@h-ai/cli 0.1.0-alpha.15 → 0.1.0-alpha.16

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@h-ai/cli",
   "type": "module",
-  "version": "0.1.0-alpha.15",
+  "version": "0.1.0-alpha.16",
   "description": "Hai Framework CLI for project scaffolding and code generation.",
   "license": "Apache-2.0",
   "keywords": [
@@ -34,7 +34,7 @@
     "ora": "^9.1.0",
     "prompts": "^2.4.2",
     "yaml": "^2.7.0",
-    "@h-ai/core": "0.1.0-alpha.15"
+    "@h-ai/core": "0.1.0-alpha.16"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",

package/templates/base/package.json.hbs

@@ -1,6 +1,6 @@
 {
   "name": "{{projectName}}",
-  "version": "0.1.0-alpha.15",
+  "version": "0.1.0-alpha.16",
   "private": true,
   "description": "{{#if_eq appType 'admin'}}Enterprise management system built with hai Agent Framework{{/if_eq}}{{#if_eq appType 'website'}}Enterprise website built with hai Agent Framework{{/if_eq}}{{#if_eq appType 'h5'}}Mobile H5 app built with hai Agent Framework{{/if_eq}}{{#if_eq appType 'api'}}REST API service built with hai Agent Framework{{/if_eq}}{{#if_eq appType 'android-app'}}Android app built with hai Agent Framework{{/if_eq}}",
   "keywords": ["hai", "sveltekit", "svelte5", "{{appType}}"],
@@ -21,26 +21,26 @@
     "clean": "rimraf .svelte-kit build .turbo"
   },
   "dependencies": {
-    "@h-ai/core": "^0.1.0-alpha.15",
-    "@h-ai/kit": "^0.1.0-alpha.15"{{#if hasUi}},
-    "@h-ai/ui": "^0.1.0-alpha.15"{{/if}}{{#if features.db}},
-    "@h-ai/reldb": "^0.1.0-alpha.15"{{/if}}{{#if features.cache}},
-    "@h-ai/cache": "^0.1.0-alpha.15"{{/if}}{{#if features.iam}},
-    "@h-ai/iam": "^0.1.0-alpha.15"{{/if}}{{#if features.crypto}},
-    "@h-ai/crypto": "^0.1.0-alpha.15"{{/if}}{{#if features.storage}},
-    "@h-ai/storage": "^0.1.0-alpha.15"{{/if}}{{#if features.ai}},
-    "@h-ai/ai": "^0.1.0-alpha.15"{{/if}}{{#if features.audit}},
-    "@h-ai/audit": "^0.1.0-alpha.15"{{/if}}{{#if features.reach}},
-    "@h-ai/reach": "^0.1.0-alpha.15"{{/if}}{{#if features.payment}},
-    "@h-ai/payment": "^0.1.0-alpha.15"{{/if}}{{#if features.vecdb}},
-    "@h-ai/vecdb": "^0.1.0-alpha.15"{{/if}}{{#if features.datapipe}},
-    "@h-ai/datapipe": "^0.1.0-alpha.15"{{/if}}{{#if features.scheduler}},
-    "@h-ai/scheduler": "^0.1.0-alpha.15"{{/if}}{{#if features.deploy}},
-    "@h-ai/deploy": "^0.1.0-alpha.15"{{/if}}{{#if features.api-client}},
-    "@h-ai/api-client": "^0.1.0-alpha.15"{{/if}}{{#if features.capacitor}},
-    "@h-ai/capacitor": "^0.1.0-alpha.15"{{/if}}{{#if isCapacitorApp}}{{#unless features.api-client}},
-    "@h-ai/api-client": "^0.1.0-alpha.15"{{/unless}}{{#unless features.capacitor}},
-    "@h-ai/capacitor": "^0.1.0-alpha.15"{{/unless}}{{/if}},
+    "@h-ai/core": "^0.1.0-alpha.16",
+    "@h-ai/kit": "^0.1.0-alpha.16"{{#if hasUi}},
+    "@h-ai/ui": "^0.1.0-alpha.16"{{/if}}{{#if features.db}},
+    "@h-ai/reldb": "^0.1.0-alpha.16"{{/if}}{{#if features.cache}},
+    "@h-ai/cache": "^0.1.0-alpha.16"{{/if}}{{#if features.iam}},
+    "@h-ai/iam": "^0.1.0-alpha.16"{{/if}}{{#if features.crypto}},
+    "@h-ai/crypto": "^0.1.0-alpha.16"{{/if}}{{#if features.storage}},
+    "@h-ai/storage": "^0.1.0-alpha.16"{{/if}}{{#if features.ai}},
+    "@h-ai/ai": "^0.1.0-alpha.16"{{/if}}{{#if features.audit}},
+    "@h-ai/audit": "^0.1.0-alpha.16"{{/if}}{{#if features.reach}},
+    "@h-ai/reach": "^0.1.0-alpha.16"{{/if}}{{#if features.payment}},
+    "@h-ai/payment": "^0.1.0-alpha.16"{{/if}}{{#if features.vecdb}},
+    "@h-ai/vecdb": "^0.1.0-alpha.16"{{/if}}{{#if features.datapipe}},
+    "@h-ai/datapipe": "^0.1.0-alpha.16"{{/if}}{{#if features.scheduler}},
+    "@h-ai/scheduler": "^0.1.0-alpha.16"{{/if}}{{#if features.deploy}},
+    "@h-ai/deploy": "^0.1.0-alpha.16"{{/if}}{{#if features.api-client}},
+    "@h-ai/api-client": "^0.1.0-alpha.16"{{/if}}{{#if features.capacitor}},
+    "@h-ai/capacitor": "^0.1.0-alpha.16"{{/if}}{{#if isCapacitorApp}}{{#unless features.api-client}},
+    "@h-ai/api-client": "^0.1.0-alpha.16"{{/unless}}{{#unless features.capacitor}},
+    "@h-ai/capacitor": "^0.1.0-alpha.16"{{/unless}}{{/if}},
     "zod": "^4.3.6"
   },
   "devDependencies": {

