@h-ai/cli 0.1.0-alpha.67 → 0.1.0-alpha.68

package/dist/index.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
-import { generateConfigFile, runtimeEnvironmentVariables, renderEnvironment, moduleEnvironmentVariables, parameterizeConfig } from './chunk-7DSURTJ4.js';
-import { cliM } from './chunk-AOQ4N657.js';
+import { generateConfigFile, runtimeEnvironmentVariables, renderEnvironment, generateProductionEnvironment, moduleEnvironmentVariables, parameterizeConfig } from './chunk-ZFNBUF77.js';
+import { cliM } from './chunk-MBPB37FR.js';
+import { external_exports } from './chunk-FI56GONY.js';
 import './chunk-2H7UOFLK.js';
 import process4 from 'process';
 import { cac } from 'cac';
@@ -10,15 +11,17 @@ import { fileURLToPath, pathToFileURL } from 'url';
 import { wrapAnsi } from 'fast-wrap-ansi';
 import fse from 'fs-extra';
 import Handlebars2 from 'handlebars';
+import { parseEnv } from 'util';
 import ora from 'ora';
 import prompts from 'prompts';
 import { Buffer } from 'buffer';
 import { execSync, execFileSync, spawn } from 'child_process';
-import { randomBytes, createHash } from 'crypto';
-import { stringify, parseDocument, isScalar, isMap } from 'yaml';
+import { randomBytes, createECDH, createHash, randomUUID } from 'crypto';
+import { stringify, parse, parseDocument, isScalar, isMap } from 'yaml';
 import { readFileSync, existsSync, mkdirSync, mkdtempSync, createReadStream, writeFileSync, renameSync, rmSync, readdirSync, copyFileSync } from 'fs';
 import { createRequire } from 'module';
 import { core } from '@h-ai/core';
+import { glob } from 'fs/promises';
 
 var CAMEL_CASE_SEPARATOR_REGEX = /[-_\s]+(.)?/g;
 var LEADING_CHAR_REGEX = /^./;
@@ -429,6 +432,8 @@ function buildAppHaiCatalogPackages(options) {
   const packageNames = ["@h-ai/cli"];
   if (options.isSvelteOnlyApp) {
     packageNames.push("@h-ai/api-client", "@h-ai/api-contract", "@h-ai/capacitor", "@h-ai/ui");
+    if (options.featureMap.crypto)
+      packageNames.push("@h-ai/crypto");
     return pickCatalogPackages(packageNames, HAI_CATALOG_PACKAGES);
   }
   packageNames.push("@h-ai/core", "@h-ai/kit");
@@ -470,7 +475,7 @@ function buildAppHaiCatalogPackages(options) {
     packageNames.push("@h-ai/capacitor");
   return pickCatalogPackages(packageNames, HAI_CATALOG_PACKAGES);
 }
-function buildFullstackCatalogPackages(frontends, deploy = false) {
+function buildFullstackCatalogPackages(frontends, deploy = false, features = {}) {
   const packageNames = [
     ...FULLSTACK_ROOT_CATALOG_PACKAGE_NAMES,
     "@h-ai/cli",
@@ -486,6 +491,10 @@ function buildFullstackCatalogPackages(frontends, deploy = false) {
     packageNames.push(...FULLSTACK_DESKTOP_CATALOG_PACKAGE_NAMES);
   if (deploy)
     packageNames.push("@h-ai/deploy");
+  if (features.ai)
+    packageNames.push("@h-ai/ai");
+  if (features.vecdb)
+    packageNames.push("@h-ai/vecdb");
   return pickCatalogPackages(packageNames, FULLSTACK_CATALOG_PACKAGES);
 }
 var FEATURE_ROUTE_DIRS = {
@@ -591,8 +600,12 @@ function buildTemplateContext(options) {
     featureMap.cache = true;
     featureMap.crypto = true;
   }
-  if (featureMap.audit || featureMap.scheduler || featureMap.payment) {
+  if (featureMap.audit || featureMap.scheduler || featureMap.payment || featureMap.crypto) {
+    featureMap.db = true;
+  }
+  if (featureMap.ai) {
     featureMap.db = true;
+    featureMap.vecdb = true;
   }
   const isApi = options.appType === "api";
   const isFullstack = options.appType === "fullstack";
@@ -603,7 +616,7 @@ function buildTemplateContext(options) {
   const selectedFrontends = options.frontends ?? DEFAULT_FULLSTACK_FRONTENDS;
   let haiCatalogPackages;
   if (isFullstack) {
-    haiCatalogPackages = buildFullstackCatalogPackages(selectedFrontends, featureMap.deploy);
+    haiCatalogPackages = buildFullstackCatalogPackages(selectedFrontends, featureMap.deploy, featureMap);
   } else if (isApi) {
     haiCatalogPackages = buildApiWorkspaceCatalogPackages(featureMap);
   } else {
@@ -695,9 +708,8 @@ function buildFullstackTemplateContext(projectName, frontendsInput, moduleConfig
 function resolveI18nContext(moduleConfigs) {
   const coreLocale = moduleConfigs?.core?.defaultLocale ?? "zh-CN";
   const baseLocale = moduleConfigs?.fullstack?.i18n?.baseLocale ?? coreLocale;
-  const fallbackLocale = baseLocale === "en-US" ? "zh-CN" : "en-US";
   const requested = moduleConfigs?.fullstack?.i18n?.locales;
-  const locales = requested && requested.length > 0 ? [...new Set(requested)] : [baseLocale, fallbackLocale];
+  const locales = requested && requested.length > 0 ? [...new Set(requested)] : [.../* @__PURE__ */ new Set([baseLocale, "zh-CN", "en-US", "ja-JP"])];
   if (!locales.includes(baseLocale)) {
     locales.unshift(baseLocale);
   }
@@ -779,6 +791,7 @@ async function generateFromTemplates(projectPath, context) {
   }
   await renderDynamicFiles(root, projectPath, context);
   await fse.copy(path2.join(root, "shared", "run-e2e.mjs"), path2.join(projectPath, "scripts", "run-e2e.mjs"));
+  await fse.copy(path2.join(root, "shared", "e2e-env.ts"), path2.join(projectPath, "scripts", "e2e-env.ts"));
   await fse.ensureDir(path2.join(projectPath, "images", "dependencies"));
   await fse.writeFile(path2.join(projectPath, "images", "dependencies", ".gitkeep"), "");
   await fse.copy(path2.join(root, "shared", ".gitattributes"), path2.join(projectPath, ".gitattributes"));
@@ -794,6 +807,9 @@ async function generateFromTemplates(projectPath, context) {
     const i18nDir = path2.join(root, "i18n");
     if (await fse.pathExists(i18nDir)) {
       await fse.copy(i18nDir, projectPath, { overwrite: true });
+      const settingsPath = path2.join(projectPath, "project.inlang", "settings.json");
+      const settings = await fse.readJson(settingsPath);
+      await fse.writeJson(settingsPath, { ...settings, baseLocale: context.defaultLocale }, { spaces: 2 });
     }
   }
   if (includeBaseTemplate) {
@@ -921,136 +937,242 @@ var RE_HTTPS_URL = /^https:\/\/.+/;
 var RE_GIT_SSH_URL = /^git@.+:.+/;
 var APP_TYPES = {
   "admin": {
-    name: "\u7BA1\u7406\u540E\u53F0",
-    description: "\u4F01\u4E1A\u7EA7\u7BA1\u7406\u7CFB\u7EDF\uFF0C\u542B IAM\u3001\u6570\u636E\u5E93\u3001\u5B8C\u6574 UI",
+    get name() {
+      return cliM("cli_appAdminName");
+    },
+    get description() {
+      return cliM("cli_appAdminDescription");
+    },
     defaultFeatures: ["iam", "db", "cache", "crypto"]
   },
   "website": {
-    name: "\u4F01\u4E1A\u5B98\u7F51",
-    description: "SSR/SSG \u4F01\u4E1A\u5B98\u7F51\uFF0CSEO \u53CB\u597D\u3001\u54CD\u5E94\u5F0F\u5E03\u5C40",
+    get name() {
+      return cliM("cli_appWebsiteName");
+    },
+    get description() {
+      return cliM("cli_appWebsiteDescription");
+    },
     defaultFeatures: ["db", "cache"]
   },
   "h5": {
-    name: "H5 \u5E94\u7528",
-    description: "\u79FB\u52A8\u7AEF H5 \u5E94\u7528\uFF0C\u89E6\u6478\u4F18\u5316\u3001PWA \u652F\u6301",
+    get name() {
+      return cliM("cli_appH5Name");
+    },
+    get description() {
+      return cliM("cli_appH5Description");
+    },
     defaultFeatures: ["db", "cache"]
   },
   "api": {
-    name: "API \u670D\u52A1",
-    description: "typed API workspace\uFF0C\u542B contract + service \u53CC\u5DE5\u7A0B\u3001\u65E0 UI",
+    get name() {
+      return cliM("cli_appApiName");
+    },
+    get description() {
+      return cliM("cli_appApiDescription");
+    },
     defaultFeatures: ["db", "cache"]
   },
   "mobile-app": {
-    name: "\u79FB\u52A8\u5E94\u7528",
-    description: "\u79FB\u52A8\u7AEF\u5E94\u7528\uFF08Capacitor + Svelte 5 + Vite\uFF09\uFF0C\u53EF\u6253\u5305\u4E3A Android/iOS",
+    get name() {
+      return cliM("cli_appMobileName");
+    },
+    get description() {
+      return cliM("cli_appMobileDescription");
+    },
     defaultFeatures: ["api-client", "capacitor"]
   },
   "fullstack": {
-    name: "\u524D\u540E\u7AEF\u5206\u79BB\u5DE5\u7A0B",
-    description: "\u591A\u7AEF mini \u7BA1\u7406\u7CFB\u7EDF\uFF0C\u5305\u542B\u7528\u6237\u3001\u89D2\u8272\u3001\u5BA1\u8BA1\u3001\u4E2A\u4EBA\u8BBE\u7F6E\u4E0E\u53CC\u5411\u4F20\u8F93\u52A0\u5BC6",
+    get name() {
+      return cliM("cli_appFullstackName");
+    },
+    get description() {
+      return cliM("cli_appFullstackDescription");
+    },
     defaultFeatures: ["iam", "db", "cache", "crypto", "storage", "audit"]
   }
 };
 var FRONTEND_TARGETS = {
-  web: { name: "Web", description: "\u6D4F\u89C8\u5668 Web \u5E94\u7528", implemented: true },
-  app: { name: "App", description: "\u79FB\u52A8\u7AEF Capacitor App / H5 \u524D\u7AEF", implemented: true },
-  miniapp: { name: "\u5C0F\u7A0B\u5E8F", description: "\u9884\u7559\u76EE\u6807\uFF0C\u5F53\u524D\u53EA\u751F\u6210\u8BF4\u660E\u5360\u4F4D", implemented: false },
-  desktop: { name: "\u684C\u9762\u7AEF", description: "Tauri \u684C\u9762\u7AEF\u524D\u7AEF\u5DE5\u7A0B", implemented: true }
+  web: { name: "Web", get description() {
+    return cliM("cli_frontendWebDescription");
+  }, implemented: true },
+  app: { name: "App", get description() {
+    return cliM("cli_frontendAppDescription");
+  }, implemented: true },
+  miniapp: {
+    get name() {
+      return cliM("cli_frontendMiniappName");
+    },
+    get description() {
+      return cliM("cli_frontendMiniappDescription");
+    },
+    implemented: false
+  },
+  desktop: {
+    get name() {
+      return cliM("cli_frontendDesktopName");
+    },
+    get description() {
+      return cliM("cli_frontendDesktopDescription");
+    },
+    implemented: true
+  }
 };
 var DEFAULT_FULLSTACK_FRONTENDS2 = ["web", "app", "desktop"];
 var FEATURES = {
   "iam": {
     id: "iam",
-    name: "\u8EAB\u4EFD\u4E0E\u8BBF\u95EE\u7BA1\u7406",
-    description: "Session/JWT \u4F1A\u8BDD\u7BA1\u7406\u3001RBAC \u6743\u9650\u63A7\u5236",
+    get name() {
+      return cliM("cli_featureIamName");
+    },
+    get description() {
+      return cliM("cli_featureIamDescription");
+    },
     packages: ["@h-ai/iam"],
     dependencies: ["crypto", "db", "cache"]
   },
   "db": {
     id: "db",
-    name: "\u6570\u636E\u5E93",
-    description: "\u591A\u6570\u636E\u5E93\u652F\u6301 (SQLite/PostgreSQL/MySQL)",
+    get name() {
+      return cliM("cli_featureDbName");
+    },
+    get description() {
+      return cliM("cli_featureDbDescription");
+    },
     packages: ["@h-ai/reldb"]
   },
   "cache": {
     id: "cache",
-    name: "\u7F13\u5B58",
-    description: "Redis / \u5185\u5B58\u7F13\u5B58",
+    get name() {
+      return cliM("cli_featureCacheName");
+    },
+    get description() {
+      return cliM("cli_featureCacheDescription");
+    },
     packages: ["@h-ai/cache"]
   },
   "ai": {
     id: "ai",
-    name: "AI \u96C6\u6210",
-    description: "LLM \u9002\u914D\u5668\u3001MCP \u534F\u8BAE\u3001\u6280\u80FD\u7CFB\u7EDF\u3001\u6D41\u5F0F\u54CD\u5E94",
-    packages: ["@h-ai/ai"]
+    get name() {
+      return cliM("cli_featureAiName");
+    },
+    get description() {
+      return cliM("cli_featureAiDescription");
+    },
+    packages: ["@h-ai/ai"],
+    dependencies: ["db", "vecdb"]
   },
   "storage": {
     id: "storage",
-    name: "\u6587\u4EF6\u5B58\u50A8",
-    description: "\u672C\u5730\u5B58\u50A8\u3001S3/OSS/COS \u4E91\u5B58\u50A8",
+    get name() {
+      return cliM("cli_featureStorageName");
+    },
+    get description() {
+      return cliM("cli_featureStorageDescription");
+    },
     packages: ["@h-ai/storage"]
   },
   "crypto": {
     id: "crypto",
-    name: "\u52A0\u5BC6\u6A21\u5757",
-    description: "\u56FD\u5BC6 SM2/SM3/SM4\u3001Argon2 \u5BC6\u7801\u54C8\u5E0C",
-    packages: ["@h-ai/crypto"]
+    get name() {
+      return cliM("cli_featureCryptoName");
+    },
+    get description() {
+      return cliM("cli_featureCryptoDescription");
+    },
+    packages: ["@h-ai/crypto"],
+    dependencies: ["db"]
   },
   "audit": {
     id: "audit",
-    name: "\u5BA1\u8BA1\u65E5\u5FD7",
-    description: "\u64CD\u4F5C\u5BA1\u8BA1\u3001\u5B89\u5168\u8FFD\u8E2A",
+    get name() {
+      return cliM("cli_featureAuditName");
+    },
+    get description() {
+      return cliM("cli_featureAuditDescription");
+    },
     packages: ["@h-ai/audit"],
     dependencies: ["db"]
   },
   "reach": {
     id: "reach",
-    name: "\u89E6\u8FBE\u670D\u52A1",
-    description: "\u90AE\u4EF6\u3001\u77ED\u4FE1\u3001\u5FAE\u4FE1\u7B49\u6D88\u606F\u89E6\u8FBE",
+    get name() {
+      return cliM("cli_featureReachName");
+    },
+    get description() {
+      return cliM("cli_featureReachDescription");
+    },
     packages: ["@h-ai/reach"]
   },
   "payment": {
     id: "payment",
-    name: "\u7EDF\u4E00\u652F\u4ED8",
-    description: "\u5FAE\u4FE1\u652F\u4ED8\u3001\u652F\u4ED8\u5B9D\u3001Stripe \u7EDF\u4E00\u63A5\u5165",
+    get name() {
+      return cliM("cli_featurePaymentName");
+    },
+    get description() {
+      return cliM("cli_featurePaymentDescription");
+    },
     packages: ["@h-ai/payment"],
     dependencies: ["db"]
   },
   "vecdb": {
     id: "vecdb",
-    name: "\u5411\u91CF\u6570\u636E\u5E93",
-    description: "\u5411\u91CF\u68C0\u7D22\u4E0E\u76F8\u4F3C\u5EA6\u641C\u7D22\uFF08LanceDB / pgvector / Qdrant\uFF09",
+    get name() {
+      return cliM("cli_featureVecdbName");
+    },
+    get description() {
+      return cliM("cli_featureVecdbDescription");
+    },
     packages: ["@h-ai/vecdb"]
   },
   "datapipe": {
     id: "datapipe",
-    name: "\u6570\u636E\u5904\u7406\u7BA1\u9053",
-    description: "\u6587\u672C\u6E05\u6D17\u3001\u5206\u5757\u4E0E\u53EF\u7EC4\u5408\u5904\u7406\u6D41\u6C34\u7EBF",
+    get name() {
+      return cliM("cli_featureDatapipeName");
+    },
+    get description() {
+      return cliM("cli_featureDatapipeDescription");
+    },
     packages: ["@h-ai/datapipe"]
   },
   "scheduler": {
     id: "scheduler",
-    name: "\u4EFB\u52A1\u8C03\u5EA6",
