create-windy 0.9.1 → 0.10.1

package/template/apps/server/scripts/validate-module-composition-once.ts

@@ -1,4 +1,6 @@
 process.argv.push("--validate-module-composition");
 delete process.env.DATABASE_URL;
+// This isolated process validates declarations and handlers, not durable production startup.
+process.env.NODE_ENV = "test";
 
 await import("../src/index.js");

package/template/apps/server/scripts/validate-module-composition.ts

@@ -1,11 +1,15 @@
 import { spawnSync } from "node:child_process";
 
+const environment = { ...process.env };
+delete environment.PLATFORM_ENABLE_AI;
+delete environment.WINDY_ENVIRONMENT_PROFILE_FILE;
+
 const variants = [
-  { name: "default", env: { PLATFORM_ENABLE_AI: "false" } },
+  { name: "default", env: { PLATFORM_ENABLE_AI_RUNTIME: "false" } },
   {
     name: "ai-enabled",
     env: {
-      PLATFORM_ENABLE_AI: "true",
+      PLATFORM_ENABLE_AI_RUNTIME: "true",
       AGENT_SERVER_INTERNAL_TOKEN: "0123456789abcdef0123456789abcdef",
       AI_ARTIFACT_ENCRYPTION_SECRET: "abcdef0123456789abcdef0123456789",
     },
@@ -15,10 +19,10 @@ const variants = [
 for (const variant of variants) {
   const result = spawnSync(
     process.execPath,
-    ["run", "scripts/validate-module-composition-once.ts"],
+    ["--no-env-file", "run", "scripts/validate-module-composition-once.ts"],
     {
       cwd: process.cwd(),
-      env: { ...process.env, ...variant.env, DATABASE_URL: "" },
+      env: { ...environment, ...variant.env, DATABASE_URL: "" },
       stdio: "inherit",
     },
   );

package/template/apps/server/src/admin/routes.test.ts

@@ -48,8 +48,36 @@ describe("Windy 管理面准入", () => {
   });
 });
 
-async function invoke(actor: RequestActor): Promise<unknown> {
+// @windy-module system.agent begin
+test.each([false, true])(
+  "AI 装配为 %s 时同步管理菜单与页面授权",
+  async (enabled) => {
+    const result = (await invoke(adminActor(), enabled)) as {
+      menus: Array<{ key: string; children?: Array<{ key: string }> }>;
+      access: { features: Array<{ key: string; enabled: boolean }> };
+    };
+    const group = result.menus.find(({ key }) => key === "system.ai");
+    if (enabled) {
+      expect(group?.children?.map(({ key }) => key)).toContain(
+        "system.agent-workbench",
+      );
+    } else {
+      expect(group).toBeUndefined();
+      expect(result.access.features).toContainEqual(
+        expect.objectContaining({
+          key: "system.agent-workbench",
+          enabled: false,
+          allowed: false,
+        }),
+      );
+    }
+  },
+);
+// @windy-module system.agent end
+
+async function invoke(actor: RequestActor, enableAI = false): Promise<unknown> {
   const snapshot = createFoundationSnapshot();
+  snapshot.platform.enableAI = enableAI;
   const runtime = createServerRuntime(
     {},
     {

package/template/apps/server/src/admin/routes.ts

@@ -65,10 +65,28 @@ export function registerAdminBootstrapRoute(
     }
 
     const routes = source.modules.flatMap((module) => module.adminRoutes);
-    const routeKeys = new Set(routes.map(({ key }) => key));
+    const disabledAiFeatures = new Set(
+      source.snapshot.platform.enableAI
+        ? []
+        : source.modules.flatMap(({ menus }) =>
+            menus
+              .filter(({ key }) => key === "system.ai")
+              .flatMap(
+                ({ children }) =>
+                  children?.map(({ featureKey }) => featureKey) ?? [],
+              ),
+          ),
+    );
+    const routeKeys = new Set(
+      routes
+        .filter(({ featureKey }) => !disabledAiFeatures.has(featureKey))
+        .map(({ key }) => key),
+    );
     const resolvedFeatures = await Promise.all(
       source.snapshot.features.map((feature) =>
-        runtime.resolveFeature(guardContext, feature),
+        disabledAiFeatures.has(feature.key)
+          ? { ...feature, enabled: false, visible: "hidden" as const }
+          : runtime.resolveFeature(guardContext, feature),
       ),
     );
     return {

