@h-ai/cli 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/{chunk-EF7WOFWZ.js → chunk-L53P43B2.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { parseDocument, isScalar, stringify, isMap, isSeq, Scalar } from 'yaml';
+import { parseDocument, LineCounter, isScalar, stringify, isMap, isSeq, Scalar } from 'yaml';
 
 // src/commands/cli-config-catalog.json
 var cli_config_catalog_default = [
@@ -195,6 +195,358 @@ var cli_config_catalog_default = [
     value: "x-api-key",
     constraint: "\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_AI_ACP",
+    module: "ai",
+    path: "ai.acp",
+    description: "ACP \u4F1A\u8BDD\u4E0E\u6267\u884C\u9650\u5236\uFF08\u4EC5 Node \u670D\u52A1\u7AEF\uFF09\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS",
+    module: "ai",
+    path: "ai.acp.agents",
+    description: "\u914D\u7F6E\u6587\u4EF6\u5B9A\u4E49\u7684\u53EA\u8BFB\u667A\u80FD\u4F53\uFF0C\u4E0E\u6570\u636E\u5E93\u8BB0\u5F55\u6309 ID \u5408\u5E76\u3002",
+    value: "[]",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0",
+    module: "ai",
+    path: "ai.acp.agents.0",
+    description: "\u914D\u7F6E\u6587\u4EF6\u5B9A\u4E49\u7684\u53EA\u8BFB\u667A\u80FD\u4F53\uFF0C\u4E0E\u6570\u636E\u5E93\u8BB0\u5F55\u6309 ID \u5408\u5E76\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_ADAPTER",
+    module: "ai",
+    path: "ai.acp.agents.0.adapter",
+    description: "\u539F\u751F\u914D\u7F6E\u9002\u914D\u5668\u540D\u79F0\uFF0C\u9ED8\u8BA4 generic\u3002",
+    value: "generic",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_ARGS",
+    module: "ai",
+    path: "ai.acp.agents.0.args",
+    description: "\u539F\u751F\u542F\u52A8\u53C2\u6570\uFF0C\u7701\u7565\u65F6\u7531\u9002\u914D\u5668\u63D0\u4F9B\u9ED8\u8BA4\u503C\u3002",
+    value: "",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_ARGS_0",
+    module: "ai",
+    path: "ai.acp.agents.0.args.0",
+    description: "\u539F\u751F\u542F\u52A8\u53C2\u6570\uFF0C\u7701\u7565\u65F6\u7531\u9002\u914D\u5668\u63D0\u4F9B\u9ED8\u8BA4\u503C\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_COMMAND",
+    module: "ai",
+    path: "ai.acp.agents.0.command",
+    description: "\u53EF\u9009\u539F\u751F\u7A0B\u5E8F\u8986\u76D6\uFF0C\u4F7F\u7528\u53C2\u6570\u6570\u7EC4\u6267\u884C\uFF0C\u4E0D\u7ECF\u8FC7 shell\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_DEFAULTMODELID",
+    module: "ai",
+    path: "ai.acp.agents.0.defaultModelId",
+    description: "\u9ED8\u8BA4\u9009\u62E9\u7684\u6A21\u578B ID\uFF0C\u5FC5\u987B\u5B58\u5728\u4E8E modelIds\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_ENABLED",
+    module: "ai",
+    path: "ai.acp.agents.0.enabled",
+    description: "\u9ED8\u8BA4\u542F\u7528\uFF0C\u7981\u7528\u540E\u7981\u6B62\u65B0\u5EFA\u548C\u6062\u590D\u4F1A\u8BDD\u3002",
+    value: "true",
+    constraint: "true | false"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_ENGINE",
+    module: "ai",
+    path: "ai.acp.agents.0.engine",
+    description: "auto \u4F18\u5148\u53EF\u7528 Podman\uFF0C\u518D\u9009 Docker\uFF1B\u663E\u5F0F\u9009\u62E9\u4E0D\u81EA\u52A8\u964D\u7EA7\u3002",
+    value: "auto",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aauto | podman | docker"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_ENVIRONMENTREFS",
+    module: "ai",
+    path: "ai.acp.agents.0.environmentRefs",
+    description: "\u76EE\u6807\u73AF\u5883\u53D8\u91CF\u540D\u5230\u5BBF\u4E3B\u73AF\u5883\u53D8\u91CF\u540D\u7684\u6620\u5C04\uFF1B\u4FDD\u5B58\u5F15\u7528\u800C\u975E\u660E\u6587\u51ED\u636E\u3002",
+    value: "{}",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_HEADERENV",
+    module: "ai",
+    path: "ai.acp.agents.0.headerEnv",
+    description: "\u8FDC\u7A0B\u8BA4\u8BC1 Header \u540D\u5230\u5BBF\u4E3B\u53D8\u91CF\u540D\u7684\u6620\u5C04\u3002",
+    value: "{}",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_ID",
+    module: "ai",
+    path: "ai.acp.agents.0.id",
+    description: "\u6E05\u5355\u4E2D\u7684\u552F\u4E00 ID\uFF1B\u540C\u65F6\u7528\u4E8E\u53D7\u7BA1\u7406\u76EE\u5F55\u540D\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6B63\u5219 ^[a-z0-9][\\w-]{0,95}$"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_IMAGE",
+    module: "ai",
+    path: "ai.acp.agents.0.image",
+    description: "\u5DF2\u90E8\u7F72\u7684 Agent \u955C\u50CF\uFF0C\u5DE5\u4F5C\u533A\u548C\u667A\u80FD\u4F53\u9700\u4F7F\u7528\u540C\u4E00\u955C\u50CF\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_MODE",
+    module: "ai",
+    path: "ai.acp.agents.0.mode",
+    description: "\u63A5\u5165\u6A21\u5F0F\uFF1A\u81EA\u5B9A\u4E49\u8FDC\u7A0B\u670D\u52A1\u3001\u672C\u673A\u5185\u5D4C\u8FDB\u7A0B\u6216\u6258\u7BA1\u5BB9\u5668\u3002",
+    value: "custom-service",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Acustom-service | embedded | builtin-service"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_MODELIDS",
+    module: "ai",
+    path: "ai.acp.agents.0.modelIds",
+    description: "\u7ED1\u5B9A Hai LLM \u6A21\u578B ID\uFF1B\u9ED8\u8BA4\u7A7A\u6570\u7EC4\u3002",
+    value: "[]",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_MODELIDS_0",
+    module: "ai",
+    path: "ai.acp.agents.0.modelIds.0",
+    description: "\u7ED1\u5B9A Hai LLM \u6A21\u578B ID\uFF1B\u9ED8\u8BA4\u7A7A\u6570\u7EC4\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_NAME",
+    module: "ai",
+    path: "ai.acp.agents.0.name",
+    description: "\u667A\u80FD\u4F53\u7684\u53EF\u8BFB\u540D\u79F0\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_SUPPORTEDTRANSPORTS",
+    module: "ai",
+    path: "ai.acp.agents.0.supportedTransports",
+    description: "\u81EA\u5B9A\u4E49\u670D\u52A1\u663E\u5F0F\u58F0\u660E\u7684\u539F\u751F HTTP/WS \u80FD\u529B\u3002",
+    value: "",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55\uFF1B\u6700\u5C11\u9879\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_SUPPORTEDTRANSPORTS_0",
+    module: "ai",
+    path: "ai.acp.agents.0.supportedTransports.0",
+    description: "\u81EA\u5B9A\u4E49\u670D\u52A1\u663E\u5F0F\u58F0\u660E\u7684\u539F\u751F HTTP/WS \u80FD\u529B\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "http",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Ahttp | ws"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_TRANSPORT",
+    module: "ai",
+    path: "ai.acp.agents.0.transport",
+    description: "\u667A\u80FD\u4F53\u539F\u751F\u652F\u6301\u7684\u4F20\u8F93\uFF1B\u4E0D\u81EA\u52A8\u8F6C\u6362 stdio \u548C HTTP/WS\u3002",
+    value: "http",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Ahttp | ws | stdio"
+  },
+  {
+    name: "HAI_AI_ACP_AGENTS_0_URL",
+    module: "ai",
+    path: "ai.acp.agents.0.url",
+    description: "\u8FDC\u7A0B\u5730\u5740\uFF0C\u4E0D\u5141\u8BB8\u547D\u4EE4\u9009\u9879\u548C\u6362\u884C\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F uri"
+  },
+  {
+    name: "HAI_AI_ACP_CANCELTIMEOUT",
+    module: "ai",
+    path: "ai.acp.cancelTimeout",
+    description: "\u53D6\u6D88\u540E\u7B49\u5F85\u7EC8\u6001\u7684\u4E0A\u9650\uFF0C\u6BEB\u79D2\u3002",
+    value: "5000",
+    constraint: "\u6574\u6570\uFF1B<= 9007199254740991\uFF1B> 0"
+  },
+  {
+    name: "HAI_AI_ACP_MAXCONTENTBYTES",
+    module: "ai",
+    path: "ai.acp.maxContentBytes",
+    description: "\u5355\u8F6E\u8F93\u5165\u548C\u7D2F\u8BA1\u8F93\u51FA\u7684\u5B57\u8282\u4E0A\u9650\u3002",
+    value: "8388608",
+    constraint: "\u6574\u6570\uFF1B<= 9007199254740991\uFF1B> 0"
+  },
+  {
+    name: "HAI_AI_ACP_MAXPENDINGEVENTS",
+    module: "ai",
+    path: "ai.acp.maxPendingEvents",
+    description: "\u672A\u6D88\u8D39\u4E8B\u4EF6\u6570\u91CF\u4E0A\u9650\u3002",
+    value: "1024",
+    constraint: "\u6574\u6570\uFF1B<= 9007199254740991\uFF1B> 0"
+  },
+  {
+    name: "HAI_AI_ACP_PROMPTTIMEOUT",
+    module: "ai",
+    path: "ai.acp.promptTimeout",
+    description: "\u5355\u8F6E\u4EFB\u52A1\u8D85\u65F6\uFF0C\u6BEB\u79D2\u3002",
+    value: "600000",
+    constraint: "\u6574\u6570\uFF1B<= 9007199254740991\uFF1B> 0"
+  },
+  {
+    name: "HAI_AI_ACP_REQUESTTIMEOUT",
+    module: "ai",
+    path: "ai.acp.requestTimeout",
+    description: "\u63E1\u624B\u548C\u63A7\u5236\u8BF7\u6C42\u8D85\u65F6\uFF0C\u6BEB\u79D2\u3002",
+    value: "30000",
+    constraint: "\u6574\u6570\uFF1B<= 9007199254740991\uFF1B> 0"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES",
+    module: "ai",
+    path: "ai.acp.workspaces",
+    description: "\u914D\u7F6E\u6587\u4EF6\u5B9A\u4E49\u7684\u53EA\u8BFB\u5DE5\u4F5C\u533A\uFF0C\u4E0E\u6570\u636E\u5E93\u8BB0\u5F55\u6309 ID \u5408\u5E76\u3002",
+    value: "[]",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0",
+    module: "ai",
+    path: "ai.acp.workspaces.0",
+    description: "\u914D\u7F6E\u6587\u4EF6\u5B9A\u4E49\u7684\u53EA\u8BFB\u5DE5\u4F5C\u533A\uFF0C\u4E0E\u6570\u636E\u5E93\u8BB0\u5F55\u6309 ID \u5408\u5E76\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_ENVIRONMENTREFS",
+    module: "ai",
+    path: "ai.acp.workspaces.0.environmentRefs",
+    description: "\u5DE5\u4F5C\u533A\u5386\u53F2\u5171\u7528\u53D8\u91CF\u6620\u5C04\uFF1BAgent \u4E13\u7528\u51ED\u636E\u5E94\u914D\u7F6E\u5728 Agent \u5B9A\u4E49\u4E2D\u3002",
+    value: "{}",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_GITENVIRONMENTREFS",
+    module: "ai",
+    path: "ai.acp.workspaces.0.gitEnvironmentRefs",
+    description: "\u4EC5\u4F9B\u53D7\u7BA1 Git \u8FDC\u7A0B\u64CD\u4F5C\u4F7F\u7528\u7684\u73AF\u5883\u53D8\u91CF\u5F15\u7528\uFF0C\u503C\u4E0D\u4F20\u7ED9 Agent \u6216\u672C\u5730\u63D0\u4EA4\u3002",
+    value: "{}",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_ID",
+    module: "ai",
+    path: "ai.acp.workspaces.0.id",
+    description: "\u6E05\u5355\u4E2D\u7684\u552F\u4E00 ID\uFF1B\u540C\u65F6\u7528\u4E8E\u53D7\u7BA1\u7406\u76EE\u5F55\u540D\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6B63\u5219 ^[a-z0-9][\\w-]{0,95}$"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_REPOSITORIES",
+    module: "ai",
+    path: "ai.acp.workspaces.0.repositories",
+    description: "\u591A\u4E2A Git \u5DE5\u7A0B\uFF1B\u9ED8\u8BA4\u7A7A\u6570\u7EC4\uFF0C\u4E0D\u4F7F\u7528 Git \u65F6\u4EC5\u521B\u5EFA\u6587\u4EF6\u76EE\u5F55\u3002",
+    value: "[]",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_REPOSITORIES_0",
+    module: "ai",
+    path: "ai.acp.workspaces.0.repositories.0",
+    description: "\u591A\u4E2A Git \u5DE5\u7A0B\uFF1B\u9ED8\u8BA4\u7A7A\u6570\u7EC4\uFF0C\u4E0D\u4F7F\u7528 Git \u65F6\u4EC5\u521B\u5EFA\u6587\u4EF6\u76EE\u5F55\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_REPOSITORIES_0_ID",
+    module: "ai",
+    path: "ai.acp.workspaces.0.repositories.0.id",
+    description: "\u6E05\u5355\u4E2D\u7684\u552F\u4E00 ID\uFF1B\u540C\u65F6\u7528\u4E8E\u53D7\u7BA1\u7406\u76EE\u5F55\u540D\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6B63\u5219 ^[a-z0-9][\\w-]{0,95}$"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_REPOSITORIES_0_MAINBRANCH",
+    module: "ai",
+    path: "ai.acp.workspaces.0.repositories.0.mainBranch",
+    description: "\u8BE5\u5DE5\u7A0B\u660E\u786E\u6307\u5B9A\u7684\u4E3B\u5206\u652F\uFF0C\u66F4\u65B0\u548C merge-main \u53D1\u5E03\u5747\u4F7F\u7528\u6B64\u503C\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1\uFF1B\u6700\u5927\u5B57\u7B26\u6570 240"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_REPOSITORIES_0_REMOTE",
+    module: "ai",
+    path: "ai.acp.workspaces.0.repositories.0.remote",
+    description: "Git remote \u540D\uFF0C\u9ED8\u8BA4 origin\u3002",
+    value: "origin",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6B63\u5219 ^[a-z0-9][\\w-]{0,95}$"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_REPOSITORIES_0_URL",
+    module: "ai",
+    path: "ai.acp.workspaces.0.repositories.0.url",
+    description: "\u8FDC\u7A0B\u5730\u5740\uFF0C\u4E0D\u5141\u8BB8\u547D\u4EE4\u9009\u9879\u548C\u6362\u884C\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_STORAGE",
+    module: "ai",
+    path: "ai.acp.workspaces.0.storage",
+    description: "\u6301\u4E45\u5B58\u50A8\u4F4D\u7F6E\uFF1Bdirectory \u4F9B\u672C\u673A\uFF0Cvolume \u4F9B\u6258\u7BA1\u5BB9\u5668\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_STORAGE_ENGINE",
+    module: "ai",
+    path: "ai.acp.workspaces.0.storage.engine",
+    description: "auto \u4F18\u5148\u53EF\u7528 Podman\uFF0C\u518D\u9009 Docker\uFF1B\u663E\u5F0F\u9009\u62E9\u4E0D\u81EA\u52A8\u964D\u7EA7\u3002",
+    value: "auto",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aauto | podman | docker"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_STORAGE_IMAGE",
+    module: "ai",
+    path: "ai.acp.workspaces.0.storage.image",
+    description: "\u5DF2\u90E8\u7F72\u7684 Agent \u955C\u50CF\uFF0C\u5DE5\u4F5C\u533A\u548C\u667A\u80FD\u4F53\u9700\u4F7F\u7528\u540C\u4E00\u955C\u50CF\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_STORAGE_NAME",
+    module: "ai",
+    path: "ai.acp.workspaces.0.storage.name",
+    description: "\u53EF\u8BFB\u540D\u79F0\uFF1Bvolume \u65F6\u8868\u793A\u6301\u4E45\u5377\u540D\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6B63\u5219 ^[a-z0-9][\\w-]{0,95}$"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_STORAGE_PATH",
+    module: "ai",
+    path: "ai.acp.workspaces.0.storage.path",
+    description: "\u672C\u673A\u7EDD\u5BF9\u6216\u76F8\u5BF9\u76EE\u5F55\uFF0C\u8FD0\u884C\u65F6\u5F52\u4E00\u5316\u4E3A\u771F\u5B9E\u7EDD\u5BF9\u8DEF\u5F84\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_ACP_WORKSPACES_0_STORAGE_TYPE",
+    module: "ai",
+    path: "ai.acp.workspaces.0.storage.type",
+    description: "\u5B58\u50A8\u7C7B\u578B\u5224\u522B\u5B57\u6BB5\u3002",
+    value: "directory",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Adirectory | volume"
+  },
   {
     name: "HAI_AI_AUDIO",
     module: "ai",
@@ -859,19 +1211,11 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
   },
-  {
-    name: "HAI_AI_LLM_API",
-    module: "ai",
-    path: "ai.llm.api",
-    description: "\u5168\u5C40 API \u534F\u8BAE\uFF08\u5404\u6A21\u578B fallback\uFF0C\u9ED8\u8BA4 `'chat'`\uFF1B\u53EF\u9009 `chat` / `responses` / `anthropic`\uFF09",
-    value: "chat",
-    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Achat | responses | anthropic"
-  },
   {
     name: "HAI_AI_LLM_APIKEY",
     module: "ai",
     path: "ai.llm.apiKey",
-    description: "\u5168\u5C40 API Key\uFF08\u5404\u6A21\u578B fallback\uFF1B\u672A\u63D0\u4F9B\u65F6\u56DE\u9000\u5230 `process.env.HAI_AI_LLM_APIKEY` \u6216 `process.env.OPENAI_API_KEY`\uFF09",
+    description: "\u9ED8\u8BA4\u670D\u52A1\u5BC6\u94A5\uFF1B\u6A21\u578B\u9879\u53EF\u5355\u72EC\u8986\u76D6\u3002\u672A\u586B\u5199\u65F6\u8BFB\u53D6 HAI_AI_LLM_APIKEY \u6216\u5BF9\u5E94\u4F9B\u5E94\u5546\u5BC6\u94A5\u53D8\u91CF\uFF0C\u771F\u5B9E\u503C\u53EA\u653E\u670D\u52A1\u7AEF\u3002",
     value: "",
     constraint: "string,null"
   },
@@ -879,7 +1223,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_LLM_BASEURL",
     module: "ai",
     path: "ai.llm.baseUrl",
-    description: "\u5168\u5C40 API \u57FA\u7840 URL\uFF08\u5404\u6A21\u578B fallback\uFF1B\u672A\u63D0\u4F9B\u65F6\u56DE\u9000\u5230 `process.env.HAI_AI_LLM_BASEURL` \u6216 `process.env.OPENAI_BASE_URL`\uFF09",
+    description: "\u9ED8\u8BA4\u6A21\u578B\u670D\u52A1\u5730\u5740\uFF1B\u4F7F\u7528\u4EE3\u7406\u65F6\u586B\u5199\uFF0C\u6A21\u578B\u9879\u53EF\u8986\u76D6\u3002\u672A\u586B\u5199\u65F6\u6309\u534F\u8BAE\u8BFB\u53D6\u73AF\u5883\u5730\u5740\u6216\u4F7F\u7528\u4F9B\u5E94\u5546\u9ED8\u8BA4\u5730\u5740\u3002",
     value: "",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F uri"
   },
@@ -887,7 +1231,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_LLM_MAXTOKENS",
     module: "ai",
     path: "ai.llm.maxTokens",
-    description: "\u5168\u5C40\u6700\u5927 Token \u6570\uFF08\u5404\u6A21\u578B fallback\uFF0C\u9ED8\u8BA4 `4096`\uFF09",
+    description: "\u5355\u6B21\u56DE\u7B54\u6700\u591A\u751F\u6210\u591A\u5C11 Token\uFF0C\u9ED8\u8BA4 4096\uFF1B\u6A21\u578B\u9879\u53EF\u8986\u76D6\uFF0C\u9700\u7B26\u5408\u4F9B\u5E94\u5546\u9650\u5236\u3002",
     value: "4096",
     constraint: "\u6570\u5B57\uFF1B> 0"
   },
@@ -915,14 +1259,6 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
   },
-  {
-    name: "HAI_AI_LLM_MODELS_0_API",
-    module: "ai",
-    path: "ai.llm.models.0.api",
-    description: "API \u534F\u8BAE\uFF08\u53EF\u9009\uFF0C\u672A\u6307\u5B9A\u65F6\u56DE\u9000\u5168\u5C40 `api`\uFF0C\u518D\u56DE\u9000 `chat`\uFF1B\u51B3\u5B9A\u8D70 Chat Completions / Responses / Anthropic\uFF09",
-    value: "chat",
-    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Achat | responses | anthropic"
-  },
   {
     name: "HAI_AI_LLM_MODELS_0_APIKEY",
     module: "ai",
@@ -936,9 +1272,105 @@ var cli_config_catalog_default = [
     module: "ai",
     path: "ai.llm.models.0.baseUrl",
     description: "Base URL \u8986\u76D6\uFF08\u53EF\u9009\uFF09",
-    value: "",
+    value: "https://your-responses-service.example/v1",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F uri"
   },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities",
+    description: "\u5DF2\u786E\u8BA4\u7684\u6A21\u578B\u80FD\u529B\uFF0C\u7F3A\u7701\u8868\u793A\u672A\u77E5",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_CONTEXTWINDOW",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.contextWindow",
+    description: "\u53EF\u7528\u4E0A\u4E0B\u6587\u603B\u5BB9\u91CF\uFF08Token\uFF09\uFF1B\u672A\u77E5\u65F6\u7701\u7565\uFF0C\u4E0D\u7531\u8F93\u51FA\u9884\u7B97\u63A8\u65AD\u3002",
+    value: "",
+    constraint: "\u6574\u6570\uFF1B<= 9007199254740991\uFF1B> 0"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_INPUTMODALITIES",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.inputModalities",
+    description: "\u5DF2\u786E\u8BA4\u652F\u6301\u7684\u8F93\u5165\u6A21\u6001\uFF1B\u672A\u77E5\u65F6\u7701\u7565\u3002",
+    value: "",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55\uFF1B\u6700\u5C11\u9879\u6570 1"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_INPUTMODALITIES_0",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.inputModalities.0",
+    description: "\u5DF2\u786E\u8BA4\u652F\u6301\u7684\u8F93\u5165\u6A21\u6001\uFF1B\u672A\u77E5\u65F6\u7701\u7565\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "text",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Atext | image | audio | video"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_MAXOUTPUTTOKENS",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.maxOutputTokens",
+    description: "\u6A21\u578B\u5355\u6B21\u8F93\u51FA\u80FD\u529B\u4E0A\u9650\uFF08Token\uFF09\uFF1B\u4E0E\u9ED8\u8BA4 maxTokens \u9884\u7B97\u4E0D\u540C\u3002",
+    value: "",
+    constraint: "\u6574\u6570\uFF1B<= 9007199254740991\uFF1B> 0"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_OUTPUTMODALITIES",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.outputModalities",
+    description: "\u5DF2\u786E\u8BA4\u652F\u6301\u7684\u8F93\u51FA\u6A21\u6001\uFF1B\u4ECD\u9700\u8C03\u7528\u63A5\u53E3\u652F\u6301\u3002",
+    value: "",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55\uFF1B\u6700\u5C11\u9879\u6570 1"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_OUTPUTMODALITIES_0",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.outputModalities.0",
+    description: "\u5DF2\u786E\u8BA4\u652F\u6301\u7684\u8F93\u51FA\u6A21\u6001\uFF1B\u4ECD\u9700\u8C03\u7528\u63A5\u53E3\u652F\u6301\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "text",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Atext | image | audio | video"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_REASONING",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.reasoning",
+    description: "\u63A8\u7406\u80FD\u529B\u5143\u6570\u636E\uFF0C\u4E0D\u81EA\u52A8\u542F\u7528\u63A8\u7406\u8BF7\u6C42\u53C2\u6570\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_REASONING_EFFORTS",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.reasoning.efforts",
+    description: "\u5DF2\u786E\u8BA4\u53EF\u9009\u62E9\u7684\u63A8\u7406\u7EA7\u522B\u3002",
+    value: "",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55\uFF1B\u6700\u5C11\u9879\u6570 1"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_REASONING_EFFORTS_0",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.reasoning.efforts.0",
+    description: "\u5DF2\u786E\u8BA4\u53EF\u9009\u62E9\u7684\u63A8\u7406\u7EA7\u522B\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_REASONING_SUPPORTED",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.reasoning.supported",
+    description: "\u662F\u5426\u652F\u6301\u63A8\u7406\u80FD\u529B\u3002",
+    value: "",
+    constraint: "true | false"
+  },
+  {
+    name: "HAI_AI_LLM_MODELS_0_CAPABILITIES_TOOLCALLING",
+    module: "ai",
+    path: "ai.llm.models.0.capabilities.toolCalling",
+    description: "\u6A21\u578B\u662F\u5426\u652F\u6301\u51FD\u6570\u5DE5\u5177\u8C03\u7528\uFF1B\u672A\u77E5\u65F6\u7701\u7565\u3002",
+    value: "",
+    constraint: "true | false"
+  },
   {
     name: "HAI_AI_LLM_MODELS_0_ID",
     module: "ai",
@@ -960,9 +1392,17 @@ var cli_config_catalog_default = [
     module: "ai",
     path: "ai.llm.models.0.model",
     description: "\u6A21\u578B\u540D\u79F0\uFF08\u4F20\u7ED9 API \u7684\u5B9E\u9645\u6A21\u578B\u540D\uFF09",
-    value: "",
+    value: "your-coding-model",
     constraint: "\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_AI_LLM_MODELS_0_PROTOCOL",
+    module: "ai",
+    path: "ai.llm.models.0.protocol",
+    description: "API \u534F\u8BAE\uFF08\u53EF\u9009\uFF0C\u672A\u6307\u5B9A\u65F6\u56DE\u9000\u5168\u5C40 `protocol`\uFF0C\u518D\u56DE\u9000 `chat`\uFF1B\u51B3\u5B9A\u8D70 Chat Completions / Responses / Anthropic\uFF09",
+    value: "chat",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Achat | responses | anthropic"
+  },
   {
     name: "HAI_AI_LLM_MODELS_0_TEMPERATURE",
     module: "ai",
@@ -979,6 +1419,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u6570\u5B57\uFF1B> 0"
   },
+  {
+    name: "HAI_AI_LLM_PROTOCOL",
+    module: "ai",
+    path: "ai.llm.protocol",
+    description: "\u9ED8\u8BA4\u8BF7\u6C42\u683C\u5F0F\uFF1Achat \u4E3A Chat Completions\uFF0Cresponses \u4E3A OpenAI Responses\uFF0Canthropic \u4E3A Anthropic Messages\uFF1B\u6A21\u578B\u9879\u53EF\u8986\u76D6\u3002",
+    value: "chat",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Achat | responses | anthropic"
+  },
   {
     name: "HAI_AI_LLM_SCENARIOS",
     module: "ai",
@@ -1079,7 +1527,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_LLM_TEMPERATURE",
     module: "ai",
     path: "ai.llm.temperature",
-    description: "\u5168\u5C40\u91C7\u6837\u6E29\u5EA6\uFF08\u5404\u6A21\u578B fallback\uFF0C\u8303\u56F4 `[0, 2]`\uFF0C\u9ED8\u8BA4 `0.7`\uFF09",
+    description: "\u56DE\u7B54\u7684\u968F\u673A\u7A0B\u5EA6\uFF0C0\u20132\uFF0C\u9ED8\u8BA4 0.7\uFF1B\u8F83\u4F4E\u901A\u5E38\u66F4\u7A33\u5B9A\uFF0C\u6A21\u578B\u9879\u53EF\u8986\u76D6\uFF0C\u90E8\u5206\u6A21\u578B\u4E0D\u652F\u6301\u81EA\u5B9A\u4E49\u3002",
     value: "0.7",
     constraint: "\u6570\u5B57\uFF1B>= 0\uFF1B<= 2"
   },
@@ -1095,7 +1543,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_LLM_TIMEOUT",
     module: "ai",
     path: "ai.llm.timeout",
-    description: "\u5168\u5C40\u8BF7\u6C42\u8D85\u65F6\u65F6\u95F4\uFF08\u5404\u6A21\u578B fallback\uFF0C\u6BEB\u79D2\uFF0C\u9ED8\u8BA4 `60000`\uFF09",
+    description: "\u4E00\u6B21\u6A21\u578B\u8BF7\u6C42\u6700\u591A\u7B49\u5F85\u591A\u5C11\u6BEB\u79D2\uFF0C\u9ED8\u8BA4 60000\uFF1B\u6A21\u578B\u9879\u53EF\u8986\u76D6\u3002",
     value: "60000",
     constraint: "\u6570\u5B57\uFF1B> 0"
   },
@@ -1163,6 +1611,94 @@ var cli_config_catalog_default = [
     value: "1.0.0",
     constraint: "\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_AI_MCP_SERVERS",
+    module: "ai",
+    path: "ai.mcp.servers",
+    description: "\u5916\u90E8 MCP \u670D\u52A1\u53EA\u8BFB\u6E05\u5355\uFF1B\u4E0E\u6570\u636E\u5E93\u8BB0\u5F55\u5408\u5E76\u4F9B\u53D7\u7BA1 Agent \u4F7F\u7528\u3002",
+    value: "",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0",
+    module: "ai",
+    path: "ai.mcp.servers.0",
+    description: "\u5916\u90E8 MCP \u670D\u52A1\u53EA\u8BFB\u6E05\u5355\uFF1B\u4E0E\u6570\u636E\u5E93\u8BB0\u5F55\u5408\u5E76\u4F9B\u53D7\u7BA1 Agent \u4F7F\u7528\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_ARGS",
+    module: "ai",
+    path: "ai.mcp.servers.0.args",
+    description: "stdio \u53C2\u6570\uFF0C\u4E0D\u4F7F\u7528 shell \u62FC\u63A5\u3002",
+    value: "[]",
+    constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_ARGS_0",
+    module: "ai",
+    path: "ai.mcp.servers.0.args.0",
+    description: "stdio \u53C2\u6570\uFF0C\u4E0D\u4F7F\u7528 shell \u62FC\u63A5\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_COMMAND",
+    module: "ai",
+    path: "ai.mcp.servers.0.command",
+    description: "stdio \u7A0B\u5E8F\u8DEF\u5F84\uFF1B\u4EC5\u53EF\u4FE1\u670D\u52A1\u7AEF\u914D\u7F6E\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_ENVIRONMENTREFS",
+    module: "ai",
+    path: "ai.mcp.servers.0.environmentRefs",
+    description: "stdio \u53D8\u91CF\u540D\u5230\u5BBF\u4E3B\u51ED\u636E\u53D8\u91CF\u540D\u7684\u6620\u5C04\u3002",
+    value: "{}",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_HEADERENV",
+    module: "ai",
+    path: "ai.mcp.servers.0.headerEnv",
+    description: "\u8BA4\u8BC1 Header \u540D\u5230\u5BBF\u4E3B\u51ED\u636E\u53D8\u91CF\u540D\u7684\u6620\u5C04\u3002",
+    value: "{}",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_ID",
+    module: "ai",
+    path: "ai.mcp.servers.0.id",
+    description: "\u670D\u52A1\u552F\u4E00\u6807\u8BC6\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_NAME",
+    module: "ai",
+    path: "ai.mcp.servers.0.name",
+    description: "\u4F20\u7ED9\u539F\u751F MCP \u5BA2\u6237\u7AEF\u7684\u670D\u52A1\u540D\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_TRANSPORT",
+    module: "ai",
+    path: "ai.mcp.servers.0.transport",
+    description: "\u539F\u751F MCP \u4F20\u8F93\u7C7B\u578B\u3002",
+    value: "stdio",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Astdio | http | sse"
+  },
+  {
+    name: "HAI_AI_MCP_SERVERS_0_URL",
+    module: "ai",
+    path: "ai.mcp.servers.0.url",
+    description: "HTTP/SSE \u5730\u5740\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F uri"
+  },
   {
     name: "HAI_AI_MEMORY",
     module: "ai",
@@ -1175,7 +1711,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_MEMORY_ALLOWEPHEMERALFALLBACK",
     module: "ai",
     path: "ai.memory.allowEphemeralFallback",
-    description: "\u662F\u5426\u5141\u8BB8\u5728\u914D\u7F6E\u4E86\u6301\u4E45\u5316\u5411\u91CF\u540E\u7AEF\u4F46 mem0 \u65E0\u6CD5\u6620\u5C04\u65F6\u9000\u56DE\u5185\u5B58\u5B58\u50A8\uFF08\u9ED8\u8BA4 false\uFF09 \u4EC5\u5F71\u54CD `provider='mem0'`\uFF1A\u5F53\u524D\u6846\u67B6\u9002\u914D\u4EC5\u6620\u5C04 qdrant\uFF1Bpgvector \u7684 SDK \u8FDE\u63A5\u65E0\u6CD5\u516C\u5F00\u5173\u95ED\uFF0C\u6240\u6709\u73AF\u5883\u62D2\u7EDD\u3002\u5E95\u5C42 vecdb \u662F lancedb / chroma / \u672A\u77E5\u540E\u7AEF\u65F6\uFF0C\u9ED8\u8BA4 fail-fast\uFF08\u521D\u59CB\u5316\u5931\u8D25\uFF09\uFF0C\u907F\u514D\u670D\u52A1\u91CD\u542F\u540E\u8BB0\u5FC6\u9759\u9ED8\u4E22\u5931\uFF1B \u4EC5\u5F53\u663E\u5F0F\u8BBE\u4E3A true \u65F6\u624D\u5728\u5F00\u53D1\u6216\u660E\u786E E2E \u73AF\u5883\u9000\u56DE\u5185\u5B58\u5B58\u50A8\uFF08\u6570\u636E\u4E0D\u6301\u4E45\uFF09\u3002 \u751F\u4EA7\u59CB\u7EC8\u8981\u6C42\u5B9E\u9645\u6301\u4E45\u5316\u8FDE\u63A5\uFF0C\u4E0D\u80FD\u901A\u8FC7\u6B64\u5F00\u5173\u7ED5\u8FC7\u5171\u4EAB\u72B6\u6001\u8981\u6C42\u3002",
+    description: "\u662F\u5426\u5141\u8BB8\u5728\u914D\u7F6E\u4E86\u6301\u4E45\u5316\u5411\u91CF\u540E\u7AEF\u4F46 mem0 \u65E0\u6CD5\u6620\u5C04\u65F6\u9000\u56DE\u5185\u5B58\u5B58\u50A8\uFF08\u9ED8\u8BA4 false\uFF09 \u4EC5\u5F71\u54CD `provider='mem0'`\uFF1A\u5F53\u524D\u6846\u67B6\u9002\u914D\u4EC5\u6620\u5C04 qdrant\uFF1B\u5176\u5B83\u6301\u4E45\u5316\u540E\u7AEF\u4F7F\u7528 native Provider\u3002\u5E95\u5C42 vecdb \u662F lancedb / chroma / \u672A\u77E5\u540E\u7AEF\u65F6\uFF0C\u9ED8\u8BA4 fail-fast\uFF08\u521D\u59CB\u5316\u5931\u8D25\uFF09\uFF0C\u907F\u514D\u670D\u52A1\u91CD\u542F\u540E\u8BB0\u5FC6\u9759\u9ED8\u4E22\u5931\uFF1B \u4EC5\u5F53\u663E\u5F0F\u8BBE\u4E3A true \u65F6\u624D\u5728\u5F00\u53D1\u6216\u660E\u786E E2E \u73AF\u5883\u9000\u56DE\u5185\u5B58\u5B58\u50A8\uFF08\u6570\u636E\u4E0D\u6301\u4E45\uFF09\u3002 \u751F\u4EA7\u59CB\u7EC8\u8981\u6C42\u5B9E\u9645\u6301\u4E45\u5316\u8FDE\u63A5\uFF0C\u4E0D\u80FD\u901A\u8FC7\u6B64\u5F00\u5173\u7ED5\u8FC7\u5171\u4EAB\u72B6\u6001\u8981\u6C42\u3002",
     value: "false",
     constraint: "true | false"
   },
@@ -1223,7 +1759,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_MEMORY_PROVIDER",
     module: "ai",
     path: "ai.memory.provider",
-    description: "\u8BB0\u5FC6\u540E\u7AEF\uFF1Anative \u4F7F\u7528\u6846\u67B6\u539F\u751F\u5B58\u50A8\u4E0E\u6279\u91CF\u5408\u5E76\uFF1Bmem0 \u5C06\u6846\u67B6\u63D0\u53D6\u7ED3\u679C\u5199\u5165\u53D7\u652F\u6301\u7684\u5D4C\u5165\u5F0F SDK \u540E\u7AEF",
+    description: "\u8BB0\u5FC6\u540E\u7AEF\uFF1Anative \u4F7F\u7528\u6846\u67B6\u539F\u751F\u5B58\u50A8\u4E0E\u6279\u91CF\u5408\u5E76\uFF1Bmem0 \u5C06\u6846\u67B6\u63D0\u53D6\u7ED3\u679C\u4EE5 Mem0 \u6570\u636E\u683C\u5F0F\u5199\u5165 Qdrant",
     value: "native",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Anative | mem0"
   },
@@ -1247,7 +1783,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_MEMORY_WRITEBACKRELATEDTOPK",
     module: "ai",
     path: "ai.memory.writebackRelatedTopK",
-    description: "\u5199\u56DE / \u5408\u5E76\u65F6\u68C0\u7D22\u76F8\u5173\u8BB0\u5FC6\u7684\u6570\u91CF\uFF08native \u4E0E mem0 \u5171\u7528\uFF0C\u9ED8\u8BA4 20\uFF09",
+    description: "\u5199\u56DE / \u5408\u5E76\u65F6\u68C0\u7D22\u76F8\u5173\u8BB0\u5FC6\u7684\u6570\u91CF\uFF08\u4EC5 native\uFF0C\u9ED8\u8BA4 20\uFF09",
     value: "20",
     constraint: "\u6574\u6570\uFF1B<= 9007199254740991\uFF1B> 0"
   },
@@ -1363,6 +1899,38 @@ var cli_config_catalog_default = [
     value: "0.25",
     constraint: "\u6570\u5B57\uFF1B> 0"
   },
+  {
+    name: "HAI_ANDROID_KEY_ALIAS",
+    module: "android",
+    path: "HAI_ANDROID_KEY_ALIAS",
+    description: "Android \u5BB9\u5668\u53D1\u5E03\u7B7E\u540D\u5BC6\u94A5\u522B\u540D",
+    value: "",
+    constraint: "\u5BC6\u94A5\u5E93\u5185\u7528\u4E8E APK \u7B7E\u540D\u7684\u522B\u540D"
+  },
+  {
+    name: "HAI_ANDROID_KEY_PASSWORD",
+    module: "android",
+    path: "HAI_ANDROID_KEY_PASSWORD",
+    description: "Android \u5BB9\u5668\u53D1\u5E03\u7B7E\u540D\u79C1\u94A5\u5BC6\u7801",
+    value: "",
+    constraint: "\u4EC5\u7531\u6784\u5EFA\u8FDB\u7A0B\u6216 CI \u6CE8\u5165\u7684\u654F\u611F\u5B57\u7B26\u4E32"
+  },
+  {
+    name: "HAI_ANDROID_KEYSTORE",
+    module: "android",
+    path: "HAI_ANDROID_KEYSTORE",
+    description: "Android \u5BB9\u5668\u53D1\u5E03\u7B7E\u540D\u5BC6\u94A5\u5E93",
+    value: "",
+    constraint: "\u5BBF\u4E3B\u6587\u4EF6\u8DEF\u5F84\uFF1B\u76F8\u5BF9\u8DEF\u5F84\u4ECE\u9879\u76EE\u6839\u89E3\u6790\uFF0C\u4EC5\u53EA\u8BFB\u6302\u8F7D\u5230\u7B7E\u540D\u5BB9\u5668"
+  },
+  {
+    name: "HAI_ANDROID_STORE_PASSWORD",
+    module: "android",
+    path: "HAI_ANDROID_STORE_PASSWORD",
+    description: "Android \u5BB9\u5668\u53D1\u5E03\u7B7E\u540D\u5BC6\u94A5\u5E93\u5BC6\u7801",
+    value: "",
+    constraint: "\u4EC5\u7531\u6784\u5EFA\u8FDB\u7A0B\u6216 CI \u6CE8\u5165\u7684\u654F\u611F\u5B57\u7B26\u4E32"
+  },
   {
     name: "HAI_AUDIT",
     module: "audit",
@@ -2031,7 +2599,7 @@ var cli_config_catalog_default = [
     name: "HAI_CORE_LOGGING_REDACT",
     module: "core",
     path: "core.logging.redact",
-    description: "\u8981\u8131\u654F\u7684\u5B57\u6BB5\u8DEF\u5F84\u5217\u8868\uFF08\u5982 ['password', 'token']\uFF0C\u9ED8\u8BA4 []\uFF09",
+    description: "\u989D\u5916\u4E1A\u52A1\u9690\u79C1\u7684\u65E5\u5FD7\u5B57\u6BB5\u8DEF\u5F84\uFF0C\u5982 customer.email\u3001recipients[*].phone\uFF1B* \u5339\u914D\u4E00\u5C42\uFF0C\u533A\u5206\u5927\u5C0F\u5199\uFF0C\u9ED8\u8BA4 []\u3002\u5DF2\u77E5\u5BC6\u7801/\u4EE4\u724C\u59CB\u7EC8\u8131\u654F\u3002",
     value: "[]",
     constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
   },
@@ -2039,7 +2607,7 @@ var cli_config_catalog_default = [
     name: "HAI_CORE_LOGGING_REDACT_0",
     module: "core",
     path: "core.logging.redact.0",
-    description: "\u8981\u8131\u654F\u7684\u5B57\u6BB5\u8DEF\u5F84\u5217\u8868\uFF08\u5982 ['password', 'token']\uFF0C\u9ED8\u8BA4 []\uFF09\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    description: "\u989D\u5916\u4E1A\u52A1\u9690\u79C1\u7684\u65E5\u5FD7\u5B57\u6BB5\u8DEF\u5F84\uFF0C\u5982 customer.email\u3001recipients[*].phone\uFF1B* \u5339\u914D\u4E00\u5C42\uFF0C\u533A\u5206\u5927\u5C0F\u5199\uFF0C\u9ED8\u8BA4 []\u3002\u5DF2\u77E5\u5BC6\u7801/\u4EE4\u724C\u59CB\u7EC8\u8131\u654F\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
     value: "",
     constraint: "\u5B57\u7B26\u4E32"
   },
@@ -2363,6 +2931,54 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
   },
+  {
+    name: "HAI_DEPLOY_CONTAINER_COMPOSE",
+    module: "deploy",
+    path: "deploy.container.compose",
+    description: "\u4EE5\u9879\u76EE\u955C\u50CF\u89D2\u8272\u4E3A\u5355\u4F4D\u9644\u52A0 Compose \u8FD0\u884C\u53C2\u6570\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_DEPLOY_CONTAINER_COMPOSE_SERVICES",
+    module: "deploy",
+    path: "deploy.container.compose.services",
+    description: "\u6309\u5DF2\u6784\u5EFA\u9879\u76EE\u7684\u955C\u50CF\u89D2\u8272\u5206\u522B\u8BBE\u7F6E\u5BB9\u5668\u6269\u5C55\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_DEPLOY_CONTAINER_COMPOSE_SERVICES_SERV",
+    module: "deploy",
+    path: "deploy.container.compose.services.serv",
+    description: "API \u540E\u7AEF\u5BB9\u5668\u7684 Compose \u6269\u5C55\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_DEPLOY_CONTAINER_COMPOSE_SERVICES_SERV_EXTRA_HOSTS",
+    module: "deploy",
+    path: "deploy.container.compose.services.serv.extra_hosts",
+    description: "\u5BB9\u5668\u5185\u7684\u4E3B\u673A\u540D\u5230 IPv4 \u6216 IPv6 \u5730\u5740\u6620\u5C04\uFF0C\u4E0D\u80FD\u8986\u76D6\u6846\u67B6\u5185\u90E8\u670D\u52A1\u540D\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_DEPLOY_CONTAINER_COMPOSE_SERVICES_WEB",
+    module: "deploy",
+    path: "deploy.container.compose.services.web",
+    description: "Web \u5BB9\u5668\u7684 Compose \u6269\u5C55\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_DEPLOY_CONTAINER_COMPOSE_SERVICES_WEB_EXTRA_HOSTS",
+    module: "deploy",
+    path: "deploy.container.compose.services.web.extra_hosts",
+    description: "\u5BB9\u5668\u5185\u7684\u4E3B\u673A\u540D\u5230 IPv4 \u6216 IPv6 \u5730\u5740\u6620\u5C04\uFF0C\u4E0D\u80FD\u8986\u76D6\u6846\u67B6\u5185\u90E8\u670D\u52A1\u540D\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
   {
     name: "HAI_DEPLOY_CONTAINER_S3ENGINE",
     module: "deploy",
@@ -2419,6 +3035,78 @@ var cli_config_catalog_default = [
     value: "18080",
     constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 65535"
   },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS",
+    module: "deploy",
+    path: "deploy.provider.expose.https",
+    description: "\u53EF\u9009 HTTPS \u5165\u53E3\uFF1Bfiles \u4F7F\u7528\u5DF2\u6709\u8BC1\u4E66\uFF0Cletsencrypt \u4F7F\u7528\u5B98\u65B9 Certbot \u7533\u8BF7\u7EED\u671F\uFF0C\u7701\u7565\u4FDD\u6301 HTTP",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_ACCEPTTERMS",
+    module: "deploy",
+    path: "deploy.provider.expose.https.acceptTerms",
+    description: "\u660E\u786E\u540C\u610F Let\u2019s Encrypt \u670D\u52A1\u6761\u6B3E\u540E\u624D\u53EF\u8BBE\u7F6E\u4E3A true",
+    value: "true",
+    constraint: "true\uFF1B\u53D6\u503C\uFF1Atrue"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_CERTIFICATEFILE",
+    module: "deploy",
+    path: "deploy.provider.expose.https.certificateFile",
+    description: "PEM \u5B8C\u6574\u8BC1\u4E66\u94FE\u8DEF\u5F84\uFF0C\u76F8\u5BF9\u5DE5\u7A0B\u6839\u6216\u7EDD\u5BF9\u8DEF\u5F84\uFF1B\u6253\u5305\u65F6\u590D\u5236\u5230\u79C1\u6709\u53D1\u5E03\u76EE\u5F55",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_DOMAIN",
+    module: "deploy",
+    path: "deploy.provider.expose.https.domain",
+    description: "HTTPS \u516C\u5F00\u57DF\u540D\uFF1B\u8BC1\u4E66\u5FC5\u987B\u5339\u914D\u8BE5\u57DF\u540D",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5927\u5B57\u7B26\u6570 253\uFF1B\u6B63\u5219 ^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_EMAIL",
+    module: "deploy",
+    path: "deploy.provider.expose.https.email",
+    description: "Let\u2019s Encrypt \u8D26\u53F7\u8054\u7CFB\u90AE\u7BB1",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F email\uFF1B\u6B63\u5219 ^(?:[A-Za-z0-9_'+\\-]+\\.)*[A-Za-z0-9_'+\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_PORT",
+    module: "deploy",
+    path: "deploy.provider.expose.https.port",
+    description: "HTTPS \u5BBF\u4E3B\u7AEF\u53E3\uFF0C\u9ED8\u8BA4 443\uFF0C\u987B\u4E0E HTTP \u7AEF\u53E3\u4E0D\u540C",
+    value: "443",
+    constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 65535"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_PRIVATEKEYFILE",
+    module: "deploy",
+    path: "deploy.provider.expose.https.privateKeyFile",
+    description: "\u672A\u52A0\u5BC6 PEM \u79C1\u94A5\u8DEF\u5F84\uFF0C\u76F8\u5BF9\u5DE5\u7A0B\u6839\u6216\u7EDD\u5BF9\u8DEF\u5F84\uFF1B\u5FC5\u987B\u4E0E\u8BC1\u4E66\u5339\u914D",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_REDIRECTHTTP",
+    module: "deploy",
+    path: "deploy.provider.expose.https.redirectHttp",
+    description: "\u666E\u901A HTTP \u8BF7\u6C42\u662F\u5426\u4EE5 308 \u8DF3\u8F6C\u81F3 HTTPS\uFF0C\u5065\u5EB7\u68C0\u67E5\u548C ACME \u6311\u6218\u9664\u5916",