-    description: "Cron \u4EFB\u52A1\u6CE8\u518C\u3001\u6267\u884C\u4E0E\u65E5\u5FD7\u8FFD\u8E2A",
+    get name() {
+      return cliM("cli_featureSchedulerName");
+    },
+    get description() {
+      return cliM("cli_featureSchedulerDescription");
+    },
     packages: ["@h-ai/scheduler"],
     dependencies: ["db"]
   },
   "deploy": {
     id: "deploy",
-    name: "\u81EA\u52A8\u5316\u90E8\u7F72",
-    description: "\u7EDF\u4E00\u90E8\u7F72\u7F16\u6392\u4E0E\u591A\u5E73\u53F0\u53D1\u5E03\u652F\u6301",
+    get name() {
+      return cliM("cli_featureDeployName");
+    },
+    get description() {
+      return cliM("cli_featureDeployDescription");
+    },
     packages: ["@h-ai/deploy"]
   },
   "api-client": {
     id: "api-client",
-    name: "HTTP \u5BA2\u6237\u7AEF",
-    description: "\u7EDF\u4E00 API \u8C03\u7528\u3001\u9519\u8BEF\u5904\u7406\u4E0E\u6D41\u5F0F\u8BF7\u6C42\u652F\u6301",
+    get name() {
+      return cliM("cli_featureApiClientName");
+    },
+    get description() {
+      return cliM("cli_featureApiClientDescription");
+    },
     packages: ["@h-ai/api-client"]
   },
   "capacitor": {
     id: "capacitor",
-    name: "\u79FB\u52A8\u7AEF\u80FD\u529B",
-    description: "Capacitor \u539F\u751F\u6865\u63A5\u80FD\u529B\uFF08\u504F\u79FB\u52A8\u5E94\u7528\uFF09",
+    get name() {
+      return cliM("cli_featureCapacitorName");
+    },
+    get description() {
+      return cliM("cli_featureCapacitorDescription");
+    },
     packages: ["@h-ai/capacitor"]
   }
 };
@@ -1074,17 +1196,23 @@ var PROJECT_NAME_REGEX = /^[a-z0-9-]+$/;
 var PROJECT_TEMPLATES = {
   minimal: {
     name: "minimal",
-    description: "\u6700\u5C0F\u6A21\u677F \u2014 \u4EC5\u6838\u5FC3\u529F\u80FD",
+    get description() {
+      return cliM("cli_templateMinimalDescription");
+    },
     features: []
   },
   default: {
     name: "default",
-    description: "\u6807\u51C6\u6A21\u677F \u2014 IAM + \u6570\u636E\u5E93 + \u7F13\u5B58",
+    get description() {
+      return cliM("cli_templateDefaultDescription");
+    },
     features: ["iam", "db", "cache", "crypto"]
   },
   full: {
     name: "full",
-    description: "\u5B8C\u6574\u6A21\u677F \u2014 \u6240\u6709\u529F\u80FD",
+    get description() {
+      return cliM("cli_templateFullDescription");
+    },
     features: [
       "iam",
       "db",
@@ -1105,7 +1233,9 @@ var PROJECT_TEMPLATES = {
   },
   custom: {
     name: "custom",
-    description: "\u81EA\u5B9A\u4E49 \u2014 \u9009\u62E9\u9700\u8981\u7684\u529F\u80FD",
+    get description() {
+      return cliM("cli_templateCustomDescription");
+    },
     features: []
   }
 };
@@ -1113,28 +1243,28 @@ async function createProject(options) {
   const spinner = ora();
   try {
     const resolvedOptions = await resolveOptions(options);
-    if (!PROJECT_NAME_REGEX.test(resolvedOptions.name)) {
-      writeCliError(chalk.red(`\u9879\u76EE\u540D\u79F0\u4E0D\u5408\u6CD5: "${resolvedOptions.name}"\uFF0C\u53EA\u80FD\u5305\u542B\u5C0F\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u548C\u8FDE\u5B57\u7B26`));
-      return;
-    }
+    if (!PROJECT_NAME_REGEX.test(resolvedOptions.name))
+      throw new Error(cliM("cli_createInvalidName", { params: { name: resolvedOptions.name } }));
     const projectPath = path2.resolve(resolvedOptions.cwd ?? ".", resolvedOptions.name);
     if (await fileExists(projectPath)) {
       const { overwrite } = await prompts({
         type: "confirm",
+        active: cliM("cli_yes"),
+        inactive: cliM("cli_no"),
         name: "overwrite",
-        message: `\u76EE\u5F55 ${resolvedOptions.name} \u5DF2\u5B58\u5728\uFF0C\u662F\u5426\u8986\u76D6\uFF1F`,
+        message: cliM("cli_createOverwrite", { params: { name: resolvedOptions.name } }),
         initial: false
       });
       if (!overwrite) {
-        writeCliMessage(chalk.yellow("\u5DF2\u53D6\u6D88"));
+        writeCliMessage(chalk.yellow(cliM("cli_cancelled")));
         return;
       }
       await fse.remove(projectPath);
     }
-    spinner.start("\u521B\u5EFA\u9879\u76EE\u76EE\u5F55...");
+    spinner.start(cliM("cli_createDirectory"));
     await fse.ensureDir(projectPath);
     spinner.succeed();
-    spinner.start("\u751F\u6210\u9879\u76EE\u6587\u4EF6...");
+    spinner.start(cliM("cli_createFiles"));
     const context = buildTemplateContext({
       name: resolvedOptions.name,
       appType: resolvedOptions.appType,
@@ -1146,7 +1276,7 @@ async function createProject(options) {
     });
     await generateFromTemplates(projectPath, context);
     {
-      const { generateConfigFile: generateConfigFile2, generateEnvExample } = await import('./cli-config-templates-6AHNUGBN.js');
+      const { generateConfigFile: generateConfigFile2, generateEnvExample, generateProductionEnvironment: generateProductionEnvironment2 } = await import('./cli-config-templates-W2LLPMB6.js');
       const configs = resolvedOptions.moduleConfigs;
       const isApiWorkspace = resolvedOptions.appType === "api";
       const isFullstack = resolvedOptions.appType === "fullstack";
@@ -1172,7 +1302,7 @@ async function createProject(options) {
         if (/^_.*\.yml$/.test(file))
           configContents[file.slice(1, -4)] = await fse.readFile(path2.join(configDir, file), "utf8");
       }
-      const envFeatures = resolvedOptions.features;
+      const envFeatures = isFullstack ? [.../* @__PURE__ */ new Set([...resolvedOptions.features, "reach"])] : resolvedOptions.features;
       const envContents = generateEnvExample(envFeatures, configs, isFullstack, configContents);
       let envExample = isApiWorkspace ? envContents : isFullstack ? `${envContents}
 # First-start administrator password; must satisfy the IAM password policy.
@@ -1205,29 +1335,36 @@ ${runtimeExample.split("\n").map((line) => line && !line.startsWith("#") ? `# ${
 ${sharedVariables.join("\n")}
 `);
       for (const [mode, environment] of [["dev", "development"], ["test", "test"], ["prod", "production"]]) {
-        await writeFile(path2.join(envDirectory, `.env.${mode}`), `# \u516C\u5171 ${mode} \u73AF\u5883\u914D\u7F6E\uFF1B\u672C\u673A\u79C1\u6709\u503C\u653E .env.local\uFF0C\u8FDB\u7A0B\u73AF\u5883\u53D8\u91CF\u4F18\u5148\u3002
+        const values = mode === "prod" ? generateProductionEnvironment2(envFeatures, configs) : `# \u516C\u5171 ${mode} \u73AF\u5883\u914D\u7F6E\uFF1B\u672C\u673A\u79C1\u6709\u503C\u653E .env.local\uFF0C\u8FDB\u7A0B\u73AF\u5883\u53D8\u91CF\u4F18\u5148\u3002
 HAI_CORE_ENV=${environment}
-HAI_CORE_DEBUG=false
-HAI_CORE_LOGGING_LEVEL=${mode === "test" ? "warn" : mode === "dev" ? "debug" : "info"}
-`);
+HAI_CORE_LOGGING_LEVEL=${mode === "test" ? "warn" : "debug"}
+`;
+        await writeFile(path2.join(envDirectory, `.env.${mode}`), values);
       }
+      const privateEntries = [];
       if (isFullstack) {
         const password = `Aa1!${randomBytes(24).toString("base64url")}`;
-        await fse.writeFile(path2.join(projectPath, ".env.local"), `# \u672C\u673A\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u63D0\u4EA4 Git\u3002
-HAI_ADMIN_DEFAULT_PASSWORD=${password}
-`, { mode: 384 });
-      } else {
-        await writeFile(path2.join(envDirectory, ".env.local"), "# \u672C\u673A\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u63D0\u4EA4 Git\uFF1B\u8986\u76D6\u516C\u5171\u57FA\u7840\u548C\u73AF\u5883\u914D\u7F6E\u3002\n");
+        privateEntries.push(`HAI_ADMIN_DEFAULT_PASSWORD=${password}`);
       }
+      if (isFullstack || isApiWorkspace && resolvedOptions.features.includes("crypto")) {
+        const key = createECDH("SM2");
+        key.generateKeys();
+        const id = `bootstrap-${randomBytes(6).toString("hex")}`;
+        const ring = { activeKeyId: id, keys: { [id]: { publicKey: key.getPublicKey("hex"), privateKey: key.getPrivateKey("hex").padStart(64, "0") } } };
+        privateEntries.push(`HAI_CRYPTO_TRANSPORT_SERVERKEYRING='${JSON.stringify(ring)}'`);
+      }
+      await fse.writeFile(path2.join(envDirectory, ".env.local"), `# \u672C\u673A\u79C1\u6709\u914D\u7F6E\uFF0C\u4E0D\u63D0\u4EA4 Git\uFF1B\u90E8\u7F72\u51ED\u636E\u7531\u76EE\u6807\u73AF\u5883\u5355\u72EC\u63D0\u4F9B\u3002
+${privateEntries.join("\n")}
+`, { mode: 384 });
     }
-    const { generateSkillFiles } = await import('./cli-skill-templates-FC3QRKDO.js');
+    const { generateSkillFiles } = await import('./cli-skill-templates-US5CCAJ4.js');
     await generateSkillFiles(
       projectPath,
       resolvedOptions.features,
       resolvedOptions.appType,
       resolvedOptions.name
     );
-    const appTypeLabel = APP_TYPES[resolvedOptions.appType].name;
+    const appTypeLabel = cliM(`cli_app${{ "admin": "Admin", "website": "Website", "h5": "H5", "api": "Api", "mobile-app": "Mobile", "fullstack": "Fullstack" }[resolvedOptions.appType]}Name`, { locale: "zh-CN" });
     const readmeContent = resolvedOptions.appType === "fullstack" ? generateFullstackReadme(resolvedOptions.name, resolvedOptions.packageManager, resolvedOptions.frontends) : resolvedOptions.appType === "api" ? generateApiWorkspaceReadme(resolvedOptions.name, resolvedOptions.packageManager) : generateReadme(resolvedOptions.name, appTypeLabel, resolvedOptions.packageManager, resolvedOptions.appType);
     await writeFile(
       path2.join(projectPath, "README.md"),
@@ -1235,20 +1372,20 @@ HAI_ADMIN_DEFAULT_PASSWORD=${password}
     );
     spinner.succeed();
     if (resolvedOptions.git) {
-      spinner.start("\u521D\u59CB\u5316 Git \u4ED3\u5E93...");
+      spinner.start(cliM("cli_createGit"));
       execSync("git init", { cwd: projectPath, stdio: "ignore" });
       if (resolvedOptions.gitRemote) {
         const gitRemote = resolvedOptions.gitRemote;
         if (!RE_HTTPS_URL.test(gitRemote) && !RE_GIT_SSH_URL.test(gitRemote)) {
           spinner.fail();
-          throw new Error(`Invalid gitRemote URL: ${gitRemote}`);
+          throw new Error(cliM("cli_createRemoteFailure", { params: { remote: gitRemote } }));
         }
         execFileSync("git", ["remote", "add", "origin", gitRemote], { cwd: projectPath, stdio: "ignore" });
       }
       spinner.succeed();
     }
     if (resolvedOptions.install) {
-      spinner.start(`\u5B89\u88C5\u4F9D\u8D56 (${resolvedOptions.packageManager})...`);
+      spinner.start(cliM("cli_createInstall", { params: { manager: resolvedOptions.packageManager } }));
       installDependencies(projectPath, resolvedOptions.packageManager);
       spinner.succeed();
     }
@@ -1263,10 +1400,10 @@ async function resolveOptions(options) {
   const useDefaults = options.yes ?? false;
   writeCliMessage("");
   writeCliMessage(chalk.bold.cyan("  \u{1F680} hai Agent Framework"));
-  writeCliMessage(chalk.gray("     AI-Native \xB7 Configuration-Driven \xB7 Security-First"));
+  writeCliMessage(chalk.gray(cliM("cli_createTagline")));
   writeCliMessage("");
   const onCancel = () => {
-    writeCliMessage(chalk.red("\n\u5DF2\u53D6\u6D88"));
+    writeCliMessage(chalk.red(cliM("cli_cancelledLine")));
     process4.exit(1);
   };
   let projectName = options.name;
@@ -1276,13 +1413,13 @@ async function resolveOptions(options) {
     const { name } = await prompts({
       type: "text",
       name: "name",
-      message: "\u9879\u76EE\u540D\u79F0:",
+      message: cliM("cli_createNamePrompt"),
       initial: "my-app",
       validate: (value) => {
         if (!value.trim())
-          return "\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A";
+          return cliM("cli_createNameRequired");
         if (!PROJECT_NAME_REGEX.test(value))
-          return "\u9879\u76EE\u540D\u79F0\u53EA\u80FD\u5305\u542B\u5C0F\u5199\u5B57\u6BCD\u3001\u6570\u5B57\u548C\u8FDE\u5B57\u7B26";
+          return cliM("cli_createNamePattern");
         return true;
       }
     }, { onCancel });
@@ -1295,8 +1432,9 @@ async function resolveOptions(options) {
     const { appType } = await prompts({
       type: "select",
       name: "appType",
-      message: "\u5E94\u7528\u7C7B\u578B:",
-      hint: cliM("cli_selectHint"),
+      message: cliM("cli_createTypePrompt"),
+      hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
       choices: Object.entries(APP_TYPES).map(([key, t]) => ({
         title: t.name,
         description: formatPromptDescription(t.description),
@@ -1318,8 +1456,9 @@ async function resolveOptions(options) {
       const { template } = await prompts({
         type: "select",
         name: "template",
-        message: "\u9009\u62E9\u6A21\u677F:",
-        hint: cliM("cli_selectHint"),
+        message: cliM("cli_createTemplatePrompt"),
+        hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
         choices: Object.values(PROJECT_TEMPLATES).map((t) => ({
           title: t.name,
           description: formatPromptDescription(t.description),
@@ -1333,7 +1472,9 @@ async function resolveOptions(options) {
   let selectedFeatures = [];
   const appTypeDefaults = APP_TYPES[selectedAppType].defaultFeatures;
   if (selectedAppType === "fullstack") {
-    selectedFeatures = resolveFeatureDependencies(appTypeDefaults);
+    selectedFeatures = resolveFeatureDependencies([...appTypeDefaults, ...options.features ?? []]);
+  } else if (options.features) {
+    selectedFeatures = resolveFeatureDependencies(options.features);
   } else if (selectedTemplate === "custom" && !options.features && useDefaults) {
     selectedFeatures = resolveFeatureDependencies(appTypeDefaults);
   } else if (selectedTemplate === "custom" && !options.features) {
@@ -1348,13 +1489,12 @@ async function resolveOptions(options) {
       name: "features",
       message: cliM("cli_featuresPrompt"),
       choices: featureChoices,
-      hint: cliM("cli_multiselectHint"),
+      hint: `
+${formatPromptDescription(cliM("cli_multiselectHint"))}`,
       instructions: false
     }, { onCancel });
     selectedFeatures = features || [];
     selectedFeatures = resolveFeatureDependencies(selectedFeatures);
