@h-ai/cli 0.1.0-alpha.66 → 0.1.0-alpha.68

package/dist/index.js

@@ -1,24 +1,27 @@
 #!/usr/bin/env node
-import { generateConfigFile, runtimeEnvironmentVariables, renderEnvironment, moduleEnvironmentVariables, parameterizeConfig } from './chunk-QYX6V7H2.js';
-import { cliM } from './chunk-FWN5B54L.js';
+import { generateConfigFile, runtimeEnvironmentVariables, renderEnvironment, generateProductionEnvironment, moduleEnvironmentVariables, parameterizeConfig } from './chunk-ZFNBUF77.js';
+import { cliM } from './chunk-MBPB37FR.js';
+import { external_exports } from './chunk-FI56GONY.js';
 import './chunk-2H7UOFLK.js';
 import process4 from 'process';
 import { cac } from 'cac';
 import chalk from 'chalk';
-import path2, { resolve, join, dirname } from 'path';
+import path2, { resolve, join, dirname, relative } from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { wrapAnsi } from 'fast-wrap-ansi';
 import fse from 'fs-extra';
 import Handlebars2 from 'handlebars';
-import { core } from '@h-ai/core';
+import { parseEnv } from 'util';
 import ora from 'ora';
 import prompts from 'prompts';
 import { Buffer } from 'buffer';
 import { execSync, execFileSync, spawn } from 'child_process';
-import { randomBytes, createHash } from 'crypto';
-import { stringify, parseDocument } from 'yaml';
-import { readFileSync, mkdirSync, mkdtempSync, existsSync, createReadStream, writeFileSync, renameSync, rmSync } from 'fs';
+import { randomBytes, createECDH, createHash, randomUUID } from 'crypto';
+import { stringify, parse, parseDocument, isScalar, isMap } from 'yaml';
+import { readFileSync, existsSync, mkdirSync, mkdtempSync, createReadStream, writeFileSync, renameSync, rmSync, readdirSync, copyFileSync } from 'fs';
 import { createRequire } from 'module';
+import { core } from '@h-ai/core';
+import { glob } from 'fs/promises';
 
