ?? "";
+    const ordinal = lines.slice(0, index + 1).filter((candidate) => new RegExp(`^\\s*(?:(?:export|default|abstract|declare)\\s+)*class\\s+${escapeRegExp2(name)}\\b`).test(candidate)).length;
+    return `${name}#${ordinal}`;
+  }
 }
-function isSqlMigration(path2) {
-  return new RegExp(`^${drizzleRoot}/\\d{4}_.+\\.sql$`).test(path2);
+function leadingWhitespace(line) {
+  return /^\s*/.exec(line)?.[0].length ?? 0;
 }
-function managedEntry(path2, content) {
-  return { path: path2, ownership: "windy-managed", hash: hashContent(content) };
+function escapeRegExp2(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function deduplicate(files) {
-  return [...new Map(files.map((entry) => [entry.path, entry])).values()];
+function countSequence(lines, sequence) {
+  let count = 0;
+  for (let index = 0;index <= lines.length - sequence.length; index += 1) {
+    if (sameLines(lines.slice(index, index + sequence.length), sequence)) {
+      count += 1;
+    }
+  }
+  return count;
 }
-function encodeJson(value) {
-  return new TextEncoder().encode(`${JSON.stringify(value, null, 2)}
-`);
+function withoutAddition(lines, addition) {
+  const index = addition.start - 1;
+  if (!sameLines(lines.slice(index, index + addition.lines.length), addition.lines)) {
+    return;
+  }
+  return [
+    ...lines.slice(0, index),
+    ...lines.slice(index + addition.lines.length)
+  ];
 }
-async function readJson(path2) {
-  return JSON.parse(await readFile17(path2, "utf8"));
-}
-
-// src/update/snapshot-delta.ts
-function applySnapshotDelta(before, after, current, path2, conflicts, conflictPath) {
-  if (deepEqual(before, after))
-    return structuredClone(current);
-  if (!isRecord(before) || !isRecord(after) || !isRecord(current)) {
-    if (deepEqual(current, before) || deepEqual(current, after)) {
-      return structuredClone(after);
-    }
-    conflicts.push(`${conflictPath}\uFF1A\u5E73\u53F0\u4E0E\u4E1A\u52A1\u540C\u65F6\u4FEE\u6539 snapshot \u8282\u70B9 ${path2.join(".") || "<root>"}`);
-    return structuredClone(current);
-  }
-  const merged = structuredClone(current);
-  const keys = new Set([...Object.keys(before), ...Object.keys(after)]);
-  for (const key of keys) {
-    if (path2.length === 0 && (key === "id" || key === "prevId"))
-      continue;
-    const nextPath = [...path2, key];
-    if (!(key in after)) {
-      if (!(key in current))
-        continue;
-      if (deepEqual(current[key], before[key]))
-        delete merged[key];
-      else
-        conflicts.push(`${conflictPath}\uFF1A\u5E73\u53F0\u5220\u9664\u4E86\u4E1A\u52A1\u5DF2\u4FEE\u6539\u7684 snapshot \u8282\u70B9 ${nextPath.join(".")}`);
-      continue;
-    }
-    if (!(key in before)) {
-      if (!(key in current) || deepEqual(current[key], after[key])) {
-        merged[key] = structuredClone(after[key]);
-      } else {
-        conflicts.push(`${conflictPath}\uFF1A\u5E73\u53F0\u65B0\u589E\u7684 snapshot \u8282\u70B9\u5DF2\u88AB\u4E1A\u52A1\u5360\u7528 ${nextPath.join(".")}`);
-      }
-      continue;
-    }
-    merged[key] = applySnapshotDelta(before[key], after[key], current[key], nextPath, conflicts, conflictPath);
-  }
-  return merged;
-}
-function isRecord(value) {
-  return !!value && typeof value === "object" && !Array.isArray(value);
-}
-function deepEqual(left, right) {
-  return JSON.stringify(left) === JSON.stringify(right);
-}
-
-// src/update/migration-adoption.ts
-async function inspectPreexistingMigrationAdoptions(input) {
-  const conflicts = [];
-  const adoptions = [];
-  const projectByName = new Map(input.project.entries.map((entry) => [stableName(entry.tag), entry]));
-  for (const candidate of input.candidates) {
-    const name = stableName(candidate.tag);
-    const projectEntry = projectByName.get(name);
-    if (!projectEntry || input.managedNames.has(name))
-      continue;
-    const targetPosition = input.target.entries.indexOf(candidate);
-    const projectPosition = input.project.entries.indexOf(projectEntry);
-    const previousTarget = input.target.entries[targetPosition - 1];
-    const previousProject = input.project.entries[projectPosition - 1];
-    if (!previousTarget || !previousProject) {
-      conflicts.push(`${journalPath}\uFF1A\u65E0\u6CD5\u91C7\u7EB3\u73B0\u6709\u5E73\u53F0 migration ${name}\uFF0C\u7F3A\u5C11\u524D\u7F6E\u5386\u53F2`);
-      continue;
-    }
-    const projectSqlPath = `${drizzleRoot}/${projectEntry.tag}.sql`;
-    const projectSnapshotPath = snapshotPath(projectEntry.tag);
-    const [
-      targetSql,
-      projectSql,
-      targetBefore,
-      targetAfter,
-      projectBeforeBytes,
-      projectAfterBytes
-    ] = await Promise.all([
-      readFile18(join22(input.targetDirectory, `${drizzleRoot}/${candidate.tag}.sql`)),
-      readProjectFile(input, projectSqlPath),
-      readJson(join22(input.targetDirectory, snapshotPath(previousTarget.tag))),
-      readJson(join22(input.targetDirectory, snapshotPath(candidate.tag))),
-      readProjectFile(input, snapshotPath(previousProject.tag)),
-      readProjectFile(input, projectSnapshotPath)
-    ]);
-    if (!projectSql || !projectBeforeBytes || !projectAfterBytes) {
-      conflicts.push(`${journalPath}\uFF1A\u65E0\u6CD5\u91C7\u7EB3\u73B0\u6709\u5E73\u53F0 migration ${name}\uFF0C\u9879\u76EE migration \u6587\u4EF6\u4E0D\u5B8C\u6574`);
-      continue;
-    }
-    const projectBefore = decodeSnapshot(projectBeforeBytes);
-    const projectAfter = decodeSnapshot(projectAfterBytes);
-    const reason = validateAdoption({
-      targetSql,
-      projectSql,
-      targetBefore,
-      targetAfter,
-      projectBefore,
-      projectAfter
-    });
-    if (reason) {
-      conflicts.push(`${journalPath}\uFF1A\u65E0\u6CD5\u91C7\u7EB3\u73B0\u6709\u5E73\u53F0 migration ${name}\uFF0C${reason}`);
-      continue;
-    }
-    adoptions.push({
-      sqlPath: projectSqlPath,
-      snapshotPath: projectSnapshotPath,
-      sql: projectSql,
-      snapshot: projectAfterBytes
-    });
-  }
-  return { adoptions, conflicts };
-}
-function validateAdoption(input) {
-  if (!equalBytes(input.targetSql, input.projectSql)) {
-    return "SQL \u5185\u5BB9\u4E0D\u4E00\u81F4";
-  }
-  if (input.projectAfter.prevId !== input.projectBefore.id) {
-    return "\u9879\u76EE snapshot lineage \u4E0D\u8FDE\u7EED";
-  }
-  const deltaConflicts = [];
-  const expected = applySnapshotDelta(input.targetBefore, input.targetAfter, input.projectBefore, [], deltaConflicts, journalPath);
-  if (deltaConflicts.length || canonicalSnapshot(expected) !== canonicalSnapshot(input.projectAfter)) {
-    return "snapshot delta \u4E0E\u9879\u76EE\u5386\u53F2\u4E0D\u4E00\u81F4";
-  }
-}
-function decodeSnapshot(content) {
-  return JSON.parse(new TextDecoder().decode(content));
-}
-function equalBytes(left, right) {
-  return left.byteLength === right.byteLength && left.every((value, index) => value === right[index]);
-}
-function canonicalSnapshot(value) {
-  return JSON.stringify(canonicalize(value, true));
-}
-function canonicalize(value, root = false) {
-  if (Array.isArray(value))
-    return value.map((item) => canonicalize(item));
-  if (!value || typeof value !== "object")
-    return value;
-  return Object.fromEntries(Object.entries(value).filter(([key]) => !root || key !== "id" && key !== "prevId").sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => [key, canonicalize(item)]));
-}
-
-// src/update/migration-reconciler.ts
-async function reconcileDrizzleMigrations(input) {
-  const journals = await readJournals(input);
-  if (!journals) {
-    return unchanged(input.targetManifest);
-  }
-  const { base, project, target } = journals;
-  const conflicts = [];
-  validateUniqueNames(base, "\u6765\u6E90\u6A21\u677F", conflicts);
-  validateUniqueNames(project, "\u5F53\u524D\u9879\u76EE", conflicts);
-  validateUniqueNames(target, "\u76EE\u6807\u6A21\u677F", conflicts);
-  if (conflicts.length) {
-    return { ...unchanged(input.targetManifest), conflicts };
-  }
-  const baseNames = new Set(base.entries.map(({ tag }) => stableName(tag)));
-  const projectNames = new Set(project.entries.map(({ tag }) => stableName(tag)));
-  const managedNames = new Set(input.sourceManifest.files.filter(({ path: path2 }) => isSqlMigration(path2)).map(({ path: path2 }) => stableName(path2.slice(drizzleRoot.length + 1, -4))));
-  const candidates = target.entries.filter(({ tag }) => !baseNames.has(stableName(tag)));
-  const adoption = await inspectPreexistingMigrationAdoptions({
-    ...input,
-    project,
-    target,
-    candidates,
-    managedNames
-  });
-  conflicts.push(...adoption.conflicts);
-  const additions = candidates.filter(({ tag }) => !projectNames.has(stableName(tag)));
-  const contentOverrides = new Map;
-  const files = await preservePublishedHistory(input.sourceManifest, input, contentOverrides);
-  const publishedPaths = new Set(files.map(({ path: path2 }) => path2));
-  for (const adopted of adoption.adoptions) {
-    contentOverrides.set(adopted.sqlPath, adopted.sql);
-    contentOverrides.set(adopted.snapshotPath, adopted.snapshot);
-    files.push(managedEntry(adopted.sqlPath, adopted.sql), managedEntry(adopted.snapshotPath, adopted.snapshot));
-    publishedPaths.add(adopted.sqlPath);
-    publishedPaths.add(adopted.snapshotPath);
-  }
-  files.push(...input.targetManifest.files.filter(({ path: path2 }) => !isDrizzleHistoryPath(path2)));
-  if (!additions.length) {
-    const journalContent2 = encodeJson(project);
-    contentOverrides.set(journalPath, journalContent2);
-    files.push(managedEntry(journalPath, journalContent2));
-    return result(input.targetManifest, files, contentOverrides, publishedPaths, conflicts);
-  }
-  let nextPrefix = highestPrefix(project) + 1;
-  let nextIndex = highestIndex(project) + 1;
-  let previousWhen = project.entries.at(-1)?.when ?? 0;
-  let currentSnapshot = await readLatestSnapshot(input, project);
-  const mergedJournal = structuredClone(project);
-  for (const addition of additions) {
-    const targetPosition = target.entries.indexOf(addition);
-    const previousTarget = target.entries[targetPosition - 1];
-    if (!previousTarget) {
-      conflicts.push(`${journalPath}\uFF1A\u76EE\u6807 migration \u7F3A\u5C11\u524D\u7F6E\u5FEB\u7167`);
-      break;
-    }
-    const targetBefore = await readSnapshot(input.targetDirectory, previousTarget.tag);
-    const targetAfter = await readSnapshot(input.targetDirectory, addition.tag);
-    const merged = applySnapshotDelta(targetBefore, targetAfter, currentSnapshot, [], conflicts, journalPath);
-    if (conflicts.length)
-      break;
-    const prefix = String(nextPrefix).padStart(4, "0");
-    const name = stableName(addition.tag);
-    const tag = `${prefix}_${name}`;
-    const sqlPath = `${drizzleRoot}/${tag}.sql`;
-    const snapshotPath2 = `${drizzleRoot}/meta/${prefix}_snapshot.json`;
-    const sql = await readFile19(join23(input.targetDirectory, `${drizzleRoot}/${addition.tag}.sql`));
-    merged.id = targetAfter.id;
-    merged.prevId = currentSnapshot.id;
-    const snapshot2 = encodeJson(merged);
-    contentOverrides.set(sqlPath, sql);
-    contentOverrides.set(snapshotPath2, snapshot2);
-    files.push(managedEntry(sqlPath, sql), managedEntry(snapshotPath2, snapshot2));
-    previousWhen = Math.max(previousWhen + 1, addition.when);
-    mergedJournal.entries.push({
-      ...addition,
-      idx: nextIndex,
-      when: previousWhen,
-      tag
-    });
-    currentSnapshot = merged;
-    nextPrefix += 1;
-    nextIndex += 1;
-  }
-  const journalContent = encodeJson(mergedJournal);
-  contentOverrides.set(journalPath, journalContent);
-  files.push(managedEntry(journalPath, journalContent));
-  return result(input.targetManifest, files, contentOverrides, publishedPaths, conflicts);
