@h-ai/cli 1.0.0-beta.14 → 1.0.0-beta.16

package/README.en.md

@@ -58,6 +58,8 @@ Each template installs only the modules it uses: admin/h5 include authentication
 
 Standalone `mobile-app` includes frontend crypto and encrypted typed-client transport. For an existing plaintext API, explicitly set `PUBLIC_API_TRANSPORT=off`. `PUBLIC_API_KEY_EXCHANGE_PATH` overrides the public exchange subpath. Handshake failures never fall back, server private keys never enter clients, and cleanup closes transport before client-owned crypto.
 
+Admin, website, h5 and Fullstack Web check browser versions before loading the application. The standalone upgrade page shows the current version, the minimum and official update instructions. The minimum is Chrome/Edge 111, Firefox 114, Safari 16.4 or iOS/iPadOS 16.4. See the [browser startup check](../../docs/usage/getting-started/build.md#浏览器启动检测) for existing projects.
+
 ### Static websites and GitHub Pages
 
 New websites default to Node SSR and install only Core/Kit/UI, so they can use the static build below directly. Remove any server business dependencies, initialization or custom APIs/actions added later before publishing statically. Commented configuration and environment references do not affect static builds.

package/README.ja.md

@@ -58,6 +58,8 @@ pnpm dev
 
 独立した `mobile-app` は frontend crypto と暗号化 typed client transport を含みます。既存の平文 API には `PUBLIC_API_TRANSPORT=off` を明示します。`PUBLIC_API_KEY_EXCHANGE_PATH` は公開鍵交換パスの上書きです。失敗時に平文へ切り替えず、サーバー秘密鍵はクライアントに渡しません。終了時は transport、その後に自身の crypto を解放します。
 
+admin、website、h5、Fullstack Web はアプリケーションの読み込み前にブラウザーのバージョンを確認します。独立した更新ページに現在のバージョン、最低要件、公式の更新手順を表示します。最低要件は Chrome/Edge 111、Firefox 114、Safari 16.4、または iOS/iPadOS 16.4 です。既存プロジェクトは[起動時のブラウザーチェック](../../docs/usage/getting-started/build.md#浏览器启动检测)を参照してください。
+
 ### 静的websiteとGitHub Pages
 
 新規 website は既定で Node SSR、依存は Core/Kit/UI のみで、下記の静的構築をそのまま利用できます。後から追加したサーバー業務依存・初期化・独自 API/actions は静的公開前に除去します。コメントの設定と環境変数の参考例は静的構築に影響しません。

package/README.md

@@ -58,6 +58,8 @@ pnpm dev
 
 独立 `mobile-app` 默认包含前端 crypto，并启用 typed client 加密传输。已有明文 API 可显式使用 `PUBLIC_API_TRANSPORT=off`；`PUBLIC_API_KEY_EXCHANGE_PATH` 只覆盖公开协商子路径。握手失败不会降级，服务端私钥不进入客户端。客户端先关闭 transport，再释放自身初始化的 crypto。
 
+admin、website、h5 和 Fullstack Web 在主应用加载前检测低版本浏览器，独立升级页显示当前版本、最低要求和官方更新入口。最低版本为 Chrome/Edge 111、Firefox 114、Safari 16.4，iOS/iPadOS 使用系统 16.4。迁移已有工程见[浏览器启动检测](../../docs/usage/getting-started/build.md#浏览器启动检测)。
+
 ### 纯静态 website 与 GitHub Pages
 
 新建 website 默认 Node SSR，只安装展示站所需的 Core/Kit/UI，可以直接使用下述静态构建。以后接入了服务端业务模块、初始化或 API/actions 时，静态发布前须移除这些动态能力；保留的注释配置和变量示例不影响静态构建。

