@h-ai/cli 0.1.0-alpha.59 → 0.1.0-alpha.61

package/dist/{chunk-WUSFJFW5.js → chunk-WW2MIO6T.js}

@@ -37,9 +37,6 @@ function generateConfigFile(moduleKey, configs) {
 function generateCoreConfig(cfg) {
   const name = cfg?.name ?? "my-app";
   const locale = cfg?.defaultLocale ?? "zh-CN";
-  const supportedLocales = locale === "en-US" ? `  - en-US
-  - zh-CN` : `  - zh-CN
-  - en-US`;
   return `# =============================================================================
 # \u5E94\u7528\u914D\u7F6E
 # =============================================================================
@@ -52,14 +49,18 @@ debug: false
 logging:
   level: info
   format: json
+  # context:
+  #   service: api
   redact:
     - password
     - token
     - secret
 
 defaultLocale: ${locale}
-supportedLocales:
-${supportedLocales}
+# \u77ED ID \u751F\u6210\u9009\u9879\uFF1B\u8BED\u8A00\u5217\u8868\u5728\u524D\u7AEF project.inlang/settings.json \u4E2D\u7EF4\u62A4\u3002
+# id:
+#   prefix: app_
+#   length: 21
 `;
 }
 function generateServConfig() {
@@ -67,19 +68,42 @@ function generateServConfig() {
 # Service / HTTP \u5165\u53E3\u914D\u7F6E
 # =============================================================================
 
+server:
+  host: 127.0.0.1
+  port: 3000
+
 http:
   apiPrefix: /api/v1
   openapi:
     path: /openapi.json
   docs:
     path: /docs
+    # requireAuth: true
   health:
     path: /health
     readyPath: /ready
   rpc: false
+  # \u542F\u7528\u5185\u90E8 RPC \u65F6\u7528\u5BF9\u8C61\u66FF\u6362 false\uFF0Cgateway-only \u5FC5\u987B\u914D\u7F6E\u7F51\u5173\u5BC6\u94A5\u3002
+  # rpc:
+  #   prefix: /api/rpc
+  #   access: gateway-only # loopback | private-network | gateway-only
+  #   gatewayHeader: X-Gateway-Key
+  #   gatewaySecret: \${HAI_SERV_HTTP_RPC_GATEWAYSECRET}
+
+# \u6309\u9700\u5F00\u542F\u8DE8\u57DF\u8BBF\u95EE\uFF0C\u751F\u4EA7\u73AF\u5883\u586B\u5199\u660E\u786E\u7684 Origin\u3002
+# cors:
+#   origin: https://app.example.com
+#   nativeOrigins: capacitor://localhost,tauri://localhost
+#   allowedHeaders: [Authorization, Content-Type, X-Request-Id]
+#   exposedHeaders: [X-Request-Id]
+#   credentials: true
 
 # \u5F00\u53D1\u671F\u9ED8\u8BA4\u5173\u95ED transport\uFF1B\u542F\u7528 @h-ai/crypto \u540E\u53EF\u6309\u9700\u6539\u4E3A\u5BF9\u8C61\u914D\u7F6E
 transport: false
+# transport:
+#   keyExchangePath: /_hai/key-exchange
+#   excludePaths: [/health, /ready]
+#   maxClients: 10000
 `;
 }
 function generateDbConfig(cfg) {
@@ -87,25 +111,19 @@ function generateDbConfig(cfg) {
   const database = cfg?.database ?? (dbType === "sqlite" ? "./data/app.db" : "hai");
   const host = cfg?.host ?? "localhost";
   const port = cfg?.port ?? (dbType === "postgresql" ? 5432 : 3306);
-  if (dbType === "sqlite") {
-    return `# =============================================================================
-# \u6570\u636E\u5E93\u914D\u7F6E
-# =============================================================================
-
-# \u6570\u636E\u5E93\u7C7B\u578B: sqlite | postgresql | mysql
-type: sqlite
-
-# SQLite \u6570\u636E\u5E93\u8DEF\u5F84
-database: ${database}
-
-# PostgreSQL/MySQL \u914D\u7F6E\uFF08\u53EF\u9009\uFF09
-# host: localhost
-# port: 5432
-# user: postgres
-# password: ''
-`;
-  }
   const user = dbType === "postgresql" ? "postgres" : "root";
+  const connection = stringify({ host, port, user, password: "" }).trim();
+  const networkOptions = `# url: \${HAI_DB_URL} # \u53EF\u7528\u8FDE\u63A5\u4E32\u66FF\u4EE3 host/port/user/password
+# ssl: false # false | true | require | prefer | allow | disable\uFF0C\u6216 TLS \u5BF9\u8C61
+# pool:
+#   min: 1
+#   max: 10
+#   idleTimeout: 30000
+#   acquireTimeout: 10000
+# MySQL \u4E13\u7528\uFF1BPostgreSQL \u65E0\u9700\u6B64\u5757\u3002
+# mysql:
+#   charset: utf8mb4
+#   timezone: '+08:00'`;
   return `# =============================================================================
 # \u6570\u636E\u5E93\u914D\u7F6E
 # =============================================================================
@@ -113,48 +131,68 @@ database: ${database}
 # \u6570\u636E\u5E93\u7C7B\u578B: sqlite | postgresql | mysql
 type: ${dbType}
 