 var CAMEL_CASE_SEPARATOR_REGEX = /[-_\s]+(.)?/g;
 var LEADING_CHAR_REGEX = /^./;
@@ -29,6 +32,8 @@ function writeCliMessage(message) {
 function writeCliError(message, error) {
   process4.stderr.write(`${message}
 `);
+  if (error && typeof error === "object" && "error" in error)
+    error = error.error;
   if (error !== void 0)
     process4.stderr.write(`${error instanceof Error ? error.message : String(error)}
 `);
@@ -133,56 +138,56 @@ var CAPACITOR_SKIPPED_SERVER_FILES = /* @__PURE__ */ new Set([
   "src/lib/server/init.ts"
 ]);
 var VERSIONS = {
-  antfuEslintConfig: "^9.5.1",
-  capacitorSecureStorage: "^8.0.1",
+  antfuEslintConfig: "9.5.1",
+  capacitorSecureStorage: "8.0.1",
   // UI / Icon
-  bitsUi: "^2.19.5",
-  iconifyJsonTabler: "^1.2.42",
-  iconifyTailwind: "^1.2.3",
+  bitsUi: "2.19.5",
+  iconifyJsonTabler: "1.2.42",
+  iconifyTailwind: "1.2.3",
   // Capacitor
-  capacitorAndroid: "^8.5.3",
-  capacitorApp: "^8.1.2",
-  capacitorCamera: "^8.2.5",
-  capacitorCli: "^8.5.3",
-  capacitorCore: "^8.5.3",
-  capacitorDevice: "^8.0.3",
-  capacitorIos: "^8.5.3",
-  capacitorPreferences: "^8.0.1",
-  capacitorPushNotifications: "^8.1.3",
-  capacitorStatusBar: "^8.0.4",
+  capacitorAndroid: "8.5.3",
+  capacitorApp: "8.1.2",
+  capacitorCamera: "8.2.5",
+  capacitorCli: "8.5.3",
+  capacitorCore: "8.5.3",
+  capacitorDevice: "8.0.3",
+  capacitorIos: "8.5.3",
+  capacitorPreferences: "8.0.1",
+  capacitorPushNotifications: "8.1.3",
+  capacitorStatusBar: "8.0.4",
   // Tailwind / DaisyUI
-  daisyui: "^5.7.47",
-  tailwindcss: "^4.3.3",
-  tailwindcssVite: "^4.3.3",
+  daisyui: "5.7.47",
+  tailwindcss: "4.3.3",
+  tailwindcssVite: "4.3.3",
   // i18n
-  inlangParaglide: "^2.27.0",
-  inlangMessageFormat: "^4.5.0",
+  inlangParaglide: "2.27.0",
+  inlangMessageFormat: "4.5.0",
   // Svelte / Vite
-  svelte: "^5.57.2",
-  svelteKit: "^2.70.3",
-  svelteAdapterNode: "^5.5.7",
-  svelteCheck: "^4.7.6",
-  sveltePlugin: "^7.3.1",
+  svelte: "5.57.2",
+  svelteKit: "2.70.3",
+  svelteAdapterNode: "5.5.7",
+  svelteCheck: "4.7.6",
+  sveltePlugin: "7.3.1",
   // Build / Test
-  vite: "^8.3.4",
-  vitest: "^4.1.11",
-  tsup: "^8.5.1",
-  rimraf: "^6.1.3",
+  vite: "8.3.4",
+  vitest: "4.1.11",
+  tsup: "8.5.1",
+  rimraf: "6.1.3",
   // ESLint
-  eslint: "^10.12.0",
-  eslintPluginFormat: "^2.0.1",
-  eslintPluginSvelte: "^3.23.1",
-  svelteEslintParser: "^1.9.0",
+  eslint: "10.12.0",
+  eslintPluginFormat: "2.0.1",
+  eslintPluginSvelte: "3.23.1",
+  svelteEslintParser: "1.9.0",
   // Node / TS
-  nodeTypes: "^26.6.5",
+  nodeTypes: "26.6.5",
   // Svelte / ESLint / tsup 继续使用稳定的 JavaScript 编译 API。
-  typescript: "^6.0.3",
+  typescript: "6.0.3",
   // E2E
-  playwright: "^1.64.0",
+  playwright: "1.64.0",
   // Validation
-  zod: "^4.6.5",
+  zod: "4.6.5",
   // Tauri
-  tauriCli: "^2.12.1"
+  tauriCli: "2.12.1"
 };
 var FRONTEND_PORTS_DEFAULT = {
   web: 4173,
@@ -427,6 +432,8 @@ function buildAppHaiCatalogPackages(options) {
   const packageNames = ["@h-ai/cli"];
   if (options.isSvelteOnlyApp) {
     packageNames.push("@h-ai/api-client", "@h-ai/api-contract", "@h-ai/capacitor", "@h-ai/ui");
+    if (options.featureMap.crypto)
+      packageNames.push("@h-ai/crypto");
     return pickCatalogPackages(packageNames, HAI_CATALOG_PACKAGES);
   }
   packageNames.push("@h-ai/core", "@h-ai/kit");
@@ -468,7 +475,7 @@ function buildAppHaiCatalogPackages(options) {
     packageNames.push("@h-ai/capacitor");
   return pickCatalogPackages(packageNames, HAI_CATALOG_PACKAGES);
 }
-function buildFullstackCatalogPackages(frontends, deploy = false) {
+function buildFullstackCatalogPackages(frontends, deploy = false, features = {}) {
   const packageNames = [
     ...FULLSTACK_ROOT_CATALOG_PACKAGE_NAMES,
     "@h-ai/cli",
@@ -484,6 +491,10 @@ function buildFullstackCatalogPackages(frontends, deploy = false) {
     packageNames.push(...FULLSTACK_DESKTOP_CATALOG_PACKAGE_NAMES);
   if (deploy)
     packageNames.push("@h-ai/deploy");
+  if (features.ai)
+    packageNames.push("@h-ai/ai");
+  if (features.vecdb)
+    packageNames.push("@h-ai/vecdb");
   return pickCatalogPackages(packageNames, FULLSTACK_CATALOG_PACKAGES);
 }
 var FEATURE_ROUTE_DIRS = {
@@ -580,6 +591,7 @@ function buildTemplateContext(options) {
   for (const f of options.features) {
     featureMap[f] = true;
   }
+  featureMap.deploy = options.deploy !== false;
   if (options.appType === "fullstack") {
     for (const feature of ["iam", "db", "cache", "crypto", "storage", "audit"]) featureMap[feature] = true;
   }
@@ -588,8 +600,12 @@ function buildTemplateContext(options) {
     featureMap.cache = true;
     featureMap.crypto = true;
   }
-  if (featureMap.audit || featureMap.scheduler || featureMap.payment) {
+  if (featureMap.audit || featureMap.scheduler || featureMap.payment || featureMap.crypto) {
+    featureMap.db = true;
+  }
+  if (featureMap.ai) {
     featureMap.db = true;
+    featureMap.vecdb = true;
   }
   const isApi = options.appType === "api";
   const isFullstack = options.appType === "fullstack";
@@ -600,7 +616,7 @@ function buildTemplateContext(options) {
   const selectedFrontends = options.frontends ?? DEFAULT_FULLSTACK_FRONTENDS;
   let haiCatalogPackages;
   if (isFullstack) {
-    haiCatalogPackages = buildFullstackCatalogPackages(selectedFrontends, featureMap.deploy);
+    haiCatalogPackages = buildFullstackCatalogPackages(selectedFrontends, featureMap.deploy, featureMap);
   } else if (isApi) {
     haiCatalogPackages = buildApiWorkspaceCatalogPackages(featureMap);
   } else {
@@ -692,9 +708,8 @@ function buildFullstackTemplateContext(projectName, frontendsInput, moduleConfig
 function resolveI18nContext(moduleConfigs) {
   const coreLocale = moduleConfigs?.core?.defaultLocale ?? "zh-CN";
   const baseLocale = moduleConfigs?.fullstack?.i18n?.baseLocale ?? coreLocale;
-  const fallbackLocale = baseLocale === "en-US" ? "zh-CN" : "en-US";
   const requested = moduleConfigs?.fullstack?.i18n?.locales;
-  const locales = requested && requested.length > 0 ? [...new Set(requested)] : [baseLocale, fallbackLocale];
+  const locales = requested && requested.length > 0 ? [...new Set(requested)] : [.../* @__PURE__ */ new Set([baseLocale, "zh-CN", "en-US", "ja-JP"])];
   if (!locales.includes(baseLocale)) {
     locales.unshift(baseLocale);
   }
@@ -776,10 +791,13 @@ async function generateFromTemplates(projectPath, context) {
   }
   await renderDynamicFiles(root, projectPath, context);
   await fse.copy(path2.join(root, "shared", "run-e2e.mjs"), path2.join(projectPath, "scripts", "run-e2e.mjs"));
+  await fse.copy(path2.join(root, "shared", "e2e-env.ts"), path2.join(projectPath, "scripts", "e2e-env.ts"));
+  await fse.ensureDir(path2.join(projectPath, "images", "dependencies"));
+  await fse.writeFile(path2.join(projectPath, "images", "dependencies", ".gitkeep"), "");
   await fse.copy(path2.join(root, "shared", ".gitattributes"), path2.join(projectPath, ".gitattributes"));
   if (context.isSvelteOnlyApp) {
     await fse.copy(path2.join(root, "shared", "vite-runtime-config.ts"), path2.join(projectPath, "scripts", "vite-runtime-config.ts"));
-    await fse.copy(path2.join(root, "shared", "container-runtime-config.sh"), path2.join(projectPath, "docker", "19-runtime-config.sh"));
+    await fse.copy(path2.join(root, "shared", "container-runtime-config.sh"), path2.join(projectPath, "images", "web", "19-runtime-config.sh"));
   }
   if (context.isSvelteOnlyApp || context.appType === "fullstack") {
     const navigationDir = context.appType === "fullstack" ? path2.join(projectPath, "packages", `${context.projectName}-shared`, "src", "lib", "navigation") : path2.join(projectPath, "src", "lib", "navigation");
@@ -789,6 +807,9 @@ async function generateFromTemplates(projectPath, context) {
     const i18nDir = path2.join(root, "i18n");
     if (await fse.pathExists(i18nDir)) {
       await fse.copy(i18nDir, projectPath, { overwrite: true });
+      const settingsPath = path2.join(projectPath, "project.inlang", "settings.json");
+      const settings = await fse.readJson(settingsPath);
+      await fse.writeJson(settingsPath, { ...settings, baseLocale: context.defaultLocale }, { spaces: 2 });
     }
   }
   if (includeBaseTemplate) {
@@ -916,136 +937,242 @@ var RE_HTTPS_URL = /^https:\/\/.+/;
 var RE_GIT_SSH_URL = /^git@.+:.+/;
 var APP_TYPES = {
   "admin": {
-    name: "\u7BA1\u7406\u540E\u53F0",
-    description: "\u4F01\u4E1A\u7EA7\u7BA1\u7406\u7CFB\u7EDF\uFF0C\u542B IAM\u3001\u6570\u636E\u5E93\u3001\u5B8C\u6574 UI",
+    get name() {
+      return cliM("cli_appAdminName");
+    },
+    get description() {
+      return cliM("cli_appAdminDescription");
+    },
     defaultFeatures: ["iam", "db", "cache", "crypto"]
   },
   "website": {
-    name: "\u4F01\u4E1A\u5B98\u7F51",
-    description: "SSR/SSG \u4F01\u4E1A\u5B98\u7F51\uFF0CSEO \u53CB\u597D\u3001\u54CD\u5E94\u5F0F\u5E03\u5C40",
+    get name() {
+      return cliM("cli_appWebsiteName");
+    },
+    get description() {
+      return cliM("cli_appWebsiteDescription");
+    },
     defaultFeatures: ["db", "cache"]
   },
   "h5": {
-    name: "H5 \u5E94\u7528",
-    description: "\u79FB\u52A8\u7AEF H5 \u5E94\u7528\uFF0C\u89E6\u6478\u4F18\u5316\u3001PWA \u652F\u6301",
+    get name() {
+      return cliM("cli_appH5Name");
+    },
+    get description() {
+      return cliM("cli_appH5Description");
+    },
     defaultFeatures: ["db", "cache"]
   },
   "api": {
-    name: "API \u670D\u52A1",
-    description: "typed API workspace\uFF0C\u542B contract + service \u53CC\u5DE5\u7A0B\u3001\u65E0 UI",
+    get name() {
+      return cliM("cli_appApiName");
+    },
+    get description() {
+      return cliM("cli_appApiDescription");
+    },
     defaultFeatures: ["db", "cache"]
   },
   "mobile-app": {
-    name: "\u79FB\u52A8\u5E94\u7528",
-    description: "\u79FB\u52A8\u7AEF\u5E94\u7528\uFF08Capacitor + Svelte 5 + Vite\uFF09\uFF0C\u53EF\u6253\u5305\u4E3A Android/iOS",
+    get name() {
+      return cliM("cli_appMobileName");
+    },
+    get description() {
+      return cliM("cli_appMobileDescription");
+    },
     defaultFeatures: ["api-client", "capacitor"]
   },
   "fullstack": {
-    name: "\u524D\u540E\u7AEF\u5206\u79BB\u5DE5\u7A0B",
-    description: "\u591A\u7AEF mini \u7BA1\u7406\u7CFB\u7EDF\uFF0C\u5305\u542B\u7528\u6237\u3001\u89D2\u8272\u3001\u5BA1\u8BA1\u3001\u4E2A\u4EBA\u8BBE\u7F6E\u4E0E\u53CC\u5411\u4F20\u8F93\u52A0\u5BC6",
+    get name() {
+      return cliM("cli_appFullstackName");
+    },
+    get description() {
+      return cliM("cli_appFullstackDescription");
+    },
     defaultFeatures: ["iam", "db", "cache", "crypto", "storage", "audit"]
   }
 };
 var FRONTEND_TARGETS = {
-  web: { name: "Web", description: "\u6D4F\u89C8\u5668 Web \u5E94\u7528", implemented: true },
-  app: { name: "App", description: "\u79FB\u52A8\u7AEF Capacitor App / H5 \u524D\u7AEF", implemented: true },
-  miniapp: { name: "\u5C0F\u7A0B\u5E8F", description: "\u9884\u7559\u76EE\u6807\uFF0C\u5F53\u524D\u53EA\u751F\u6210\u8BF4\u660E\u5360\u4F4D", implemented: false },
-  desktop: { name: "\u684C\u9762\u7AEF", description: "Tauri \u684C\u9762\u7AEF\u524D\u7AEF\u5DE5\u7A0B", implemented: true }
+  web: { name: "Web", get description() {
+    return cliM("cli_frontendWebDescription");
+  }, implemented: true },
+  app: { name: "App", get description() {
+    return cliM("cli_frontendAppDescription");
+  }, implemented: true },
+  miniapp: {
+    get name() {
+      return cliM("cli_frontendMiniappName");
+    },
+    get description() {
+      return cliM("cli_frontendMiniappDescription");
+    },
+    implemented: false
+  },
+  desktop: {
+    get name() {
+      return cliM("cli_frontendDesktopName");
+    },
+    get description() {
+      return cliM("cli_frontendDesktopDescription");
+    },
+    implemented: true
+  }
 };
 var DEFAULT_FULLSTACK_FRONTENDS2 = ["web", "app", "desktop"];
 var FEATURES = {
   "iam": {
     id: "iam",
-    name: "\u8EAB\u4EFD\u4E0E\u8BBF\u95EE\u7BA1\u7406",
-    description: "Session/JWT \u4F1A\u8BDD\u7BA1\u7406\u3001RBAC \u6743\u9650\u63A7\u5236",
+    get name() {
+      return cliM("cli_featureIamName");
+    },
+    get description() {
+      return cliM("cli_featureIamDescription");
+    },
     packages: ["@h-ai/iam"],
     dependencies: ["crypto", "db", "cache"]
   },
   "db": {
     id: "db",
-    name: "\u6570\u636E\u5E93",
-    description: "\u591A\u6570\u636E\u5E93\u652F\u6301 (SQLite/PostgreSQL/MySQL)",
+    get name() {
+      return cliM("cli_featureDbName");
+    },
+    get description() {
+      return cliM("cli_featureDbDescription");
+    },
     packages: ["@h-ai/reldb"]
   },
   "cache": {
     id: "cache",
-    name: "\u7F13\u5B58",
-    description: "Redis / \u5185\u5B58\u7F13\u5B58",
+    get name() {
+      return cliM("cli_featureCacheName");
+    },
+    get description() {
+      return cliM("cli_featureCacheDescription");
+    },
     packages: ["@h-ai/cache"]
   },
   "ai": {
     id: "ai",
-    name: "AI \u96C6\u6210",
-    description: "LLM \u9002\u914D\u5668\u3001MCP \u534F\u8BAE\u3001\u6280\u80FD\u7CFB\u7EDF\u3001\u6D41\u5F0F\u54CD\u5E94",
-    packages: ["@h-ai/ai"]
+    get name() {
+      return cliM("cli_featureAiName");
+    },
+    get description() {
+      return cliM("cli_featureAiDescription");
+    },
+    packages: ["@h-ai/ai"],
+    dependencies: ["db", "vecdb"]
   },
   "storage": {
     id: "storage",
-    name: "\u6587\u4EF6\u5B58\u50A8",
-    description: "\u672C\u5730\u5B58\u50A8\u3001S3/OSS/COS \u4E91\u5B58\u50A8",
+    get name() {
+      return cliM("cli_featureStorageName");
+    },
+    get description() {
+      return cliM("cli_featureStorageDescription");
+    },
     packages: ["@h-ai/storage"]
   },
   "crypto": {
     id: "crypto",
-    name: "\u52A0\u5BC6\u6A21\u5757",
-    description: "\u56FD\u5BC6 SM2/SM3/SM4\u3001Argon2 \u5BC6\u7801\u54C8\u5E0C",
-    packages: ["@h-ai/crypto"]
+    get name() {
+      return cliM("cli_featureCryptoName");
+    },
+    get description() {
+      return cliM("cli_featureCryptoDescription");
+    },
+    packages: ["@h-ai/crypto"],
+    dependencies: ["db"]
   },
   "audit": {
     id: "audit",
-    name: "\u5BA1\u8BA1\u65E5\u5FD7",
-    description: "\u64CD\u4F5C\u5BA1\u8BA1\u3001\u5B89\u5168\u8FFD\u8E2A",
+    get name() {
+      return cliM("cli_featureAuditName");
+    },
+    get description() {
+      return cliM("cli_featureAuditDescription");
+    },
     packages: ["@h-ai/audit"],
     dependencies: ["db"]
   },
   "reach": {
     id: "reach",
-    name: "\u89E6\u8FBE\u670D\u52A1",
-    description: "\u90AE\u4EF6\u3001\u77ED\u4FE1\u3001\u5FAE\u4FE1\u7B49\u6D88\u606F\u89E6\u8FBE",
+    get name() {
+      return cliM("cli_featureReachName");
+    },
+    get description() {
+      return cliM("cli_featureReachDescription");
+    },
     packages: ["@h-ai/reach"]
   },
   "payment": {
     id: "payment",
-    name: "\u7EDF\u4E00\u652F\u4ED8",
-    description: "\u5FAE\u4FE1\u652F\u4ED8\u3001\u652F\u4ED8\u5B9D\u3001Stripe \u7EDF\u4E00\u63A5\u5165",
+    get name() {
+      return cliM("cli_featurePaymentName");
+    },
+    get description() {
+      return cliM("cli_featurePaymentDescription");
+    },
     packages: ["@h-ai/payment"],
     dependencies: ["db"]
   },
   "vecdb": {
     id: "vecdb",
-    name: "\u5411\u91CF\u6570\u636E\u5E93",
-    description: "\u5411\u91CF\u68C0\u7D22\u4E0E\u76F8\u4F3C\u5EA6\u641C\u7D22\uFF08LanceDB / pgvector / Qdrant\uFF09",
+    get name() {
+      return cliM("cli_featureVecdbName");
+    },
+    get description() {
+      return cliM("cli_featureVecdbDescription");
+    },
     packages: ["@h-ai/vecdb"]
   },
   "datapipe": {
     id: "datapipe",
-    name: "\u6570\u636E\u5904\u7406\u7BA1\u9053",
-    description: "\u6587\u672C\u6E05\u6D17\u3001\u5206\u5757\u4E0E\u53EF\u7EC4\u5408\u5904\u7406\u6D41\u6C34\u7EBF",
+    get name() {
+      return cliM("cli_featureDatapipeName");
+    },
+    get description() {
+      return cliM("cli_featureDatapipeDescription");
+    },
     packages: ["@h-ai/datapipe"]
   },
   "scheduler": {
     id: "scheduler",
-    name: "\u4EFB\u52A1\u8C03\u5EA6",
-    description: "Cron \u4EFB\u52A1\u6CE8\u518C\u3001\u6267\u884C\u4E0E\u65E5\u5FD7\u8FFD\u8E2A",
+    get name() {
+      return cliM("cli_featureSchedulerName");
+    },
+    get description() {
+      return cliM("cli_featureSchedulerDescription");
+    },
     packages: ["@h-ai/scheduler"],
     dependencies: ["db"]
   },
   "deploy": {
     id: "deploy",
-    name: "\u81EA\u52A8\u5316\u90E8\u7F72",
-    description: "\u7EDF\u4E00\u90E8\u7F72\u7F16\u6392\u4E0E\u591A\u5E73\u53F0\u53D1\u5E03\u652F\u6301",
+    get name() {
+      return cliM("cli_featureDeployName");
+    },
+    get description() {
+      return cliM("cli_featureDeployDescription");
+    },
     packages: ["@h-ai/deploy"]
   },
   "api-client": {
     id: "api-client",
-    name: "HTTP \u5BA2\u6237\u7AEF",
-    description: "\u7EDF\u4E00 API \u8C03\u7528\u3001\u9519\u8BEF\u5904\u7406\u4E0E\u6D41\u5F0F\u8BF7\u6C42\u652F\u6301",
+    get name() {
+      return cliM("cli_featureApiClientName");
+    },
+    get description() {
+      return cliM("cli_featureApiClientDescription");
+    },
     packages: ["@h-ai/api-client"]
   },
   "capacitor": {
     id: "capacitor",
-    name: "\u79FB\u52A8\u7AEF\u80FD\u529B",
-    description: "Capacitor \u539F\u751F\u6865\u63A5\u80FD\u529B\uFF08\u504F\u79FB\u52A8\u5E94\u7528\uFF09",
+    get name() {
+      return cliM("cli_featureCapacitorName");
+    },
+    get description() {
+      return cliM("cli_featureCapacitorDescription");
+    },
     packages: ["@h-ai/capacitor"]
   }
 };
@@ -1062,7 +1189,6 @@ var SELECTABLE_FEATURES = [
   "vecdb",
   "datapipe",
   "scheduler",
-  "deploy",
   "api-client",
   "capacitor"
 ];
@@ -1070,17 +1196,23 @@ var PROJECT_NAME_REGEX = /^[a-z0-9-]+$/;
 var PROJECT_TEMPLATES = {
   minimal: {
     name: "minimal",
-    description: "\u6700\u5C0F\u6A21\u677F \u2014 \u4EC5\u6838\u5FC3\u529F\u80FD",
+    get description() {
+      return cliM("cli_templateMinimalDescription");
+    },
     features: []
   },
   default: {
     name: "default",
-    description: "\u6807\u51C6\u6A21\u677F \u2014 IAM + \u6570\u636E\u5E93 + \u7F13\u5B58",
+    get description() {
+      return cliM("cli_templateDefaultDescription");
+    },
     features: ["iam", "db", "cache", "crypto"]
   },
   full: {
     name: "full",
-    description: "\u5B8C\u6574\u6A21\u677F \u2014 \u6240\u6709\u529F\u80FD",
+    get description() {
+      return cliM("cli_templateFullDescription");
+    },
     features: [
       "iam",
       "db",
@@ -1101,7 +1233,9 @@ var PROJECT_TEMPLATES = {
   },
   custom: {
     name: "custom",
-    description: "\u81EA\u5B9A\u4E49 \u2014 \u9009\u62E9\u9700\u8981\u7684\u529F\u80FD",
+    get description() {
+      return cliM("cli_templateCustomDescription");
+    },
     features: []
   }
 };
@@ -1109,39 +1243,40 @@ async function createProject(options) {
   const spinner = ora();
   try {
     const resolvedOptions = await resolveOptions(options);
-    if (!PROJECT_NAME_REGEX.test(resolvedOptions.name)) {
-      writeCliError(chalk.red(`\u9879\u76EE\u540D\u79F0\u4E0D\u5408\u6CD5: "${resolvedOptions.name}"\uFF0C\u53EA\u80FD\u5305\u542B\u5C0F\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u548C\u8FDE\u5B57\u7B26`));
-      return;
-    }
+    if (!PROJECT_NAME_REGEX.test(resolvedOptions.name))
+      throw new Error(cliM("cli_createInvalidName", { params: { name: resolvedOptions.name } }));
     const projectPath = path2.resolve(resolvedOptions.cwd ?? ".", resolvedOptions.name);
     if (await fileExists(projectPath)) {
       const { overwrite } = await prompts({
         type: "confirm",
+        active: cliM("cli_yes"),
+        inactive: cliM("cli_no"),
         name: "overwrite",
-        message: `\u76EE\u5F55 ${resolvedOptions.name} \u5DF2\u5B58\u5728\uFF0C\u662F\u5426\u8986\u76D6\uFF1F`,
+        message: cliM("cli_createOverwrite", { params: { name: resolvedOptions.name } }),
         initial: false
       });
       if (!overwrite) {
-        writeCliMessage(chalk.yellow("\u5DF2\u53D6\u6D88"));
+        writeCliMessage(chalk.yellow(cliM("cli_cancelled")));
         return;
       }
       await fse.remove(projectPath);
     }
-    spinner.start("\u521B\u5EFA\u9879\u76EE\u76EE\u5F55...");
+    spinner.start(cliM("cli_createDirectory"));
     await fse.ensureDir(projectPath);
     spinner.succeed();
-    spinner.start("\u751F\u6210\u9879\u76EE\u6587\u4EF6...");
+    spinner.start(cliM("cli_createFiles"));
     const context = buildTemplateContext({
       name: resolvedOptions.name,
       appType: resolvedOptions.appType,
       features: resolvedOptions.features,
+      deploy: resolvedOptions.deploy,
       frontends: resolvedOptions.frontends,
       moduleConfigs: resolvedOptions.moduleConfigs,
       packageManager: resolvedOptions.packageManager
     });
     await generateFromTemplates(projectPath, context);
     {
-      const { generateConfigFile: generateConfigFile2, generateEnvExample } = await import('./cli-config-templates-3XSFIXBP.js');
+      const { generateConfigFile: generateConfigFile2, generateEnvExample, generateProductionEnvironment: generateProductionEnvironment2 } = await import('./cli-config-templates-W2LLPMB6.js');
       const configs = resolvedOptions.moduleConfigs;
       const isApiWorkspace = resolvedOptions.appType === "api";
       const isFullstack = resolvedOptions.appType === "fullstack";
@@ -1167,7 +1302,7 @@ async function createProject(options) {
         if (/^_.*\.yml$/.test(file))
           configContents[file.slice(1, -4)] = await fse.readFile(path2.join(configDir, file), "utf8");
       }
-      const envFeatures = resolvedOptions.features;
+      const envFeatures = isFullstack ? [.../* @__PURE__ */ new Set([...resolvedOptions.features, "reach"])] : resolvedOptions.features;
       const envContents = generateEnvExample(envFeatures, configs, isFullstack, configContents);
       let envExample = isApiWorkspace ? envContents : isFullstack ? `${envContents}
 # First-start administrator password; must satisfy the IAM password policy.
@@ -1200,50 +1335,57 @@ ${runtimeExample.split("\n").map((line) => line && !line.startsWith("#") ? `# ${
 ${sharedVariables.join("\n")}
 `);
       for (const [mode, environment] of [["dev", "development"], ["test", "test"], ["prod", "production"]]) {
-        await writeFile(path2.join(envDirectory, `.env.${mode}`), `# \u516C\u5171 ${mode} \u73AF\u5883\u914D\u7F6E\uFF1B\u672C\u673A\u79C1\u6709\u503C\u653E .env.local\uFF0C\u8FDB\u7A0B\u73AF\u5883\u53D8\u91CF\u4F18\u5148\u3002
+        const values = mode === "prod" ? generateProductionEnvironment2(envFeatures, configs) : `# \u516C\u5171 ${mode} \u73AF\u5883\u914D\u7F6E\uFF1B\u672C\u673A\u79C1\u6709\u503C\u653E .env.local\uFF0C\u8FDB\u7A0B\u73AF\u5883\u53D8\u91CF\u4F18\u5148\u3002
 HAI_CORE_ENV=${environment}
-HAI_CORE_DEBUG=false
-HAI_CORE_LOGGING_LEVEL=${mode === "test" ? "warn" : mode === "dev" ? "debug" : "info"}
-`);
+HAI_CORE_LOGGING_LEVEL=${mode === "test" ? "warn" : "debug"}
+`;
+        await writeFile(path2.join(envDirectory, `.env.${mode}`), values);
       }
+      const privateEntries = [];
       if (isFullstack) {
         const password = `Aa1!${randomBytes(24).toString("base64url")}`;
-        await fse.writeFile(path2.join(projectPath, ".env.local"), `# \u672C\u673A\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u63D0\u4EA4 Git\u3002
-HAI_ADMIN_DEFAULT_PASSWORD=${password}
-`, { mode: 384 });
-      } else {
-        await writeFile(path2.join(envDirectory, ".env.local"), "# \u672C\u673A\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u63D0\u4EA4 Git\uFF1B\u8986\u76D6\u516C\u5171\u57FA\u7840\u548C\u73AF\u5883\u914D\u7F6E\u3002\n");
+        privateEntries.push(`HAI_ADMIN_DEFAULT_PASSWORD=${password}`);
+      }
+      if (isFullstack || isApiWorkspace && resolvedOptions.features.includes("crypto")) {
+        const key = createECDH("SM2");
+        key.generateKeys();
+        const id = `bootstrap-${randomBytes(6).toString("hex")}`;
+        const ring = { activeKeyId: id, keys: { [id]: { publicKey: key.getPublicKey("hex"), privateKey: key.getPrivateKey("hex").padStart(64, "0") } } };
+        privateEntries.push(`HAI_CRYPTO_TRANSPORT_SERVERKEYRING='${JSON.stringify(ring)}'`);
       }
+      await fse.writeFile(path2.join(envDirectory, ".env.local"), `# \u672C\u673A\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u63D0\u4EA4 Git\uFF1B\u90E8\u7F72\u51ED\u636E\u7531\u76EE\u6807\u73AF\u5883\u5355\u72EC\u63D0\u4F9B\u3002
+${privateEntries.join("\n")}
+`, { mode: 384 });
     }
-    const { generateSkillFiles } = await import('./cli-skill-templates-TSYEQTCY.js');
+    const { generateSkillFiles } = await import('./cli-skill-templates-US5CCAJ4.js');
     await generateSkillFiles(
       projectPath,
       resolvedOptions.features,
       resolvedOptions.appType,
       resolvedOptions.name
     );
-    const appTypeLabel = APP_TYPES[resolvedOptions.appType].name;
+    const appTypeLabel = cliM(`cli_app${{ "admin": "Admin", "website": "Website", "h5": "H5", "api": "Api", "mobile-app": "Mobile", "fullstack": "Fullstack" }[resolvedOptions.appType]}Name`, { locale: "zh-CN" });
     const readmeContent = resolvedOptions.appType === "fullstack" ? generateFullstackReadme(resolvedOptions.name, resolvedOptions.packageManager, resolvedOptions.frontends) : resolvedOptions.appType === "api" ? generateApiWorkspaceReadme(resolvedOptions.name, resolvedOptions.packageManager) : generateReadme(resolvedOptions.name, appTypeLabel, resolvedOptions.packageManager, resolvedOptions.appType);
     await writeFile(
       path2.join(projectPath, "README.md"),
-      readmeContent
+      resolvedOptions.deploy === false ? readmeContent.replace(/### 构建与部署[\s\S]*?(?=\n#{2,3} |$)/, "### \u6784\u5EFA\n\npnpm build\npnpm build --target docker\n\n\u672C\u9879\u76EE\u521B\u5EFA\u65F6\u5173\u95ED\u4E86\u90E8\u7F72\u5DE5\u5177\u3002\n") : readmeContent
     );
     spinner.succeed();
     if (resolvedOptions.git) {
-      spinner.start("\u521D\u59CB\u5316 Git \u4ED3\u5E93...");
+      spinner.start(cliM("cli_createGit"));
       execSync("git init", { cwd: projectPath, stdio: "ignore" });
       if (resolvedOptions.gitRemote) {
         const gitRemote = resolvedOptions.gitRemote;
         if (!RE_HTTPS_URL.test(gitRemote) && !RE_GIT_SSH_URL.test(gitRemote)) {
           spinner.fail();
-          throw new Error(`Invalid gitRemote URL: ${gitRemote}`);
+          throw new Error(cliM("cli_createRemoteFailure", { params: { remote: gitRemote } }));
         }
         execFileSync("git", ["remote", "add", "origin", gitRemote], { cwd: projectPath, stdio: "ignore" });
       }
       spinner.succeed();
     }
     if (resolvedOptions.install) {
-      spinner.start(`\u5B89\u88C5\u4F9D\u8D56 (${resolvedOptions.packageManager})...`);
+      spinner.start(cliM("cli_createInstall", { params: { manager: resolvedOptions.packageManager } }));
       installDependencies(projectPath, resolvedOptions.packageManager);
       spinner.succeed();
     }
@@ -1258,10 +1400,10 @@ async function resolveOptions(options) {
   const useDefaults = options.yes ?? false;
   writeCliMessage("");
   writeCliMessage(chalk.bold.cyan("  \u{1F680} hai Agent Framework"));
-  writeCliMessage(chalk.gray("     AI-Native \xB7 Configuration-Driven \xB7 Security-First"));
+  writeCliMessage(chalk.gray(cliM("cli_createTagline")));
   writeCliMessage("");
   const onCancel = () => {
-    writeCliMessage(chalk.red("\n\u5DF2\u53D6\u6D88"));
+    writeCliMessage(chalk.red(cliM("cli_cancelledLine")));
     process4.exit(1);
   };
   let projectName = options.name;
@@ -1271,13 +1413,13 @@ async function resolveOptions(options) {
     const { name } = await prompts({
       type: "text",
       name: "name",
-      message: "\u9879\u76EE\u540D\u79F0:",
+      message: cliM("cli_createNamePrompt"),
       initial: "my-app",
       validate: (value) => {
         if (!value.trim())
-          return "\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A";
+          return cliM("cli_createNameRequired");
         if (!PROJECT_NAME_REGEX.test(value))
-          return "\u9879\u76EE\u540D\u79F0\u53EA\u80FD\u5305\u542B\u5C0F\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u548C\u8FDE\u5B57\u7B26";
+          return cliM("cli_createNamePattern");
         return true;
       }
     }, { onCancel });
@@ -1290,8 +1432,9 @@ async function resolveOptions(options) {
     const { appType } = await prompts({
       type: "select",
       name: "appType",
-      message: "\u5E94\u7528\u7C7B\u578B:",
-      hint: cliM("cli_selectHint"),
+      message: cliM("cli_createTypePrompt"),
+      hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
       choices: Object.entries(APP_TYPES).map(([key, t]) => ({
         title: t.name,
         description: formatPromptDescription(t.description),
@@ -1313,8 +1456,9 @@ async function resolveOptions(options) {
       const { template } = await prompts({
         type: "select",
         name: "template",
-        message: "\u9009\u62E9\u6A21\u677F:",
-        hint: cliM("cli_selectHint"),
+        message: cliM("cli_createTemplatePrompt"),
+        hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
         choices: Object.values(PROJECT_TEMPLATES).map((t) => ({
           title: t.name,
           description: formatPromptDescription(t.description),
@@ -1328,7 +1472,9 @@ async function resolveOptions(options) {
   let selectedFeatures = [];
   const appTypeDefaults = APP_TYPES[selectedAppType].defaultFeatures;
   if (selectedAppType === "fullstack") {
-    selectedFeatures = resolveFeatureDependencies([...appTypeDefaults, ...options.features?.includes("deploy") ? ["deploy"] : []]);
+    selectedFeatures = resolveFeatureDependencies([...appTypeDefaults, ...options.features ?? []]);
+  } else if (options.features) {
+    selectedFeatures = resolveFeatureDependencies(options.features);
   } else if (selectedTemplate === "custom" && !options.features && useDefaults) {
     selectedFeatures = resolveFeatureDependencies(appTypeDefaults);
   } else if (selectedTemplate === "custom" && !options.features) {
@@ -1343,18 +1489,20 @@ async function resolveOptions(options) {
       name: "features",
       message: cliM("cli_featuresPrompt"),
       choices: featureChoices,
-      hint: cliM("cli_multiselectHint"),
+      hint: `
+${formatPromptDescription(cliM("cli_multiselectHint"))}`,
       instructions: false
     }, { onCancel });
     selectedFeatures = features || [];
     selectedFeatures = resolveFeatureDependencies(selectedFeatures);
-  } else if (selectedTemplate === "custom" && options.features) {
-    selectedFeatures = resolveFeatureDependencies(options.features);
   } else {
     const templateFeatures = PROJECT_TEMPLATES[selectedTemplate]?.features || [];
     const merged = /* @__PURE__ */ new Set([...templateFeatures, ...appTypeDefaults]);
     selectedFeatures = resolveFeatureDependencies(Array.from(merged));
   }
+  selectedFeatures = selectedFeatures.filter((feature) => feature !== "deploy");
+  if (options.deploy !== false)
+    selectedFeatures.push("deploy");
   const moduleConfigs = selectedAppType === "fullstack" ? { ...buildDefaultModuleConfigs(selectedFeatures, projectName), ...options.moduleConfigs } : options.moduleConfigs ?? (useDefaults ? buildDefaultModuleConfigs(selectedFeatures, projectName) : await promptModuleConfigs(selectedFeatures, projectName));
   let addExamples = options.examples;
   if (addExamples === void 0 && useDefaults) {
@@ -1362,8 +1510,10 @@ async function resolveOptions(options) {
   } else if (addExamples === void 0) {
     const { examples } = await prompts({
       type: "confirm",
+      active: cliM("cli_yes"),
+      inactive: cliM("cli_no"),
       name: "examples",
-      message: "\u662F\u5426\u6DFB\u52A0\u793A\u4F8B\u4EE3\u7801?",
+      message: cliM("cli_createExamplesPrompt"),
       initial: true
     }, { onCancel });
     addExamples = examples;
@@ -1376,10 +1526,12 @@ async function resolveOptions(options) {
   if (!packageManager) {
     const { pm } = await prompts({
       type: "select",
+      hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
       name: "pm",
-      message: "\u5305\u7BA1\u7406\u5668:",
+      message: cliM("cli_createManagerPrompt"),
       choices: [
-        { title: "pnpm (\u63A8\u8350)", value: "pnpm" },
+        { title: cliM("cli_createPnpmRecommended"), value: "pnpm" },
         { title: "npm", value: "npm" },
         { title: "yarn", value: "yarn" }
       ],
@@ -1393,8 +1545,10 @@ async function resolveOptions(options) {
   } else if (install === void 0) {
     const { doInstall } = await prompts({
       type: "confirm",
+      active: cliM("cli_yes"),
+      inactive: cliM("cli_no"),
       name: "doInstall",
-      message: "\u662F\u5426\u5B89\u88C5\u4F9D\u8D56?",
+      message: cliM("cli_createInstallPrompt"),
       initial: true
     }, { onCancel });
     install = doInstall;
@@ -1405,8 +1559,10 @@ async function resolveOptions(options) {
   } else if (git === void 0) {
     const { initGit } = await prompts({
       type: "confirm",
+      active: cliM("cli_yes"),
+      inactive: cliM("cli_no"),
       name: "initGit",
-      message: "\u662F\u5426\u521D\u59CB\u5316 Git?",
+      message: cliM("cli_createGitPrompt"),
       initial: true
     }, { onCancel });
     git = initGit;
@@ -1418,14 +1574,14 @@ async function resolveOptions(options) {
     const { remote } = await prompts({
       type: "text",
       name: "remote",
-      message: "Git \u4ED3\u5E93\u5730\u5740 (\u53EF\u9009\uFF0C\u56DE\u8F66\u8DF3\u8FC7):",
+      message: cliM("cli_createRemotePrompt"),
       initial: "",
       validate: (value) => {
         if (!value.trim())
           return true;
         if (RE_HTTPS_URL.test(value) || RE_GIT_SSH_URL.test(value))
           return true;
-        return "\u8BF7\u8F93\u5165\u5408\u6CD5\u7684 Git \u4ED3\u5E93\u5730\u5740 (https://... \u6216 git@...:...)";
+        return cliM("cli_createRemoteInvalid");
       }
     }, { onCancel });
     gitRemote = remote?.trim() || "";
@@ -1436,6 +1592,7 @@ async function resolveOptions(options) {
     frontends: selectedFrontends,
     template: selectedTemplate ?? "default",
     features: selectedFeatures,
+    deploy: options.deploy !== false,
     moduleConfigs,
     examples: addExamples ?? true,
     install: install ?? true,
@@ -1485,7 +1642,9 @@ async function resolveFrontendTargets(frontends, useDefaults, onCancel) {
       value: id,
       selected: DEFAULT_FULLSTACK_FRONTENDS2.includes(id)
     })),
-    hint: cliM("cli_multiselectHint"),
+    // 独立行显示帮助，避免宽字符让 prompts 按字符数清除时遗留折行。
+    hint: `
+${formatPromptDescription(cliM("cli_multiselectHint"))}`,
     instructions: false
   }, { onCancel });
   return normalizeFrontendTargets(selectedFrontends ?? DEFAULT_FULLSTACK_FRONTENDS2);
@@ -1517,12 +1676,12 @@ function resolveFeatureDependencies(features) {
 async function promptModuleConfigs(features, projectName) {
   const configs = {};
   const onCancel = () => {
-    writeCliMessage(chalk.red("\n\u5DF2\u53D6\u6D88"));
+    writeCliMessage(chalk.red(cliM("cli_cancelledLine")));
     process4.exit(1);
   };
   writeCliMessage("");
-  writeCliMessage(chalk.bold("  \u2699 \u6A21\u5757\u914D\u7F6E"));
-  writeCliMessage(chalk.gray("     \u8BBE\u7F6E\u5173\u952E\u914D\u7F6E\u9879\uFF08\u56DE\u8F66\u4F7F\u7528\u9ED8\u8BA4\u503C\uFF09"));
+  writeCliMessage(chalk.bold(cliM("cli_createModuleConfig")));
+  writeCliMessage(chalk.gray(cliM("cli_createModuleConfigHint")));
   writeCliMessage("");
   configs.core = await promptCoreConfig(projectName, onCancel);
   if (features.includes("db")) {
@@ -1543,27 +1702,32 @@ async function promptModuleConfigs(features, projectName) {
   return configs;
 }
 async function promptCoreConfig(projectName, onCancel) {
-  writeCliMessage(chalk.cyan("  [core] \u5E94\u7528\u57FA\u7840\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createCoreConfig")));
   const { defaultLocale } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "defaultLocale",
-    message: "\u9ED8\u8BA4\u8BED\u8A00:",
+    message: cliM("cli_createLocalePrompt"),
     choices: [
-      { title: "\u4E2D\u6587 (zh-CN)", value: "zh-CN" },
-      { title: "English (en-US)", value: "en-US" }
+      { title: cliM("cli_createChineseLocale"), value: "zh-CN" },
+      { title: cliM("cli_createEnglishLocale"), value: "en-US" },
+      { title: cliM("cli_createJapaneseLocale"), value: "ja-JP" }
     ],
     initial: 0
   }, { onCancel });
   return { name: projectName, defaultLocale };
 }
 async function promptDbConfig(projectName, onCancel) {
-  writeCliMessage(chalk.cyan("  [db] \u6570\u636E\u5E93\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createDbConfig")));
   const { type } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "type",
-    message: "\u6570\u636E\u5E93\u7C7B\u578B:",
+    message: cliM("cli_createDbTypePrompt"),
     choices: [
-      { title: "SQLite (\u96F6\u914D\u7F6E\uFF0C\u9002\u5408\u5F00\u53D1)", value: "sqlite" },
+      { title: cliM("cli_createSqliteOption"), value: "sqlite" },
       { title: "PostgreSQL", value: "postgresql" },
       { title: "MySQL", value: "mysql" }
     ],
@@ -1573,26 +1737,28 @@ async function promptDbConfig(projectName, onCancel) {
     const { database } = await prompts({
       type: "text",
       name: "database",
-      message: "SQLite \u6570\u636E\u5E93\u8DEF\u5F84:",
+      message: cliM("cli_createSqlitePathPrompt"),
       initial: "./data/app.db"
     }, { onCancel });
     return { type, database };
   }
   const answers = await prompts([
-    { type: "text", name: "host", message: `${type === "postgresql" ? "PostgreSQL" : "MySQL"} \u4E3B\u673A:`, initial: "localhost" },
-    { type: "number", name: "port", message: "\u7AEF\u53E3:", initial: type === "postgresql" ? 5432 : 3306 },
-    { type: "text", name: "database", message: "\u6570\u636E\u5E93\u540D\u79F0:", initial: projectName }
+    { type: "text", name: "host", message: cliM("cli_createDbHostPrompt", { params: { backend: type === "postgresql" ? "PostgreSQL" : "MySQL" } }), initial: "localhost" },
+    { type: "number", name: "port", message: cliM("cli_createPortPrompt"), initial: type === "postgresql" ? 5432 : 3306 },
+    { type: "text", name: "database", message: cliM("cli_createDatabasePrompt"), initial: projectName }
   ], { onCancel });
   return { type, host: answers.host, port: answers.port, database: answers.database };
 }
 async function promptCacheConfig(onCancel) {
-  writeCliMessage(chalk.cyan("  [cache] \u7F13\u5B58\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createCacheConfig")));
   const { type } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "type",
-    message: "\u7F13\u5B58\u7C7B\u578B:",
+    message: cliM("cli_createCacheTypePrompt"),
     choices: [
-      { title: "\u5185\u5B58\u7F13\u5B58 (\u96F6\u914D\u7F6E\uFF0C\u9002\u5408\u5F00\u53D1)", value: "memory" },
+      { title: cliM("cli_createMemoryOption"), value: "memory" },
       { title: "Redis", value: "redis" }
     ],
     initial: 0
@@ -1600,27 +1766,29 @@ async function promptCacheConfig(onCancel) {
   if (type === "memory")
     return { type };
   const answers = await prompts([
-    { type: "text", name: "host", message: "Redis \u4E3B\u673A:", initial: "localhost" },
-    { type: "number", name: "port", message: "Redis \u7AEF\u53E3:", initial: 6379 }
+    { type: "text", name: "host", message: cliM("cli_createRedisHostPrompt"), initial: "localhost" },
+    { type: "number", name: "port", message: cliM("cli_createRedisPortPrompt"), initial: 6379 }
   ], { onCancel });
   return { type, host: answers.host, port: answers.port };
 }
 async function promptIamConfig(onCancel) {
-  writeCliMessage(chalk.cyan("  [iam] \u8BA4\u8BC1\u6388\u6743\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createIamConfig")));
   const answers = await prompts([
-    { type: "confirm", name: "loginPassword", message: "\u542F\u7528\u5BC6\u7801\u767B\u5F55?", initial: true },
-    { type: "confirm", name: "loginOtp", message: "\u542F\u7528 OTP \u9A8C\u8BC1\u7801\u767B\u5F55?", initial: false }
+    { type: "confirm", active: cliM("cli_yes"), inactive: cliM("cli_no"), name: "loginPassword", message: cliM("cli_createPasswordPrompt"), initial: true },
+    { type: "confirm", active: cliM("cli_yes"), inactive: cliM("cli_no"), name: "loginOtp", message: cliM("cli_createOtpPrompt"), initial: false }
   ], { onCancel });
   return { loginPassword: answers.loginPassword, loginOtp: answers.loginOtp };
 }
 async function promptStorageConfig(onCancel) {
-  writeCliMessage(chalk.cyan("  [storage] \u6587\u4EF6\u5B58\u50A8\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createStorageConfig")));
   const { type } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "type",
-    message: "\u5B58\u50A8\u7C7B\u578B:",
+    message: cliM("cli_createStorageTypePrompt"),
     choices: [
-      { title: "\u672C\u5730\u5B58\u50A8 (\u96F6\u914D\u7F6E\uFF0C\u9002\u5408\u5F00\u53D1)", value: "local" },
+      { title: cliM("cli_createLocalStorageOption"), value: "local" },
       { title: "S3 / MinIO / OSS", value: "s3" }
     ],
     initial: 0
@@ -1629,7 +1797,7 @@ async function promptStorageConfig(onCancel) {
     const { localPath } = await prompts({
       type: "text",
       name: "localPath",
-      message: "\u5B58\u50A8\u8DEF\u5F84:",
+      message: cliM("cli_createStoragePathPrompt"),
       initial: "./data/uploads"
     }, { onCancel });
     return { type, localPath };
@@ -1637,15 +1805,17 @@ async function promptStorageConfig(onCancel) {
   return { type };
 }
 async function promptAiConfig(onCancel) {
-  writeCliMessage(chalk.cyan("  [ai] AI \u96C6\u6210\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createAiConfig")));
   const { defaultProvider } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "defaultProvider",
-    message: "AI Provider:",
+    message: cliM("cli_createProviderPrompt"),
     choices: [
       { title: "OpenAI", value: "openai" },
       { title: "Anthropic (Claude)", value: "anthropic" },
-      { title: "\u5176\u4ED6 (OpenAI \u517C\u5BB9)", value: "custom" }
+      { title: cliM("cli_createCompatibleAiOption"), value: "custom" }
     ],
     initial: 0
   }, { onCancel });
@@ -1653,7 +1823,7 @@ async function promptAiConfig(onCancel) {
   const { model } = await prompts({
     type: "text",
     name: "model",
-    message: "\u9ED8\u8BA4\u6A21\u578B:",
+    message: cliM("cli_createModelPrompt"),
     initial: defaultModel
   }, { onCancel });
   return { defaultProvider, model };
@@ -1732,27 +1902,25 @@ function normalizeChildOutput(output) {
   return "";
 }
 function generateAiDevelopmentReadme() {
-  return `## AI \u8F85\u52A9\u5F00\u53D1
+  return `### AI \u8F85\u52A9\u5F00\u53D1
 
 \u4ECE\u672C\u9879\u76EE\u6839\u76EE\u5F55\u6253\u5F00\u6240\u7528\u7F16\u7801\u5DE5\u5177\uFF0C\u5148\u8BFB\u53D6 [AGENTS.md](./AGENTS.md)\u3002Claude Code \u901A\u8FC7 [CLAUDE.md](./CLAUDE.md) \u52A0\u8F7D\u9879\u76EE\u89C4\u5219\uFF1BGitHub Copilot \u4F7F\u7528 [.github/copilot-instructions.md](./.github/copilot-instructions.md)\uFF0COpenCode \u4F7F\u7528 AGENTS.md \u548C [opencode.json](./opencode.json)\u3002
 