-  } else if (selectedTemplate === "custom" && options.features) {
-    selectedFeatures = resolveFeatureDependencies(options.features);
   } else {
     const templateFeatures = PROJECT_TEMPLATES[selectedTemplate]?.features || [];
     const merged = /* @__PURE__ */ new Set([...templateFeatures, ...appTypeDefaults]);
@@ -1370,8 +1510,10 @@ async function resolveOptions(options) {
   } else if (addExamples === void 0) {
     const { examples } = await prompts({
       type: "confirm",
+      active: cliM("cli_yes"),
+      inactive: cliM("cli_no"),
       name: "examples",
-      message: "\u662F\u5426\u6DFB\u52A0\u793A\u4F8B\u4EE3\u7801?",
+      message: cliM("cli_createExamplesPrompt"),
       initial: true
     }, { onCancel });
     addExamples = examples;
@@ -1384,10 +1526,12 @@ async function resolveOptions(options) {
   if (!packageManager) {
     const { pm } = await prompts({
       type: "select",
+      hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
       name: "pm",
-      message: "\u5305\u7BA1\u7406\u5668:",
+      message: cliM("cli_createManagerPrompt"),
       choices: [
-        { title: "pnpm (\u63A8\u8350)", value: "pnpm" },
+        { title: cliM("cli_createPnpmRecommended"), value: "pnpm" },
         { title: "npm", value: "npm" },
         { title: "yarn", value: "yarn" }
       ],
@@ -1401,8 +1545,10 @@ async function resolveOptions(options) {
   } else if (install === void 0) {
     const { doInstall } = await prompts({
       type: "confirm",
+      active: cliM("cli_yes"),
+      inactive: cliM("cli_no"),
       name: "doInstall",
-      message: "\u662F\u5426\u5B89\u88C5\u4F9D\u8D56?",
+      message: cliM("cli_createInstallPrompt"),
       initial: true
     }, { onCancel });
     install = doInstall;
@@ -1413,8 +1559,10 @@ async function resolveOptions(options) {
   } else if (git === void 0) {
     const { initGit } = await prompts({
       type: "confirm",
+      active: cliM("cli_yes"),
+      inactive: cliM("cli_no"),
       name: "initGit",
-      message: "\u662F\u5426\u521D\u59CB\u5316 Git?",
+      message: cliM("cli_createGitPrompt"),
       initial: true
     }, { onCancel });
     git = initGit;
@@ -1426,14 +1574,14 @@ async function resolveOptions(options) {
     const { remote } = await prompts({
       type: "text",
       name: "remote",
-      message: "Git \u4ED3\u5E93\u5730\u5740 (\u53EF\u9009\uFF0C\u56DE\u8F66\u8DF3\u8FC7):",
+      message: cliM("cli_createRemotePrompt"),
       initial: "",
       validate: (value) => {
         if (!value.trim())
           return true;
         if (RE_HTTPS_URL.test(value) || RE_GIT_SSH_URL.test(value))
           return true;
-        return "\u8BF7\u8F93\u5165\u5408\u6CD5\u7684 Git \u4ED3\u5E93\u5730\u5740 (https://... \u6216 git@...:...)";
+        return cliM("cli_createRemoteInvalid");
       }
     }, { onCancel });
     gitRemote = remote?.trim() || "";
@@ -1494,7 +1642,9 @@ async function resolveFrontendTargets(frontends, useDefaults, onCancel) {
       value: id,
       selected: DEFAULT_FULLSTACK_FRONTENDS2.includes(id)
     })),
-    hint: cliM("cli_multiselectHint"),
+    // 独立行显示帮助，避免宽字符让 prompts 按字符数清除时遗留折行。
+    hint: `
+${formatPromptDescription(cliM("cli_multiselectHint"))}`,
     instructions: false
   }, { onCancel });
   return normalizeFrontendTargets(selectedFrontends ?? DEFAULT_FULLSTACK_FRONTENDS2);
@@ -1526,12 +1676,12 @@ function resolveFeatureDependencies(features) {
 async function promptModuleConfigs(features, projectName) {
   const configs = {};
   const onCancel = () => {
-    writeCliMessage(chalk.red("\n\u5DF2\u53D6\u6D88"));
+    writeCliMessage(chalk.red(cliM("cli_cancelledLine")));
     process4.exit(1);
   };
   writeCliMessage("");
-  writeCliMessage(chalk.bold("  \u2699 \u6A21\u5757\u914D\u7F6E"));
-  writeCliMessage(chalk.gray("     \u8BBE\u7F6E\u5173\u952E\u914D\u7F6E\u9879\uFF08\u56DE\u8F66\u4F7F\u7528\u9ED8\u8BA4\u503C\uFF09"));
+  writeCliMessage(chalk.bold(cliM("cli_createModuleConfig")));
+  writeCliMessage(chalk.gray(cliM("cli_createModuleConfigHint")));
   writeCliMessage("");
   configs.core = await promptCoreConfig(projectName, onCancel);
   if (features.includes("db")) {
@@ -1552,27 +1702,32 @@ async function promptModuleConfigs(features, projectName) {
   return configs;
 }
 async function promptCoreConfig(projectName, onCancel) {
-  writeCliMessage(chalk.cyan("  [core] \u5E94\u7528\u57FA\u7840\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createCoreConfig")));
   const { defaultLocale } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "defaultLocale",
-    message: "\u9ED8\u8BA4\u8BED\u8A00:",
+    message: cliM("cli_createLocalePrompt"),
     choices: [
-      { title: "\u4E2D\u6587 (zh-CN)", value: "zh-CN" },
-      { title: "English (en-US)", value: "en-US" }
+      { title: cliM("cli_createChineseLocale"), value: "zh-CN" },
+      { title: cliM("cli_createEnglishLocale"), value: "en-US" },
+      { title: cliM("cli_createJapaneseLocale"), value: "ja-JP" }
     ],
     initial: 0
   }, { onCancel });
   return { name: projectName, defaultLocale };
 }
 async function promptDbConfig(projectName, onCancel) {
-  writeCliMessage(chalk.cyan("  [db] \u6570\u636E\u5E93\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createDbConfig")));
   const { type } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "type",
-    message: "\u6570\u636E\u5E93\u7C7B\u578B:",
+    message: cliM("cli_createDbTypePrompt"),
     choices: [
-      { title: "SQLite (\u96F6\u914D\u7F6E\uFF0C\u9002\u5408\u5F00\u53D1)", value: "sqlite" },
+      { title: cliM("cli_createSqliteOption"), value: "sqlite" },
       { title: "PostgreSQL", value: "postgresql" },
       { title: "MySQL", value: "mysql" }
     ],
@@ -1582,26 +1737,28 @@ async function promptDbConfig(projectName, onCancel) {
     const { database } = await prompts({
       type: "text",
       name: "database",
-      message: "SQLite \u6570\u636E\u5E93\u8DEF\u5F84:",
+      message: cliM("cli_createSqlitePathPrompt"),
       initial: "./data/app.db"
     }, { onCancel });
     return { type, database };
   }
   const answers = await prompts([
-    { type: "text", name: "host", message: `${type === "postgresql" ? "PostgreSQL" : "MySQL"} \u4E3B\u673A:`, initial: "localhost" },
-    { type: "number", name: "port", message: "\u7AEF\u53E3:", initial: type === "postgresql" ? 5432 : 3306 },
-    { type: "text", name: "database", message: "\u6570\u636E\u5E93\u540D\u79F0:", initial: projectName }
+    { type: "text", name: "host", message: cliM("cli_createDbHostPrompt", { params: { backend: type === "postgresql" ? "PostgreSQL" : "MySQL" } }), initial: "localhost" },
+    { type: "number", name: "port", message: cliM("cli_createPortPrompt"), initial: type === "postgresql" ? 5432 : 3306 },
+    { type: "text", name: "database", message: cliM("cli_createDatabasePrompt"), initial: projectName }
   ], { onCancel });
   return { type, host: answers.host, port: answers.port, database: answers.database };
 }
 async function promptCacheConfig(onCancel) {
-  writeCliMessage(chalk.cyan("  [cache] \u7F13\u5B58\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createCacheConfig")));
   const { type } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "type",
-    message: "\u7F13\u5B58\u7C7B\u578B:",
+    message: cliM("cli_createCacheTypePrompt"),
     choices: [
-      { title: "\u5185\u5B58\u7F13\u5B58 (\u96F6\u914D\u7F6E\uFF0C\u9002\u5408\u5F00\u53D1)", value: "memory" },
+      { title: cliM("cli_createMemoryOption"), value: "memory" },
       { title: "Redis", value: "redis" }
     ],
     initial: 0
@@ -1609,27 +1766,29 @@ async function promptCacheConfig(onCancel) {
   if (type === "memory")
     return { type };
   const answers = await prompts([
-    { type: "text", name: "host", message: "Redis \u4E3B\u673A:", initial: "localhost" },
-    { type: "number", name: "port", message: "Redis \u7AEF\u53E3:", initial: 6379 }
+    { type: "text", name: "host", message: cliM("cli_createRedisHostPrompt"), initial: "localhost" },
+    { type: "number", name: "port", message: cliM("cli_createRedisPortPrompt"), initial: 6379 }
   ], { onCancel });
   return { type, host: answers.host, port: answers.port };
 }
 async function promptIamConfig(onCancel) {
-  writeCliMessage(chalk.cyan("  [iam] \u8BA4\u8BC1\u6388\u6743\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createIamConfig")));
   const answers = await prompts([
-    { type: "confirm", name: "loginPassword", message: "\u542F\u7528\u5BC6\u7801\u767B\u5F55?", initial: true },
-    { type: "confirm", name: "loginOtp", message: "\u542F\u7528 OTP \u9A8C\u8BC1\u7801\u767B\u5F55?", initial: false }
+    { type: "confirm", active: cliM("cli_yes"), inactive: cliM("cli_no"), name: "loginPassword", message: cliM("cli_createPasswordPrompt"), initial: true },
+    { type: "confirm", active: cliM("cli_yes"), inactive: cliM("cli_no"), name: "loginOtp", message: cliM("cli_createOtpPrompt"), initial: false }
   ], { onCancel });
   return { loginPassword: answers.loginPassword, loginOtp: answers.loginOtp };
 }
 async function promptStorageConfig(onCancel) {
-  writeCliMessage(chalk.cyan("  [storage] \u6587\u4EF6\u5B58\u50A8\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createStorageConfig")));
   const { type } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "type",
-    message: "\u5B58\u50A8\u7C7B\u578B:",
+    message: cliM("cli_createStorageTypePrompt"),
     choices: [
-      { title: "\u672C\u5730\u5B58\u50A8 (\u96F6\u914D\u7F6E\uFF0C\u9002\u5408\u5F00\u53D1)", value: "local" },
+      { title: cliM("cli_createLocalStorageOption"), value: "local" },
       { title: "S3 / MinIO / OSS", value: "s3" }
     ],
     initial: 0
@@ -1638,7 +1797,7 @@ async function promptStorageConfig(onCancel) {
     const { localPath } = await prompts({
       type: "text",
       name: "localPath",
-      message: "\u5B58\u50A8\u8DEF\u5F84:",
+      message: cliM("cli_createStoragePathPrompt"),
       initial: "./data/uploads"
     }, { onCancel });
     return { type, localPath };
@@ -1646,15 +1805,17 @@ async function promptStorageConfig(onCancel) {
   return { type };
 }
 async function promptAiConfig(onCancel) {
-  writeCliMessage(chalk.cyan("  [ai] AI \u96C6\u6210\u914D\u7F6E"));
+  writeCliMessage(chalk.cyan(cliM("cli_createAiConfig")));
   const { defaultProvider } = await prompts({
     type: "select",
+    hint: `
+${formatPromptDescription(cliM("cli_selectHint"))}`,
     name: "defaultProvider",
-    message: "AI Provider:",
+    message: cliM("cli_createProviderPrompt"),
     choices: [
       { title: "OpenAI", value: "openai" },
       { title: "Anthropic (Claude)", value: "anthropic" },
-      { title: "\u5176\u4ED6 (OpenAI \u517C\u5BB9)", value: "custom" }
+      { title: cliM("cli_createCompatibleAiOption"), value: "custom" }
     ],
     initial: 0
   }, { onCancel });
@@ -1662,7 +1823,7 @@ async function promptAiConfig(onCancel) {
   const { model } = await prompts({
     type: "text",
     name: "model",
-    message: "\u9ED8\u8BA4\u6A21\u578B:",
+    message: cliM("cli_createModelPrompt"),
     initial: defaultModel
   }, { onCancel });
   return { defaultProvider, model };
@@ -1758,6 +1919,8 @@ function generateEnvironmentReadme() {
 
 \u8FD0\u884C\u53C2\u6570\u5728 \`.env.example\` \u4E2D\u9010\u9879\u8BF4\u660E\u7528\u9014\u3001\u679A\u4E3E\u548C\u8303\u56F4\u3002\`.env\` \u4E3A\u516C\u5171\u57FA\u7840\uFF0C\`.env.dev\` / \`.env.test\` / \`.env.prod\` \u4E3A\u73AF\u5883\u8986\u76D6\uFF0C\u5747\u63D0\u4EA4 Git\uFF1B\`.env.local\` \u4E3A\u672C\u673A\u79C1\u6709\u8986\u76D6\uFF0C\u4E0D\u63D0\u4EA4 Git\u3002\u4F18\u5148\u7EA7\u4E3A\u8FDB\u7A0B\u73AF\u5883 > \`.env.local\` > \u73AF\u5883\u6587\u4EF6 > \`.env\`\u3002YAML \u663E\u5F0F\u5F15\u7528 \`HAI_<\u914D\u7F6E\u540D>_<\u8DEF\u5F84>\` \u5E76\u4FDD\u7559\u672C\u5730\u56DE\u9000\uFF0CcamelCase \u4E0D\u62C6\u8BCD\u3002\u5B8C\u6574\u547D\u4EE4\u3001\u52A0\u8F7D\u4F18\u5148\u7EA7\u548C Provider \u5207\u6362\u89C1 [\u73AF\u5883\u914D\u7F6E](.agents/skills/hai-app-create/development.md#\u73AF\u5883\u914D\u7F6E)\u3002
 
+\u751F\u4EA7 .env.prod \u6309\u5DF2\u542F\u7528\u6A21\u5757\u9009\u62E9\u5171\u4EAB PostgreSQL\uFF08\u660E\u786E\u9009\u62E9 MySQL \u65F6\u4FDD\u7559\uFF09\u3001Redis\u3001S3\u3001Qdrant\uFF0C\u9ED8\u8BA4\u4F7F\u7528 Compose \u5185\u90E8\u670D\u52A1\u540D db/cache/storage/vecdb\u3002\u5BC6\u7801\u3001S3 \u51ED\u636E\u3001\u6A21\u578B Key \u4E0E\u53D7\u4FDD\u62A4 Qdrant \u7684 Key \u53EA\u7531\u79C1\u6709\u73AF\u5883\u6CE8\u5165\uFF1B\u5BB9\u5668\u5916\u8FD0\u884C\u8986\u76D6\u5185\u90E8\u8FDE\u63A5\u5730\u5740\u3002\u751F\u4EA7 Reach \u5FC5\u987B\u6CE8\u5165\u771F\u5B9E HAI_REACH_PROVIDERS JSON\uFF0C\u516C\u5171\u7A7A\u6570\u7EC4\u4F1A\u62D2\u7EDD\u542F\u52A8\u3002AI \u81EA\u52A8\u8865\u5168 db+vecdb \u4F9D\u8D56\uFF0C\u5E76\u5728\u4E8C\u8005\u5C31\u7EEA\u540E\u521D\u59CB\u5316\uFF0C\u5931\u8D25\u9006\u5E8F\u6E05\u7406\u3002
+
 | \u7528\u9014 | \u547D\u4EE4 |
 | --- | --- |
 | \u5F00\u53D1 / \u6D4B\u8BD5\u6A21\u5F0F / \u751F\u4EA7\u6A21\u5F0F\u9884\u89C8 | \`pnpm dev\` / \`dev:test\` / \`dev:prod\` |
@@ -1792,7 +1955,8 @@ ${pm} exec hai deploy ${appDir} --env prod --services web
 \u6784\u5EFA\u4E0D\u8BFB\u53D6\u90E8\u7F72\u73AF\u5883\uFF1B\u4EA7\u7269\u4F4D\u4E8E .hai/build/docker/<buildId>\uFF0C\u7528 --artifact-dir \u7CBE\u786E\u9009\u62E9\u3002
 \u5E94\u7528\u6839 package.json.version \u9A71\u52A8\u7248\u672C\uFF0C\u540C\u7248\u672C\u5141\u8BB8\u91CD\u65B0\u6784\u5EFA\u548C\u53D1\u5E03\uFF1B\u6E05\u5355\u8BB0\u5F55\u72EC\u7ACB\u6784\u5EFA\u7F16\u53F7\u4E0E\u6821\u9A8C\u548C\u3002
 \u5B8C\u6574\u79BB\u7EBF\u5305\u81EA\u52A8\u643A\u5E26\u81EA\u5EFA\u4E2D\u95F4\u4EF6\u955C\u50CF\uFF1B\u51C6\u5907\u4E2D\u95F4\u4EF6\u955C\u50CF\u9700\u8981\u6784\u5EFA\u673A\u6709\u53EF\u7528 Podman/Docker\uFF0C\u7F3A\u955C\u50CF\u65F6\u5728\u6253\u5305\u9636\u6BB5\u62C9\u53D6\u3002