+    value: "true",
+    constraint: "true | false"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_TYPE",
+    module: "deploy",
+    path: "deploy.provider.expose.https.type",
+    description: "\u5E94\u7528\u90E8\u7F72\uFF1A\u5E73\u53F0/\u66B4\u9732\u65B9\u5F0F\uFF0C\u6309\u6240\u5728\u8282\u70B9\u7684\u679A\u4E3E\u9009\u62E9",
+    value: "files",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Afiles | letsencrypt"
+  },
   {
     name: "HAI_DEPLOY_PROVIDER_EXPOSE_TYPE",
     module: "deploy",
@@ -2787,6 +3475,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u6709\u6548 HTTP(S) URL\uFF1B\u540C\u65F6\u51B3\u5B9A\u5BF9\u5E94\u9884\u89C8\u670D\u52A1\u7684\u76D1\u542C\u5730\u5740"
   },
+  {
+    name: "HAI_E2E_GROUP",
+    module: "e2e",
+    path: "HAI_E2E_GROUP",
+    description: "\u73AF\u5883\u5165\u53E3\uFF1B\u4F7F\u7528\u4F4D\u7F6E packages/cli/templates/apps/fullstack/playwright.config.ts.hbs",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6309\u4F7F\u7528\u4F4D\u7F6E\u7684\u6821\u9A8C\u89C4\u5219\u586B\u5199"
+  },
   {
     name: "HAI_E2E_LIVE",
     module: "e2e",
@@ -3977,7 +4673,7 @@ var cli_config_catalog_default = [
     path: "kit.access",
     description: "\u6BCF\u6B21\u8BF7\u6C42\u7684\u8DEF\u5F84/IP/\u65F6\u95F4\u7B56\u7565\uFF1Bfalse \u5173\u95ED\uFF0C\u5185\u8054\u89C4\u5219\u4E0E\u72EC\u7ACB YAML \u6587\u4EF6\u5F15\u7528\u4E0D\u80FD\u6DF7\u7528",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "true | false\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_KIT_ACCESS_FILE",
@@ -4273,7 +4969,7 @@ var cli_config_catalog_default = [
     path: "kit.transport",
     description: "\u4F20\u8F93\u52A0\u5BC6\u5F00\u5173\u6216\u5BC6\u94A5\u534F\u5546\u914D\u7F6E",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_KIT_TRANSPORT_EXCLUDEPATHS",
@@ -4315,6 +5011,14 @@ var cli_config_catalog_default = [
     value: "/api/_hai/key-exchange",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u4EE5 / \u5F00\u5934\u7684\u8DEF\u5F84\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_KIT_TRANSPORT_MAXFUTURESKEWSECONDS",
+    module: "kit",
+    path: "kit.transport.maxFutureSkewSeconds",
+    description: "\u5141\u8BB8\u5BA2\u6237\u7AEF\u8BF7\u6C42\u65F6\u95F4\u9886\u5148\u670D\u52A1\u5668\u7684\u79D2\u6570",
+    value: "30",
+    constraint: "\u6574\u6570\uFF1B>= 0\uFF1B<= 300"
+  },
   {
     name: "HAI_KIT_TRANSPORT_MAXPLAINTEXTBYTES",
     module: "kit",
@@ -4323,6 +5027,14 @@ var cli_config_catalog_default = [
     value: "auto",
     constraint: "\u6574\u6570\uFF1B>= 1024\uFF1B<= 67108864\uFF1B\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aauto"
   },
+  {
+    name: "HAI_KIT_TRANSPORT_MAXREQUESTAGESECONDS",
+    module: "kit",
+    path: "kit.transport.maxRequestAgeSeconds",
+    description: "\u8BF7\u6C42\u4ECE\u7B7E\u53D1\u8D77\u7684\u6709\u6548\u79D2\u6570",
+    value: "300",
+    constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 600"
+  },
   {
     name: "HAI_KIT_TRANSPORT_ROUTEPLAINTEXTBYTES",
     module: "kit",
@@ -4687,7 +5399,7 @@ var cli_config_catalog_default = [
     name: "HAI_REACH_PROVIDERS_0_ENDPOINT",
     module: "reach",
     path: "reach.providers.0.endpoint",
-    description: "API \u7AEF\u70B9\uFF08\u9ED8\u8BA4 dysmsapi.aliyuncs.com\uFF09",
+    description: "\u76F4\u8FDE API \u7AEF\u70B9\uFF08\u9ED8\u8BA4 dysmsapi.aliyuncs.com\uFF09\uFF1B\u914D\u7F6E\u7F51\u5173\u65F6\u4F7F\u7528\u7F51\u5173 URL\u3002",
     value: "dysmsapi.aliyuncs.com",
     constraint: "\u5B57\u7B26\u4E32"
   },
@@ -4700,20 +5412,52 @@ var cli_config_catalog_default = [
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
   },
   {
-    name: "HAI_REACH_PROVIDERS_0_HEADERS",
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY",
     module: "reach",
-    path: "reach.providers.0.headers",
-    description: "\u81EA\u5B9A\u4E49\u8BF7\u6C42\u5934",
+    path: "reach.providers.0.gateway",
+    description: "\u53EF\u9009\u7684\u77ED\u4FE1\u9694\u79BB\u7F51\u5173\uFF0C\u4EE5 POST \u8BF7\u6C42\u8F6C\u53D1\u5DF2\u7B7E\u540D\u7684\u67E5\u8BE2\u53C2\u6570\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY_ALLOWINSECUREHTTP",
+    module: "reach",
+    path: "reach.providers.0.gateway.allowInsecureHttp",
+    description: "\u4EC5\u5728\u53D7\u4FE1\u5185\u7F51\u663E\u5F0F\u5141\u8BB8\u660E\u6587 HTTP\u3002",
+    value: "false",
+    constraint: "true | false"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY_BODY",
+    module: "reach",
+    path: "reach.providers.0.gateway.body",
+    description: "\u7F51\u5173\u8BF7\u6C42\u4F53\uFF1B\u5BF9\u8C61\u548C\u6570\u7EC4\u5E8F\u5217\u5316\u4E3A JSON\uFF0C\u5B57\u7B26\u4E32\u539F\u6837\u53D1\u9001\u3002\u7701\u7565\u65F6\u4E0D\u53D1\u8BF7\u6C42\u4F53\u3002",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\u3001\u6570\u7EC4\u6216\u539F\u59CB\u6587\u672C"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY_HEADERS",
+    module: "reach",
+    path: "reach.providers.0.gateway.headers",
+    description: "\u7F51\u5173\u81EA\u5B9A\u4E49\u8BF7\u6C42\u5934\uFF1B\u8FDE\u63A5\u4E0E\u6D88\u606F\u957F\u5EA6\u76F8\u5173\u7684\u5934\u7531 HTTP \u5BA2\u6237\u7AEF\u7BA1\u7406\u3002",
     value: "",
     constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
   },
   {
-    name: "HAI_REACH_PROVIDERS_0_HEADERS_AUTHORIZATION",
+    name: "HAI_REACH_PROVIDERS_0_GATEWAY_URL",
+    module: "reach",
+    path: "reach.providers.0.gateway.url",
+    description: "\u7F51\u5173\u7684\u5B8C\u6574 HTTP(S) URL\uFF1B\u5305\u542B\u8DEF\u5F84\uFF0C\u4E0D\u5141\u8BB8\u51ED\u636E\u3001\u67E5\u8BE2\u53C2\u6570\u6216\u7247\u6BB5\u3002",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F uri"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_0_HEADERS",
     module: "reach",
-    path: "HAI_REACH_PROVIDERS_0_HEADERS_AUTHORIZATION",
-    description: "API \u901A\u77E5 Provider \u7684\u5B8C\u6574 Authorization \u8BF7\u6C42\u5934",
+    path: "reach.providers.0.headers",
+    description: "\u81EA\u5B9A\u4E49\u8BF7\u6C42\u5934",
     value: "",
-    constraint: "\u654F\u611F\u5B57\u7B26\u4E32\uFF0C\u5305\u542B\u8BA4\u8BC1\u65B9\u6848\u53CA\u51ED\u636E\uFF0C\u4F8B\u5982 Bearer <token>"
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
   },
   {
     name: "HAI_REACH_PROVIDERS_0_HOST",
@@ -4827,6 +5571,22 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_REACH_PROVIDERS_1_ACCESSKEYID",
+    module: "reach",
+    path: "HAI_REACH_PROVIDERS_1_ACCESSKEYID",
+    description: "\u963F\u91CC\u4E91 AccessKey ID",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_1_ACCESSKEYSECRET",
+    module: "reach",
+    path: "HAI_REACH_PROVIDERS_1_ACCESSKEYSECRET",
+    description: "\u963F\u91CC\u4E91 AccessKey Secret",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
   {
     name: "HAI_REACH_PROVIDERS_1_TYPE",
     module: "reach",
@@ -4835,6 +5595,22 @@ var cli_config_catalog_default = [
     value: "console",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aconsole | smtp | aliyun-sms | api"
   },
+  {
+    name: "HAI_REACH_PROVIDERS_2_HEADERS_AUTHORIZATION",
+    module: "reach",
+    path: "HAI_REACH_PROVIDERS_2_HEADERS_AUTHORIZATION",
+    description: "\u51ED\u636E\u8F93\u5165\uFF1B\u4F7F\u7528\u4F4D\u7F6E packages/cli/src/commands/cli-config-templates.ts",
+    value: "",
+    constraint: "\u654F\u611F\u5B57\u7B26\u4E32\uFF1B\u542F\u7528\u76F8\u5E94\u529F\u80FD\u65F6\u5FC5\u586B\uFF0C\u4E0D\u5F97\u63D0\u4EA4\u771F\u5B9E\u503C"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_2_IDEMPOTENT",
+    module: "reach",
+    path: "HAI_REACH_PROVIDERS_2_IDEMPOTENT",
+    description: "\u63A5\u6536\u7AEF\u6309 Idempotency-Key \u539F\u5B50\u6301\u4E45\u53BB\u91CD\uFF0C\u4E14\u8986\u76D6\u6240\u6709\u91CD\u8BD5\u4E0E\u65E7\u8282\u70B9\u8FDF\u5230\u8BF7\u6C42\u65F6\u624D\u542F\u7528\uFF1B\u9ED8\u8BA4 false\u3002",
+    value: "false",
+    constraint: "true | false"
+  },
   {
     name: "HAI_REACH_QUEUE",
     module: "reach",
@@ -4847,7 +5623,7 @@ var cli_config_catalog_default = [
     name: "HAI_REACH_QUEUE_MAXATTEMPTS",
     module: "reach",
     path: "reach.queue.maxAttempts",
-    description: "\u81EA\u52A8\u9886\u53D6\u6B21\u6570\u4E0A\u9650\uFF08\u542B\u9996\u6B21\u53CA\u5D29\u6E83\u6062\u590D\uFF0C\u9ED8\u8BA4 5\uFF0C\u8303\u56F4 1\u2013100\uFF09\u3002",
+    description: "\u6BCF\u6761\u961F\u5217\u6D88\u606F\u6700\u591A\u5904\u7406\u591A\u5C11\u6B21\uFF0C\u5305\u542B\u9996\u6B21\u53D1\u9001\u3001\u5931\u8D25\u91CD\u8BD5\u548C\u5F02\u5E38\u9000\u51FA\u540E\u7684\u91CD\u65B0\u5904\u7406\uFF1B\u9ED8\u8BA4 5\uFF0C\u8303\u56F4 1\u2013100\u3002",
     value: "5",
     constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 100"
   },
@@ -4855,7 +5631,7 @@ var cli_config_catalog_default = [
     name: "HAI_REACH_QUEUE_MAXRETRYDELAYMS",
     module: "reach",
     path: "reach.queue.maxRetryDelayMs",
-    description: "\u6307\u6570\u9000\u907F\u4E0A\u9650\u6BEB\u79D2\u6570\uFF0C\u4E0D\u5F97\u5C0F\u4E8E retryDelayMs\uFF08\u9ED8\u8BA4 3600000\uFF09\u3002",
+    description: "\u540E\u7EED\u5931\u8D25\u65F6\u7B49\u5F85\u65F6\u95F4\u9010\u6B21\u52A0\u500D\uFF0C\u4F46\u4E0D\u8D85\u8FC7\u6B64\u503C\uFF1B\u9ED8\u8BA4 3600000\uFF081 \u5C0F\u65F6\uFF09\uFF0C\u4E0D\u5F97\u5C0F\u4E8E retryDelayMs\u3002",
     value: "3600000",
     constraint: "\u6574\u6570\uFF1B>= 1000\uFF1B<= 86400000"
   },
@@ -4863,7 +5639,7 @@ var cli_config_catalog_default = [
     name: "HAI_REACH_QUEUE_RETRYDELAYMS",
     module: "reach",
     path: "reach.queue.retryDelayMs",
-    description: "\u9996\u6B21\u5931\u8D25\u540E\u7684\u9000\u907F\u6BEB\u79D2\u6570\uFF08\u9ED8\u8BA4 60000\uFF0C\u8303\u56F4 1000\u201386400000\uFF09\u3002",
+    description: "\u7B2C\u4E00\u6B21\u53D1\u9001\u5931\u8D25\u540E\uFF0C\u7B49\u5F85\u591A\u5C11\u6BEB\u79D2\u518D\u8BD5\uFF1B\u9ED8\u8BA4 60000\uFF081 \u5206\u949F\uFF09\uFF0C\u8303\u56F4 1000\u201386400000\u3002",
     value: "60000",
     constraint: "\u6574\u6570\uFF1B>= 1000\uFF1B<= 86400000"
   },
@@ -4923,6 +5699,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u672C\u673A HTTP(S) URL\uFF1B\u76F4\u63A5\u8FD0\u884C\u65F6 BASE_URL \u4F18\u5148"
   },
+  {
+    name: "ALL_PROXY",
+    module: "runtime",
+    path: "ALL_PROXY",
+    description: "\u6784\u5EFA\u4E0B\u8F7D\u7684\u5176\u4ED6\u4EE3\u7406\u5165\u53E3\uFF1B\u4EC5 inherit \u6A21\u5F0F\u539F\u6837\u4F20\u9012\uFF0C\u5176\u4ED6\u6A21\u5F0F\u6E05\u7A7A",
+    value: "",
+    constraint: "\u4EE3\u7406 URL\uFF1B\u534F\u8BAE\u652F\u6301\u7531\u4E0B\u8F7D\u5DE5\u5177\u51B3\u5B9A\uFF1B\u5C0F\u5199 all_proxy \u4E5F\u53D7\u652F\u6301"
+  },
   {
     name: "ANTHROPIC_API_KEY",
     module: "runtime",
@@ -4963,6 +5747,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u6709\u6548 HTTP(S) URL\uFF1B\u53D1\u5E03\u539F\u751F\u5305\u65F6\u4E0D\u8BBE\u7F6E"
   },
+  {
+    name: "CARGO_TARGET_DIR",
+    module: "runtime",
+    path: "CARGO_TARGET_DIR",
+    description: "\u73AF\u5883\u5165\u53E3\uFF1B\u4F7F\u7528\u4F4D\u7F6E packages/cli/src/commands/cli-build.ts",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6309\u4F7F\u7528\u4F4D\u7F6E\u7684\u6821\u9A8C\u89C4\u5219\u586B\u5199"
+  },
   {
     name: "CI",
     module: "runtime",
@@ -5051,6 +5843,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u6574\u6570 1\u201365535"
   },
+  {
+    name: "FTP_PROXY",
+    module: "runtime",
+    path: "FTP_PROXY",
+    description: "\u6784\u5EFA\u4E0B\u8F7D\u7684 FTP \u4EE3\u7406\u5165\u53E3\uFF1B\u4EC5 inherit \u6A21\u5F0F\u539F\u6837\u4F20\u9012\uFF0C\u5176\u4ED6\u6A21\u5F0F\u6E05\u7A7A",
+    value: "",
+    constraint: "\u4EE3\u7406 URL\uFF1B\u534F\u8BAE\u652F\u6301\u7531\u4E0B\u8F7D\u5DE5\u5177\u51B3\u5B9A\uFF1B\u5C0F\u5199 ftp_proxy \u4E5F\u53D7\u652F\u6301"
+  },
   {
     name: "GEMINI_API_KEY",
     module: "runtime",
@@ -5131,6 +5931,22 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "JSON \u5BF9\u8C61 {activeKeyId,keys:{id:{publicKey,privateKey}}}\uFF1B\u6240\u6709\u8282\u70B9\u5171\u4EAB\uFF0CID \u4E3A 1-64 \u4E2A\u5B57\u6BCD/\u6570\u5B57/\u4E0B\u5212\u7EBF/\u8FDE\u5B57\u7B26\uFF1B\u7981\u6B62 PUBLIC_/VITE_/\u516C\u5F00 YAML/\u65E5\u5FD7"
   },
+  {
+    name: "HAI_NGINX_IMAGE",
+    module: "runtime",
+    path: "HAI_NGINX_IMAGE",
+    description: "Dockerfile \u7684 Nginx \u57FA\u7840\u955C\u50CF\u6784\u5EFA\u53C2\u6570\uFF0C\u7531 CLI \u6309 build.sources.image \u6216 --image-source \u6CE8\u5165",
+    value: "",
+    constraint: "OCI \u955C\u50CF\u5F15\u7528\uFF1B\u4E0D\u662F\u5E94\u7528 .env \u914D\u7F6E\u9879"
+  },
+  {
+    name: "HAI_NODE_IMAGE",
+    module: "runtime",
+    path: "HAI_NODE_IMAGE",
+    description: "Dockerfile \u7684 Node \u57FA\u7840\u955C\u50CF\u6784\u5EFA\u53C2\u6570\uFF0C\u7531 CLI \u6309 build.sources.image \u6216 --image-source \u6CE8\u5165",
+    value: "",
+    constraint: "OCI \u955C\u50CF\u5F15\u7528\uFF1B\u4E0D\u662F\u5E94\u7528 .env \u914D\u7F6E\u9879"
+  },
   {
     name: "HF_ENDPOINT",
     module: "runtime",
@@ -5155,6 +5971,22 @@ var cli_config_catalog_default = [
     value: "0.0.0.0",
     constraint: "\u4E3B\u673A\u540D\u6216 IP"
   },
+  {
+    name: "HTTP_PROXY",
+    module: "runtime",
+    path: "HTTP_PROXY",
+    description: "\u6784\u5EFA\u4E0B\u8F7D\u7684 HTTP \u4EE3\u7406\uFF1Binherit \u6A21\u5F0F\u7EE7\u627F\u8FDB\u7A0B\u73AF\u5883\uFF0Csystem/custom/none \u6A21\u5F0F\u7531 CLI \u8986\u76D6",
+    value: "",
+    constraint: "HTTP(S) \u4EE3\u7406 URL\uFF1B\u5C0F\u5199 http_proxy \u4E5F\u53D7\u652F\u6301\uFF1B\u955C\u50CF\u62C9\u53D6\u4ECD\u53D6\u51B3\u4E8E\u5F15\u64CE\u4EE3\u7406"
+  },
+  {
+    name: "HTTPS_PROXY",
+    module: "runtime",
+    path: "HTTPS_PROXY",
+    description: "\u6784\u5EFA\u4E0B\u8F7D\u7684 HTTPS \u4EE3\u7406\uFF1B\u672A\u63D0\u4F9B\u65F6\u56DE\u9000 HTTP_PROXY\uFF1Bsystem/custom/none \u6A21\u5F0F\u7531 CLI \u8986\u76D6",
+    value: "",
+    constraint: "HTTP(S) \u4EE3\u7406 URL\uFF1B\u5C0F\u5199 https_proxy \u4E5F\u53D7\u652F\u6301\uFF1B\u955C\u50CF\u62C9\u53D6\u4ECD\u53D6\u51B3\u4E8E\u5F15\u64CE\u4EE3\u7406"
+  },
   {
     name: "IAM_FIXTURE_LDAP",
     module: "runtime",
@@ -5235,6 +6067,14 @@ var cli_config_catalog_default = [
     value: "/opt/models",
     constraint: "\u53EF\u8BFB\u53D6\u7684\u6A21\u578B\u8DEF\u5F84\u6216\u6709\u6548\u4ED3\u5E93 ID\uFF1B\u9ED8\u8BA4 /opt/models"
   },
+  {
+    name: "NO_PROXY",
+    module: "runtime",
+    path: "NO_PROXY",
+    description: "\u6784\u5EFA\u4E0B\u8F7D\u7684\u4EE3\u7406\u7ED5\u8FC7\u5217\u8868\uFF1Binherit \u6A21\u5F0F\u7EE7\u627F\uFF0C\u53EF\u7531 build.proxy.bypass \u6216 --proxy-bypass \u8986\u76D6",
+    value: "",
+    constraint: "\u9017\u53F7\u5206\u9694\u7684\u4E3B\u673A\u6216\u5730\u5740\uFF1B\u5C0F\u5199 no_proxy \u4E5F\u53D7\u652F\u6301\uFF1Bnone \u6A21\u5F0F\u6E05\u7A7A"
+  },
   {
     name: "NODE_ENV",
     module: "runtime",
@@ -5433,7 +6273,7 @@ var cli_config_catalog_default = [
     path: "scheduler.enableDb",
     description: "\u5FC5\u987B\u4F7F\u7528\u5171\u4EAB\u6570\u636E\u5E93\u4FDD\u5B58\u6267\u884C\u72B6\u6001\uFF1Bfalse \u4E0D\u518D\u5141\u8BB8\uFF0C\u9700\u8981\u5148\u521D\u59CB\u5316",
     value: "true",
-    constraint: "true | false\uFF1B\u53D6\u503C\uFF1Atrue"
+    constraint: "true\uFF1B\u53D6\u503C\uFF1Atrue"
   },
   {
     name: "HAI_SCHEDULER_LEASEMS",
@@ -5616,7 +6456,7 @@ var cli_config_catalog_default = [
     module: "serv",
     path: "serv.cors.nativeOrigins",
     description: "\u5141\u8BB8\u4F7F\u7528\u539F\u751F\u51ED\u636E\u901A\u9053\u7684\u5B8C\u6574 Origin \u5217\u8868",
-    value: "http://localhost,https://tauri.localhost,tauri://localhost,capacitor://localhost",
+    value: "http://localhost,https://localhost,http://tauri.localhost,https://tauri.localhost,tauri://localhost,capacitor://localhost",
     constraint: "\u5B57\u7B26\u4E32"
   },
   {
@@ -5641,7 +6481,7 @@ var cli_config_catalog_default = [
     path: "serv.http.access",
     description: "\u6BCF\u6B21\u8BF7\u6C42\u7684\u8DEF\u5F84/IP/\u65F6\u95F4\u7B56\u7565\uFF1Bfalse \u5173\u95ED\uFF0C\u5185\u8054\u89C4\u5219\u4E0E\u72EC\u7ACB YAML \u6587\u4EF6\u5F15\u7528\u4E0D\u80FD\u6DF7\u7528",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "true | false\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_HTTP_ACCESS_FILE",
@@ -5913,7 +6753,7 @@ var cli_config_catalog_default = [
     path: "serv.http.docs",
     description: "HTTP API \u6587\u6863\u529F\u80FD\u5F00\u5173\u6216\u6587\u6863\u8BBF\u95EE\u914D\u7F6E",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "true | false\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_HTTP_DOCS_PATH",
@@ -5937,7 +6777,7 @@ var cli_config_catalog_default = [
     path: "serv.http.health",
     description: "HTTP \u5065\u5EB7\u68C0\u67E5\u5F00\u5173\u6216\u68C0\u67E5\u914D\u7F6E",
     value: '{"path":"/health","readyPath":"/ready"}',
-    constraint: "JSON \u5BF9\u8C61\uFF1Btrue | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "JSON \u5BF9\u8C61\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_HTTP_HEALTH_PATH",
@@ -5961,7 +6801,7 @@ var cli_config_catalog_default = [
     path: "serv.http.openapi",
     description: "OpenAPI \u7AEF\u70B9\u5F00\u5173\u6216\u7AEF\u70B9\u914D\u7F6E",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "true | false\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_HTTP_OPENAPI_PATH",
@@ -5971,46 +6811,6 @@ var cli_config_catalog_default = [
     value: "/openapi.json",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u4EE5 / \u5F00\u5934\u7684\u8DEF\u5F84\u5B57\u7B26\u4E32"
   },
-  {
-    name: "HAI_SERV_HTTP_RPC",
-    module: "serv",
-    path: "serv.http.rpc",
-    description: "RPC \u7AEF\u70B9\u5F00\u5173\u6216\u8BBF\u95EE\u914D\u7F6E",
-    value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
-  },
-  {
-    name: "HAI_SERV_HTTP_RPC_ACCESS",
-    module: "serv",
-    path: "serv.http.rpc.access",
-    description: "RPC \u5BF9\u5916\u8BBF\u95EE\u7B56\u7565",
-    value: "loopback",
-    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aloopback | private-network | gateway-only"
-  },
-  {
-    name: "HAI_SERV_HTTP_RPC_GATEWAYHEADER",
-    module: "serv",
-    path: "serv.http.rpc.gatewayHeader",
-    description: "\u53D7\u4FE1\u7F51\u5173\u8BA4\u8BC1\u8BF7\u6C42\u5934\u540D\u79F0",
-    value: "",
-    constraint: "\u5B57\u7B26\u4E32"
-  },
-  {
-    name: "HAI_SERV_HTTP_RPC_GATEWAYSECRET",
-    module: "serv",
-    path: "serv.http.rpc.gatewaySecret",
-    description: "\u53D7\u4FE1\u7F51\u5173\u8BA4\u8BC1\u5BC6\u94A5",
-    value: "",
-    constraint: "\u5B57\u7B26\u4E32"
-  },
-  {
-    name: "HAI_SERV_HTTP_RPC_PREFIX",
-    module: "serv",
-    path: "serv.http.rpc.prefix",
-    description: "RPC \u7AEF\u70B9\u7684\u8DEF\u5F84\u524D\u7F00",
-    value: "/rpc",
-    constraint: "\u5B57\u7B26\u4E32\uFF1B\u4EE5 / \u5F00\u5934\u7684\u8DEF\u5F84\u5B57\u7B26\u4E32"
-  },
   {
     name: "HAI_SERV_HTTP_TRUSTEDPROXIES",
     module: "serv",
@@ -6027,6 +6827,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F ipv4\uFF1B\u6B63\u5219 ^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$\uFF1B\u683C\u5F0F ipv6\uFF1B\u6B63\u5219 ^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$\uFF1B\u683C\u5F0F cidrv4\uFF1B\u6B63\u5219 ^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\\/([0-9]|[1-2][0-9]|3[0-2])$\uFF1B\u683C\u5F0F cidrv6\uFF1B\u6B63\u5219 ^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))\\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$"
   },
+  {
+    name: "HAI_SERV_REFRESH_COOKIE_SECURE",
+    module: "serv",
+    path: "HAI_SERV_REFRESH_COOKIE_SECURE",
+    description: "Serv \u5237\u65B0 Cookie \u7684 Secure \u5C5E\u6027\uFF1B\u7559\u7A7A\u6CBF\u7528\u73AF\u5883\u9ED8\u8BA4\u503C\uFF0C\u751F\u4EA7\u9ED8\u8BA4\u5F00\u542F",
+    value: "",
+    constraint: "true | false\uFF1B\u4EC5\u5728\u53D7\u63A7\u5185\u7F51\u6216 VPN \u7684 HTTP \u5165\u53E3\u4F7F\u7528 false"
+  },
   {
     name: "HAI_SERV_SERVER",
     module: "serv",
@@ -6057,7 +6865,7 @@ var cli_config_catalog_default = [
     path: "serv.transport",
     description: "\u4F20\u8F93\u52A0\u5BC6\u5F00\u5173\u6216\u5BC6\u94A5\u534F\u5546\u914D\u7F6E",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_TRANSPORT_EXCLUDEPATHS",
@@ -6115,6 +6923,14 @@ var cli_config_catalog_default = [
     value: "/_hai/key-exchange",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u4EE5 / \u5F00\u5934\u7684\u8DEF\u5F84\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_SERV_TRANSPORT_MAXFUTURESKEWSECONDS",
+    module: "serv",
+    path: "serv.transport.maxFutureSkewSeconds",
+    description: "\u5141\u8BB8\u5BA2\u6237\u7AEF\u8BF7\u6C42\u65F6\u95F4\u9886\u5148\u670D\u52A1\u5668\u7684\u79D2\u6570",
+    value: "30",
+    constraint: "\u6574\u6570\uFF1B>= 0\uFF1B<= 300"
+  },
   {
     name: "HAI_SERV_TRANSPORT_MAXPLAINTEXTBYTES",
     module: "serv",
@@ -6123,6 +6939,14 @@ var cli_config_catalog_default = [
     value: "1048576",
     constraint: "\u6574\u6570\uFF1B>= 1024\uFF1B<= 67108864\uFF1B\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aauto"
   },
+  {
+    name: "HAI_SERV_TRANSPORT_MAXREQUESTAGESECONDS",
+    module: "serv",
+    path: "serv.transport.maxRequestAgeSeconds",
+    description: "\u8BF7\u6C42\u4ECE\u7B7E\u53D1\u8D77\u7684\u6709\u6548\u79D2\u6570",
+    value: "300",
+    constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 600"
+  },
   {
     name: "HAI_SERV_TRANSPORT_ROUTEPLAINTEXTBYTES",
     module: "serv",
@@ -6239,7 +7063,7 @@ var cli_config_catalog_default = [
     name: "HAI_STORAGE_PREFIX",
     module: "storage",
     path: "storage.prefix",
-    description: "\u8DEF\u5F84\u524D\u7F00\uFF08\u6240\u6709\u64CD\u4F5C\u90FD\u4F1A\u52A0\u4E0A\u6B64\u524D\u7F00\uFF09",
+    description: "S3 \u6876\u5185\u5BF9\u8C61\u952E\u524D\u7F00\uFF0C\u4F8B\u5982 my-app/uploads/\uFF0C\u7559\u7A7A\u4F7F\u7528\u6876\u6839",
     value: "",
     constraint: "\u5B57\u7B26\u4E32"
   },
@@ -6472,7 +7296,55 @@ var cli_config_catalog_default = [
 // src/commands/cli-config-environment.ts
 var catalogByName = new Map(cli_config_catalog_default.map((entry) => [entry.name, entry]));
 var catalogByPath = new Map(cli_config_catalog_default.map((entry) => [entry.path, entry]));
+function configurationConstraint(value) {
+  return value.replaceAll("JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9", "\u914D\u7F6E\u5757\uFF08\u586B\u5199\u4E0B\u65B9\u7F29\u8FDB\u5B57\u6BB5\uFF09").replaceAll("JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55", "\u5217\u8868\uFF08\u6BCF\u9879\u4EE5 - \u5F00\u5934\uFF09").replaceAll("string,null", "\u5B57\u7B26\u4E32\u6216\u7A7A\u503C").replaceAll("\uFF1B<= 9007199254740991", "");
+}
+function withoutGeneratedDocumentation(content) {
+  const { lines, document: optional, counter } = readOptionalConfig(content);
+  const starts = [];
+  let offset = 0;
+  for (const line of lines) {
+    starts.push(offset);
+    offset += line.length + 1;
+  }
+  const ranges = [];
+  function originalOffset(position, end) {
+    const location = counter.linePos(position);
+    const line = lines[location.line - 1] ?? "";
+    const prefix = /^(\s*)# (?=\s*(?:[a-z][\w-]*:|-\s))/i.exec(line);
+    const column = location.col - 1;
+    const removed = prefix && (column > prefix[1].length || !end && column === prefix[1].length) ? 2 : 0;
+    return (starts[location.line - 1] ?? content.length) + column + removed;
+  }
+  function collect(node, virtual) {
+    if (isMap(node)) {
+      for (const pair of node.items)
+        collect(pair.value, virtual);
+    } else if (isSeq(node)) {
+      node.items.forEach((item) => collect(item, virtual));
+    } else if (isScalar(node) && node.range) {
+      ranges.push(virtual ? [
+        originalOffset(node.range[0], false),
+        originalOffset(node.range[1], true)
+      ] : [node.range[0], node.range[1]]);
+    }
+  }
+  collect(parseDocument(content).contents, false);
+  if (!optional.errors.length)
+    collect(optional.contents, true);
+  const protectedAt = (position) => ranges.some(([start, end]) => position >= start && position < end);
+  return lines.flatMap((line, index) => {
+    const metadata = /^(\s*)#\s*(?:用途|说明|取值)：/.exec(line);
+    if (metadata && !protectedAt(starts[index] + metadata[1].length))
+      return [];
+    const suffix = line.lastIndexOf(" # \u8BF4\u660E\uFF1A");
+    return [
+      suffix >= 0 && !protectedAt(starts[index] + suffix + 1) ? line.slice(0, suffix) : line
+    ];
+  }).join("\n");
+}
 function documentConfig(name, content) {
+  content = withoutGeneratedDocumentation(content);
   const document = parseDocument(content);
   if (document.errors.length)
     throw new Error(`Invalid ${name} configuration documentation source`);
@@ -6483,7 +7355,7 @@ function documentConfig(name, content) {
         const previous = node[field];
         if (!previous)
           continue;
-        const kept = previous.split("\n").filter((line) => !/^\s*用途：/.test(line)).join("\n") || null;
+        const kept = previous.split("\n").filter((line) => !/^\s*(?:用途|说明|取值)：/.test(line)).join("\n") || null;
         if (kept !== previous) {
           node[field] = kept;
           changed = true;
@@ -6498,11 +7370,19 @@ function documentConfig(name, content) {
         if (!isScalar(pair.key))
           continue;
         clearGeneratedComments(pair.key);
-        const field = [...segments, String(pair.key.value)];
+        const field = [
+          ...segments,
+          String(pair.key.value)
+        ];
         const description = catalogByPath.get([name, ...field].join(".").replace(/\.\d+(?=\.|$)/g, ".0"))?.description;
         if (description) {
           const target = sequenceItem && index === 0 ? node : pair.key;
-          const comment = [target.commentBefore, ` \u7528\u9014\uFF1A${description}`].filter(Boolean).join("\n");
+          const entry = catalogByPath.get([name, ...field].join(".").replace(/\.\d+(?=\.|$)/g, ".0"));
+          const comment = [
+            target.commentBefore,
+            ` \u8BF4\u660E\uFF1A${description}`,
+            entry?.constraint ? ` \u53D6\u503C\uFF1A${configurationConstraint(entry.constraint)}` : void 0
+          ].filter(Boolean).join("\n");
           if (target.commentBefore !== comment) {
             target.commentBefore = comment;
             changed = true;
@@ -6511,29 +7391,81 @@ function documentConfig(name, content) {
         walk(pair.value, field);
       }
     } else if (isSeq(node)) {
-      node.items.forEach((item, index) => walk(item, [...segments, String(index)], true));
+      node.items.forEach((item, index) => walk(item, [
+        ...segments,
+        String(index)
+      ], true));
     }
   }
   walk(document.contents, []);
-  return changed ? document.toString({ lineWidth: 0 }) : content;
+  return documentOptionalConfig(name, changed ? document.toString({ lineWidth: 0 }) : content).replace(/^#[\t ]+$/gm, "#");
+}
+function documentOptionalConfig(name, content) {
+  const { lines, document, counter } = readOptionalConfig(content);
+  if (document.errors.length)
+    return content;
+  const additions = /* @__PURE__ */ new Map();
+  function walk(node, path) {
+    if (isMap(node)) {
+      for (const pair of node.items) {
+        if (!isScalar(pair.key))
+          continue;
+        const segments = [
+          ...path,
+          String(pair.key.value)
+        ];
+        const entry = catalogByPath.get([name, ...segments].join(".").replace(/\.\d+(?=\.|$)/g, ".0"));
+        if (entry && pair.key.range) {
+          const line = counter.linePos(pair.key.range[0]).line - 1;
+          const prefix = /^(\s*#\s*)(?:-\s*)?[A-Z][\w-]*:/i.exec(lines[line])?.[1];
+          if (prefix && !additions.has(line))
+            additions.set(line, ` # \u8BF4\u660E\uFF1A${entry.description}\uFF1B\u53D6\u503C\uFF1A${configurationConstraint(entry.constraint)}`);
+        }
+        walk(pair.value, segments);
+      }
+    } else if (isSeq(node)) {
+      node.items.forEach((item, index) => walk(item, [
+        ...path,
+        String(index)
+      ]));
+    }
+  }
+  walk(document.contents, []);
+  return lines.map((line, index) => line + (additions.get(index) ?? "")).join("\n");
+}
+function readOptionalConfig(content) {
+  const lines = content.split(/\r?\n/);
+  const virtual = lines.map((line) => line.replace(/^(\s*)# (?=\s*(?:[A-Z][\w-]*:|-\s))/i, "$1")).join("\n");
+  const counter = new LineCounter();
+  const document = parseDocument(virtual, { uniqueKeys: false, lineCounter: counter });
+  return { lines, document, counter };
 }
 function parameterizeConfig(name, content) {
+  content = parameterizeOptionalConfig(name, content);
   const document = parseDocument(content);
   if (document.errors.length > 0)
     throw new Error(`Invalid ${name} configuration template`);
   if (!document.contents || isScalar(document.contents) && document.contents.value === null)
     return content;
+  let changed = false;
   function walk(node, path) {
     if (["templates", "supportedLocales", "id"].includes(path[0]) || path.includes("redact") || name === "audit" && /^(?:userTable|userIdColumn|userNameColumn)$/.test(path[0] ?? "") || name === "iam" && ["ui", "agreements", "rbac"].includes(path[0]) && !(path.at(-1) ?? "").endsWith("Url") || ["id", "name", "operations"].includes(path.at(-1) ?? "") && path.some((segment) => /^\d+$/.test(segment))) {
       return;
     }
     if (isMap(node)) {
       for (const pair of node.items) {
-        if (isScalar(pair.key))
-          walk(pair.value, [...path, String(pair.key.value)]);
+        if (isScalar(pair.key)) {
+          walk(pair.value, [
+            ...path,
+            String(pair.key.value)
+          ]);
+        }
       }
     } else if (isSeq(node)) {
-      node.items.forEach((item, index) => walk(item, [...path, String(index)]));
+      node.items.forEach((item, index) => walk(item, [
+        ...path,
+        String(index)
+      ]));
     } else if (isScalar(node) && node.value !== null && node.value !== void 0) {
       const value = String(node.value);
       if (value.includes("${") || /[\n\r}]/.test(value))
@@ -6543,42 +7475,114 @@ function parameterizeConfig(name, content) {
       const fallback = typeof node.value === "string" && value !== "" && (parsed.errors.length > 0 || !isScalar(parsed.contents) || parsed.contents.value !== value) ? JSON.stringify(value) : value;
       node.value = `\${${variable}:${fallback}}`;
       node.type = Scalar.PLAIN;
+      changed = true;
+    }
+  }
+  walk(document.contents, []);
+  return changed ? document.toString({ lineWidth: 0 }) : content;
+}
+function parameterizeOptionalConfig(name, content) {
+  const { lines, document, counter } = readOptionalConfig(content);
+  if (document.errors.length)
+    return content;
+  const edits = /* @__PURE__ */ new Map();
+  function walk(node, segments) {
+    if (isMap(node)) {
+      for (const pair of node.items) {
+        if (isScalar(pair.key)) {
+          walk(pair.value, [
+            ...segments,
+            String(pair.key.value)
+          ]);
+        }
+      }
+    } else if (isSeq(node)) {
+      node.items.forEach((item, index) => walk(item, [
+        ...segments,
+        String(index)
+      ]));
+    } else if (isScalar(node) && node.range && node.value !== null && node.value !== void 0) {
+      const location = counter.linePos(node.range[0]);
+      const line = lines[location.line - 1];
+      if (!/^\s*# /.test(line) || /[\n\r}]/.test(String(node.value)) || String(node.value).includes("${"))
+        return;
+      const field = [name, ...segments].join(".").replace(/\.\d+(?=\.|$)/g, ".0");
+      if (!catalogByPath.has(field) || ["id", "name", "operations"].includes(segments.at(-1) ?? "") || segments.includes("templates") || segments.includes("redact"))
+        return;
+      const variable = ["HAI", name, ...segments].map((part) => part.replace(/[^a-z0-9]+/gi, "_").replace(/^_+|_+$/g, "").toUpperCase()).join("_");
+      const text = String(node.value);
+      const parsed = parseDocument(text);
+      const fallback = typeof node.value === "string" && text !== "" && (parsed.errors.length > 0 || !isScalar(parsed.contents) || parsed.contents.value !== text) ? JSON.stringify(text) : text;
+      const replacement = `\${${variable}:${fallback}}`;
+      const list = edits.get(location.line - 1) ?? [];
+      list.push({
+        start: location.col + 1,
+        end: location.col + 1 + node.range[1] - node.range[0],
+        value: JSON.stringify(replacement)
+      });
+      edits.set(location.line - 1, list);
     }
   }
   walk(document.contents, []);
-  return document.toString({ lineWidth: 0 });
+  for (const [index, replacements] of edits) {
+    for (const edit of replacements.sort((a, b) => b.start - a.start))
+      lines[index] = lines[index].slice(0, edit.start) + edit.value + lines[index].slice(edit.end);
+  }
+  return lines.join("\n");
 }
 function configEnvironmentVariables(name, content) {
   const variables = /* @__PURE__ */ new Map();
   const locations = /* @__PURE__ */ new Map();
+  const activeValues = /* @__PURE__ */ new Map();
   function locate(node, path) {
     if (isMap(node)) {
       for (const pair of node.items) {
-        if (isScalar(pair.key))
-          locate(pair.value, [...path, String(pair.key.value)]);
+        if (isScalar(pair.key)) {
+          locate(pair.value, [
+            ...path,
+            String(pair.key.value)
+          ]);
+        }
       }
     } else if (isSeq(node)) {
-      node.items.forEach((item, index) => locate(item, [...path, String(index)]));
+      node.items.forEach((item, index) => locate(item, [
+        ...path,
+        String(index)
+      ]));
     } else if (isScalar(node) && typeof node.value === "string") {
-      for (const match of node.value.matchAll(/\$\{([^}:]+)/g))
+      for (const match of node.value.matchAll(/\$\{([^}:]+)(?::([^}]*))?\}/g)) {
         locations.set(match[1], [name, ...path].join("."));
+        if (!activeValues.has(match[1]))
+          activeValues.set(match[1], match[2] ?? "");
+      }
     }
   }
   locate(parseDocument(content).contents, []);
   for (const match of content.matchAll(/\$\{((?:HAI_|PUBLIC_|VITE_|AI_|OPENAI_|GEMINI_|DASHSCOPE_|ARK_|LDAP_)[A-Z0-9_]*)(?::([^}]*))?\}/g)) {
     const [, variable, value = ""] = match;
+    if (variables.has(variable))
+      continue;
+    const normalized = catalogByName.get(variable.replace(/_\d+(?=_|$)/g, "_0"));
+    const entry = catalogByName.get(variable) ?? normalized;
+    const indices = [
+      ...variable.matchAll(/_(\d+)(?=_|$)/g)
+    ].map((item) => item[1]);
+    const catalogPath = (entry?.path === variable ? normalized?.path : entry?.path)?.replace(/\.0(?=\.|$)/g, () => `.${indices.shift() ?? "0"}`);
     variables.set(variable, {
       name: variable,
-      path: locations.get(variable) ?? `${name} (${variable}\uFF0C\u53EF\u9009\u5757)`,
-      value,
+      path: locations.get(variable) ?? catalogPath ?? `${name} (${variable}\uFF0C\u53EF\u9009\u5757)`,
+      value: activeValues.get(variable) ?? value,
       constraint: variableConstraint(variable, value),
-      description: catalogByName.get(variable)?.description
+      description: entry?.description,
+      optional: !locations.has(variable)
     });
   }
-  return [...variables.values()];
+  return [
+    ...variables.values()
+  ];
 }
 function variableConstraint(name, value) {
-  const known = catalogByName.get(name);
+  const known = catalogByName.get(name) ?? catalogByName.get(name.replace(/_\d+(?=_|$)/g, "_0"));
   if (known)
     return known.constraint;
   const enums = {
@@ -6589,7 +7593,7 @@ function variableConstraint(name, value) {
     HAI_CACHE_TYPE: "memory | redis",
     HAI_STORAGE_TYPE: "local | s3",
     HAI_VECDB_TYPE: "lancedb | pgvector | qdrant | chroma",
-    HAI_AI_LLM_API: "chat | responses | anthropic",
+    HAI_AI_LLM_PROTOCOL: "chat | responses | anthropic",
     HAI_DB_SSL: "MySQL\uFF1Afalse \u6216\u4E25\u683C TLS \u5BF9\u8C61\uFF08{} \u9ED8\u8BA4\u6821\u9A8C\u8BC1\u4E66\u94FE\u548C DNS \u8EAB\u4EFD\uFF09\uFF1BPostgreSQL\uFF1A\u5E03\u5C14\u503C\u3001require/prefer/allow/disable \u6216 TLS \u5BF9\u8C61",
     HAI_IAM_PASSWORD_MINLENGTH: "\u6574\u6570 >= 1\uFF0C\u4E14\u4E0D\u5927\u4E8E maxLength",
     HAI_IAM_PASSWORD_MAXLENGTH: "\u6574\u6570 1\u2013256\uFF0C\u4E14\u4E0D\u5C0F\u4E8E minLength",
@@ -6616,8 +7620,9 @@ function variableConstraint(name, value) {
     return "\u6574\u6570 1\u201365535";
   if (name.endsWith("TEMPERATURE"))
     return "\u6570\u5B57 0\u20132";
-  if (/^HAI_AI_.*(?:TIMEOUT|MAXTOKENS|CACHE_TTL)$/.test(name))
+  if (/^HAI_AI_.*(?:TIMEOUT|MAXTOKENS|CACHE_TTL)$/.test(name)) {
     return name.endsWith("MAXTOKENS") ? "\u6570\u5B57 > 0\uFF0C\u5355\u4F4D token" : "\u6570\u5B57 > 0\uFF0C\u5355\u4F4D\u6BEB\u79D2";
+  }
   if (name === "HAI_CACHE_DB")
     return "\u6574\u6570 0\u201315";
   if (name === "HAI_DB_DATABASE")
@@ -6643,18 +7648,29 @@ function runtimeEnvironmentVariables(content) {
   const variables = /* @__PURE__ */ new Map();
   for (const match of content.matchAll(/(?:process\.env|import\.meta\.env)(?:\?\.)?\.?(?:([A-Z][A-Z0-9_]+)|\[['"]([A-Z][A-Z0-9_]+)['"]\])|\$\{((?:HAI_|PUBLIC_|VITE_)[A-Z0-9_]+)(?::[^}]*)?\}/g)) {
     const name = match[1] ?? match[2] ?? match[3];
-    if (match[0].startsWith("import.meta.env") && ["SSR", "MODE", "DEV", "PROD", "BASE_URL"].includes(name))
+    if (match[0].startsWith("import.meta.env") && [
+      "SSR",
+      "MODE",
+      "DEV",
+      "PROD",
+      "BASE_URL"
+    ].includes(name)) {
       continue;
+    }
     const variable = catalogByName.get(name);
     if (variable)
       variables.set(name, variable);
   }
-  return [...variables.values()];
+  return [
+    ...variables.values()
+  ];
 }
 