-\u4E1A\u52A1\u4EE5\u7528\u6237\u5F53\u524D\u660E\u786E\u8981\u6C42\u53CA\u5176\u6307\u5B9A\u7684\u9700\u6C42/\u8BBE\u8BA1\u6587\u6863\u4E3A\u51C6\u3002\u6A21\u677F AGENTS\u3001README\u3001skills\u3001\u751F\u6210\u4EE3\u7801\u4E0E\u6D4B\u8BD5\u4E2D\u7684\u89D2\u8272/\u6743\u9650\u3001\u6D41\u7A0B\u3001\u9650\u989D\u548C\u67B6\u6784\u662F\u53EF\u8C03\u6574\u7684\u521D\u59CB\u65B9\u6848\uFF1B\u5BA1\u67E5\u5C06\u5DEE\u5F02\u5217\u4E3A\u6A21\u677F\u9002\u914D\u9879\uFF0C\u5B9E\u65BD\u6309\u6388\u6743\u540C\u6B65\u51B2\u7A81\u4EE3\u7801\u3001\u6D4B\u8BD5\u4E0E\u8FC7\u671F\u89C4\u5219\uFF0C\u4E0D\u8981\u6C42\u628A\u9700\u6C42\u6539\u56DE\u6A21\u677F\u3002\u6846\u67B6 API \u4EE5\u5F53\u524D\u5B89\u88C5\u7248\u672C\u516C\u5F00\u5951\u7EA6\u4E3A\u51C6\uFF0C\u670D\u52A1\u7AEF\u6388\u6743\u3001\u8D44\u6E90\u9694\u79BB\u3001\u8F93\u5165\u6821\u9A8C\u548C\u51ED\u636E\u4FDD\u62A4\u4ECD\u9700\u843D\u5B9E\u3002
-
-Codex\u3001Cursor\u3001Copilot\u3001OpenCode \u4ECE .agents/skills/ \u53D1\u73B0\u5171\u4EAB\u6280\u80FD\uFF1BClaude Code \u901A\u8FC7 CLAUDE.md \u5F15\u7528 AGENTS.md\uFF0C\u5E76\u6309\u9879\u76EE\u6307\u5F15\u8BFB\u53D6 .agents/skills/ \u7684\u540C\u4E00\u4EFD\u6B63\u6587\u3002\u9700\u6C42\u6216\u8BBE\u8BA1\u6587\u6863\u5728\u751F\u6210\u524D\u4F7F\u7528 [\u6587\u6863\u5BA1\u67E5 Skill](./.agents/skills/hai-spec-review/SKILL.md) \u4E25\u683C\u68C0\u67E5\u5B8C\u5907\u6027\u3001\u6B67\u4E49\u3001\u6280\u672F\u6B63\u786E\u6027\u548C\u547D\u540D\u4E00\u81F4\u6027\uFF0C\u95EE\u9898\u89E3\u51B3\u540E\u518D\u751F\u6210\u3002\u666E\u901A\u65B0\u589E\u3001\u4FEE\u6539\u3001\u4FEE\u590D\u4EFB\u52A1\u4F7F\u7528 [\u5E94\u7528\u5F00\u53D1 Skill](./.agents/skills/hai-app-create/SKILL.md) \u548C [\u5F00\u53D1\u89C4\u8303\u4E0E\u6846\u67B6\u80FD\u529B\u8DEF\u7531](./.agents/skills/hai-app-create/development.md)\uFF1B\u5177\u4F53\u6A21\u5757\u518D\u6309\u9700\u8BFB\u53D6\uFF0C\u4E0D\u80FD\u628A Skill \u5DF2\u4EA4\u4ED8\u5F53\u6210\u4F9D\u8D56\u5DF2\u5B89\u88C5\u6216\u914D\u7F6E\u5DF2\u542F\u7528\u3002
+\u751F\u6210\u7684\u9875\u9762\u548C\u4E1A\u52A1\u89C4\u5219\u662F\u8D77\u70B9\uFF0C\u53EF\u4EE5\u6309\u9700\u6C42\u8C03\u6574\u3002\u628A\u529F\u80FD\u3001\u6743\u9650\u548C\u9A8C\u6536\u6761\u4EF6\u544A\u8BC9 AI\uFF0C\u518D\u8BA9\u5B83\u8BFB\u53D6\u5BF9\u5E94\u6280\u80FD\u4E0E\u5F53\u524D\u5B89\u88C5\u7248\u672C\u7684 API\u3002
 
-\u6839\u636E\u6587\u6863\u89C4\u5212\u3001\u5B9E\u65BD\u3001\u8FD4\u4FEE\u6216\u6309\u5DF2\u63D0\u4EA4\u6587\u6863\u5DEE\u5F02\u540C\u6B65\u5B9E\u73B0\u65F6\uFF0C\u4F7F\u7528 [\u6587\u6863\u5B9E\u65BD Skill](./.agents/skills/hai-spec-implement/SKILL.md)\uFF1A\u7EF4\u62A4 docs/task-list.md \u4E0E docs/tasks/\uFF0C\u8BB0\u5F55\u5DF2\u9A8C\u6536\u6587\u6863\u548C\u5B9E\u73B0\u7684 Git SHA\uFF0C\u6BD4\u8F83\u56FA\u5B9A\u76EE\u6807\u7248\u672C\u540E\u66F4\u65B0\u539F\u4EFB\u52A1\u6216\u65B0\u5EFA\u4EFB\u52A1\uFF0C\u6BCF\u9879\u72EC\u7ACB\u5206\u652F TDD\u3001\u9A8C\u8BC1\u5E76\u672C\u5730\u5408\u5E76\uFF1B\u5168\u90E8\u5DEE\u5F02\u4E0E\u6574\u4F53\u9A8C\u6536\u901A\u8FC7\u540E\u624D\u63A8\u8FDB\u57FA\u7EBF\u3002\u8FD4\u4FEE\u6CBF\u7528\u539F\u4EFB\u52A1\u4E0E\u5206\u652F\u3002\u4EC5\u89C4\u5212\u4E0D\u5F00\u59CB\u5B9E\u73B0\uFF0C\u6307\u5B9A\u4EFB\u52A1\u5148\u6838\u9A8C\u4F9D\u8D56\u3002
+\u666E\u901A\u529F\u80FD\u5F00\u53D1\u4F7F\u7528 [\u5E94\u7528\u5F00\u53D1 Skill](./.agents/skills/hai-app-create/SKILL.md)\u3002\u9700\u6C42\u6587\u6863\u8F83\u591A\u65F6\uFF0C\u5148\u7528 [\u6587\u6863\u5BA1\u67E5 Skill](./.agents/skills/hai-spec-review/SKILL.md) \u627E\u51FA\u7F3A\u5931\u548C\u77DB\u76FE\uFF0C\u518D\u7528 [\u6587\u6863\u5B9E\u65BD Skill](./.agents/skills/hai-spec-implement/SKILL.md) \u7EF4\u62A4 docs/task-list.md \u4E0E docs/tasks/\uFF0C\u9010\u9879\u5B9E\u73B0\u3001\u6D4B\u8BD5\u548C\u4EA4\u4ED8\u3002
 
-\u4F18\u5148\u590D\u7528\u9002\u7528\u7684 hai-framework \u516C\u5F00 API \u4E0E\u5DF2\u6709\u4E1A\u52A1\u5B9E\u73B0\u3002\u5B8C\u6210\u65F6\u8BF4\u660E\u590D\u7528\u7684\u80FD\u529B\u3001\u76F8\u5173\u80FD\u529B\u672A\u91C7\u7528\u7684\u539F\u56E0\uFF0C\u4EE5\u53CA\u5B89\u5168\u8FB9\u754C\u548C\u7C7B\u578B\u3001\u914D\u7F6E\u3001\u6587\u6848\u3001\u8C03\u7528\u65B9\u7684\u540C\u6B65\u60C5\u51B5\u3002\u8D28\u91CF\u9A8C\u8BC1\u6309\u5F53\u524D package.json \u6267\u884C typecheck \u2192 lint \u2192 build \u2192 test\uFF1BUI\u3001\u8DEF\u7531\u4E0E\u7AEF\u5230\u7AEF\u6D41\u7A0B\u53E6\u8FD0\u884C test:e2e\uFF0C\u672A\u8FD0\u884C\u9879\u8BF4\u660E\u539F\u56E0\u3002\u5B89\u5168\u4E0E\u8D28\u91CF\u89C4\u5219\u65E2\u8981\u6309\u89C4\u8303\u5BA1\u67E5\uFF0C\u4E5F\u8981\u8FD0\u884C\u95E8\u7981\u9A8C\u8BC1\u3002
-
-\u5DF2\u6709 hai \u9879\u76EE\u53EF\u8FD0\u884C hai init \u8865\u9F50\u7F3A\u5931\u7684 AI \u652F\u6301\u6587\u4EF6\u4E0E\u53C2\u8003\u8D44\u6E90\uFF1B\u5DF2\u6709 AGENTS.md\u3001Skill \u548C\u81EA\u5B9A\u4E49\u89C4\u5219\u4F1A\u4FDD\u7559\uFF0C\u5347\u7EA7\u65F6\u9700\u5C06\u4E0A\u8FF0\u9700\u6C42\u4F18\u5148\u89C4\u5219\u3001\u666E\u901A\u5F00\u53D1\u5165\u53E3\u4E0E\u89C4\u8303\u663E\u5F0F\u5408\u5E76\u5230\u65E7\u6307\u5F15\uFF0C\u5E76\u4FEE\u6B63\u5DF2\u88AB\u9700\u6C42\u66FF\u4EE3\u7684\u6A21\u677F\u7EA6\u675F\u3002
+\u5DF2\u6709\u9879\u76EE\u53EF\u8FD0\u884C hai init \u8865\u9F50\u7F3A\u5931\u7684 AI \u5165\u53E3\uFF1B\u5B83\u4FDD\u7559\u5DF2\u6709\u81EA\u5B9A\u4E49\u5185\u5BB9\u3002\u5347\u7EA7\u6846\u67B6\u4F7F\u7528 [\u6846\u67B6\u5347\u7EA7 Skill](./.agents/skills/hai-framework-sync/SKILL.md)\uFF0C\u540C\u65F6\u6838\u5BF9\u4F9D\u8D56\u3001\u914D\u7F6E\u3001\u4EE3\u7801\u548C\u6280\u80FD\u3002
 
 `;
 }
 function generateEnvironmentReadme() {
-  return `## \u5206\u73AF\u5883\u914D\u7F6E
+  return `### \u5206\u73AF\u5883\u914D\u7F6E
 
 \u8FD0\u884C\u53C2\u6570\u5728 \`.env.example\` \u4E2D\u9010\u9879\u8BF4\u660E\u7528\u9014\u3001\u679A\u4E3E\u548C\u8303\u56F4\u3002\`.env\` \u4E3A\u516C\u5171\u57FA\u7840\uFF0C\`.env.dev\` / \`.env.test\` / \`.env.prod\` \u4E3A\u73AF\u5883\u8986\u76D6\uFF0C\u5747\u63D0\u4EA4 Git\uFF1B\`.env.local\` \u4E3A\u672C\u673A\u79C1\u6709\u8986\u76D6\uFF0C\u4E0D\u63D0\u4EA4 Git\u3002\u4F18\u5148\u7EA7\u4E3A\u8FDB\u7A0B\u73AF\u5883 > \`.env.local\` > \u73AF\u5883\u6587\u4EF6 > \`.env\`\u3002YAML \u663E\u5F0F\u5F15\u7528 \`HAI_<\u914D\u7F6E\u540D>_<\u8DEF\u5F84>\` \u5E76\u4FDD\u7559\u672C\u5730\u56DE\u9000\uFF0CcamelCase \u4E0D\u62C6\u8BCD\u3002\u5B8C\u6574\u547D\u4EE4\u3001\u52A0\u8F7D\u4F18\u5148\u7EA7\u548C Provider \u5207\u6362\u89C1 [\u73AF\u5883\u914D\u7F6E](.agents/skills/hai-app-create/development.md#\u73AF\u5883\u914D\u7F6E)\u3002
 
+\u751F\u4EA7 .env.prod \u6309\u5DF2\u542F\u7528\u6A21\u5757\u9009\u62E9\u5171\u4EAB PostgreSQL\uFF08\u660E\u786E\u9009\u62E9 MySQL \u65F6\u4FDD\u7559\uFF09\u3001Redis\u3001S3\u3001Qdrant\uFF0C\u9ED8\u8BA4\u4F7F\u7528 Compose \u5185\u90E8\u670D\u52A1\u540D db/cache/storage/vecdb\u3002\u5BC6\u7801\u3001S3 \u51ED\u636E\u3001\u6A21\u578B Key \u4E0E\u53D7\u4FDD\u62A4 Qdrant \u7684 Key \u53EA\u7531\u79C1\u6709\u73AF\u5883\u6CE8\u5165\uFF1B\u5BB9\u5668\u5916\u8FD0\u884C\u8986\u76D6\u5185\u90E8\u8FDE\u63A5\u5730\u5740\u3002\u751F\u4EA7 Reach \u5FC5\u987B\u6CE8\u5165\u771F\u5B9E HAI_REACH_PROVIDERS JSON\uFF0C\u516C\u5171\u7A7A\u6570\u7EC4\u4F1A\u62D2\u7EDD\u542F\u52A8\u3002AI \u81EA\u52A8\u8865\u5168 db+vecdb \u4F9D\u8D56\uFF0C\u5E76\u5728\u4E8C\u8005\u5C31\u7EEA\u540E\u521D\u59CB\u5316\uFF0C\u5931\u8D25\u9006\u5E8F\u6E05\u7406\u3002
+
 | \u7528\u9014 | \u547D\u4EE4 |
 | --- | --- |
 | \u5F00\u53D1 / \u6D4B\u8BD5\u6A21\u5F0F / \u751F\u4EA7\u6A21\u5F0F\u9884\u89C8 | \`pnpm dev\` / \`dev:test\` / \`dev:prod\` |
@@ -1764,17 +1932,58 @@ function generateEnvironmentReadme() {
 
 Vite \u5BA2\u6237\u7AEF\u4F7F\u7528 \`preview\` \u9884\u89C8\u9759\u6001\u4EA7\u7269\uFF0CNode \u670D\u52A1\u4F7F\u7528 \`start\`\uFF1B\u7EAF contract/shared \u5E93\u53EA\u63D0\u4F9B\u9002\u7528\u7684\u6784\u5EFA\u548C\u8D28\u91CF\u547D\u4EE4\u3002API workspace \u7684\u73AF\u5883\u6587\u4EF6\u4F4D\u4E8E \`apps/<name>-service\`\uFF0Cfullstack \u4F4D\u4E8E\u5DE5\u7A0B\u6839\u3002`;
 }
+function generateBuildDeploymentReadme(pm, appDir) {
+  return `### \u6784\u5EFA\u4E0E\u90E8\u7F72
+
+\u521B\u5EFA\u65F6\u9ED8\u8BA4\u5305\u542B\u90E8\u7F72\u5DE5\u5177\uFF1B\u4E0D\u9700\u8981\u65F6\u4F7F\u7528 hai create --no-deploy\u3002
+\u6BCF\u4E2A\u955C\u50CF\u5BF9\u5E94 images/ \u4E2D\u4E00\u4E2A Dockerfile\uFF0Chai.build.json \u7528 dockerfile \u6307\u5B9A\u6587\u4EF6\u3002
+\u4E0B\u8F7D\u3001\u5B89\u88C5\u548C\u6574\u7406\u751F\u4EA7\u4F9D\u8D56\u590D\u7528\u540C\u4E00\u4EFD\u5305\u7F13\u5B58\u4E0E SQLite \u9A71\u52A8\u7F13\u5B58\uFF0C\u907F\u514D\u91CD\u590D\u4E0B\u8F7D\u3002
+\u9ED8\u8BA4\u5BB9\u5668\u7528\u4E8E CPU \u8FD0\u884C\u6216\u8FDE\u63A5\u8FDC\u7A0B AI \u670D\u52A1\uFF0C\u4E0D\u989D\u5916\u4E0B\u8F7D GPU \u8FD0\u884C\u5E93\uFF1B\u9700\u8981\u4F7F\u7528\u90E8\u7F72\u673A\u5668\u4E0A\u7684 GPU \u65F6\uFF0C\u81EA\u884C\u5B9A\u5236\u955C\u50CF\u548C\u5BB9\u5668\u8FD0\u884C\u53C2\u6570\u3002
+
+\`\`\`sh
+${pm} build
+${pm} build --target docker
+# \u6784\u5EFA\u548C\u90E8\u7F72\u4E00\u6B21\u5B8C\u6210
+${pm} exec hai deploy ${appDir} --env test --build
+# \u590D\u7528\u5DF2\u6709\u955C\u50CF\uFF1B\u53EA\u751F\u6210\u5B8C\u6574\u79BB\u7EBF\u5305\u53CA\u8DE8\u5E73\u53F0\u90E8\u7F72\u811A\u672C
+${pm} exec hai deploy ${appDir} --env prod --bundle-only
+# \u53EA\u66F4\u65B0\u524D\u7AEF\uFF08\u5DE5\u7A0B\u5B58\u5728 web \u955C\u50CF\u65F6\uFF09
+${pm} build --target docker --images web
+${pm} exec hai deploy ${appDir} --env prod --services web
+\`\`\`
+
+\u6784\u5EFA\u4E0D\u8BFB\u53D6\u90E8\u7F72\u73AF\u5883\uFF1B\u4EA7\u7269\u4F4D\u4E8E .hai/build/docker/<buildId>\uFF0C\u7528 --artifact-dir \u7CBE\u786E\u9009\u62E9\u3002
+\u5E94\u7528\u6839 package.json.version \u9A71\u52A8\u7248\u672C\uFF0C\u540C\u7248\u672C\u5141\u8BB8\u91CD\u65B0\u6784\u5EFA\u548C\u53D1\u5E03\uFF1B\u6E05\u5355\u8BB0\u5F55\u72EC\u7ACB\u6784\u5EFA\u7F16\u53F7\u4E0E\u6821\u9A8C\u548C\u3002
+\u5B8C\u6574\u79BB\u7EBF\u5305\u81EA\u52A8\u643A\u5E26\u81EA\u5EFA\u4E2D\u95F4\u4EF6\u955C\u50CF\uFF1B\u51C6\u5907\u4E2D\u95F4\u4EF6\u955C\u50CF\u9700\u8981\u6784\u5EFA\u673A\u6709\u53EF\u7528 Podman/Docker\uFF0C\u7F3A\u955C\u50CF\u65F6\u5728\u6253\u5305\u9636\u6BB5\u62C9\u53D6\u3002
+\u670D\u52A1\u5668\u9700\u8981 Linux\u3001Docker/Podman\u3001Docker Compose v2 \u6216 podman-compose 1.6.0 \u53CA\u4EE5\u4E0A\u3001sh\u3001tar\u3001sha256sum\u3001awk\u3001curl\u3001util-linux flock \u548C\u652F\u6301 flock \u7684\u6587\u4EF6\u7CFB\u7EDF\uFF0C\u542F\u52A8\u9636\u6BB5\u4E0D\u8054\u7F51\u62C9\u53D6\u3002
+\u56FA\u5B9A .deploy.lock \u5185\u6838\u9501\u8986\u76D6\u90E8\u7F72\u53CA\u6062\u590D\uFF1B\u7981\u6B62\u5220\u9664\u6216\u66FF\u6362\uFF0C\u6240\u6709\u6301\u6709\u8FDB\u7A0B\u9000\u51FA\u6216\u91CD\u542F\u540E\u81EA\u52A8\u91CA\u653E\u3002\u5F3A\u6740\u540E\u987B\u6838\u5BF9\u7ED3\u679C\u6587\u4EF6\u3001current \u548C\u5BB9\u5668\u72B6\u6001\uFF0C\u518D\u7528\u65B0\u5305\u6062\u590D\u3002
+tar \u65C1\u7684\u90E8\u7F72\u76EE\u5F55\u63D0\u4F9B deploy.ps1\uFF08Windows\uFF09\u548C deploy.sh\uFF08Linux/macOS\uFF09\uFF0C\u6309\u5DF2\u4FDD\u5B58\u7684 SSH \u53C2\u6570\u4E0A\u4F20\u3001\u5BFC\u5165\u3001\u542F\u52A8\u5E76\u9A8C\u8BC1 HTTP\u3002
+\u5B8C\u5168\u9694\u79BB\u65F6\u624B\u5DE5\u642C\u8FD0 tar\uFF0C\u72EC\u7ACB\u76EE\u5F55\u89E3\u5305\u540E\u6267\u884C sh apply.sh\uFF0C\u6216\u4F20\u5165\u90E8\u7F72\u76EE\u5F55\u8986\u76D6\u9ED8\u8BA4\u4F4D\u7F6E\u3002
+\u90E8\u5206\u66F4\u65B0\u8981\u6C42\u5DF2\u6709\u6210\u529F\u7684\u5B8C\u6574\u90E8\u7F72\uFF0C\u4FDD\u7559\u672A\u9009\u670D\u52A1\u53CA\u6570\u636E\u5377\uFF1B\u5931\u8D25\u8FD4\u56DE\u975E\u96F6\u9000\u51FA\u7801\uFF0C\u5DF2\u6709\u90E8\u7F72\u5C1D\u8BD5\u6062\u590D\u9009\u4E2D\u670D\u52A1\u3002
+\u4E2D\u95F4\u4EF6\u8FDE\u63A5\u9F50\u5168\u65F6\u4F7F\u7528 --skip-middleware \u8DF3\u8FC7\u914D\u7F6E\u5411\u5BFC\u3002\u5305\u4E2D\u5305\u542B\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u63D0\u4EA4 Git\u3002
+`;
+}
 function generateReadme(name, appTypeLabel, pm, appType) {
   const install = getInstallCommand(pm);
   return `# ${name}
 
+## \u7B80\u4ECB
+
 \u57FA\u4E8E hai Agent Framework \u6784\u5EFA\u7684${appTypeLabel}\u5E94\u7528\u3002
 
-## \u9875\u9762\u5E03\u5C40\u4E0E\u8DEF\u7531
+## \u6838\u5FC3\u529F\u80FD\u6E05\u5355
 
-\u9875\u9762\u7EDF\u4E00\u7EE7\u627F\u6839\u5E03\u5C40\u7684 header/footer\u3002${appType === "mobile-app" ? "\u9875\u9762\u653E src/lib/pages/**/*.svelte\uFF0Chash \u8DEF\u7531\u81EA\u52A8\u53D1\u73B0\uFF0C\u5237\u65B0\u4E0E\u524D\u8FDB\u540E\u9000\u6062\u590D\u5F53\u524D\u9875\u3002" : "\u4F7F\u7528 SvelteKit \u81EA\u52A8\u6587\u4EF6\u8DEF\u7531\uFF0C\u65B0\u589E +page.svelte \u65E0\u9700\u7EF4\u62A4\u8DEF\u7531\u8868\uFF1B\u5237\u65B0\u5B9A\u4F4D\u4E0E\u670D\u52A1\u7AEF\u9274\u6743\u4FDD\u6301\u4E00\u81F4\u3002"}
+- \u5F00\u53D1\u670D\u52A1\u5668\u3001\u6E90\u7801\u7F16\u8BD1\u4E0E\u6D4F\u89C8\u5668\u6D4B\u8BD5\u3002
+- \u6309\u6240\u9009\u6A21\u5757\u63D0\u4F9B\u9875\u9762\u548C\u670D\u52A1\u914D\u7F6E\u3002
+- \u72EC\u7ACB Dockerfile \u4E0E\u955C\u50CF\u5F52\u6863\uFF0C\u4FBF\u4E8E\u4EA4\u4ED8\u3002
 
-## \u5F00\u53D1
+## \u4F7F\u7528\u5165\u95E8
+
+### \u9875\u9762\u5E03\u5C40\u4E0E\u8DEF\u7531
+
+\u9875\u9762\u7EDF\u4E00\u7EE7\u627F\u6839\u5E03\u5C40\u7684 header/footer\u3002${appType === "mobile-app" ? "\u9875\u9762\u653E src/lib/pages/**/*.svelte\uFF0Chash \u8DEF\u7531\u81EA\u52A8\u53D1\u73B0\uFF0C\u5237\u65B0\u4E0E\u524D\u8FDB\u540E\u9000\u6062\u590D\u5F53\u524D\u9875\u3002" : "\u4F7F\u7528 SvelteKit \u81EA\u52A8\u6587\u4EF6\u8DEF\u7531\uFF0C\u65B0\u589E +page.svelte \u65E0\u9700\u7EF4\u62A4\u8DEF\u7531\u8868\uFF1B\u5237\u65B0\u5B9A\u4F4D\u4E0E\u670D\u52A1\u7AEF\u9274\u6743\u4FDD\u6301\u4E00\u81F4\u3002"}${appType === "mobile-app" ? "\n\n\u9009\u62E9 IAM \u6216 crypto \u7684\u79FB\u52A8\u5BA2\u6237\u7AEF\u9ED8\u8BA4\u542F\u7528\u52A0\u5BC6 transport\uFF0C\u5148\u521D\u59CB\u5316 crypto\uFF0C\u518D\u521D\u59CB\u5316 typed API client\uFF1B\u7ED3\u675F\u65F6\u6309\u76F8\u53CD\u987A\u5E8F\u5173\u95ED\u3002\u4EC5\u660E\u786E\u8FDE\u63A5\u5339\u914D\u7684\u660E\u6587 API \u65F6\u8BBE\u7F6E PUBLIC_API_TRANSPORT=off\uFF1BPUBLIC_API_KEY_EXCHANGE_PATH \u4EC5\u8986\u76D6\u516C\u5F00\u534F\u5546\u5B50\u8DEF\u5F84\u3002\u63E1\u624B\u5931\u8D25\u4E0D\u4F1A\u9000\u56DE\u660E\u6587\uFF0C\u670D\u52A1\u7AEF\u79C1\u94A5\u4E0D\u8FDB\u5165\u5BA2\u6237\u7AEF\u3002\u672A\u9009\u62E9 crypto \u7684\u5BA2\u6237\u7AEF\u4FDD\u7559\u660E\u6587 API \u6A21\u5F0F\u3002" : ""}
+
+### \u5F00\u53D1
 
 \`\`\`bash
 ${install}
@@ -1783,46 +1992,57 @@ ${getRunCommand(pm, "dev")}
 
 ${generateEnvironmentReadme()}
 
-## \u6784\u5EFA
+### \u6784\u5EFA
 
 \`\`\`bash
 ${getRunCommand(pm, "build")}
-${getRunCommand(pm, "i18n:compile")}
+${getRunCommand(pm, "paraglide:compile")}
 ${getRunCommand(pm, "preview")}
 \`\`\`
 