-}
-function result(targetManifest, files, contentOverrides, forcePreserves, conflicts) {
-  return {
-    targetManifest: {
-      ...targetManifest,
-      files: deduplicate(files).sort((left, right) => left.path.localeCompare(right.path))
-    },
-    contentOverrides,
-    forceUpdates: new Set([journalPath]),
-    forcePreserves,
-    conflicts
-  };
-}
-function unchanged(targetManifest) {
-  return {
-    targetManifest,
-    contentOverrides: new Map,
-    forceUpdates: new Set,
-    forcePreserves: new Set,
-    conflicts: []
-  };
-}
-async function readJournals(input) {
-  try {
-    const [base, project, target] = await Promise.all([
-      readJson(join23(input.baseDirectory, journalPath)),
-      readProjectJson(input, journalPath),
-      readJson(join23(input.targetDirectory, journalPath))
-    ]);
-    return { base, project, target };
-  } catch (error) {
-    if (isMissingFileError(error))
-      return;
-    throw error;
-  }
-}
-async function preservePublishedHistory(manifest, input, overrides) {
-  const entries = manifest.files.filter(({ path: path2 }) => isMigrationArtifact(path2) && path2 !== journalPath);
-  await Promise.all(entries.map(async ({ path: path2 }) => {
-    const content = await readProjectFile(input, path2);
-    if (!content)
-      throw new Error(`\u5F53\u524D\u9879\u76EE migration \u6587\u4EF6\u7F3A\u5931\uFF1A${path2}`);
-    overrides.set(path2, content);
-  }));
-  return entries;
-}
-async function readLatestSnapshot(input, journal) {
-  const latest = journal.entries.at(-1);
-  if (!latest)
-    throw new Error(`${journalPath}\uFF1A\u5F53\u524D\u9879\u76EE\u6CA1\u6709 migration`);
-  const path2 = snapshotPath(latest.tag);
-  const content = await readProjectFile(input, path2);
-  if (!content) {
-    throw new Error(`\u5F53\u524D\u9879\u76EE migration \u6587\u4EF6\u7F3A\u5931\uFF1A${path2}`);
-  }
-  return JSON.parse(new TextDecoder().decode(content));
-}
-async function readSnapshot(root, tag) {
-  return await readJson(join23(root, snapshotPath(tag)));
-}
-
-// src/update/planner-file.ts
-import { readFile as readFile21 } from "fs/promises";
-import { join as join27 } from "path";
-
-// src/update/planner-file-support.ts
-function readyPlannedFile(path2, ownership, action, reason, expectedProjectContent, content) {
-  return {
-    path: path2,
-    ownership,
-    action,
-    reason,
-    expectedProjectContent,
-    content
-  };
-}
-function expectationForSnapshot(content) {
-  return content ? { kind: "hash", value: hashContent(content) } : { kind: "missing" };
-}
-function conflict(path2, ownership, reason, expectedProjectContent) {
-  return {
-    path: path2,
-    ownership,
-    action: "preserve",
-    reason: "\u5BA2\u6237\u5DF2\u4FEE\u6539",
-    expectedProjectContent,
-    conflict: reason
-  };
-}
-// src/update/merge.ts
-import { mkdtemp as mkdtemp2, rm as rm6, writeFile as writeFile12 } from "fs/promises";
-import { tmpdir as tmpdir2 } from "os";
-import { join as join24 } from "path";
-
-// src/update/merge-convergent-additions.ts
-async function reconcileConvergentAdditions(input) {
-  const [oursDiff, theirsDiff] = await Promise.all([
-    diff(input.root, input.basePath, input.oursPath),
-    diff(input.root, input.basePath, input.theirsPath)
-  ]);
-  if (oursDiff === undefined || theirsDiff === undefined)
-    return;
-  const oursAdditions = pureAdditions(oursDiff);
-  const theirsAdditions = pureAdditions(theirsDiff);
-  const oursByContent = new Map;
-  for (const addition of oursAdditions) {
-    const key = addition.lines.join(`
-`);
-    oursByContent.set(key, [...oursByContent.get(key) ?? [], addition]);
-  }
-  const decode = (content) => new TextDecoder().decode(content);
-  const baseLines = decode(input.base).split(`
-`);
-  const oursLines = decode(input.ours).split(`
-`);
-  const theirsLines = decode(input.theirs).split(`
-`);
-  const mergedLines = input.merged.split(`
-`);
-  const convergent = theirsAdditions.flatMap((addition) => {
-    if (!isSubstantial(addition.lines) || !isNamedClassMethod(addition.lines)) {
-      return [];
-    }
-    const key = addition.lines.join(`
-`);
-    const matchingOurs = oursByContent.get(key);
-    if (matchingOurs?.length !== 1)
-      return [];
-    if (theirsAdditions.filter((candidate2) => candidate2.lines.join(`
-`) === key).length !== 1) {
-      return [];
-    }
-    const oursContainer = enclosingClass(oursLines, matchingOurs[0]);
-    const theirsContainer = enclosingClass(theirsLines, addition);
-    if (!oursContainer || oursContainer !== theirsContainer)
-      return [];
-    return countSequence(baseLines, addition.lines) === 0 && countSequence(oursLines, addition.lines) === 1 && countSequence(theirsLines, addition.lines) === 1 && countSequence(mergedLines, addition.lines) > 1 ? [{ ours: matchingOurs[0], theirs: addition }] : [];
-  });
-  if (convergent.length !== 1)
-    return;
-  const candidate = convergent[0];
-  if (!candidate)
-    return;
-  const oursWithout = withoutAddition(oursLines, candidate.ours);
-  const theirsWithout = withoutAddition(theirsLines, candidate.theirs);
-  if (!oursWithout || !theirsWithout || !sameLines(oursWithout, theirsWithout)) {
-    return;
-  }
-  return input.ours;
-}
-async function diff(root, basePath, branchPath) {
-  const result2 = await captureProcess("git", ["diff", "--no-index", "--unified=0", "--no-color", basePath, branchPath], root);
-  return result2.code === 0 || result2.code === 1 ? result2.stdout : undefined;
-}
-function pureAdditions(diff2) {
-  const lines = diff2.split(`
-`);
-  const additions = [];
-  for (let index = 0;index < lines.length; index += 1) {
-    const match = /^@@ -\d+(?:,(\d+))? \+(\d+)(?:,(\d+))? @@/.exec(lines[index] ?? "");
-    if (!match)
-      continue;
-    const oldCount = match[1] === undefined ? 1 : Number(match[1]);
-    const start = Number(match[2]);
-    const newCount = match[3] === undefined ? 1 : Number(match[3]);
-    if (oldCount !== 0 || newCount === 0)
-      continue;
-    const added = [];
-    for (let cursor = index + 1;cursor < lines.length; cursor += 1) {
-      const line = lines[cursor] ?? "";
-      if (line.startsWith("@@ "))
-        break;
-      if (line.startsWith("+"))
-        added.push(line.slice(1));
-    }
-    if (added.length === newCount)
-      additions.push({ start, lines: added });
-  }
-  return additions;
-}
-function isSubstantial(lines) {
-  return lines.filter((line) => line.trim()).length >= 3 && lines.join(`
-`).length >= 32;
-}
-function isNamedClassMethod(lines) {
-  const first = lines.find((line) => line.trim())?.trim() ?? "";
-  const last = [...lines].reverse().find((line) => line.trim())?.trim() ?? "";
-  return /^(?:(?:public|protected|private|static|abstract|override|async|declare|get|set)\s+)*(?:\*\s*)?[A-Za-z_$][\w$]*\s*(?:<[^>{}]*>)?\s*\(/.test(first) && lines.some((line) => line.includes("{")) && /^}\s*;?$/.test(last);
-}
-function enclosingClass(lines, addition) {
-  const memberIndent = leadingWhitespace(addition.lines.find((line) => line.trim()) ?? "");
-  for (let index = addition.start - 2;index >= 0; index -= 1) {
-    const line = lines[index] ?? "";
-    if (!line.trim() || leadingWhitespace(line) >= memberIndent)
-      continue;
-    const match = /^(\s*)(?:(?:export|default|abstract|declare)\s+)*class\s+([A-Za-z_$][\w$]*)\b/.exec(line);
-    if (!match)
-      return;
-    const name = match[2] ?? "";
-    const ordinal = lines.slice(0, index + 1).filter((candidate) => new RegExp(`^\\s*(?:(?:export|default|abstract|declare)\\s+)*class\\s+${escapeRegExp2(name)}\\b`).test(candidate)).length;
-    return `${name}#${ordinal}`;
-  }
-}
-function leadingWhitespace(line) {
-  return /^\s*/.exec(line)?.[0].length ?? 0;
-}
-function escapeRegExp2(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-function countSequence(lines, sequence) {
-  let count = 0;
-  for (let index = 0;index <= lines.length - sequence.length; index += 1) {
-    if (sameLines(lines.slice(index, index + sequence.length), sequence)) {
-      count += 1;
-    }
-  }
-  return count;
-}
-function withoutAddition(lines, addition) {
-  const index = addition.start - 1;
-  if (!sameLines(lines.slice(index, index + addition.lines.length), addition.lines)) {
-    return;
-  }
-  return [
-    ...lines.slice(0, index),
-    ...lines.slice(index + addition.lines.length)
-  ];
-}
-function sameLines(left, right) {
-  return left.length === right.length && left.every((line, index) => line === right[index]);
+function sameLines(left, right) {
+  return left.length === right.length && left.every((line, index) => line === right[index]);
 }
 
 // src/update/merge.ts
 async function mergeTextFile(base, ours, theirs) {
-  const root = await mkdtemp2(join24(tmpdir2(), "windy-merge-"));
+  const root = await mkdtemp2(join21(tmpdir2(), "windy-merge-"));
   try {
-    const oursPath = join24(root, "ours");
-    const basePath = join24(root, "base");
-    const theirsPath = join24(root, "theirs");
+    const oursPath = join21(root, "ours");
+    const basePath = join21(root, "base");
+    const theirsPath = join21(root, "theirs");
     await Promise.all([
       writeFile12(oursPath, ours),
       writeFile12(basePath, base),
       writeFile12(theirsPath, theirs)
     ]);
-    const result2 = await captureProcess("git", ["merge-file", "-p", "--diff3", oursPath, basePath, theirsPath], root);
-    if (result2.code === 0) {
+    const result = await captureProcess("git", ["merge-file", "-p", "--diff3", oursPath, basePath, theirsPath], root);
+    if (result.code === 0) {
       const reconciledContent = await reconcileConvergentAdditions({
         root,
         basePath,
@@ -9782,18 +9716,18 @@ async function mergeTextFile(base, ours, theirs) {
         base,
         ours,
         theirs,
-        merged: result2.stdout
+        merged: result.stdout
       });
       if (reconciledContent !== undefined) {
         return { content: reconciledContent };
       }
-      return { content: new TextEncoder().encode(result2.stdout) };
+      return { content: new TextEncoder().encode(result.stdout) };
     }
-    if (result2.code > 0 && result2.code <= 127) {
-      const resolved = resolveConservativeConflicts(result2.stdout);
+    if (result.code > 0 && result.code <= 127) {
+      const resolved = resolveConservativeConflicts(result.stdout);
       return resolved ? { content: new TextEncoder().encode(resolved) } : { conflict: "\u4E09\u65B9\u5408\u5E76\u5B58\u5728\u91CD\u53E0\u4FEE\u6539" };
     }
-    return { conflict: result2.stderr.trim() || "git merge-file \u6267\u884C\u5931\u8D25" };
+    return { conflict: result.stderr.trim() || "git merge-file \u6267\u884C\u5931\u8D25" };
   } finally {
     await rm6(root, { recursive: true, force: true });
   }
@@ -10197,7 +10131,7 @@ ${workflowArtifactProperty}`
   ];
   let content = source;
   for (const replacement of replacements2) {
-    if (occurrences(content, replacement.anchor) !== 1) {
+    if (occurrences2(content, replacement.anchor) !== 1) {
       return conflict3(input, `Agent Runtime Composition \u951A\u70B9\u4E0D\u552F\u4E00\uFF1A${replacement.anchor}`);
     }
     content = content.replace(replacement.anchor, replacement.value);
@@ -10227,7 +10161,7 @@ function conflict3(input, message) {
 function decode(content) {
   return new TextDecoder().decode(content);
 }
-function occurrences(source, value) {
+function occurrences2(source, value) {
   return source.split(value).length - 1;
 }
 function validateLegacyRuntimeObject(source) {
@@ -10235,22 +10169,22 @@ function validateLegacyRuntimeObject(source) {
     ...input,`;
   const endAnchor = `
   });`;
-  if (occurrences(source, startAnchor) !== 1 || occurrences(source, endAnchor) !== 1) {