 // src/commands/cli-config-templates.ts
-function generateConfigFile(moduleKey, configs) {
-  return documentConfig(moduleKey, parameterizeConfig(moduleKey, generateLiteralConfigFile(moduleKey, configs)));
+function generateConfigFile(moduleKey, configs, enabled = true) {
+  const content = documentConfig(moduleKey, parameterizeConfig(moduleKey, generateLiteralConfigFile(moduleKey, configs)));
+  return enabled ? content : `# # \u672A\u542F\u7528\uFF1A\u5B89\u88C5\u5BF9\u5E94\u6A21\u5757\u5E76\u5728\u670D\u52A1\u7AEF runtime \u4E2D\u521D\u59CB\u5316\uFF0C\u518D\u53D6\u6D88\u6240\u9700\u914D\u7F6E\u7684\u6CE8\u91CA\u3002
+${content.split("\n").map((line) => line ? `# ${line}` : "").join("\n")}`;
 }
 function generateLiteralConfigFile(moduleKey, configs) {
   switch (moduleKey) {
@@ -6709,6 +7725,8 @@ logging:
   format: pretty
   # context:
   #   service: api
+  # redact \u586B\u65E5\u5FD7\u5B57\u6BB5\u8DEF\u5F84\uFF1Bcustomer.email \u906E\u76D6\u5BA2\u6237\u90AE\u7BB1\uFF0Crecipients[*].phone \u906E\u76D6\u6570\u7EC4\u4E2D\u7684\u7535\u8BDD\u3002
+  # \u53EA\u5339\u914D\u6307\u5B9A\u5C42\u7EA7\uFF0C* \u5339\u914D\u4E00\u5C42\uFF1B\u5BC6\u7801\u548C\u4EE4\u724C\u7B49\u5DF2\u77E5\u51ED\u636E\u9ED8\u8BA4\u4ECD\u4F1A\u8131\u654F\u3002
   redact:
     - password
     - token
@@ -6745,22 +7763,24 @@ http:
   access: false
   # access:
   #   file: ./config/security/request-access.yml
+  # \u6216\u5C06 access: false \u66FF\u6362\u4E3A\u4E0B\u5217\u5185\u8054\u914D\u7F6E\uFF1B\u4E0E file \u4E8C\u9009\u4E00\u3002
+  # access:
+  #   global:
+  #     timezone: UTC # \u53EF\u7528 HAI_SERV_HTTP_ACCESS_GLOBAL_TIMEZONE=Asia/Shanghai
+  #     allowIps: []
+  #     denyIps: []
+  #     windows: []
+  #   rules: []
   apiPrefix: /api/v1
   openapi:
     path: /openapi.json
+  # HAI_SERV_HTTP_DOCS=false \u5173\u95ED\u6587\u6863\uFF1B\u5F00\u542F\u65F6\u518D\u914D\u7F6E path/requireAuth\u3002
   docs:
     path: /docs
     # requireAuth: true
   health:
     path: /health
     readyPath: /ready
-  rpc: false
-  # \u542F\u7528\u5185\u90E8 RPC \u65F6\u7528\u5BF9\u8C61\u66FF\u6362 false\uFF0Cgateway-only \u5FC5\u987B\u914D\u7F6E\u7F51\u5173\u5BC6\u94A5\u3002
-  # rpc:
-  #   prefix: /api/rpc
-  #   access: gateway-only # loopback | private-network | gateway-only
-  #   gatewayHeader: X-Gateway-Key
-  #   gatewaySecret: \${HAI_SERV_HTTP_RPC_GATEWAYSECRET}
 