-\u670D\u52A1\u5668\u9700\u8981 Linux\u3001Docker/Podman\u3001Docker Compose v2 \u6216 podman-compose 1.6.0 \u53CA\u4EE5\u4E0A\u3001sh\u3001tar\u3001sha256sum\u3001awk\u3001curl\uFF0C\u542F\u52A8\u9636\u6BB5\u4E0D\u8054\u7F51\u62C9\u53D6\u3002
+\u670D\u52A1\u5668\u9700\u8981 Linux\u3001Docker/Podman\u3001Docker Compose v2 \u6216 podman-compose 1.6.0 \u53CA\u4EE5\u4E0A\u3001sh\u3001tar\u3001sha256sum\u3001awk\u3001curl\u3001util-linux flock \u548C\u652F\u6301 flock \u7684\u6587\u4EF6\u7CFB\u7EDF\uFF0C\u542F\u52A8\u9636\u6BB5\u4E0D\u8054\u7F51\u62C9\u53D6\u3002
+\u56FA\u5B9A .deploy.lock \u5185\u6838\u9501\u8986\u76D6\u90E8\u7F72\u53CA\u6062\u590D\uFF1B\u7981\u6B62\u5220\u9664\u6216\u66FF\u6362\uFF0C\u6240\u6709\u6301\u6709\u8FDB\u7A0B\u9000\u51FA\u6216\u91CD\u542F\u540E\u81EA\u52A8\u91CA\u653E\u3002\u5F3A\u6740\u540E\u987B\u6838\u5BF9\u7ED3\u679C\u6587\u4EF6\u3001current \u548C\u5BB9\u5668\u72B6\u6001\uFF0C\u518D\u7528\u65B0\u5305\u6062\u590D\u3002
 tar \u65C1\u7684\u90E8\u7F72\u76EE\u5F55\u63D0\u4F9B deploy.ps1\uFF08Windows\uFF09\u548C deploy.sh\uFF08Linux/macOS\uFF09\uFF0C\u6309\u5DF2\u4FDD\u5B58\u7684 SSH \u53C2\u6570\u4E0A\u4F20\u3001\u5BFC\u5165\u3001\u542F\u52A8\u5E76\u9A8C\u8BC1 HTTP\u3002
 \u5B8C\u5168\u9694\u79BB\u65F6\u624B\u5DE5\u642C\u8FD0 tar\uFF0C\u72EC\u7ACB\u76EE\u5F55\u89E3\u5305\u540E\u6267\u884C sh apply.sh\uFF0C\u6216\u4F20\u5165\u90E8\u7F72\u76EE\u5F55\u8986\u76D6\u9ED8\u8BA4\u4F4D\u7F6E\u3002
 \u90E8\u5206\u66F4\u65B0\u8981\u6C42\u5DF2\u6709\u6210\u529F\u7684\u5B8C\u6574\u90E8\u7F72\uFF0C\u4FDD\u7559\u672A\u9009\u670D\u52A1\u53CA\u6570\u636E\u5377\uFF1B\u5931\u8D25\u8FD4\u56DE\u975E\u96F6\u9000\u51FA\u7801\uFF0C\u5DF2\u6709\u90E8\u7F72\u5C1D\u8BD5\u6062\u590D\u9009\u4E2D\u670D\u52A1\u3002
@@ -1817,7 +1981,7 @@ function generateReadme(name, appTypeLabel, pm, appType) {
 
 ### \u9875\u9762\u5E03\u5C40\u4E0E\u8DEF\u7531
 
-\u9875\u9762\u7EDF\u4E00\u7EE7\u627F\u6839\u5E03\u5C40\u7684 header/footer\u3002${appType === "mobile-app" ? "\u9875\u9762\u653E src/lib/pages/**/*.svelte\uFF0Chash \u8DEF\u7531\u81EA\u52A8\u53D1\u73B0\uFF0C\u5237\u65B0\u4E0E\u524D\u8FDB\u540E\u9000\u6062\u590D\u5F53\u524D\u9875\u3002" : "\u4F7F\u7528 SvelteKit \u81EA\u52A8\u6587\u4EF6\u8DEF\u7531\uFF0C\u65B0\u589E +page.svelte \u65E0\u9700\u7EF4\u62A4\u8DEF\u7531\u8868\uFF1B\u5237\u65B0\u5B9A\u4F4D\u4E0E\u670D\u52A1\u7AEF\u9274\u6743\u4FDD\u6301\u4E00\u81F4\u3002"}
+\u9875\u9762\u7EDF\u4E00\u7EE7\u627F\u6839\u5E03\u5C40\u7684 header/footer\u3002${appType === "mobile-app" ? "\u9875\u9762\u653E src/lib/pages/**/*.svelte\uFF0Chash \u8DEF\u7531\u81EA\u52A8\u53D1\u73B0\uFF0C\u5237\u65B0\u4E0E\u524D\u8FDB\u540E\u9000\u6062\u590D\u5F53\u524D\u9875\u3002" : "\u4F7F\u7528 SvelteKit \u81EA\u52A8\u6587\u4EF6\u8DEF\u7531\uFF0C\u65B0\u589E +page.svelte \u65E0\u9700\u7EF4\u62A4\u8DEF\u7531\u8868\uFF1B\u5237\u65B0\u5B9A\u4F4D\u4E0E\u670D\u52A1\u7AEF\u9274\u6743\u4FDD\u6301\u4E00\u81F4\u3002"}${appType === "mobile-app" ? "\n\n\u9009\u62E9 IAM \u6216 crypto \u7684\u79FB\u52A8\u5BA2\u6237\u7AEF\u9ED8\u8BA4\u542F\u7528\u52A0\u5BC6 transport\uFF0C\u5148\u521D\u59CB\u5316 crypto\uFF0C\u518D\u521D\u59CB\u5316 typed API client\uFF1B\u7ED3\u675F\u65F6\u6309\u76F8\u53CD\u987A\u5E8F\u5173\u95ED\u3002\u4EC5\u660E\u786E\u8FDE\u63A5\u5339\u914D\u7684\u660E\u6587 API \u65F6\u8BBE\u7F6E PUBLIC_API_TRANSPORT=off\uFF1BPUBLIC_API_KEY_EXCHANGE_PATH \u4EC5\u8986\u76D6\u516C\u5F00\u534F\u5546\u5B50\u8DEF\u5F84\u3002\u63E1\u624B\u5931\u8D25\u4E0D\u4F1A\u9000\u56DE\u660E\u6587\uFF0C\u670D\u52A1\u7AEF\u79C1\u94A5\u4E0D\u8FDB\u5165\u5BA2\u6237\u7AEF\u3002\u672A\u9009\u62E9 crypto \u7684\u5BA2\u6237\u7AEF\u4FDD\u7559\u660E\u6587 API \u6A21\u5F0F\u3002" : ""}
 
 ### \u5F00\u53D1
 
@@ -1961,9 +2125,11 @@ CLI \u5DF2\u5728\u6839\u76EE\u5F55\u751F\u6210 \`.env.local\`\uFF0C\u5176\u4E2D
 
 \u672C\u5730\u5F00\u53D1\u9ED8\u8BA4 \`PUBLIC_API_BASE=http://127.0.0.1:3000\`\uFF0CVite \u4F7F\u7528\u540C\u6E90\u4EE3\u7406\uFF1B\u90E8\u7F72\u65F6\u6539\u4E3A\u5B9E\u9645\u516C\u7F51 API Origin\uFF0CAndroid \u6A21\u62DF\u5668\u8BBF\u95EE\u5BBF\u4E3B\u673A\u65F6\u4F7F\u7528 \`http://10.0.2.2:3000\`\u3002\u4E0D\u8981\u5C06\u5BC6\u94A5\u653E\u5165\u4EFB\u4F55 \`PUBLIC_\` \u6216 \`VITE_\` \u53D8\u91CF\u3002
 
+\u670D\u52A1\u7AEF\u7248\u672C\u5316\u4F20\u8F93\u5BC6\u94A5\u73AF\u5728\u521B\u5EFA\u65F6\u4E00\u6B21\u6027\u5199\u5165\u88AB\u5FFD\u7565\u7684 \`.env.local\`\uFF0C\u53D8\u91CF\u4E3A \`HAI_CRYPTO_TRANSPORT_SERVERKEYRING\`\uFF1B\u8FD0\u884C\u65F6\u4E0D\u751F\u6210\u5BC6\u94A5\u3002\u90E8\u7F72\u7531 Secret Manager \u5411\u6240\u6709\u8282\u70B9\u5206\u53D1\u540C\u4E00\u53D7\u7BA1 ring\uFF0C\u914D\u5408\u5171\u4EAB registry\u3002\u79C1\u94A5\u4E0D\u8FDB\u5165\u516C\u5F00\u914D\u7F6E\u3001PUBLIC_/VITE_ \u6216\u65E5\u5FD7\u3002
+
 \u6240\u6709\u4E1A\u52A1 JSON \u8BF7\u6C42\u548C\u54CD\u5E94\u9ED8\u8BA4\u901A\u8FC7 \`@h-ai/crypto\` transport \u53CC\u5411\u52A0\u5BC6\uFF08\u542B\u767B\u5F55\u3001\u5237\u65B0\u3001\u5934\u50CF\u4E0A\u4F20\uFF09\uFF1B\u524D\u7AEF\u7EDF\u4E00\u4F7F\u7528\u5171\u4EAB typed API client\u3002Web \u8BBF\u95EE\u4EE4\u724C\u4EC5\u5B58\u5185\u5B58\u3001\u5237\u65B0\u4EE4\u724C\u7531 HttpOnly Cookie \u4FDD\u5B58\uFF1B\u53D7\u4FE1\u539F\u751F\u7AEF\u4F7F\u7528\u5E73\u53F0\u5B89\u5168\u5B58\u50A8\u6216\u5185\u5B58\u3002\u5934\u50CF\u4E3A\u968F\u673A\u8DEF\u5F84\u53EA\u8BFB\u56FE\u7247\u8D44\u6E90\uFF0C\u652F\u6301 PNG/JPEG/WebP\uFF0C\u6700\u5927 512 KiB\u3002\u5065\u5EB7\u68C0\u67E5\u548C\u53EA\u8BFB\u5934\u50CF\u56FE\u7247\u53EF\u76F4\u63A5\u8BBF\u95EE\u3002
 
-\u5E94\u7528\u663E\u793A\u540D\u79F0\u3001\u7248\u672C\u3001\u73AF\u5883\u3001\u9ED8\u8BA4\u8BED\u8A00\u548C\u65E5\u5FD7\u8BBE\u7F6E\u6765\u81EA\u540E\u7AEF \`config/_core.yml\`\uFF0C\u524D\u7AEF\u901A\u8FC7 \`app.info\` \u83B7\u53D6\u5B89\u5168\u5143\u4FE1\u606F\u3002\u9ED8\u8BA4 SQLite\u3001\u672C\u5730\u5B58\u50A8\u4E0E\u5185\u5B58\u7F13\u5B58\u9002\u5408\u5355\u5B9E\u4F8B\uFF0C\u7BA1\u7406\u5199\u5165\u4EC5\u652F\u6301\u5355\u5199\u5B9E\u4F8B\uFF1B\u591A\u5B9E\u4F8B\u8BFB\u53D6\u53EF\u4F7F\u7528\u5171\u4EAB\u6570\u636E\u5E93\u3001Redis cache \u548C S3 \u5B58\u50A8\uFF0C\u4F46\u7BA1\u7406\u5199\u8BF7\u6C42\u987B\u7EDF\u4E00\u8DEF\u7531\u5230\u540C\u4E00\u5199\u5B9E\u4F8B\u3002\u53E6\u9700\u4F1A\u8BDD\u7C98\u6027\u8DEF\u7531\u4F7F\u8BF7\u6C42\u547D\u4E2D\u540C\u4E00\u8FDB\u7A0B\u5185\u4F20\u8F93\u79C1\u94A5\uFF0C\u670D\u52A1\u91CD\u542F\u540E\u5BA2\u6237\u7AEF\u91CD\u65B0\u534F\u5546\u3002\u751F\u4EA7\u9700\u663E\u5F0F\u914D\u7F6E\u5141\u8BB8\u7684 CORS Origin\u3002\u4E1A\u52A1\u63D0\u4EA4\u540E\u7684\u5BA1\u8BA1\u5199\u5165\u91C7\u7528\u6700\u5927\u52AA\u529B\uFF0C\u5931\u8D25\u8BB0\u5F55\u7ED3\u6784\u5316\u9519\u8BEF\u65E5\u5FD7\uFF0C\u4FDD\u7559\u5DF2\u5B8C\u6210\u4E1A\u52A1\u7684\u539F\u59CB\u7ED3\u679C\u3002
+\u5E94\u7528\u663E\u793A\u540D\u79F0\u3001\u7248\u672C\u3001\u73AF\u5883\u3001\u9ED8\u8BA4\u8BED\u8A00\u548C\u65E5\u5FD7\u8BBE\u7F6E\u6765\u81EA\u540E\u7AEF \`config/_core.yml\`\uFF0C\u524D\u7AEF\u901A\u8FC7 \`app.info\` \u83B7\u53D6\u5B89\u5168\u5143\u4FE1\u606F\u3002\u5F00\u53D1\u9ED8\u8BA4 SQLite\u3001\u672C\u5730\u5B58\u50A8\u4E0E\u5185\u5B58\u7F13\u5B58\uFF1B\u751F\u4EA7\u542F\u52A8\u62D2\u7EDD\u8FD9\u4E9B\u672C\u5730 Provider\uFF0C\u5FC5\u987B\u5C06\u6240\u6709\u8282\u70B9\u8FDE\u63A5\u5230\u540C\u4E00\u5171\u4EAB\u6570\u636E\u5E93\u3001Redis \u4E0E S3\u3002\u4F20\u8F93\u5FC5\u987B\u5728\u6240\u6709\u8282\u70B9\u6CE8\u5165\u76F8\u540C\u53D7\u7BA1\u7248\u672C\u5316\u5BC6\u94A5\u73AF\u4E0E\u5171\u4EAB registry\uFF0C\u65E0\u9700\u4F1A\u8BDD\u7C98\u6027\uFF1B\u91CD\u542F\u8BFB\u53D6\u539F ring\uFF0C\u8F6E\u6362\u5148\u5206\u53D1\u65B0\u65E7\u7248\u672C\u518D\u5207 activeKeyId\u3002\u751F\u4EA7\u9700\u663E\u5F0F\u914D\u7F6E\u5141\u8BB8\u7684 CORS Origin\u3002\u4E1A\u52A1\u63D0\u4EA4\u540E\u7684\u5BA1\u8BA1\u5199\u5165\u91C7\u7528\u6700\u5927\u52AA\u529B\uFF0C\u5931\u8D25\u8BB0\u5F55\u7ED3\u6784\u5316\u9519\u8BEF\u65E5\u5FD7\uFF0C\u4FDD\u7559\u5DF2\u5B8C\u6210\u4E1A\u52A1\u7684\u539F\u59CB\u7ED3\u679C\u3002
 
 ### \u914D\u7F6E\u6269\u5C55
 
@@ -2031,10 +2197,10 @@ Apache-2.0
 }
 function printCompletionMessage(options) {
   writeCliMessage("");
-  writeCliMessage(chalk.green("\u2714 \u9879\u76EE\u521B\u5EFA\u6210\u529F\uFF01"));
+  writeCliMessage(chalk.green(cliM("cli_createSuccess")));
   writeCliMessage("");
   if (options.features.length > 0) {
-    writeCliMessage(chalk.bold("\u5DF2\u542F\u7528\u529F\u80FD:"));
+    writeCliMessage(chalk.bold(cliM("cli_createFeatures")));
     for (const featureId of options.features) {
       const feature = FEATURES[featureId];
       if (feature) {
@@ -2043,7 +2209,7 @@ function printCompletionMessage(options) {
     }
     writeCliMessage("");
   }
-  writeCliMessage("\u4E0B\u4E00\u6B65\uFF1A");
+  writeCliMessage(cliM("cli_nextSteps"));
   writeCliMessage(chalk.cyan(`  cd ${options.name}`));
   if (options.appType === "fullstack")
     writeCliMessage(chalk.cyan(cliM("cli_adminPasswordSaved")));
@@ -2084,25 +2250,61 @@ async function detectProject(cwd) {
 // src/commands/cli-add.ts
 var MODULE_MAP = {
   // iam 依赖 crypto（password hash）/ db（user 存储）/ cache（session 缓存）
-  "iam": { packages: ["@h-ai/iam"], deps: ["crypto", "db", "cache"], configKey: "iam", description: "\u8EAB\u4EFD\u4E0E\u8BBF\u95EE\u7BA1\u7406" },
+  "iam": { packages: ["@h-ai/iam"], deps: ["crypto", "db", "cache"], configKey: "iam", get description() {
+    return cliM("cli_featureIamName");
+  } },
   // 'db' 和 'reldb' 都映射到 @h-ai/reldb，兼容用户习惯（hai add db 和 hai add reldb 均可）
-  "db": { packages: ["@h-ai/reldb"], configKey: "db", description: "\u6570\u636E\u5E93" },
-  "reldb": { packages: ["@h-ai/reldb"], configKey: "db", description: "\u6570\u636E\u5E93" },
-  "cache": { packages: ["@h-ai/cache"], configKey: "cache", description: "\u7F13\u5B58" },
-  "ai": { packages: ["@h-ai/ai"], configKey: "ai", description: "AI \u96C6\u6210" },
-  "storage": { packages: ["@h-ai/storage"], configKey: "storage", description: "\u6587\u4EF6\u5B58\u50A8" },
-  "crypto": { packages: ["@h-ai/crypto"], description: "\u52A0\u5BC6\u6A21\u5757" },
-  "kit": { packages: ["@h-ai/kit"], description: "SvelteKit \u96C6\u6210\u5DE5\u5177" },
-  "ui": { packages: ["@h-ai/ui"], description: "UI \u7EC4\u4EF6\u5E93" },
-  "deploy": { packages: ["@h-ai/deploy"], configKey: "deploy", description: "\u81EA\u52A8\u5316\u90E8\u7F72" },
-  "vecdb": { packages: ["@h-ai/vecdb"], configKey: "vecdb", description: "\u5411\u91CF\u6570\u636E\u5E93" },
-  "datapipe": { packages: ["@h-ai/datapipe"], description: "\u6570\u636E\u5904\u7406\u7BA1\u9053" },
-  "reach": { packages: ["@h-ai/reach"], configKey: "reach", description: "\u6D88\u606F\u63A8\u9001" },
-  "scheduler": { packages: ["@h-ai/scheduler"], deps: ["db"], configKey: "scheduler", description: "\u4EFB\u52A1\u8C03\u5EA6" },
-  "audit": { packages: ["@h-ai/audit"], deps: ["db"], configKey: "audit", description: "\u5BA1\u8BA1\u65E5\u5FD7" },
-  "payment": { packages: ["@h-ai/payment"], configKey: "payment", description: "\u652F\u4ED8" },
-  "capacitor": { packages: ["@h-ai/capacitor"], description: "\u79FB\u52A8\u7AEF\u80FD\u529B" },
-  "api-client": { packages: ["@h-ai/api-client"], description: "HTTP \u5BA2\u6237\u7AEF" }
+  "db": { packages: ["@h-ai/reldb"], configKey: "db", get description() {
+    return cliM("cli_featureDbName");
+  } },
+  "reldb": { packages: ["@h-ai/reldb"], configKey: "db", get description() {
+    return cliM("cli_featureDbName");
+  } },
+  "cache": { packages: ["@h-ai/cache"], configKey: "cache", get description() {
+    return cliM("cli_featureCacheName");
+  } },
+  "ai": { packages: ["@h-ai/ai"], deps: ["db", "vecdb"], configKey: "ai", get description() {
+    return cliM("cli_featureAiName");
+  } },
+  "storage": { packages: ["@h-ai/storage"], configKey: "storage", get description() {
+    return cliM("cli_featureStorageName");
+  } },
+  "crypto": { packages: ["@h-ai/crypto"], deps: ["db"], get description() {
+    return cliM("cli_featureCryptoName");
+  } },
+  "kit": { packages: ["@h-ai/kit"], get description() {
+    return cliM("cli_featureKitName");
+  } },
+  "ui": { packages: ["@h-ai/ui"], get description() {
+    return cliM("cli_featureUiName");
+  } },
+  "deploy": { packages: ["@h-ai/deploy"], configKey: "deploy", get description() {
+    return cliM("cli_featureDeployName");
+  } },
+  "vecdb": { packages: ["@h-ai/vecdb"], configKey: "vecdb", get description() {
+    return cliM("cli_featureVecdbName");
+  } },
+  "datapipe": { packages: ["@h-ai/datapipe"], get description() {
+    return cliM("cli_featureDatapipeName");
+  } },
+  "reach": { packages: ["@h-ai/reach"], configKey: "reach", get description() {
+    return cliM("cli_featureReachName");
+  } },
+  "scheduler": { packages: ["@h-ai/scheduler"], deps: ["db"], configKey: "scheduler", get description() {
+    return cliM("cli_featureSchedulerName");
+  } },
+  "audit": { packages: ["@h-ai/audit"], deps: ["db"], configKey: "audit", get description() {
+    return cliM("cli_featureAuditName");
+  } },
+  "payment": { packages: ["@h-ai/payment"], configKey: "payment", get description() {
+    return cliM("cli_featurePaymentName");
+  } },
+  "capacitor": { packages: ["@h-ai/capacitor"], get description() {
+    return cliM("cli_featureCapacitorName");
+  } },
+  "api-client": { packages: ["@h-ai/api-client"], get description() {
+    return cliM("cli_featureApiClientName");
+  } }
 };
 async function addModule(options) {
   const spinner = ora();
@@ -2110,7 +2312,7 @@ async function addModule(options) {
   try {
     const project = await detectProject(cwd);
     if (!project) {
-      writeCliError(chalk.red("\u672A\u68C0\u6D4B\u5230\u9879\u76EE\uFF08\u627E\u4E0D\u5230 package.json\uFF09"));
+      writeCliError(chalk.red(cliM("cli_projectNotFound")));
       return;
     }
     let moduleName = options.module;
@@ -2121,13 +2323,14 @@ async function addModule(options) {
         value: key
       }));