package/template/apps/server/src/agent/client-session/completion.ts

@@ -21,7 +21,7 @@ import {
   ClientAgentRequestError,
   parseClientAgentCompletion,
 } from "./request.js";
-import { ProviderInputGovernanceError } from "../provider-input-governance.js";
+import { ProviderInputGovernanceError } from "../../ai-runtime-security/provider-input-governance.js";
 import {
   enforceClientSessionAttemptAuthority,
   enforceClientSessionProviderBoundary,

package/template/apps/server/src/agent/client-session/manifest-admission.ts

@@ -10,7 +10,7 @@ import {
   governProviderInput,
   projectProviderInput,
   ProviderInputGovernanceError,
-} from "../provider-input-governance.js";
+} from "../../ai-runtime-security/provider-input-governance.js";
 import {
   buildRegisteredOperations,
   type RegisteredOperation,

package/template/apps/server/src/agent/client-session/request.ts

@@ -1,6 +1,6 @@
 import type { AiProviderDataPolicy } from "@southwind-ai/modules";
 import type { ModuleAiJsonValue } from "@southwind-ai/server-sdk";
-import { governProviderEnvelope } from "../provider-input-governance.js";
+import { governProviderEnvelope } from "../../ai-runtime-security/provider-input-governance.js";
 
 const allowedKeys = new Set([
   "model",

package/template/apps/server/src/agent/context-version-routes.ts

@@ -16,7 +16,7 @@ import type {
   CommitAttemptContextInput,
 } from "./context-version-runtime.js";
 import { assertNoPrivateReasoning } from "./session-log/events.js";
-import { validInternalToken } from "./run-routes.js";
+import { validInternalToken } from "../ai-runtime-security/internal-token.js";
 
 const MAX_TEXT = 512;
 const PATH = "/internal/agent/context-versions";
@@ -80,9 +80,15 @@ export function registerUnavailableAgentContextVersionRoute(
   });
 }
 
-function parseInput(value: unknown, requestId: string):
+function parseInput(
+  value: unknown,
+  requestId: string,
+):
   | { phase: "prepare"; input: AttemptContextBaseInput }
-  | { phase: "abort"; input: AttemptContextBaseInput & { preparationId: string } }
+  | {
+      phase: "abort";
+      input: AttemptContextBaseInput & { preparationId: string };
+    }
   | { phase: "commit"; input: CommitAttemptContextInput } {
   if (!isRecord(value) || value.contractVersion !== 2) throw invalid();
   const base = parseBase(value, requestId);
@@ -91,7 +97,8 @@ function parseInput(value: unknown, requestId: string):
   if (value.phase === "abort") {
     return { phase: "abort", input: { ...base, preparationId } };
   }
-  if (value.phase !== "commit" || !isRecord(value.governedEnvelope)) throw invalid();
+  if (value.phase !== "commit" || !isRecord(value.governedEnvelope))
+    throw invalid();
   const provider = parseProvider(value.governedEnvelope.provider);
   if (!Array.isArray(value.governedEnvelope.messages)) throw invalid();
   const messages = value.governedEnvelope.messages.map(parseMessage);
@@ -105,7 +112,8 @@ function parseBase(
   value: Record<string, unknown>,
   requestId: string,
 ): AttemptContextBaseInput {
-  if (!Array.isArray(value.sources) || value.sources.length !== 1) throw invalid();
+  if (!Array.isArray(value.sources) || value.sources.length !== 1)
+    throw invalid();
   return {
     sessionId: text(value.sessionId),
     turnId: text(value.turnId),
@@ -150,16 +158,25 @@ function parseMessage(value: unknown): GovernedContextMessage {
 function parseOrigin(value: unknown): ContextMessageOrigin {
   if (!isRecord(value)) throw invalid();
   const type = value.type;
-  if (![
-    "instructions", "user-prompt", "artifact", "context-source",
-    "provider-output", "tool-receipt",
-  ].includes(String(type))) throw invalid();
+  if (
+    ![
+      "instructions",
+      "user-prompt",
+      "artifact",
+      "context-source",
+      "provider-output",
+      "tool-receipt",
+    ].includes(String(type))
+  )
+    throw invalid();
   return {
     type: type as ContextMessageOrigin["type"],
     sourceId: text(value.sourceId),
     sourceVersion: text(value.sourceVersion),
     digest: digest(value.digest),
-    ...(value.source === undefined ? {} : { source: parseReference(value.source) }),
+    ...(value.source === undefined
+      ? {}
+      : { source: parseReference(value.source) }),
   };
 }
 