-## \u6784\u5EFA\u4E0E\u90E8\u7F72
+${generateBuildDeploymentReadme(pm, `.`)}
 
-\`\`\`bash
-# \u9ED8\u8BA4\u53EA\u7F16\u8BD1\u6E90\u7801\uFF1B\u4E0D\u9009\u62E9\u90E8\u7F72\u73AF\u5883
-${pm} build
-# \u6784\u5EFA\u5E76\u5BFC\u51FA API/Web \u955C\u50CF\uFF0Cauto \u4F18\u5148 Podman\u3001\u5176\u6B21 Docker
-${pm} build --target docker
-# \u9009\u62E9\u73AF\u5883\u3001\u4E2D\u95F4\u4EF6\u5E76\u4E0A\u4F20\u4E00\u4E2A Compose tar\uFF1B\u4E0D\u4F1A\u91CD\u65B0\u6784\u5EFA
-${pm} exec hai deploy . --env test
-# \u65E0\u6CD5\u8FDE\u63A5\u670D\u52A1\u5668\u65F6\u53EA\u751F\u6210\u5305\uFF0C\u6309\u8F93\u51FA\u8BF4\u660E\u624B\u5DE5\u642C\u8FD0\u548C\u542F\u52A8
-${pm} exec hai deploy . --env prod --bundle-only
-\`\`\`
-
-\u955C\u50CF\u6784\u5EFA\u914D\u7F6E\u89C1 \`hai.build.json\`\u3002\u6784\u5EFA\u4EA7\u7269\u4FDD\u5B58\u5728 \`.hai/build/docker/<buildId>\`\uFF0C\u53EF\u7528 \`--artifact-dir\` \u9009\u62E9\u540C\u4E00\u4EFD\u4EA7\u7269\u90E8\u7F72\u5230 test/prod\u3002\u90E8\u7F72\u5305\u542B\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u80FD\u63D0\u4EA4 Git\u3002\u73AF\u5883\u5DF2\u914D\u7F6E\u5B8C\u5907\u53EF\u52A0 \`--skip-middleware\`\u3002\u670D\u52A1\u8FD0\u884C\u6570\u636E\u7531 volume \u6301\u4E45\u5316\uFF0C\u955C\u50CF\u4E0D\u6253\u5305\u672C\u673A data\u3002API/Web \u8054\u5408\u90E8\u7F72\u516C\u5F00 Web \u5165\u53E3\u5E76\u4EE3\u7406\u540C\u6E90 API\uFF1B\u6CA1\u6709 Web \u4EA7\u7269\u65F6\u53EA\u90E8\u7F72\u670D\u52A1\u3002
-
-${generateAiDevelopmentReadme()}## \u6587\u6863
+${generateAiDevelopmentReadme()}### \u6587\u6863
 
 - [hai Agent Framework](https://github.com/hai-series/hai-framework)
 - [Svelte 5](https://svelte.dev/)
+
+## \u5F00\u53D1\u6D4B\u8BD5
+
+\`\`\`sh
+${getRunCommand(pm, "typecheck")}
+${getRunCommand(pm, "lint")}
+${getRunCommand(pm, "build")}
+${getRunCommand(pm, "test")}
+${getRunCommand(pm, "test:e2e")}
+\`\`\`
+
+## \u8BB8\u53EF\u8BC1
+
+Apache-2.0
 `;
 }
 function generateApiWorkspaceReadme(name, pm) {
   return `# ${name}
 
-\u57FA\u4E8E hai Agent Framework \u6784\u5EFA\u7684 typed API workspace\u3002
+## \u7B80\u4ECB
+
+\u540E\u7AEF API \u5DE5\u7A0B\uFF0C\u63A5\u53E3\u5B9A\u4E49\u4E0E\u670D\u52A1\u5B9E\u73B0\u5206\u5305\u7EF4\u62A4\uFF0C\u5BA2\u6237\u7AEF\u53EF\u590D\u7528\u540C\u4E00\u4EFD\u63A5\u53E3\u7C7B\u578B\u3002
+
+## \u6838\u5FC3\u529F\u80FD\u6E05\u5355
+
+- \u5171\u4EAB contract\u3001\u8F93\u5165\u8F93\u51FA\u6821\u9A8C\u4E0E\u670D\u52A1 procedures\u3002
+- \u6A21\u5757\u914D\u7F6E\u3001\u5065\u5EB7\u68C0\u67E5\u548C HTTP \u670D\u52A1\u3002
+- \u72EC\u7ACB\u955C\u50CF\u6784\u5EFA\u4E0E\u79BB\u7EBF\u4EA4\u4ED8\u3002
+
+## \u4F7F\u7528\u5165\u95E8
 
-## \u5DE5\u7A0B\u7ED3\u6784
+### \u5DE5\u7A0B\u7ED3\u6784
 
 - \`apps/${name}-contract\`\uFF1A\u5171\u4EAB API contract\u3001Zod schema \u4E0E\u7C7B\u578B
 - \`apps/${name}-service\`\uFF1A\u540E\u7AEF API service\uFF0C\u57FA\u4E8E \`@h-ai/serv\` \u66B4\u9732 HTTP \u5E94\u7528
 
-## \u5F00\u53D1
+### \u5F00\u53D1
 
 \`\`\`bash
 ${pm} install
@@ -1831,52 +2051,55 @@ ${pm} dev
 
 ${generateEnvironmentReadme()}
 
-## \u8D28\u91CF\u95E8\u7981
-
-\`\`\`bash
-${pm} typecheck
-${pm} lint
-${pm} build
-${pm} test
-${pm} test:e2e
-\`\`\`
-
-## \u6784\u5EFA\u4E0E\u90E8\u7F72
-
-\`\`\`bash
-# \u9ED8\u8BA4\u53EA\u7F16\u8BD1\u6E90\u7801\uFF1B\u4E0D\u9009\u62E9\u90E8\u7F72\u73AF\u5883
-${pm} build
-# \u6784\u5EFA\u5E76\u5BFC\u51FA API/Web \u955C\u50CF\uFF0Cauto \u4F18\u5148 Podman\u3001\u5176\u6B21 Docker
-${pm} build --target docker
-# \u9009\u62E9\u73AF\u5883\u3001\u4E2D\u95F4\u4EF6\u5E76\u4E0A\u4F20\u4E00\u4E2A Compose tar\uFF1B\u4E0D\u4F1A\u91CD\u65B0\u6784\u5EFA
-${pm} exec hai deploy apps/${name}-service --env test
-# \u65E0\u6CD5\u8FDE\u63A5\u670D\u52A1\u5668\u65F6\u53EA\u751F\u6210\u5305\uFF0C\u6309\u8F93\u51FA\u8BF4\u660E\u624B\u5DE5\u642C\u8FD0\u548C\u542F\u52A8
-${pm} exec hai deploy apps/${name}-service --env prod --bundle-only
-\`\`\`
 
-\u955C\u50CF\u6784\u5EFA\u914D\u7F6E\u89C1 \`hai.build.json\`\u3002\u6784\u5EFA\u4EA7\u7269\u4FDD\u5B58\u5728 \`.hai/build/docker/<buildId>\`\uFF0C\u53EF\u7528 \`--artifact-dir\` \u9009\u62E9\u540C\u4E00\u4EFD\u4EA7\u7269\u90E8\u7F72\u5230 test/prod\u3002\u90E8\u7F72\u5305\u542B\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u80FD\u63D0\u4EA4 Git\u3002\u73AF\u5883\u5DF2\u914D\u7F6E\u5B8C\u5907\u53EF\u52A0 \`--skip-middleware\`\u3002\u670D\u52A1\u8FD0\u884C\u6570\u636E\u7531 volume \u6301\u4E45\u5316\uFF0C\u955C\u50CF\u4E0D\u6253\u5305\u672C\u673A data\u3002API/Web \u8054\u5408\u90E8\u7F72\u516C\u5F00 Web \u5165\u53E3\u5E76\u4EE3\u7406\u540C\u6E90 API\uFF1B\u6CA1\u6709 Web \u4EA7\u7269\u65F6\u53EA\u90E8\u7F72\u670D\u52A1\u3002
+${generateBuildDeploymentReadme(pm, `apps/${name}-service`)}
 
-## \u6269\u5C55\u5EFA\u8BAE
+### \u6269\u5C55\u5EFA\u8BAE
 
 - \u5728 \`${name}-contract\` \u4E2D\u7EF4\u62A4\u5E94\u7528\u7EA7 contract\uFF0C\u524D\u540E\u7AEF\u5171\u7528\u540C\u4E00\u4EFD\u7C7B\u578B\u4E0E\u8DEF\u5F84\u5B9A\u4E49\u3002
 - \u5728 \`${name}-service\` \u4E2D\u6269\u5C55 procedures\u3001\u6A21\u5757\u521D\u59CB\u5316\u4E0E\u914D\u7F6E\u3002
 - \u9700\u8981 IAM / storage / ai \u65F6\uFF0C\u4F18\u5148\u590D\u7528 \`@h-ai/api-contract\` \u4E0E \`@h-ai/serv/features/*\`\u3002
 
-${generateAiDevelopmentReadme()}## \u6587\u6863
+${generateAiDevelopmentReadme()}### \u6587\u6863
 
 - [hai Agent Framework](https://github.com/hai-series/hai-framework)
 - [@h-ai/serv](./.agents/skills/hai-serv/SKILL.md)
 - [@h-ai/api-contract](./.agents/skills/hai-api-contract/SKILL.md)
 - [@h-ai/api-client](./.agents/skills/hai-api-client/SKILL.md)
+
+## \u5F00\u53D1\u6D4B\u8BD5
+
+\`\`\`bash
+${pm} typecheck
+${pm} lint
+${pm} build
+${pm} test
+${pm} test:e2e
+\`\`\`
+
+## \u8BB8\u53EF\u8BC1
+
+Apache-2.0
 `;
 }
 function generateFullstackReadme(name, pm, frontends) {
   const enabledFrontends = frontends.map((target) => FRONTEND_TARGETS[target].name).join(" / ");
   return `# ${name}
 
-\u57FA\u4E8E hai Agent Framework \u6784\u5EFA\u7684\u524D\u540E\u7AEF\u5206\u79BB\u591A\u5305\u5DE5\u7A0B\u3002
+## \u7B80\u4ECB
+
+\u524D\u540E\u7AEF\u5206\u79BB\u5DE5\u7A0B\uFF0CAPI \u4E0E Web\u3001\u79FB\u52A8\u7AEF\u3001\u684C\u9762\u7AEF\u5171\u4EAB\u63A5\u53E3\u7C7B\u578B\u548C\u7BA1\u7406\u754C\u9762\uFF0C\u53EF\u6309\u5B9E\u9645\u4E1A\u52A1\u8C03\u6574\u3002
+
+## \u6838\u5FC3\u529F\u80FD\u6E05\u5355
+
+- API \u670D\u52A1\u3001\u5171\u4EAB\u754C\u9762\u4E0E\u6309\u9700\u751F\u6210\u7684\u5BA2\u6237\u7AEF\u3002
+- \u7528\u6237\u7BA1\u7406\u3001\u89D2\u8272\u3001\u5BA1\u8BA1\u548C\u4E2A\u4EBA\u8BBE\u7F6E\u793A\u4F8B\u3002
+- \u767B\u5F55\u3001\u4E3B\u9898\u3001\u8BED\u8A00\u3001\u65B0\u624B\u5F15\u5BFC\u548C\u5E2E\u52A9\u4E2D\u5FC3\u3002
+- API/Web \u72EC\u7ACB Dockerfile \u4E0E\u955C\u50CF\u5F52\u6863\u3002
+
+## \u4F7F\u7528\u5165\u95E8
 
-## \u5DE5\u7A0B\u7ED3\u6784
+### \u5DE5\u7A0B\u7ED3\u6784
 
 - \`packages/${name}-contract\`\uFF1A\u524D\u540E\u7AEF\u5171\u4EAB API \u5951\u7EA6\u3001Zod Schema \u4E0E\u7C7B\u578B
 - \`packages/${name}-serv\`\uFF1A\u540E\u7AEF API Service\uFF08\u901A\u8FC7 \`@h-ai/serv\` \u66B4\u9732\u6700\u5C0F HTTP App \u62BD\u8C61\uFF0C\u4E0D\u76F4\u63A5\u66B4\u9732 Hono\uFF09
@@ -1888,11 +2111,11 @@ function generateFullstackReadme(name, pm, frontends) {
 
 \u5DF2\u542F\u7528\u524D\u7AEF\uFF1A${enabledFrontends || "Web / App / Desktop"}
 
-## \u9875\u9762\u5E03\u5C40\u4E0E\u8DEF\u7531
+### \u9875\u9762\u5E03\u5C40\u4E0E\u8DEF\u7531
 
 Web/App/Desktop \u5171\u4EAB AppShell \u7684 header/footer\u3002\u65B0\u589E\u9875\u9762\u653E shared/src/lib/pages/**/*.svelte\uFF0C\u7531 HashRouter \u81EA\u52A8\u53D1\u73B0\u5E76\u6309\u9700\u52A0\u8F7D\uFF1B\u83DC\u5355\u53EA\u7EF4\u62A4\u5165\u53E3\u3002\u5730\u5740\u4F7F\u7528 #/\u9875\u9762\u8DEF\u5F84\uFF0C\u652F\u6301\u5237\u65B0\u3001\u67E5\u8BE2\u4E32\u4E0E\u6D4F\u89C8\u5668\u524D\u8FDB\u540E\u9000\uFF1BAPI \u6743\u9650\u4ECD\u7531\u670D\u52A1\u7AEF\u6821\u9A8C\u3002
 
-## \u9ED8\u8BA4\u7BA1\u7406\u529F\u80FD
+### \u9ED8\u8BA4\u7BA1\u7406\u529F\u80FD
 
 \u4EE5\u4E0B\u63CF\u8FF0\u53EF\u8FD0\u884C\u793A\u4F8B\u7684\u521D\u59CB\u4E1A\u52A1\uFF0C\u53EF\u6309\u5B9E\u9645\u9700\u6C42\u8C03\u6574\u6216\u79FB\u9664\uFF0C\u5E76\u540C\u6B65\u4EE3\u7801\u3001\u6570\u636E\u3001\u9274\u6743\u3001\u754C\u9762\u3001\u6D4B\u8BD5\u548C\u6587\u6863\u3002
 
@@ -1902,11 +2125,13 @@ CLI \u5DF2\u5728\u6839\u76EE\u5F55\u751F\u6210 \`.env.local\`\uFF0C\u5176\u4E2D
 
 \u672C\u5730\u5F00\u53D1\u9ED8\u8BA4 \`PUBLIC_API_BASE=http://127.0.0.1:3000\`\uFF0CVite \u4F7F\u7528\u540C\u6E90\u4EE3\u7406\uFF1B\u90E8\u7F72\u65F6\u6539\u4E3A\u5B9E\u9645\u516C\u7F51 API Origin\uFF0CAndroid \u6A21\u62DF\u5668\u8BBF\u95EE\u5BBF\u4E3B\u673A\u65F6\u4F7F\u7528 \`http://10.0.2.2:3000\`\u3002\u4E0D\u8981\u5C06\u5BC6\u94A5\u653E\u5165\u4EFB\u4F55 \`PUBLIC_\` \u6216 \`VITE_\` \u53D8\u91CF\u3002
 
+\u670D\u52A1\u7AEF\u7248\u672C\u5316\u4F20\u8F93\u5BC6\u94A5\u73AF\u5728\u521B\u5EFA\u65F6\u4E00\u6B21\u6027\u5199\u5165\u88AB\u5FFD\u7565\u7684 \`.env.local\`\uFF0C\u53D8\u91CF\u4E3A \`HAI_CRYPTO_TRANSPORT_SERVERKEYRING\`\uFF1B\u8FD0\u884C\u65F6\u4E0D\u751F\u6210\u5BC6\u94A5\u3002\u90E8\u7F72\u7531 Secret Manager \u5411\u6240\u6709\u8282\u70B9\u5206\u53D1\u540C\u4E00\u53D7\u7BA1 ring\uFF0C\u914D\u5408\u5171\u4EAB registry\u3002\u79C1\u94A5\u4E0D\u8FDB\u5165\u516C\u5F00\u914D\u7F6E\u3001PUBLIC_/VITE_ \u6216\u65E5\u5FD7\u3002
+
 \u6240\u6709\u4E1A\u52A1 JSON \u8BF7\u6C42\u548C\u54CD\u5E94\u9ED8\u8BA4\u901A\u8FC7 \`@h-ai/crypto\` transport \u53CC\u5411\u52A0\u5BC6\uFF08\u542B\u767B\u5F55\u3001\u5237\u65B0\u3001\u5934\u50CF\u4E0A\u4F20\uFF09\uFF1B\u524D\u7AEF\u7EDF\u4E00\u4F7F\u7528\u5171\u4EAB typed API client\u3002Web \u8BBF\u95EE\u4EE4\u724C\u4EC5\u5B58\u5185\u5B58\u3001\u5237\u65B0\u4EE4\u724C\u7531 HttpOnly Cookie \u4FDD\u5B58\uFF1B\u53D7\u4FE1\u539F\u751F\u7AEF\u4F7F\u7528\u5E73\u53F0\u5B89\u5168\u5B58\u50A8\u6216\u5185\u5B58\u3002\u5934\u50CF\u4E3A\u968F\u673A\u8DEF\u5F84\u53EA\u8BFB\u56FE\u7247\u8D44\u6E90\uFF0C\u652F\u6301 PNG/JPEG/WebP\uFF0C\u6700\u5927 512 KiB\u3002\u5065\u5EB7\u68C0\u67E5\u548C\u53EA\u8BFB\u5934\u50CF\u56FE\u7247\u53EF\u76F4\u63A5\u8BBF\u95EE\u3002
 
-\u5E94\u7528\u663E\u793A\u540D\u79F0\u3001\u7248\u672C\u3001\u73AF\u5883\u3001\u9ED8\u8BA4\u8BED\u8A00\u548C\u65E5\u5FD7\u8BBE\u7F6E\u6765\u81EA\u540E\u7AEF \`config/_core.yml\`\uFF0C\u524D\u7AEF\u901A\u8FC7 \`app.info\` \u83B7\u53D6\u5B89\u5168\u5143\u4FE1\u606F\u3002\u9ED8\u8BA4 SQLite\u3001\u672C\u5730\u5B58\u50A8\u4E0E\u5185\u5B58\u7F13\u5B58\u9002\u5408\u5355\u5B9E\u4F8B\uFF0C\u7BA1\u7406\u5199\u5165\u4EC5\u652F\u6301\u5355\u5199\u5B9E\u4F8B\uFF1B\u591A\u5B9E\u4F8B\u8BFB\u53D6\u53EF\u4F7F\u7528\u5171\u4EAB\u6570\u636E\u5E93\u3001Redis cache \u548C S3 \u5B58\u50A8\uFF0C\u4F46\u7BA1\u7406\u5199\u8BF7\u6C42\u987B\u7EDF\u4E00\u8DEF\u7531\u5230\u540C\u4E00\u5199\u5B9E\u4F8B\u3002\u53E6\u9700\u4F1A\u8BDD\u7C98\u6027\u8DEF\u7531\u4F7F\u8BF7\u6C42\u547D\u4E2D\u540C\u4E00\u8FDB\u7A0B\u5185\u4F20\u8F93\u79C1\u94A5\uFF0C\u670D\u52A1\u91CD\u542F\u540E\u5BA2\u6237\u7AEF\u91CD\u65B0\u534F\u5546\u3002\u751F\u4EA7\u9700\u663E\u5F0F\u914D\u7F6E\u5141\u8BB8\u7684 CORS Origin\u3002\u4E1A\u52A1\u63D0\u4EA4\u540E\u7684\u5BA1\u8BA1\u5199\u5165\u91C7\u7528\u6700\u5927\u52AA\u529B\uFF0C\u5931\u8D25\u8BB0\u5F55\u7ED3\u6784\u5316\u9519\u8BEF\u65E5\u5FD7\uFF0C\u4FDD\u7559\u5DF2\u5B8C\u6210\u4E1A\u52A1\u7684\u539F\u59CB\u7ED3\u679C\u3002
+\u5E94\u7528\u663E\u793A\u540D\u79F0\u3001\u7248\u672C\u3001\u73AF\u5883\u3001\u9ED8\u8BA4\u8BED\u8A00\u548C\u65E5\u5FD7\u8BBE\u7F6E\u6765\u81EA\u540E\u7AEF \`config/_core.yml\`\uFF0C\u524D\u7AEF\u901A\u8FC7 \`app.info\` \u83B7\u53D6\u5B89\u5168\u5143\u4FE1\u606F\u3002\u5F00\u53D1\u9ED8\u8BA4 SQLite\u3001\u672C\u5730\u5B58\u50A8\u4E0E\u5185\u5B58\u7F13\u5B58\uFF1B\u751F\u4EA7\u542F\u52A8\u62D2\u7EDD\u8FD9\u4E9B\u672C\u5730 Provider\uFF0C\u5FC5\u987B\u5C06\u6240\u6709\u8282\u70B9\u8FDE\u63A5\u5230\u540C\u4E00\u5171\u4EAB\u6570\u636E\u5E93\u3001Redis \u4E0E S3\u3002\u4F20\u8F93\u5FC5\u987B\u5728\u6240\u6709\u8282\u70B9\u6CE8\u5165\u76F8\u540C\u53D7\u7BA1\u7248\u672C\u5316\u5BC6\u94A5\u73AF\u4E0E\u5171\u4EAB registry\uFF0C\u65E0\u9700\u4F1A\u8BDD\u7C98\u6027\uFF1B\u91CD\u542F\u8BFB\u53D6\u539F ring\uFF0C\u8F6E\u6362\u5148\u5206\u53D1\u65B0\u65E7\u7248\u672C\u518D\u5207 activeKeyId\u3002\u751F\u4EA7\u9700\u663E\u5F0F\u914D\u7F6E\u5141\u8BB8\u7684 CORS Origin\u3002\u4E1A\u52A1\u63D0\u4EA4\u540E\u7684\u5BA1\u8BA1\u5199\u5165\u91C7\u7528\u6700\u5927\u52AA\u529B\uFF0C\u5931\u8D25\u8BB0\u5F55\u7ED3\u6784\u5316\u9519\u8BEF\u65E5\u5FD7\uFF0C\u4FDD\u7559\u5DF2\u5B8C\u6210\u4E1A\u52A1\u7684\u539F\u59CB\u7ED3\u679C\u3002
 
-## \u914D\u7F6E\u6269\u5C55
+### \u914D\u7F6E\u6269\u5C55
 
 \u670D\u52A1\u7AEF \`packages/${name}-serv/config/\` \u59CB\u7EC8\u4FDD\u7559 core\u3001serv\u3001db\u3001cache\u3001iam\u3001storage\u3001audit\u3001reach\u3001ai\u3001vecdb\u3001payment\u3001scheduler\u3001deploy \u5171 13 \u4EFD YAML\u3002\u5DF2\u7528\u6A21\u5757\u4FDD\u7559\u5DE5\u4F5C\u9ED8\u8BA4\u503C\uFF0C\u672A\u542F\u7528\u6A21\u5757\u6574\u4EFD\u6CE8\u91CA\uFF0C\u53EF\u9009\u5B57\u6BB5\u548C\u66FF\u4EE3 Provider \u6309\u5757\u6CE8\u91CA\uFF1B\u6839 \`.env.example\` \u4E5F\u4FDD\u7559\u672A\u542F\u7528\u6A21\u5757\u7684\u51ED\u636E\u793A\u4F8B\u3002Reach \u9ED8\u8BA4\u4E3A\u5F00\u53D1\u63A7\u5236\u53F0\u901A\u77E5\uFF0C\u751F\u4EA7\u6309 \`_reach.yml\` \u6CE8\u91CA\u66FF\u6362\u4E3A SMTP\u3001\u77ED\u4FE1\u6216 API Provider\uFF0C\u5E76\u4FDD\u6301\u540D\u79F0\u552F\u4E00\u3002
 
@@ -1918,7 +2143,7 @@ CLI \u5DF2\u5728\u6839\u76EE\u5F55\u751F\u6210 \`.env.local\`\uFF0C\u5176\u4E2D
 
 ${generateEnvironmentReadme()}
 
-## \u5F00\u53D1\u4E0E\u6784\u5EFA
+### \u5F00\u53D1\u4E0E\u6784\u5EFA
 
 \`\`\`bash
 ${pm} install
@@ -1932,22 +2157,9 @@ ${frontends.includes("desktop") ? `${pm} build --target desktop --platform windo
 
 Tauri \u9700\u8981\u76EE\u6807\u7CFB\u7EDF\u7684 Rust target\u3001SDK \u548C\u6253\u5305\u5DE5\u5177\u3002\u6D4B\u8BD5\u4EA7\u751F\u7684\u4E34\u65F6\u5DE5\u7A0B\u3001\u622A\u56FE\u3001\u62A5\u544A\u3001\u5BB9\u5668\u3001\u955C\u50CF\u4E0E\u8FDB\u7A0B\u5E94\u5728 finally/teardown \u4E2D\u81EA\u52A8\u6E05\u7406\uFF0C\u5931\u8D25\u4E5F\u6267\u884C\u3002
 
-## \u6784\u5EFA\u4E0E\u90E8\u7F72
-
-\`\`\`bash
-# \u9ED8\u8BA4\u53EA\u7F16\u8BD1\u6E90\u7801\uFF1B\u4E0D\u9009\u62E9\u90E8\u7F72\u73AF\u5883
-${pm} build
-# \u6784\u5EFA\u5E76\u5BFC\u51FA API/Web \u955C\u50CF\uFF0Cauto \u4F18\u5148 Podman\u3001\u5176\u6B21 Docker
-${pm} build --target docker
-# \u9009\u62E9\u73AF\u5883\u3001\u4E2D\u95F4\u4EF6\u5E76\u4E0A\u4F20\u4E00\u4E2A Compose tar\uFF1B\u4E0D\u4F1A\u91CD\u65B0\u6784\u5EFA
-${pm} exec hai deploy packages/${name}-serv --env test
-# \u65E0\u6CD5\u8FDE\u63A5\u670D\u52A1\u5668\u65F6\u53EA\u751F\u6210\u5305\uFF0C\u6309\u8F93\u51FA\u8BF4\u660E\u624B\u5DE5\u642C\u8FD0\u548C\u542F\u52A8
-${pm} exec hai deploy packages/${name}-serv --env prod --bundle-only
-\`\`\`
-
-\u955C\u50CF\u6784\u5EFA\u914D\u7F6E\u89C1 \`hai.build.json\`\u3002\u6784\u5EFA\u4EA7\u7269\u4FDD\u5B58\u5728 \`.hai/build/docker/<buildId>\`\uFF0C\u53EF\u7528 \`--artifact-dir\` \u9009\u62E9\u540C\u4E00\u4EFD\u4EA7\u7269\u90E8\u7F72\u5230 test/prod\u3002\u90E8\u7F72\u5305\u542B\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u80FD\u63D0\u4EA4 Git\u3002\u73AF\u5883\u5DF2\u914D\u7F6E\u5B8C\u5907\u53EF\u52A0 \`--skip-middleware\`\u3002\u670D\u52A1\u8FD0\u884C\u6570\u636E\u7531 volume \u6301\u4E45\u5316\uFF0C\u955C\u50CF\u4E0D\u6253\u5305\u672C\u673A data\u3002API/Web \u8054\u5408\u90E8\u7F72\u516C\u5F00 Web \u5165\u53E3\u5E76\u4EE3\u7406\u540C\u6E90 API\uFF1B\u6CA1\u6709 Web \u4EA7\u7269\u65F6\u53EA\u90E8\u7F72\u670D\u52A1\u3002
+${generateBuildDeploymentReadme(pm, `packages/${name}-serv`)}
 