       if (choices.length === 0) {
-        writeCliMessage(chalk.green("\u6240\u6709\u6A21\u5757\u5DF2\u5B89\u88C5\uFF01"));
+        writeCliMessage(chalk.green(cliM("cli_addAllInstalled")));
         return;
       }
       const { selected } = await prompts({
         type: "select",
+        hint: cliM("cli_selectHint"),
         name: "selected",
-        message: "\u9009\u62E9\u8981\u6DFB\u52A0\u7684\u6A21\u5757:",
+        message: cliM("cli_addModulePrompt"),
         choices
       });
       if (!selected)
@@ -2136,11 +2339,11 @@ async function addModule(options) {
     }
     const moduleDef = MODULE_MAP[moduleName];
     if (!moduleDef) {
-      writeCliError(chalk.red(`\u672A\u77E5\u6A21\u5757: ${moduleName}`));
-      writeCliMessage(`\u53EF\u7528\u6A21\u5757: ${Object.keys(MODULE_MAP).join(", ")}`);
+      writeCliError(chalk.red(cliM("cli_addUnknownModule", { params: { module: moduleName } })));
+      writeCliMessage(cliM("cli_addAvailableModules", { params: { modules: Object.keys(MODULE_MAP).join(", ") } }));
       return;
     }
-    const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-FC3QRKDO.js');
+    const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-US5CCAJ4.js');
     if (moduleDef.packages.every((p) => project.haiPackages.includes(p))) {
       const generatedFiles2 = await generateProjectAiSupport(
         cwd,
@@ -2151,12 +2354,12 @@ async function addModule(options) {
         }
       );
       if (generatedFiles2.length > 0) {
-        writeCliMessage(chalk.yellow(`\u6A21\u5757 ${moduleName} \u5DF2\u5B89\u88C5\uFF0C\u5DF2\u8865\u5168 AI \u652F\u6301\u6587\u4EF6`));
+        writeCliMessage(chalk.yellow(cliM("cli_addSupportCompleted", { params: { module: moduleName } })));
         for (const generatedFile of generatedFiles2) {
-          writeCliMessage(chalk.gray(`  + ${generatedFile} (AI support)`));
+          writeCliMessage(chalk.gray(cliM("cli_addSupportFile", { params: { file: generatedFile } })));
         }
       } else {
-        writeCliMessage(chalk.yellow(`\u6A21\u5757 ${moduleName} \u5DF2\u5B89\u88C5`));
+        writeCliMessage(chalk.yellow(cliM("cli_addAlreadyInstalled", { params: { module: moduleName } })));
       }
       return;
     }
@@ -2171,7 +2374,7 @@ async function addModule(options) {
         }
       }
     }
-    spinner.start("\u66F4\u65B0 package.json...");
+    spinner.start(cliM("cli_addUpdateManifest"));
     const pkgPath = path2.join(cwd, "package.json");
     const pkg = await fse.readJson(pkgPath);
     if (!pkg.dependencies)
@@ -2192,12 +2395,12 @@ async function addModule(options) {
       const configDir = path2.join(cwd, "config");
       const configPath = path2.join(configDir, `_${moduleDef.configKey}.yml`);
       if (!await fileExists(configPath)) {
-        spinner.start(`\u751F\u6210\u914D\u7F6E\u6587\u4EF6 config/_${moduleDef.configKey}.yml...`);
+        spinner.start(cliM("cli_addConfig", { params: { config: moduleDef.configKey } }));
         const content = generateConfigFile(moduleDef.configKey);
         await writeFile(configPath, content);
         spinner.succeed();
       } else {
-        writeCliMessage(chalk.gray(`\u914D\u7F6E\u6587\u4EF6\u5DF2\u5B58\u5728: config/_${moduleDef.configKey}.yml`));
+        writeCliMessage(chalk.gray(cliM("cli_addConfigExists", { params: { config: moduleDef.configKey } })));
       }
     }
     if (moduleDef.deps) {
@@ -2208,7 +2411,7 @@ async function addModule(options) {
           if (!await fileExists(depConfigPath)) {
             const content = generateConfigFile(depDef.configKey);
             await writeFile(depConfigPath, content);
-            writeCliMessage(chalk.gray(`  + config/_${depDef.configKey}.yml (\u4F9D\u8D56)`));
+            writeCliMessage(chalk.gray(cliM("cli_addDependencyConfig", { params: { config: depDef.configKey } })));
           }
         }
       }
@@ -2224,28 +2427,36 @@ async function addModule(options) {
     );
     if (generatedFiles.length > 0) {
       for (const generatedFile of generatedFiles) {
-        writeCliMessage(chalk.gray(`  + ${generatedFile} (AI support)`));
+        writeCliMessage(chalk.gray(cliM("cli_addSupportFile", { params: { file: generatedFile } })));
       }
     }
+    const productionPath = path2.join(cwd, ".env.prod");
+    const previousProduction = await fileExists(productionPath) ? await fse.readFile(productionPath, "utf8") : "";
+    const configured = new Set([...previousProduction.matchAll(/^([A-Z][A-Z0-9_]*)=/gm)].map((match) => match[1]));
+    const previousValues = parseEnv(previousProduction);
+    const production = generateProductionEnvironment([moduleName, ...moduleDef.deps ?? []], previousValues.HAI_DB_TYPE === "mysql" ? { db: { type: "mysql", database: previousValues.HAI_DB_DATABASE } } : void 0).split("\n").filter((line) => !/^[A-Z][A-Z0-9_]*=/.test(line) || !configured.has(line.split("=")[0]));
+    await writeFile(productionPath, `${previousProduction.trimEnd()}
+
+${production.join("\n")}`);
     const doInstall = options.install !== false;
     if (doInstall) {
-      spinner.start("\u5B89\u88C5\u4F9D\u8D56...");
+      spinner.start(cliM("cli_addInstall"));
       const { execSync: execSync2 } = await import('child_process');
       const pm = await detectPackageManager(cwd);
       execSync2(`${pm} install`, { cwd, stdio: "ignore" });
       spinner.succeed();
     }
     writeCliMessage("");
-    writeCliMessage(chalk.green(`\u2714 \u6A21\u5757 ${moduleName} \u6DFB\u52A0\u6210\u529F\uFF01`));
+    writeCliMessage(chalk.green(cliM("cli_addSuccess", { params: { module: moduleName } })));
     writeCliMessage("");
-    writeCliMessage("\u5DF2\u6DFB\u52A0\u7684\u5305:");
+    writeCliMessage(cliM("cli_addPackages"));
     for (const pkg2 of allPackages) {
       writeCliMessage(chalk.cyan(`  ${pkg2}`));
     }
     writeCliMessage("");
   } catch (error) {
     spinner.fail();
-    writeCliError(chalk.red("\u6DFB\u52A0\u6A21\u5757\u5931\u8D25:"), { error });
+    writeCliError(chalk.red(cliM("cli_addFailed")), { error });
     throw error;
   }
 }
@@ -2446,38 +2657,133 @@ function prepareDependencyInputs(cwd) {
 function basenameSafe(directory) {
   return directory.slice(dirname(directory).length + 1).toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^-+/, "") || "app";
 }
-function displayDeployValue(name, value) {
-  if (/PASSWORD|SECRET|TOKEN|APIKEY|PRIVATEKEY|ACCESSKEY|AUTHORIZATION/i.test(name.replace(/[^a-z0-9]/gi, "")) || /(?:^|_)PASS$/i.test(name) || value.includes("PRIVATE KEY"))
-    return cliM("cli_deploy_secret");
-  try {
-    const parsed2 = JSON.parse(value);
-    if (parsed2 && typeof parsed2 === "object") {
-      const sanitize = (object) => {
-        if (Array.isArray(object))
-          return object.map(sanitize);
-        if (object && typeof object === "object")
-          return Object.fromEntries(Object.entries(object).map(([key, item]) => [key, /PASSWORD|SECRET|TOKEN|APIKEY|PRIVATEKEY|ACCESSKEY|AUTHORIZATION/i.test(key.replace(/[^a-z0-9]/gi, "")) || /(?:^|_)PASS$/i.test(key) ? cliM("cli_deploy_secret") : typeof item === "string" ? displayDeployValue(key, item) : sanitize(item)]));
-        return object;
-      };
-      return JSON.stringify(sanitize(parsed2));
-    }
-  } catch {
-  }
-  try {
-    const url = new URL(value);
-    if (url.username || url.password) {
-      url.username = "***";
-      url.password = "***";
-    }
-    for (const key of url.searchParams.keys()) {
-      if (/password|secret|token|key|authorization/i.test(key))
-        url.searchParams.set(key, "***");
-    }
-    return url.toString();
-  } catch {
-    return value;
-  }
-}
+
+// ../reldb/dist/chunk-SDS2ZT3V.js
+external_exports.enum(["sqlite", "postgresql", "mysql"]);
+var ReldbOperationLogConfigSchema = external_exports.object({
+  read: external_exports.boolean().default(false),
+  write: external_exports.boolean().default(false),
+  /** 安全数量摘要的最大字符数；0 表示省略摘要，永不记录 SQL 原文或参数值。 */
+  maxLength: external_exports.number().int().min(0).default(1e3),
+  level: external_exports.enum(["info", "debug", "trace"]).default("debug")
+});
+var OperationLogConfigFieldSchema = {
+  operationLog: ReldbOperationLogConfigSchema.optional()
+};
+var PoolConfigSchema = external_exports.object({
+  /** PostgreSQL 已建立连接的最小保留数（默认 1，不主动预建） */
+  min: external_exports.number().int().min(0).default(1),
+  /** 最大连接数（默认 10） */
+  max: external_exports.number().int().min(1).default(10),
+  /** PostgreSQL 空闲连接超时，毫秒（默认 30000；0 禁用） */
+  idleTimeout: external_exports.number().int().min(0).default(3e4),
+  /** 获取连接超时，毫秒（默认10000）；PostgreSQL >=0，0禁用；MySQL排队+建连总期限为1–2147483647 */
+  acquireTimeout: external_exports.number().int().min(0).default(1e4)
+});
+var MysqlPoolConfigSchema = external_exports.object({
+  /** 最大连接数（默认 10） */
+  max: external_exports.number().int().min(1).default(10),
+  /** 获取连接超时，毫秒（默认10000）；PostgreSQL >=0，0禁用；MySQL排队+建连总期限为1–2147483647 */
+  acquireTimeout: external_exports.number().int().min(1).max(2147483647).default(1e4),
+  /** MySQL 等待队列最大请求数（默认 1000；正整数，不支持无限队列） */
+  queueLimit: external_exports.number().int().min(1).default(1e3)
+}).strict();
+var SslConfigSchema = external_exports.union([
+  external_exports.boolean(),
+  external_exports.enum(["require", "prefer", "allow", "disable"]),
+  external_exports.record(external_exports.string(), external_exports.unknown())
+]);
+var MysqlSslConfigSchema = external_exports.union([
+  external_exports.literal(false),
+  external_exports.object({
+    /** MySQL 是否校验证书链（默认 true）；false 明确放弃服务端认证 */
+    rejectUnauthorized: external_exports.boolean().default(true),
+    /** MySQL 是否验证 DNS 主机身份（默认 true）；仅证书链验证开启时有效 */
+    verifyIdentity: external_exports.boolean().default(true),
+    /** MySQL 信任的 CA，PEM 内容；省略时使用 Node 信任库 */
+    ca: external_exports.string().min(1).optional(),
+    /** MySQL 客户端证书，PEM 内容；必须同时提供 key */
+    cert: external_exports.string().min(1).optional(),
+    /** MySQL 客户端私钥，PEM 内容；必须同时提供 cert */
+    key: external_exports.string().min(1).optional()
+  }).strict().refine((ssl) => Boolean(ssl.cert) === Boolean(ssl.key), { path: ["key"] })
+]);
+var SqliteOptionsSchema = external_exports.object({
+  /** 是否启用 WAL 模式（默认 true），可提高并发读写性能 */
+  walMode: external_exports.boolean().default(true),
+  /** 是否只读模式（默认 false） */
+  readonly: external_exports.boolean().default(false),
+  /**
+   * 执行方式（默认 sync）。
+   *
+   * - `sync`：主线程直接执行 better-sqlite3（同步阻塞主线程事件循环）。
+   * - `worker`：在专用 worker 线程持有唯一连接执行，把阻塞移出主线程。
+   *   注意 WAL 只改善数据库锁并发，无法避免 better-sqlite3 同步调用占用调用线程。
+   */
+  executor: external_exports.enum(["sync", "worker"]).default("sync"),
+  /** worker 执行方式下等待连接打开的超时（毫秒，默认 10000） */
+  workerConnectTimeoutMs: external_exports.number().int().positive().default(1e4)
+});
+var MysqlOptionsSchema = external_exports.object({
+  /** 字符集（默认 utf8mb4），推荐使用 utf8mb4 支持完整 Unicode */
+  charset: external_exports.string().default("utf8mb4")
+}).strict();
+var NetworkConfigSchema = external_exports.object({
+  /**
+   * 连接字符串（可选）
+   * 如果提供 url，将优先使用，忽略 host/port 等字段
+   */
+  url: external_exports.string().optional(),
+  /** 数据库主机地址（默认 localhost） */
+  host: external_exports.string().default("localhost"),
+  /**
+   * 数据库端口
+   * - PostgreSQL 默认 5432
+   * - MySQL 默认 3306
+   */
+  port: external_exports.number().int().min(1).max(65535).optional(),
+  /** 数据库名称 */
+  database: external_exports.string(),
+  /** 数据库用户名 */
+  user: external_exports.string().optional(),
+  /** 数据库密码 */
+  password: external_exports.string().optional(),
+  /** SSL/TLS 连接配置 */
+  ssl: SslConfigSchema.optional(),
+  /** 连接池配置 */
+  pool: PoolConfigSchema.optional()
+});
+var SqliteConfigSchema = external_exports.object({
+  type: external_exports.literal("sqlite"),
+  /** 数据库文件路径（如 './data.db'）或 ':memory:'（内存数据库） */
+  database: external_exports.string(),
+  /** SQLite 特定选项 */
+  sqlite: SqliteOptionsSchema.optional(),
+  ...OperationLogConfigFieldSchema
+});
+var PostgresqlConfigSchema = NetworkConfigSchema.extend({
+  type: external_exports.literal("postgresql"),
+  ...OperationLogConfigFieldSchema
+});
+var MysqlConfigSchema = NetworkConfigSchema.extend({
+  type: external_exports.literal("mysql"),
+  /** 网络数据库URL；MySQL空串表示使用分字段，非空仅mysql://且拒绝query/fragment，优先于host/port/database/user/password */
+  url: external_exports.union([external_exports.literal("").transform(() => void 0), external_exports.url({ protocol: /^mysql$/ }).refine((value) => !value.includes("?") && !value.includes("#"))]).optional(),
+  /** 数据库：SQLite文件路径或:memory:；PostgreSQL必填名称；MySQL无URL时必填，URL模式从URL读取 */
+  database: external_exports.string().min(1).optional(),
+  /** TLS：PostgreSQL使用其模式；MySQL仅false或严格对象，空对象默认校验证书链和DNS身份 */
+  ssl: MysqlSslConfigSchema.optional(),
+  /** 连接池配置：PostgreSQL支持min/idleTimeout；MySQL仅max/acquireTimeout/queueLimit，拒绝其他字段 */
+  pool: MysqlPoolConfigSchema.optional(),
+  /** MySQL 特定选项 */
+  mysql: MysqlOptionsSchema.optional(),
+  ...OperationLogConfigFieldSchema
+}).refine((config) => Boolean(config.url) || Boolean(config.database), { path: ["database"] });
+var ReldbConfigSchema = external_exports.discriminatedUnion("type", [
+  SqliteConfigSchema,
+  PostgresqlConfigSchema,
+  MysqlConfigSchema
+]);
 var CLOUD_FIELDS = {
   "neon": ["apiKey"],
   "upstash": ["email", "apiKey"],
@@ -2523,7 +2829,7 @@ async function ask(question) {
     throw new Error(cliM("cli_deploy_cancelled"));
   return answer.value;
 }
-function validateField(value, field) {
+function validateField(value, field, backend) {
   if (value === "")
     return field.required ? cliM("cli_deploy_required") : true;
   if (field.kind === "port")
@@ -2541,8 +2847,8 @@ function validateField(value, field) {
   }
   if (field.name === "ssl") {
     const parsed2 = parseDocument(value);
-    const ssl = parsed2.errors.length ? void 0 : parsed2.toJS();
