create-windy 0.9.1 → 0.10.0

package/template/packages/modules/src/system-module-catalog.test.ts

@@ -34,6 +34,9 @@ describe("系统能力模块目录", () => {
       // @windy-module system.storage begin
       "system.storage",
       // @windy-module system.storage end
+      // @windy-module system.media-runtime begin
+      "system.media-runtime",
+      // @windy-module system.media-runtime end
       // @windy-module system.agent begin
       "system.agent",
       // @windy-module system.agent end
@@ -130,6 +133,7 @@ describe("系统能力模块目录", () => {
   });
 
   // @windy-module system.agent begin
+  // @windy-module system.agent-ui begin
   test("AI Runtime 能力与专用审计动作归属 system.agent", () => {
     const agent = systemModuleManifests().find(
       ({ name }) => name === "system.agent",
@@ -162,10 +166,13 @@ describe("系统能力模块目录", () => {
       ]),
     );
   });
+  // @windy-module system.agent-ui end
 
+  // @windy-module system.agent end
+  // @windy-module system.media-runtime begin
   test("Embedding Run API 声明用户 Guard 与内部 Artifact 边界", () => {
     const agent = systemModuleManifests().find(
-      ({ name }) => name === "system.agent",
+      ({ name }) => name === "system.media-runtime",
     );
     const bindings = new Map(
       agent?.apiPermissions.map((binding) => [
@@ -174,8 +181,8 @@ describe("系统能力模块目录", () => {
       ]),
     );
     const guarded = {
-      permissionKey: "system.agent.read",
-      featureKey: "system.agent",
+      permissionKey: "system.embedding.read",
+      featureKey: "system.embedding",
       anonymous: false,
     };
 
@@ -208,13 +215,13 @@ describe("系统能力模块目录", () => {
     ).toEqual({
       method: "GET",
       path: "/api/internal/embeddings/runs/:runId/artifacts/:itemId",
-      permissionKey: "system.agent.read",
-      featureKey: "system.agent",
+      permissionKey: "system.embedding.read",
+      featureKey: "system.embedding",
       auditAction: "data.read",
       anonymous: true,
     });
   });
-  // @windy-module system.agent end
+  // @windy-module system.media-runtime end
 
   // @windy-module system.data-governance begin
   test("能力声明归属到对应模块而不是继续挂在 system 聚合项", () => {

package/template/packages/modules/src/system-module-catalog.ts

@@ -5,248 +5,13 @@ import { systemFoundationModule } from "./system-modules.js";
 import { selectSystemJsonSchemas } from "./system-module-schema-catalog.js";
 import { selectSystemAuditActions } from "./system-module-audit-selection.js";
 