-## i18n \u4E0E shared \u534F\u540C
+### i18n \u4E0E shared \u534F\u540C
 
 - shared\uFF1A\`packages/${name}-shared/project.inlang\` + \`messages/\`\uFF0C\u53EA\u653E\u8DE8\u7AEF\u5171\u4EAB\u7EC4\u4EF6\u6587\u6848\u3002
 - web/app/desktop\uFF1A\u6BCF\u4E2A\u5E94\u7528\u90FD\u6709\u81EA\u5DF1\u7684 \`project.inlang\` + \`messages/\`\uFF0C\u7528\u4E8E\u672C\u7AEF\u9875\u9762\u4E0E\u4EA7\u54C1\u6587\u6848\u3002
@@ -1955,13 +2167,20 @@ ${pm} exec hai deploy packages/${name}-serv --env prod --bundle-only
 - \u65B0\u589E locale \u65F6\uFF0Cshared \u4E0E\u6240\u6709\u542F\u7528\u524D\u7AEF\u7684 \`locales\` \u5FC5\u987B\u540C\u6B65\uFF1B\u8BED\u8A00\u5207\u6362\u5668\u4F1A\u540C\u65F6\u66F4\u65B0 shared runtime \u4E0E\u5BBF\u4E3B\u5E94\u7528 runtime\u3002
 - \`${pm} i18n:compile\` \u4F1A\u7EDF\u4E00\u7F16\u8BD1 shared \u4E0E\u6BCF\u4E2A\u542F\u7528\u524D\u7AEF\u7684 Paraglide \u8F93\u51FA\uFF1B\u5404\u524D\u7AEF\u4E5F\u53EF\u5355\u72EC\u8FD0\u884C \`${pm} --filter ${name}-web paraglide:compile\` \u7B49\u547D\u4EE4\u3002
 
-## \u81EA\u5B9A\u4E49\u5EFA\u8BAE
+### \u81EA\u5B9A\u4E49\u5EFA\u8BAE
 
 - \u6539\u5168\u5C40 Shell/\u4E3B\u9898/\u8BED\u8A00\u5207\u6362\uFF1A\u7F16\u8F91 \`packages/${name}-shared\`\u3002
-- \u6539\u67D0\u4E2A\u524D\u7AEF\u9875\u9762\u548C\u6587\u6848\uFF1A\u7F16\u8F91\u5BF9\u5E94 \`apps/${name}-*/src/routes\` \u4E0E \`apps/${name}-*/messages\`\u3002
+- \u6539\u67D0\u4E2A\u524D\u7AEF\u9875\u9762\u548C\u6587\u6848\uFF1A\u7F16\u8F91\u5171\u4EAB \`packages/${name}-shared/src/lib/pages\`\u3001\u672C\u7AEF\u5165\u53E3\u4E0E \`apps/${name}-*/messages\`\u3002
 - \u6539\u4E3B\u9898\u5217\u8868\uFF1A\u8C03\u6574\u811A\u624B\u67B6\u914D\u7F6E\u4E2D\u7684 \`fullstack.theme.themes\`\uFF0C\u6216\u76F4\u63A5\u7F16\u8F91\u5404\u7AEF \`src/app.css\` \u7684 daisyUI \`themes\`\u3002
 
-## \u8D28\u91CF\u95E8\u7981
+
+${generateAiDevelopmentReadme()}### \u6587\u6863
+
+- [hai Agent Framework](https://github.com/hai-series/hai-framework)
+- [@h-ai/serv](./.agents/skills/hai-serv/SKILL.md)
+- [@h-ai/ui](./.agents/skills/hai-ui/SKILL.md)
+
+## \u5F00\u53D1\u6D4B\u8BD5
 
 \`\`\`bash
 ${pm} typecheck
@@ -1971,19 +2190,17 @@ ${pm} test
 ${pm} test:e2e
 \`\`\`
 