-    return typeof ssl === "boolean" || ["require", "prefer", "allow", "disable"].includes(String(ssl)) || ssl !== null && typeof ssl === "object" && !Array.isArray(ssl) || cliM("cli_deploy_invalid_value");
+    const schema = backend === "mysql" ? MysqlSslConfigSchema : SslConfigSchema;
+    return parsed2.errors.length === 0 && schema.safeParse(parsed2.toJS()).success || cliM("cli_deploy_invalid_value");
   }
   if (field.name === "headers") {
     try {
@@ -2561,8 +2867,8 @@ function ensureConfigNode(appDir, requirement, backend) {
     return;
   const directory = join(appDir, "config");
   mkdirSync(directory, { recursive: true });
-  const path7 = join(directory, `_${requirement.configName}.yml`);
-  const document = parseDocument(existsSync(path7) ? readFileSync(path7, "utf8") : "{}\n");
+  const path9 = join(directory, `_${requirement.configName}.yml`);
+  const document = parseDocument(existsSync(path9) ? readFileSync(path9, "utf8") : "{}\n");
   if (document.errors.length)
     throw new Error(cliM("cli_deploy_invalid_value"));
   if (requirement.configPath.length && !document.hasIn(requirement.configPath))
@@ -2574,8 +2880,8 @@ function ensureConfigNode(appDir, requirement, backend) {
       document.setIn(["login", "ldap"], `\${HAI_IAM_LOGIN_LDAP:false}`);
   }
   const content = document.toString();
-  if (!existsSync(path7) || readFileSync(path7, "utf8") !== content)
-    writeFileSync(path7, content);
+  if (!existsSync(path9) || readFileSync(path9, "utf8") !== content)
+    writeFileSync(path9, content);
 }
 function connectionEnv(requirement, backend, config) {
   if (requirement.service === "ldap")
@@ -2658,7 +2964,7 @@ async function configureDeployMiddleware(module, scan, environment, config, yes
       }
       services[requirement.service] = cloud;
     } else {
-      if (mode === "default" && (requirement.service === "sms" || backendName === "api"))
+      if (mode === "default" && ["aliyun-sms", "api"].includes(backendName))
         throw new Error(cliM("cli_deploy_cloud_unsupported", { params: { backend: backend.label } }));
       const connection = mode === "custom" && backendName === current.backend ? { ...requirement.config } : requirement.configName === "reach" ? { name: requirement.config.name ?? requirement.service } : {};
       for (const field of backend.fields) {
@@ -2666,22 +2972,27 @@ async function configureDeployMiddleware(module, scan, environment, config, yes
         const initial = previous2 === void 0 ? field.defaultValue ?? "" : typeof previous2 === "object" ? JSON.stringify(previous2) : String(previous2);
         const variable = `${requirement.envPrefix}_${field.name.toUpperCase()}`;
         const info = moduleEnvironmentVariables(requirement.configName).find((item) => item.name === variable);
-        const value = mode === "custom" && !yes ? String(await ask({ type: field.secret ? "password" : "text", name: "value", message: cliM("cli_deploy_field", { params: { name: variable, description: info?.description ?? field.name, constraint: info?.constraint ?? field.kind ?? "string" } }), initial, validate: (input) => validateField(String(input), field) })) : initial;
+        const value = mode === "custom" && !yes ? String(await ask({ type: field.secret ? "password" : "text", name: "value", message: cliM("cli_deploy_field", { params: { description: info?.description ?? field.name, constraint: info?.constraint ?? field.kind ?? "string" } }), initial, validate: (input) => validateField(String(input), field, backendName) })) : initial;
+        if (field.name === "ssl" && validateField(value, field, backendName) !== true)
+          throw new Error(cliM("cli_deploy_invalid_value"));
         if (value !== "") {
           connection[field.name] = field.kind === "number" || field.kind === "port" ? Number(value) : field.kind === "boolean" ? value === "true" : field.name === "headers" || field.name === "ssl" ? parseDocument(value).toJS() : value;
         } else {
           delete connection[field.name];
         }
       }
+      if (requirement.service === "db") {
+        const validated = ReldbConfigSchema.safeParse({ ...connection, type: backendName });
+        if (!validated.success)
+          throw new Error(cliM("cli_deploy_config_invalid", { params: { path: join(scan.appDir ?? ".", "config", "_db.yml"), fields: validated.error.issues.map((issue) => issue.path.join(".")).join(", ") } }));
+      }
       Object.assign(updates, connectionEnv(requirement, backendName, connection));
     }
     ensureConfigNode(scan.appDir ?? ".", requirement, backendName);
     const saved = module.saveDeploymentEnvironment(environment, updates);
     if (!saved.success)
       throw new Error(saved.error.message);
-    for (const [name, value] of Object.entries(updates)) {
-      writeCliMessage(cliM("cli_deploy_saved", { params: { name, value: displayDeployValue(name, value) } }));
-    }
+    writeCliMessage(cliM("cli_deploy_saved", { params: { service: requirement.service } }));
   }
   config.services = Object.keys(services).length ? services : void 0;
   return modes;
@@ -2697,14 +3008,19 @@ async function configureDeployTarget(module, config, environment, nonInteractive
     if (existing.type && existing.type !== "docker-ssh")
       throw new Error(cliM("cli_deploy_bundle_provider"));
     config.provider = { type: "docker-ssh", remote: { runtime: "auto" }, expose: { hostPort: 3e3 }, ...existing };
+    const candidate = module.ProviderConfigSchema.safeParse(config.provider);
+    if (!candidate.success && candidate.error.issues.some((issue) => issue.path[0] === "ssh")) {
+      const provider2 = configObject(config.provider);
+      delete provider2.ssh;
+    }
   }
   const current = module.ProviderConfigSchema.safeParse(config.provider);
   if (current.success && (bundleOnly || current.data.type !== "docker-ssh" || current.data.ssh)) {
     config.provider = current.data;
-    writeCliMessage(cliM("cli_deploy_target_reused", { params: { target: current.data.type === "docker-ssh" ? current.data.ssh ? `${current.data.ssh.username}@${current.data.ssh.host}:${current.data.ssh.port}` : cliM("cli_deploy_bundle_local") : "Vercel" } }));
+    writeCliMessage(bundleOnly ? cliM("cli_deploy_bundle_target") : cliM("cli_deploy_target_reused", { params: { target: current.data.type === "docker-ssh" && current.data.ssh ? `${current.data.ssh.username}@${current.data.ssh.host}:${current.data.ssh.port}` : "Vercel" } }));
     return;
   }
-  if (nonInteractive)
+  if (nonInteractive || bundleOnly)
     throw new Error(cliM("cli_deploy_target_missing", { params: { fields: current.success ? "provider.ssh" : current.error.issues.map((issue) => `provider.${issue.path.join(".")}`).join(", ") } }));
   const original = configObject(config.provider);
   const platform = await prompts({
@@ -2810,7 +3126,7 @@ async function deployCommand(options) {
         localModule = localRequire.resolve("@h-ai/deploy");
       } catch {
       }
-      deployModule = localModule ? await import(pathToFileURL(localModule).href) : await import('./src-2V6VP4I5.js');
+      deployModule = localModule ? await import(pathToFileURL(localModule).href) : await import('./src-DSJJXM2F.js');
     } catch {
       writeCliError(chalk.red(cliM("cli_deploy_module_missing")));
       writeCliMessage(chalk.cyan("  pnpm add -D @h-ai/deploy"));
@@ -2948,38 +3264,29 @@ async function deployCommand(options) {
       serviceModes
     });
     if (!deployResult.success) {
+      const execution = deployModule.getDeployCommandState(deployResult.error);
+      if (execution) {
+        const localKey = execution.localTermination === "not-started" ? "cli_deploy_local_not_started" : execution.localTermination === "confirmed" ? "cli_deploy_local_confirmed" : "cli_deploy_local_unknown";
+        writeCliMessage(cliM(localKey));
+        if (execution.remoteExecution)
+          writeCliMessage(cliM(execution.remoteExecution === "finished" ? "cli_deploy_remote_finished" : "cli_deploy_remote_unknown"));
+        if (execution.deploymentId && execution.resultFile)
+          writeCliMessage(cliM("cli_deploy_result_check", { params: { id: execution.deploymentId, path: execution.resultFile } }));
+      }
       if (deployResult.error.ext?.recovery) {
         writeCliMessage(deployResult.error.suggestion ?? cliM("cli_deploy_command_failed"));
       }
       throw new Error(cliM("cli_deploy_failed", { params: { message: deployResult.error.message } }));
     }
     spinner.succeed(chalk.green(cliM(deployResult.data.status === "packaged" ? "cli_deploy_bundle_ready" : "cli_deploy_success")));
-    for (const key of Object.keys(process4.env)) {
-      if (originalEnv[key] === void 0)
-        delete process4.env[key];
-    }
-    Object.assign(process4.env, originalEnv);
-    const completedEnvironment = deployModule.loadDeploymentEnvironment({ environment: environment.data.environment, envDir: environment.data.envDir });
-    if (!completedEnvironment.success)
-      throw new Error(completedEnvironment.error.message);
-    for (const requirement of scan.middlewares ?? []) {
-      if ((serviceModes[requirement.envPrefix] ?? serviceModes[requirement.service]) === "keep")
-        continue;
-      const value = completedEnvironment.data.values[requirement.envPrefix];
-      if (value !== void 0)
-        writeCliMessage(cliM("cli_deploy_saved", { params: { name: requirement.envPrefix, value: displayDeployValue(requirement.envPrefix, value) } }));
-    }
     writeCliMessage("");
-    if (deployResult.data.bundlePath)
+    if (deployResult.data.bundlePath && (deployResult.data.status !== "packaged" || !deployResult.data.instructions))
       writeCliMessage(cliM("cli_deploy_bundle_path", { params: { path: deployResult.data.bundlePath } }));
     if (deployResult.data.status === "packaged")
       writeCliMessage(deployResult.data.instructions ?? "");
     else
       writeCliMessage(chalk.cyan(cliM("cli_deploy_url", { params: { url: deployResult.data.url } })));
     writeCliMessage(chalk.gray(cliM("cli_deploy_id", { params: { id: deployResult.data.deploymentId } })));
-    if (deployResult.data.envVarsSet.length > 0) {
-      writeCliMessage(chalk.gray(cliM("cli_deploy_env", { params: { names: deployResult.data.envVarsSet.join(", ") } })));
-    }
     writeCliMessage("");
   } catch (error) {
     spinner.fail(chalk.red(cliM("cli_deploy_command_failed")));
@@ -3003,29 +3310,213 @@ async function deployCommand(options) {
     restoreProjectLogger?.();
   }
 }
+function appendAt(source, marker, entry) {
+  if (source.split(marker).length !== 2)
+    throw new Error(cliM("cli_generateUnsupportedAggregator"));
+  if (source.split(/\r?\n/).some((line) => line.trim() === entry.trim()))
+    return source;
+  const moduleName = /^import .+ from ['"](.+)['"]$/.exec(entry)?.[1];
+  if (moduleName) {
+    for (const match of source.matchAll(/^import (?!type\b)[^\r\n]+ from ['"](\.[^'"]+)['"]\r?$/gm)) {
+      if (match[1].localeCompare(moduleName) > 0)
+        return `${source.slice(0, match.index)}${entry}
+${source.slice(match.index)}`;
+    }
+  }
+  return source.replace(marker, `${entry}
+${marker}`);
+}
+async function generateServApi(context, target) {
+  const contracts = target.packages.filter((pkg) => pkg.dependencies["@h-ai/api-contract"] && pkg.dependencies.zod && pkg.name in target.target.dependencies);
+  if (contracts.length !== 1)
+    throw new Error(cliM("cli_generateUnsupportedAggregator"));
+  const contract = contracts[0];
+  const contractSources = await fse.readdir(path2.join(contract.directory, "src"));
+  const aggregators = [];
+  for (const name of contractSources.filter((name2) => name2.endsWith(".ts"))) {
+    const file = path2.join(contract.directory, "src", name);
+    const content = await fse.readFile(file, "utf8");
+    if (content.includes("// @hai-generator:contracts:entries"))
+      aggregators.push({ path: file, content });
+  }
+  if (aggregators.length !== 1)
+    throw new Error(cliM("cli_generateUnsupportedAggregator"));
+  const aggregator = aggregators[0];
+  const contractIndex = path2.join(contract.directory, "src/index.ts");
+  const procedureIndex = path2.join(target.target.directory, "src/server/procedures/index.ts");
+  const indexSource = await fse.readFile(contractIndex, "utf8");
+  const procedureSource = await fse.readFile(procedureIndex, "utf8");
+  const contractName = `${context.camelCase}Contract`;
+  const factoryName = `create${context.pascalCase}Procedures`;
+  const domainMarker = `// @hai-generator:domain ${context.camelCase}`;
+  const contractFile = path2.join(contract.directory, "src", `${context.kebabCase}-contract.ts`);
+  const procedureFile = path2.join(target.target.directory, "src/server/procedures", `${context.kebabCase}-procedures.ts`);
+  const importLine = `import { ${contractName} } from './${context.kebabCase}-contract.js'`;
+  const entryLine = `  ${context.camelCase}: ${contractName},`;
+  const factoryImport = `import { ${factoryName} } from './${context.kebabCase}-procedures.js'`;
+  const domainProperty = new RegExp(`^\\s*(?:${context.camelCase}|['"]${context.camelCase}['"]):`, "m");
+  if (domainProperty.test(aggregator.content) || domainProperty.test(procedureSource)) {
+    for (const file of [contractFile, procedureFile]) {
+      if (!await fse.pathExists(file) || !(await fse.readFile(file, "utf8")).includes(domainMarker))
+        throw new Error(cliM("cli_generateDomainExists", { params: { name: context.camelCase } }));
+    }
+  }
+  const contractContent = `${domainMarker}
+import { apiContract } from '@h-ai/api-contract'
+import { z } from 'zod'
+
+/**
+ * ${context.pascalCase} \u793A\u4F8B\u5951\u7EA6\uFF1AGET \u5217\u8868\u4E0E POST \u6821\u9A8C\u56DE\u663E\uFF0C\u4E0D\u6267\u884C\u6301\u4E45\u5199\u5165\u3002
+ * @example client.${context.camelCase}.create({ name: 'Example' })
+ */
+export const ${contractName} = {
+  list: apiContract