-export interface SystemModuleDefinition {
-  name: string;
-  version: string;
-  label: string;
-  description: string;
-  dependencies?: readonly string[];
-  resources: readonly string[];
-  permissionKeys?: readonly string[];
-  excludedPermissionKeys?: readonly string[];
-  featureKeys: readonly string[];
-  runtimeActivation?: "physical-only";
-}
-
-export const systemModuleDefinitions = [
-  {
-    name: "system",
-    version: "0.1.0",
-    label: "系统核心",
-    description: "管理面准入、Feature 治理、数据库基线与审计动作目录。",
-    resources: ["admin", "runtime", "auth", "feature", "ui-components"],
-    featureKeys: [
-      "system.admin",
-      "system.runtime",
-      "system.auth",
-      "system.feature",
-      "system.ui-components",
-    ],
-  },
-  {
-    name: "system.identity",
-    version: "0.1.0",
-    label: "身份与权限",
-    description: "用户、角色、部门、菜单、字典、个人资料和数据范围。",
-    dependencies: ["system"],
-    resources: [
-      "user",
-      "user-directory",
-      "role",
-      "department",
-      "menu",
-      "dict",
-      "profile",
-    ],
-    excludedPermissionKeys: ["system.user.reveal", "system.user.export"],
-    featureKeys: [
-      "system.rbac",
-      "system.user",
-      "system.role",
-      "system.department",
-      "system.menu",
-      "system.dict",
-      "system.user-directory",
-      "system.profile",
-    ],
-  },
-  // @windy-module system.settings begin
-  {
-    name: "system.settings",
-    version: "0.1.0",
-    label: "平台设置",
-    description: "品牌设置、Logo 与页面水印。",
-    dependencies: ["system"],
-    resources: ["settings", "watermark"],
-    featureKeys: ["system.settings", "system.watermark"],
-    runtimeActivation: "physical-only",
-  },
-  // @windy-module system.settings end
-  // @windy-module system.configuration begin
-  {
-    name: "system.configuration",
-    version: "0.1.0",
-    label: "配置版本",
-    description: "类型化模块配置、版本、差异、应用与回滚。",
-    dependencies: ["system"],
-    resources: ["config"],
-    featureKeys: ["system.config"],
-  },
-  // @windy-module system.configuration end
-  // @windy-module system.license begin
-  {
-    name: "system.license",
-    version: "0.1.0",
-    label: "License",
-    description: "License 安装、验签、到期限制与版本授权。",
-    dependencies: ["system"],
-    resources: ["license"],
-    featureKeys: ["system.license"],
-  },
-  // @windy-module system.license end
-  // @windy-module system.audit begin
-  {
-    name: "system.audit",
-    version: "0.1.0",
-    label: "审计日志",
-    description: "关键操作、权限拒绝和系统异常的安全追溯。",
-    dependencies: ["system"],
-    resources: ["audit", "diagnostics"],
-    featureKeys: ["system.audit", "system.diagnostics"],
-  },
-  // @windy-module system.audit end
-  // @windy-module system.storage begin
-  {
-    name: "system.storage",
-    version: "0.1.0",
-    label: "文件存储",
-    description: "上传、续传、下载与对象生命周期管理。",
-    dependencies: ["system", "system.settings", "system.scheduler"],
-    resources: ["storage"],
-    featureKeys: ["system.storage"],
-    runtimeActivation: "physical-only",
-  },
-  // @windy-module system.storage end
-  // @windy-module system.agent begin
-  {
-    name: "system.agent",
-    version: "0.1.2",
-    label: "Agent Tool",
-    description: "受 Feature、RBAC 和审计保护的 Agent 工具调用。",
-    dependencies: [
-      "system",
-      "system.audit",
-      "system.storage",
-      "system.scheduler",
-      "system.workflow",