@@ -190,7 +207,11 @@ function parseReference(value: unknown): ContextSourceReference {
         : { expiresAt: timestamp(value.validity.expiresAt) }),
       ...(value.validity.reason === undefined
         ? {}
-        : { reason: text(value.validity.reason) as ContextSourceReference["validity"]["reason"] }),
+        : {
+            reason: text(
+              value.validity.reason,
+            ) as ContextSourceReference["validity"]["reason"],
+          }),
     },
   };
 }
@@ -213,7 +234,8 @@ function positiveInteger(value: unknown) {
 }
 
 function digest(value: unknown) {
-  if (typeof value !== "string" || !/^[a-f0-9]{64}$/.test(value)) throw invalid();
+  if (typeof value !== "string" || !/^[a-f0-9]{64}$/.test(value))
+    throw invalid();
   return value;
 }
 
@@ -234,7 +256,9 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
 
-function invalid() { return new Error("Context Version 请求无效"); }
+function invalid() {
+  return new Error("Context Version 请求无效");
+}
 
 function errorResponse(code: string, message: string, status: number) {
   return Response.json({ code, message, retryable: status >= 500 }, { status });

package/template/apps/server/src/agent/run-facade.ts

@@ -35,7 +35,7 @@ import {
   mapAgentRuntimeError,
 } from "./run-definition-support.js";
 import { AgentRunFacadeError } from "./run-errors.js";
-import { scopedRuntimeIdempotencyKey } from "./idempotency-key.js";
+import { scopedRuntimeIdempotencyKey } from "../ai-runtime-security/idempotency-key.js";
 import { verifyCommittedRunInput } from "./run-input-verification.js";
 import {
   buildRegisteredOperations,

package/template/apps/server/src/agent/run-input-verification.ts

@@ -4,7 +4,7 @@ import type { RequestGuardContext } from "../guards.js";
 import {
   projectProviderInput,
   ProviderInputGovernanceError,
-} from "./provider-input-governance.js";
+} from "../ai-runtime-security/provider-input-governance.js";
 import {
   AgentRunAuthorizationError,
   type AgentRunAuthorizationStore,

package/template/apps/server/src/agent/run-routes.ts

@@ -4,7 +4,7 @@ import {
   required,
   isRecord,
 } from "./run-route-response.js";
-import { timingSafeEqual } from "node:crypto";
+import { validInternalToken } from "../ai-runtime-security/internal-token.js";
 import type { RequestGuardContext } from "../guards.js";
 import type { RouteApp } from "../system/routes.js";
 import type { AgentRunFacade } from "./run-facade.js";
@@ -326,16 +326,3 @@ async function completeSessionRun(
   }
   await port.completeForRun({ sessionId, runId, outcome, context });
 }
-
-export function validInternalToken(
-  request: Request,
-  expected: string,
-): boolean {
-  const provided = request.headers
-    .get("authorization")
-    ?.replace(/^Bearer /, "");
-  if (!provided || !expected) return false;
-  const left = Buffer.from(provided);
-  const right = Buffer.from(expected);
-  return left.length === right.length && timingSafeEqual(left, right);
-}