package/templates/skills/hai-serv/SKILL.md

@@ -343,10 +343,11 @@ const adminOnly = serv.requireAuth(
 
 #### HTTP middleware
 
-适用于请求日志、trace、限流、CORS、租户头校验等 **HTTP 层** 横切逻辑：
+适用于请求日志、trace、限流、CORS、租户头校验等 **HTTP 层** 横切逻辑。常见 CORS 场景可直接复用 `serv.cors(...)`：
 
 ```typescript
 import type { ServMiddleware } from '@h-ai/serv'
+import { serv } from '@h-ai/serv'
 
 const requestMetrics: ServMiddleware = async (c, next) => {
   const startedAt = Date.now()
@@ -359,6 +360,13 @@ const app = serv.createApp({
   procedures,
   http: { apiPrefix: '/api/v1' },
   middlewares: [
+    {
+      middleware: serv.cors({
+        origin: origin => origin === 'https://app.example.com',
+        credentials: true,
+        exposedHeaders: ['X-Encrypted', 'X-Request-Id'],
+      }),
+    },
     { middleware: requestMetrics },
     {
       path: '/api/v1/*',
@@ -372,7 +380,10 @@ const app = serv.createApp({
 })
 ```
 
-执行顺序固定为：`securityHeaders` → `transport`（若启用）→ `middlewares` → health/refresh-cookie/OpenAPI/RPC/docs/oRPC routes。
+执行顺序固定为：`securityHeaders` → `middlewares` → `transport`（若启用）→ health/refresh-cookie/OpenAPI/RPC/docs/oRPC routes。
+
+- `middlewares` 先于 `transport` 执行，因此 CORS 这类 preflight middleware 可以直接短路返回；若需要读取解密后的业务 body，请改用 context / procedure 层扩展。
+- 浏览器若需读取自定义响应头（例如 transport 的 `X-Encrypted`），记得通过 `serv.cors({ exposedHeaders: [...] })` 显式暴露。
 
 #### Context pipeline