-    ],
-    resources: [
-      "agent",
-      "agent-tools",
-      "agent-debug",
-      "agent-workbench",
-      "agent-skill",
-      "agent-session",
-      "agent-workflow",
-      "ai-runtime",
-    ],
-    featureKeys: [
-      "system.agent",
-      "system.agent-tools",
-      "system.agent-debug",
-      "system.agent-workbench",
-      "system.agent-skill",
-      "system.agent-session",
-      "system.agent-workflow",
-      "system.ai-runtime",
-    ],
-  },
-  // @windy-module system.agent end
-  // @windy-module system.operations begin
-  {
-    name: "system.operations",
-    version: "0.1.0",
-    label: "运维与调度",
-    description: "服务、数据库、缓存、磁盘与在线会话监控。",
-    dependencies: ["system", "system.configuration"],
-    resources: ["ops"],
-    featureKeys: ["system.ops"],
-  },
-  // @windy-module system.operations end
-  // @windy-module system.scheduler begin
-  {
-    name: "system.scheduler",
-    version: "0.1.0",
-    label: "任务调度",
-    description: "定时任务注册、执行、重试、历史与恢复。",
-    dependencies: ["system", "system.audit"],
-    resources: ["scheduler"],
-    featureKeys: ["system.scheduler"],
-  },
-  // @windy-module system.scheduler end
-  // @windy-module system.notification begin
-  {
-    name: "system.notification",
-    version: "0.1.0",
-    label: "站内通知",
-    description:
-      "通知定向与定时发布、用户偏好、外部渠道投递、修改历史、阅读、收藏和归档。",
-    dependencies: ["system", "system.identity", "system.scheduler"],
-    resources: ["notification"],
-    featureKeys: ["system.notification"],
-  },
-  // @windy-module system.notification end
-  // @windy-module system.workflow begin
-  {
-    name: "system.workflow",
-    version: "0.1.0",
-    label: "审批工作流",
-    description: "审批领取、转交、决定、取消与超时补偿。",
-    dependencies: [
-      "system",
-      "system.identity",
-      "system.notification",
-      "system.scheduler",
-    ],
-    resources: ["workflow"],
-    featureKeys: ["system.workflow"],
-  },
-  // @windy-module system.workflow end
-  // @windy-module system.bulk-data begin
-  {
-    name: "system.bulk-data",
-    version: "0.1.0",
-    label: "批量数据",
-    description: "批量导入导出、失败明细、结果留存与清理。",
-    dependencies: ["system", "system.storage", "system.scheduler"],
-    resources: ["bulk-data"],
-    featureKeys: ["system.bulk-data"],
-  },
-  // @windy-module system.bulk-data end
-  // @windy-module system.search begin
-  {
-    name: "system.search",
-    version: "0.1.0",
-    label: "平台搜索",
-    description: "权限感知的功能搜索与业务 SearchProvider 聚合。",
-    dependencies: ["system"],
-    resources: ["search"],
-    featureKeys: ["system.search"],
-  },
-  // @windy-module system.search end
-  // @windy-module system.data-governance begin
-  {
-    name: "system.data-governance",
-    version: "0.1.0",
-    label: "数据治理",
-    description: "敏感字段投影、明文访问与受治理导出。",
-    dependencies: [
-      "system",
-      "system.identity",
-      "system.audit",
-      "system.storage",
-      "system.workflow",
-      "system.scheduler",
-    ],
-    resources: [],
-    permissionKeys: ["system.user.reveal", "system.user.export"],
-    featureKeys: [],
-    runtimeActivation: "physical-only",
-  },
-  // @windy-module system.data-governance end
-] as const satisfies readonly SystemModuleDefinition[];
+import {
+  systemModuleDefinitions,
+  type SystemModuleDefinition,
+  type SystemModuleName,
+} from "./system-module-definitions.js";
 