package/template/apps/server/src/agent/run-start-preparation.ts

@@ -6,7 +6,7 @@ import {
   governProviderInput,
   projectProviderInput,
   ProviderInputGovernanceError,
-} from "./provider-input-governance.js";
+} from "../ai-runtime-security/provider-input-governance.js";
 import { assertInputSize } from "./run-definition-support.js";
 import { AgentRunFacadeError } from "./run-errors.js";
 import type { RegisteredOperation } from "./run-operation-registry.js";

package/template/apps/server/src/agent/runtime-bootstrap-input.ts

@@ -1,3 +1,4 @@
+import type { AiRuntimeSwitches } from "@southwind-ai/shared";
 import type { PlatformConfig } from "@southwind-ai/config";
 import type { DurableHandlerRegistry } from "@southwind-ai/jobs";
 import type { ModuleManifest } from "@southwind-ai/modules";
@@ -24,6 +25,7 @@ import type { AgentWorkflowWorkspacePolicyDefinition } from "../agent-workflow/w
 export interface AgentPlatformRuntimeInput {
   app: RouteApp;
   platformConfig: PlatformConfig;
+  aiRuntimeSwitches?: AiRuntimeSwitches;
   modules: readonly ModuleManifest[];
   hosts: InitializedModuleHosts;
   runtime: ReturnType<typeof createServerRuntime>;

