create-windy 0.9.1 → 0.10.0

package/template/apps/web/src/pages/system/components/user-account/UserRoleSelector.vue

@@ -65,9 +65,9 @@ const options = computed(() =>
     description: `${role.code} · ${dataScopeLabel(role.dataScope)}`,
   })),
 );
-function rolePermissions(id: string): string[] {
-  return roles.value.find((role) => role.id === id)?.permissionKeys || [];
-}
+const rolesById = computed(
+  () => new Map(roles.value.map((role) => [role.id, role])),
+);
 
 function dataScopeLabel(scope: string): string {
   return (
@@ -95,11 +95,13 @@ defineExpose({ reload: loadRoles });
       :model-value="modelValue"
       label="账号角色"
       multiple
+      grid
       @update:model-value="emit('update:modelValue', $event)"
     >
       <template #detail="{ id }">
         <RolePermissionSummary
-          :permission-keys="rolePermissions(id)"
+          :role-name="rolesById.get(id)?.name ?? id"
+          :permission-keys="rolesById.get(id)?.permissionKeys ?? []"
           :permissions="permissions"
         />
       </template>

package/template/apps/web/src/pages/system/components/user-account/UserRoleSelector.webtest.ts

@@ -1,5 +1,10 @@
 import { afterEach, describe, expect, test, vi } from "vitest";
-import { flushPromises, mount } from "@vue/test-utils";
+import {
+  DOMWrapper,
+  enableAutoUnmount,
+  flushPromises,
+  mount,
+} from "@vue/test-utils";
 import UserRoleSelector from "./UserRoleSelector.vue";
 
 const api = vi.hoisted(() => ({ list: vi.fn() }));
@@ -11,6 +16,7 @@ vi.mock("@/services/system-api", async () => {
   return { ...actual, listSystemResource: api.list };
 });
 
+enableAutoUnmount(afterEach);
 afterEach(() => vi.clearAllMocks());
 
 describe("UserRoleSelector", () => {
@@ -30,6 +36,7 @@ describe("UserRoleSelector", () => {
       pageSize: 10,
     });
     const wrapper = mount(UserRoleSelector, {
+      attachTo: document.body,
       props: {
         modelValue: [],
         permissions: [
@@ -63,9 +70,18 @@ describe("UserRoleSelector", () => {
     expect(wrapper.text()).toContain("部门负责人");
     expect(wrapper.text()).toContain("本部门及下级");
     expect(wrapper.text()).toContain("查看 2 项功能权限");
-    await wrapper.get("summary").trigger("click");
-    expect(wrapper.text()).toContain("用户账号");
-    expect(wrapper.text()).toContain("管理用户、查看用户");
+    expect(wrapper.find('[role="dialog"]').exists()).toBe(false);
+    await wrapper
+      .get('[data-testid="role-permissions-trigger"]')
+      .trigger("click");
+    await flushPromises();
+    const drawer = new DOMWrapper(document.body).get('[role="dialog"]');
+    expect(drawer.text()).toContain("角色功能权限");
+    expect(drawer.text()).toContain("用户账号");
+    expect(drawer.text()).toContain("管理用户、查看用户");
+    await drawer.get('[data-slot="sheet-close"]').trigger("click");
+    await flushPromises();
+    expect(document.body.querySelector('[role="dialog"]')).toBeNull();
     await wrapper.get('input[type="checkbox"]').setValue(true);
     expect(wrapper.emitted("update:modelValue")?.at(-1)).toEqual([
       ["role_manager"],