+  if (occurrences2(source, startAnchor) !== 1 || occurrences2(source, endAnchor) !== 1) {
     return "Agent Runtime register object \u951A\u70B9\u4E0D\u552F\u4E00";
   }
   const start = source.indexOf(startAnchor);
   const end = source.indexOf(endAnchor, start + startAnchor.length);
   if (end < 0)
     return "Agent Runtime register object \u7ED3\u675F\u951A\u70B9\u7F3A\u5931";
-  const object = source.slice(start, end);
-  const host = object.indexOf(hostAuthProperty);
+  const object2 = source.slice(start, end);
+  const host = object2.indexOf(hostAuthProperty);
   if (host < 0)
     return "Agent Runtime Host Auth property \u951A\u70B9\u7F3A\u5931";
-  const tail = object.slice(host + hostAuthProperty.length);
+  const tail = object2.slice(host + hostAuthProperty.length);
   if (/^\s*\.\.\./m.test(tail)) {
     return "Workflow binding \u63D2\u5165\u70B9\u540E\u5B58\u5728\u53EF\u8986\u76D6\u5B83\u7684 spread";
   }
-  if (/["']clientAgentWorkflowArtifactBindings["']\s*:/.test(object) || /\[\s*["']clientAgentWorkflowArtifactBindings["']\s*\]/.test(object)) {
+  if (/["']clientAgentWorkflowArtifactBindings["']\s*:/.test(object2) || /\[\s*["']clientAgentWorkflowArtifactBindings["']\s*\]/.test(object2)) {
     return "Agent Runtime \u5DF2\u5B58\u5728\u52A8\u6001 Workflow binding property";
   }
   return;
@@ -10285,266 +10219,451 @@ function addAiRuntimeTrajectoryTestFixture(source) {
   };
 }
 
-// src/update/recipe-project-owned.ts
-var managedPathsByRecipe = {
-  "starter-0.6.8-to-0.6.9": [
-    "apps/web/src/router/index.ts",
-    "apps/web/src/router/platform-admin-route-bindings.ts"
-  ],
-  "starter-0.6.13-to-0.6.14": [
-    "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.webtest.ts",
-    "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.vue",
-    "apps/web/src/router/index.ts",
-    "apps/web/src/router/platform-admin-route-bindings.ts",
-    "apps/web/src/services/ai-runtime-api.ts"
-  ],
-  "starter-0.6.14-to-0.6.15": [
-    clientWorkflowCompositionPath,
-    clientWorkflowBindingPath
-  ]
-};
-function recipeManagedProjectOwnedPaths(recipes2) {
-  return new Set(recipes2.flatMap((recipe) => managedPathsByRecipe[recipe] ?? []));
+// src/update/recipe-project-owned.ts
+var managedPathsByRecipe = {
+  "starter-0.9.1-to-0.10.0": adminApiRecipePaths,
+  "starter-0.6.8-to-0.6.9": [
+    "apps/web/src/router/index.ts",
+    "apps/web/src/router/platform-admin-route-bindings.ts"
+  ],
+  "starter-0.6.13-to-0.6.14": [
+    "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.webtest.ts",
+    "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.vue",
+    "apps/web/src/router/index.ts",
+    "apps/web/src/router/platform-admin-route-bindings.ts",
+    "apps/web/src/services/ai-runtime-api.ts"
+  ],
+  "starter-0.6.14-to-0.6.15": [
+    clientWorkflowCompositionPath,
+    clientWorkflowBindingPath
+  ]
+};
+function recipeManagedProjectOwnedPaths(recipes2) {
+  return new Set(recipes2.flatMap((recipe) => managedPathsByRecipe[recipe] ?? []));
+}
+function recipeCanManageMissingProjectOwnedPath(path2) {
+  return path2 === clientWorkflowCompositionPath || path2 === clientWorkflowBindingPath;
+}
+async function planRecipeProjectOwned(input) {
+  if (input.path === clientWorkflowCompositionPath || input.path === clientWorkflowBindingPath) {
+    if (!input.target) {
+      return conflict4(input, "\u7248\u672C recipe \u6240\u9700\u7684\u76EE\u6807\u6587\u4EF6\u7F3A\u5931");
+    }
+    return planClientWorkflowProjectOwned({ ...input, target: input.target });
+  }
+  if (!input.ours) {
+    return conflict4(input, "\u7248\u672C recipe \u6240\u9700\u7684\u9879\u76EE\u951A\u70B9\u7F3A\u5931");
+  }
+  const source = new TextDecoder().decode(input.ours);
+  const target = input.target ? new TextDecoder().decode(input.target) : undefined;
+  const transformed = transformProjectOwnedAnchor(input.path, source, target);
+  if ("error" in transformed)
+    return conflict4(input, transformed.error);
+  if (transformed.content === source) {
+    return preserve(input, "\u5DF2\u5305\u542B\u7248\u672C recipe \u76EE\u6807\u5185\u5BB9");
+  }
+  return update(input, new TextEncoder().encode(transformed.content));
+}
+function transformProjectOwnedAnchor(path2, source, target) {
+  if (isAdminApiRecipePath(path2))
+    return addAdminApiExports(path2, source, target);
+  if (path2 === "apps/web/src/router/index.ts") {
+    return addComponentPageLoader(source, target);
+  }
+  if (path2 === "apps/web/src/router/platform-admin-route-bindings.ts") {
+    return addComponentRouteBinding(source, target);
+  }
+  if (path2 === "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.webtest.ts") {
+    return addAiRuntimeTrajectoryTestFixture(source);
+  }
+  if (path2 === "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.vue") {
+    return addAiRuntimeTrajectoryView(source);
+  }
+  if (path2 === "apps/web/src/services/ai-runtime-api.ts") {
+    return addAiRuntimeTrajectoryContract(source);
+  }
+  return { error: `\u7248\u672C recipe \u672A\u767B\u8BB0\u9879\u76EE\u951A\u70B9\uFF1A${path2}` };
+}
+function addAiRuntimeTrajectoryContract(source) {
+  let content = source;
+  const typeField = '  readonly trajectory: RuntimeRunDetail["trajectory"];';
+  if (!content.includes(typeField)) {
+    const anchors = [
+      ...content.matchAll(/^(\s*)readonly attemptItems: readonly AiRuntimeAttempt\[\];$/gm)
+    ];
+    if (anchors.length !== 1) {
+      return { error: "AiRuntimeRunDetail attemptItems \u951A\u70B9\u4E0D\u552F\u4E00" };
+    }
+    content = content.replace(anchors[0][0], `${anchors[0][0]}
+${anchors[0][1]}readonly trajectory: RuntimeRunDetail["trajectory"];`);
+  }
+  const mapperField = "    trajectory: value.trajectory,";
+  if (!content.includes(mapperField)) {
+    const anchors = [
+      ...content.matchAll(/^(\s*)attemptItems: value\.attempts\.map\(attemptItem\),$/gm)
+    ];
+    if (anchors.length !== 1) {
+      return { error: "runDetail attemptItems mapper \u951A\u70B9\u4E0D\u552F\u4E00" };
+    }
+    content = content.replace(anchors[0][0], `${anchors[0][0]}
+${anchors[0][1]}trajectory: value.trajectory,`);
+  }
+  return { content };
+}
+function addAiRuntimeTrajectoryView(source) {
+  let content = source;
+  const componentImport = 'import AiRuntimeTrajectory from "./AiRuntimeTrajectory.vue";';
+  if (!content.includes(componentImport)) {
+    const anchors = [
+      ...content.matchAll(/^} from "\.\.\/\.\.\/ai-runtime-presenter";$/gm)
+    ];
+    if (anchors.length !== 1) {
+      return { error: "AI Runtime presenter import \u951A\u70B9\u4E0D\u552F\u4E00" };
+    }
+    content = content.replace(anchors[0][0], `${anchors[0][0]}
+${componentImport}`);
+  }
+  const componentUsage = '<AiRuntimeTrajectory :trajectory="detail.trajectory" />';
+  if (!content.includes(componentUsage)) {
+    const providerSections = [
+      ...content.matchAll(/^(\s*)<section class="space-y-3">\n\s*<h3 class="text-sm font-medium">Provider Attempts<\/h3>$/gm)
+    ];
+    if (providerSections.length !== 1) {
+      return { error: "Provider Attempts section \u951A\u70B9\u4E0D\u552F\u4E00" };
+    }
+    const providerSection = providerSections[0];
+    content = content.replace(providerSection[0], `${providerSection[1]}${componentUsage}
+
+${providerSection[0]}`);
+  }
+  return { content };
+}
+function addComponentPageLoader(source, target) {
+  const desired = [
+    {
+      key: "ui-components",
+      value: '() => import("@/pages/ui/UiComponentPage.vue")'
+    },
+    ...target?.includes('"agent-session": AgentSessionPage') ? [
+      {
+        key: "agent-session",
+        value: '() => import("@/pages/system/AgentSessionPage.vue")'
+      },
+      {
+        key: "agent-workflow",
+        value: '() => import("@/pages/system/AgentWorkflowPage.vue")'
+      }
+    ] : []
+  ];
+  const missing = desired.filter(({ key }) => !new RegExp(`^\\s*"${key}"\\s*:`, "m").test(source));
+  if (!missing.length)
+    return { content: source };
+  const declaration = source.indexOf("const platformAdminPageComponents");
+  const start = source.indexOf("= {", declaration);
+  const end = source.indexOf(`
+};`, start);
+  if (declaration < 0 || start < 0 || end < 0) {
+    return { error: "\u627E\u4E0D\u5230 platformAdminPageComponents \u9879\u76EE\u951A\u70B9" };
+  }
+  const block = source.slice(start, end);
+  const profiles = [...block.matchAll(/^(\s*)profile:\s*.*,$/gm)];
+  if (profiles.length !== 1) {
+    return { error: "platformAdminPageComponents profile \u951A\u70B9\u4E0D\u552F\u4E00" };
+  }
+  const profile = profiles[0];
+  const insertion = [
+    profile[0],
+    ...missing.map(({ key, value }) => `${profile[1]}"${key}": ${value},`)
+  ].join(`
+`);
+  return {
+    content: source.slice(0, start) + block.replace(profile[0], insertion) + source.slice(end)
+  };
+}
+function addComponentRouteBinding(source, target) {
+  const unionStart = source.indexOf("export type PlatformAdminPageKey =");
+  const interfaceStart = source.indexOf("export interface PlatformAdminRouteBinding", unionStart);
+  if (unionStart < 0 || interfaceStart < 0) {
+    return { error: "\u627E\u4E0D\u5230 PlatformAdminPageKey \u9879\u76EE\u951A\u70B9" };
+  }
+  const desiredPages = [
+    "ui-components",
+    ...target?.includes('routeKey: "system.agent-session"') ? ["agent-session", "agent-workflow"] : []
+  ];
+  let content = source;
+  const union = content.slice(unionStart, interfaceStart);
+  const missingPages = desiredPages.filter((page) => !union.includes(`"${page}"`));
+  if (missingPages.length) {
+    const semicolon = content.lastIndexOf(";", interfaceStart);
+    if (semicolon < unionStart) {
+      return { error: "PlatformAdminPageKey \u7ED3\u675F\u951A\u70B9\u7F3A\u5931" };
+    }
+    content = `${content.slice(0, semicolon)}
+${missingPages.map((page) => `  | "${page}"`).join(`
+`)}${content.slice(semicolon)}`;
+  }
+  const desiredBindings = [
+    { routeKey: "system.ui-components", page: "ui-components" },
+    ...target?.includes('routeKey: "system.agent-session"') ? [
+      { routeKey: "system.agent-session", page: "agent-session" },
+      { routeKey: "system.agent-workflow", page: "agent-workflow" }
+    ] : []
+  ];
+  const missingBindings = desiredBindings.filter(({ routeKey }) => !content.includes(`routeKey: "${routeKey}"`));
+  if (!missingBindings.length)
+    return { content };
+  const features = [
+    ...content.matchAll(/^(\s*)\{ routeKey: "system\.feature", page: "resource", resourceKey: "features" \},$/gm)
+  ];
+  if (features.length !== 1) {
+    return { error: "system.feature Admin Route \u951A\u70B9\u4E0D\u552F\u4E00" };
+  }
+  const feature = features[0];
+  return {
+    content: content.replace(feature[0], [
+      feature[0],
+      ...missingBindings.map(({ routeKey, page }) => `${feature[1]}{ routeKey: "${routeKey}", page: "${page}" },`)
+    ].join(`
+`))
+  };
+}
+function preserve(input, reason) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action: "preserve",
+    reason,
+    expectedProjectContent: input.expected
+  };
+}
+function update(input, content) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action: "update",
+    reason: "\u7248\u672C recipe \u66F4\u65B0\u9879\u76EE\u6269\u5C55\u951A\u70B9",
+    expectedProjectContent: input.expected,
+    content
+  };
+}
+function conflict4(input, message) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action: "preserve",
+    reason: "\u5BA2\u6237\u5DF2\u4FEE\u6539",
+    expectedProjectContent: input.expected,
+    conflict: message
+  };
+}
+
+// src/update/dsh-platform-recipe.ts
+import { join as join22 } from "path";
+var dshPlatformRecipeId = "dsh-platform-v1";
+var dshPlatformRecipePaths = new Set([