-# \u6570\u636E\u5E93\u540D\u79F0
-database: ${database}
-
-# \u8FDE\u63A5\u914D\u7F6E
-host: ${host}
-port: ${port}
-user: ${user}
-password: ''
+# SQLite \u4F7F\u7528\u6587\u4EF6\u8DEF\u5F84\uFF0CPostgreSQL/MySQL \u4F7F\u7528\u6570\u636E\u5E93\u540D\u79F0\u3002
+${stringify({ database }).trim()}
+
+${dbType === "sqlite" ? `# SQLite \u9A71\u52A8\u9009\u9879\uFF1Bworker \u5C06\u67E5\u8BE2\u79FB\u5230\u5DE5\u4F5C\u7EBF\u7A0B\u3002
+# sqlite:
+#   walMode: true
+#   readonly: false
+#   executor: sync # sync | worker
+#   workerConnectTimeoutMs: 10000
+
+# \u5207\u6362\u5230 PostgreSQL/MySQL \u65F6\u4FEE\u6539 type\u3001database\uFF0C\u5E76\u53D6\u6D88\u8FDE\u63A5\u9879\u7684\u6CE8\u91CA\u3002
+${stringify({ host: "localhost", port: 5432, user: "postgres", password: "" }).trim().split("\n").map((line) => `# ${line}`).join("\n")}` : `# \u7F51\u7EDC\u6570\u636E\u5E93\u8FDE\u63A5\uFF1B\u51ED\u636E\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u6CE8\u5165\u3002
+${connection}
+# SQLite \u66FF\u4EE3\u65B9\u6848\uFF1Atype: sqlite\uFF0Cdatabase: ./data/app.db
+# sqlite:
+#   walMode: true
+#   readonly: false
+#   executor: sync
+#   workerConnectTimeoutMs: 10000`}
+${networkOptions}
+
+# SQL \u65E5\u5FD7\u6309\u9700\u5F00\u542F\uFF1BmaxLength \u9650\u5236 SQL / \u53C2\u6570\u8F93\u51FA\u957F\u5EA6\u3002
+# operationLog:
+#   read: false
+#   write: false
+#   maxLength: 1000
+#   level: debug # trace | debug | info
 `;
 }
 function generateCacheConfig(cfg) {
   const cacheType = cfg?.type ?? "memory";
-  if (cacheType === "memory") {
-    return `# =============================================================================
-# \u7F13\u5B58\u914D\u7F6E
-# =============================================================================
-
-# \u7F13\u5B58\u7C7B\u578B: memory | redis
-type: memory
-
-# Redis \u914D\u7F6E\uFF08\u5F53 type \u4E3A redis \u65F6\u4F7F\u7528\uFF09
-# url: redis://localhost:6379/0
-# host: localhost
-# port: 6379
-# password: ''
-# keyPrefix: 'hai:'
-`;
-  }
   const host = cfg?.host ?? "localhost";
   const port = cfg?.port ?? 6379;
+  const connection = stringify({ host, port, password: "", keyPrefix: "hai:" }).trim();
   return `# =============================================================================
 # \u7F13\u5B58\u914D\u7F6E
 # =============================================================================
 