package/template/apps/web/src/pages/system/resource-config.ts

@@ -38,6 +38,7 @@ export interface ResourceInlineToggle {
 export interface SystemResourceConfig {
   key: SystemResourceKey;
   apiResource: string;
+  entityLabel?: string;
   title: string;
   description: string;
   searchPlaceholder: string;
@@ -65,6 +66,7 @@ export const systemResourceConfigs: Record<
 > = {
   users: {
     key: "users",
+    entityLabel: "人员",
     apiResource: "users",
     title: "用户体系",
     description: "维护平台账号、展示名称、联系方式、角色和部门归属。",
@@ -88,6 +90,7 @@ export const systemResourceConfigs: Record<
   },
   roles: {
     key: "roles",
+    entityLabel: "角色",
     apiResource: "roles",
     title: "权限策略",
     description: "维护角色编码、数据权限和权限点集合。",
@@ -116,6 +119,7 @@ export const systemResourceConfigs: Record<
   },
   departments: {
     key: "departments",
+    entityLabel: "组织",
     apiResource: "departments",
     title: "部门组织",
     description:
@@ -137,6 +141,7 @@ export const systemResourceConfigs: Record<
   },
   menus: {
     key: "menus",
+    entityLabel: "菜单",
     apiResource: "menus",
     title: "菜单管理",
     description: "维护菜单标题、路径、权限点、功能开关联动和显示状态。",
@@ -157,6 +162,7 @@ export const systemResourceConfigs: Record<
   },
   dictionaries: {
     key: "dictionaries",
+    entityLabel: "字典",
     apiResource: "dictionaries",
     title: "字典管理",
     description: "维护平台枚举字典和字典项。",
@@ -178,6 +184,7 @@ export const systemResourceConfigs: Record<
   },
   features: {
     key: "features",
+    entityLabel: "功能开关",
     apiResource: "features",
     title: "功能开关",
     description:
@@ -203,6 +210,7 @@ export const systemResourceConfigs: Record<
   },
   licenses: {
     key: "licenses",
+    entityLabel: "License",
     apiResource: "licenses",
     title: "License",
     description: "查看和维护客户授权主体、机器码、公钥和过期时间。",
@@ -225,6 +233,7 @@ export const systemResourceConfigs: Record<
   // @windy-module system.audit begin
   auditLogs: {
     key: "auditLogs",
+    entityLabel: "审计日志",
     apiResource: "audit-logs",
     title: "审计日志",
     description: "查看 Guard、功能开关、CRUD 和业务操作产生的审计事件。",

package/template/apps/web/src/pages/work-orders/WorkOrderListPage.vue

@@ -96,7 +96,7 @@ const workflowLabels: Record<WorkOrderWorkflowStatus, string> = {
     <header class="space-y-2">
       <h1 class="text-2xl font-semibold text-foreground">工单管理</h1>
       <p class="text-sm text-muted-foreground">
-        示例业务模块提供的工单列表，入口、权限和功能开关均来自 Module Manifest。
+        按部门和负责人跟踪待处理事项及处理进度。
       </p>
     </header>
 

package/template/apps/web/src/router/disabled-feature-loading.webtest.ts

@@ -0,0 +1,78 @@
+import { expect, test, vi } from "vitest";
+import { createMemoryHistory } from "vue-router";
+import { createAppRouter, routes } from "./index";
+import {
+  accessSnapshot,
+  authProvider,
+  // @windy-module system.license begin
+  licenseProvider,
+  // @windy-module system.license end
+  provider,
+} from "./router-test-fixtures";
+
+test.each(["disabled", "unknown", "unauthorized", "enabled"])(
+  "%s feature controls lazy admin page resolution",
+  async (mode) => {
+    const route = routes.find(
+      ({ meta }) => meta?.manifestRouteKey === "system.user",
+    );
+    const { featureKey, permissionKey } = route?.meta ?? {};
+    if (
+      !route ||
+      typeof featureKey !== "string" ||
+      typeof permissionKey !== "string"
+    ) {
+      throw new Error("用户体系管理路由必须声明 Feature 和 Permission");
+    }
+    const snapshot = accessSnapshot();
+    const feature = snapshot.features.find(({ key }) => key === featureKey);
+    if (!feature) throw new Error("测试快照缺少用户体系 Feature");
+    if (mode === "disabled") {
+      feature.enabled = false;
+      feature.allowed = false;
+      feature.reason = "feature-disabled";
+    }
+    if (mode === "unknown") {
+      snapshot.features = snapshot.features.filter(
+        ({ key }) => key !== featureKey,
+      );
+    }
+    if (mode === "unauthorized") {
+      snapshot.actor.permissionKeys = snapshot.actor.permissionKeys.filter(
+        (key) => key !== permissionKey,
+      );
+    }
+
+    const load = vi.fn(async () => ({ template: "<div>Optional</div>" }));
+    const router = createAppRouter(
+      createMemoryHistory(),
+      provider(snapshot),
+      // @windy-module system.license begin
+      licenseProvider(),
+      // @windy-module system.license end
+      authProvider(),
+    );
+    const matched = router.getRoutes().find(({ path }) => path === route.path);
+    if (!matched?.components) throw new Error("用户体系路由缺少页面");
+    matched.components.default = load;
+    await router.push(route.path);
+
+    expect(load).toHaveBeenCalledTimes(mode === "enabled" ? 1 : 0);
+    if (mode === "enabled") {
+      expect(router.currentRoute.value.path).toBe(route.path);
+    } else {
+      expect(router.currentRoute.value.name).toBe("access-denied");
+      expect(router.currentRoute.value.query.reason).toBe(
+        mode === "unauthorized" ? "missing-permission" : "feature-disabled",
+      );
+    }
+  },
+);
+
+test("内置管理页面均使用路由 loader", () => {
+  const platformRoutes = routes.filter(({ meta }) => meta?.manifestRouteKey);
+  expect(platformRoutes.length).toBeGreaterThan(0);
+  for (const route of platformRoutes) {
+    expect(typeof route.component).toBe("function");
+  }
+});