+  "apps/server/src/app/agent-workflow-presets.ts",
+  "apps/server/src/app/workbench-public-origin.ts",
+  "apps/web/src/router/index.ts",
+  "apps/web/src/router/platform-admin-pages.ts",
+  "apps/web/src/router/platform-admin-route-bindings.ts",
+  "apps/web/src/composables/useLoginFlow.ts",
+  "apps/web/src/pages/system/AgentWorkflowPage.vue",
+  "apps/web/src/services/agent-workflow-api.ts",
+  "apps/web/vite.config.ts",
+  "apps/web/server.ts",
+  "apps/web/runtime-server.ts",
+  "apps/web/dev/start.ts"
+]);
+function isDshPlatformRecipePath(path2) {
+  return dshPlatformRecipePaths.has(path2) || path2.startsWith("apps/server/src/app/dsh-") && path2.endsWith(".ts");
 }
-function recipeCanManageMissingProjectOwnedPath(path2) {
-  return path2 === clientWorkflowCompositionPath || path2 === clientWorkflowBindingPath;
+async function isDshPlatformTransition(input) {
+  if (!input.sourceModules.includes("system.agent") || !input.targetModules.includes("system.agent"))
+    return false;
+  const path2 = "apps/agent-server/package.json";
+  const [base, target] = await Promise.all([
+    readOptional(join22(input.baseDirectory, path2)),
+    readOptional(join22(input.targetDirectory, path2))
+  ]);
+  return hasDsh(target) && !hasDsh(base);
 }
-async function planRecipeProjectOwned(input) {
-  if (input.path === clientWorkflowCompositionPath || input.path === clientWorkflowBindingPath) {
-    if (!input.target) {
-      return conflict4(input, "\u7248\u672C recipe \u6240\u9700\u7684\u76EE\u6807\u6587\u4EF6\u7F3A\u5931");
-    }
-    return planClientWorkflowProjectOwned({ ...input, target: input.target });
+function planDshPlatformFile(input) {
+  const common2 = {
+    path: input.path,
+    ownership: input.ownership,
+    expectedProjectContent: input.expected
+  };
+  if (input.target && input.ours && hashContent(input.ours) === hashContent(input.target)) {
+    return {
+      ...common2,
+      action: "preserve",
+      reason: "\u5DF2\u5305\u542B DSH \u5E73\u53F0\u63A5\u7EBF\u76EE\u6807\u5185\u5BB9"
+    };
   }
-  if (!input.ours) {
-    return conflict4(input, "\u7248\u672C recipe \u6240\u9700\u7684\u9879\u76EE\u951A\u70B9\u7F3A\u5931");
+  if (input.target && !input.ours && !input.base) {
+    return {
+      ...common2,
+      action: "create",
+      reason: "DSH \u5E73\u53F0\u65B0\u589E\u9879\u76EE\u6269\u5C55\u70B9",
+      content: input.target
+    };
   }
-  const source = new TextDecoder().decode(input.ours);
-  const target = input.target ? new TextDecoder().decode(input.target) : undefined;
-  const transformed = transformProjectOwnedAnchor(input.path, source, target);
-  if ("error" in transformed)
-    return conflict4(input, transformed.error);
-  if (transformed.content === source) {
-    return preserve(input, "\u5DF2\u5305\u542B\u7248\u672C recipe \u76EE\u6807\u5185\u5BB9");
+  if (input.target && input.base && input.ours && hashContent(input.ours) === hashContent(input.base)) {
+    return {
+      ...common2,
+      action: "update",
+      reason: "DSH \u5E73\u53F0\u5347\u7EA7\u7CBE\u786E\u6765\u6E90\u63A5\u7EBF",
+      content: input.target
+    };
   }
-  return update(input, new TextEncoder().encode(transformed.content));
+  return {
+    ...common2,
+    action: "preserve",
+    reason: "\u4FDD\u7559\u5BA2\u6237 DSH \u63A5\u7EBF",
+    conflict: "DSH \u5E73\u53F0\u63A5\u7EBF\u4E0E\u7CBE\u786E\u6765\u6E90\u6216\u76EE\u6807\u4E0D\u4E00\u81F4\uFF1B\u8BF7\u5BA1\u6838\u9879\u76EE\u4FEE\u6539\u540E\u663E\u5F0F\u96C6\u6210\uFF0C\u7981\u6B62\u731C\u6D4B\u8986\u76D6"
+  };
 }
-function transformProjectOwnedAnchor(path2, source, target) {
-  if (path2 === "apps/web/src/router/index.ts") {
-    return addComponentPageLoader(source, target);
-  }
-  if (path2 === "apps/web/src/router/platform-admin-route-bindings.ts") {
-    return addComponentRouteBinding(source, target);
-  }
-  if (path2 === "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.webtest.ts") {
-    return addAiRuntimeTrajectoryTestFixture(source);
-  }
-  if (path2 === "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.vue") {
-    return addAiRuntimeTrajectoryView(source);
-  }
-  if (path2 === "apps/web/src/services/ai-runtime-api.ts") {
-    return addAiRuntimeTrajectoryContract(source);
-  }
-  return { error: `\u7248\u672C recipe \u672A\u767B\u8BB0\u9879\u76EE\u951A\u70B9\uFF1A${path2}` };
+function hasDsh(content) {
+  if (!content)
+    return false;
+  const value = JSON.parse(new TextDecoder().decode(content));
+  return typeof value.dependencies?.["@deepseek-ai/dsh"] === "string";
 }
-function addAiRuntimeTrajectoryContract(source) {
-  let content = source;
-  const typeField = '  readonly trajectory: RuntimeRunDetail["trajectory"];';
-  if (!content.includes(typeField)) {
-    const anchors = [
-      ...content.matchAll(/^(\s*)readonly attemptItems: readonly AiRuntimeAttempt\[\];$/gm)
-    ];
-    if (anchors.length !== 1) {
-      return { error: "AiRuntimeRunDetail attemptItems \u951A\u70B9\u4E0D\u552F\u4E00" };
+
+// src/update/planner-file.ts
+async function planFile(path2, baseRoot, targetRoot, source, target, ours, provenance, targetContentOverride, manageGeneratedProjectOwned = false, forcePlatformBaseline = false, manageRecipeProjectOwned = false, migrateDshPlatform = false) {
+  const [base, theirs] = await Promise.all([
+    readOptional2(join23(baseRoot, path2)),
+    targetContentOverride ? Promise.resolve(targetContentOverride) : readOptional2(join23(targetRoot, path2))
+  ]);
+  const ownership = source?.ownership ?? target?.ownership ?? classifyOwnership(path2);
+  const expected = expectationForSnapshot(ours);
+  if (migrateDshPlatform && isDshPlatformRecipePath(path2)) {
+    return planDshPlatformFile({
+      path: path2,
+      ownership,
+      ours,
+      base,
+      target: theirs,
+      expected
+    });
+  }
+  if (ownership === "project-owned") {
+    const hasExistingRecipeSource = source !== undefined && source.state !== "missing" && ours !== undefined;
+    if (manageRecipeProjectOwned && target && (hasExistingRecipeSource || source !== undefined && isAdminApiRecipePath(path2) || recipeCanManageMissingProjectOwnedPath(path2))) {
+      return planRecipeProjectOwned({ path: path2, ours, target: theirs, expected });
     }
-    content = content.replace(anchors[0][0], `${anchors[0][0]}
-${anchors[0][1]}readonly trajectory: RuntimeRunDetail["trajectory"];`);
+    if (manageGeneratedProjectOwned) {
+      return planGeneratedProjectOwned(path2, source, target, ours, theirs, expected);
+    }
+    return !source && !ours && theirs ? readyPlannedFile(path2, ownership, "create", "\u65B0\u589E\u9879\u76EE\u6269\u5C55\u70B9", expected, theirs) : readyPlannedFile(path2, ownership, "preserve", "\u9ED8\u8BA4\u4FDD\u7559\u9879\u76EE\u7248\u672C", expected);
   }
-  const mapperField = "    trajectory: value.trajectory,";
-  if (!content.includes(mapperField)) {
-    const anchors = [
-      ...content.matchAll(/^(\s*)attemptItems: value\.attempts\.map\(attemptItem\),$/gm)
-    ];
-    if (anchors.length !== 1) {
-      return { error: "runDetail attemptItems mapper \u951A\u70B9\u4E0D\u552F\u4E00" };
+  if (path2.startsWith("packages/database/drizzle/") && path2.endsWith(".sql")) {
+    if (source && !target) {
+      return conflict(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
+    }
+    if (source && target && source.hash !== target.hash) {
+      return conflict(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
     }
-    content = content.replace(anchors[0][0], `${anchors[0][0]}
-${anchors[0][1]}trajectory: value.trajectory,`);
   }
-  return { content };
-}
-function addAiRuntimeTrajectoryView(source) {
-  let content = source;
-  const componentImport = 'import AiRuntimeTrajectory from "./AiRuntimeTrajectory.vue";';
-  if (!content.includes(componentImport)) {
-    const anchors = [
-      ...content.matchAll(/^} from "\.\.\/\.\.\/ai-runtime-presenter";$/gm)
-    ];
-    if (anchors.length !== 1) {
-      return { error: "AI Runtime presenter import \u951A\u70B9\u4E0D\u552F\u4E00" };
+  if (!source && target) {
+    if (!ours) {
+      return readyPlannedFile(path2, ownership, "create", "\u76EE\u6807\u7248\u672C\u65B0\u589E", expected, theirs);
     }
-    content = content.replace(anchors[0][0], `${anchors[0][0]}
-${componentImport}`);
+    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
   }
-  const componentUsage = '<AiRuntimeTrajectory :trajectory="detail.trajectory" />';
-  if (!content.includes(componentUsage)) {
-    const providerSections = [
-      ...content.matchAll(/^(\s*)<section class="space-y-3">\n\s*<h3 class="text-sm font-medium">Provider Attempts<\/h3>$/gm)
-    ];
-    if (providerSections.length !== 1) {
-      return { error: "Provider Attempts section \u951A\u70B9\u4E0D\u552F\u4E00" };
+  if (source && !target) {
+    if (!ours) {
+      return readyPlannedFile(path2, ownership, "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
     }
-    const providerSection = providerSections[0];
-    content = content.replace(providerSection[0], `${providerSection[1]}${componentUsage}
-
-${providerSection[0]}`);
+    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
+  }
+  if (source && target && !ours) {
+    return readyPlannedFile(path2, "project-owned", "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
+  }
+  if (!source || !target || !ours || !theirs) {
+    return conflict(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
+  }
+  const oursChanged = hashContent(ours) !== source.hash;
+  const sourceArtifactHash = artifactHashOf(source);
+  const targetChanged = targetChangedSinceBase(sourceArtifactHash, base, theirs);
+  const adoptedProjectDelta = source.artifactHash !== undefined && source.artifactHash !== source.hash;
+  const forceTargetBaseline = !adoptedProjectDelta && shouldForcePlatformBaseline({
+    forcePlatformBaseline,
+    oursChanged,
+    sourceArtifactHash,
+    base
+  });
+  if (forceTargetBaseline && path2.endsWith("package.json") && base) {
+    const merged = mergePackageJson(base, ours, theirs);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+  }
+  if (forceTargetBaseline) {
+    return readyPlannedFile(path2, ownership, "update", "\u5F3A\u5236\u91C7\u7528\u76EE\u6807\u5E73\u53F0\u57FA\u7EBF", expected, theirs);
+  }
+  if (!oursChanged && !targetChanged) {
+    return readyPlannedFile(path2, ownership, "preserve", "\u53CC\u65B9\u672A\u4FEE\u6539", expected);
   }
-  return { content };
-}
-function addComponentPageLoader(source, target) {
-  const desired = [
-    {
-      key: "ui-components",
-      value: '() => import("@/pages/ui/UiComponentPage.vue")'
-    },
-    ...target?.includes('"agent-session": AgentSessionPage') ? [
-      {
-        key: "agent-session",
-        value: '() => import("@/pages/system/AgentSessionPage.vue")'
-      },
-      {
-        key: "agent-workflow",
-        value: '() => import("@/pages/system/AgentWorkflowPage.vue")'
-      }
-    ] : []
-  ];
-  const missing = desired.filter(({ key }) => !new RegExp(`^\\s*"${key}"\\s*:`, "m").test(source));
-  if (!missing.length)
-    return { content: source };
-  const declaration = source.indexOf("const platformAdminPageComponents");
-  const start = source.indexOf("= {", declaration);
-  const end = source.indexOf(`
-};`, start);
-  if (declaration < 0 || start < 0 || end < 0) {
-    return { error: "\u627E\u4E0D\u5230 platformAdminPageComponents \u9879\u76EE\u951A\u70B9" };
+  if (targetChanged && path2.endsWith("package.json") && base) {
+    const merged = mergePackageJson(base, ours, theirs);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
   }
-  const block = source.slice(start, end);