package/template/apps/server/src/agent/runtime-bootstrap.ts

@@ -1,38 +1,7 @@
 import { resolveCurrentSystemActor } from "../system/actor.js";
 import type { AgentAdminReadinessRef } from "./admin-catalog-bootstrap.js";
 import { registerAgentAdminCatalogRuntime } from "./admin-catalog-bootstrap.js";
-import { AiArtifactCodec } from "../ai-artifact/codec.js";
-import { registerAiArtifactRoutes } from "../ai-artifact/routes.js";
-import { AiArtifactRuntime } from "../ai-artifact/runtime.js";
-import { DocumentRunFacade } from "../document/facade.js";
-import {
-  RemoteDocumentRuntime,
-  unavailableDocumentRuntime,
-} from "../document/remote-runtime.js";
-import { registerDocumentRunRoutes } from "../document/routes.js";
-import { createDocumentOutputRuntime } from "../document/output-artifact-composition.js";
-import { installDocumentOutputRuntimeRoutes } from "../document/output-artifact-route-composition.js";
-import { createModuleAiOperationReadinessPort } from "../ai-runtime-readiness/operation-port.js";
-import { AiRuntimeReadinessTrustStoreV1 } from "../ai-runtime-readiness/trust-store.js";
-import { EmbeddingFacade } from "../embedding/facade.js";
-import { EmbeddingRunAuthorizations } from "../embedding/run-authorization.js";
-import { InMemoryEmbeddingRunBindingRepository } from "../embedding/run-binding-repository.js";
-import { DrizzleEmbeddingRunBindingRepository } from "../embedding/drizzle-run-binding-repository.js";
-import {
-  RemoteEmbeddingRuntime,
-  unavailableEmbeddingRuntime,
-} from "../embedding/remote-runtime.js";
-import {
-  registerEmbeddingRoutes,
-  registerEmbeddingRunArtifactRoutes,
-} from "../embedding/routes.js";
-import { SpeechRunFacade } from "../speech/facade.js";
-import {
-  RemoteSpeechRuntime,
-  unavailableSpeechRuntime,
-} from "../speech/remote-runtime.js";
-import { registerSpeechRunRoutes } from "../speech/routes.js";
-import { ExecutionGrantStore } from "./execution-grants.js";
+import { composeSharedAiRuntime } from "../media-runtime/shared-composition.js";
 import { RemoteAgentRuntime } from "./remote-runtime.js";
 import { AgentRunFacade } from "./run-facade.js";
 import { registerAgentRunRoutes } from "./run-routes.js";
@@ -41,18 +10,16 @@ import { DrizzleAgentRunBindingRepository } from "./drizzle-run-binding-reposito
 import { AgentRunAuthorizationStore } from "./run-authorization.js";
 import { InMemoryAgentRunBindingRepository } from "./run-binding-repository.js";
 import { AgentBackgroundOperationExecutor } from "./background-operation.js";
-import { createModuleAiPorts } from "./module-ai-port-factory.js";
 import { createManifestAuthorizedRouteApp } from "../module-host/static-route-authorization.js";
 import { disableAgentRuntime } from "./runtime-disabled-composition.js";
 import { createClientAgentSessionRuntime } from "./client-session/bootstrap.js";
 import { attachClientAgentWorkflowArtifactRuntime } from "./client-workflow-artifact/runtime-composition.js";
 import { bindClientAgentHostRevocations } from "./client-session/host-revocation-composition.js";
 import { registerAgentSessions } from "./agent-session-bootstrap.js";
-import { createAiRuntimeReadinessSources } from "./runtime-readiness-sources.js";
 import { registerAiRuntimeReporting } from "./runtime-reporting-bootstrap.js";
 import { registerScreenshotIntakeRoutes } from "./screenshot-intake-routes.js";
 import { createScreenshotIntakeRuntimeV2 } from "./screenshot-intake-bootstrap.js";
-import { requiredEnvironment } from "./required-environment.js";
+import { requiredEnvironment } from "../media-runtime/required-environment.js";
 import { composeAgentLongSessionRuntime } from "./session-runtime-composition.js";
 import { registerAgentWorkbenchRuntime } from "./workbench-bootstrap.js";
 import type { AgentPlatformRuntimeInput } from "./runtime-bootstrap-input.js";
@@ -73,31 +40,59 @@ export function registerAgentPlatformRuntime(input: AgentPlatformRuntimeInput) {
     input.app,
     routeAuthorizer,
   );
-  if (!input.platformConfig.enableAI) {
+  if (
+    !input.platformConfig.enableAI ||
+    (input.aiRuntimeSwitches?.agent === false &&
+      input.aiRuntimeSwitches.document === false &&
+      input.aiRuntimeSwitches.speech === false &&
+      input.aiRuntimeSwitches.embedding === false)
+  ) {
     return disableAgentRuntime(input, aiRouteApp, tools);
   }
   const sessionSecret = requiredEnvironment("AI_ARTIFACT_ENCRYPTION_SECRET");
   const internalToken = requiredEnvironment("AGENT_SERVER_INTERNAL_TOKEN");
-  const businessSessions = registerAgentSessions({
-    ...input,
-    secret: internalToken,
-  });
-  const aiArtifacts = new AiArtifactRuntime(
-    new AiArtifactCodec(sessionSecret),
-    input.hosts,
-    input.runtime,
-    features,
-    input.storage,
-    resolveAgentActor,
-  );
-  registerAiArtifactRoutes(aiRouteApp, aiArtifacts, internalToken);
   const agentServerUrl =
     process.env.AGENT_SERVER_URL || "http://agent-server:8080";
-  const remote = new RemoteAgentRuntime({
-    baseUrl: agentServerUrl,
+  const remote =
+    input.aiRuntimeSwitches?.agent === false
+      ? undefined
+      : new RemoteAgentRuntime({