 # \u6309\u9700\u5F00\u542F\u8DE8\u57DF\u8BBF\u95EE\uFF0C\u751F\u4EA7\u73AF\u5883\u586B\u5199\u660E\u786E\u7684 Origin\u3002
 # cors:
@@ -6776,6 +7796,9 @@ transport: false
 #   maxPlaintextBytes: \${HAI_SERV_TRANSPORT_MAXPLAINTEXTBYTES:1048576} # \u53CC\u5411 UTF-8 \u660E\u6587\uFF0C1 KiB\uFF5E64 MiB
 #   keyExchangePath: /_hai/key-exchange
 #   excludePaths: [/health, /ready]
+# \u5355\u6761\u8DEF\u5F84\u9700\u8981\u66F4\u5927\u8BF7\u6C42\u4F53\u65F6\u586B\u5199\u5B57\u8282\u6570\uFF0C* \u53EA\u5339\u914D\u4E00\u6BB5\u8DEF\u5F84\u3002
+#   routePlaintextBytes: # HAI_SERV_TRANSPORT_ROUTEPLAINTEXTBYTES \u53EF\u586B JSON \u8DEF\u5F84\u6620\u5C04
+#     /api/v1/uploads/*: 8388608
 `;
 }
 function generateDbConfig(cfg) {
@@ -6797,7 +7820,7 @@ function generateDbConfig(cfg) {
 # MySQL \u4E13\u7528\uFF1BPostgreSQL \u65E0\u9700\u6B64\u5757\u3002
 # mysql:
 #   charset: utf8mb4
-#   timezone: '+08:00'`;
+# MySQL \u4E0D\u652F\u6301 timezone \u914D\u7F6E\uFF1B\u4E0D\u8981\u5728 mysql \u5757\u5185\u586B\u5199\u8BE5\u5B57\u6BB5\u3002`;
   return `# =============================================================================
 # \u6570\u636E\u5E93\u914D\u7F6E
 # =============================================================================
@@ -6813,7 +7836,7 @@ url: \${HAI_DB_URL:}
 ssl: \${HAI_DB_SSL:false}
 ${networkOptions}
 