package/dist/{chunk-OGUA3OIS.js → chunk-S2ZP7BHG.js}

@@ -5003,6 +5003,14 @@ var cli_config_catalog_default = [
     value: "/api/_hai/key-exchange",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u4EE5 / \u5F00\u5934\u7684\u8DEF\u5F84\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_KIT_TRANSPORT_MAXFUTURESKEWSECONDS",
+    module: "kit",
+    path: "kit.transport.maxFutureSkewSeconds",
+    description: "\u5141\u8BB8\u5BA2\u6237\u7AEF\u8BF7\u6C42\u65F6\u95F4\u9886\u5148\u670D\u52A1\u5668\u7684\u79D2\u6570",
+    value: "30",
+    constraint: "\u6574\u6570\uFF1B>= 0\uFF1B<= 300"
+  },
   {
     name: "HAI_KIT_TRANSPORT_MAXPLAINTEXTBYTES",
     module: "kit",
@@ -5011,6 +5019,14 @@ var cli_config_catalog_default = [
     value: "auto",
     constraint: "\u6574\u6570\uFF1B>= 1024\uFF1B<= 67108864\uFF1B\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aauto"
   },
+  {
+    name: "HAI_KIT_TRANSPORT_MAXREQUESTAGESECONDS",
+    module: "kit",
+    path: "kit.transport.maxRequestAgeSeconds",
+    description: "\u8BF7\u6C42\u4ECE\u7B7E\u53D1\u8D77\u7684\u6709\u6548\u79D2\u6570",
+    value: "300",
+    constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 600"
+  },
   {
     name: "HAI_KIT_TRANSPORT_ROUTEPLAINTEXTBYTES",
     module: "kit",
@@ -5375,7 +5391,7 @@ var cli_config_catalog_default = [
     name: "HAI_REACH_PROVIDERS_0_ENDPOINT",
     module: "reach",
     path: "reach.providers.0.endpoint",
-    description: "API \u7AEF\u70B9\uFF08\u9ED8\u8BA4 dysmsapi.aliyuncs.com\uFF09",
+    description: "\u76F4\u8FDE API \u7AEF\u70B9\uFF08\u9ED8\u8BA4 dysmsapi.aliyuncs.com\uFF09\uFF1B\u914D\u7F6E\u7F51\u5173\u65F6\u4F7F\u7528\u7F51\u5173 URL\u3002",
     value: "dysmsapi.aliyuncs.com",
     constraint: "\u5B57\u7B26\u4E32"
   },
@@ -5387,6 +5403,46 @@ var cli_config_catalog_default = [
     value: "noreply@example.com",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
   },
+  {
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY",
+    module: "reach",
+    path: "reach.providers.0.gateway",
+    description: "\u53EF\u9009\u7684\u77ED\u4FE1\u9694\u79BB\u7F51\u5173\uFF0C\u4EE5 POST \u8BF7\u6C42\u8F6C\u53D1\u5DF2\u7B7E\u540D\u7684\u67E5\u8BE2\u53C2\u6570\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY_ALLOWINSECUREHTTP",
+    module: "reach",
+    path: "reach.providers.0.gateway.allowInsecureHttp",
+    description: "\u4EC5\u5728\u53D7\u4FE1\u5185\u7F51\u663E\u5F0F\u5141\u8BB8\u660E\u6587 HTTP\u3002",
+    value: "false",
+    constraint: "true | false"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY_BODY",
+    module: "reach",
+    path: "reach.providers.0.gateway.body",
+    description: "\u7F51\u5173\u8BF7\u6C42\u4F53\uFF1B\u5BF9\u8C61\u548C\u6570\u7EC4\u5E8F\u5217\u5316\u4E3A JSON\uFF0C\u5B57\u7B26\u4E32\u539F\u6837\u53D1\u9001\u3002\u7701\u7565\u65F6\u4E0D\u53D1\u8BF7\u6C42\u4F53\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\u3001\u6570\u7EC4\u6216\u539F\u59CB\u6587\u672C"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY_HEADERS",
+    module: "reach",
+    path: "reach.providers.0.gateway.headers",
+    description: "\u7F51\u5173\u81EA\u5B9A\u4E49\u8BF7\u6C42\u5934\uFF1B\u8FDE\u63A5\u4E0E\u6D88\u606F\u957F\u5EA6\u76F8\u5173\u7684\u5934\u7531 HTTP \u5BA2\u6237\u7AEF\u7BA1\u7406\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY_URL",
+    module: "reach",
+    path: "reach.providers.0.gateway.url",