+    .route({ method: 'GET', path: '/${context.kebabCase}', operationId: '${context.camelCase}.list', tags: ['${context.kebabCase}'] })
+    .output(apiContract.haiResultSchema(z.object({ items: z.array(z.object({ name: z.string() })) }))),
+  create: apiContract
+    .route({ method: 'POST', path: '/${context.kebabCase}', operationId: '${context.camelCase}.create', tags: ['${context.kebabCase}'] })
+    .input(z.object({ name: z.string().min(1) }))
+    .output(apiContract.haiResultSchema(z.object({ name: z.string() }))),
+}
+`;
+  const procedureContent = `${domainMarker}
+import type { ServContext } from '@h-ai/serv'
+import { ok } from '@h-ai/core'
+import { serv } from '@h-ai/serv'
+import { ${contractName} } from '${contract.name}'
+
+/**
+ * \u521B\u5EFA ${context.pascalCase} \u793A\u4F8B\u8FC7\u7A0B\uFF1B\u65B0\u589E\u6301\u4E45\u5199\u5165\u524D\u63A5\u5165\u6388\u6743\u4E0E\u4E1A\u52A1\u670D\u52A1\u3002
+ * @returns \u4E0E\u5171\u4EAB\u5951\u7EA6\u4E00\u81F4\u7684\u516C\u5F00\u8FC7\u7A0B\uFF1B\u793A\u4F8B\u4E0D\u8BBF\u95EE\u7528\u6237\u6570\u636E\u3002
+ * @example const procedures = { ${context.camelCase}: ${factoryName}() }
+ */
+export function ${factoryName}() {
+  return serv
+    .implement(${contractName})
+    .context<ServContext>()
+    .route('list', () => ok({ items: [] }))
+    .route('create', ({ input }) => ok({ name: input.name }))
+    .build()
+}
+`;
+  return [
+    { path: contractFile, content: contractContent },
+    { path: procedureFile, content: procedureContent },
+    { path: aggregator.path, previousContent: aggregator.content, content: appendAt(appendAt(aggregator.content, "// @hai-generator:contracts:imports", importLine), "  // @hai-generator:contracts:entries", entryLine) },
+    { path: contractIndex, previousContent: indexSource, content: appendAt(indexSource, "// @hai-generator:contracts:exports", `export * from './${context.kebabCase}-contract.js'`) },
+    { path: procedureIndex, previousContent: procedureSource, content: appendAt(appendAt(procedureSource, "// @hai-generator:procedures:imports", factoryImport), "    // @hai-generator:procedures:entries", `    ${context.camelCase}: ${factoryName}(),`) }
+  ];
+}
+function isInside(root, file) {
+  const relative2 = path2.relative(root, file);
+  return relative2 !== ".." && !relative2.startsWith(`..${path2.sep}`) && !path2.isAbsolute(relative2);
+}
+async function readPackage(directory) {
+  if (!await fse.pathExists(path2.join(directory, "package.json")))
+    return void 0;
+  const value = await fse.readJson(path2.join(directory, "package.json"));
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    throw new Error(cliM("cli_generateUnsupportedProject"));
+  const dependencies = {};
+  for (const key of ["dependencies", "devDependencies"]) {
+    const entries = key in value ? Reflect.get(value, key) : void 0;
+    if (entries && typeof entries === "object" && !Array.isArray(entries)) {
+      for (const [name2, version] of Object.entries(entries)) {
+        if (typeof version === "string")
+          dependencies[name2] = version;
+      }
+    }
+  }
+  const name = "name" in value && typeof value.name === "string" ? value.name : path2.basename(directory);
+  if (!/^(?:@[\w.-]+\/)?[\w.-]+$/.test(name))
+    throw new Error(cliM("cli_generateUnsupportedProject"));
+  return { directory, name, dependencies };
+}
+function generateArchitecture(pkg) {
+  if (pkg.dependencies["@sveltejs/kit"])
+    return "sveltekit";
+  if (pkg.dependencies["@h-ai/serv"])
+    return "serv";
+  return pkg.dependencies.svelte ? "svelte" : "other";
+}
+async function resolveGenerateTarget(options) {
+  const cwd = await fse.realpath(path2.resolve(options.cwd ?? "."));
+  let root = cwd;
+  for (let current = cwd; ; current = path2.dirname(current)) {
+    if (await fse.pathExists(path2.join(current, "pnpm-workspace.yaml"))) {
+      root = current;
+      break;
+    }
+    if (path2.dirname(current) === current)
+      break;
+  }
+  const packages = [];
+  const addPackage = async (directory) => {
+    if (!isInside(root, directory))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    const real = await fse.realpath(directory);
+    if (!isInside(root, real))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    const pkg = await readPackage(real);
+    if (pkg && !packages.some((value) => value.directory === real))
+      packages.push(pkg);
+  };
+  await addPackage(root);
+  if (await fse.pathExists(path2.join(root, "pnpm-workspace.yaml"))) {
+    const workspace = parse(await fse.readFile(path2.join(root, "pnpm-workspace.yaml"), "utf8"));
+    const patterns = workspace && typeof workspace === "object" && "packages" in workspace && Array.isArray(workspace.packages) ? workspace.packages : [];
+    for (const pattern of patterns) {
+      if (typeof pattern !== "string" || pattern.startsWith("!") || pattern.split(/[\\/]/).includes("..") || path2.isAbsolute(pattern))
+        throw new Error(cliM("cli_generateUnsupportedProject"));
+      for await (const manifest of glob(`${pattern}/package.json`, { cwd: root, exclude: ["**/node_modules/**"] }))
+        await addPackage(path2.dirname(path2.resolve(root, manifest)));
+    }
+  }
+  if (cwd !== root)
+    await addPackage(cwd);
+  const selected = options.workspace ? packages.filter((pkg) => pkg.name === options.workspace || pkg.directory === path2.resolve(root, options.workspace)) : packages.filter((pkg) => pkg.directory === cwd);
+  const applicable = (pkg) => {
+    const architecture = generateArchitecture(pkg);
+    return options.type === "api" ? architecture === "serv" || architecture === "sveltekit" && Boolean(pkg.dependencies["@h-ai/kit"]) && Boolean(pkg.dependencies.zod) : options.type === "page" ? architecture === "sveltekit" : options.type === "component" ? ["sveltekit", "svelte"].includes(architecture) : Object.keys(pkg.dependencies).some((name) => name.startsWith("@h-ai/"));
+  };
+  const candidates = options.workspace || selected.length === 1 && (cwd !== root || applicable(selected[0])) ? selected.filter(applicable) : packages.filter(applicable);
+  if (candidates.length !== 1)
+    throw new Error(cliM(candidates.length > 1 ? "cli_generateAmbiguousWorkspace" : "cli_generateUnsupportedProject"));
+  const target = candidates[0];
+  if (generateArchitecture(target) === "sveltekit" && (options.type === "page" || options.type === "api")) {
+    for (const name of ["svelte.config.js", "svelte.config.mjs", "svelte.config.cjs", "svelte.config.ts"]) {
+      const configFile = path2.join(target.directory, name);
+      if (await fse.pathExists(configFile) && /\bfiles\s*[:.[(]/.test(await fse.readFile(configFile, "utf8")))
+        throw new Error(cliM("cli_generateCustomRoutes"));
+    }
+  }
+  return { root, target, packages };
+}
+
+// src/commands/cli-generate.ts
 var GENERATORS = {
   page: {
-    description: "SvelteKit \u9875\u9762",
+    description: () => cliM("cli_generatePageDescription"),
     defaultPath: "src/routes",
     generate: generatePage
   },
   component: {
-    description: "Svelte \u7EC4\u4EF6",
+    description: () => cliM("cli_generateComponentDescription"),
     defaultPath: "src/lib/components",
     generate: generateComponent
   },
   api: {
-    description: "API \u7AEF\u70B9",
+    description: () => cliM("cli_generateApiDescription"),
     defaultPath: "src/routes/api",
     generate: generateApi
   },
   model: {
-    description: "\u6570\u636E\u6A21\u578B",
+    description: () => cliM("cli_generateModelDescription"),
     defaultPath: "src/lib/models",
     generate: generateModel
   },
   migration: {
-    description: "\u6570\u636E\u5E93\u8FC1\u79FB",
+    description: () => cliM("cli_generateMigrationDescription"),
     defaultPath: "migrations",
     generate: generateMigration
   }
@@ -3034,55 +3525,43 @@ async function generate(options) {
   const spinner = ora();
   const cwd = options.cwd ?? ".";
   try {
-    const project = await detectProject(cwd);
-    if (!project?.isHaiProject) {
-      writeCliMessage(chalk.yellow("\u8B66\u544A: \u5F53\u524D\u76EE\u5F55\u4E0D\u662F hai \u9879\u76EE"));
-    }
     const resolvedOptions = await resolveGenerateOptions(options);
     const generator = GENERATORS[resolvedOptions.type];
-    if (!generator) {
-      throw new Error(`\u672A\u77E5\u7684\u751F\u6210\u5668\u7C7B\u578B: ${resolvedOptions.type}`);
-    }
     if (!/^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$/i.test(resolvedOptions.name))
       throw new Error(cliM("cli_invalidGenerateName"));
-    const outputDir = path2.resolve(cwd, resolvedOptions.output || generator.defaultPath);
-    const resolvedCwd = path2.resolve(cwd);
-    if (!outputDir.startsWith(resolvedCwd + path2.sep) && outputDir !== resolvedCwd) {
-      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    const target = await resolveGenerateTarget(resolvedOptions);
+    const architecture = generateArchitecture(target.target);
+    const outputDir = path2.resolve(target.target.directory, resolvedOptions.output || generator.defaultPath);
+    if (["page", "api"].includes(resolvedOptions.type) && architecture === "sveltekit") {
+      const routes = path2.join(target.target.directory, "src/routes");
+      if (!outputDir.startsWith(routes + path2.sep) && outputDir !== routes)
+        throw new Error(cliM("cli_generateInvalidRouteOutput"));
     }
+    if (resolvedOptions.type === "api" && architecture === "serv" && resolvedOptions.output)
+      throw new Error(cliM("cli_generateInvalidRouteOutput"));
+    const relativeOutput = path2.relative(target.root, outputDir);
+    if (relativeOutput === ".." || relativeOutput.startsWith(`..${path2.sep}`) || path2.isAbsolute(relativeOutput))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
     const context = createTemplateContext(resolvedOptions.name, {
-      projectName: project?.name
+      projectName: target.target.name
     });
-    spinner.start(`\u751F\u6210 ${generator.description}...`);
-    const files = await generator.generate(context, outputDir);
-    const realCwd = await fse.realpath(resolvedCwd);
-    for (const file of files) {
-      if (!resolvedOptions.force && await fse.pathExists(file.path))
-        throw new Error(cliM("cli_generateExists", { params: { path: file.path } }));
-      let ancestor = file.path;
-      while (!await fse.pathExists(ancestor))
-        ancestor = path2.dirname(ancestor);
-      const realAncestor = await fse.realpath(ancestor);
-      const relative2 = path2.relative(realCwd, realAncestor);
-      if (relative2 === ".." || relative2.startsWith(`..${path2.sep}`) || path2.isAbsolute(relative2))
-        throw new Error(cliM("cli_generateOutsideWorkspace"));
-    }
-    for (const file of files) {
-      await fse.ensureDir(path2.dirname(file.path));
-      await fse.writeFile(file.path, file.content, { encoding: "utf-8", flag: resolvedOptions.force ? "w" : "wx" });
-    }
-    spinner.succeed();
+    spinner.start(cliM("cli_generateProgress", { params: { description: generator.description() } }));
+    const files = resolvedOptions.type === "api" && architecture === "serv" ? await generateServApi(context, target) : await generator.generate(context, outputDir);
+    await writeGeneratedFiles(files, target.root, resolvedOptions.force);
+    spinner.succeed(cliM("cli_generateComplete"));
     writeCliMessage("");
-    writeCliMessage(chalk.green("\u2714 \u751F\u6210\u5B8C\u6210\uFF01"));
-    writeCliMessage("");
-    writeCliMessage("\u521B\u5EFA\u7684\u6587\u4EF6:");
+    writeCliMessage(cliM("cli_generateFiles"));
     files.forEach((file) => {
       writeCliMessage(chalk.cyan(`  ${path2.relative(cwd, file.path)}`));
     });
     writeCliMessage("");
   } catch (error) {
-    spinner.fail();
-    writeCliError(chalk.red("\u751F\u6210\u5931\u8D25:"), { error });
+    spinner.fail(cliM("cli_generateFailed"));
+    writeCliError(cliM("cli_generateFailureDetail"), { error });
+    if (error instanceof AggregateError) {
+      for (const cause of error.errors)
+        writeCliError(cliM("cli_generateFailureDetail"), { error: cause });
+    }
     throw error;
   }
 }
@@ -3092,9 +3571,9 @@ async function resolveGenerateOptions(options) {
     questions.push({
       type: "select",
       name: "type",
-      message: "\u9009\u62E9\u751F\u6210\u7C7B\u578B:",
+      message: cliM("cli_generateTypePrompt"),
       choices: Object.entries(GENERATORS).map(([key, value]) => ({
-        title: `${key} - ${value.description}`,
+        title: `${key} - ${value.description()}`,
         value: key
       }))
     });
@@ -3103,24 +3582,102 @@ async function resolveGenerateOptions(options) {
     questions.push({
       type: "text",
       name: "name",
-      message: "\u540D\u79F0:",
+      message: cliM("cli_generateNamePrompt"),
       validate: (value) => {
         if (!value.trim())
-          return "\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A";
+          return cliM("cli_generateNameRequired");
         return true;
       }
     });
   }
-  const answers = questions.length > 0 ? await prompts(questions) : {};
+  const answers = questions.length > 0 ? await prompts(questions, { onCancel: () => {
+    throw new Error(cliM("cli_generateCancelled"));
+  } }) : {};
+  const type = options.type || ("type" in answers ? answers.type : void 0);
+  const name = options.name || ("name" in answers ? answers.name : void 0);
+  if (!isGeneratorType(type))
+    throw new Error(cliM("cli_generateUnknownType", { params: { type: String(type ?? "") } }));
+  if (typeof name !== "string" || !name.trim())
+    throw new Error(cliM("cli_generateNameRequired"));
   return {
-    type: options.type || answers.type,
-    name: options.name || answers.name,
+    type,
+    name,
     output: options.output ?? "",
     force: options.force ?? false,
     verbose: options.verbose ?? false,
-    cwd: options.cwd ?? "."