-  const profiles = [...block.matchAll(/^(\s*)profile:\s*.*,$/gm)];
-  if (profiles.length !== 1) {
-    return { error: "platformAdminPageComponents profile \u951A\u70B9\u4E0D\u552F\u4E00" };
+  if (!oursChanged && targetChanged && adoptedProjectDelta && base) {
+    const merged = await mergeTextFile(base, ours, theirs);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76\u5DF2\u91C7\u7EB3\u9879\u76EE\u589E\u91CF", expected, merged.content) : conflict(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
   }
-  const profile = profiles[0];
-  const insertion = [
-    profile[0],
-    ...missing.map(({ key, value }) => `${profile[1]}"${key}": ${value},`)
-  ].join(`
-`);
-  return {
-    content: source.slice(0, start) + block.replace(profile[0], insertion) + source.slice(end)
-  };
-}
-function addComponentRouteBinding(source, target) {
-  const unionStart = source.indexOf("export type PlatformAdminPageKey =");
-  const interfaceStart = source.indexOf("export interface PlatformAdminRouteBinding", unionStart);
-  if (unionStart < 0 || interfaceStart < 0) {
-    return { error: "\u627E\u4E0D\u5230 PlatformAdminPageKey \u9879\u76EE\u951A\u70B9" };
+  if (!oursChanged) {
+    return readyPlannedFile(path2, ownership, "update", "\u4EC5 Windy \u4FEE\u6539", expected, theirs);
   }
-  const desiredPages = [
-    "ui-components",
-    ...target?.includes('routeKey: "system.agent-session"') ? ["agent-session", "agent-workflow"] : []
-  ];
-  let content = source;
-  const union = content.slice(unionStart, interfaceStart);
-  const missingPages = desiredPages.filter((page) => !union.includes(`"${page}"`));
-  if (missingPages.length) {
-    const semicolon = content.lastIndexOf(";", interfaceStart);
-    if (semicolon < unionStart) {
-      return { error: "PlatformAdminPageKey \u7ED3\u675F\u951A\u70B9\u7F3A\u5931" };
-    }
-    content = `${content.slice(0, semicolon)}
-${missingPages.map((page) => `  | "${page}"`).join(`
-`)}${content.slice(semicolon)}`;
+  if (!targetChanged) {
+    return readyPlannedFile(path2, ownership, "preserve", "\u5BA2\u6237\u5DF2\u4FEE\u6539", expected);
   }
-  const desiredBindings = [
-    { routeKey: "system.ui-components", page: "ui-components" },
-    ...target?.includes('routeKey: "system.agent-session"') ? [
-      { routeKey: "system.agent-session", page: "agent-session" },
-      { routeKey: "system.agent-workflow", page: "agent-workflow" }
-    ] : []
-  ];
-  const missingBindings = desiredBindings.filter(({ routeKey }) => !content.includes(`routeKey: "${routeKey}"`));
-  if (!missingBindings.length)
-    return { content };
-  const features = [
-    ...content.matchAll(/^(\s*)\{ routeKey: "system\.feature", page: "resource", resourceKey: "features" \},$/gm)
-  ];
-  if (features.length !== 1) {
-    return { error: "system.feature Admin Route \u951A\u70B9\u4E0D\u552F\u4E00" };
+  if (hashContent(ours) === target.hash) {
+    return readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected);
   }
-  const feature = features[0];
-  return {
-    content: content.replace(feature[0], [
-      feature[0],
-      ...missingBindings.map(({ routeKey, page }) => `${feature[1]}{ routeKey: "${routeKey}", page: "${page}" },`)
-    ].join(`
-`))
-  };
+  if (base) {
+    const merged = await mergeTextFile(base, ours, theirs);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+  }
+  return conflict(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
 }
-function preserve(input, reason) {
-  return {
-    path: input.path,
-    ownership: "project-owned",
-    action: "preserve",
-    reason,
-    expectedProjectContent: input.expected
-  };
+function shouldForcePlatformBaseline(input) {
+  return input.forcePlatformBaseline && !input.oursChanged && input.base !== undefined && hashContent(input.base) !== input.sourceArtifactHash;
 }
-function update(input, content) {
-  return {
-    path: input.path,
-    ownership: "project-owned",
-    action: "update",
-    reason: "\u7248\u672C recipe \u66F4\u65B0\u9879\u76EE\u6269\u5C55\u951A\u70B9",
-    expectedProjectContent: input.expected,
-    content
-  };
+function targetChangedSinceBase(sourceHash, base, target) {
+  return base && target ? hashContent(base) !== hashContent(target) : !!target && hashContent(target) !== sourceHash;
 }
-function conflict4(input, message) {
-  return {
-    path: input.path,
-    ownership: "project-owned",
-    action: "preserve",
-    reason: "\u5BA2\u6237\u5DF2\u4FEE\u6539",
-    expectedProjectContent: input.expected,
-    conflict: message
-  };
+async function readOptional2(path2) {
+  try {
+    return await readFile16(path2);
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return;
+    }
+    throw error;
+  }
 }
 
-// src/update/dsh-platform-recipe.ts
-import { join as join26 } from "path";
-
 // src/update/planner-snapshots.ts
-import { readFile as readFile20, stat as stat2 } from "fs/promises";
-import { join as join25 } from "path";
 async function snapshotProjectFiles(project, paths, seed) {
   const snapshots = new Map(seed);
   await Promise.all([...paths].filter((path2) => !snapshots.has(path2)).map(async (path2) => {
-    snapshots.set(path2, await readOptional(join25(project, path2)));
+    snapshots.set(path2, await readOptional(join24(project, path2)));
   }));
   return snapshots;
 }
 async function snapshotProjectModes(project, paths) {
-  return new Map(await Promise.all([...paths].map(async (path2) => [path2, await readModeOptional(join25(project, path2))])));
+  return new Map(await Promise.all([...paths].map(async (path2) => [path2, await readModeOptional(join24(project, path2))])));
 }
 async function assertPlanSnapshots(project, expectations) {
   const changed = [];
   for (const expectation2 of expectations) {
-    const actual = expectationForSnapshot(await readOptional(join25(project, expectation2.path)));
+    const actual = expectationForSnapshot(await readOptional(join24(project, expectation2.path)));
     if (JSON.stringify(actual) !== JSON.stringify(expectation2.expected)) {
       changed.push(expectation2.path);
       continue;
     }
-    if ("mode" in expectation2 && await readModeOptional(join25(project, expectation2.path)) !== expectation2.mode) {
+    if ("mode" in expectation2 && await readModeOptional(join24(project, expectation2.path)) !== expectation2.mode) {
       changed.push(expectation2.path);
     }
   }
@@ -10574,204 +10693,573 @@ async function readSourceParentMode(path2) {
     throw error;
   }
 }
-async function readOptional(path2) {
+async function readOptional(path2) {
+  try {
+    return await readFile17(path2);
+  } catch (error) {
+    if (isMissing7(error))
+      return;
+    throw error;
+  }
+}
+function isMissing7(error) {
+  return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+
+// src/update/admin-settings-yaml-plan.ts
+var transferPath = "apps/web/src/pages/settings/WatermarkYamlTransfer.vue";
+var settingsPaths = [
+  "apps/web/src/composables/useWatermarkSettings.ts",
+  "apps/web/src/pages/settings/GlobalSettingsPage.vue",
+  "apps/web/src/pages/settings/WatermarkSettingsSection.vue",
+  "apps/web/src/pages/settings/BrandingSettingsSection.vue"
+];
+async function reconcileAdminSettingsYamlPlan(input) {
+  if (input.sourceEntries.has(transferPath) || !input.targetEntries.has(transferPath))
+    return;
+  for (const path2 of settingsPaths) {
+    const plan = input.files.find((file) => file.path === path2);
+    if (!plan || !input.sourceEntries.has(path2))
+      continue;
+    const [base, target] = await Promise.all([
+      readOptional(join25(input.baseDirectory, path2)),
+      readOptional(join25(input.targetDirectory, path2))
+    ]);
+    const current = input.projectSnapshots.get(path2);
+    if (current && target && hashContent(current) === hashContent(target))
+      continue;
+    if (!base || !current || !target || hashContent(base) !== hashContent(current)) {
+      plan.conflict = "\u5168\u5C40\u8BBE\u7F6E YAML \u8FC1\u79FB\u9700\u8981\u5408\u5E76\u5DF2\u81EA\u5B9A\u4E49\u7684\u9879\u76EE\u6587\u4EF6";
+      continue;
+    }
+    plan.action = "update";
+    plan.reason = "\u8865\u9F50\u5168\u5C40\u8BBE\u7F6E YAML \u7684\u914D\u5957\u9875\u9762\u4E0E API";
+    plan.content = target;
+    delete plan.conflict;
+  }
+}
+
+// src/update/environment-mount-plan.ts
+var environmentProfile = "windy.environment.yaml";
+var generatedMount = "./windy.environment.yaml:/app/windy.environment.yaml:ro";
+function validateEnvironmentMountPlan(files, currentProfile) {
+  const compose = files.find(({ path: path2 }) => path2 === "docker-compose.yml");
+  if (!compose?.content || compose.action !== "create" && compose.action !== "update" || compose.conflict || !new TextDecoder().decode(compose.content).includes(generatedMount))
+    return;
+  const profile = files.find(({ path: path2 }) => path2 === environmentProfile);
+  const available = profile?.action === "create" || profile?.action === "update" ? profile.content !== undefined : profile?.action !== "delete" && currentProfile !== undefined;
+  if (available)
+    return;
+  compose.action = "preserve";
+  delete compose.content;
+  compose.conflict = "\u76EE\u6807 Compose \u9700\u8981\u6302\u8F7D windy.environment.yaml\uFF0C\u8BF7\u5148\u6062\u590D\u9879\u76EE\u7684\u73AF\u5883\u914D\u7F6E\u6587\u4EF6";
+}
+
+// src/update/media-runtime-registry.ts
+function reconcileMediaRuntimeRegistry(files, current, sourceModules, targetModules) {
+  if (!current || !sourceModules.includes("system.agent") || sourceModules.includes("system.media-runtime") || !targetModules.includes("system.media-runtime"))
+    return;
+  const file = files.find(({ path: path2 }) => path2 === projectModuleRegistryPath);
+  if (!file)
+    throw new Error("\u5A92\u4F53\u8FD0\u884C\u65F6\u8FC1\u79FB\u7F3A\u5C11\u9879\u76EE\u6A21\u5757\u88C5\u914D\u6E05\u5355");
+  const registry = parseProjectModuleRegistry(current);
+  if (registry.modules.some(({ name }) => name === "system.media-runtime"))
+    return;
+  if (!registry.modules.find(({ name }) => name === "system.agent")?.enabled) {
+    file.conflict = "\u65E7 Agent \u88C5\u914D\u5DF2\u505C\u7528\u6216\u7F3A\u5931\uFF0C\u8BF7\u5148\u660E\u786E\u5A92\u4F53\u8FD0\u884C\u65F6\u7684\u4EA4\u4ED8\u8303\u56F4";
+    return;
+  }
+  const orders = new Set(registry.modules.map(({ order: order2 }) => order2));
+  const lastOrder = Math.max(0, ...orders);
+  let order = lastOrder + 100;
+  if (!Number.isSafeInteger(order)) {
+    order = 0;
+    while (orders.has(order))
+      order += 1;
+  }
+  registry.modules.push({
+    name: "system.media-runtime",
+    package: null,
+    enabled: true,
+    order,
+    admin: { visible: true },
+    config: {}
+  });
+  file.action = "update";
+  file.reason = "\u6CE8\u518C\u65E7 Agent \u4EA4\u4ED8\u4E2D\u5DF2\u6709\u7684\u5A92\u4F53\u8FD0\u884C\u65F6";
+  file.content = new TextEncoder().encode(`${JSON.stringify(registry, null, 2)}
+`);
+  delete file.conflict;
+}
+
+// src/update/planner.ts
+import { readFile as readFile23 } from "fs/promises";
+import { dirname as dirname9, join as join30 } from "path";
+
+// src/update/docker-copy-update-plan.ts
+async function deriveDockerfilePlans(files, snapshots, paths, targetWorkspaceManifests) {
+  const rootPackage = virtualPathContent("package.json", files, snapshots, targetWorkspaceManifests);
+  if (!rootPackage)
+    return;
+  const rootManifest = parsePackage(rootPackage, "package.json");
+  const workspacePatterns = rootManifest.workspaces ?? [];
+  const packages = [];
+  for (const path2 of [
+    ...new Set([...paths, ...targetWorkspaceManifests.keys()])
+  ].filter((path3) => path3.endsWith("package.json"))) {
+    const directory = path2 === "package.json" ? "." : path2.slice(0, -13);
+    if (directory === ".")