-# SQL \u65E5\u5FD7\u6309\u9700\u5F00\u542F\uFF1BmaxLength \u9650\u5236 SQL / \u53C2\u6570\u8F93\u51FA\u957F\u5EA6\u3002
+# \u64CD\u4F5C\u65E5\u5FD7\u6309\u9700\u5F00\u542F\uFF0C\u53EA\u8BB0\u5F55\u8017\u65F6\u3001\u6570\u91CF\u7B49\u5B89\u5168\u6458\u8981\uFF1BmaxLength \u9650\u5236\u6458\u8981\u957F\u5EA6\uFF0C\u4E0D\u8BB0\u5F55 SQL \u539F\u6587\u548C\u53C2\u6570\u3002
 # operationLog:
 #   read: false
 #   write: false
@@ -6825,7 +7848,12 @@ function generateCacheConfig(cfg) {
   const cacheType = cfg?.type ?? "memory";
   const host = cfg?.host ?? "localhost";
   const port = cfg?.port ?? 6379;
-  const connection = stringify({ host, port, password: "", keyPrefix: "hai:" }).trim();
+  const connection = stringify({
+    host,
+    port,
+    password: "",
+    keyPrefix: "hai:"
+  }).trim();
   return `# =============================================================================
 # \u7F13\u5B58\u914D\u7F6E
 # =============================================================================
@@ -6903,7 +7931,7 @@ captcha:
 # apikey:
 #   maxKeysPerUser: 10
 #   defaultExpirationDays: 0 # 0 \u8868\u793A\u4E0D\u9650\u5236\u6709\u6548\u671F
-#   prefix: hai_
+#   prefix: hai_ # \u65B0\u5EFA API Key \u7684\u5F00\u5934\uFF0C\u4F8B\u5982 hai_abc123\uFF1B\u53EA\u586B\u5E94\u7528\u6807\u8BC6\uFF0C\u4E0D\u653E\u5BC6\u7801\u3002
 # OTP \u9700\u542F\u7528 login.otp\uFF0C\u5E76\u9009\u62E9 Reach \u6807\u51C6\u6A21\u677F\u6216\u81EA\u5B9A\u4E49\u53D1\u9001\u56DE\u8C03\u3002
 ${(loginOtp ? "" : "# \u4FDD\u7559\u9ED8\u8BA4\u7B56\u7565\u5165\u53E3\uFF0C\u5355\u72EC\u5207\u6362 login.otp \u5373\u53EF\u542F\u7528\u9A8C\u8BC1\u7801\u767B\u5F55\u3002\notp: {}\n# \u5B9A\u5236\u7B56\u7565\u65F6\u7528\u4E0B\u65B9\u914D\u7F6E\u5757\u66FF\u6362\u7A7A\u5BF9\u8C61\uFF0C\u6216\u901A\u8FC7 HAI_IAM_OTP \u6574\u4F53\u8986\u76D6\u3002\n") + `otp:
   email: true
@@ -6967,7 +7995,12 @@ loginAccess:
   timezone: UTC
   allowIps: [] # \u7A7A\u5217\u8868\u4E0D\u9650\u5236\uFF1B\u652F\u6301 IPv4\u3001IPv6 \u4E0E CIDR
   denyIps: [] # \u62D2\u7EDD\u4F18\u5148
-  windows: [] # days \u4E3A\u5468\u4E001\u81F3\u5468\u65E57\uFF1Bstart/end \u4E3A HH:mm\uFF0C\u652F\u6301\u8DE8\u5348\u591C
+  windows: [] # \u7559\u7A7A\u5141\u8BB8\u4EFB\u4F55\u65F6\u95F4\uFF1B\u4EE5\u4E0B\u4F8B\u5B50\u53EA\u5141\u8BB8\u5468\u4E00\u81F3\u5468\u4E94 09:00\u201318:00 \u767B\u5F55\u3002
+  # windows:
+  #   - days: [1, 2, 3, 4, 5]
+  #     start: '09:00'
+  #     end: '18:00'
+  # timezone \u8BBE\u4E3A Asia/Shanghai \u65F6\uFF0C\u4E0A\u8FF0\u65F6\u95F4\u6309\u5317\u4EAC\u65F6\u95F4\u89E3\u91CA\u3002
 