-${generateAiDevelopmentReadme()}## \u6587\u6863
+## \u8BB8\u53EF\u8BC1
 
-- [hai Agent Framework](https://github.com/hai-series/hai-framework)
-- [@h-ai/serv](./.agents/skills/hai-serv/SKILL.md)
-- [@h-ai/ui](./.agents/skills/hai-ui/SKILL.md)
+Apache-2.0
 `;
 }
 function printCompletionMessage(options) {
   writeCliMessage("");
-  writeCliMessage(chalk.green("\u2714 \u9879\u76EE\u521B\u5EFA\u6210\u529F\uFF01"));
+  writeCliMessage(chalk.green(cliM("cli_createSuccess")));
   writeCliMessage("");
   if (options.features.length > 0) {
-    writeCliMessage(chalk.bold("\u5DF2\u542F\u7528\u529F\u80FD:"));
+    writeCliMessage(chalk.bold(cliM("cli_createFeatures")));
     for (const featureId of options.features) {
       const feature = FEATURES[featureId];
       if (feature) {
@@ -1992,7 +2209,7 @@ function printCompletionMessage(options) {
     }
     writeCliMessage("");
   }
-  writeCliMessage("\u4E0B\u4E00\u6B65\uFF1A");
+  writeCliMessage(cliM("cli_nextSteps"));
   writeCliMessage(chalk.cyan(`  cd ${options.name}`));
   if (options.appType === "fullstack")
     writeCliMessage(chalk.cyan(cliM("cli_adminPasswordSaved")));
@@ -2033,25 +2250,61 @@ async function detectProject(cwd) {
 // src/commands/cli-add.ts
 var MODULE_MAP = {
   // iam 依赖 crypto（password hash）/ db（user 存储）/ cache（session 缓存）
-  "iam": { packages: ["@h-ai/iam"], deps: ["crypto", "db", "cache"], configKey: "iam", description: "\u8EAB\u4EFD\u4E0E\u8BBF\u95EE\u7BA1\u7406" },
+  "iam": { packages: ["@h-ai/iam"], deps: ["crypto", "db", "cache"], configKey: "iam", get description() {
+    return cliM("cli_featureIamName");
+  } },
   // 'db' 和 'reldb' 都映射到 @h-ai/reldb，兼容用户习惯（hai add db 和 hai add reldb 均可）
-  "db": { packages: ["@h-ai/reldb"], configKey: "db", description: "\u6570\u636E\u5E93" },
-  "reldb": { packages: ["@h-ai/reldb"], configKey: "db", description: "\u6570\u636E\u5E93" },
-  "cache": { packages: ["@h-ai/cache"], configKey: "cache", description: "\u7F13\u5B58" },
-  "ai": { packages: ["@h-ai/ai"], configKey: "ai", description: "AI \u96C6\u6210" },
-  "storage": { packages: ["@h-ai/storage"], configKey: "storage", description: "\u6587\u4EF6\u5B58\u50A8" },
-  "crypto": { packages: ["@h-ai/crypto"], description: "\u52A0\u5BC6\u6A21\u5757" },
-  "kit": { packages: ["@h-ai/kit"], description: "SvelteKit \u96C6\u6210\u5DE5\u5177" },
-  "ui": { packages: ["@h-ai/ui"], description: "UI \u7EC4\u4EF6\u5E93" },
-  "deploy": { packages: ["@h-ai/deploy"], configKey: "deploy", description: "\u81EA\u52A8\u5316\u90E8\u7F72" },
-  "vecdb": { packages: ["@h-ai/vecdb"], configKey: "vecdb", description: "\u5411\u91CF\u6570\u636E\u5E93" },
-  "datapipe": { packages: ["@h-ai/datapipe"], description: "\u6570\u636E\u5904\u7406\u7BA1\u9053" },
-  "reach": { packages: ["@h-ai/reach"], configKey: "reach", description: "\u6D88\u606F\u63A8\u9001" },
-  "scheduler": { packages: ["@h-ai/scheduler"], deps: ["db"], configKey: "scheduler", description: "\u4EFB\u52A1\u8C03\u5EA6" },
-  "audit": { packages: ["@h-ai/audit"], deps: ["db"], configKey: "audit", description: "\u5BA1\u8BA1\u65E5\u5FD7" },
-  "payment": { packages: ["@h-ai/payment"], configKey: "payment", description: "\u652F\u4ED8" },
-  "capacitor": { packages: ["@h-ai/capacitor"], description: "\u79FB\u52A8\u7AEF\u80FD\u529B" },
-  "api-client": { packages: ["@h-ai/api-client"], description: "HTTP \u5BA2\u6237\u7AEF" }
+  "db": { packages: ["@h-ai/reldb"], configKey: "db", get description() {
+    return cliM("cli_featureDbName");
+  } },
+  "reldb": { packages: ["@h-ai/reldb"], configKey: "db", get description() {
+    return cliM("cli_featureDbName");
+  } },
+  "cache": { packages: ["@h-ai/cache"], configKey: "cache", get description() {
+    return cliM("cli_featureCacheName");
+  } },
+  "ai": { packages: ["@h-ai/ai"], deps: ["db", "vecdb"], configKey: "ai", get description() {
+    return cliM("cli_featureAiName");
+  } },
+  "storage": { packages: ["@h-ai/storage"], configKey: "storage", get description() {
+    return cliM("cli_featureStorageName");
+  } },
+  "crypto": { packages: ["@h-ai/crypto"], deps: ["db"], get description() {
+    return cliM("cli_featureCryptoName");
+  } },
+  "kit": { packages: ["@h-ai/kit"], get description() {
+    return cliM("cli_featureKitName");
+  } },
+  "ui": { packages: ["@h-ai/ui"], get description() {
+    return cliM("cli_featureUiName");
+  } },
+  "deploy": { packages: ["@h-ai/deploy"], configKey: "deploy", get description() {
+    return cliM("cli_featureDeployName");
+  } },
+  "vecdb": { packages: ["@h-ai/vecdb"], configKey: "vecdb", get description() {
+    return cliM("cli_featureVecdbName");
+  } },
+  "datapipe": { packages: ["@h-ai/datapipe"], get description() {
+    return cliM("cli_featureDatapipeName");
+  } },
+  "reach": { packages: ["@h-ai/reach"], configKey: "reach", get description() {
+    return cliM("cli_featureReachName");
+  } },
+  "scheduler": { packages: ["@h-ai/scheduler"], deps: ["db"], configKey: "scheduler", get description() {
+    return cliM("cli_featureSchedulerName");
+  } },
+  "audit": { packages: ["@h-ai/audit"], deps: ["db"], configKey: "audit", get description() {
+    return cliM("cli_featureAuditName");
+  } },
+  "payment": { packages: ["@h-ai/payment"], configKey: "payment", get description() {
+    return cliM("cli_featurePaymentName");
+  } },
+  "capacitor": { packages: ["@h-ai/capacitor"], get description() {
+    return cliM("cli_featureCapacitorName");
+  } },
+  "api-client": { packages: ["@h-ai/api-client"], get description() {
+    return cliM("cli_featureApiClientName");
+  } }
 };
 async function addModule(options) {
   const spinner = ora();
@@ -2059,7 +2312,7 @@ async function addModule(options) {
   try {
     const project = await detectProject(cwd);
     if (!project) {
-      core.logger.error(chalk.red("\u672A\u68C0\u6D4B\u5230\u9879\u76EE\uFF08\u627E\u4E0D\u5230 package.json\uFF09"));
+      writeCliError(chalk.red(cliM("cli_projectNotFound")));
       return;
     }
     let moduleName = options.module;
@@ -2070,13 +2323,14 @@ async function addModule(options) {
         value: key
       }));
       if (choices.length === 0) {
-        core.logger.info(chalk.green("\u6240\u6709\u6A21\u5757\u5DF2\u5B89\u88C5\uFF01"));
+        writeCliMessage(chalk.green(cliM("cli_addAllInstalled")));
         return;
       }
       const { selected } = await prompts({
         type: "select",
+        hint: cliM("cli_selectHint"),
         name: "selected",
-        message: "\u9009\u62E9\u8981\u6DFB\u52A0\u7684\u6A21\u5757:",
+        message: cliM("cli_addModulePrompt"),
         choices
       });
       if (!selected)
@@ -2085,11 +2339,11 @@ async function addModule(options) {
     }
     const moduleDef = MODULE_MAP[moduleName];
     if (!moduleDef) {
-      core.logger.error(chalk.red(`\u672A\u77E5\u6A21\u5757: ${moduleName}`));
-      core.logger.info(`\u53EF\u7528\u6A21\u5757: ${Object.keys(MODULE_MAP).join(", ")}`);
+      writeCliError(chalk.red(cliM("cli_addUnknownModule", { params: { module: moduleName } })));
+      writeCliMessage(cliM("cli_addAvailableModules", { params: { modules: Object.keys(MODULE_MAP).join(", ") } }));
       return;
     }
-    const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-TSYEQTCY.js');
+    const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-US5CCAJ4.js');
     if (moduleDef.packages.every((p) => project.haiPackages.includes(p))) {
       const generatedFiles2 = await generateProjectAiSupport(
         cwd,
@@ -2100,12 +2354,12 @@ async function addModule(options) {
         }
       );
       if (generatedFiles2.length > 0) {
-        core.logger.info(chalk.yellow(`\u6A21\u5757 ${moduleName} \u5DF2\u5B89\u88C5\uFF0C\u5DF2\u8865\u5168 AI \u652F\u6301\u6587\u4EF6`));
+        writeCliMessage(chalk.yellow(cliM("cli_addSupportCompleted", { params: { module: moduleName } })));
         for (const generatedFile of generatedFiles2) {
-          core.logger.info(chalk.gray(`  + ${generatedFile} (AI support)`));
+          writeCliMessage(chalk.gray(cliM("cli_addSupportFile", { params: { file: generatedFile } })));
         }
       } else {
-        core.logger.info(chalk.yellow(`\u6A21\u5757 ${moduleName} \u5DF2\u5B89\u88C5`));
+        writeCliMessage(chalk.yellow(cliM("cli_addAlreadyInstalled", { params: { module: moduleName } })));
       }
       return;
     }
@@ -2120,7 +2374,7 @@ async function addModule(options) {
         }
       }
     }
-    spinner.start("\u66F4\u65B0 package.json...");
+    spinner.start(cliM("cli_addUpdateManifest"));
     const pkgPath = path2.join(cwd, "package.json");
     const pkg = await fse.readJson(pkgPath);
     if (!pkg.dependencies)
@@ -2128,7 +2382,10 @@ async function addModule(options) {
     const existingHaiSpecifier = Object.entries(pkg.dependencies).find(([pkgName]) => pkgName.startsWith("@h-ai/"))?.[1];
     const depVersion = existingHaiSpecifier === "catalog:" ? "catalog:" : getCliVersion();
     for (const pkgName of allPackages) {
-      if (!pkg.dependencies[pkgName]) {
+      if (pkgName === "@h-ai/deploy") {
+        pkg.devDependencies ??= {};
+        pkg.devDependencies[pkgName] ??= depVersion;
+      } else if (!pkg.dependencies[pkgName]) {
         pkg.dependencies[pkgName] = depVersion;
       }
     }
@@ -2138,12 +2395,12 @@ async function addModule(options) {
       const configDir = path2.join(cwd, "config");
       const configPath = path2.join(configDir, `_${moduleDef.configKey}.yml`);
       if (!await fileExists(configPath)) {
-        spinner.start(`\u751F\u6210\u914D\u7F6E\u6587\u4EF6 config/_${moduleDef.configKey}.yml...`);
+        spinner.start(cliM("cli_addConfig", { params: { config: moduleDef.configKey } }));
         const content = generateConfigFile(moduleDef.configKey);
         await writeFile(configPath, content);
         spinner.succeed();
       } else {
-        core.logger.info(chalk.gray(`\u914D\u7F6E\u6587\u4EF6\u5DF2\u5B58\u5728: config/_${moduleDef.configKey}.yml`));
+        writeCliMessage(chalk.gray(cliM("cli_addConfigExists", { params: { config: moduleDef.configKey } })));
       }
     }
     if (moduleDef.deps) {
@@ -2154,7 +2411,7 @@ async function addModule(options) {
           if (!await fileExists(depConfigPath)) {
             const content = generateConfigFile(depDef.configKey);
             await writeFile(depConfigPath, content);
-            core.logger.info(chalk.gray(`  + config/_${depDef.configKey}.yml (\u4F9D\u8D56)`));
+            writeCliMessage(chalk.gray(cliM("cli_addDependencyConfig", { params: { config: depDef.configKey } })));
           }
         }
       }
@@ -2170,28 +2427,36 @@ async function addModule(options) {
     );
     if (generatedFiles.length > 0) {
       for (const generatedFile of generatedFiles) {
-        core.logger.info(chalk.gray(`  + ${generatedFile} (AI support)`));
+        writeCliMessage(chalk.gray(cliM("cli_addSupportFile", { params: { file: generatedFile } })));
       }
     }
+    const productionPath = path2.join(cwd, ".env.prod");
+    const previousProduction = await fileExists(productionPath) ? await fse.readFile(productionPath, "utf8") : "";
+    const configured = new Set([...previousProduction.matchAll(/^([A-Z][A-Z0-9_]*)=/gm)].map((match) => match[1]));
+    const previousValues = parseEnv(previousProduction);
+    const production = generateProductionEnvironment([moduleName, ...moduleDef.deps ?? []], previousValues.HAI_DB_TYPE === "mysql" ? { db: { type: "mysql", database: previousValues.HAI_DB_DATABASE } } : void 0).split("\n").filter((line) => !/^[A-Z][A-Z0-9_]*=/.test(line) || !configured.has(line.split("=")[0]));
+    await writeFile(productionPath, `${previousProduction.trimEnd()}
+
+${production.join("\n")}`);
     const doInstall = options.install !== false;
     if (doInstall) {
-      spinner.start("\u5B89\u88C5\u4F9D\u8D56...");
+      spinner.start(cliM("cli_addInstall"));
       const { execSync: execSync2 } = await import('child_process');
       const pm = await detectPackageManager(cwd);
       execSync2(`${pm} install`, { cwd, stdio: "ignore" });
       spinner.succeed();
     }
-    core.logger.info("");
-    core.logger.info(chalk.green(`\u2714 \u6A21\u5757 ${moduleName} \u6DFB\u52A0\u6210\u529F\uFF01`));
-    core.logger.info("");
-    core.logger.info("\u5DF2\u6DFB\u52A0\u7684\u5305:");
+    writeCliMessage("");
+    writeCliMessage(chalk.green(cliM("cli_addSuccess", { params: { module: moduleName } })));
+    writeCliMessage("");
+    writeCliMessage(cliM("cli_addPackages"));
     for (const pkg2 of allPackages) {
-      core.logger.info(chalk.cyan(`  ${pkg2}`));
+      writeCliMessage(chalk.cyan(`  ${pkg2}`));
     }
-    core.logger.info("");
+    writeCliMessage("");
   } catch (error) {
     spinner.fail();
-    core.logger.error(chalk.red("\u6DFB\u52A0\u6A21\u5757\u5931\u8D25:"), { error });
+    writeCliError(chalk.red(cliM("cli_addFailed")), { error });
     throw error;
   }
 }
@@ -2216,8 +2481,8 @@ async function pnpm(args, cwd) {
       const executable = join(directory, "pnpm.exe");
       if (existsSync(executable))
         return run(executable, args, cwd);
-      for (const relative of ["node_modules/pnpm/bin/pnpm.cjs", "pnpm.cjs"]) {
-        const candidate = join(directory, relative);
+      for (const relative2 of ["node_modules/pnpm/bin/pnpm.cjs", "pnpm.cjs"]) {
+        const candidate = join(directory, relative2);
         if (existsSync(candidate))
           return run(process4.execPath, [candidate, ...args], cwd);
       }
@@ -2231,7 +2496,7 @@ async function buildCommand(options) {
   const target = options.target ?? "compile";
   if (!["compile", "docker", "desktop"].includes(target))
     throw new Error(cliM("cli_build_target_invalid"));
-  if (target !== "docker" && (options.runtime !== void 0 || options.network !== void 0 || options.sqlitePrebuildMirror !== void 0 || options.httpProxy === false) || target !== "desktop" && (options.platform !== void 0 || options.arch !== void 0)) {
+  if (target !== "docker" && (options.images !== void 0 || options.runtime !== void 0 || options.network !== void 0 || options.sqlitePrebuildMirror !== void 0 || options.httpProxy === false) || target !== "desktop" && (options.platform !== void 0 || options.arch !== void 0)) {
     throw new Error(cliM("cli_build_options_invalid"));
   }
   if (target === "compile") {
@@ -2256,12 +2521,20 @@ async function buildCommand(options) {
     const bundles = platform === "windows" ? "nsis" : platform === "macos" ? "app,dmg" : "deb,appimage";
     for (const directory of config.desktop)
       await pnpm(["exec", "tauri", "build", "--target", rustTarget, "--bundles", bundles, "--config", JSON.stringify({ version: appVersion })], resolve(cwd, directory));
-    core.logger.info(cliM("cli_build_native_ready", { params: { target: rustTarget } }));
+    writeCliMessage(cliM("cli_build_native_ready", { params: { target: rustTarget } }));
     return;
   }
-  if (!Array.isArray(config.images) || !config.images.length || config.images.filter((image) => image.name === "app").length !== 1 || config.images.length > 2 || new Set(config.images.map((image) => image.name)).size !== config.images.length || config.images.some((image) => !["app", "web"].includes(image.name) || image.containerPort !== void 0 && (!Number.isInteger(image.containerPort) || image.containerPort < 1 || image.containerPort > 65535))) {
+  if (!Array.isArray(config.images) || !config.images.length || config.images.some((image) => !image || typeof image !== "object") || config.images.filter((image) => image.name === "app").length !== 1 || config.images.length > 2 || new Set(config.images.map((image) => image.name)).size !== config.images.length || config.images.some((image) => !["app", "web"].includes(image.name) || typeof image.dockerfile !== "string" || !image.dockerfile || "target" in image || image.containerPort !== void 0 && (!Number.isInteger(image.containerPort) || image.containerPort < 1 || image.containerPort > 65535))) {
     throw new Error(cliM("cli_build_images_missing"));
   }
+  const selected = options.images?.split(",").map((name) => name.trim());
+  if (selected && (selected.some((name) => !config.images.some((image) => image.name === name)) || new Set(selected).size !== selected.length))
+    throw new Error(cliM("cli_build_selection_invalid"));
+  const images = config.images.filter((image) => !selected || selected.includes(image.name));
+  for (const image of images) {
+    if (!existsSync(resolve(cwd, image.dockerfile)))
+      throw new Error(cliM("cli_build_dockerfile_missing", { params: { path: image.dockerfile } }));
+  }
   const candidates = options.runtime && options.runtime !== "auto" ? [options.runtime] : ["podman", "docker"];
   if (candidates.some((runtime2) => !["podman", "docker"].includes(runtime2)))
     throw new Error(cliM("cli_build_runtime_missing"));
@@ -2282,21 +2555,27 @@ async function buildCommand(options) {
       throw new Error(cliM("cli_build_mirror_invalid"));
   }
   const buildId = `${appVersion}-${Date.now()}-${randomBytes(3).toString("hex")}`;
-  const artifact = { version: 2, appVersion, buildId, images: [] };
+  const artifact = { version: 3, appVersion, buildId, partial: images.length !== config.images.length, hasWeb: config.images.some((image) => image.name === "web"), images: [] };
+  for (const image of config.images) {
+    if (image.containerPort !== void 0)
+      artifact[image.name === "app" ? "appContainerPort" : "webContainerPort"] = image.containerPort;
+  }
   const parent = join(cwd, ".hai/build/docker");
   mkdirSync(parent, { recursive: true });
   const staging = mkdtempSync(join(parent, ".building-"));
   const built = [];
   try {
-    for (const image of config.images) {
+    for (const context of new Set(images.map((image) => resolve(cwd, image.context ?? "."))))
+      prepareDependencyInputs(context);
+    for (const image of images) {
       if (!["app", "web"].includes(image.name))
         throw new Error(cliM("cli_build_images_missing"));
       const context = resolve(cwd, image.context ?? ".");
       const imageRef = `localhost/hai-${basenameSafe(cwd)}-${image.name}:${buildId.toLowerCase().replaceAll("+", "_")}`;
-      const args = ["build", "-f", resolve(context, image.dockerfile ?? "Dockerfile"), "-t", imageRef];
+      const args = ["build", "-f", resolve(cwd, image.dockerfile), "-t", imageRef];
       if (options.network !== void 0)
         args.push("--network", options.network);
-      const ignore = `${resolve(context, image.dockerfile ?? "Dockerfile")}.dockerignore`;
+      const ignore = `${resolve(cwd, image.dockerfile)}.dockerignore`;
       if (runtime === "podman" && existsSync(ignore))
         args.push("--ignorefile", ignore);
       if (runtime === "podman") {
@@ -2308,8 +2587,6 @@ async function buildCommand(options) {
           }
         }
       }
-      if (image.target)
-        args.push("--target", image.target);
       if (options.sqlitePrebuildMirror)
         args.push("--build-arg", `SQLITE_PREBUILD_MIRROR=${options.sqlitePrebuildMirror}`);
       built.push(imageRef);
@@ -2328,7 +2605,7 @@ async function buildCommand(options) {
     writeFileSync(join(parent, `latest-${buildId}`), `${buildId}
 `);
     renameSync(join(parent, `latest-${buildId}`), join(parent, "latest"));
-    core.logger.info(cliM("cli_build_ready", { params: { path: output, runtime } }));
+    writeCliMessage(cliM("cli_build_ready", { params: { path: output, runtime } }));
   } catch (error) {
     for (const imageRef of built) {
       try {
@@ -2341,41 +2618,172 @@ async function buildCommand(options) {
     rmSync(staging, { recursive: true, force: true });
   }
 }
-function basenameSafe(directory) {
-  return directory.slice(dirname(directory).length + 1).toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^-+/, "") || "app";
-}
-function displayDeployValue(name, value) {
-  if (/PASSWORD|SECRET|TOKEN|APIKEY|PRIVATEKEY|ACCESSKEY|AUTHORIZATION/i.test(name.replace(/[^a-z0-9]/gi, "")) || /(?:^|_)PASS$/i.test(name) || value.includes("PRIVATE KEY"))
-    return cliM("cli_deploy_secret");
-  try {
-    const parsed2 = JSON.parse(value);
-    if (parsed2 && typeof parsed2 === "object") {
-      const sanitize = (object) => {
-        if (Array.isArray(object))
-          return object.map(sanitize);
-        if (object && typeof object === "object")
-          return Object.fromEntries(Object.entries(object).map(([key, item]) => [key, /PASSWORD|SECRET|TOKEN|APIKEY|PRIVATEKEY|ACCESSKEY|AUTHORIZATION/i.test(key.replace(/[^a-z0-9]/gi, "")) || /(?:^|_)PASS$/i.test(key) ? cliM("cli_deploy_secret") : typeof item === "string" ? displayDeployValue(key, item) : sanitize(item)]));
-        return object;
-      };
-      return JSON.stringify(sanitize(parsed2));
-    }
-  } catch {
-  }
-  try {
-    const url = new URL(value);
-    if (url.username || url.password) {
-      url.username = "***";
-      url.password = "***";
-    }
-    for (const key of url.searchParams.keys()) {
-      if (/password|secret|token|key|authorization/i.test(key))
-        url.searchParams.set(key, "***");
+function prepareDependencyInputs(cwd) {
+  const destination = join(cwd, "images", "dependencies");
+  mkdirSync(destination, { recursive: true });
+  const tracking = join(destination, ".managed.json");
+  const previous = existsSync(tracking) ? JSON.parse(readFileSync(tracking, "utf8")) : [];
+  const files = [];
+  const walk = (directory) => {
+    for (const entry of readdirSync(directory, { withFileTypes: true })) {
+      const source = join(directory, entry.name);
+      if (source === destination || ["node_modules", ".git", ".hai", ".turbo", ".svelte-kit", ".pnpm-store", ".cache", "dist", "build", "data", "tmp", "test-results", "playwright-report"].includes(entry.name))
+        continue;
+      if (entry.isDirectory()) {
+        walk(source);
+        continue;
+      }
+      if (!entry.isFile() || !(entry.name === "package.json" || entry.name === ".pnpmfile.cjs" || /\.(?:tgz|patch)$/.test(entry.name)))
+        continue;
+      const file = relative(cwd, source);
+      mkdirSync(dirname(join(destination, file)), { recursive: true });
+      const target = join(destination, file);
+      if (!existsSync(target) || !readFileSync(source).equals(readFileSync(target)))
+        copyFileSync(source, target);
+      files.push(file);
     }
-    return url.toString();
-  } catch {
-    return value;
+  };
+  walk(cwd);
+  for (const file of previous) {
+    const target = resolve(destination, file);
+    if (!files.includes(file) && !relative(destination, target).startsWith(".."))
+      rmSync(target, { force: true });
   }
+  const content = `${JSON.stringify(files)}
+`;
+  if (!existsSync(tracking) || readFileSync(tracking, "utf8") !== content)
+    writeFileSync(tracking, content);
+}
+function basenameSafe(directory) {
+  return directory.slice(dirname(directory).length + 1).toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^-+/, "") || "app";
 }
+
+// ../reldb/dist/chunk-SDS2ZT3V.js
+external_exports.enum(["sqlite", "postgresql", "mysql"]);
+var ReldbOperationLogConfigSchema = external_exports.object({
+  read: external_exports.boolean().default(false),
+  write: external_exports.boolean().default(false),
+  /** 安全数量摘要的最大字符数；0 表示省略摘要，永不记录 SQL 原文或参数值。 */
+  maxLength: external_exports.number().int().min(0).default(1e3),
+  level: external_exports.enum(["info", "debug", "trace"]).default("debug")
+});
+var OperationLogConfigFieldSchema = {
+  operationLog: ReldbOperationLogConfigSchema.optional()
+};
+var PoolConfigSchema = external_exports.object({
+  /** PostgreSQL 已建立连接的最小保留数（默认 1，不主动预建） */
+  min: external_exports.number().int().min(0).default(1),
+  /** 最大连接数（默认 10） */
+  max: external_exports.number().int().min(1).default(10),
+  /** PostgreSQL 空闲连接超时，毫秒（默认 30000；0 禁用） */
+  idleTimeout: external_exports.number().int().min(0).default(3e4),
+  /** 获取连接超时，毫秒（默认10000）；PostgreSQL >=0，0禁用；MySQL排队+建连总期限为1–2147483647 */
+  acquireTimeout: external_exports.number().int().min(0).default(1e4)
+});
+var MysqlPoolConfigSchema = external_exports.object({
+  /** 最大连接数（默认 10） */
+  max: external_exports.number().int().min(1).default(10),
+  /** 获取连接超时，毫秒（默认10000）；PostgreSQL >=0，0禁用；MySQL排队+建连总期限为1–2147483647 */
+  acquireTimeout: external_exports.number().int().min(1).max(2147483647).default(1e4),
+  /** MySQL 等待队列最大请求数（默认 1000；正整数，不支持无限队列） */
+  queueLimit: external_exports.number().int().min(1).default(1e3)
+}).strict();
+var SslConfigSchema = external_exports.union([
+  external_exports.boolean(),
+  external_exports.enum(["require", "prefer", "allow", "disable"]),
+  external_exports.record(external_exports.string(), external_exports.unknown())
+]);
+var MysqlSslConfigSchema = external_exports.union([
+  external_exports.literal(false),
+  external_exports.object({
+    /** MySQL 是否校验证书链（默认 true）；false 明确放弃服务端认证 */
+    rejectUnauthorized: external_exports.boolean().default(true),
+    /** MySQL 是否验证 DNS 主机身份（默认 true）；仅证书链验证开启时有效 */
+    verifyIdentity: external_exports.boolean().default(true),
+    /** MySQL 信任的 CA，PEM 内容；省略时使用 Node 信任库 */
+    ca: external_exports.string().min(1).optional(),
+    /** MySQL 客户端证书，PEM 内容；必须同时提供 key */
+    cert: external_exports.string().min(1).optional(),
+    /** MySQL 客户端私钥，PEM 内容；必须同时提供 cert */
+    key: external_exports.string().min(1).optional()
+  }).strict().refine((ssl) => Boolean(ssl.cert) === Boolean(ssl.key), { path: ["key"] })
+]);
+var SqliteOptionsSchema = external_exports.object({
+  /** 是否启用 WAL 模式（默认 true），可提高并发读写性能 */
+  walMode: external_exports.boolean().default(true),
+  /** 是否只读模式（默认 false） */
+  readonly: external_exports.boolean().default(false),
+  /**
+   * 执行方式（默认 sync）。
+   *
+   * - `sync`：主线程直接执行 better-sqlite3（同步阻塞主线程事件循环）。
+   * - `worker`：在专用 worker 线程持有唯一连接执行，把阻塞移出主线程。
+   *   注意 WAL 只改善数据库锁并发，无法避免 better-sqlite3 同步调用占用调用线程。
+   */
+  executor: external_exports.enum(["sync", "worker"]).default("sync"),
+  /** worker 执行方式下等待连接打开的超时（毫秒，默认 10000） */
+  workerConnectTimeoutMs: external_exports.number().int().positive().default(1e4)
+});
+var MysqlOptionsSchema = external_exports.object({
+  /** 字符集（默认 utf8mb4），推荐使用 utf8mb4 支持完整 Unicode */
+  charset: external_exports.string().default("utf8mb4")
+}).strict();
+var NetworkConfigSchema = external_exports.object({
+  /**
+   * 连接字符串（可选）
+   * 如果提供 url，将优先使用，忽略 host/port 等字段
+   */
+  url: external_exports.string().optional(),
+  /** 数据库主机地址（默认 localhost） */
+  host: external_exports.string().default("localhost"),
+  /**
+   * 数据库端口
+   * - PostgreSQL 默认 5432
+   * - MySQL 默认 3306
+   */
+  port: external_exports.number().int().min(1).max(65535).optional(),
+  /** 数据库名称 */
+  database: external_exports.string(),
+  /** 数据库用户名 */
+  user: external_exports.string().optional(),
+  /** 数据库密码 */
+  password: external_exports.string().optional(),
+  /** SSL/TLS 连接配置 */
+  ssl: SslConfigSchema.optional(),
+  /** 连接池配置 */
+  pool: PoolConfigSchema.optional()
+});
+var SqliteConfigSchema = external_exports.object({
+  type: external_exports.literal("sqlite"),
+  /** 数据库文件路径（如 './data.db'）或 ':memory:'（内存数据库） */
+  database: external_exports.string(),
+  /** SQLite 特定选项 */
+  sqlite: SqliteOptionsSchema.optional(),
+  ...OperationLogConfigFieldSchema
+});
+var PostgresqlConfigSchema = NetworkConfigSchema.extend({
+  type: external_exports.literal("postgresql"),
+  ...OperationLogConfigFieldSchema
+});
+var MysqlConfigSchema = NetworkConfigSchema.extend({
+  type: external_exports.literal("mysql"),
+  /** 网络数据库URL；MySQL空串表示使用分字段，非空仅mysql://且拒绝query/fragment，优先于host/port/database/user/password */
+  url: external_exports.union([external_exports.literal("").transform(() => void 0), external_exports.url({ protocol: /^mysql$/ }).refine((value) => !value.includes("?") && !value.includes("#"))]).optional(),
+  /** 数据库：SQLite文件路径或:memory:；PostgreSQL必填名称；MySQL无URL时必填，URL模式从URL读取 */
+  database: external_exports.string().min(1).optional(),
+  /** TLS：PostgreSQL使用其模式；MySQL仅false或严格对象，空对象默认校验证书链和DNS身份 */
+  ssl: MysqlSslConfigSchema.optional(),
+  /** 连接池配置：PostgreSQL支持min/idleTimeout；MySQL仅max/acquireTimeout/queueLimit，拒绝其他字段 */
+  pool: MysqlPoolConfigSchema.optional(),
+  /** MySQL 特定选项 */
+  mysql: MysqlOptionsSchema.optional(),
+  ...OperationLogConfigFieldSchema
+}).refine((config) => Boolean(config.url) || Boolean(config.database), { path: ["database"] });
+var ReldbConfigSchema = external_exports.discriminatedUnion("type", [
+  SqliteConfigSchema,
+  PostgresqlConfigSchema,
+  MysqlConfigSchema
+]);
 var CLOUD_FIELDS = {
   "neon": ["apiKey"],
   "upstash": ["email", "apiKey"],
@@ -2421,7 +2829,7 @@ async function ask(question) {
     throw new Error(cliM("cli_deploy_cancelled"));
   return answer.value;
 }
-function validateField(value, field) {
+function validateField(value, field, backend) {
   if (value === "")
     return field.required ? cliM("cli_deploy_required") : true;
   if (field.kind === "port")
@@ -2439,8 +2847,8 @@ function validateField(value, field) {
   }
   if (field.name === "ssl") {
     const parsed2 = parseDocument(value);
-    const ssl = parsed2.errors.length ? void 0 : parsed2.toJS();
-    return typeof ssl === "boolean" || ["require", "prefer", "allow", "disable"].includes(String(ssl)) || ssl !== null && typeof ssl === "object" && !Array.isArray(ssl) || cliM("cli_deploy_invalid_value");
+    const schema = backend === "mysql" ? MysqlSslConfigSchema : SslConfigSchema;
+    return parsed2.errors.length === 0 && schema.safeParse(parsed2.toJS()).success || cliM("cli_deploy_invalid_value");
   }
   if (field.name === "headers") {
     try {
@@ -2459,21 +2867,21 @@ function ensureConfigNode(appDir, requirement, backend) {
     return;
   const directory = join(appDir, "config");
   mkdirSync(directory, { recursive: true });
-  const path7 = join(directory, `_${requirement.configName}.yml`);
-  const document = parseDocument(existsSync(path7) ? readFileSync(path7, "utf8") : "{}\n");
+  const path9 = join(directory, `_${requirement.configName}.yml`);
+  const document = parseDocument(existsSync(path9) ? readFileSync(path9, "utf8") : "{}\n");
   if (document.errors.length)
     throw new Error(cliM("cli_deploy_invalid_value"));
   if (requirement.configPath.length && !document.hasIn(requirement.configPath))
-    document.setIn(requirement.configPath, requirement.configName === "reach" ? { name: requirement.config.name ?? requirement.service, type: backend } : {});
+    document.setIn(requirement.configPath, document.createNode(requirement.configName === "reach" ? { name: requirement.config.name ?? requirement.service, type: backend } : {}));
   if (requirement.service === "ldap") {
     if (!document.hasIn(["login"]))
-      document.setIn(["login"], {});
+      document.set("login", document.createNode({}));
     if (!document.hasIn(["login", "ldap"]))
       document.setIn(["login", "ldap"], `\${HAI_IAM_LOGIN_LDAP:false}`);
   }
   const content = document.toString();
-  if (!existsSync(path7) || readFileSync(path7, "utf8") !== content)
-    writeFileSync(path7, content);
+  if (!existsSync(path9) || readFileSync(path9, "utf8") !== content)
+    writeFileSync(path9, content);
 }
 function connectionEnv(requirement, backend, config) {
   if (requirement.service === "ldap")
@@ -2490,7 +2898,7 @@ async function configureDeployMiddleware(module, scan, environment, config, yes
     const current = choices.find((item) => item.backend === requirement.backend);
     if (!current)
       throw new Error(cliM("cli_deploy_cloud_unsupported", { params: { backend: requirement.backend } }));
-    core.logger.info(cliM("cli_deploy_middleware", { params: { service: requirement.service, backend: current.label, purpose: module.describeMiddlewareBackend(current), source: requirement.source } }));