-export type SystemModuleName = (typeof systemModuleDefinitions)[number]["name"];
+export * from "./system-module-definitions.js";
 
 export const systemModuleFactories: readonly ModuleFactory[] =
   systemModuleDefinitions.map(

package/template/packages/modules/src/system-module-definitions.ts

@@ -0,0 +1,260 @@
+export interface SystemModuleDefinition {
+  name: string;
+  version: string;
+  label: string;
+  description: string;
+  dependencies?: readonly string[];
+  resources: readonly string[];
+  permissionKeys?: readonly string[];
+  excludedPermissionKeys?: readonly string[];
+  featureKeys: readonly string[];
+  runtimeActivation?: "physical-only";
+}
+
+export const systemModuleDefinitions = [
+  {
+    name: "system",
+    version: "0.1.0",
+    label: "系统核心",
+    description: "管理面准入、Feature 治理、数据库基线与审计动作目录。",
+    resources: ["admin", "runtime", "auth", "feature", "ui-components"],
+    featureKeys: [
+      "system.admin",
+      "system.runtime",
+      "system.auth",
+      "system.feature",
+      "system.ui-components",
+    ],
+  },
+  {
+    name: "system.identity",
+    version: "0.1.0",
+    label: "身份与权限",
+    description: "用户、角色、部门、菜单、字典、个人资料和数据范围。",
+    dependencies: ["system"],
+    resources: [
+      "user",
+      "user-directory",
+      "role",
+      "department",
+      "menu",
+      "dict",
+      "profile",
+    ],
+    excludedPermissionKeys: ["system.user.reveal", "system.user.export"],
+    featureKeys: [
+      "system.rbac",
+      "system.user",
+      "system.role",
+      "system.department",
+      "system.menu",
+      "system.dict",
+      "system.user-directory",
+      "system.profile",
+    ],
+  },
+  // @windy-module system.settings begin
+  {
+    name: "system.settings",
+    version: "0.1.0",
+    label: "平台设置",
+    description: "品牌设置、Logo 与页面水印。",
+    dependencies: ["system"],
+    resources: ["settings", "watermark"],
+    featureKeys: ["system.settings", "system.watermark"],
+    runtimeActivation: "physical-only",
+  },
+  // @windy-module system.settings end
+  // @windy-module system.configuration begin
+  {
+    name: "system.configuration",
+    version: "0.1.0",
+    label: "配置版本",
+    description: "类型化模块配置、版本、差异、应用与回滚。",
+    dependencies: ["system"],
+    resources: ["config"],
+    featureKeys: ["system.config"],
+  },
+  // @windy-module system.configuration end
+  // @windy-module system.license begin
+  {
+    name: "system.license",
+    version: "0.1.0",
+    label: "License",
+    description: "License 安装、验签、到期限制与版本授权。",
+    dependencies: ["system"],
+    resources: ["license"],
+    featureKeys: ["system.license"],
+  },
+  // @windy-module system.license end
+  // @windy-module system.audit begin
+  {
+    name: "system.audit",
+    version: "0.1.0",
+    label: "审计日志",
+    description: "关键操作、权限拒绝和系统异常的安全追溯。",
+    dependencies: ["system"],
+    resources: ["audit", "diagnostics"],
+    featureKeys: ["system.audit", "system.diagnostics"],
+  },
+  // @windy-module system.audit end
+  // @windy-module system.storage begin
+  {
+    name: "system.storage",
+    version: "0.1.0",
+    label: "文件存储",
+    description: "上传、续传、下载与对象生命周期管理。",
+    dependencies: ["system", "system.settings", "system.scheduler"],
+    resources: ["storage"],
+    featureKeys: ["system.storage"],
+    runtimeActivation: "physical-only",
+  },
+  // @windy-module system.storage end
+  // @windy-module system.media-runtime begin
+  {
+    name: "system.media-runtime",
+    version: "0.1.0",
+    label: "媒体运行时",
+    description: "受治理的文档、语音、嵌入与公共文件引用。",
+    dependencies: ["system", "system.audit", "system.storage"],
+    resources: ["document", "speech", "embedding", "ai-artifact"],
+    featureKeys: [
+      "system.document",
+      "system.speech",
+      "system.embedding",