 # \u7F13\u5B58\u7C7B\u578B: memory | redis
-type: redis
+type: ${cacheType}
 
-# Redis \u914D\u7F6E
-host: ${host}
-port: ${port}
-password: ''
-keyPrefix: 'hai:'
+# Redis \u914D\u7F6E\uFF1Bmemory \u65F6\u5747\u4E0D\u751F\u6548\uFF0C\u5207\u6362 type \u540E\u53D6\u6D88\u9700\u8981\u7684\u6CE8\u91CA\u3002
+${cacheType === "redis" ? connection : connection.split("\n").map((line) => `# ${line}`).join("\n")}
+# url: redis://localhost:6379/0
+# db: 0
+# connectTimeout: 10000
+# commandTimeout: 5000
+# tls: false
+# maxRetries: 3
+# retryDelay: 50
+# readOnly: false
+# \u96C6\u7FA4\u4E0E Sentinel \u4E8C\u9009\u4E00\uFF1B\u666E\u901A Redis \u4E0D\u9700\u8981\u8FD9\u4E24\u5757\u3002
+# cluster:
+#   - host: redis-1.internal
+#     port: 6379
+#   - host: redis-2.internal
+#     port: 6379
+# sentinel:
+#   sentinels:
+#     - host: sentinel.internal
+#       port: 26379
+#   name: mymaster
 `;
 }
 function generateIamConfig(cfg) {
@@ -169,6 +207,69 @@ login:
   password: ${loginPassword}
   otp: ${loginOtp}
   ldap: false
+  apikey: false
+
+# \u6CE8\u518C\u4E0E\u767B\u5F55\u5B89\u5168
+register:
+  enabled: true
+  defaultEnabled: true
+security:
+  maxLoginAttempts: 5
+  lockoutDuration: 900
+
+# LDAP \u53EF\u9009\uFF1A\u5B89\u88C5 ldapts \u540E\u5F00\u542F login.ldap\uFF1B\u4E5F\u53EF\u5728 iam.init \u4E2D\u6CE8\u5165 ldapClientFactory\u3002
+# ldap:
+#   url: ldaps://ldap.example.com:636
+#   bindDn: cn=service,dc=example,dc=com
+#   bindPassword: \${HAI_IAM_LDAP_BINDPASSWORD}
+#   searchBase: ou=users,dc=example,dc=com
+#   searchFilter: '(uid={{username}})'
+#   usernameAttribute: uid
+#   emailAttribute: mail
+#   displayNameAttribute: cn
+#   useTls: false # ldap:// \u8FDE\u63A5\u53EF\u5F00\u542F STARTTLS\uFF1Bldaps:// \u5DF2\u4F7F\u7528 TLS
+#   connectTimeout: 5000
+# API Key \u767B\u5F55\u53EF\u9009\uFF1B\u5BC6\u94A5\u7BA1\u7406\u5165\u53E3\u7531\u5E94\u7528\u6309\u6743\u9650\u63A5\u5165\u3002
+# apikey:
+#   maxKeysPerUser: 10
+#   defaultExpirationDays: 0 # 0 \u8868\u793A\u4E0D\u9650\u5236\u6709\u6548\u671F
+#   prefix: hai_
+# OTP \u9700\u542F\u7528 login.otp\uFF0C\u5E76\u9009\u62E9 Reach \u6807\u51C6\u6A21\u677F\u6216\u81EA\u5B9A\u4E49\u53D1\u9001\u56DE\u8C03\u3002
+${(loginOtp ? "" : "# \u4FDD\u7559\u9ED8\u8BA4\u7B56\u7565\u5165\u53E3\uFF0C\u5355\u72EC\u5207\u6362 login.otp \u5373\u53EF\u542F\u7528\u9A8C\u8BC1\u7801\u767B\u5F55\u3002\notp: {}\n# \u5B9A\u5236\u7B56\u7565\u65F6\u7528\u4E0B\u65B9\u914D\u7F6E\u5757\u66FF\u6362\u7A7A\u5BF9\u8C61\uFF0C\u6216\u901A\u8FC7 HAI_IAM_OTP \u6574\u4F53\u8986\u76D6\u3002\n") + `otp:
+  email: true
+  sms: true
+  length: 6
+  expiresIn: 300
+  maxAttempts: 3
+  resendInterval: 60`.split("\n").map((line) => loginOtp ? line : `# ${line}`).join("\n")}
+passwordReset:
+  enabled: true
+  mode: email # phone \u4F7F\u7528 password_reset_sms \u6A21\u677F
+  tokenExpiresIn: 3600
+  maxAttempts: 3
+  # resetUrl: https://example.com/auth/reset-password
+agreements:
+  showOnRegister: true
+  showOnLogin: false
+  # \u7528 | \u914D\u7F6E Markdown \u6B63\u6587\uFF1B\u540C\u4E3B\u9898\u540C\u65F6\u63D0\u4F9B URL \u65F6\u4F18\u5148\u663E\u793A\u6B63\u6587\u3002
+  userAgreementMarkdown: |
+    # \u7528\u6237\u534F\u8BAE\u793A\u4F8B
+
+    \u8BF7\u59A5\u5584\u4FDD\u7BA1\u8D26\u6237\u51ED\u636E\uFF0C\u5E76\u6309\u5E94\u7528\u63D0\u4F9B\u7684\u529F\u80FD\u4F7F\u7528\u670D\u52A1\u3002
+  privacyPolicyMarkdown: |
+    # \u9690\u79C1\u653F\u7B56\u793A\u4F8B
+
+    \u6CE8\u518C\u8D44\u6599\u7528\u4E8E\u8D26\u6237\u7BA1\u7406\uFF0C\u4F1A\u8BDD\u4FE1\u606F\u7528\u4E8E\u8EAB\u4EFD\u8BA4\u8BC1\u3002
+  # userAgreementUrl: https://example.com/terms
+  # privacyPolicyUrl: https://example.com/privacy
+ui:
+  variant: card
+  # title: Account center
+  # subtitle: Welcome back
+  # brandTitle: Your application
+  # brandText: Sign in securely
+  # logoUrl: /logo.svg
+  # illustrationUrl: /auth-illustration.svg
 
 # \u5BC6\u7801\u7B56\u7565
 password:
@@ -178,6 +279,7 @@ password:
   requireLowercase: false
   requireNumber: false
   requireSpecialChar: false
+  expirationDays: 0 # 0 \u8868\u793A\u4E0D\u9650\u5236\u5BC6\u7801\u6709\u6548\u671F
 