+    writeCliMessage(cliM("cli_deploy_middleware", { params: { service: requirement.service, backend: current.label, purpose: module.describeMiddlewareBackend(current), source: requirement.source } }));
     const canKeep = canKeepMiddleware(requirement, current, environment);
     const mode = yes ? canKeep ? "keep" : "default" : await ask({
       type: "select",
@@ -2529,8 +2937,11 @@ async function configureDeployMiddleware(module, scan, environment, config, yes
       if (deployment.errors.length)
         throw new Error(cliM("cli_deploy_invalid_value"));
       if (!deployment.hasIn(["container", "s3Engine"])) {
-        if (!deployment.hasIn(["container"]))
-          deployment.setIn(["container"], {});
+        const node = deployment.get("container", true);
+        if (node === void 0 || isScalar(node) && node.value === null)
+          deployment.set("container", deployment.createNode({}));
+        else if (!isMap(node))
+          throw new Error(cliM("cli_deploy_yaml_node", { params: { path: deploymentFile, field: "container" } }));
         deployment.setIn(["container", "s3Engine"], `\${HAI_DEPLOY_CONTAINER_S3ENGINE:rustfs}`);
         writeFileSync(deploymentFile, deployment.toString());
       }
@@ -2544,15 +2955,16 @@ async function configureDeployMiddleware(module, scan, environment, config, yes
       for (const name of CLOUD_FIELDS[backend.provisioner]) {
         const key = `HAI_DEPLOY_SERVICES_${requirement.service.toUpperCase()}_${name.toUpperCase()}`;
         const initial = String(priorConfig[name] ?? environment.values[key] ?? "");
-        const value = yes ? initial : String(await ask({ type: /key|token|secret/i.test(name) ? "password" : "text", name: "value", message: key, initial, validate: (input) => Boolean(input) || cliM("cli_deploy_required") }));
+        const label = `${backend.label} \u2014 ${cliM(`cli_deploy_cloud_input_${name}`)}`;
+        const value = yes ? initial : String(await ask({ type: /key|token|secret/i.test(name) ? "password" : "text", name: "value", message: label, initial, validate: (input) => Boolean(input) || cliM("cli_deploy_required") }));
         if (!value)
-          throw new Error(`${key}: ${cliM("cli_deploy_required")}`);
+          throw new Error(`${label}: ${cliM("cli_deploy_required")}`);
         cloud[name] = value;
         updates[key] = value;
       }
       services[requirement.service] = cloud;
     } else {
-      if (mode === "default" && (requirement.service === "sms" || backendName === "api"))
+      if (mode === "default" && ["aliyun-sms", "api"].includes(backendName))
         throw new Error(cliM("cli_deploy_cloud_unsupported", { params: { backend: backend.label } }));
       const connection = mode === "custom" && backendName === current.backend ? { ...requirement.config } : requirement.configName === "reach" ? { name: requirement.config.name ?? requirement.service } : {};
       for (const field of backend.fields) {
@@ -2560,22 +2972,27 @@ async function configureDeployMiddleware(module, scan, environment, config, yes
         const initial = previous2 === void 0 ? field.defaultValue ?? "" : typeof previous2 === "object" ? JSON.stringify(previous2) : String(previous2);
         const variable = `${requirement.envPrefix}_${field.name.toUpperCase()}`;
         const info = moduleEnvironmentVariables(requirement.configName).find((item) => item.name === variable);
-        const value = mode === "custom" && !yes ? String(await ask({ type: field.secret ? "password" : "text", name: "value", message: cliM("cli_deploy_field", { params: { name: variable, description: info?.description ?? field.name, constraint: info?.constraint ?? field.kind ?? "string" } }), initial, validate: (input) => validateField(String(input), field) })) : initial;
+        const value = mode === "custom" && !yes ? String(await ask({ type: field.secret ? "password" : "text", name: "value", message: cliM("cli_deploy_field", { params: { description: info?.description ?? field.name, constraint: info?.constraint ?? field.kind ?? "string" } }), initial, validate: (input) => validateField(String(input), field, backendName) })) : initial;
+        if (field.name === "ssl" && validateField(value, field, backendName) !== true)
+          throw new Error(cliM("cli_deploy_invalid_value"));
         if (value !== "") {
           connection[field.name] = field.kind === "number" || field.kind === "port" ? Number(value) : field.kind === "boolean" ? value === "true" : field.name === "headers" || field.name === "ssl" ? parseDocument(value).toJS() : value;
         } else {
           delete connection[field.name];
         }
       }
+      if (requirement.service === "db") {
+        const validated = ReldbConfigSchema.safeParse({ ...connection, type: backendName });
+        if (!validated.success)
+          throw new Error(cliM("cli_deploy_config_invalid", { params: { path: join(scan.appDir ?? ".", "config", "_db.yml"), fields: validated.error.issues.map((issue) => issue.path.join(".")).join(", ") } }));
+      }
       Object.assign(updates, connectionEnv(requirement, backendName, connection));
     }
     ensureConfigNode(scan.appDir ?? ".", requirement, backendName);
     const saved = module.saveDeploymentEnvironment(environment, updates);
     if (!saved.success)
       throw new Error(saved.error.message);
-    for (const [name, value] of Object.entries(updates)) {
-      core.logger.info(cliM("cli_deploy_saved", { params: { name, value: displayDeployValue(name, value) } }));
-    }
+    writeCliMessage(cliM("cli_deploy_saved", { params: { service: requirement.service } }));
   }
   config.services = Object.keys(services).length ? services : void 0;
   return modes;
@@ -2591,14 +3008,19 @@ async function configureDeployTarget(module, config, environment, nonInteractive
     if (existing.type && existing.type !== "docker-ssh")
       throw new Error(cliM("cli_deploy_bundle_provider"));
     config.provider = { type: "docker-ssh", remote: { runtime: "auto" }, expose: { hostPort: 3e3 }, ...existing };
+    const candidate = module.ProviderConfigSchema.safeParse(config.provider);
+    if (!candidate.success && candidate.error.issues.some((issue) => issue.path[0] === "ssh")) {
+      const provider2 = configObject(config.provider);
+      delete provider2.ssh;
+    }
   }
   const current = module.ProviderConfigSchema.safeParse(config.provider);
   if (current.success && (bundleOnly || current.data.type !== "docker-ssh" || current.data.ssh)) {
     config.provider = current.data;
-    core.logger.info(cliM("cli_deploy_target_reused", { params: { target: current.data.type === "docker-ssh" ? current.data.ssh ? `${current.data.ssh.username}@${current.data.ssh.host}:${current.data.ssh.port}` : cliM("cli_deploy_bundle_local") : "Vercel" } }));
+    writeCliMessage(bundleOnly ? cliM("cli_deploy_bundle_target") : cliM("cli_deploy_target_reused", { params: { target: current.data.type === "docker-ssh" && current.data.ssh ? `${current.data.ssh.username}@${current.data.ssh.host}:${current.data.ssh.port}` : "Vercel" } }));
     return;
   }
-  if (nonInteractive)
+  if (nonInteractive || bundleOnly)
     throw new Error(cliM("cli_deploy_target_missing", { params: { fields: current.success ? "provider.ssh" : current.error.issues.map((issue) => `provider.${issue.path.join(".")}`).join(", ") } }));
   const original = configObject(config.provider);
   const platform = await prompts({
@@ -2614,9 +3036,9 @@ async function configureDeployTarget(module, config, environment, nonInteractive
     const answer = await prompts({
       type: options.secret ? "password" : "text",
       name: "value",
-      message: cliM("cli_deploy_target_field", { params: { name } }),
+      message: cliM(`cli_deploy_input${name.split("_").at(-1)}`),
       initial: options.secret ? void 0 : initial === void 0 ? "" : String(initial),
-      validate: (value) => options.port ? /^\d+$/.test(value) && Number(value) >= 1 && Number(value) <= 65535 || cliM("cli_deploy_invalid_value") : options.optional || !!value.trim() || cliM("cli_deploy_invalid_value")
+      validate: (value) => options.port ? /^\d+$/.test(value) && Number(value) >= 1 && Number(value) <= 65535 || cliM("cli_deploy_port_invalid") : options.optional || !!value.trim() || cliM("cli_deploy_invalid_value")
     });
     if (answer.value === void 0)
       throw new Error(cliM("cli_deploy_cancelled"));
@@ -2624,7 +3046,7 @@ async function configureDeployTarget(module, config, environment, nonInteractive
   };
   let provider;
   if (platform.value === "docker-ssh") {
-    core.logger.info(cliM("cli_deploy_target_ssh_hint"));
+    writeCliMessage(cliM("cli_deploy_target_ssh_hint"));
     const ssh = configObject(original.ssh);
     const remote = configObject(original.remote);
     const expose = configObject(original.expose);
@@ -2655,15 +3077,27 @@ async function configureDeployTarget(module, config, environment, nonInteractive
   if (!saved.success)
     throw new Error(saved.error.message);
   config.provider = validated.data;
-  core.logger.info(cliM("cli_deploy_target_saved"));
+  writeCliMessage(cliM("cli_deploy_target_saved"));
 }
 async function deployCommand(options) {
   const spinner = ora();
   const cwd = options.cwd ?? process4.cwd();
   let appDir = resolve(cwd, options.appDir ?? ".");
   let closeDeploy = null;
+  let restoreProjectLogger;
   const originalEnv = { ...process4.env };
+  const previousLogLevel = core.logger.getLevel();
+  core.logger.setLevel("fatal");
   try {
+    if (options.runtime && !["auto", "podman", "docker"].includes(options.runtime))
+      throw new Error(cliM("cli_build_runtime_missing"));
+    if (options.artifactDir && options.build)
+      throw new Error(cliM("cli_deploy_build_artifact_conflict"));
+    if (!options.build && (options.network !== void 0 || options.sqlitePrebuildMirror !== void 0 || options.httpProxy === false))
+      throw new Error(cliM("cli_deploy_build_options_required"));
+    let selectedServices = options.services?.split(",").map((name) => name.trim());
+    if (selectedServices && (!selectedServices.length || selectedServices.some((name) => !/^[a-z][a-z0-9-]*$/.test(name)) || new Set(selectedServices).size !== selectedServices.length))
+      throw new Error(cliM("cli_build_selection_invalid"));
     let environmentName = options.env;
     if (!environmentName) {
       if (!process4.stdin.isTTY)
@@ -2678,15 +3112,24 @@ async function deployCommand(options) {
     let deployModule;
     try {
       const localRequire = createRequire(resolve(appDir, "package.json"));
+      try {
+        const { core: projectCore } = await import(pathToFileURL(localRequire.resolve("@h-ai/core")).href);
+        if (projectCore !== core) {
+          const level = projectCore.logger.getLevel();
+          projectCore.logger.setLevel("fatal");
+          restoreProjectLogger = () => projectCore.logger.setLevel(level);
+        }
+      } catch {
+      }
       let localModule;
       try {
         localModule = localRequire.resolve("@h-ai/deploy");
       } catch {
       }
-      deployModule = localModule ? await import(pathToFileURL(localModule).href) : await import('./src-RDQ2EIBT.js');
+      deployModule = localModule ? await import(pathToFileURL(localModule).href) : await import('./src-DSJJXM2F.js');
     } catch {
-      core.logger.error(chalk.red(cliM("cli_deploy_module_missing")));
-      core.logger.info(chalk.cyan("  pnpm add @h-ai/deploy"));
+      writeCliError(chalk.red(cliM("cli_deploy_module_missing")));
+      writeCliMessage(chalk.cyan("  pnpm add -D @h-ai/deploy"));
       throw new Error(cliM("cli_deploy_module_missing"));
     }
     const { deploy } = deployModule;
@@ -2695,6 +3138,15 @@ async function deployCommand(options) {
       throw new Error(cliM("cli_deploy_scan_failed", { params: { message: scanResult.error.message } }));
     const scan = scanResult.data;
     appDir = scan.appDir ?? appDir;
+    let buildRoot = appDir;
+    while (!existsSync(resolve(buildRoot, "hai.build.json")) && dirname(buildRoot) !== buildRoot)
+      buildRoot = dirname(buildRoot);
+    const buildFile = resolve(buildRoot, "hai.build.json");
+    const buildConfig = existsSync(buildFile) ? JSON.parse(readFileSync(buildFile, "utf8")) : {};
+    const names = [...buildConfig.images?.map((image) => image.name) ?? ["app", "web"], ...(scan.middlewares ?? []).filter((item) => !["sqlite", "local", "memory", "disabled", "console", "lancedb"].includes(item.backend)).map((item) => item.service)];
+    const available = [...new Set(names)];
+    if (selectedServices?.some((name) => !available.includes(name)))
+      throw new Error(cliM("cli_deploy_services_invalid", { params: { services: available.join(", ") } }));
     const environment = deployModule.loadDeploymentEnvironment({ environment: environmentName, envDir: scan.envDir ?? appDir });
     if (!environment.success)
       throw new Error(environment.error.message);
@@ -2709,7 +3161,7 @@ async function deployCommand(options) {
     const configPath = resolve(appDir, "config", "_deploy.yml");
     if (!existsSync(configPath)) {
       spinner.fail(chalk.red(cliM("cli_deploy_config_missing", { params: { path: configPath } })));
-      core.logger.info(chalk.cyan(cliM("cli_deploy_config_hint")));
+      writeCliMessage(chalk.cyan(cliM("cli_deploy_config_hint")));
       throw new Error(cliM("cli_deploy_config_missing", { params: { path: configPath } }));
     }
     const loadedConfig = deployModule.loadDeploymentConfig("deploy", configPath, process4.env);
@@ -2717,9 +3169,51 @@ async function deployCommand(options) {
       throw new Error(loadedConfig.error.message);
     const deployConfig = loadedConfig.data;
     spinner.succeed(cliM("cli_deploy_config_loaded"));
+    if (!options.build && !selectedServices && configObject(deployConfig.provider).type === "docker-ssh") {
+      let artifactDirectory = options.artifactDir ? resolve(cwd, options.artifactDir) : resolve(buildRoot, ".hai/build/docker");
+      if (existsSync(resolve(artifactDirectory, "latest"))) {
+        const pointer = readFileSync(resolve(artifactDirectory, "latest"), "utf8").trim();
+        if (!/^[a-z0-9][\w.+-]*$/i.test(pointer))
+          throw new Error(cliM("cli_deploy_artifact_invalid"));
+        artifactDirectory = resolve(artifactDirectory, pointer);
+      }
+      if (existsSync(resolve(artifactDirectory, "manifest.json"))) {
+        try {
+          const artifact = await deployModule.readDeploymentArtifact(artifactDirectory);
+          if (artifact.partial)
+            selectedServices = artifact.images.map((image) => image.name);
+        } catch {
+          throw new Error(cliM("cli_deploy_artifact_invalid"));
+        }
+      }
+    }
     await configureDeployTarget(deployModule, deployConfig, environment.data, options.yes, options.bundleOnly);
+    if (configObject(deployConfig.provider).type !== "docker-ssh" && (selectedServices || options.build))
+      throw new Error(cliM("cli_deploy_bundle_provider"));
+    if (!options.yes && !selectedServices && configObject(deployConfig.provider).type === "docker-ssh") {
+      if (existsSync(buildFile)) {
+        if (available.length > 1) {
+          const choice = await prompts({ type: "multiselect", name: "value", message: cliM("cli_deploy_choose_services"), choices: available.map((name) => ({ title: name, value: name, selected: true })), min: 1 });
+          if (!Array.isArray(choice.value) || choice.value.length === 0)
+            throw new Error(cliM("cli_deploy_cancelled"));
+          if (choice.value.length !== available.length)
+            selectedServices = choice.value;
+        }
+      }
+    }
     spinner.succeed(cliM("cli_deploy_scanned", { params: { name: scan.appName, sveltekit: String(scan.isSvelteKit), services: scan.requiredServices.join(", ") || cliM("cli_deploy_none") } }));
-    let skipMiddleware = options.skipMiddleware;
+    if (options.build) {
+      if (!existsSync(buildFile))
+        throw new Error(cliM("cli_build_images_missing"));
+      const imageNames = selectedServices?.filter((name) => ["app", "web"].includes(name));
+      if (!selectedServices || imageNames?.length) {
+        writeCliMessage(cliM("cli_deploy_build_started"));
+        await buildCommand({ cwd: buildRoot, target: "docker", images: imageNames?.join(","), runtime: options.runtime, network: options.network, sqlitePrebuildMirror: options.sqlitePrebuildMirror, httpProxy: options.httpProxy });
+      }
+    }
+    if (selectedServices)
+      writeCliMessage(cliM("cli_deploy_services", { params: { services: selectedServices.join(", ") } }));
+    let skipMiddleware = options.skipMiddleware || selectedServices?.every((name) => ["app", "web"].includes(name));
     if (!skipMiddleware && !options.yes && scan.requiredServices.length) {
       const action = await prompts({
         type: "select",
@@ -2732,8 +3226,8 @@ async function deployCommand(options) {
       skipMiddleware = action.value === "skip";
     }
     if (skipMiddleware)
-      core.logger.info(cliM("cli_deploy_middleware_skipped"));
-    const serviceModes = skipMiddleware ? Object.fromEntries(scan.requiredServices.map((service) => [service, "keep"])) : await configureDeployMiddleware(deployModule, scan, environment.data, deployConfig, options.yes);
+      writeCliMessage(cliM("cli_deploy_middleware_skipped"));
+    const serviceModes = skipMiddleware ? Object.fromEntries(scan.requiredServices.map((service) => [service, "keep"])) : await configureDeployMiddleware(deployModule, { ...scan, middlewares: scan.middlewares?.filter((item) => !selectedServices || selectedServices.includes(item.service)) }, environment.data, deployConfig, options.yes);
     if (skipMiddleware)
       deployConfig.services = void 0;
     for (const key of Object.keys(process4.env)) {
@@ -2748,7 +3242,7 @@ async function deployCommand(options) {
     spinner.start(cliM("cli_deploy_initializing"));
     const validatedConfig = deployModule.DeployConfigSchema.safeParse(deployConfig);
     if (!validatedConfig.success)
-      throw new Error(cliM("cli_deploy_init_failed", { params: { message: cliM("cli_deploy_invalid_value") } }));
+      throw new Error(cliM("cli_deploy_config_invalid", { params: { path: configPath, fields: validatedConfig.error.issues.map((issue) => issue.path.join(".")).join(", ") } }));
     const initResult = await deploy.init(validatedConfig.data);
     if (!initResult.success) {
       throw new Error(cliM("cli_deploy_init_failed", { params: { message: initResult.error.message } }));
@@ -2758,6 +3252,9 @@ async function deployCommand(options) {
     spinner.start(cliM("cli_deploy_deploying"));
     const deployResult = await deploy.deployApp(appDir, {
       projectName: options.projectName,
+      selectedServices,
+      runtime: options.runtime,
+      onProgress: (stage) => writeCliMessage(cliM(`cli_deploy_stage_${stage}`)),
       skipMiddleware,
       artifactDir: options.artifactDir ? resolve(cwd, options.artifactDir) : void 0,
       bundleOnly: options.bundleOnly,
@@ -2767,51 +3264,40 @@ async function deployCommand(options) {
       serviceModes
     });
     if (!deployResult.success) {
+      const execution = deployModule.getDeployCommandState(deployResult.error);
+      if (execution) {
+        const localKey = execution.localTermination === "not-started" ? "cli_deploy_local_not_started" : execution.localTermination === "confirmed" ? "cli_deploy_local_confirmed" : "cli_deploy_local_unknown";
+        writeCliMessage(cliM(localKey));
+        if (execution.remoteExecution)
+          writeCliMessage(cliM(execution.remoteExecution === "finished" ? "cli_deploy_remote_finished" : "cli_deploy_remote_unknown"));
+        if (execution.deploymentId && execution.resultFile)
+          writeCliMessage(cliM("cli_deploy_result_check", { params: { id: execution.deploymentId, path: execution.resultFile } }));
+      }
       if (deployResult.error.ext?.recovery) {
-        core.logger.warn(deployResult.error.suggestion ?? cliM("cli_deploy_command_failed"), {
-          recovery: deployResult.error.ext.recovery
-        });
+        writeCliMessage(deployResult.error.suggestion ?? cliM("cli_deploy_command_failed"));
       }
       throw new Error(cliM("cli_deploy_failed", { params: { message: deployResult.error.message } }));
     }
     spinner.succeed(chalk.green(cliM(deployResult.data.status === "packaged" ? "cli_deploy_bundle_ready" : "cli_deploy_success")));
-    for (const key of Object.keys(process4.env)) {
-      if (originalEnv[key] === void 0)
-        delete process4.env[key];
-    }
-    Object.assign(process4.env, originalEnv);
-    const completedEnvironment = deployModule.loadDeploymentEnvironment({ environment: environment.data.environment, envDir: environment.data.envDir });
-    if (!completedEnvironment.success)
-      throw new Error(completedEnvironment.error.message);
-    for (const requirement of scan.middlewares ?? []) {
-      if ((serviceModes[requirement.envPrefix] ?? serviceModes[requirement.service]) === "keep")
-        continue;
-      const value = completedEnvironment.data.values[requirement.envPrefix];
-      if (value !== void 0)
-        core.logger.info(cliM("cli_deploy_saved", { params: { name: requirement.envPrefix, value: displayDeployValue(requirement.envPrefix, value) } }));
-    }
-    core.logger.info("");
-    if (deployResult.data.bundlePath)
-      core.logger.info(cliM("cli_deploy_bundle_path", { params: { path: deployResult.data.bundlePath } }));
+    writeCliMessage("");
+    if (deployResult.data.bundlePath && (deployResult.data.status !== "packaged" || !deployResult.data.instructions))
+      writeCliMessage(cliM("cli_deploy_bundle_path", { params: { path: deployResult.data.bundlePath } }));
     if (deployResult.data.status === "packaged")
-      core.logger.info(deployResult.data.instructions ?? "");
+      writeCliMessage(deployResult.data.instructions ?? "");
     else
-      core.logger.info(chalk.cyan(cliM("cli_deploy_url", { params: { url: deployResult.data.url } })));
-    core.logger.info(chalk.gray(cliM("cli_deploy_id", { params: { id: deployResult.data.deploymentId } })));
-    if (deployResult.data.envVarsSet.length > 0) {
-      core.logger.info(chalk.gray(cliM("cli_deploy_env", { params: { names: deployResult.data.envVarsSet.join(", ") } })));
-    }
-    core.logger.info("");
+      writeCliMessage(chalk.cyan(cliM("cli_deploy_url", { params: { url: deployResult.data.url } })));
+    writeCliMessage(chalk.gray(cliM("cli_deploy_id", { params: { id: deployResult.data.deploymentId } })));
+    writeCliMessage("");
   } catch (error) {
     spinner.fail(chalk.red(cliM("cli_deploy_command_failed")));
-    core.logger.error(error instanceof Error ? error.message : String(error));
+    writeCliError(error instanceof Error ? error.message : String(error));
     throw error;
   } finally {
     if (closeDeploy) {
       try {
         await closeDeploy();
       } catch (error) {
-        core.logger.error("Failed to close deploy module", { error });
+        writeCliError("Failed to close deploy module", error);
         process4.exitCode = 1;
       }
     }
@@ -2820,31 +3306,217 @@ async function deployCommand(options) {
         delete process4.env[key];
     }
     Object.assign(process4.env, originalEnv);
+    core.logger.setLevel(previousLogLevel);
+    restoreProjectLogger?.();
+  }
+}
+function appendAt(source, marker, entry) {
+  if (source.split(marker).length !== 2)
+    throw new Error(cliM("cli_generateUnsupportedAggregator"));
+  if (source.split(/\r?\n/).some((line) => line.trim() === entry.trim()))
+    return source;
+  const moduleName = /^import .+ from ['"](.+)['"]$/.exec(entry)?.[1];
+  if (moduleName) {
+    for (const match of source.matchAll(/^import (?!type\b)[^\r\n]+ from ['"](\.[^'"]+)['"]\r?$/gm)) {
+      if (match[1].localeCompare(moduleName) > 0)
+        return `${source.slice(0, match.index)}${entry}
+${source.slice(match.index)}`;
+    }
+  }
+  return source.replace(marker, `${entry}
+${marker}`);
+}
+async function generateServApi(context, target) {
+  const contracts = target.packages.filter((pkg) => pkg.dependencies["@h-ai/api-contract"] && pkg.dependencies.zod && pkg.name in target.target.dependencies);
+  if (contracts.length !== 1)
+    throw new Error(cliM("cli_generateUnsupportedAggregator"));
+  const contract = contracts[0];
+  const contractSources = await fse.readdir(path2.join(contract.directory, "src"));
+  const aggregators = [];
+  for (const name of contractSources.filter((name2) => name2.endsWith(".ts"))) {
+    const file = path2.join(contract.directory, "src", name);
+    const content = await fse.readFile(file, "utf8");
+    if (content.includes("// @hai-generator:contracts:entries"))
+      aggregators.push({ path: file, content });
+  }
+  if (aggregators.length !== 1)
+    throw new Error(cliM("cli_generateUnsupportedAggregator"));
+  const aggregator = aggregators[0];
+  const contractIndex = path2.join(contract.directory, "src/index.ts");
+  const procedureIndex = path2.join(target.target.directory, "src/server/procedures/index.ts");
+  const indexSource = await fse.readFile(contractIndex, "utf8");
+  const procedureSource = await fse.readFile(procedureIndex, "utf8");
+  const contractName = `${context.camelCase}Contract`;
+  const factoryName = `create${context.pascalCase}Procedures`;
+  const domainMarker = `// @hai-generator:domain ${context.camelCase}`;
+  const contractFile = path2.join(contract.directory, "src", `${context.kebabCase}-contract.ts`);
+  const procedureFile = path2.join(target.target.directory, "src/server/procedures", `${context.kebabCase}-procedures.ts`);
+  const importLine = `import { ${contractName} } from './${context.kebabCase}-contract.js'`;
+  const entryLine = `  ${context.camelCase}: ${contractName},`;
+  const factoryImport = `import { ${factoryName} } from './${context.kebabCase}-procedures.js'`;
+  const domainProperty = new RegExp(`^\\s*(?:${context.camelCase}|['"]${context.camelCase}['"]):`, "m");
+  if (domainProperty.test(aggregator.content) || domainProperty.test(procedureSource)) {
+    for (const file of [contractFile, procedureFile]) {
+      if (!await fse.pathExists(file) || !(await fse.readFile(file, "utf8")).includes(domainMarker))
+        throw new Error(cliM("cli_generateDomainExists", { params: { name: context.camelCase } }));
+    }
+  }
+  const contractContent = `${domainMarker}
+import { apiContract } from '@h-ai/api-contract'
+import { z } from 'zod'
+
+/**
+ * ${context.pascalCase} \u793A\u4F8B\u5951\u7EA6\uFF1AGET \u5217\u8868\u4E0E POST \u6821\u9A8C\u56DE\u663E\uFF0C\u4E0D\u6267\u884C\u6301\u4E45\u5199\u5165\u3002
+ * @example client.${context.camelCase}.create({ name: 'Example' })
+ */
+export const ${contractName} = {
+  list: apiContract
+    .route({ method: 'GET', path: '/${context.kebabCase}', operationId: '${context.camelCase}.list', tags: ['${context.kebabCase}'] })
+    .output(apiContract.haiResultSchema(z.object({ items: z.array(z.object({ name: z.string() })) }))),
+  create: apiContract
+    .route({ method: 'POST', path: '/${context.kebabCase}', operationId: '${context.camelCase}.create', tags: ['${context.kebabCase}'] })
+    .input(z.object({ name: z.string().min(1) }))
+    .output(apiContract.haiResultSchema(z.object({ name: z.string() }))),
+}
+`;
+  const procedureContent = `${domainMarker}
+import type { ServContext } from '@h-ai/serv'
+import { ok } from '@h-ai/core'
+import { serv } from '@h-ai/serv'
+import { ${contractName} } from '${contract.name}'
+
+/**
+ * \u521B\u5EFA ${context.pascalCase} \u793A\u4F8B\u8FC7\u7A0B\uFF1B\u65B0\u589E\u6301\u4E45\u5199\u5165\u524D\u63A5\u5165\u6388\u6743\u4E0E\u4E1A\u52A1\u670D\u52A1\u3002
+ * @returns \u4E0E\u5171\u4EAB\u5951\u7EA6\u4E00\u81F4\u7684\u516C\u5F00\u8FC7\u7A0B\uFF1B\u793A\u4F8B\u4E0D\u8BBF\u95EE\u7528\u6237\u6570\u636E\u3002
+ * @example const procedures = { ${context.camelCase}: ${factoryName}() }
+ */
+export function ${factoryName}() {
+  return serv
+    .implement(${contractName})
+    .context<ServContext>()
+    .route('list', () => ok({ items: [] }))
+    .route('create', ({ input }) => ok({ name: input.name }))
+    .build()
+}
+`;
+  return [
+    { path: contractFile, content: contractContent },
+    { path: procedureFile, content: procedureContent },
+    { path: aggregator.path, previousContent: aggregator.content, content: appendAt(appendAt(aggregator.content, "// @hai-generator:contracts:imports", importLine), "  // @hai-generator:contracts:entries", entryLine) },
+    { path: contractIndex, previousContent: indexSource, content: appendAt(indexSource, "// @hai-generator:contracts:exports", `export * from './${context.kebabCase}-contract.js'`) },
+    { path: procedureIndex, previousContent: procedureSource, content: appendAt(appendAt(procedureSource, "// @hai-generator:procedures:imports", factoryImport), "    // @hai-generator:procedures:entries", `    ${context.camelCase}: ${factoryName}(),`) }
+  ];
+}
+function isInside(root, file) {
+  const relative2 = path2.relative(root, file);
+  return relative2 !== ".." && !relative2.startsWith(`..${path2.sep}`) && !path2.isAbsolute(relative2);
+}
+async function readPackage(directory) {
+  if (!await fse.pathExists(path2.join(directory, "package.json")))
+    return void 0;
+  const value = await fse.readJson(path2.join(directory, "package.json"));
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    throw new Error(cliM("cli_generateUnsupportedProject"));
+  const dependencies = {};
+  for (const key of ["dependencies", "devDependencies"]) {
+    const entries = key in value ? Reflect.get(value, key) : void 0;
+    if (entries && typeof entries === "object" && !Array.isArray(entries)) {
+      for (const [name2, version] of Object.entries(entries)) {
+        if (typeof version === "string")
+          dependencies[name2] = version;
+      }
+    }
+  }
+  const name = "name" in value && typeof value.name === "string" ? value.name : path2.basename(directory);
+  if (!/^(?:@[\w.-]+\/)?[\w.-]+$/.test(name))
+    throw new Error(cliM("cli_generateUnsupportedProject"));
+  return { directory, name, dependencies };
+}
+function generateArchitecture(pkg) {
+  if (pkg.dependencies["@sveltejs/kit"])
+    return "sveltekit";
+  if (pkg.dependencies["@h-ai/serv"])
+    return "serv";
+  return pkg.dependencies.svelte ? "svelte" : "other";
+}
+async function resolveGenerateTarget(options) {
+  const cwd = await fse.realpath(path2.resolve(options.cwd ?? "."));
+  let root = cwd;
+  for (let current = cwd; ; current = path2.dirname(current)) {
+    if (await fse.pathExists(path2.join(current, "pnpm-workspace.yaml"))) {
+      root = current;
+      break;
+    }
+    if (path2.dirname(current) === current)
+      break;
+  }
+  const packages = [];
+  const addPackage = async (directory) => {
+    if (!isInside(root, directory))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    const real = await fse.realpath(directory);
+    if (!isInside(root, real))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    const pkg = await readPackage(real);
+    if (pkg && !packages.some((value) => value.directory === real))
+      packages.push(pkg);
+  };
+  await addPackage(root);
+  if (await fse.pathExists(path2.join(root, "pnpm-workspace.yaml"))) {
+    const workspace = parse(await fse.readFile(path2.join(root, "pnpm-workspace.yaml"), "utf8"));
+    const patterns = workspace && typeof workspace === "object" && "packages" in workspace && Array.isArray(workspace.packages) ? workspace.packages : [];
+    for (const pattern of patterns) {
+      if (typeof pattern !== "string" || pattern.startsWith("!") || pattern.split(/[\\/]/).includes("..") || path2.isAbsolute(pattern))
+        throw new Error(cliM("cli_generateUnsupportedProject"));