package/template/apps/web/src/router/index.ts

@@ -7,13 +7,10 @@ import {
 } from "vue-router";
 // @windy-module system.audit begin
 // @windy-module system.audit end
-import DashboardPage from "@/pages/dashboard/DashboardPage.vue";
-import HomePage from "@/app/home/HomePage.vue";
 import { loginPageComponent } from "@/app/auth/login-page";
 import { errorPageComponents } from "@/app/error-pages";
 import AccessDeniedPage from "@/pages/AccessDeniedPage.vue";
 import ServiceUnavailablePage from "@/pages/ServiceUnavailablePage.vue";
-import ChangePasswordPage from "@/pages/auth/ChangePasswordPage.vue";
 // @windy-module system.license begin
 // @windy-module system.license end
 // @windy-module system.operations begin
@@ -94,19 +91,19 @@ const declaredRoutes: RouteRecordRaw[] = [
   {
     path: reservedWebRoutePaths.changePassword,
     name: "change-password",
-    component: ChangePasswordPage,
+    component: () => import("@/pages/auth/ChangePasswordPage.vue"),
     meta: { title: "修改密码", layout: "auth" },
   },
   {
     path: reservedWebRoutePaths.home,
     name: "home",
-    component: HomePage,
+    component: () => import("@/app/home/HomePage.vue"),
     meta: { title: "首页", layout: "app" },
   },
   {
     path: reservedWebRoutePaths.adminHome,
     name: "admin-home",
-    component: DashboardPage,
+    component: () => import("@/pages/dashboard/DashboardPage.vue"),
     meta: { title: "工作台", layout: "admin" },
   },
   ...platformAdminRoutes,

package/template/apps/web/src/router/manifest-routes.ts

@@ -2,8 +2,7 @@ import {
   systemAdminUiManifests,
   type ModuleAdminRouteDefinition,
 } from "@southwind-ai/modules/admin-ui";
-import type { Component } from "vue";
-import type { RouteRecordRaw } from "vue-router";
+import type { RouteComponent, RouteRecordRaw } from "vue-router";
 
 export const webModuleManifests = systemAdminUiManifests();
 
@@ -14,7 +13,7 @@ const adminRouteByKey = new Map(
 );
 
 export interface ManifestRouteImplementation {
-  component: Component;
+  component: RouteComponent | (() => Promise<{ default: RouteComponent }>);
   name?: string;
   props?: RouteRecordRaw["props"];
 }