+          baseUrl: agentServerUrl,
+          internalToken,
+          toolHostUrl: process.env.AGENT_TOOL_HOST_URL || "http://server:9747",
+          compatibilityMode: "prefer-v1",
+        });
+  const sharedAi = composeSharedAiRuntime({
+    app: aiRouteApp,
+    switches: input.aiRuntimeSwitches,
+    modules: input.modules,
+    hosts: input.hosts,
+    runtime: input.runtime,
+    storage: input.storage,
+    db: input.db,
+    features,
+    resolveActor: resolveAgentActor,
+    secret: sessionSecret,
     internalToken,
-    toolHostUrl: process.env.AGENT_TOOL_HOST_URL || "http://server:9747",
-    compatibilityMode: "prefer-v1",
+    agent: remote,
+  });
+  const { aiArtifacts } = sharedAi;
+  catalogReadiness.current = sharedAi.catalogReadiness;
+  if (!remote) {
+    const disabledAgent = disableAgentRuntime(input, aiRouteApp, tools, {
+      mediaAvailable: true,
+    });
+    const moduleAi = sharedAi.modulePorts();
+    return {
+      ...disabledAgent,
+      aiArtifacts,
+      aiOperations: moduleAi.operations,
+      aiReadiness: moduleAi.readiness,
+    };
+  }
+  const businessSessions = registerAgentSessions({
+    ...input,
+    secret: internalToken,
   });
   const clientAgentSessionRuntime = createClientAgentSessionRuntime({
     app: input.app,
@@ -142,7 +137,6 @@ export function registerAgentPlatformRuntime(input: AgentPlatformRuntimeInput) {
     agentServerUrl,
     internalToken,
   });
-  const grants = new ExecutionGrantStore();
   const runAuthorizations = new AgentRunAuthorizationStore(
     input.db
       ? new DrizzleAgentRunBindingRepository(input.db)
@@ -165,93 +159,6 @@ export function registerAgentPlatformRuntime(input: AgentPlatformRuntimeInput) {
     ],
     memoryObjects: input.sessionMemoryObjects,
   });
-  const documentRemote = process.env.DOCUMENT_SERVER_URL?.trim()
-    ? new RemoteDocumentRuntime({
-        baseUrl: process.env.DOCUMENT_SERVER_URL,
-        internalToken,
-      })
-    : unavailableDocumentRuntime;
-  const speechRemote = process.env.SPEECH_SERVER_URL?.trim()
-    ? new RemoteSpeechRuntime({
-        baseUrl: process.env.SPEECH_SERVER_URL,
-        internalToken,
-      })
-    : unavailableSpeechRuntime;
-  const embeddingRemote = process.env.EMBEDDING_SERVER_URL?.trim()
-    ? new RemoteEmbeddingRuntime({
-        baseUrl: process.env.EMBEDDING_SERVER_URL,
-        internalToken,
-      })
-    : unavailableEmbeddingRuntime;
-  const readinessSources = createAiRuntimeReadinessSources({
-    agent: remote,
-    document: documentRemote,
-    speech: speechRemote,
-    embedding: embeddingRemote,
-  });
-  const readinessTrustStore = new AiRuntimeReadinessTrustStoreV1();
-  const aiReadiness = createModuleAiOperationReadinessPort({
-    modules: input.modules,
-    sources: readinessSources,
-    trustStore: readinessTrustStore,
-    runtime: input.runtime,
-  });
-  catalogReadiness.current = aiReadiness;
-  const outputRuntime = createDocumentOutputRuntime({
-    modules: input.modules,
-    readiness: aiReadiness,
-    runtime: input.runtime,
-    storage: input.storage,
-    resolveActor: resolveAgentActor,
-    db: input.db,
-  });
-  const documentFacadeWithOutput = new DocumentRunFacade(
-    input.modules,
-    input.hosts,
-    input.runtime,
-    documentRemote,
-    aiArtifacts,
-    grants,
-    outputRuntime?.host,
-    aiReadiness,
-  );
-  installDocumentOutputRuntimeRoutes(outputRuntime, aiRouteApp, internalToken);
-  registerDocumentRunRoutes(
-    aiRouteApp,
-    documentFacadeWithOutput,
-    documentRemote,
-  );
-  const speechFacade = new SpeechRunFacade(
-    input.modules,
-    input.hosts,
-    input.runtime,
-    speechRemote,
-    aiArtifacts,
-    grants,
-    aiReadiness,
-    outputRuntime?.speechHost,
-  );
-  registerSpeechRunRoutes(aiRouteApp, speechFacade, speechRemote);
-  const embeddingFacade = new EmbeddingFacade(
-    input.modules,
-    input.hosts,
-    input.runtime,
-    embeddingRemote,
-    aiArtifacts,
-    new EmbeddingRunAuthorizations(
-      input.db
-        ? new DrizzleEmbeddingRunBindingRepository(input.db)
-        : new InMemoryEmbeddingRunBindingRepository(),
-      internalToken,
-    ),
-    aiReadiness,
-  );
-  registerEmbeddingRoutes(aiRouteApp, embeddingFacade);
-  registerEmbeddingRunArtifactRoutes(
-    aiRouteApp,
-    embeddingFacade,
-    internalToken,
-  );
   const agentFacade = new AgentRunFacade(
     input.modules,
     input.hosts,
@@ -314,22 +221,7 @@ export function registerAgentPlatformRuntime(input: AgentPlatformRuntimeInput) {
       remote,
     ),
   );
-  const moduleAi = createModuleAiPorts({
-    modules: input.modules,
-    runtime: input.runtime,
-    sources: readinessSources,
-    trustStore: readinessTrustStore,
-    operations: {
-      agentFacade,
-      agentRemote: remote,
-      documentFacade: documentFacadeWithOutput,
-      documentRemote,
-      speechFacade,
-      speechRemote,
-      embeddingFacade,
-      modules: input.modules,
-    },
-  });
+  const moduleAi = sharedAi.modulePorts({ agentFacade, agentRemote: remote });
   return {
     toolHandlers,
     aiArtifacts,