 # \u4F1A\u8BDD\u914D\u7F6E
 session:
@@ -188,6 +290,8 @@ session:
 
 # RBAC \u914D\u7F6E
 rbac:
+  enabled: true
+  superAdminRole: super_admin
   defaultRole: user
 
 # \u662F\u5426\u81EA\u52A8\u521B\u5EFA\u9ED8\u8BA4\u6570\u636E
@@ -195,24 +299,35 @@ seedDefaultData: true
 `;
 }
 function generateStorageConfig(cfg) {
-  if ((cfg?.type ?? "local") === "local") {
-    return `# \u5B58\u50A8\u914D\u7F6E\uFF1BHAI_STORAGE \u53EF\u6574\u4F53\u66FF\u6362\u4E3A S3 \u914D\u7F6E\u3002
-type: local
-root: ${cfg?.localPath ?? "./data/uploads"}
-`;
-  }
-  return `# S3 \u5B58\u50A8\u914D\u7F6E
-type: s3
-bucket: ''
+  const type = cfg?.type ?? "local";
+  const local = `${stringify({ root: cfg?.localPath ?? "./data/uploads" }).trim()}
+# directoryMode: 493 # 0o755
+# fileMode: 420 # 0o644`;
+  const s3 = `bucket: ''
 region: us-east-1
 accessKeyId: ''
 secretAccessKey: ''
-endpoint: https://s3.amazonaws.com
-forcePathStyle: false
+# endpoint: https://s3.amazonaws.com
+# forcePathStyle: false
+# prefix: ''
+# publicUrl: https://cdn.example.com`;
+  return `# \u5B58\u50A8\u914D\u7F6E\uFF1BHAI_STORAGE \u53EF\u6574\u4F53\u66FF\u6362\u8FDE\u63A5\u914D\u7F6E\u3002
+type: ${type}
+${type === "local" ? local : s3}
+
+# \u5207\u6362 type \u540E\u4F7F\u7528\u53E6\u4E00\u79CD\u5B58\u50A8\u7684\u8FDE\u63A5\u9879\u3002
+${(type === "local" ? s3 : local).split("\n").map((line) => line.startsWith("#") ? line : `# ${line}`).join("\n")}
+
+# operationLog:
+#   read: false
+#   write: false
+#   maxLength: 1000
+#   level: debug # trace | debug | info
 `;
 }
 function generateAiConfig(cfg) {
   const model = cfg?.model ?? "gpt-4o-mini";
+  const api = cfg?.defaultProvider === "anthropic" ? "anthropic" : "chat";
   return `# =============================================================================
 # AI \u914D\u7F6E
 # =============================================================================
@@ -224,18 +339,26 @@ llm:
   # Base URL\uFF08\u7EA6\u5B9A\u73AF\u5883\u53D8\u91CF HAI_AI_LLM_BASEURL \u4F18\u5148\uFF09
   # baseUrl: https://api.openai.com/v1
   # \u9ED8\u8BA4\u6A21\u578B
-  model: ${model}
+${stringify({ model }).trim().split("\n").map((line) => `  ${line}`).join("\n")}
+  api: ${api} # chat | responses | anthropic
   # \u5168\u5C40\u6700\u5927 Token \u6570\uFF08\u9ED8\u8BA4 4096\uFF09
   # maxTokens: 4096
   # \u91C7\u6837\u6E29\u5EA6\uFF080-2\uFF0C\u9ED8\u8BA4 0.7\uFF09
   # temperature: 0.7
   # \u8BF7\u6C42\u8D85\u65F6\uFF08\u6BEB\u79D2\uFF0C\u9ED8\u8BA4 60000\uFF09
   # timeout: 60000
+  # tempModelCacheTtl: 600000
 