package/template/apps/web/src/router/platform-admin-pages.ts

@@ -1,79 +1,38 @@
-import type { Component } from "vue";
+import type { RouteComponent } from "vue-router";
 import type { PlatformAdminPageKey } from "./platform-admin-route-bindings";
-// @windy-module system.audit begin
-import DiagnosticLookupPage from "@/pages/system/DiagnosticLookupPage.vue";
-// @windy-module system.audit end
-// @windy-module system.license begin
-import LicensePage from "@/pages/license/LicensePage.vue";
-// @windy-module system.license end
-// @windy-module system.operations begin
-import SystemOperationsPage from "@/pages/system/SystemOperationsPage.vue";
-// @windy-module system.operations end
-// @windy-module system.agent begin
-import AiRuntimePage from "@/pages/system/AiRuntimePage.vue";
-// @windy-module system.agent end
-// @windy-module system.agent begin
-import SystemAgentSkillsPage from "@/pages/system/SystemAgentSkillsPage.vue";
-// @windy-module system.agent end
-// @windy-module system.agent begin
-import AgentNativePage from "@/pages/system/AgentNativePage.vue";
-// @windy-module system.agent end
-// @windy-module system.agent begin
-import AgentToolsPage from "@/pages/system/AgentToolsPage.vue";
-// @windy-module system.agent end
-// @windy-module system.agent begin
-import AgentDebugPage from "@/pages/system/AgentDebugPage.vue";
-// @windy-module system.agent end
-// @windy-module system.agent begin
-import AgentSessionPage from "@/pages/system/AgentSessionPage.vue";
-// @windy-module system.agent end
-// @windy-module system.agent begin
-import AgentWorkflowPage from "@/pages/system/AgentWorkflowPage.vue";
-// @windy-module system.agent end
-// @windy-module system.notification begin
-import SystemNotificationsPage from "@/pages/system/SystemNotificationsPage.vue";
-// @windy-module system.notification end
-import SystemResourceRoutePage from "@/pages/system/SystemResourceRoutePage.vue";
-// @windy-module system.settings begin
-import GlobalSettingsPage from "@/pages/settings/GlobalSettingsPage.vue";
-// @windy-module system.settings end
-import PersonalSettingsPage from "@/pages/profile/PersonalSettingsPage.vue";
-import UiComponentPage from "@/pages/ui/UiComponentPage.vue";
-// @windy-module system.configuration begin
-import ModuleConfigurationPage from "@/pages/configuration/ModuleConfigurationPage.vue";
-// @windy-module system.configuration end
 
 export const platformAdminPageComponents: Partial<
-  Record<PlatformAdminPageKey, Component>
+  Record<PlatformAdminPageKey, () => Promise<{ default: RouteComponent }>>
 > = {
-  resource: SystemResourceRoutePage,
+  resource: () => import("@/pages/system/SystemResourceRoutePage.vue"),
   // @windy-module system.audit begin
-  diagnostics: DiagnosticLookupPage,
+  diagnostics: () => import("@/pages/system/DiagnosticLookupPage.vue"),
   // @windy-module system.audit end
-  profile: PersonalSettingsPage,
-  "ui-components": UiComponentPage,
+  profile: () => import("@/pages/profile/PersonalSettingsPage.vue"),
+  "ui-components": () => import("@/pages/ui/UiComponentPage.vue"),
   // @windy-module system.settings begin
-  settings: GlobalSettingsPage,
+  settings: () => import("@/pages/settings/GlobalSettingsPage.vue"),
   // @windy-module system.settings end
   // @windy-module system.license begin
-  license: LicensePage,
+  license: () => import("@/pages/license/LicensePage.vue"),
   // @windy-module system.license end
   // @windy-module system.notification begin
-  notification: SystemNotificationsPage,
+  notification: () => import("@/pages/system/SystemNotificationsPage.vue"),
   // @windy-module system.notification end
   // @windy-module system.operations begin
-  operations: SystemOperationsPage,
+  operations: () => import("@/pages/system/SystemOperationsPage.vue"),
   // @windy-module system.operations end
-  // @windy-module system.agent begin
-  "agent-tools": AgentToolsPage,
-  "agent-skills": SystemAgentSkillsPage,
-  "agent-native": AgentNativePage,
-  "agent-debug": AgentDebugPage,
-  "agent-session": AgentSessionPage,
-  "agent-workflow": AgentWorkflowPage,
-  "ai-runtime": AiRuntimePage,
-  // @windy-module system.agent end
+  // @windy-module system.agent-ui begin
+  "agent-tools": () => import("@/pages/system/AgentToolsPage.vue"),
+  "agent-skills": () => import("@/pages/system/SystemAgentSkillsPage.vue"),
+  "agent-native": () => import("@/pages/system/AgentNativePage.vue"),
+  "agent-debug": () => import("@/pages/system/AgentDebugPage.vue"),
+  "agent-session": () => import("@/pages/system/AgentSessionPage.vue"),
+  "agent-workflow": () => import("@/pages/system/AgentWorkflowPage.vue"),
+  "ai-runtime": () => import("@/pages/system/AiRuntimePage.vue"),
+  // @windy-module system.agent-ui end
   // @windy-module system.configuration begin
-  configuration: ModuleConfigurationPage,
+  configuration: () =>
+    import("@/pages/configuration/ModuleConfigurationPage.vue"),
   // @windy-module system.configuration end
 };

package/template/apps/web/src/router/platform-admin-route-bindings.ts

@@ -10,7 +10,7 @@ export type PlatformAdminPageKey =
   | "license"
   | "notification"
   | "operations"
-  // @windy-module system.agent begin
+  // @windy-module system.agent-ui begin
   | "agent-tools"
   | "agent-skills"
   | "agent-native"
@@ -18,7 +18,7 @@ export type PlatformAdminPageKey =
   | "agent-session"
   | "agent-workflow"
   | "ai-runtime"
-  // @windy-module system.agent end
+  // @windy-module system.agent-ui end
   | "configuration"
   | "ui-components";
 