+      continue;
+    if (!workspacePatterns.some((pattern) => matchesWorkspace(pattern, directory))) {
+      continue;
+    }
+    const content = virtualPathContent(path2, files, snapshots, targetWorkspaceManifests);
+    if (!content)
+      continue;
+    const manifest = parsePackage(content, path2);
+    packages.push({
+      name: manifest.name,
+      directory,
+      dependencies: [
+        ...Object.keys(manifest.dependencies ?? {}),
+        ...Object.keys(manifest.devDependencies ?? {})
+      ],
+      workspaceDependencies: Object.entries({
+        ...manifest.dependencies,
+        ...manifest.devDependencies
+      }).filter(([, range]) => range.startsWith("workspace:")).map(([name]) => name)
+    });
+  }
+  packages.sort((left, right) => left.directory.localeCompare(right.directory));
+  for (const target of dockerfileCopyTargets) {
+    const dockerPlan = files.find(({ path: path2 }) => path2 === target.dockerfilePath);
+    if (!dockerPlan || dockerPlan.conflict)
+      continue;
+    const dockerSource = virtualContent(dockerPlan, snapshots);
+    if (!dockerSource)
+      continue;
+    const source = new TextDecoder().decode(dockerSource);
+    if (!hasDockerfileCopyAnchors(source, target)) {
+      dockerPlan.conflict = "Dockerfile \u7F3A\u5C11 0.6.6 \u57FA\u7EBF\u7684 COPY \u951A\u70B9\uFF0C\u5DF2\u505C\u6B62\u81EA\u52A8\u8FC1\u79FB\u65E7\u683C\u5F0F";
+      continue;
+    }
+    let next;
+    try {
+      next = syncDockerfileSource(source, target, packages);
+    } catch (error) {
+      dockerPlan.conflict = error instanceof Error ? error.message : "Docker COPY \u951A\u70B9\u65E0\u6548";
+      continue;
+    }
+    if (next === source)
+      continue;
+    dockerPlan.action = "update";
+    dockerPlan.reason = "\u6309\u4E8B\u52A1\u5B89\u5168 workspace \u89C6\u56FE\u540C\u6B65 Docker COPY \u6E05\u5355";
+    dockerPlan.content = new TextEncoder().encode(next);
+  }
+}
+function virtualPathContent(path2, files, snapshots, targetWorkspaceManifests) {
+  const plan = files.find((item) => item.path === path2);
+  return plan ? virtualContent(plan, snapshots) : snapshots.get(path2) ?? targetWorkspaceManifests.get(path2);
+}
+function virtualContent(plan, snapshots) {
+  if (plan.action === "delete")
+    return;
+  if (plan.action === "create" || plan.action === "update")
+    return plan.content;
+  return snapshots.get(plan.path);
+}
+function parsePackage(content, path2) {
   try {
-    return await readFile20(path2);
+    return JSON.parse(new TextDecoder().decode(content));
   } catch (error) {
-    if (isMissing7(error))
-      return;
-    throw error;
+    throw new Error(`\u65E0\u6CD5\u89E3\u6790 Docker workspace \u8F93\u5165\uFF1A${path2}`, {
+      cause: error
+    });
   }
 }
-function isMissing7(error) {
-  return error instanceof Error && "code" in error && error.code === "ENOENT";
+function matchesWorkspace(pattern, directory) {
+  return pattern.endsWith("/*") && directory.startsWith(pattern.slice(0, -1));
 }
 
-// src/update/dsh-platform-recipe.ts
-var dshPlatformRecipeId = "dsh-platform-v1";
-var dshPlatformRecipePaths = new Set([
-  "apps/server/src/app/agent-workflow-presets.ts",
-  "apps/server/src/app/workbench-public-origin.ts",
-  "apps/web/src/router/index.ts",
-  "apps/web/src/router/platform-admin-pages.ts",
-  "apps/web/src/router/platform-admin-route-bindings.ts",
-  "apps/web/src/composables/useLoginFlow.ts",
-  "apps/web/src/pages/system/AgentWorkflowPage.vue",
-  "apps/web/src/services/agent-workflow-api.ts",
-  "apps/web/vite.config.ts",
-  "apps/web/server.ts",
-  "apps/web/runtime-server.ts",
-  "apps/web/dev/start.ts"
-]);
-function isDshPlatformRecipePath(path2) {
-  return dshPlatformRecipePaths.has(path2) || path2.startsWith("apps/server/src/app/dsh-") && path2.endsWith(".ts");
-}
-async function isDshPlatformTransition(input) {
-  if (!input.sourceModules.includes("system.agent") || !input.targetModules.includes("system.agent"))
-    return false;
-  const path2 = "apps/agent-server/package.json";
-  const [base, target] = await Promise.all([
-    readOptional(join26(input.baseDirectory, path2)),
-    readOptional(join26(input.targetDirectory, path2))
-  ]);
-  return hasDsh(target) && !hasDsh(base);
+// src/update/migration-reconciler.ts
+import { readFile as readFile21 } from "fs/promises";
+import { join as join28 } from "path";
+
+// src/update/migration-adoption.ts
+import { readFile as readFile20 } from "fs/promises";
+import { join as join27 } from "path";
+
+// src/update/migration-project-file.ts
+import { readFile as readFile18 } from "fs/promises";
+import { join as join26 } from "path";
+async function readProjectJson(input, path2) {
+  const content = await readProjectFile(input, path2);
+  if (!content) {
+    const error = new Error(`\u5F53\u524D\u9879\u76EE\u6587\u4EF6\u7F3A\u5931\uFF1A${path2}`);
+    error.code = "ENOENT";
+    throw error;
+  }
+  return JSON.parse(new TextDecoder().decode(content));
 }
-function planDshPlatformFile(input) {
-  const common2 = {
-    path: input.path,
-    ownership: input.ownership,
-    expectedProjectContent: input.expected
-  };
-  if (input.target && input.ours && hashContent(input.ours) === hashContent(input.target)) {
-    return {
-      ...common2,
-      action: "preserve",
-      reason: "\u5DF2\u5305\u542B DSH \u5E73\u53F0\u63A5\u7EBF\u76EE\u6807\u5185\u5BB9"
-    };
+async function readProjectFile(input, path2) {
+  if (input.projectSnapshots?.has(path2)) {
+    return input.projectSnapshots.get(path2);
   }
-  if (input.target && !input.ours && !input.base) {
-    return {
-      ...common2,
-      action: "create",
-      reason: "DSH \u5E73\u53F0\u65B0\u589E\u9879\u76EE\u6269\u5C55\u70B9",
-      content: input.target
-    };
+  let content;
+  try {
+    content = await readFile18(join26(input.projectDirectory, path2));
+  } catch (error) {
+    if (!isMissingFileError(error))
+      throw error;
   }
-  if (input.target && input.base && input.ours && hashContent(input.ours) === hashContent(input.base)) {
-    return {
-      ...common2,
-      action: "update",
-      reason: "DSH \u5E73\u53F0\u5347\u7EA7\u7CBE\u786E\u6765\u6E90\u63A5\u7EBF",
-      content: input.target
-    };
+  if (input.projectSnapshots) {
+    input.projectSnapshots.set(path2, content);
   }
-  return {
-    ...common2,
-    action: "preserve",
-    reason: "\u4FDD\u7559\u5BA2\u6237 DSH \u63A5\u7EBF",
-    conflict: "DSH \u5E73\u53F0\u63A5\u7EBF\u4E0E\u7CBE\u786E\u6765\u6E90\u6216\u76EE\u6807\u4E0D\u4E00\u81F4\uFF1B\u8BF7\u5BA1\u6838\u9879\u76EE\u4FEE\u6539\u540E\u663E\u5F0F\u96C6\u6210\uFF0C\u7981\u6B62\u731C\u6D4B\u8986\u76D6"
-  };
+  return content;
 }
-function hasDsh(content) {
-  if (!content)
-    return false;
-  const value = JSON.parse(new TextDecoder().decode(content));
-  return typeof value.dependencies?.["@deepseek-ai/dsh"] === "string";
+function isMissingFileError(error) {
+  return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
 
-// src/update/planner-file.ts
-async function planFile(path2, baseRoot, targetRoot, source, target, ours, provenance, targetContentOverride, manageGeneratedProjectOwned = false, forcePlatformBaseline = false, manageRecipeProjectOwned = false, migrateDshPlatform = false) {
-  const [base, theirs] = await Promise.all([
-    readOptional2(join27(baseRoot, path2)),
-    targetContentOverride ? Promise.resolve(targetContentOverride) : readOptional2(join27(targetRoot, path2))
-  ]);
-  const ownership = source?.ownership ?? target?.ownership ?? classifyOwnership(path2);
-  const expected = expectationForSnapshot(ours);
-  if (migrateDshPlatform && isDshPlatformRecipePath(path2)) {
-    return planDshPlatformFile({
-      path: path2,
-      ownership,
-      ours,
-      base,
-      target: theirs,
-      expected
-    });
+// src/update/migration-history.ts
+import { readFile as readFile19 } from "fs/promises";
+var drizzleRoot = "packages/database/drizzle";
+var journalPath = `${drizzleRoot}/meta/_journal.json`;
+var migrationPattern = /^(\d{4})_(.+)$/;
+function snapshotPath(tag) {
+  const match = migrationPattern.exec(tag);
+  if (!match) {
+    throw new Error(`${journalPath}\uFF1Amigration tag \u683C\u5F0F\u65E0\u6548\uFF1A${tag}`);
   }
-  if (ownership === "project-owned") {
-    const hasExistingRecipeSource = source !== undefined && source.state !== "missing" && ours !== undefined;
-    if (manageRecipeProjectOwned && target && (hasExistingRecipeSource || recipeCanManageMissingProjectOwnedPath(path2))) {
-      return planRecipeProjectOwned({ path: path2, ours, target: theirs, expected });
+  return `${drizzleRoot}/meta/${match[1]}_snapshot.json`;
+}
+function validateUniqueNames(journal, label, conflicts) {
+  const seen = new Set;
+  for (const { tag } of journal.entries) {
+    const name = stableName(tag);
+    if (seen.has(name)) {
+      conflicts.push(`${journalPath}\uFF1A${label}\u5B58\u5728\u91CD\u590D migration \u540D\u79F0 ${name}`);
     }
-    if (manageGeneratedProjectOwned) {
-      return planGeneratedProjectOwned(path2, source, target, ours, theirs, expected);
+    seen.add(name);
+  }
+}
+function stableName(tag) {
+  return migrationPattern.exec(tag)?.[2] ?? tag;
+}
+function highestPrefix(journal) {
+  return Math.max(-1, ...journal.entries.map(({ tag }) => Number(migrationPattern.exec(tag)?.[1] ?? -1)));
+}
+function highestIndex(journal) {
+  return Math.max(-1, ...journal.entries.map(({ idx }) => idx));
+}
+function isDrizzleHistoryPath(path2) {
+  return path2 === journalPath || isMigrationArtifact(path2);
+}
+function isMigrationArtifact(path2) {
+  return isSqlMigration(path2) || new RegExp(`^${drizzleRoot}/meta/\\d{4}_snapshot\\.json$`).test(path2);
+}
+function isSqlMigration(path2) {
+  return new RegExp(`^${drizzleRoot}/\\d{4}_.+\\.sql$`).test(path2);
+}
+function managedEntry(path2, content) {
+  return { path: path2, ownership: "windy-managed", hash: hashContent(content) };
+}
+function deduplicate(files) {
+  return [...new Map(files.map((entry) => [entry.path, entry])).values()];
+}
+function encodeJson(value) {
+  return new TextEncoder().encode(`${JSON.stringify(value, null, 2)}
+`);
+}
+async function readJson(path2) {
+  return JSON.parse(await readFile19(path2, "utf8"));
+}
+
+// src/update/snapshot-delta.ts
+function applySnapshotDelta(before, after, current, path2, conflicts, conflictPath) {
+  if (deepEqual(before, after))
+    return structuredClone(current);
+  if (!isRecord(before) || !isRecord(after) || !isRecord(current)) {
+    if (deepEqual(current, before) || deepEqual(current, after)) {
+      return structuredClone(after);
     }
-    return !source && !ours && theirs ? readyPlannedFile(path2, ownership, "create", "\u65B0\u589E\u9879\u76EE\u6269\u5C55\u70B9", expected, theirs) : readyPlannedFile(path2, ownership, "preserve", "\u9ED8\u8BA4\u4FDD\u7559\u9879\u76EE\u7248\u672C", expected);
+    conflicts.push(`${conflictPath}\uFF1A\u5E73\u53F0\u4E0E\u4E1A\u52A1\u540C\u65F6\u4FEE\u6539 snapshot \u8282\u70B9 ${path2.join(".") || "<root>"}`);
+    return structuredClone(current);
   }
-  if (path2.startsWith("packages/database/drizzle/") && path2.endsWith(".sql")) {
-    if (source && !target) {
-      return conflict(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
+  const merged = structuredClone(current);
+  const keys = new Set([...Object.keys(before), ...Object.keys(after)]);
+  for (const key of keys) {
+    if (path2.length === 0 && (key === "id" || key === "prevId"))
+      continue;
+    const nextPath = [...path2, key];
+    if (!(key in after)) {
+      if (!(key in current))
+        continue;
+      if (deepEqual(current[key], before[key]))
+        delete merged[key];
+      else
+        conflicts.push(`${conflictPath}\uFF1A\u5E73\u53F0\u5220\u9664\u4E86\u4E1A\u52A1\u5DF2\u4FEE\u6539\u7684 snapshot \u8282\u70B9 ${nextPath.join(".")}`);
+      continue;
     }
-    if (source && target && source.hash !== target.hash) {
-      return conflict(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
+    if (!(key in before)) {
+      if (!(key in current) || deepEqual(current[key], after[key])) {
+        merged[key] = structuredClone(after[key]);
+      } else {
+        conflicts.push(`${conflictPath}\uFF1A\u5E73\u53F0\u65B0\u589E\u7684 snapshot \u8282\u70B9\u5DF2\u88AB\u4E1A\u52A1\u5360\u7528 ${nextPath.join(".")}`);
+      }
+      continue;
     }
+    merged[key] = applySnapshotDelta(before[key], after[key], current[key], nextPath, conflicts, conflictPath);
   }
-  if (!source && target) {
-    if (!ours) {
-      return readyPlannedFile(path2, ownership, "create", "\u76EE\u6807\u7248\u672C\u65B0\u589E", expected, theirs);
+  return merged;
+}
+function isRecord(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function deepEqual(left, right) {
+  return JSON.stringify(left) === JSON.stringify(right);
+}
+
+// src/update/migration-adoption.ts
+async function inspectPreexistingMigrationAdoptions(input) {
+  const conflicts = [];
+  const adoptions = [];
+  const projectByName = new Map(input.project.entries.map((entry) => [stableName(entry.tag), entry]));
+  for (const candidate of input.candidates) {
+    const name = stableName(candidate.tag);
+    const projectEntry = projectByName.get(name);
+    if (!projectEntry || input.managedNames.has(name))
+      continue;
+    const targetPosition = input.target.entries.indexOf(candidate);