   # \u591A\u6A21\u578B\u914D\u7F6E\uFF08\u53EF\u9009\uFF0C\u7528\u4E8E\u573A\u666F\u8DEF\u7531\uFF09
   # models:
   #   - id: fast
   #     model: gpt-4o-mini
+  #     api: chat
+  #     apiKey: ''
+  #     baseUrl: https://api.openai.com/v1
+  #     maxTokens: 4096
+  #     temperature: 0.7
+  #     timeout: 60000
   #   - id: smart
   #     model: gpt-4o
   #     apiKey: ''
@@ -243,10 +366,134 @@ llm:
   # \u573A\u666F\u6A21\u578B\u6620\u5C04\uFF08\u53EF\u9009\uFF09
   # scenarios:
   #   default: fast
-  #   analysis: smart
+  #   chat: fast
+  #   reasoning: smart
+  #   plan: smart
+  #   execute: fast
+  #   extraction: fast
+  #   summary: fast
+  #   embedding: embedding
+  #   rerank: rerank
+  #   ocr: vision
+  #   fast: fast
+  # embedding / rerank / vision \u987B\u5728 models \u4E2D\u58F0\u660E\u5BF9\u5E94\u5382\u5546\u6A21\u578B\uFF0C\u4E0D\u80FD\u53EA\u586B\u5199\u573A\u666F ID\u3002
+
+# \u53EF\u9009\u5B50\u6A21\u5757\uFF1A\u53EA\u53D6\u6D88\u9700\u8981\u7684\u5757\u7684\u6CE8\u91CA\uFF0C\u6A21\u578B\u3001\u5411\u91CF\u5E93\u4E0E\u6570\u636E\u5E93\u4F9D\u8D56\u6309\u4F7F\u7528\u573A\u666F\u521D\u59CB\u5316\u3002
+# mcp:
+#   server:
+#     name: my-app
+#     version: 1.0.0
+#     capabilities:
+#       tools: true
+#       resources: true
+#       prompts: true
+# embedding:
+#   dimensions: 1536
+#   batchSize: 100
+# knowledge:
+#   collection: hai_ai_knowledge
+#   dimension: 1536
+#   enableEntityExtraction: true
+#   entityBoostWeight: 0.15
+#   entityTypes: [person, organization, location]
+#   systemPrompt: 'Extract entities from the input.'
+#   cleanOptions:
+#     removeHtml: true
+#     removeUrls: false
+#     removeEmails: false
+#     normalizeWhitespace: true
+#     trim: true
+#     customReplacements:
+#       - pattern: '\\t+'
+#         replacement: ' '
+#   chunkOptions:
+#     mode: markdown # sentence | paragraph | markdown | page | word | character | custom
+#     maxSize: 1500
+#     overlap: 200
+#     separator: '\\n\\n' # \u4EC5 custom \u6A21\u5F0F\u4F7F\u7528
+#     markdownMinLevel: 2
+#     markdownKeepTitle: true
+# memory:
+#   provider: native # native | mem0
+#   allowEphemeralFallback: false
+#   maxEntriesPerObject: 1000
+#   maxEntriesGlobal: 100000
+#   systemPrompt: 'Extract useful memories from the conversation.'
+#   recencyDecay: 0.95
+#   embeddingEnabled: true
+#   defaultTopK: 10
+#   candidateMultiplier: 5
+#   writebackRelatedTopK: 20
+# token:
+#   tokenRatio: 0.25
+# summary:
+#   systemPrompt: 'Summarize the conversation.'
+# compress:
+#   defaultStrategy: hybrid # summary | sliding-window | hybrid
+#   defaultMaxTokens: 0
+#   preserveLastN: 4
+# retrieval:
+#   sources:
+#     - id: docs
+#       collection: documentation
+#       name: Product documentation
+#       url: https://docs.example.com
+#       topK: 5
+#       minScore: 0.7
+#       filter:
+#         published: true
+# file:
+#   systemPrompt: 'Extract text from the image.'
+# a2a:
+#   agentCard:
+#     name: my-agent
+#     description: Application agent
+#     url: https://agent.example.com
+#     version: 1.0.0
+#     skills:
+#       - id: chat
+#         name: Chat
+#         description: General conversation
+#         tags: [chat]
+#   security:
+#     apiKey:
+#       in: header # header | query
+#       name: x-api-key
+# audio:
+#   inheritLlmApiKey: false
+#   transcribeModel: asr
+#   synthesizeModel: tts
+#   maxAudioBytes: 10485760
+#   maxStreamDurationMs: 300000
+#   models:
+#     - id: asr
+#       provider: openai # openai | mimo | qwen | doubao | whisper | indextts
+#       model: whisper-1
+#       operations: [transcribe]
+#       apiKey: ''
+#       baseUrl: https://api.openai.com/v1
+#       timeout: 60000
+#       appKey: '' # \u8C46\u5305\u65E7\u7248\u63A7\u5236\u53F0 ASR \u4F7F\u7528
+#       accessKey: ''
+#       resourceId: ''
+#       workspaceId: '' # \u767E\u70BC\u4E1A\u52A1\u7A7A\u95F4
+#     - id: tts
+#       provider: openai
+#       model: tts-1
+#       operations: [synthesize]
+# image:
+#   generateModel: image
+#   models:
+#     - id: image
+#       provider: openai # openai | google | qwen | seedream | pollinations
+#       model: gpt-image-1
+#       apiKey: ''
+#       baseUrl: https://api.openai.com/v1
+#       workspaceId: ''
+#       timeout: 120000
 `;
 }
-function generateEnvExample(features, configs) {
+function generateEnvExample(features, configs, includeDisabled = false) {
   const sections = [];