@@ -67,7 +67,7 @@ export const platformAdminRouteBindings: readonly PlatformAdminRouteBinding[] =
     // @windy-module system.operations begin
     { routeKey: "system.ops", page: "operations" },
     // @windy-module system.operations end
-    // @windy-module system.agent begin
+    // @windy-module system.agent-ui begin
     { routeKey: "system.agent-tools", page: "agent-tools" },
     { routeKey: "system.agent-skill", page: "agent-skills" },
     { routeKey: "system.agent-workbench", page: "agent-native" },
@@ -75,7 +75,7 @@ export const platformAdminRouteBindings: readonly PlatformAdminRouteBinding[] =
     { routeKey: "system.agent-session", page: "agent-session" },
     { routeKey: "system.agent-workflow", page: "agent-workflow" },
     { routeKey: "system.ai-runtime", page: "ai-runtime" },
-    // @windy-module system.agent end
+    // @windy-module system.agent-ui end
     // @windy-module system.configuration begin
     { routeKey: "system.config", page: "configuration" },
     // @windy-module system.configuration end

package/template/apps/web/src/services/diagnostics-api.ts

@@ -1,4 +1,4 @@
-import type { DiagnosticRecord } from "@southwind-ai/shared";
+import type { DiagnosticRecord, PageResult } from "@southwind-ai/shared";
 import { apiRequest } from "./http";
 
 export type { DiagnosticRecord } from "@southwind-ai/shared";
@@ -10,3 +10,15 @@ export function getDiagnostic(id: string, signal: AbortSignal) {
     { suppressFailureHandler: true },
   );
 }
+
+export function listDiagnostics(
+  page: number,
+  pageSize: number,
+  signal: AbortSignal,
+) {
+  return apiRequest<PageResult<DiagnosticRecord>>(
+    `/system/diagnostics?page=${page}&pageSize=${pageSize}`,
+    { signal, cache: "no-store" },
+    { suppressFailureHandler: true },
+  );
+}

package/template/apps/web/src/services/operations-api.ts

@@ -1,5 +1,7 @@
 import { apiRequest } from "./http";
 import type {
+  EnvironmentAssessmentSnapshot,
+  EnvironmentSnapshot,
   PageResult,
   SchedulerManualTriggerResponse,
   SchedulerOperationsSnapshot,
@@ -9,6 +11,8 @@ import type {
 } from "@southwind-ai/shared";
 
 export interface OperationSnapshot {
+  environment?: EnvironmentSnapshot;
+  featureAssessment?: EnvironmentAssessmentSnapshot;
   generatedAt: string;
   onlineUsers: Array<{
     sessionId: string;

package/template/apps/web/src/services/platform-settings-api.ts

@@ -1,4 +1,4 @@
-import { apiRequest } from "./http";
+import { apiRequest, apiResponse } from "./http";
 import type {
   PlatformBrandingSettings,
   PlatformWatermarkPolicy,
@@ -42,3 +42,37 @@ export function updatePlatformWatermarkPolicy(
     body: JSON.stringify(policy),
   });
 }
+
+const WATERMARK_YAML_PATH = "/system/settings/watermark/yaml";
+
+export interface WatermarkYamlPreview {
+  revision: string;
+  changes: {
+    key:
+      | "enabled"
+      | "density"
+      | "contentFields"
+      | "opacityPercent"
+      | "fontSize";
+    before: boolean | string | number | string[];
+    after: boolean | string | number | string[];
+  }[];
+}
+
+export async function exportWatermarkYaml() {
+  return (await apiResponse(WATERMARK_YAML_PATH)).blob();
+}
+
+export function previewWatermarkYaml(yaml: string) {
+  return apiRequest<WatermarkYamlPreview>(`${WATERMARK_YAML_PATH}/preview`, {
+    method: "POST",
+    body: JSON.stringify({ yaml }),
+  });
+}
+
+export function importWatermarkYaml(yaml: string, revision: string) {
+  return apiRequest<PlatformWatermarkPolicy>(WATERMARK_YAML_PATH, {
+    method: "POST",
+    body: JSON.stringify({ yaml, revision }),
+  });
+}