package/template/apps/server/src/agent/runtime-disabled-composition.ts

@@ -9,10 +9,11 @@ export function disableAgentRuntime(
   input: AgentPlatformRuntimeInput,
   app: RouteApp,
   tools: ReturnType<typeof composeAgentToolRuntime>,
+  options?: { mediaAvailable: boolean },
 ) {
   registerAgentWorkbenchRuntime(input, app);
   registerProductionAgentWorkflowRuntime(input, app, tools.toolRegistry);
-  registerUnavailableAiRoutes(app);
+  registerUnavailableAiRoutes(app, options);
   return {
     toolHandlers: tools.toolHandlers,
     aiArtifacts: undefined,

package/template/apps/server/src/agent/session-invalidation/authorization-revocation.ts

@@ -0,0 +1,54 @@
+import { agentSourceInvalidations } from "@southwind-ai/database";
+import { and, desc, eq } from "drizzle-orm";
+import type { AgentAuthorizationInvalidationInput } from "../../system/authorization-invalidation-bridge.js";
+import type { ModuleAuthoritativeSourceAccessRegistry } from "../context-memory/authoritative-source-registry.js";
+import type { DrizzleSessionInvalidationOutbox } from "../session-persistence/drizzle-invalidation-outbox.js";
+import { authorizationCoordinateForActor } from "../session-projection-access.js";
+
+export async function invalidateActorAuthorization(
+  input: AgentAuthorizationInvalidationInput,
+  sources: ModuleAuthoritativeSourceAccessRegistry,
+  outbox: DrizzleSessionInvalidationOutbox,
+) {
+  const authorization = authorizationCoordinateForActor(input.previousActor);
+  const sourceKind = "authorization-scope";
+  const [latest] = await input.database
+    .select({ sequence: agentSourceInvalidations.sequence })
+    .from(agentSourceInvalidations)
+    .where(
+      and(
+        eq(agentSourceInvalidations.sourceModuleKey, "system.agent"),
+        eq(agentSourceInvalidations.sourceKind, sourceKind),
+        eq(agentSourceInvalidations.sourceId, authorization.actorId),
+      ),
+    )
+    .orderBy(desc(agentSourceInvalidations.sequence))
+    .limit(1);
+  const occurredAt = Date.parse(input.occurredAt);
+  if (!Number.isSafeInteger(occurredAt) || occurredAt < 1) {
+    throw new Error("Agent 授权失效时间坐标无效");
+  }
+  const sequence = Math.max(occurredAt, (latest?.sequence ?? 0) + 1);
+  const producer = sources.bindInvalidationProducer({
+    moduleKey: "system.agent",
+    authorization,
+    append: {
+      append: (envelope) =>
+        outbox.appendInTransaction(input.database, envelope),
+    },
+  });
+  const result = await producer.authorizationRevoked({
+    source: {
+      sourceKind,
+      sourceId: authorization.actorId,
+      version: authorization.scopeDigest,
+      sequence,
+    },
+    event: {
+      eventId: input.eventId,
+      eventSequence: sequence,
+      occurredAt: input.occurredAt,
+    },
+  });
+  if (result === "stale") throw new Error("Agent 授权失效序列未收敛");
+}