   sections.push(`# =============================================================================
 # Environment Variables
@@ -254,6 +501,7 @@ function generateEnvExample(features, configs) {
 #
 # Copy this file to .env and fill in actual values.
 # Config files use literal defaults; matching HAI variables override YAML leaves.
+# Uncomment the matching YAML keys before using leaf overrides; HAI_<module> replaces the whole object.
 #
 # Naming convention: HAI_<config name>_<YAML path>
 # =============================================================================`);
@@ -265,7 +513,7 @@ function generateEnvExample(features, configs) {
 HAI_CORE_ENV=development
 # Enable debug mode
 HAI_CORE_DEBUG=false`);
-  if (features.includes("db")) {
+  if (features.includes("db") || includeDisabled) {
     const dbType = configs?.db?.type ?? "sqlite";
     const dbDatabase = configs?.db?.database ?? (dbType === "sqlite" ? "./data/app.db" : "hai");
     const isSqlite = dbType === "sqlite";
@@ -288,7 +536,7 @@ HAI_DB_PORT=${configs?.db?.port ?? (dbType === "postgresql" ? 5432 : 3306)}
 HAI_DB_USER=${dbType === "postgresql" ? "postgres" : "root"}
 HAI_DB_PASSWORD=`}`);
   }
-  if (features.includes("iam")) {
+  if (features.includes("iam") || includeDisabled) {
     sections.push(`
 # =============================================================================
 # IAM (@h-ai/iam)
@@ -296,10 +544,13 @@ HAI_DB_PASSWORD=`}`);
 # HAI_IAM_PASSWORD_MINLENGTH=8
 # HAI_IAM_SESSION_MAXAGE=86400
 # HAI_IAM_SESSION_REFRESHTOKENMAXAGE=604800
+# HAI_IAM_OTP={"email":true,"sms":true,"length":6,"expiresIn":300,"maxAttempts":3,"resendInterval":60}
+# HAI_IAM_LDAP_BINDPASSWORD=          # Enable login.ldap and uncomment the ldap block first.
+# HAI_IAM_PASSWORDRESET_RESETURL=https://app.example.com/auth/reset-password
 # HAI_KIT_COOKIE_KEY=                 # 32-char hex for SM4-CBC cookie encryption
 `);
   }
-  if (features.includes("cache")) {
+  if (features.includes("cache") || includeDisabled) {
     const cacheType = configs?.cache?.type ?? "memory";
     if (cacheType === "redis") {
       sections.push(`
@@ -314,9 +565,9 @@ HAI_CACHE_PORT=${configs?.cache?.port ?? 6379}
 HAI_CACHE_PASSWORD=
 # HAI_CACHE_URL=redis://localhost:6379/0
 # HAI_CACHE_DB=0
-# HAI_CACHE_CONNECT_TIMEOUT=10000
-# HAI_CACHE_COMMAND_TIMEOUT=5000
-# HAI_CACHE_KEY_PREFIX=hai:`);
+# HAI_CACHE_CONNECTTIMEOUT=10000
+# HAI_CACHE_COMMANDTIMEOUT=5000
+# HAI_CACHE_KEYPREFIX=hai:`);
     } else {
       sections.push(`
 # =============================================================================
@@ -330,12 +581,12 @@ HAI_CACHE_TYPE=memory
 # HAI_CACHE_PORT=6379
 # HAI_CACHE_PASSWORD=
 # HAI_CACHE_DB=0
-# HAI_CACHE_CONNECT_TIMEOUT=10000
-# HAI_CACHE_COMMAND_TIMEOUT=5000
-# HAI_CACHE_KEY_PREFIX=hai:`);
+# HAI_CACHE_CONNECTTIMEOUT=10000
+# HAI_CACHE_COMMANDTIMEOUT=5000
+# HAI_CACHE_KEYPREFIX=hai:`);
     }
   }
-  if (features.includes("storage")) {
+  if (features.includes("storage") || includeDisabled) {
     const storageType = configs?.storage?.type ?? "local";
     if (storageType === "s3") {
       sections.push(`
@@ -371,46 +622,23 @@ HAI_STORAGE_ROOT=${configs?.storage?.localPath ?? "./data/uploads"}
 # HAI_STORAGE_FORCEPATHSTYLE=false`);
     }
   }
-  if (features.includes("ai")) {
-    const provider = configs?.ai?.defaultProvider ?? "openai";
-    if (provider === "anthropic") {
-      sections.push(`
-# =============================================================================
-# AI (@h-ai/ai)
-# =============================================================================
-# OpenAI-compatible API Key (Anthropic models via OpenAI-compatible proxy)
-HAI_AI_LLM_APIKEY=
-# HAI_AI_LLM_BASEURL=               # Custom base URL
-# Optional compatibility fallback
-# OPENAI_API_KEY=`);
-    } else if (provider === "openai") {
-      sections.push(`
-# =============================================================================
-# AI (@h-ai/ai)
-# =============================================================================
-# OpenAI / OpenAI-compatible
-HAI_AI_LLM_APIKEY=
-# HAI_AI_LLM_BASEURL=               # Custom base URL (e.g. local proxy, Azure)
-# Optional compatibility fallback
-# OPENAI_API_KEY=`);
-    } else {
-      sections.push(`
+  if (features.includes("ai") || includeDisabled) {
+    sections.push(`
 # =============================================================================
 # AI (@h-ai/ai)
 # =============================================================================
-# OpenAI-compatible provider