package/template/apps/web/vite.config.ts

@@ -18,7 +18,9 @@ import { adminUiModuleRegistryPlugin } from "./src/router/admin-ui-module-regist
 
 const fingerprint =
   process.env.WINDY_DEV_FINGERPRINT || projectFingerprint(process.cwd());
-const devPort = Number(process.env.WINDY_DEV_PORT || 8_746);
+const devPort = Number(
+  process.env.WINDY_DEV_PORT || process.env.WINDY_WEB_PORT || 28_746,
+);
 const usePolling = process.env.WINDY_DEV_USE_POLLING === "1";
 const adminUiValidatorEntry = fileURLToPath(
   new URL("./scripts/validate-admin-ui-composition.ts", import.meta.url),
@@ -52,7 +54,9 @@ export default defineConfig({
     proxy: {
       // @windy-module system.agent begin
       "^/agent(?:$|[/?])": {
-        target: process.env.API_UPSTREAM ?? "http://localhost:9747",
+        target:
+          process.env.API_UPSTREAM ??
+          `http://127.0.0.1:${process.env.WINDY_SERVER_PORT ?? "19747"}`,
         ws: true,
         bypass: (request) =>
           isDshWorkbenchPath(request.url ?? "/") ? undefined : "/index.html",
@@ -82,7 +86,9 @@ export default defineConfig({
         },
       },
       // @windy-module system.agent end
-      "/api": process.env.API_UPSTREAM ?? "http://localhost:9747",
+      "/api":
+        process.env.API_UPSTREAM ??
+        `http://127.0.0.1:${process.env.WINDY_SERVER_PORT ?? "19747"}`,
     },
   },
 });

package/template/deploy/environment/windy.environment.example.yaml

@@ -0,0 +1,53 @@
+# Windy 环境与功能预设示例。复制为 windy.environment.yaml 后按项目修改。
+# 首次生成：create-windy my-app --environment-profile windy.environment.yaml
+# 运行时：Server 用 WINDY_ENVIRONMENT_PROFILE_FILE 指向此文件的只读挂载路径。
+# build 控制生成裁剪，runtime 控制 Server 启动装配，features 提供评估建议。
+schemaVersion: 1
+build:
+  # 只填写 Windy 分发目录中存在的 Module；必需模块及依赖会自动补齐。
+  # 纯 CPU OCR 选择媒体运行时，Agent 作为独立模块按需选择。
+  modules:
+    - system
+    - system.identity
+    - system.settings
+    - system.configuration
+    - system.audit
+    - system.operations
+    - system.media-runtime
+  runtimes:
+    agent: false
+    document: true
+    speech: false
+    embedding: false
+# runtime 缺省时沿用原有启动设置。使用以下组合时须开启 PLATFORM_ENABLE_AI_RUNTIME。
+runtime:
+  agent: false
+  document: true
+  speech: false
+  embedding: false
+antivirus:
+  packaged: false
+  enabled: false
+features:
+  - key: system.ops
+    title: 系统运维总览
+    execution: none # none / cpu / local-gpu / remote
+    recommendedEnabled: true # 只是建议；管理员复核后在功能管理确认。
+
+
+# 添加业务功能时，使用其 Manifest 中真实存在的 Feature Key，不填猜测的模块名。
+# 例如 CPU OCR（下面是占位示例，需换成业务正式 Key 后再启用）：
+# - key: example.cpu-ocr
+#   title: CPU 文档识别
+#   execution: cpu
+#   recommendedEnabled: true
+#   supportedPlatforms: [linux]            # 依据软件适配证据填写，不靠硬件猜测。
+#   supportedArchitectures: [arm64, x64]    # 当前应用进程架构；外部推理节点需另验收。
+#   minMemoryGiB: 8                        # 已验证的最低要求，不承诺处理速度。
+#   requiredEnvironmentKeys: [DOCUMENT_SERVER_URL] # 只检查是否配置，绝不显示凭据值。
+#
+# 本地 GPU 模型使用 local-gpu；缺少 NVIDIA 查询证据返回未知，不认定“没有 GPU”。
+# 远程模型使用 remote，不会因本机无 GPU/内存少而直接判定不可用。
+# 病毒扫描为独立可选功能，可选择不扫描；不能用 GPU 条件控制它。
+# 未注册的 Feature 显示“未随包交付/请核对 Key”，未知条件不自动关闭功能。
+# 通过声明条件不代表模型 readiness、驱动兼容、识别质量或业务性能验收通过。