+      "system.ai-artifact",
+    ],
+    runtimeActivation: "physical-only",
+  },
+  // @windy-module system.media-runtime end
+  // @windy-module system.agent begin
+  {
+    name: "system.agent",
+    version: "0.1.2",
+    label: "Agent Tool",
+    description: "受 Feature、RBAC 和审计保护的 Agent 工具调用。",
+    dependencies: [
+      "system",
+      "system.audit",
+      "system.storage",
+      "system.scheduler",
+      "system.workflow",
+      "system.media-runtime",
+    ],
+    resources: [
+      "agent",
+      "agent-tools",
+      "agent-debug",
+      "agent-workbench",
+      "agent-skill",
+      "agent-session",
+      "agent-workflow",
+      "ai-runtime",
+    ],
+    featureKeys: [
+      "system.agent",
+      "system.agent-tools",
+      "system.agent-debug",
+      "system.agent-workbench",
+      "system.agent-skill",
+      "system.agent-session",
+      "system.agent-workflow",
+      "system.ai-runtime",
+    ],
+  },
+  // @windy-module system.agent end
+  // @windy-module system.operations begin
+  {
+    name: "system.operations",
+    version: "0.1.0",
+    label: "运维与调度",
+    description: "服务、数据库、缓存、磁盘与在线会话监控。",
+    dependencies: ["system", "system.configuration"],
+    resources: ["ops"],
+    featureKeys: ["system.ops"],
+  },
+  // @windy-module system.operations end
+  // @windy-module system.scheduler begin
+  {
+    name: "system.scheduler",
+    version: "0.1.0",
+    label: "任务调度",
+    description: "定时任务注册、执行、重试、历史与恢复。",
+    dependencies: ["system", "system.audit"],
+    resources: ["scheduler"],
+    featureKeys: ["system.scheduler"],
+  },
+  // @windy-module system.scheduler end
+  // @windy-module system.notification begin
+  {
+    name: "system.notification",
+    version: "0.1.0",
+    label: "站内通知",
+    description:
+      "通知定向与定时发布、用户偏好、外部渠道投递、修改历史、阅读、收藏和归档。",
+    dependencies: ["system", "system.identity", "system.scheduler"],
+    resources: ["notification"],
+    featureKeys: ["system.notification"],
+  },
+  // @windy-module system.notification end
+  // @windy-module system.workflow begin
+  {
+    name: "system.workflow",
+    version: "0.1.0",
+    label: "审批工作流",
+    description: "审批领取、转交、决定、取消与超时补偿。",
+    dependencies: [
+      "system",
+      "system.identity",
+      "system.notification",
+      "system.scheduler",
+    ],
+    resources: ["workflow"],
+    featureKeys: ["system.workflow"],
+  },
+  // @windy-module system.workflow end
+  // @windy-module system.bulk-data begin
+  {
+    name: "system.bulk-data",
+    version: "0.1.0",
+    label: "批量数据",
+    description: "批量导入导出、失败明细、结果留存与清理。",
+    dependencies: ["system", "system.storage", "system.scheduler"],
+    resources: ["bulk-data"],
+    featureKeys: ["system.bulk-data"],
+  },
+  // @windy-module system.bulk-data end
+  // @windy-module system.search begin
+  {
+    name: "system.search",
+    version: "0.1.0",
+    label: "平台搜索",
+    description: "权限感知的功能搜索与业务 SearchProvider 聚合。",
+    dependencies: ["system"],
+    resources: ["search"],
+    featureKeys: ["system.search"],
+  },
+  // @windy-module system.search end
+  // @windy-module system.data-governance begin
+  {
+    name: "system.data-governance",
+    version: "0.1.0",
+    label: "数据治理",
+    description: "敏感字段投影、明文访问与受治理导出。",
+    dependencies: [
+      "system",
+      "system.identity",
+      "system.audit",
+      "system.storage",
+      "system.workflow",
+      "system.scheduler",
+    ],
+    resources: [],
+    permissionKeys: ["system.user.reveal", "system.user.export"],
+    featureKeys: [],
+    runtimeActivation: "physical-only",
+  },
+  // @windy-module system.data-governance end
+] as const satisfies readonly SystemModuleDefinition[];
+
+export type SystemModuleName = (typeof systemModuleDefinitions)[number]["name"];