+      for await (const manifest of glob(`${pattern}/package.json`, { cwd: root, exclude: ["**/node_modules/**"] }))
+        await addPackage(path2.dirname(path2.resolve(root, manifest)));
+    }
+  }
+  if (cwd !== root)
+    await addPackage(cwd);
+  const selected = options.workspace ? packages.filter((pkg) => pkg.name === options.workspace || pkg.directory === path2.resolve(root, options.workspace)) : packages.filter((pkg) => pkg.directory === cwd);
+  const applicable = (pkg) => {
+    const architecture = generateArchitecture(pkg);
+    return options.type === "api" ? architecture === "serv" || architecture === "sveltekit" && Boolean(pkg.dependencies["@h-ai/kit"]) && Boolean(pkg.dependencies.zod) : options.type === "page" ? architecture === "sveltekit" : options.type === "component" ? ["sveltekit", "svelte"].includes(architecture) : Object.keys(pkg.dependencies).some((name) => name.startsWith("@h-ai/"));
+  };
+  const candidates = options.workspace || selected.length === 1 && (cwd !== root || applicable(selected[0])) ? selected.filter(applicable) : packages.filter(applicable);
+  if (candidates.length !== 1)
+    throw new Error(cliM(candidates.length > 1 ? "cli_generateAmbiguousWorkspace" : "cli_generateUnsupportedProject"));
+  const target = candidates[0];
+  if (generateArchitecture(target) === "sveltekit" && (options.type === "page" || options.type === "api")) {
+    for (const name of ["svelte.config.js", "svelte.config.mjs", "svelte.config.cjs", "svelte.config.ts"]) {
+      const configFile = path2.join(target.directory, name);
+      if (await fse.pathExists(configFile) && /\bfiles\s*[:.[(]/.test(await fse.readFile(configFile, "utf8")))
+        throw new Error(cliM("cli_generateCustomRoutes"));
+    }
   }
+  return { root, target, packages };
 }
+
+// src/commands/cli-generate.ts
 var GENERATORS = {
   page: {
-    description: "SvelteKit \u9875\u9762",
+    description: () => cliM("cli_generatePageDescription"),
     defaultPath: "src/routes",
     generate: generatePage
   },
   component: {
-    description: "Svelte \u7EC4\u4EF6",
+    description: () => cliM("cli_generateComponentDescription"),
     defaultPath: "src/lib/components",
     generate: generateComponent
   },
   api: {
-    description: "API \u7AEF\u70B9",
+    description: () => cliM("cli_generateApiDescription"),
     defaultPath: "src/routes/api",
     generate: generateApi
   },
   model: {
-    description: "\u6570\u636E\u6A21\u578B",
+    description: () => cliM("cli_generateModelDescription"),
     defaultPath: "src/lib/models",
     generate: generateModel
   },
   migration: {
-    description: "\u6570\u636E\u5E93\u8FC1\u79FB",
+    description: () => cliM("cli_generateMigrationDescription"),
     defaultPath: "migrations",
     generate: generateMigration
   }
@@ -2853,55 +3525,43 @@ async function generate(options) {
   const spinner = ora();
   const cwd = options.cwd ?? ".";
   try {
-    const project = await detectProject(cwd);
-    if (!project?.isHaiProject) {
-      core.logger.warn(chalk.yellow("\u8B66\u544A: \u5F53\u524D\u76EE\u5F55\u4E0D\u662F hai \u9879\u76EE"));
-    }
     const resolvedOptions = await resolveGenerateOptions(options);
     const generator = GENERATORS[resolvedOptions.type];
-    if (!generator) {
-      throw new Error(`\u672A\u77E5\u7684\u751F\u6210\u5668\u7C7B\u578B: ${resolvedOptions.type}`);
-    }
     if (!/^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$/i.test(resolvedOptions.name))
       throw new Error(cliM("cli_invalidGenerateName"));
-    const outputDir = path2.resolve(cwd, resolvedOptions.output || generator.defaultPath);
-    const resolvedCwd = path2.resolve(cwd);
-    if (!outputDir.startsWith(resolvedCwd + path2.sep) && outputDir !== resolvedCwd) {
-      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    const target = await resolveGenerateTarget(resolvedOptions);
+    const architecture = generateArchitecture(target.target);
+    const outputDir = path2.resolve(target.target.directory, resolvedOptions.output || generator.defaultPath);
+    if (["page", "api"].includes(resolvedOptions.type) && architecture === "sveltekit") {
+      const routes = path2.join(target.target.directory, "src/routes");
+      if (!outputDir.startsWith(routes + path2.sep) && outputDir !== routes)
+        throw new Error(cliM("cli_generateInvalidRouteOutput"));
     }
+    if (resolvedOptions.type === "api" && architecture === "serv" && resolvedOptions.output)
+      throw new Error(cliM("cli_generateInvalidRouteOutput"));
+    const relativeOutput = path2.relative(target.root, outputDir);
+    if (relativeOutput === ".." || relativeOutput.startsWith(`..${path2.sep}`) || path2.isAbsolute(relativeOutput))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
     const context = createTemplateContext(resolvedOptions.name, {
-      projectName: project?.name
+      projectName: target.target.name
     });
-    spinner.start(`\u751F\u6210 ${generator.description}...`);
-    const files = await generator.generate(context, outputDir);
-    const realCwd = await fse.realpath(resolvedCwd);
-    for (const file of files) {
-      if (!resolvedOptions.force && await fse.pathExists(file.path))
-        throw new Error(cliM("cli_generateExists", { params: { path: file.path } }));
-      let ancestor = file.path;
-      while (!await fse.pathExists(ancestor))
-        ancestor = path2.dirname(ancestor);
-      const realAncestor = await fse.realpath(ancestor);
-      const relative = path2.relative(realCwd, realAncestor);
-      if (relative === ".." || relative.startsWith(`..${path2.sep}`) || path2.isAbsolute(relative))
-        throw new Error(cliM("cli_generateOutsideWorkspace"));
-    }
-    for (const file of files) {
-      await fse.ensureDir(path2.dirname(file.path));
-      await fse.writeFile(file.path, file.content, { encoding: "utf-8", flag: resolvedOptions.force ? "w" : "wx" });
-    }
-    spinner.succeed();
-    core.logger.info("", {});
-    core.logger.info(chalk.green("\u2714 \u751F\u6210\u5B8C\u6210\uFF01"));
-    core.logger.info("", {});
-    core.logger.info("\u521B\u5EFA\u7684\u6587\u4EF6:");
+    spinner.start(cliM("cli_generateProgress", { params: { description: generator.description() } }));
+    const files = resolvedOptions.type === "api" && architecture === "serv" ? await generateServApi(context, target) : await generator.generate(context, outputDir);
+    await writeGeneratedFiles(files, target.root, resolvedOptions.force);
+    spinner.succeed(cliM("cli_generateComplete"));
+    writeCliMessage("");
+    writeCliMessage(cliM("cli_generateFiles"));
     files.forEach((file) => {
-      core.logger.info(chalk.cyan(`  ${path2.relative(cwd, file.path)}`));
+      writeCliMessage(chalk.cyan(`  ${path2.relative(cwd, file.path)}`));
     });
-    core.logger.info("", {});
+    writeCliMessage("");
   } catch (error) {
-    spinner.fail();
-    core.logger.error(chalk.red("\u751F\u6210\u5931\u8D25:"), { error });
+    spinner.fail(cliM("cli_generateFailed"));
+    writeCliError(cliM("cli_generateFailureDetail"), { error });
+    if (error instanceof AggregateError) {
+      for (const cause of error.errors)
+        writeCliError(cliM("cli_generateFailureDetail"), { error: cause });
+    }
     throw error;
   }
 }
@@ -2911,9 +3571,9 @@ async function resolveGenerateOptions(options) {
     questions.push({
       type: "select",
       name: "type",
-      message: "\u9009\u62E9\u751F\u6210\u7C7B\u578B:",
+      message: cliM("cli_generateTypePrompt"),
       choices: Object.entries(GENERATORS).map(([key, value]) => ({
-        title: `${key} - ${value.description}`,
+        title: `${key} - ${value.description()}`,
         value: key
       }))
     });
@@ -2922,24 +3582,102 @@ async function resolveGenerateOptions(options) {
     questions.push({
       type: "text",
       name: "name",
-      message: "\u540D\u79F0:",
+      message: cliM("cli_generateNamePrompt"),
       validate: (value) => {
         if (!value.trim())
-          return "\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A";
+          return cliM("cli_generateNameRequired");
         return true;
       }
     });
   }
-  const answers = questions.length > 0 ? await prompts(questions) : {};
+  const answers = questions.length > 0 ? await prompts(questions, { onCancel: () => {
+    throw new Error(cliM("cli_generateCancelled"));
+  } }) : {};
+  const type = options.type || ("type" in answers ? answers.type : void 0);
+  const name = options.name || ("name" in answers ? answers.name : void 0);
+  if (!isGeneratorType(type))
+    throw new Error(cliM("cli_generateUnknownType", { params: { type: String(type ?? "") } }));
+  if (typeof name !== "string" || !name.trim())
+    throw new Error(cliM("cli_generateNameRequired"));
   return {
-    type: options.type || answers.type,
-    name: options.name || answers.name,
+    type,
+    name,
     output: options.output ?? "",
     force: options.force ?? false,
     verbose: options.verbose ?? false,
-    cwd: options.cwd ?? "."
+    cwd: options.cwd ?? ".",
+    workspace: options.workspace ?? ""
   };
 }
+function isGeneratorType(value) {
+  return typeof value === "string" && Object.hasOwn(GENERATORS, value);
+}
+async function writeGeneratedFiles(files, root, force) {
+  if (new Set(files.map((file) => path2.resolve(file.path))).size !== files.length)
+    throw new Error(cliM("cli_generateUnsupportedAggregator"));
+  const previous = /* @__PURE__ */ new Map();
+  const stages = /* @__PURE__ */ new Map();
+  const written = [];
+  const failures = [];
+  for (const file of files) {
+    const relativeFile = path2.relative(root, file.path);
+    if (relativeFile === ".." || relativeFile.startsWith(`..${path2.sep}`) || path2.isAbsolute(relativeFile))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    let ancestor = file.path;
+    while (!await fse.pathExists(ancestor))
+      ancestor = path2.dirname(ancestor);
+    const relative2 = path2.relative(root, await fse.realpath(ancestor));
+    if (relative2 === ".." || relative2.startsWith(`..${path2.sep}`) || path2.isAbsolute(relative2))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    const content = await fse.pathExists(file.path) ? await fse.readFile(file.path, "utf8") : void 0;
+    if (file.previousContent !== void 0 ? content !== file.previousContent : content !== void 0 && !force)
+      throw new Error(cliM("cli_generateExists", { params: { path: file.path } }));
+    previous.set(file.path, content);
+  }
+  try {
+    for (const file of files) {
+      await fse.ensureDir(path2.dirname(file.path));
+      const stage = path2.join(path2.dirname(file.path), `.${path2.basename(file.path)}.${randomUUID()}.tmp`);
+      stages.set(file.path, stage);
+      await fse.writeFile(stage, file.content, { encoding: "utf8", flag: "wx" });
+    }
+    for (const file of files) {
+      const current = await fse.pathExists(file.path) ? await fse.readFile(file.path, "utf8") : void 0;
+      if (current !== previous.get(file.path))
+        throw new Error(cliM("cli_generateExists", { params: { path: file.path } }));
+      await fse.rename(stages.get(file.path), file.path);
+      written.push(file);
+    }
+  } catch (error) {
+    failures.push(error);
+    for (const file of written.reverse()) {
+      try {
+        if (await fse.readFile(file.path, "utf8") !== file.content)
+          throw new Error(cliM("cli_generateExists", { params: { path: file.path } }));
+        const original = previous.get(file.path);
+        if (original === void 0)
+          await fse.unlink(file.path);
+        else
+          await fse.writeFile(file.path, original, "utf8");
+      } catch (rollbackError) {
+        failures.push(rollbackError);
+      }
+    }
+  } finally {
+    for (const stage of stages.values()) {
+      try {
+        await fse.unlink(stage);
+      } catch (error) {
+        if (!error || typeof error !== "object" || !("code" in error) || error.code !== "ENOENT")
+          failures.push(error);
+      }
+    }
+  }
+  if (failures.length > 1)
+    throw new AggregateError(failures, cliM("cli_generateRollbackFailed"));
+  if (failures.length === 1)
+    throw failures[0];
+}
 async function generatePage(context, outputDir) {
   const files = [];
   const pageDir = path2.join(outputDir, context.kebabCase);
@@ -3116,19 +3854,45 @@ export function down() {
   return files;
 }
 var MODULE_CONFIG_MAP = {
-  "@h-ai/core": { configKey: "core", label: "Core" },
-  "@h-ai/serv": { configKey: "serv", label: "Service" },
-  "@h-ai/reldb": { configKey: "db", label: "Database" },
-  "@h-ai/cache": { configKey: "cache", label: "Cache" },
-  "@h-ai/iam": { configKey: "iam", label: "IAM" },
-  "@h-ai/storage": { configKey: "storage", label: "Storage" },
-  "@h-ai/ai": { configKey: "ai", label: "AI" },
-  "@h-ai/vecdb": { configKey: "vecdb", label: "VecDB" },
-  "@h-ai/reach": { configKey: "reach", label: "Reach" },
-  "@h-ai/scheduler": { configKey: "scheduler", label: "Scheduler" },
-  "@h-ai/audit": { configKey: "audit", label: "Audit" },
-  "@h-ai/payment": { configKey: "payment", label: "Payment" },
-  "@h-ai/deploy": { configKey: "deploy", label: "Deploy" }
+  "@h-ai/core": { configKey: "core", get label() {
+    return cliM("cli_coreLabel");
+  } },
+  "@h-ai/serv": { configKey: "serv", get label() {
+    return cliM("cli_serviceLabel");
+  } },
+  "@h-ai/reldb": { configKey: "db", get label() {
+    return cliM("cli_featureDbName");
+  } },
+  "@h-ai/cache": { configKey: "cache", get label() {
+    return cliM("cli_featureCacheName");
+  } },
+  "@h-ai/iam": { configKey: "iam", get label() {
+    return cliM("cli_featureIamName");
+  } },
+  "@h-ai/storage": { configKey: "storage", get label() {
+    return cliM("cli_featureStorageName");
+  } },
+  "@h-ai/ai": { configKey: "ai", get label() {
+    return cliM("cli_featureAiName");
+  } },
+  "@h-ai/vecdb": { configKey: "vecdb", get label() {
+    return cliM("cli_featureVecdbName");
+  } },
+  "@h-ai/reach": { configKey: "reach", get label() {
+    return cliM("cli_featureReachName");
+  } },
+  "@h-ai/scheduler": { configKey: "scheduler", get label() {
+    return cliM("cli_featureSchedulerName");
+  } },
+  "@h-ai/audit": { configKey: "audit", get label() {
+    return cliM("cli_featureAuditName");
+  } },
+  "@h-ai/payment": { configKey: "payment", get label() {
+    return cliM("cli_featurePaymentName");
+  } },
+  "@h-ai/deploy": { configKey: "deploy", get label() {
+    return cliM("cli_featureDeployName");
+  } }
 };
 async function validateProject(cwd) {
   const project = await detectProject(cwd);
@@ -3154,49 +3918,49 @@ async function initProject(options) {
   const spinner = ora();
   const cwd = options.cwd ?? ".";
   try {
-    spinner.start("\u68C0\u6D4B\u9879\u76EE...");
+    spinner.start(cliM("cli_initDetecting"));
     const result = await validateProject(cwd);
     if (!result) {
-      spinner.fail(chalk.red("\u672A\u68C0\u6D4B\u5230\u9879\u76EE\uFF08\u627E\u4E0D\u5230 package.json\uFF09"));
+      spinner.fail(chalk.red(cliM("cli_projectNotFound")));
       return;
     }
     const { project, existing, missing } = result;
-    spinner.succeed(`\u68C0\u6D4B\u5230\u9879\u76EE: ${chalk.cyan(project.name)}`);
+    spinner.succeed(cliM("cli_initDetected", { params: { name: chalk.cyan(project.name) } }));
     if (project.isHaiProject) {
-      const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-TSYEQTCY.js');
+      const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-US5CCAJ4.js');
       const generatedFiles = await generateProjectAiSupport(cwd, resolveSkillNamesForPackages(project.haiPackages), {
         overwriteSkills: false,
         overwriteBridgeFiles: false
       });
       for (const generatedFile of generatedFiles) {
-        core.logger.info(chalk.gray(`  + ${generatedFile}`));
+        writeCliMessage(chalk.gray(`  + ${generatedFile}`));
       }
     }
-    core.logger.info("");
-    core.logger.info(chalk.bold("\u9879\u76EE\u72B6\u6001:"));
-    core.logger.info(`  \u540D\u79F0: ${chalk.cyan(project.name)}`);
-    core.logger.info(`  \u7248\u672C: ${project.version}`);
-    core.logger.info(`  \u5DF2\u5B89\u88C5\u6A21\u5757: ${project.haiPackages.length > 0 ? project.haiPackages.map((p) => chalk.cyan(p)).join(", ") : chalk.gray("\u65E0")}`);
-    core.logger.info("");
+    writeCliMessage("");
+    writeCliMessage(chalk.bold(cliM("cli_initStatus")));
+    writeCliMessage(cliM("cli_initName", { params: { name: chalk.cyan(project.name) } }));
+    writeCliMessage(cliM("cli_initVersion", { params: { version: project.version } }));
+    writeCliMessage(cliM("cli_initModules", { params: { modules: project.haiPackages.length > 0 ? project.haiPackages.map((p) => chalk.cyan(p)).join(", ") : chalk.gray(cliM("cli_none")) } }));
+    writeCliMessage("");
     if (existing.length > 0) {
-      core.logger.info(chalk.bold("\u5DF2\u6709\u914D\u7F6E:"));
+      writeCliMessage(chalk.bold(cliM("cli_initExisting")));
       for (const key of existing) {
-        core.logger.info(chalk.green(`  \u2714 config/_${key}.yml`));
+        writeCliMessage(chalk.green(`  \u2714 config/_${key}.yml`));
       }
     }
     if (missing.length === 0 && !options.force) {
-      core.logger.info("");
-      core.logger.info(chalk.green("\u2714 \u6240\u6709\u914D\u7F6E\u6587\u4EF6\u5DF2\u5C31\u7EEA\uFF01"));
+      writeCliMessage("");
+      writeCliMessage(chalk.green(cliM("cli_initReady")));
       return;
     }
     if (missing.length > 0) {
-      core.logger.info("");
-      core.logger.info(chalk.bold("\u7F3A\u5931\u914D\u7F6E:"));
+      writeCliMessage("");
+      writeCliMessage(chalk.bold(cliM("cli_initMissing")));
       for (const item of missing) {
-        core.logger.info(chalk.yellow(`  \u2718 config/_${item.configKey}.yml (${item.label})`));
+        writeCliMessage(chalk.yellow(`  \u2718 config/_${item.configKey}.yml (${item.label})`));
       }
-      core.logger.info("");
-      spinner.start("\u751F\u6210\u7F3A\u5931\u914D\u7F6E\u6587\u4EF6...");
+      writeCliMessage("");
+      spinner.start(cliM("cli_initGenerating"));
       let generated = 0;
       for (const item of missing) {
         const configPath = path2.join(cwd, "config", `_${item.configKey}.yml`);
@@ -3204,11 +3968,11 @@ async function initProject(options) {
         await writeFile(configPath, content);
         generated++;
       }
-      spinner.succeed(`\u5DF2\u751F\u6210 ${generated} \u4E2A\u914D\u7F6E\u6587\u4EF6`);
+      spinner.succeed(cliM("cli_initGenerated", { params: { count: generated } }));
     }
     if (options.force && existing.length > 0) {
-      core.logger.info("");
-      spinner.start("\u5F3A\u5236\u91CD\u65B0\u751F\u6210\u6240\u6709\u914D\u7F6E\u6587\u4EF6...");
+      writeCliMessage("");
+      spinner.start(cliM("cli_initRegenerating"));
       let regenerated = 0;
       for (const pkg of project.haiPackages) {
         const mapping = MODULE_CONFIG_MAP[pkg];
@@ -3219,25 +3983,25 @@ async function initProject(options) {
         await writeFile(configPath, content);
         regenerated++;
       }
-      spinner.succeed(`\u5DF2\u91CD\u65B0\u751F\u6210 ${regenerated} \u4E2A\u914D\u7F6E\u6587\u4EF6`);
+      spinner.succeed(cliM("cli_initRegenerated", { params: { count: regenerated } }));
     }
     const coreConfigPath = path2.join(cwd, "config", "_core.yml");
     if (!await fileExists(coreConfigPath)) {
-      spinner.start("\u751F\u6210\u6838\u5FC3\u914D\u7F6E config/_core.yml...");
+      spinner.start(cliM("cli_initCore"));
       const content = generateConfigFile("core");
       await writeFile(coreConfigPath, content);
       spinner.succeed();
     }
-    core.logger.info("");
-    core.logger.info(chalk.green("\u2714 \u9879\u76EE\u914D\u7F6E\u521D\u59CB\u5316\u5B8C\u6210\uFF01"));
-    core.logger.info("");
-    core.logger.info(chalk.gray("\u4E0B\u4E00\u6B65:"));
-    core.logger.info(chalk.gray("  1. \u7F16\u8F91 config/ \u4E2D\u7684\u914D\u7F6E\u6587\u4EF6"));
-    core.logger.info(chalk.gray("  2. \u8FD0\u884C pnpm dev \u542F\u52A8\u5F00\u53D1\u670D\u52A1"));
-    core.logger.info("");
+    writeCliMessage("");
+    writeCliMessage(chalk.green(cliM("cli_initSuccess")));
+    writeCliMessage("");
+    writeCliMessage(chalk.gray(cliM("cli_nextSteps")));
+    writeCliMessage(chalk.gray(cliM("cli_initEditConfig")));
+    writeCliMessage(chalk.gray(cliM("cli_initStartDev")));
+    writeCliMessage("");
   } catch (error) {
     spinner.fail();
-    core.logger.error(chalk.red("\u521D\u59CB\u5316\u5931\u8D25:"), { error });
+    writeCliError(chalk.red(cliM("cli_initFailed")), { error });
     throw error;
   }
 }
@@ -3245,9 +4009,9 @@ async function initProject(options) {
 // src/cli-main.ts
 var VERSION = getCliVersion();
 var cli = cac("hai");
-cli.option("-v, --verbose", "\u663E\u793A\u8BE6\u7EC6\u8F93\u51FA");
-cli.option("-C, --cwd <path>", "\u5DE5\u4F5C\u76EE\u5F55");
-cli.command("create [name]", "\u521B\u5EFA\u65B0\u7684 hai \u9879\u76EE").option("--type <type>", "\u5E94\u7528\u7C7B\u578B (admin, website, h5, api, mobile-app, fullstack)").option("--frontends <targets>", "\u524D\u540E\u7AEF\u5206\u79BB\u5DE5\u7A0B\u524D\u7AEF\u76EE\u6807 (\u9017\u53F7\u5206\u9694: web,app,miniapp,desktop)").option("-t, --template <template>", "\u9879\u76EE\u6A21\u677F (minimal, default, full, custom)").option("-f, --features <features>", "\u529F\u80FD\u5217\u8868 (\u9017\u53F7\u5206\u9694: iam,db,cache,ai,storage,crypto)").option("--examples", "\u6DFB\u52A0\u793A\u4F8B\u4EE3\u7801").option("--no-examples", "\u4E0D\u6DFB\u52A0\u793A\u4F8B\u4EE3\u7801").option("--no-install", "\u4E0D\u5B89\u88C5\u4F9D\u8D56").option("-p, --package-manager <pm>", "\u5305\u7BA1\u7406\u5668 (pnpm, npm, yarn)").option("--no-git", "\u4E0D\u521D\u59CB\u5316 Git").option("--git-remote <url>", "Git \u8FDC\u7A0B\u4ED3\u5E93\u5730\u5740").option("-y, --yes", "\u4F7F\u7528\u9ED8\u8BA4\u914D\u7F6E\uFF0C\u8DF3\u8FC7\u4EA4\u4E92").action(async (name, options) => {
+cli.option("-v, --verbose", cliM("cli_help_verbose"));
+cli.option("-C, --cwd <path>", cliM("cli_help_cwd"));
+cli.command("create [name]", cliM("cli_help_create")).option("--type <type>", cliM("cli_help_appType")).option("--frontends <targets>", cliM("cli_help_frontends")).option("-t, --template <template>", cliM("cli_help_template")).option("-f, --features <features>", cliM("cli_help_features")).option("--examples", cliM("cli_help_examples")).option("--no-examples", cliM("cli_help_noExamples")).option("--no-install", cliM("cli_help_noInstall")).option("--no-deploy", cliM("cli_help_noDeploy")).option("-p, --package-manager <pm>", cliM("cli_help_packageManager")).option("--no-git", cliM("cli_help_noGit")).option("--git-remote <url>", cliM("cli_help_gitRemote")).option("-y, --yes", cliM("cli_help_yes")).action(async (name, options) => {
   try {
     const features = typeof options.features === "string" ? options.features.split(",").map((f) => f.trim()) : void 0;
     const frontends = typeof options.frontends === "string" ? options.frontends.split(",").map((f) => f.trim()).filter(Boolean) : void 0;
@@ -3257,6 +4021,7 @@ cli.command("create [name]", "\u521B\u5EFA\u65B0\u7684 hai \u9879\u76EE").option
       frontends,
       template: options.template,
       features,
+      deploy: options.deploy,
       examples: options.examples,
       install: options.install,
       packageManager: options.packageManager,
@@ -3270,7 +4035,7 @@ cli.command("create [name]", "\u521B\u5EFA\u65B0\u7684 hai \u9879\u76EE").option
     process4.exitCode = 1;
   }
 });
-cli.command("add [module]", "\u5411\u73B0\u6709\u9879\u76EE\u6DFB\u52A0\u6A21\u5757").option("--no-install", "\u4E0D\u5B89\u88C5\u4F9D\u8D56").action(async (module, options) => {
+cli.command("add [module]", cliM("cli_help_add")).option("--no-install", cliM("cli_help_noInstall")).action(async (module, options) => {
   try {
     await addModule({
       module,
@@ -3282,7 +4047,7 @@ cli.command("add [module]", "\u5411\u73B0\u6709\u9879\u76EE\u6DFB\u52A0\u6A21\u5
     process4.exit(1);
   }
 });
-cli.command("init", "\u521D\u59CB\u5316/\u6821\u9A8C\u9879\u76EE\u914D\u7F6E").option("-f, --force", "\u5F3A\u5236\u91CD\u65B0\u751F\u6210\u914D\u7F6E").action(async (options) => {
+cli.command("init", cliM("cli_help_init")).option("-f, --force", cliM("cli_help_forceConfig")).action(async (options) => {
   try {
     await initProject({
       force: options.force,
@@ -3293,12 +4058,13 @@ cli.command("init", "\u521D\u59CB\u5316/\u6821\u9A8C\u9879\u76EE\u914D\u7F6E").o
     process4.exit(1);
   }
 });
-cli.command("generate [type] [name]", "\u751F\u6210\u4EE3\u7801").alias("g").option("-o, --output <path>", "\u8F93\u51FA\u8DEF\u5F84").option("-f, --force", "\u8986\u76D6\u73B0\u6709\u6587\u4EF6").action(async (type, name, options) => {
+cli.command("generate [type] [name]", cliM("cli_help_generate")).option("-w, --workspace <name>", cliM("cli_help_workspace")).alias("g").option("-o, --output <path>", cliM("cli_help_output")).option("-f, --force", cliM("cli_help_force")).action(async (type, name, options) => {
   try {
     await generate({
       type,
       name: name ?? "",
       output: options.output,
+      ...options.workspace ? { workspace: String(options.workspace) } : {},
       force: options.force,
       verbose: options.verbose,
       cwd: options.cwd
@@ -3307,7 +4073,7 @@ cli.command("generate [type] [name]", "\u751F\u6210\u4EE3\u7801").alias("g").opt
     process4.exit(1);
   }
 });
-cli.command("build", "\u6784\u5EFA\u6E90\u7801\u3001Docker \u955C\u50CF\u6216 Tauri \u5B89\u88C5\u5305\uFF08\u4E0D\u533A\u5206\u90E8\u7F72\u73AF\u5883\uFF09").option("--target <target>", "\u4EA7\u7269\u7C7B\u578B\uFF1Acompile\uFF08\u9ED8\u8BA4\uFF09/ docker / desktop").option("--runtime <runtime>", "\u672C\u5730\u5BB9\u5668\u5F15\u64CE\uFF1Aauto\uFF08\u4F18\u5148 Podman\uFF09/ podman / docker").option("--network <network>", "\u5BB9\u5668\u6784\u5EFA\u7F51\u7EDC\uFF08\u9ED8\u8BA4\u5F15\u64CE\u8BBE\u7F6E\uFF09\uFF0C\u4F8B\u5982 rootless Podman \u7684 pasta").option("--platform <platform>", "Tauri \u76EE\u6807\u7CFB\u7EDF\uFF1Awindows / linux / macos\uFF08\u5728\u5BF9\u5E94\u7CFB\u7EDF\u6784\u5EFA\uFF09").option("--arch <arch>", "Tauri \u76EE\u6807\u67B6\u6784\uFF1Ax64 / arm64").option("--sqlite-prebuild-mirror <url>", "SQLite \u9884\u7F16\u8BD1\u4E8C\u8FDB\u5236\u955C\u50CF\u6839\u5730\u5740").option("--no-http-proxy", "Podman \u6784\u5EFA\u4E0D\u7EE7\u627F\u672C\u673A\u4EE3\u7406").action(async (options) => {
+cli.command("build", cliM("cli_help_build")).option("--target <target>", cliM("cli_help_target")).option("--images <names>", cliM("cli_help_images")).option("--runtime <runtime>", cliM("cli_help_buildRuntime")).option("--network <network>", cliM("cli_help_buildNetwork")).option("--platform <platform>", cliM("cli_help_platform")).option("--arch <arch>", cliM("cli_help_arch")).option("--sqlite-prebuild-mirror <url>", cliM("cli_help_sqliteMirror")).option("--no-http-proxy", cliM("cli_help_noHttpProxy")).action(async (options) => {
   try {
     await buildCommand(options);
   } catch (error) {
@@ -3315,7 +4081,7 @@ cli.command("build", "\u6784\u5EFA\u6E90\u7801\u3001Docker \u955C\u50CF\u6216 Ta
     process4.exitCode = 1;
   }
 });
-cli.command("deploy [appDir]", "\u90E8\u7F72\u5E94\u7528\u5230\u4E91\u5E73\u53F0").option("--env <environment>", "\u90E8\u7F72\u73AF\u5883\uFF08test / prod \u7B49\uFF0C\u5FC5\u987B\u5B58\u5728\u5BF9\u5E94\u73AF\u5883\u6587\u4EF6\uFF09").option("--env-dir <path>", "\u73AF\u5883\u6587\u4EF6\u6240\u5728\u76EE\u5F55\uFF08\u9ED8\u8BA4\u81EA\u52A8\u67E5\u627E\uFF09").option("-y, --yes", "\u6309\u5F53\u524D\u540E\u7AEF\u9ED8\u8BA4\u914D\u7F6E\u90E8\u7F72\uFF0C\u76EE\u6807\u73AF\u5883\u5DF2\u6709\u5B8C\u6574\u914D\u7F6E\u65F6\u4FDD\u6301\u4E0D\u53D8").option("--project-name <name>", "\u9879\u76EE\u540D\u79F0\uFF08\u9ED8\u8BA4\u670D\u52A1\u5305\u540D\uFF0C\u7F3A\u5931\u65F6\u4E3A\u76EE\u5F55\u540D\uFF1B\u9644\u52A0\u73AF\u5883\u540E\u7F00\uFF09").option("--skip-middleware", "\u914D\u7F6E\u5DF2\u5B8C\u5907\uFF0C\u8DF3\u8FC7\u5168\u90E8\u4E2D\u95F4\u4EF6\u5904\u7406\uFF0C\u76F4\u63A5\u90E8\u7F72").option("--artifact-dir <path>", "\u5DF2\u6709\u955C\u50CF\u6784\u5EFA\u4EA7\u7269\u76EE\u5F55\uFF08\u542B manifest.json\uFF09").option("--bundle-only", "\u53EA\u751F\u6210 Compose \u90E8\u7F72 tar\uFF0C\u624B\u5DE5\u642C\u8FD0\uFF1B\u4E0D\u8FDE\u63A5 SSH").option("--output <path>", "\u90E8\u7F72 tar \u8F93\u51FA\u8DEF\u5F84\uFF0C\u81EA\u52A8\u8865\u5E94\u7528\u7248\u672C\u540E\u7F00").action(async (appDir, options) => {
+cli.command("deploy [appDir]", cliM("cli_help_deploy")).option("--env <environment>", cliM("cli_help_environment")).option("--env-dir <path>", cliM("cli_help_envDir")).option("-y, --yes", cliM("cli_help_deployYes")).option("--project-name <name>", cliM("cli_help_projectName")).option("--skip-middleware", cliM("cli_help_skipMiddleware")).option("--artifact-dir <path>", cliM("cli_help_artifactDir")).option("--services <names>", cliM("cli_help_services")).option("--build", cliM("cli_help_deployBuild")).option("--network <network>", cliM("cli_help_deployNetwork")).option("--sqlite-prebuild-mirror <url>", cliM("cli_help_deploySqliteMirror")).option("--no-http-proxy", cliM("cli_help_deployNoProxy")).option("--runtime <runtime>", cliM("cli_help_deployRuntime")).option("--bundle-only", cliM("cli_help_bundleOnly")).option("--output <path>", cliM("cli_help_bundleOutput")).action(async (appDir, options) => {
   try {
     await deployCommand({
       appDir,
@@ -3325,26 +4091,32 @@ cli.command("deploy [appDir]", "\u90E8\u7F72\u5E94\u7528\u5230\u4E91\u5E73\u53F0
       projectName: options.projectName,
       skipMiddleware: options.skipMiddleware,
       artifactDir: options.artifactDir,
+      services: options.services,
+      build: options.build,
+      network: options.network,
+      sqlitePrebuildMirror: options.sqlitePrebuildMirror,
+      httpProxy: options.httpProxy,
+      runtime: options.runtime,
       bundleOnly: options.bundleOnly,
       output: options.output,
       verbose: options.verbose,
       cwd: options.cwd
     });
   } catch {
-    process4.exit(1);
+    process4.exitCode = 1;
   }
 });
-cli.command("g:page <name>", "\u751F\u6210\u9875\u9762").action(async (name, options) => {
-  await generate({ type: "page", name, cwd: options.cwd });
+cli.command("g:page <name>", cliM("cli_help_generatePage")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {
+  await generate({ type: "page", name, cwd: options.cwd, ...options.workspace ? { workspace: String(options.workspace) } : {} });
 });
-cli.command("g:component <name>", "\u751F\u6210\u7EC4\u4EF6").action(async (name, options) => {
-  await generate({ type: "component", name, cwd: options.cwd });
+cli.command("g:component <name>", cliM("cli_help_generateComponent")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {
+  await generate({ type: "component", name, cwd: options.cwd, ...options.workspace ? { workspace: String(options.workspace) } : {} });
 });
-cli.command("g:api <name>", "\u751F\u6210 API").action(async (name, options) => {
-  await generate({ type: "api", name, cwd: options.cwd });
+cli.command("g:api <name>", cliM("cli_help_generateApi")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {
+  await generate({ type: "api", name, cwd: options.cwd, ...options.workspace ? { workspace: String(options.workspace) } : {} });
 });
-cli.command("g:model <name>", "\u751F\u6210\u6570\u636E\u6A21\u578B").action(async (name, options) => {
-  await generate({ type: "model", name, cwd: options.cwd });
+cli.command("g:model <name>", cliM("cli_help_generateModel")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {
+  await generate({ type: "model", name, cwd: options.cwd, ...options.workspace ? { workspace: String(options.workspace) } : {} });
 });
 cli.version(VERSION, "-V, --version");
 cli.help();