+    const projectPosition = input.project.entries.indexOf(projectEntry);
+    const previousTarget = input.target.entries[targetPosition - 1];
+    const previousProject = input.project.entries[projectPosition - 1];
+    if (!previousTarget || !previousProject) {
+      conflicts.push(`${journalPath}\uFF1A\u65E0\u6CD5\u91C7\u7EB3\u73B0\u6709\u5E73\u53F0 migration ${name}\uFF0C\u7F3A\u5C11\u524D\u7F6E\u5386\u53F2`);
+      continue;
+    }
+    const projectSqlPath = `${drizzleRoot}/${projectEntry.tag}.sql`;
+    const projectSnapshotPath = snapshotPath(projectEntry.tag);
+    const [
+      targetSql,
+      projectSql,
+      targetBefore,
+      targetAfter,
+      projectBeforeBytes,
+      projectAfterBytes
+    ] = await Promise.all([
+      readFile20(join27(input.targetDirectory, `${drizzleRoot}/${candidate.tag}.sql`)),
+      readProjectFile(input, projectSqlPath),
+      readJson(join27(input.targetDirectory, snapshotPath(previousTarget.tag))),
+      readJson(join27(input.targetDirectory, snapshotPath(candidate.tag))),
+      readProjectFile(input, snapshotPath(previousProject.tag)),
+      readProjectFile(input, projectSnapshotPath)
+    ]);
+    if (!projectSql || !projectBeforeBytes || !projectAfterBytes) {
+      conflicts.push(`${journalPath}\uFF1A\u65E0\u6CD5\u91C7\u7EB3\u73B0\u6709\u5E73\u53F0 migration ${name}\uFF0C\u9879\u76EE migration \u6587\u4EF6\u4E0D\u5B8C\u6574`);
+      continue;
     }
-    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
-  }
-  if (source && !target) {
-    if (!ours) {
-      return readyPlannedFile(path2, ownership, "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
+    const projectBefore = decodeSnapshot(projectBeforeBytes);
+    const projectAfter = decodeSnapshot(projectAfterBytes);
+    const reason = validateAdoption({
+      targetSql,
+      projectSql,
+      targetBefore,
+      targetAfter,
+      projectBefore,
+      projectAfter
+    });
+    if (reason) {
+      conflicts.push(`${journalPath}\uFF1A\u65E0\u6CD5\u91C7\u7EB3\u73B0\u6709\u5E73\u53F0 migration ${name}\uFF0C${reason}`);
+      continue;
     }
-    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
-  }
-  if (source && target && !ours) {
-    return readyPlannedFile(path2, "project-owned", "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
-  }
-  if (!source || !target || !ours || !theirs) {
-    return conflict(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
-  }
-  const oursChanged = hashContent(ours) !== source.hash;
-  const sourceArtifactHash = artifactHashOf(source);
-  const targetChanged = targetChangedSinceBase(sourceArtifactHash, base, theirs);
-  const adoptedProjectDelta = source.artifactHash !== undefined && source.artifactHash !== source.hash;
-  const forceTargetBaseline = !adoptedProjectDelta && shouldForcePlatformBaseline({
-    forcePlatformBaseline,
-    oursChanged,
-    sourceArtifactHash,
-    base
-  });
-  if (forceTargetBaseline && path2.endsWith("package.json") && base) {
-    const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+    adoptions.push({
+      sqlPath: projectSqlPath,
+      snapshotPath: projectSnapshotPath,
+      sql: projectSql,
+      snapshot: projectAfterBytes
+    });
   }
-  if (forceTargetBaseline) {
-    return readyPlannedFile(path2, ownership, "update", "\u5F3A\u5236\u91C7\u7528\u76EE\u6807\u5E73\u53F0\u57FA\u7EBF", expected, theirs);
+  return { adoptions, conflicts };
+}
+function validateAdoption(input) {
+  if (!equalBytes(input.targetSql, input.projectSql)) {
+    return "SQL \u5185\u5BB9\u4E0D\u4E00\u81F4";
   }
-  if (!oursChanged && !targetChanged) {
-    return readyPlannedFile(path2, ownership, "preserve", "\u53CC\u65B9\u672A\u4FEE\u6539", expected);
+  if (input.projectAfter.prevId !== input.projectBefore.id) {
+    return "\u9879\u76EE snapshot lineage \u4E0D\u8FDE\u7EED";
   }
-  if (targetChanged && path2.endsWith("package.json") && base) {
-    const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+  const deltaConflicts = [];
+  const expected = applySnapshotDelta(input.targetBefore, input.targetAfter, input.projectBefore, [], deltaConflicts, journalPath);
+  if (deltaConflicts.length || canonicalSnapshot(expected) !== canonicalSnapshot(input.projectAfter)) {
+    return "snapshot delta \u4E0E\u9879\u76EE\u5386\u53F2\u4E0D\u4E00\u81F4";
   }
-  if (!oursChanged && targetChanged && adoptedProjectDelta && base) {
-    const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76\u5DF2\u91C7\u7EB3\u9879\u76EE\u589E\u91CF", expected, merged.content) : conflict(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+}
+function decodeSnapshot(content) {
+  return JSON.parse(new TextDecoder().decode(content));
+}
+function equalBytes(left, right) {
+  return left.byteLength === right.byteLength && left.every((value, index) => value === right[index]);
+}
+function canonicalSnapshot(value) {
+  return JSON.stringify(canonicalize(value, true));
+}
+function canonicalize(value, root = false) {
+  if (Array.isArray(value))
+    return value.map((item) => canonicalize(item));
+  if (!value || typeof value !== "object")
+    return value;
+  return Object.fromEntries(Object.entries(value).filter(([key]) => !root || key !== "id" && key !== "prevId").sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => [key, canonicalize(item)]));
+}
+
+// src/update/migration-reconciler.ts
+async function reconcileDrizzleMigrations(input) {
+  const journals = await readJournals(input);
+  if (!journals) {
+    return unchanged(input.targetManifest);
   }
-  if (!oursChanged) {
-    return readyPlannedFile(path2, ownership, "update", "\u4EC5 Windy \u4FEE\u6539", expected, theirs);
+  const { base, project, target } = journals;
+  const conflicts = [];
+  validateUniqueNames(base, "\u6765\u6E90\u6A21\u677F", conflicts);
+  validateUniqueNames(project, "\u5F53\u524D\u9879\u76EE", conflicts);
+  validateUniqueNames(target, "\u76EE\u6807\u6A21\u677F", conflicts);
+  if (conflicts.length) {
+    return { ...unchanged(input.targetManifest), conflicts };
   }
-  if (!targetChanged) {
-    return readyPlannedFile(path2, ownership, "preserve", "\u5BA2\u6237\u5DF2\u4FEE\u6539", expected);
+  const baseNames = new Set(base.entries.map(({ tag }) => stableName(tag)));
+  const projectNames = new Set(project.entries.map(({ tag }) => stableName(tag)));
+  const managedNames = new Set(input.sourceManifest.files.filter(({ path: path2 }) => isSqlMigration(path2)).map(({ path: path2 }) => stableName(path2.slice(drizzleRoot.length + 1, -4))));
+  const candidates = target.entries.filter(({ tag }) => !baseNames.has(stableName(tag)));
+  const adoption = await inspectPreexistingMigrationAdoptions({
+    ...input,
+    project,
+    target,
+    candidates,
+    managedNames
+  });
+  conflicts.push(...adoption.conflicts);
+  const additions = candidates.filter(({ tag }) => !projectNames.has(stableName(tag)));
+  const contentOverrides = new Map;
+  const files = await preservePublishedHistory(input.sourceManifest, input, contentOverrides);
+  const publishedPaths = new Set(files.map(({ path: path2 }) => path2));
+  for (const adopted of adoption.adoptions) {
+    contentOverrides.set(adopted.sqlPath, adopted.sql);
+    contentOverrides.set(adopted.snapshotPath, adopted.snapshot);
+    files.push(managedEntry(adopted.sqlPath, adopted.sql), managedEntry(adopted.snapshotPath, adopted.snapshot));
+    publishedPaths.add(adopted.sqlPath);
+    publishedPaths.add(adopted.snapshotPath);
   }
-  if (hashContent(ours) === target.hash) {
-    return readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected);
+  files.push(...input.targetManifest.files.filter(({ path: path2 }) => !isDrizzleHistoryPath(path2)));
+  if (!additions.length) {
+    const journalContent2 = encodeJson(project);
+    contentOverrides.set(journalPath, journalContent2);
+    files.push(managedEntry(journalPath, journalContent2));
+    return result(input.targetManifest, files, contentOverrides, publishedPaths, conflicts);
   }
-  if (base) {
-    const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+  let nextPrefix = highestPrefix(project) + 1;
+  let nextIndex = highestIndex(project) + 1;
+  let previousWhen = project.entries.at(-1)?.when ?? 0;
+  let currentSnapshot = await readLatestSnapshot(input, project);
+  const mergedJournal = structuredClone(project);
+  for (const addition of additions) {
+    const targetPosition = target.entries.indexOf(addition);
+    const previousTarget = target.entries[targetPosition - 1];
+    if (!previousTarget) {
+      conflicts.push(`${journalPath}\uFF1A\u76EE\u6807 migration \u7F3A\u5C11\u524D\u7F6E\u5FEB\u7167`);
+      break;
+    }
+    const targetBefore = await readSnapshot(input.targetDirectory, previousTarget.tag);
+    const targetAfter = await readSnapshot(input.targetDirectory, addition.tag);
+    const merged = applySnapshotDelta(targetBefore, targetAfter, currentSnapshot, [], conflicts, journalPath);
+    if (conflicts.length)
+      break;
+    const prefix = String(nextPrefix).padStart(4, "0");
+    const name = stableName(addition.tag);
+    const tag = `${prefix}_${name}`;
+    const sqlPath = `${drizzleRoot}/${tag}.sql`;
+    const snapshotPath2 = `${drizzleRoot}/meta/${prefix}_snapshot.json`;
+    const sql = await readFile21(join28(input.targetDirectory, `${drizzleRoot}/${addition.tag}.sql`));
+    merged.id = targetAfter.id;
+    merged.prevId = currentSnapshot.id;
+    const snapshot2 = encodeJson(merged);
+    contentOverrides.set(sqlPath, sql);
+    contentOverrides.set(snapshotPath2, snapshot2);
+    files.push(managedEntry(sqlPath, sql), managedEntry(snapshotPath2, snapshot2));
+    previousWhen = Math.max(previousWhen + 1, addition.when);
+    mergedJournal.entries.push({
+      ...addition,
+      idx: nextIndex,
+      when: previousWhen,
+      tag
+    });
+    currentSnapshot = merged;
+    nextPrefix += 1;
+    nextIndex += 1;
   }
-  return conflict(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
+  const journalContent = encodeJson(mergedJournal);
+  contentOverrides.set(journalPath, journalContent);
+  files.push(managedEntry(journalPath, journalContent));
+  return result(input.targetManifest, files, contentOverrides, publishedPaths, conflicts);
 }
-function shouldForcePlatformBaseline(input) {
-  return input.forcePlatformBaseline && !input.oursChanged && input.base !== undefined && hashContent(input.base) !== input.sourceArtifactHash;
+function result(targetManifest, files, contentOverrides, forcePreserves, conflicts) {
+  return {
+    targetManifest: {
+      ...targetManifest,
+      files: deduplicate(files).sort((left, right) => left.path.localeCompare(right.path))
+    },
+    contentOverrides,
+    forceUpdates: new Set([journalPath]),
+    forcePreserves,
+    conflicts
+  };
 }
-function targetChangedSinceBase(sourceHash, base, target) {
-  return base && target ? hashContent(base) !== hashContent(target) : !!target && hashContent(target) !== sourceHash;
+function unchanged(targetManifest) {
+  return {
+    targetManifest,
+    contentOverrides: new Map,
+    forceUpdates: new Set,
+    forcePreserves: new Set,
+    conflicts: []
+  };
 }
-async function readOptional2(path2) {
+async function readJournals(input) {
   try {
-    return await readFile21(path2);
+    const [base, project, target] = await Promise.all([
+      readJson(join28(input.baseDirectory, journalPath)),
+      readProjectJson(input, journalPath),
+      readJson(join28(input.targetDirectory, journalPath))
+    ]);
+    return { base, project, target };
   } catch (error) {
-    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+    if (isMissingFileError(error))
       return;
-    }
     throw error;
   }
 }
+async function preservePublishedHistory(manifest, input, overrides) {
+  const entries = manifest.files.filter(({ path: path2 }) => isMigrationArtifact(path2) && path2 !== journalPath);
+  await Promise.all(entries.map(async ({ path: path2 }) => {
+    const content = await readProjectFile(input, path2);
+    if (!content)
+      throw new Error(`\u5F53\u524D\u9879\u76EE migration \u6587\u4EF6\u7F3A\u5931\uFF1A${path2}`);
+    overrides.set(path2, content);
+  }));
+  return entries;
+}
+async function readLatestSnapshot(input, journal) {
+  const latest = journal.entries.at(-1);
+  if (!latest)
+    throw new Error(`${journalPath}\uFF1A\u5F53\u524D\u9879\u76EE\u6CA1\u6709 migration`);
+  const path2 = snapshotPath(latest.tag);
+  const content = await readProjectFile(input, path2);
+  if (!content) {
+    throw new Error(`\u5F53\u524D\u9879\u76EE migration \u6587\u4EF6\u7F3A\u5931\uFF1A${path2}`);
+  }
+  return JSON.parse(new TextDecoder().decode(content));
+}
+async function readSnapshot(root, tag) {
+  return await readJson(join28(root, snapshotPath(tag)));
+}
 
 // src/update/planner-files.ts
 var metadataPaths = new Set([
@@ -10852,17 +11340,9 @@ async function assertNoPendingUpdate(projectDirectory) {
   throw new Error(`\u68C0\u6D4B\u5230\u672A\u5B8C\u6210\u66F4\u65B0\uFF08\u9636\u6BB5\uFF1A${pending.phase ?? "ready"}\uFF09\uFF0C\u8BF7\u5148\u8FD0\u884C bun run windy doctor --repair`);
 }
 
-// src/update/module-selection.ts
-function resolveUpdateTargetModules(sourceModules, explicitTarget) {
-  return explicitTarget ? [...explicitTarget] : resolveModuleSelection({
-    requested: sourceModules,
-    includeRecommended: false
-  });
-}
-