+# Select chat / responses / anthropic in _ai.yml (llm.api).
 HAI_AI_LLM_APIKEY=
 # HAI_AI_LLM_BASEURL=               # Custom base URL
 # Optional compatibility fallback
 # OPENAI_API_KEY=`);
-    }
   }
-  if (features.includes("vecdb")) {
+  if (features.includes("vecdb") || includeDisabled) {
     sections.push(`
 # =============================================================================
 # Vector Database (@h-ai/vecdb)
 # =============================================================================
-# Backend type: lancedb | pgvector | qdrant
+# Backend type: lancedb | pgvector | qdrant | chroma
 HAI_VECDB_TYPE=lancedb
 # LanceDB data path
 HAI_VECDB_PATH=./data/vecdb
@@ -419,7 +647,7 @@ HAI_VECDB_PATH=./data/vecdb
 # HAI_VECDB_APIKEY=
 `);
   }
-  if (features.includes("reach")) {
+  if (features.includes("reach") || includeDisabled) {
     sections.push(`
 # =============================================================================
 # Reach (@h-ai/reach)
@@ -430,9 +658,13 @@ HAI_VECDB_PATH=./data/vecdb
 # HAI_REACH_SMTP_USER=
 # HAI_REACH_SMTP_PASS=
 # HAI_REACH_SMTP_FROM=noreply@example.com
+# HAI_REACH_SMS_ACCESS_KEY=
+# HAI_REACH_SMS_SECRET_KEY=
+# HAI_REACH_API_TOKEN=
+# HAI_REACH_PROVIDERS=                # JSON array replacing all providers, while retaining templates.
 `);
   }
-  if (features.includes("payment")) {
+  if (features.includes("payment") || includeDisabled) {
     sections.push(`
 # =============================================================================
 # Payment (@h-ai/payment)
@@ -442,6 +674,7 @@ HAI_VECDB_PATH=./data/vecdb
 # HAI_PAYMENT_WECHAT_APIV3KEY=
 # HAI_PAYMENT_WECHAT_SERIALNO=
 # HAI_PAYMENT_WECHAT_PRIVATEKEY=
+# HAI_PAYMENT_WECHAT_PLATFORMCERT=
 # HAI_PAYMENT_WECHAT_APPID=
 # Alipay
 # HAI_PAYMENT_ALIPAY_APPID=
@@ -450,6 +683,42 @@ HAI_VECDB_PATH=./data/vecdb
 # Stripe
 # HAI_PAYMENT_STRIPE_SECRETKEY=
 # HAI_PAYMENT_STRIPE_WEBHOOKSECRET=
+`);
+  }
+  if (features.includes("deploy") || includeDisabled) {
+    sections.push(`
+# =============================================================================
+# Deployment (@h-ai/deploy)
+# =============================================================================
+# HAI_DEPLOY_VERCEL_TOKEN=
+# HAI_DEPLOY_SSH_HOST=
+# HAI_DEPLOY_SSH_KEY=
+# HAI_DEPLOY_SSH_KNOWNHOSTSFILE=
+# HAI_DEPLOY_NEON_API_KEY=
+# HAI_DEPLOY_UPSTASH_EMAIL=
+# HAI_DEPLOY_UPSTASH_API_KEY=
+# HAI_DEPLOY_CF_ACCOUNT_ID=
+# HAI_DEPLOY_CF_API_TOKEN=
+# HAI_DEPLOY_R2_ACCESS_KEY_ID=
+# HAI_DEPLOY_R2_SECRET_ACCESS_KEY=
+# HAI_DEPLOY_RESEND_API_KEY=
+# HAI_DEPLOY_RESEND_FROM=
+# HAI_DEPLOY_ALIYUN_ACCESS_KEY_ID=
+# HAI_DEPLOY_ALIYUN_ACCESS_KEY_SECRET=
+# HAI_DEPLOY_ALIYUN_SIGN_NAME=
+`);
+  }
+  if (includeDisabled) {
+    sections.push(`
+# =============================================================================
+# Service (@h-ai/serv)
+# =============================================================================
+# HOST=127.0.0.1                     # HOST/PORT override _serv.yml server settings.
+# PORT=3000
+# HAI_CORS_ORIGIN=http://127.0.0.1:4173,http://localhost:4173
+# HAI_CORS_NATIVEORIGINS=http://localhost,https://localhost,http://tauri.localhost,https://tauri.localhost,tauri://localhost,capacitor://localhost
+# HAI_CORS_CREDENTIALS=true
+# HAI_SERV_HTTP_RPC_GATEWAYSECRET=   # Enable the gateway-only RPC block before setting this.
 `);
   }
   sections.push(`
@@ -459,7 +728,8 @@ HAI_VECDB_PATH=./data/vecdb
 # E2E test mode (relaxes rate limiting etc.)
 # HAI_E2E=1
 `);
-  return sections.join("\n");
+  const content = sections.join("\n");
+  return includeDisabled ? content.split("\n").map((line) => line && !line.startsWith("#") ? `# ${line}` : line).join("\n") : content;
 }
 function generateDeployConfig() {
   return `# =============================================================================
@@ -485,6 +755,9 @@ provider:
 #     port: 22
 #     username: deploy
 #     identityFile: \${HAI_DEPLOY_SSH_KEY}   # \u79C1\u94A5\u6587\u4EF6\u8DEF\u5F84\uFF08\u7701\u7565\u5219\u7528 ssh-agent\uFF09
+#     knownHostsFile: \${HAI_DEPLOY_SSH_KNOWNHOSTSFILE}
+#     strictHostKeyChecking: true
+#     connectTimeoutSeconds: 10
 #   remote:
 #     baseDir: /opt/hai/apps
 #     runtime: auto                          # auto \u4F18\u5148 podman\uFF0C\u5176\u6B21 docker
@@ -498,7 +771,7 @@ provider:
 #   runtime: auto
 