package/template/docker-compose.yml

@@ -49,10 +49,11 @@ services:
       WINDY_CONTAINERIZED: "1"
       BUN_CONFIG_NO_CLEAR_TERMINAL_ON_RELOAD: "true"
       WINDY_SYSTEM_USAGE_PATHS: /app/data/audit
-      PLATFORM_ENABLE_AI: ${PLATFORM_ENABLE_AI:-false}
+      PLATFORM_ENABLE_AI_RUNTIME: ${PLATFORM_ENABLE_AI_RUNTIME:-${PLATFORM_ENABLE_AI:-false}}
+
       AGENT_SERVER_URL: http://agent-server:8080
-      WINDY_PUBLIC_BASE_URL: "${WINDY_PUBLIC_BASE_URL:-}"
       AGENT_TOOL_HOST_URL: http://server:9747
+      WINDY_PUBLIC_BASE_URL: "${WINDY_PUBLIC_BASE_URL:-}"
       TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock
       AGENT_SERVER_INTERNAL_TOKEN: ${AGENT_SERVER_INTERNAL_TOKEN:-}
       WINDY_AGENT_WORKFLOW_MODEL_PRICING_JSON: ${WINDY_AGENT_WORKFLOW_MODEL_PRICING_JSON:-}
@@ -74,6 +75,7 @@ services:
       - ./apps/server:/app/apps/server
       - ./packages:/app/packages
       - server-audit-data:/app/data/audit
+
       - server-storage-data:/app/data/storage
       - tool-sandbox-ipc:/run/windy-tool-sandbox
     depends_on:

package/template/docs/architecture/agent-admin-workbench-implementation.md

@@ -1,6 +1,6 @@
 # Agent 管理工作台技术实现
 
-日期：2026-10-07。对应[方案](./agent-admin-workbench-plan.md)。本轮实现已合入 main，0.8.3 已按用户授权跳过 gate 直接发布，见[发布记录](../operations/create-windy-0.8.3-release.md)；尚未证明下游升级或生产部署。
+日期：2026-10-07。对应[方案](./agent-admin-workbench-plan.md)。本轮实现已合入 main，0.8.3 已按用户授权跳过 gate 直接发布；尚未证明下游升级或生产部署。
 
 ## 交付入口与业务结果
 

package/template/docs/architecture/agent-admin-workbench-plan.md

@@ -1,6 +1,6 @@
 # Agent 工具目录与调试工作台方案
 
-日期：2026-10-07。状态：源码实现已合入 main，0.8.3 已按用户授权跳过 gate 直接发布，见[发布记录](../operations/create-windy-0.8.3-release.md)；下游升级与部署待独立验收。
+日期：2026-10-07。状态：源码实现已合入 main，0.8.3 已按用户授权跳过 gate 直接发布；下游升级与部署待独立验收。
 
 ## 业务场景与验收边界
 

package/template/docs/architecture/agent-workflow.md

@@ -108,3 +108,11 @@ Composition Root 为 Workflow Repository、Evaluation Repository、Approval Adap
 Adapter、Governed Tool Host 与 Subagent Adapter 各绑定一个实现。生产使用 PostgreSQL Repository；
 进程内 Repository 只用于受限开发或契约验证，不能作为可恢复运行事实源。未知 Node、缺失 Adapter、
 重复 Key、Release 漂移或未声明 Manifest guard 必须在启动或接收命令时 fail closed。
+
+## 模型节点发布校验
+
+通用发布入口与项目发布入口共用发布 Service。保存 Release 前，Service 逐个检查模型节点的
+`operationKey` 和 `promptKey`。当前 `promptKey` 保存版本坐标，必须与 Host 已装配的
+Agent Operation Handler 的 `release.promptVersion` 完全一致。Operation 缺失、未声明
+Release 或版本不匹配时，发布返回 `MODEL_PROMPT_RELEASE_MISMATCH`。项目入口仍需完成
+项目绑定授权。已有 Release 执行时继续使用 Runtime 的版本检查。