 // src/update/legacy-python-agent-retirement.ts
 import { lstat as lstat8, readFile as readFile22 } from "fs/promises";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 var retiredKeys = [
   "AGENT_DATABASE_URL",
   "AGENT_RUN_STORE_PATH",
@@ -10873,7 +11353,7 @@ var retiredKeys = [
   "OTEL_EXPORTER_OTLP_HEADERS"
 ];
 async function inspectPythonAgentRetirement(projectDirectory) {
-  const path2 = join28(projectDirectory, ".env");
+  const path2 = join29(projectDirectory, ".env");
   try {
     const stat3 = await lstat8(path2);
     if (stat3.isSymbolicLink() || !stat3.isFile())
@@ -10906,7 +11386,7 @@ var oxcManagedPaths = new Set([
 ]);
 async function createUpdatePlan(request, artifacts, dependencies = {}) {
   await assertProjectReadyForUpdate(request.projectDirectory);
-  const manifestPath = join29(request.projectDirectory, ".windy/files.json");
+  const manifestPath = join30(request.projectDirectory, ".windy/files.json");
   const expectedManifestHash = hashContent(await readFile23(manifestPath));
   const generationSnapshot = await readGenerationProvenanceSnapshot(request.projectDirectory);
   const provenance = generationSnapshot.provenance;
@@ -10964,10 +11444,10 @@ async function createUpdatePlan(request, artifacts, dependencies = {}) {
   const paths = new Set([...sourceEntries.keys(), ...targetEntries.keys()]);
   for (const path2 of paths) {
     if (!projectSnapshots.has(path2)) {
-      projectSnapshots.set(path2, await readOptional(join29(request.projectDirectory, path2)));
+      projectSnapshots.set(path2, await readOptional(join30(request.projectDirectory, path2)));
     }
     if (!projectModes.has(path2)) {
-      projectModes.set(path2, await readModeOptional(join29(request.projectDirectory, path2)));
+      projectModes.set(path2, await readModeOptional(join30(request.projectDirectory, path2)));
     }
   }
   const files = await planFiles({
@@ -10983,19 +11463,31 @@ async function createUpdatePlan(request, artifacts, dependencies = {}) {
     recipeProjectOwnedPaths,
     migrateDshPlatform
   });
+  if (!request.lifecycle) {
+    reconcileMediaRuntimeRegistry(files, projectSnapshots.get(projectModuleRegistryPath), provenance.modules.map(({ name }) => name), targetProvenance.modules.map(({ name }) => name));
+  }
+  await reconcileAdminSettingsYamlPlan({
+    files,
+    sourceEntries,
+    targetEntries,
+    projectSnapshots,
+    baseDirectory: artifactSet.baseDirectory,
+    targetDirectory: artifactSet.targetDirectory
+  });
   preserveTestsForExistingProjectOwnedSources(files, sourceEntries);
   await deriveDockerfilePlans(files, projectSnapshots, new Set([
     ...paths,
     ...workspaceSnapshot.manifests.keys(),
     ...targetWorkspaceSnapshot.manifests.keys()
   ]), targetWorkspaceSnapshot.manifests);
+  validateEnvironmentMountPlan(files, projectSnapshots.get("windy.environment.yaml"));
   for (const file of files) {
     file.expectedProjectMode = projectModes.get(file.path);
     if (file.action === "create" || file.action === "update") {
-      file.mode = file.expectedProjectMode ?? await readModeOptional(join29(artifactSet.targetDirectory, file.path));
+      file.mode = file.expectedProjectMode ?? await readModeOptional(join30(artifactSet.targetDirectory, file.path));
     }
     if (file.action === "create") {
-      file.parentMode = await readSourceParentMode(join29(artifactSet.targetDirectory, dirname9(file.path)));
+      file.parentMode = await readSourceParentMode(join30(artifactSet.targetDirectory, dirname9(file.path)));
     }
   }
   const plannedPaths = new Set(files.map(({ path: path2 }) => path2));
@@ -11129,7 +11621,7 @@ function frozenManifestHash(file, finalizedHashes) {
 // src/update/format-stabilizer.ts
 import { mkdir as mkdir8, mkdtemp as mkdtemp3, readFile as readFile24, rm as rm7, writeFile as writeFile13 } from "fs/promises";
 import { tmpdir as tmpdir3 } from "os";
-import { dirname as dirname10, extname as extname4, join as join30, resolve as resolve6, sep as sep5 } from "path";
+import { dirname as dirname10, extname as extname4, join as join31, resolve as resolve6, sep as sep5 } from "path";
 var formattedExtensions = new Set([
   ".cjs",
   ".css",
@@ -11168,7 +11660,7 @@ async function stabilizeManagedContent(result2, execute, writeProjectFile) {
     }
   }
   inputs.set(".windy/generation.json", new TextEncoder().encode(generationContent));
-  const temporaryRoot = await mkdtemp3(join30(tmpdir3(), "windy-update-format-"));
+  const temporaryRoot = await mkdtemp3(join31(tmpdir3(), "windy-update-format-"));
   try {
     const stagedPaths = await stageInputs(temporaryRoot, inputs);
     for (let offset = 0;offset < stagedPaths.length; offset += 80) {
@@ -11176,7 +11668,7 @@ async function stabilizeManagedContent(result2, execute, writeProjectFile) {
         "x",
         "oxfmt",
         "--write",
-        `--config=${join30(result2.plan.projectDirectory, ".oxfmtrc.json")}`,
+        `--config=${join31(result2.plan.projectDirectory, ".oxfmtrc.json")}`,
         ...stagedPaths.slice(offset, offset + 80)
       ], result2.plan.projectDirectory);
     }
@@ -11225,7 +11717,7 @@ function safeTemporaryPath(root, path2) {
 
 // src/update/project-quality-verification.ts
 import { readFile as readFile25 } from "fs/promises";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 var qualityScriptNames = ["lint", "typecheck", "test", "build"];
 function skippedProjectQualityVerification() {
   return {
@@ -11239,7 +11731,7 @@ function skippedProjectQualityVerification() {
   };
 }
 async function runProjectQualityVerification(projectDirectory, execute) {
-  const packageJson = JSON.parse(await readFile25(join31(projectDirectory, "package.json"), "utf8"));
+  const packageJson = JSON.parse(await readFile25(join32(projectDirectory, "package.json"), "utf8"));
   const steps = [];
   for (const name of qualityScriptNames) {
     const stepName = `bun run ${name}`;
@@ -12322,7 +12814,7 @@ import {
   rm as rm11,
   writeFile as writeFile14
 } from "fs/promises";
-import { dirname as dirname11, join as join32, relative as relative7 } from "path";
+import { dirname as dirname11, join as join33, relative as relative7 } from "path";
 
 // src/module-schema/config.ts
 import { readFile as readFile26 } from "fs/promises";
@@ -12463,17 +12955,17 @@ async function handoffModuleSchemaLineages(options) {
 async function stageModuleLineages(project, temporaryRoot, config, execute) {
   const outputs = [];
   for (const [index, module2] of config.modules.entries()) {
-    const output = join32(temporaryRoot, `module-${index}`);
+    const output = join33(temporaryRoot, `module-${index}`);
     await mkdir9(output, { recursive: true });
-    const generatedConfig = join32(temporaryRoot, `module-${index}.config.ts`);
+    const generatedConfig = join33(temporaryRoot, `module-${index}.config.ts`);
     await writeDrizzleConfig(generatedConfig, project, module2.schema, relative7(temporaryRoot, output));
     await execute(generatedConfig, temporaryRoot);
     const sqlFiles = await listSqlFiles(output);
     if (sqlFiles.length !== 1) {
       throw new Error(`${module2.key} baseline \u5FC5\u987B\u6070\u597D\u751F\u6210\u4E00\u4E2A migration`);
     }
-    await writeFile14(join32(output, sqlFiles[0]), metadataOnlySql("module"));
-    await writeFile14(join32(output, "lineage.json"), `${JSON.stringify({
+    await writeFile14(join33(output, sqlFiles[0]), metadataOnlySql("module"));
+    await writeFile14(join33(output, "lineage.json"), `${JSON.stringify({
       schemaVersion: 1,
       moduleKey: module2.key,
       schema: module2.schema,
@@ -12487,17 +12979,17 @@ async function stageModuleLineages(project, temporaryRoot, config, execute) {
 }
 async function stagePlatformLineage(project, temporaryRoot, config, execute) {
   const source = resolveProjectPath(project, config.platform.out);
-  const output = join32(temporaryRoot, "platform");
+  const output = join33(temporaryRoot, "platform");
   await cp(source, output, { recursive: true });
   const before = new Set(await listSqlFiles(output));
-  const generatedConfig = join32(temporaryRoot, "platform.config.ts");
+  const generatedConfig = join33(temporaryRoot, "platform.config.ts");
   await writeDrizzleConfig(generatedConfig, project, config.platform.schema, relative7(temporaryRoot, output));
   await execute(generatedConfig, temporaryRoot);
   const created = (await listSqlFiles(output)).filter((path2) => !before.has(path2));
   if (created.length !== 1) {
     throw new Error("\u5E73\u53F0 lineage handoff \u5FC5\u987B\u6070\u597D\u751F\u6210\u4E00\u4E2A migration");
   }
-  const sqlPath = join32(output, created[0]);
+  const sqlPath = join33(output, created[0]);
   const allowed = config.modules.flatMap(({ legacyPlatformTables }) => legacyPlatformTables);
   validatePlatformHandoffSql(await readFile27(sqlPath, "utf8"), allowed);
   await writeFile14(sqlPath, metadataOnlySql("platform"));
@@ -12505,7 +12997,7 @@ async function stagePlatformLineage(project, temporaryRoot, config, execute) {
 }
 async function installStagedLineages(project, temporaryRoot, config, stagedModules, stagedPlatform) {
   const platform = resolveProjectPath(project, config.platform.out);
-  const backup = join32(temporaryRoot, "platform-backup");
+  const backup = join33(temporaryRoot, "platform-backup");
   const installed = [];
   await rename2(platform, backup);
   try {
@@ -12552,9 +13044,9 @@ async function validateSchemaSources(project, config) {
   }
 }
 async function createTemporaryRoot(project) {
-  const windy = join32(project, ".windy");
+  const windy = join33(project, ".windy");
   await mkdir9(windy, { recursive: true });
-  return await mkdtemp4(join32(windy, "module-schema-handoff-"));
+  return await mkdtemp4(join33(windy, "module-schema-handoff-"));
 }
 async function listSqlFiles(root) {
   return (await readdir9(root)).filter((path2) => path2.endsWith(".sql")).sort();
@@ -12645,7 +13137,7 @@ async function readPackageConfiguration(projectDirectory) {
   }
 }
 function parsePackageConfiguration(value) {
-  const root = object(value, "windy.build.json");
+  const root = object2(value, "windy.build.json");
   rejectUnknown(root, ["schemaVersion", "product", "platforms", "profiles"], "windy.build.json");
   if (root.schemaVersion !== 1)
     throw new Error("windy.build.json \u53EA\u652F\u6301 schemaVersion: 1");
@@ -12671,7 +13163,7 @@ function parsePackageConfiguration(value) {
   };
 }
 function parseProfile(value) {
-  const profile = object(value, "profile");
+  const profile = object2(value, "profile");
   rejectUnknown(profile, [
     "key",
     "label",
@@ -12684,7 +13176,7 @@ function parseProfile(value) {
   const key = identifier(profile.key, "profile key");
   const inputs = array(profile.inputs, `profile ${key}.inputs`).map((item) => parseInput(item, key));
   unique2(inputs.map(({ key: inputKey }) => inputKey), `profile ${key} input key`);
-  const command = object(profile.command, `profile ${key}.command`);
+  const command = object2(profile.command, `profile ${key}.command`);
   rejectUnknown(command, ["executable", "arguments"], `profile ${key}.command`);
   const executable = string(command.executable, `profile ${key}.command.executable`);
   if (shellExecutables.has(executable.toLowerCase()) || shellCharacters.test(executable) || !/^[a-zA-Z0-9._-]+$/u.test(executable)) {
@@ -12698,7 +13190,7 @@ function parseProfile(value) {
     }
     return argument;
   });
-  const output = object(profile.output, `profile ${key}.output`);
+  const output = object2(profile.output, `profile ${key}.output`);
   rejectUnknown(output, ["directory", "artifactSuffix"], `profile ${key}.output`);
   const directory = string(output.directory, `profile ${key}.output.directory`);
   if (!isSafeRelativePath(directory) || !/^[a-zA-Z0-9._/-]+$/u.test(directory))
@@ -12707,7 +13199,7 @@ function parseProfile(value) {
   if (!artifactSuffix.startsWith(".") || shellCharacters.test(artifactSuffix) || !/^\.[a-zA-Z0-9._-]+$/u.test(artifactSuffix)) {
     throw new Error(`profile ${key} \u7684 output.artifactSuffix \u975E\u6CD5`);
   }
-  const requirements = object(profile.requirements, `profile ${key}.requirements`);
+  const requirements = object2(profile.requirements, `profile ${key}.requirements`);
   rejectUnknown(requirements, ["docker", "buildx"], `profile ${key}.requirements`);
   const docker = boolean(requirements.docker, `profile ${key}.requirements.docker`);
   const buildx = boolean(requirements.buildx, `profile ${key}.requirements.buildx`);
@@ -12724,7 +13216,7 @@ function parseProfile(value) {
   };
 }
 function parseInput(value, profile) {
-  const input = object(value, `profile ${profile}.input`);
+  const input = object2(value, `profile ${profile}.input`);
   rejectUnknown(input, ["key", "label", "required", "pattern"], `profile ${profile}.input`);
   const key = identifier(input.key, `profile ${profile}.input.key`);
   if (secretName.test(key))
@@ -12755,7 +13247,7 @@ function validatePlaceholders(value, inputs, profile) {
   if (value.replace(placeholder, "").includes("${"))
     throw new Error(`profile ${profile} \u5305\u542B\u672A\u58F0\u660E\u5360\u4F4D\u7B26`);
 }
-function object(value, label) {
+function object2(value, label) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     throw new Error(`${label} \u5FC5\u987B\u662F\u5BF9\u8C61`);
   return value;