+    cwd: options.cwd ?? ".",
+    workspace: options.workspace ?? ""
   };
 }
+function isGeneratorType(value) {
+  return typeof value === "string" && Object.hasOwn(GENERATORS, value);
+}
+async function writeGeneratedFiles(files, root, force) {
+  if (new Set(files.map((file) => path2.resolve(file.path))).size !== files.length)
+    throw new Error(cliM("cli_generateUnsupportedAggregator"));
+  const previous = /* @__PURE__ */ new Map();
+  const stages = /* @__PURE__ */ new Map();
+  const written = [];
+  const failures = [];
+  for (const file of files) {
+    const relativeFile = path2.relative(root, file.path);
+    if (relativeFile === ".." || relativeFile.startsWith(`..${path2.sep}`) || path2.isAbsolute(relativeFile))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    let ancestor = file.path;
+    while (!await fse.pathExists(ancestor))
+      ancestor = path2.dirname(ancestor);
+    const relative2 = path2.relative(root, await fse.realpath(ancestor));
+    if (relative2 === ".." || relative2.startsWith(`..${path2.sep}`) || path2.isAbsolute(relative2))
+      throw new Error(cliM("cli_generateOutsideWorkspace"));
+    const content = await fse.pathExists(file.path) ? await fse.readFile(file.path, "utf8") : void 0;
+    if (file.previousContent !== void 0 ? content !== file.previousContent : content !== void 0 && !force)
+      throw new Error(cliM("cli_generateExists", { params: { path: file.path } }));
+    previous.set(file.path, content);
+  }
+  try {
+    for (const file of files) {
+      await fse.ensureDir(path2.dirname(file.path));
+      const stage = path2.join(path2.dirname(file.path), `.${path2.basename(file.path)}.${randomUUID()}.tmp`);
+      stages.set(file.path, stage);
+      await fse.writeFile(stage, file.content, { encoding: "utf8", flag: "wx" });
+    }
+    for (const file of files) {
+      const current = await fse.pathExists(file.path) ? await fse.readFile(file.path, "utf8") : void 0;
+      if (current !== previous.get(file.path))
+        throw new Error(cliM("cli_generateExists", { params: { path: file.path } }));
+      await fse.rename(stages.get(file.path), file.path);
+      written.push(file);
+    }
+  } catch (error) {
+    failures.push(error);
+    for (const file of written.reverse()) {
+      try {
+        if (await fse.readFile(file.path, "utf8") !== file.content)
+          throw new Error(cliM("cli_generateExists", { params: { path: file.path } }));
+        const original = previous.get(file.path);
+        if (original === void 0)
+          await fse.unlink(file.path);
+        else
+          await fse.writeFile(file.path, original, "utf8");
+      } catch (rollbackError) {
+        failures.push(rollbackError);
+      }
+    }
+  } finally {
+    for (const stage of stages.values()) {
+      try {
+        await fse.unlink(stage);
+      } catch (error) {
+        if (!error || typeof error !== "object" || !("code" in error) || error.code !== "ENOENT")
+          failures.push(error);
+      }
+    }
+  }
+  if (failures.length > 1)
+    throw new AggregateError(failures, cliM("cli_generateRollbackFailed"));
+  if (failures.length === 1)
+    throw failures[0];
+}
 async function generatePage(context, outputDir) {
   const files = [];
   const pageDir = path2.join(outputDir, context.kebabCase);
@@ -3297,19 +3854,45 @@ export function down() {
   return files;
 }
 var MODULE_CONFIG_MAP = {
-  "@h-ai/core": { configKey: "core", label: "Core" },
-  "@h-ai/serv": { configKey: "serv", label: "Service" },
-  "@h-ai/reldb": { configKey: "db", label: "Database" },
-  "@h-ai/cache": { configKey: "cache", label: "Cache" },
-  "@h-ai/iam": { configKey: "iam", label: "IAM" },
-  "@h-ai/storage": { configKey: "storage", label: "Storage" },
-  "@h-ai/ai": { configKey: "ai", label: "AI" },
-  "@h-ai/vecdb": { configKey: "vecdb", label: "VecDB" },
-  "@h-ai/reach": { configKey: "reach", label: "Reach" },
-  "@h-ai/scheduler": { configKey: "scheduler", label: "Scheduler" },
-  "@h-ai/audit": { configKey: "audit", label: "Audit" },
-  "@h-ai/payment": { configKey: "payment", label: "Payment" },
-  "@h-ai/deploy": { configKey: "deploy", label: "Deploy" }
+  "@h-ai/core": { configKey: "core", get label() {
+    return cliM("cli_coreLabel");
+  } },
+  "@h-ai/serv": { configKey: "serv", get label() {
+    return cliM("cli_serviceLabel");
+  } },
+  "@h-ai/reldb": { configKey: "db", get label() {
+    return cliM("cli_featureDbName");
+  } },
+  "@h-ai/cache": { configKey: "cache", get label() {
+    return cliM("cli_featureCacheName");
+  } },
+  "@h-ai/iam": { configKey: "iam", get label() {
+    return cliM("cli_featureIamName");
+  } },
+  "@h-ai/storage": { configKey: "storage", get label() {
+    return cliM("cli_featureStorageName");
+  } },
+  "@h-ai/ai": { configKey: "ai", get label() {
+    return cliM("cli_featureAiName");
+  } },
+  "@h-ai/vecdb": { configKey: "vecdb", get label() {
+    return cliM("cli_featureVecdbName");
+  } },
+  "@h-ai/reach": { configKey: "reach", get label() {
+    return cliM("cli_featureReachName");
+  } },
+  "@h-ai/scheduler": { configKey: "scheduler", get label() {
+    return cliM("cli_featureSchedulerName");
+  } },
+  "@h-ai/audit": { configKey: "audit", get label() {
+    return cliM("cli_featureAuditName");
+  } },
+  "@h-ai/payment": { configKey: "payment", get label() {
+    return cliM("cli_featurePaymentName");
+  } },
+  "@h-ai/deploy": { configKey: "deploy", get label() {
+    return cliM("cli_featureDeployName");
+  } }
 };
 async function validateProject(cwd) {
   const project = await detectProject(cwd);
@@ -3335,16 +3918,16 @@ async function initProject(options) {
   const spinner = ora();
   const cwd = options.cwd ?? ".";
   try {
-    spinner.start("\u68C0\u6D4B\u9879\u76EE...");
+    spinner.start(cliM("cli_initDetecting"));
     const result = await validateProject(cwd);
     if (!result) {
-      spinner.fail(chalk.red("\u672A\u68C0\u6D4B\u5230\u9879\u76EE\uFF08\u627E\u4E0D\u5230 package.json\uFF09"));
+      spinner.fail(chalk.red(cliM("cli_projectNotFound")));
       return;
     }
     const { project, existing, missing } = result;
-    spinner.succeed(`\u68C0\u6D4B\u5230\u9879\u76EE: ${chalk.cyan(project.name)}`);
+    spinner.succeed(cliM("cli_initDetected", { params: { name: chalk.cyan(project.name) } }));
     if (project.isHaiProject) {
-      const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-FC3QRKDO.js');
+      const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-US5CCAJ4.js');
       const generatedFiles = await generateProjectAiSupport(cwd, resolveSkillNamesForPackages(project.haiPackages), {
         overwriteSkills: false,
         overwriteBridgeFiles: false
@@ -3354,30 +3937,30 @@ async function initProject(options) {
       }
     }
     writeCliMessage("");
-    writeCliMessage(chalk.bold("\u9879\u76EE\u72B6\u6001:"));
-    writeCliMessage(`  \u540D\u79F0: ${chalk.cyan(project.name)}`);
-    writeCliMessage(`  \u7248\u672C: ${project.version}`);
-    writeCliMessage(`  \u5DF2\u5B89\u88C5\u6A21\u5757: ${project.haiPackages.length > 0 ? project.haiPackages.map((p) => chalk.cyan(p)).join(", ") : chalk.gray("\u65E0")}`);
+    writeCliMessage(chalk.bold(cliM("cli_initStatus")));
+    writeCliMessage(cliM("cli_initName", { params: { name: chalk.cyan(project.name) } }));
+    writeCliMessage(cliM("cli_initVersion", { params: { version: project.version } }));
+    writeCliMessage(cliM("cli_initModules", { params: { modules: project.haiPackages.length > 0 ? project.haiPackages.map((p) => chalk.cyan(p)).join(", ") : chalk.gray(cliM("cli_none")) } }));
     writeCliMessage("");
     if (existing.length > 0) {
-      writeCliMessage(chalk.bold("\u5DF2\u6709\u914D\u7F6E:"));
+      writeCliMessage(chalk.bold(cliM("cli_initExisting")));
       for (const key of existing) {
         writeCliMessage(chalk.green(`  \u2714 config/_${key}.yml`));
       }
     }
     if (missing.length === 0 && !options.force) {
       writeCliMessage("");
-      writeCliMessage(chalk.green("\u2714 \u6240\u6709\u914D\u7F6E\u6587\u4EF6\u5DF2\u5C31\u7EEA\uFF01"));
+      writeCliMessage(chalk.green(cliM("cli_initReady")));
       return;
     }
     if (missing.length > 0) {
       writeCliMessage("");
-      writeCliMessage(chalk.bold("\u7F3A\u5931\u914D\u7F6E:"));
+      writeCliMessage(chalk.bold(cliM("cli_initMissing")));
       for (const item of missing) {
         writeCliMessage(chalk.yellow(`  \u2718 config/_${item.configKey}.yml (${item.label})`));
       }
       writeCliMessage("");
-      spinner.start("\u751F\u6210\u7F3A\u5931\u914D\u7F6E\u6587\u4EF6...");
+      spinner.start(cliM("cli_initGenerating"));
       let generated = 0;
       for (const item of missing) {
         const configPath = path2.join(cwd, "config", `_${item.configKey}.yml`);
@@ -3385,11 +3968,11 @@ async function initProject(options) {
         await writeFile(configPath, content);
         generated++;
       }
-      spinner.succeed(`\u5DF2\u751F\u6210 ${generated} \u4E2A\u914D\u7F6E\u6587\u4EF6`);
+      spinner.succeed(cliM("cli_initGenerated", { params: { count: generated } }));
     }
     if (options.force && existing.length > 0) {
       writeCliMessage("");
-      spinner.start("\u5F3A\u5236\u91CD\u65B0\u751F\u6210\u6240\u6709\u914D\u7F6E\u6587\u4EF6...");
+      spinner.start(cliM("cli_initRegenerating"));
       let regenerated = 0;
       for (const pkg of project.haiPackages) {
         const mapping = MODULE_CONFIG_MAP[pkg];
@@ -3400,25 +3983,25 @@ async function initProject(options) {
         await writeFile(configPath, content);
         regenerated++;
       }
-      spinner.succeed(`\u5DF2\u91CD\u65B0\u751F\u6210 ${regenerated} \u4E2A\u914D\u7F6E\u6587\u4EF6`);
+      spinner.succeed(cliM("cli_initRegenerated", { params: { count: regenerated } }));
     }
     const coreConfigPath = path2.join(cwd, "config", "_core.yml");
     if (!await fileExists(coreConfigPath)) {
-      spinner.start("\u751F\u6210\u6838\u5FC3\u914D\u7F6E config/_core.yml...");
+      spinner.start(cliM("cli_initCore"));
       const content = generateConfigFile("core");
       await writeFile(coreConfigPath, content);
       spinner.succeed();
     }
     writeCliMessage("");
-    writeCliMessage(chalk.green("\u2714 \u9879\u76EE\u914D\u7F6E\u521D\u59CB\u5316\u5B8C\u6210\uFF01"));
+    writeCliMessage(chalk.green(cliM("cli_initSuccess")));
     writeCliMessage("");
-    writeCliMessage(chalk.gray("\u4E0B\u4E00\u6B65:"));
-    writeCliMessage(chalk.gray("  1. \u7F16\u8F91 config/ \u4E2D\u7684\u914D\u7F6E\u6587\u4EF6"));
-    writeCliMessage(chalk.gray("  2. \u8FD0\u884C pnpm dev \u542F\u52A8\u5F00\u53D1\u670D\u52A1"));
+    writeCliMessage(chalk.gray(cliM("cli_nextSteps")));
+    writeCliMessage(chalk.gray(cliM("cli_initEditConfig")));
+    writeCliMessage(chalk.gray(cliM("cli_initStartDev")));
     writeCliMessage("");
   } catch (error) {
     spinner.fail();
-    writeCliError(chalk.red("\u521D\u59CB\u5316\u5931\u8D25:"), { error });
+    writeCliError(chalk.red(cliM("cli_initFailed")), { error });
     throw error;
   }
 }
@@ -3475,12 +4058,13 @@ cli.command("init", cliM("cli_help_init")).option("-f, --force", cliM("cli_help_
     process4.exit(1);
   }
 });
-cli.command("generate [type] [name]", cliM("cli_help_generate")).alias("g").option("-o, --output <path>", cliM("cli_help_output")).option("-f, --force", cliM("cli_help_force")).action(async (type, name, options) => {
+cli.command("generate [type] [name]", cliM("cli_help_generate")).option("-w, --workspace <name>", cliM("cli_help_workspace")).alias("g").option("-o, --output <path>", cliM("cli_help_output")).option("-f, --force", cliM("cli_help_force")).action(async (type, name, options) => {
   try {
     await generate({
       type,
       name: name ?? "",
       output: options.output,
+      ...options.workspace ? { workspace: String(options.workspace) } : {},
       force: options.force,
       verbose: options.verbose,
       cwd: options.cwd
@@ -3522,17 +4106,17 @@ cli.command("deploy [appDir]", cliM("cli_help_deploy")).option("--env <environme
     process4.exitCode = 1;
   }
 });
-cli.command("g:page <name>", cliM("cli_help_generatePage")).action(async (name, options) => {
-  await generate({ type: "page", name, cwd: options.cwd });
+cli.command("g:page <name>", cliM("cli_help_generatePage")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {
+  await generate({ type: "page", name, cwd: options.cwd, ...options.workspace ? { workspace: String(options.workspace) } : {} });
 });
-cli.command("g:component <name>", cliM("cli_help_generateComponent")).action(async (name, options) => {
-  await generate({ type: "component", name, cwd: options.cwd });
+cli.command("g:component <name>", cliM("cli_help_generateComponent")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {
+  await generate({ type: "component", name, cwd: options.cwd, ...options.workspace ? { workspace: String(options.workspace) } : {} });
 });
-cli.command("g:api <name>", cliM("cli_help_generateApi")).action(async (name, options) => {
-  await generate({ type: "api", name, cwd: options.cwd });
+cli.command("g:api <name>", cliM("cli_help_generateApi")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {
+  await generate({ type: "api", name, cwd: options.cwd, ...options.workspace ? { workspace: String(options.workspace) } : {} });
 });
-cli.command("g:model <name>", cliM("cli_help_generateModel")).action(async (name, options) => {
-  await generate({ type: "model", name, cwd: options.cwd });
+cli.command("g:model <name>", cliM("cli_help_generateModel")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {
+  await generate({ type: "model", name, cwd: options.cwd, ...options.workspace ? { workspace: String(options.workspace) } : {} });
 });
 cli.version(VERSION, "-V, --version");
 cli.help();