package/template/packages/modules/src/system-modules-access.test.ts

@@ -61,6 +61,7 @@ describe("系统模块管理面与 MCP 注册", () => {
     ]);
   });
 
+  // @windy-module system.agent-ui begin
   test("AI Runtime 报表完整注册 Feature、权限、入口、API 与审计", () => {
     const manifest = systemFoundationModule();
     const menus = manifest.menus.flatMap((menu) => menu.children ?? []);
@@ -129,5 +130,6 @@ describe("系统模块管理面与 MCP 注册", () => {
       ]),
     );
   });
+  // @windy-module system.agent-ui end
   // @windy-module system.agent end
 });

package/template/packages/modules/src/system-modules.test.ts

@@ -219,7 +219,13 @@ describe("系统模块能力注册", () => {
 
   test("Sidebar 分类由 Manifest 目录声明", () => {
     const catalogs = systemFoundationModule().menus.map((menu) => menu.title);
-    expect(catalogs).toEqual(["组织与权限", "平台配置", "安全与合规", "运维"]);
+    expect(catalogs).toEqual([
+      "组织与权限",
+      "平台配置",
+      "安全与合规",
+      "运维",
+      "AI 与 Agent",
+    ]);
   });
 
   test("部门创建与迁移处置绑定独立权限、Feature 和审计动作", () => {

package/template/packages/modules/src/system-modules.ts

@@ -4,7 +4,9 @@ import {
   systemAgentToolSchemas,
   systemAgentTools,
 } from "./system-agent-tools.js";
+// @windy-module system.agent-ui begin
 import { systemAgentAdminMenus } from "./system-agent-admin-menus.js";
+// @windy-module system.agent-ui end
 import { systemAgentSupervisorSchemas } from "./system-agent-supervisor.js";
 // @windy-module system.agent end
 import { systemAdminRoutes } from "./system-admin-routes.js";
@@ -252,7 +254,28 @@ export function systemFoundationModule(): ModuleManifest {
             featureKey: "system.ops",
           },
           // @windy-module system.operations end
-          // @windy-module system.agent begin
+          // @windy-module system.workflow begin
+          {
+            key: "system.workflow",
+            title: "审批任务",
+            type: "button",
+            order: 20,
+            visible: false,
+            permissionKey: "system.workflow.read",
+            featureKey: "system.workflow",
+          },
+          // @windy-module system.workflow end
+        ],
+      },
+      // @windy-module system.agent-ui begin
+      {
+        key: "system.ai",
+        title: "AI 与 Agent",
+        type: "catalog",
+        order: 50,
+        visible: true,
+        icon: "sparkles",
+        children: [
           ...systemAgentAdminMenus,
           {
             key: "system.agent-session",
@@ -287,20 +310,9 @@ export function systemFoundationModule(): ModuleManifest {
             permissionKey: "system.agent-workflow.read",
             featureKey: "system.agent-workflow",
           },
-          // @windy-module system.agent end
-          // @windy-module system.workflow begin
-          {
-            key: "system.workflow",
-            title: "审批任务",
-            type: "button",
-            order: 20,
-            visible: false,
-            permissionKey: "system.workflow.read",
-            featureKey: "system.workflow",
-          },
-          // @windy-module system.workflow end
         ],
       },
+      // @windy-module system.agent-ui end
     ],
     adminRoutes: systemAdminRoutes,
     permissions: systemPermissions,

package/template/packages/modules/src/system-permissions.ts

@@ -20,6 +20,12 @@ const systemResourceLabels = {
   license: "许可证管理",
   audit: "审计日志",
   diagnostics: "错误诊断",
+  // @windy-module system.media-runtime begin
+  document: "文档识别与 OCR",
+  speech: "语音处理",
+  embedding: "向量嵌入",
+  "ai-artifact": "AI 文件引用",
+  // @windy-module system.media-runtime end
   // @windy-module system.agent begin
   agent: "智能代理",
   "agent-session": "Agent 长期会话",
@@ -135,6 +141,12 @@ export const systemPermissions: ModuleManifest["permissions"] = [
   permission("audit", "read"),
   permission("diagnostics", "read"),
   // @windy-module system.audit end
+  // @windy-module system.media-runtime begin
+  permission("document", "read"),
+  permission("speech", "read"),
+  permission("embedding", "read"),
+  permission("ai-artifact", "read"),
+  // @windy-module system.media-runtime end
   // @windy-module system.agent begin
   permission("agent", "read"),
   permission("agent-tools", "read"),