 # \u4F1A\u8BDD\u914D\u7F6E
 session:
@@ -6978,7 +8011,11 @@ session:
   singleDeviceMode: replace # replace \u9876\u65E7\u4FDD\u65B0\uFF1Breject \u62D2\u7EDD\u91CD\u590D\u767B\u5F55
   maxSessions: 0 # \u6BCF\u7528\u6237\u6709\u6548\u4F1A\u8BDD\u4E0A\u9650\uFF0C0 \u4E0D\u9650\u5236
   # \u6309\u7EC8\u7AEF\u5206\u522B\u9650\u5236\uFF1B\u975E\u7A7A\u65F6\u4EC5\u5141\u8BB8\u5217\u51FA\u7684\u7C7B\u578B\uFF0C\u4ECD\u53D7\u5168\u5C40\u6700\u5927\u4F1A\u8BDD\u6570\u7EA6\u675F\u3002
-  terminalLimits: {}
+  terminalLimits: {} # \u7559\u7A7A\u4E0D\u6309\u7EC8\u7AEF\u9650\u5236\u3002\u4E0B\u9762\u4F8B\u5B50\u5141\u8BB8 web 2 \u4E2A\u3001app 1 \u4E2A\uFF0C\u5176\u4F59\u7EC8\u7AEF\u4E0D\u5141\u8BB8\u65B0\u767B\u5F55\u3002
+  # terminalLimits:
+  #   web: 2
+  #   app: 1
+  # \u524D\u7AEF\u53D1\u9001\u7684\u7EC8\u7AEF\u540D\u79F0\u5FC5\u987B\u4E0E\u952E\u540D\u76F8\u540C\uFF1B\u6B64\u9650\u5236\u540C\u65F6\u53D7 maxSessions \u7EA6\u675F\u3002
   terminalLimitMode: reject
   idleTimeout: 0 # \u95F2\u7F6E\u671F\u9650\uFF08\u79D2\uFF09\uFF0C0 \u5173\u95ED\uFF1Baccess/refresh \u5747\u6267\u884C
   absoluteTimeout: 0 # \u4ECE\u9996\u6B21\u767B\u5F55\u8D77\u7684\u7EDD\u5BF9\u671F\u9650\uFF08\u79D2\uFF09\uFF0C0 \u5173\u95ED
@@ -7012,8 +8049,9 @@ accessKeyId: ''
 secretAccessKey: ''
 endpoint: \${HAI_STORAGE_ENDPOINT:https://s3.amazonaws.com}
 forcePathStyle: false
-# prefix: ''
-# publicEndpoint: https://app.example.com # \u79C1\u6709\u9884\u7B7E\u540D\u8BBF\u95EE\u6E90\uFF1B\u4E0D\u542B\u6876\u540D\u6216\u7F51\u7AD9\u76EE\u5F55
+# \u53EF\u76F4\u63A5\u8BBE\u7F6E HAI_STORAGE_PREFIX=my-app/uploads/\uFF1B\u4FDD\u5B58 report.pdf \u540E\u7684\u952E\u540D\u4E3A my-app/uploads/report.pdf\u3002
+# prefix: "\${HAI_STORAGE_PREFIX:}"
+# publicEndpoint: https://app.example.com # \u6D4F\u89C8\u5668\u4E0B\u8F7D\u5165\u53E3\uFF0C\u53EF\u5E26 /files \u7B49\u4EE3\u7406\u76EE\u5F55\uFF1B\u4E0D\u542B\u6876\u540D
 # publicUrl: https://cdn.example.com`;
   return `# \u5B58\u50A8\u914D\u7F6E\uFF1BHAI_STORAGE \u53EF\u6574\u4F53\u66FF\u6362\u8FDE\u63A5\u914D\u7F6E\u3002
 type: ${type}
@@ -7037,7 +8075,7 @@ function generateAiConfig(cfg) {
 # AI \u914D\u7F6E
 # =============================================================================
 