+    description: "\u7F51\u5173\u7684\u5B8C\u6574 HTTP(S) URL\uFF1B\u5305\u542B\u8DEF\u5F84\uFF0C\u4E0D\u5141\u8BB8\u51ED\u636E\u3001\u67E5\u8BE2\u53C2\u6570\u6216\u7247\u6BB5\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F uri"
+  },
   {
     name: "HAI_REACH_PROVIDERS_0_HEADERS",
     module: "reach",
@@ -6763,6 +6819,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F ipv4\uFF1B\u6B63\u5219 ^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$\uFF1B\u683C\u5F0F ipv6\uFF1B\u6B63\u5219 ^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$\uFF1B\u683C\u5F0F cidrv4\uFF1B\u6B63\u5219 ^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\\/([0-9]|[1-2][0-9]|3[0-2])$\uFF1B\u683C\u5F0F cidrv6\uFF1B\u6B63\u5219 ^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))\\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$"
   },
+  {
+    name: "HAI_SERV_REFRESH_COOKIE_SECURE",
+    module: "serv",
+    path: "HAI_SERV_REFRESH_COOKIE_SECURE",
+    description: "Serv \u5237\u65B0 Cookie \u7684 Secure \u5C5E\u6027\uFF1B\u7559\u7A7A\u6CBF\u7528\u73AF\u5883\u9ED8\u8BA4\u503C\uFF0C\u751F\u4EA7\u9ED8\u8BA4\u5F00\u542F",
+    value: "",
+    constraint: "true | false\uFF1B\u4EC5\u5728\u53D7\u63A7\u5185\u7F51\u6216 VPN \u7684 HTTP \u5165\u53E3\u4F7F\u7528 false"
+  },
   {
     name: "HAI_SERV_SERVER",
     module: "serv",
@@ -6851,6 +6915,14 @@ var cli_config_catalog_default = [
     value: "/_hai/key-exchange",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u4EE5 / \u5F00\u5934\u7684\u8DEF\u5F84\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_SERV_TRANSPORT_MAXFUTURESKEWSECONDS",
+    module: "serv",
+    path: "serv.transport.maxFutureSkewSeconds",
+    description: "\u5141\u8BB8\u5BA2\u6237\u7AEF\u8BF7\u6C42\u65F6\u95F4\u9886\u5148\u670D\u52A1\u5668\u7684\u79D2\u6570",
+    value: "30",
+    constraint: "\u6574\u6570\uFF1B>= 0\uFF1B<= 300"
+  },
   {
     name: "HAI_SERV_TRANSPORT_MAXPLAINTEXTBYTES",
     module: "serv",
@@ -6859,6 +6931,14 @@ var cli_config_catalog_default = [
     value: "1048576",
     constraint: "\u6574\u6570\uFF1B>= 1024\uFF1B<= 67108864\uFF1B\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aauto"
   },
+  {
+    name: "HAI_SERV_TRANSPORT_MAXREQUESTAGESECONDS",
+    module: "serv",
+    path: "serv.transport.maxRequestAgeSeconds",
+    description: "\u8BF7\u6C42\u4ECE\u7B7E\u53D1\u8D77\u7684\u6709\u6548\u79D2\u6570",
+    value: "300",
+    constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 600"
+  },
   {
     name: "HAI_SERV_TRANSPORT_ROUTEPLAINTEXTBYTES",
     module: "serv",
@@ -8314,6 +8394,11 @@ providers:
   #   accessKeySecret: \${HAI_REACH_PROVIDERS_1_ACCESSKEYSECRET}
   #   signName: MyApp
   #   endpoint: dysmsapi.aliyuncs.com
+  #   gateway: # \u53EF\u9009\uFF1B\u914D\u7F6E\u540E\u5411\u5B8C\u6574 URL \u53D1\u9001 POST
+  #     url: https://sms-gateway.example.com/dx
+  #     headers:
+  #       X-Gateway-Client: delivery
+  #     body: {}
 
   # \u901A\u7528 API\uFF08\u6309\u9700\u5F00\u542F\uFF1B\u53EF\u5BF9\u63A5\u5E94\u7528\u81EA\u6709\u6295\u9012\u670D\u52A1\uFF09
   # - name: custom
@@ -8511,5 +8596,5 @@ envAllowlist:
 }
 
 export { documentConfig, generateConfigFile, generateEnvExample, generateProductionEnvironment, moduleEnvironmentVariables, parameterizeConfig, renderEnvironment, runtimeEnvironmentVariables };
-//# sourceMappingURL=chunk-OGUA3OIS.js.map
-//# sourceMappingURL=chunk-OGUA3OIS.js.map
+//# sourceMappingURL=chunk-S2ZP7BHG.js.map
+//# sourceMappingURL=chunk-S2ZP7BHG.js.map