 # \u57FA\u7840\u8BBE\u65BD\u670D\u52A1\uFF08\u6309\u9700\u5F00\u542F\uFF09
-services:
+# services:
   # PostgreSQL \u6570\u636E\u5E93 (Neon)
   # db:
   #   provisioner: neon
@@ -542,7 +815,7 @@ function generateVecdbConfig() {
 # \u5411\u91CF\u6570\u636E\u5E93\u914D\u7F6E (@h-ai/vecdb)
 # =============================================================================
 
-# \u6570\u636E\u5E93\u7C7B\u578B: lancedb | pgvector | qdrant
+# \u6570\u636E\u5E93\u7C7B\u578B: lancedb | pgvector | qdrant | chroma
 type: lancedb
 
 # LanceDB \u6570\u636E\u76EE\u5F55
@@ -553,6 +826,7 @@ path: ./data/vecdb
 
 # pgvector \u914D\u7F6E\uFF08\u5F53 type \u4E3A pgvector \u65F6\u4F7F\u7528\uFF09
 # type: pgvector
+# url: \${HAI_VECDB_URL}
 # host: localhost
 # port: 5432
 # database: hai
@@ -565,6 +839,22 @@ path: ./data/vecdb
 # type: qdrant
 # url: http://localhost:6333
 # apiKey: ''
+
+# Chroma \u914D\u7F6E\uFF08\u66FF\u6362 type\uFF1Burl \u6307\u5411\u5DF2\u6709\u670D\u52A1\uFF0Cpath \u7528\u4E8E\u672C\u5730\u5B50\u8FDB\u7A0B\u6570\u636E\u76EE\u5F55\uFF09
+# type: chroma
+# path: ./data/chroma
+# url: http://localhost:8000
+# host: localhost
+# port: 8000
+# apiKey: ''
+# serverCommand: chroma
+# startupTimeout: 30000
+
+# operationLog:
+#   read: false
+#   write: false
+#   maxLength: 1000
+#   level: debug # trace | debug | info
 `;
 }
 function generateReachConfig() {
@@ -593,13 +883,35 @@ providers:
   #   accessKeyId: \${HAI_REACH_SMS_ACCESS_KEY}
   #   accessKeySecret: \${HAI_REACH_SMS_SECRET_KEY}
   #   signName: MyApp
-
-# \u6A21\u677F\uFF08\u53EF\u9009\uFF09
+  #   endpoint: dysmsapi.aliyuncs.com
+
+  # \u901A\u7528 API\uFF08\u6309\u9700\u5F00\u542F\uFF1B\u53EF\u5BF9\u63A5\u5E94\u7528\u81EA\u6709\u6295\u9012\u670D\u52A1\uFF09
+  # - name: custom
+  #   type: api
+  #   url: https://notify.example.com/send
+  #   method: POST # POST | PUT
+  #   headers:
+  #     Authorization: 'Bearer \${HAI_REACH_API_TOKEN}'
+  #   timeout: 10000
+
+# IAM \u6807\u51C6\u6A21\u677F\uFF1A\u4FDD\u7559\u7A7A\u6570\u7EC4\u4EE5\u652F\u6301 HAI_REACH_TEMPLATES \u6574\u4F53\u8986\u76D6\u3002
+templates: []
+# \u5F00\u542F\u5BF9\u5E94 Provider \u540E\uFF0C\u5C06\u7A7A\u6570\u7EC4\u66FF\u6362\u4E3A\u9700\u8981\u7684\u6A21\u677F\u5217\u8868\uFF0C\u4F8B\u5982\uFF1A
 # templates:
-#   - name: verification_code
+#   - name: otp_email
+#     provider: email
+#     subject: "Verification code"
+#     body: "Your verification code is {code}."
+#   - name: otp_sms
+#     provider: sms
+#     body: "Your verification code is {code}."
+#   - name: password_reset
 #     provider: email
-#     subject: "\u9A8C\u8BC1\u7801: {code}"
-#     body: "\u60A8\u7684\u9A8C\u8BC1\u7801\u662F {code}\uFF0C\u6709\u6548\u671F {minutes} \u5206\u949F\u3002"
+#     subject: "Password reset"
+#     body: "Reset your password: {resetUrl}. Expires at {expiresAt}."
+#   - name: password_reset_sms
+#     provider: sms
+#     body: "Reset your password: {resetUrl}. Expires at {expiresAt}."
 
 # \u514D\u6253\u6270\uFF08\u53EF\u9009\uFF09
 # dnd:
@@ -617,20 +929,17 @@ function generateSchedulerConfig() {
 # \u662F\u5426\u542F\u7528\u6570\u636E\u5E93\u65E5\u5FD7\uFF08\u9700\u8981 @h-ai/reldb\uFF09
 enableDb: true
 
-# \u6267\u884C\u65E5\u5FD7\u8868\u540D
-tableName: hai_scheduler_logs
-
-# \u4EFB\u52A1\u5B9A\u4E49\u8868\u540D
-taskTableName: hai_scheduler_tasks
-
-# \u5206\u5E03\u5F0F\u9501\u8868\u540D
-lockTableName: hai_scheduler_locks
-
 # \u68C0\u67E5\u95F4\u9694\uFF08\u6BEB\u79D2\uFF09
 tickInterval: 1000
 
 # \u9501\u8FC7\u671F\u65F6\u95F4\uFF08\u6BEB\u79D2\uFF09
 lockExpireMs: 300000
+
+# \u8282\u70B9 ID \u9ED8\u8BA4\u81EA\u52A8\u751F\u6210\uFF1B\u591A\u8282\u70B9\u90E8\u7F72\u65F6\u6BCF\u4E2A\u5B9E\u4F8B\u5E94\u4F7F\u7528\u72EC\u7ACB ID\u3002
+# nodeId: worker-1
+# \u6267\u884C\u65E5\u5FD7\u4FDD\u7559\u7B56\u7565\uFF08\u542F\u7528\u6570\u636E\u5E93\u65F6\u4F7F\u7528\uFF09
+# maxLogs: 10000
+# retentionDays: 30
 `;
 }
 function generateAuditConfig() {
@@ -659,6 +968,7 @@ function generatePaymentConfig() {
 #   apiV3Key: ''
 #   serialNo: ''
 #   privateKey: ''
+#   platformCert: ''
 #   appId: ''
 
 # \u652F\u4ED8\u5B9D\uFF08\u6309\u9700\u5F00\u542F\uFF09
@@ -673,9 +983,10 @@ function generatePaymentConfig() {
 # stripe:
 #   secretKey: ''
 #   webhookSecret: ''
+#   webhookToleranceSeconds: 300
 `;
 }
 
 export { generateConfigFile, generateEnvExample };
-//# sourceMappingURL=chunk-WUSFJFW5.js.map
-//# sourceMappingURL=chunk-WUSFJFW5.js.map
+//# sourceMappingURL=chunk-WW2MIO6T.js.map
+//# sourceMappingURL=chunk-WW2MIO6T.js.map