-# LLM \u914D\u7F6E\uFF08\u5FC5\u586B\uFF09
+# \u5BF9\u8BDD\u6A21\u578B\uFF08\u4F7F\u7528\u5BF9\u8BDD\u529F\u80FD\u65F6\u914D\u7F6E\uFF09
 llm:
   # API Key\uFF08\u7EA6\u5B9A\u73AF\u5883\u53D8\u91CF HAI_AI_LLM_APIKEY \u4F18\u5148\uFF09
   apiKey: ''
@@ -7045,7 +8083,7 @@ llm:
   # baseUrl: https://api.openai.com/v1
   # \u9ED8\u8BA4\u6A21\u578B
 ${stringify({ model }).trim().split("\n").map((line) => `  ${line}`).join("\n")}
-  api: ${api} # chat | responses | anthropic
+  protocol: ${api} # \u8BF7\u6C42\u683C\u5F0F\uFF1AOpenAI \u517C\u5BB9\u9009 chat\uFF0CResponses \u9009 responses\uFF0CClaude Messages \u9009 anthropic\u3002
   # \u5168\u5C40\u6700\u5927 Token \u6570\uFF08\u9ED8\u8BA4 4096\uFF09
   # maxTokens: 4096
   # \u91C7\u6837\u6E29\u5EA6\uFF080-2\uFF0C\u9ED8\u8BA4 0.7\uFF09
@@ -7054,21 +8092,34 @@ ${stringify({ model }).trim().split("\n").map((line) => `  ${line}`).join("\n")}
   # timeout: 60000
   # tempModelCacheTtl: 600000
 
-  # \u591A\u6A21\u578B\u914D\u7F6E\uFF08\u53EF\u9009\uFF0C\u7528\u4E8E\u573A\u666F\u8DEF\u7531\uFF09
+  # \u591A\u6A21\u578B\u914D\u7F6E\uFF1Aid \u662F\u5E94\u7528\u4E2D\u7684\u77ED\u540D\uFF0Cmodel \u662F\u4F9B\u5E94\u5546\u7684\u771F\u5B9E\u578B\u53F7\u3002\u5404\u9879\u53EF\u5355\u72EC\u8BBE\u7F6E\u534F\u8BAE\u3001\u5730\u5740\u548C\u5BC6\u94A5\u3002
   # models:
   #   - id: fast
   #     model: gpt-4o-mini
-  #     api: chat
+  #     protocol: chat
   #     apiKey: ''
   #     baseUrl: https://api.openai.com/v1
   #     maxTokens: 4096
   #     temperature: 0.7
   #     timeout: 60000
+  #     capabilities: # \u80FD\u529B\u6765\u81EA\u4F9B\u5E94\u5546\u786E\u8BA4\uFF1B\u672A\u77E5\u65F6\u7701\u7565\uFF0C\u4E0D\u80FD\u7528 maxTokens \u9884\u7B97\u731C\u5BB9\u91CF\u3002
+  #       contextWindow: 128000
+  #       maxOutputTokens: 16384
+  #       inputModalities: [text, image]
+  #       outputModalities: [text]
+  #       toolCalling: true
+  #       reasoning:
+  #         supported: false
   #   - id: smart
   #     model: gpt-4o
   #     apiKey: ''
+  #   - id: coding # Codex \u4F7F\u7528\u72EC\u7ACB\u7684 Responses \u7AEF\u70B9\uFF1B\u6309\u5B9E\u9645\u670D\u52A1\u586B\u5199\u578B\u53F7\u3001\u5730\u5740\u548C\u5BC6\u94A5\u3002
+  #     model: your-coding-model
+  #     protocol: responses
+  #     baseUrl: https://your-responses-service.example/v1
+  #     apiKey: ''
 
-  # \u573A\u666F\u6A21\u578B\u6620\u5C04\uFF08\u53EF\u9009\uFF09
+  # \u573A\u666F\u6A21\u578B\u6620\u5C04\uFF1A\u666E\u901A\u5BF9\u8BDD\u7528 fast\uFF0C\u590D\u6742\u63A8\u7406\u7528 smart\uFF1B\u503C\u5BF9\u5E94\u4E0A\u65B9 models \u7684 id\u3002
   # scenarios:
   #   default: fast
   #   chat: fast
@@ -7084,7 +8135,39 @@ ${stringify({ model }).trim().split("\n").map((line) => `  ${line}`).join("\n")}
   # embedding / rerank / vision \u987B\u5728 models \u4E2D\u58F0\u660E\u5BF9\u5E94\u5382\u5546\u6A21\u578B\uFF0C\u4E0D\u80FD\u53EA\u586B\u5199\u573A\u666F ID\u3002
 
 # \u53EF\u9009\u5B50\u6A21\u5757\u53EA\u53D6\u6D88\u9700\u8981\u7684\u5757\uFF1B\u751F\u4EA7\u73AF\u5883\u5148\u521D\u59CB\u5316\u5171\u4EAB\u6570\u636E\u5E93\u4E0E\u7F51\u7EDC\u5411\u91CF\u5E93\uFF0C\u518D\u521D\u59CB\u5316 AI\u3002
+# ACP \u4EC5\u670D\u52A1\u7AEF\u4F7F\u7528\uFF1Bagents/workspaces \u53EF\u5199\u914D\u7F6E\u6216\u901A\u8FC7 ai.acp \u4FDD\u5B58\u6570\u636E\u5E93\uFF0C\u914D\u7F6E\u540C ID \u4F18\u5148\u4E14\u53EA\u8BFB\u3002
+# \u6A21\u578B\u3001MCP\u3001\u68C0\u7D22\u6E90\u6E05\u5355\u540C\u6837\u5408\u5E76\u4E24\u4EFD\u6765\u6E90\uFF0C\u8BE6\u89C1 .agents/skills/hai-ai/resources.md\u3002
+# embedded \u5728\u672C\u673A\u8FD0\u884C\u539F\u751F\u8FDB\u7A0B\uFF1Bbuiltin-service \u4F7F\u7528 Podman \u4F18\u5148\u7684\u5BB9\u5668\u548C\u6301\u4E45 volume\uFF1B
+# custom-service \u8FDE\u63A5\u539F\u751F HTTP/WS \u670D\u52A1\uFF0C\u4E0D\u6CE8\u5165\u6A21\u578B\u3002\u8BE6\u89C1 .agents/skills/hai-ai/acp.md\u3002
+# acp:
+#   requestTimeout: 30000
+#   promptTimeout: 600000
+#   cancelTimeout: 5000
+#   maxContentBytes: 8388608
+#   maxPendingEvents: 1024
+#   agents:
+#     - id: coder
+#       name: Codex
+#       mode: embedded
+#       adapter: codex
+#       modelIds: [coding]
+#   workspaces:
+#     - id: project
+#       storage:
+#         type: directory
+#         path: /srv/projects/project
+#       repositories:
+#         - id: api
+#           url: https://git.example.com/team/api.git
+#           mainBranch: trunk
 # mcp:
+#   servers:
+#     - id: docs
+#       name: Docs
+#       transport: stdio
+#       command: docs-mcp
+#       environmentRefs:
+#         API_TOKEN: DOCS_API_TOKEN
 #   server:
 #     name: my-app
 #     version: 1.0.0
@@ -7205,12 +8288,38 @@ ${stringify({ model }).trim().split("\n").map((line) => `  ${line}`).join("\n")}
 `;
 }
 function generateEnvExample(features, configs, includeDisabled = false, configContents = {}) {
-  const keys = /* @__PURE__ */ new Set(["core", ...configContents.serv ? ["serv"] : [], ...features.filter((feature) => !["crypto", "api-client", "capacitor", "datapipe"].includes(feature))]);
-  const allKeys = ["core", "serv", "db", "cache", "iam", "storage", "ai", "vecdb", "reach", "payment", "scheduler", "deploy", "audit", "feedback"];
+  const keys = /* @__PURE__ */ new Set([
+    "core",
+    ...["serv", "kit"].filter((key) => configContents[key]),
+    ...features.filter((feature) => ![
+      "crypto",
+      "api-client",
+      "capacitor",
+      "datapipe"
+    ].includes(feature))
+  ]);
+  const allKeys = [
+    "core",
+    "serv",
+    "kit",
+    "crypto",
+    "db",
+    "cache",
+    "iam",
+    "storage",
+    "ai",
+    "vecdb",
+    "reach",
+    "payment",
+    "scheduler",
+    "deploy",
+    "audit",
+    "feedback"
+  ];
   const sections = [`# Environment configuration
 # .env / .env.dev / .env.test / .env.prod are public configuration tracked in Git.
 # .env.local is private to this machine and ignored by Git.
-# Priority: process environment > .env.local > .env.<dev|test|prod> > .env.
+# Priority: process environment > .env.<mode>.local > .env.local > .env.<mode> > .env > YAML.
 # Naming: HAI_<CONFIG>_<PATH>; camelCase stays joined (apiKey -> APIKEY); arrays use zero-based indexes.
 # PUBLIC_ / VITE_ variables are visible in browsers and must never contain secrets.
 # YAML declares references and local fallbacks; constraints are validated by module Schemas.
@@ -7220,16 +8329,22 @@ function generateEnvExample(features, configs, includeDisabled = false, configCo
     if (!keys.has(key) && !includeDisabled)
       continue;
     const variables = configEnvironmentVariables(key, configContents[key] ?? generateConfigFile(key, configs));
-    const section = renderEnvironment(variables);
+    const section = renderEnvironment(variables.filter((variable) => !variable.optional));
+    const declaredOptional = renderEnvironment(variables.filter((variable) => variable.optional));
     const activeNames = new Set(variables.map((variable) => variable.name));
-    const optional = renderEnvironment(moduleEnvironmentVariables(key).filter((variable) => !activeNames.has(variable.name)));
+    const candidates = moduleEnvironmentVariables(key);
+    const primitiveArrays = candidates.filter((variable) => variable.constraint.includes("JSON \u6570\u7EC4") && candidates.some((child) => child.name === `${variable.name}_0` && !child.constraint.includes("JSON \u5BF9\u8C61")));
+    const optional = renderEnvironment(candidates.filter((variable) => !activeNames.has(variable.name) && !primitiveArrays.some((parent) => variable.name.startsWith(`${parent.name}_`)) && !variables.some((child) => child.name.startsWith(`${variable.name}_`) && (variable.constraint.includes("JSON \u5BF9\u8C61") || variable.constraint.includes("JSON \u6570\u7EC4")) && !variable.constraint.includes("false")) && (!(variable.constraint.includes("JSON \u5BF9\u8C61") || variable.constraint.includes("JSON \u6570\u7EC4")) || variable.constraint.includes("false") || !candidates.some((child) => child.name.startsWith(`${variable.name}_`)) || primitiveArrays.includes(variable))));
     const commented = (value) => value.split("\n").map((line) => line && !line.startsWith("#") ? `# ${line}` : line).join("\n");
     sections.push(`# --- ${key} ---
 ${keys.has(key) ? section : commented(section)}
 
-# \u53EF\u9009\u5B57\u6BB5\uFF1A\u5148\u542F\u7528 YAML \u8DEF\u5F84\uFF0C\u6216\u7528\u7236\u7EA7\u5BF9\u8C61\u6574\u4F53\u8986\u76D6\u3002
+# \u53EF\u9009\u5B57\u6BB5\uFF1A\u5148\u5728 YAML \u4E2D\u542F\u7528\u5BF9\u5E94\u914D\u7F6E\u5757\uFF1B\u4E0B\u5217\u53D8\u91CF\u540D\u4E0E\u5B57\u6BB5\u8DEF\u5F84\u4E00\u4E00\u5BF9\u5E94\u3002
+${commented(declaredOptional)}
 ${commented(optional)}`);
   }
+  if (includeDisabled)
+    sections.push("# \u670D\u52A1\u7AEF\u4F20\u8F93\u5BC6\u94A5\u73AF\uFF1A\u542F\u7528 crypto transport \u540E\uFF0C\u901A\u8FC7\u79C1\u6709\u73AF\u5883\u6CE8\u5165\u7248\u672C\u5316 JSON\uFF1B\u4E0D\u5F97\u4E0B\u53D1\u5230\u6D4F\u89C8\u5668\u3002\n# HAI_CRYPTO_TRANSPORT_SERVERKEYRING=");
   return `${sections.join("\n\n")}
 `;
 }
@@ -7248,7 +8363,14 @@ function generateProductionEnvironment(features, configs) {
   if (enabled.has("db")) {
     const mysql = configs?.db?.type === "mysql";
     const database = configs?.db?.type !== "sqlite" && configs?.db?.database ? configs.db.database : "hai";
-    sections.push("", "# \u5FC5\u987B\u79C1\u6709\u6CE8\u5165 HAI_DB_PASSWORD\uFF1B\u5916\u90E8\u6570\u636E\u5E93\u53EF\u8986\u76D6\u4E0B\u5217\u8FDE\u63A5\u5B57\u6BB5\u3002", `HAI_DB_TYPE=${mysql ? "mysql" : "postgresql"}`, "HAI_DB_HOST=db", `HAI_DB_PORT=${mysql ? 3306 : 5432}`, renderEnvironment([{ name: "HAI_DB_DATABASE", path: "db.database", value: database, constraint: "\u751F\u4EA7\u6570\u636E\u5E93\u540D" }]), `HAI_DB_USER=${mysql ? "root" : "postgres"}`);
+    sections.push("", "# \u5FC5\u987B\u79C1\u6709\u6CE8\u5165 HAI_DB_PASSWORD\uFF1B\u5916\u90E8\u6570\u636E\u5E93\u53EF\u8986\u76D6\u4E0B\u5217\u8FDE\u63A5\u5B57\u6BB5\u3002", `HAI_DB_TYPE=${mysql ? "mysql" : "postgresql"}`, "HAI_DB_HOST=db", `HAI_DB_PORT=${mysql ? 3306 : 5432}`, renderEnvironment([
+      {
+        name: "HAI_DB_DATABASE",
+        path: "db.database",
+        value: database,
+        constraint: "\u751F\u4EA7\u6570\u636E\u5E93\u540D"
+      }
+    ]), `HAI_DB_USER=${mysql ? "root" : "postgres"}`);
   }
   if (enabled.has("cache"))
     sections.push("", "# \u5FC5\u987B\u79C1\u6709\u6CE8\u5165 HAI_CACHE_PASSWORD\u3002", "HAI_CACHE_TYPE=redis", "HAI_CACHE_HOST=cache", "HAI_CACHE_PORT=6379");
@@ -7260,7 +8382,7 @@ function generateProductionEnvironment(features, configs) {
   if (enabled.has("ai"))
     sections.push("", "# \u5FC5\u987B\u79C1\u6709\u6CE8\u5165 HAI_AI_LLM_APIKEY \u53CA\u6240\u9009\u6A21\u578B\u7684\u5176\u5B83\u51ED\u636E\uFF1BAI \u81EA\u52A8\u590D\u7528\u5DF2\u521D\u59CB\u5316\u7684\u5171\u4EAB db/vecdb\u3002");
   if (enabled.has("reach")) {
-    sections.push("", "# \u5FC5\u987B\u79C1\u6709\u6CE8\u5165 HAI_REACH_PROVIDERS \u7684\u771F\u5B9E SMTP/SMS/API JSON\uFF08\u5305\u542B\u51ED\u636E\uFF09\u3002", "# \u7A7A\u6570\u7EC4\u6709\u610F\u8BA9\u914D\u7F6E\u6821\u9A8C\u62D2\u7EDD\u542F\u52A8\uFF0C\u751F\u4EA7\u4E0D\u5F97\u6CBF\u7528\u5F00\u53D1 console Provider\u3002", "HAI_REACH_PROVIDERS='[]'");
+    sections.push("", "# \u5728 .env.prod.local \u6216\u90E8\u7F72\u8FDB\u7A0B\u4E2D\u7528 HAI_REACH_PROVIDERS \u6CE8\u5165\u5B8C\u6574\u7684\u751F\u4EA7\u901A\u77E5 Provider JSON\u3002", "# \u7A7A\u6570\u7EC4\u6709\u610F\u8BA9\u5E94\u7528\u62D2\u7EDD\u542F\u52A8\u3002\u53EA\u6709\u5B8C\u6574\u5217\u8868\u4E2D\u5DF2\u6709\u7684\u9879\u624D\u80FD\u4F7F\u7528\u7D22\u5F15\u73AF\u5883\u53D8\u91CF\u8986\u76D6\u3002", "HAI_REACH_PROVIDERS='[]'");
   }
   return `${sections.join("\n")}
 `;
@@ -7276,6 +8398,16 @@ provider:
   expose:
     hostPort: 18080
     containerPort: 3000
+    # HTTPS \u4E5F\u53EF\u5728 pnpm run deploy \u7684\u53EF\u9009\u8BC1\u4E66\u73AF\u8282\u4E2D\u914D\u7F6E\u3002
+    # https:
+    #   type: files
+    #   domain: app.example.com
+    #   port: 443
+    #   redirectHttp: true
+    #   certificateFile: .hai/certificates/fullchain.pem
+    #   privateKeyFile: .hai/certificates/privkey.pem
+    # Let's Encrypt\uFF1Atype \u6539\u4E3A letsencrypt\uFF0CHTTP hostPort \u8BBE\u4E3A 80\uFF1B
+    # \u4EE5 email \u548C acceptTerms: true \u66FF\u4EE3\u4E24\u4E2A\u6587\u4EF6\u8DEF\u5F84\u3002
 
 container:
   s3Engine: \${HAI_DEPLOY_CONTAINER_S3ENGINE:rustfs} # rustfs | minio
@@ -7348,7 +8480,10 @@ providers:
   - name: console_dev
     type: console
 
-  # SMTP \u90AE\u4EF6\uFF08\u6309\u9700\u5F00\u542F\uFF09
+# \u751F\u4EA7\u793A\u4F8B\uFF1A\u7528\u4E0B\u9762 providers \u6574\u6BB5\u66FF\u6362\u4E0A\u65B9\u63A7\u5236\u53F0\u5217\u8868\uFF1B\u4FDD\u7559\u9700\u8981\u7684\u9879\u3002
+# \u6570\u7EC4\u7D22\u5F15\u4ECE 0 \u5F00\u59CB\uFF0C\u5220\u6389\u67D0\u9879\u540E\u540C\u6B65\u4FEE\u6539\u5176\u4F59\u73AF\u5883\u53D8\u91CF\u4E2D\u7684\u7D22\u5F15\u3002
+# providers:
+  # SMTP \u90AE\u4EF6
   # - name: email
   #   type: smtp
   #   host: \${HAI_REACH_PROVIDERS_0_HOST:smtp.example.com}
@@ -7361,10 +8496,15 @@ providers:
   # \u963F\u91CC\u4E91\u77ED\u4FE1\uFF08\u6309\u9700\u5F00\u542F\uFF09
   # - name: sms
   #   type: aliyun-sms
-  #   accessKeyId: \${HAI_REACH_PROVIDERS_0_ACCESSKEYID}
-  #   accessKeySecret: \${HAI_REACH_PROVIDERS_0_ACCESSKEYSECRET}
+  #   accessKeyId: \${HAI_REACH_PROVIDERS_1_ACCESSKEYID}
+  #   accessKeySecret: \${HAI_REACH_PROVIDERS_1_ACCESSKEYSECRET}
   #   signName: MyApp
   #   endpoint: dysmsapi.aliyuncs.com
+  #   gateway: # \u53EF\u9009\uFF1B\u914D\u7F6E\u540E\u5411\u5B8C\u6574 URL \u53D1\u9001 POST
+  #     url: https://sms-gateway.example.com/dx
+  #     headers:
+  #       X-Gateway-Client: delivery
+  #     body: {}
 
   # \u901A\u7528 API\uFF08\u6309\u9700\u5F00\u542F\uFF1B\u53EF\u5BF9\u63A5\u5E94\u7528\u81EA\u6709\u6295\u9012\u670D\u52A1\uFF09
   # - name: custom
@@ -7372,7 +8512,7 @@ providers:
   #   url: https://notify.example.com/send
   #   method: POST # POST | PUT
   #   headers:
-  #     Authorization: 'Bearer \${HAI_REACH_PROVIDERS_0_HEADERS_AUTHORIZATION}'
+  #     Authorization: 'Bearer \${HAI_REACH_PROVIDERS_2_HEADERS_AUTHORIZATION}'
   #   timeout: 10000
   #   redirect: error # \u666E\u901A\u6D88\u606F\u624D\u53EF\u663E\u5F0F follow\uFF1B\u654F\u611F\u53D1\u9001\u59CB\u7EC8\u62D2\u7EDD\u8DF3\u8F6C\u3002
   #   requireHttps: true # \u5F3A\u5236 HTTPS\uFF1B\u7701\u7565\u65F6\u751F\u4EA7\u654F\u611F\u53D1\u9001\u4ECD\u8981\u6C42 HTTPS\u3002
@@ -7403,7 +8543,8 @@ templates: []
 #   start: "22:00"
 #   end: "08:00"
 
-# \u5EF6\u8FDF\u961F\u5217\u91CD\u8BD5\u7B56\u7565\uFF08\u5165\u961F\u65F6\u6301\u4E45\u4FDD\u5B58\uFF1B\u9886\u53D6/\u5D29\u6E83\u6062\u590D\u8BA1\u6570\uFF0C\u8D85\u9650 dead\uFF1Bunknown \u7981\u6B62\u81EA\u52A8\u91CD\u53D1\uFF09
+# \u53D1\u9001\u5931\u8D25\u65F6\u6700\u591A\u5C1D\u8BD5 5 \u6B21\uFF1B\u7B49\u5F85\u65F6\u95F4\u4ECE 1 \u5206\u949F\u9010\u6B21\u52A0\u500D\uFF0C\u6700\u957F 1 \u5C0F\u65F6\u3002
+# \u65E0\u6CD5\u786E\u8BA4\u5BF9\u65B9\u662F\u5426\u6536\u5230\u65F6\u505C\u6B62\u81EA\u52A8\u91CD\u53D1\uFF0C\u5148\u6838\u5BF9\u6295\u9012\u7ED3\u679C\u3002\u4FEE\u6539\u7B56\u7565\u53EA\u5F71\u54CD\u4EE5\u540E\u8FDB\u5165\u961F\u5217\u7684\u6D88\u606F\u3002
 queue:
   maxAttempts: \${HAI_REACH_QUEUE_MAXATTEMPTS:5}
   retryDelayMs: \${HAI_REACH_QUEUE_RETRYDELAYMS:60000}
@@ -7436,7 +8577,7 @@ function generateAuditConfig() {
 # \u5BA1\u8BA1\u65E5\u5FD7\u914D\u7F6E (@h-ai/audit)
 # =============================================================================
 
-# \u7528\u6237\u8868\u540D\uFF08\u7528\u4E8E JOIN \u67E5\u8BE2\uFF09
+# \u5BA1\u8BA1\u5217\u8868\u67E5\u8BE2\u64CD\u4F5C\u8005\u540D\u79F0\u65F6\u4F7F\u7528\u7684\u7528\u6237\u8868\u3002\u4F7F\u7528\u6846\u67B6 IAM \u65F6\u4FDD\u6301\u4E0B\u9762\u4E09\u4E2A\u9ED8\u8BA4\u503C\u3002
 userTable: hai_iam_users
 
 # \u7528\u6237\u8868\u4E3B\u952E\u5217\u540D
@@ -7445,22 +8586,27 @@ userIdColumn: id
 # \u7528\u6237\u540D\u5217\u540D
 userNameColumn: username
 
-# \u6846\u67B6\u81EA\u52A8\u4E8B\u4EF6\u91C7\u96C6\uFF1B\u663E\u5F0F\u4E1A\u52A1 audit.log \u4E0D\u53D7\u6B64\u5F00\u5173\u5F71\u54CD
+# \u81EA\u52A8\u8BB0\u5F55\u5DF2\u63A5\u5165\u6846\u67B6\u7684\u91CD\u8981\u64CD\u4F5C\uFF1BincludeReads=true \u65F6\u4E5F\u8BB0\u5F55\u6210\u529F\u67E5\u8BE2\uFF0C\u4F1A\u589E\u52A0\u8BB0\u5F55\u91CF\u3002
+# enabled=false \u53EA\u5173\u95ED\u81EA\u52A8\u91C7\u96C6\uFF0C\u4E1A\u52A1\u4E3B\u52A8\u8C03\u7528 audit.log() \u4ECD\u53EF\u5199\u5165\u3002
 capture:
   enabled: true
   includeReads: false
 
-# \u5E94\u7528\u793A\u4F8B\u4FDD\u62A4\u8FD1\u671F\u65E5\u5FD7\uFF1B\u6846\u67B6\u672A\u914D\u7F6E\u65F6\u4E0D\u5F3A\u5236\u542F\u7528\u30020\u5929\u6E05\u7406\u4E0D\u80FD\u7ED5\u8FC7\u5DF2\u542F\u7528\u4FDD\u62A4\u3002
+# enabled=true \u540E\uFF0C\u6700\u8FD1 minDays \u5929\u7684\u8BB0\u5F55\u4E0D\u80FD\u4FEE\u6539\u6216\u5220\u9664\uFF1B\u8D85\u8FC7\u4FDD\u62A4\u671F\u4E5F\u4E0D\u4F1A\u81EA\u52A8\u5220\u9664\u3002
+# \u4FDD\u62A4\u8BBE\u7F6E\u4F1A\u5B58\u5165\u6570\u636E\u5E93\uFF0C\u5220\u6389\u8FD9\u4E00\u6BB5\u4F1A\u6CBF\u7528\u5DF2\u6709\u8BBE\u7F6E\uFF1B\u660E\u786E enabled=false \u624D\u5173\u95ED\u4FDD\u62A4\u3002
 retention:
   enabled: false
   minDays: 90
 
-# \u51ED\u636E\u59CB\u7EC8\u8131\u654F\uFF1B\u4EC5\u4E1A\u52A1\u9690\u79C1\u53EF\u5173\u95ED\uFF0C\u53EF\u8865\u5145\u9879\u76EE\u5B57\u6BB5\u540D
+# fields \u586B\u989D\u5916\u7684\u9690\u79C1\u5B57\u6BB5\u540D\uFF0C\u4F8B\u5982 [customerPhone, idCard]\uFF0C\u4E0D\u533A\u5206\u5927\u5C0F\u5199\u3002
+# \u5BC6\u7801\u3001\u4EE4\u724C\u7B49\u51ED\u636E\u59CB\u7EC8\u906E\u76D6\uFF1Benabled \u53EA\u63A7\u5236\u8FD9\u91CC\u8865\u5145\u7684\u4E1A\u52A1\u5B57\u6BB5\uFF0C\u4E0D\u6062\u590D\u5386\u53F2\u539F\u6587\u3002
 privacy:
   enabled: true
   fields: []
 
-# \u79C1\u6709 JSONL \u5F52\u6863\uFF1B\u751F\u4EA7\u4F7F\u7528\u79C1\u6709\u5B58\u50A8\uFF0C\u5B9A\u65F6\u6267\u884C\u7531\u5E94\u7528\u73B0\u6709 Scheduler \u88C5\u914D\u3002
+# \u5C06\u5BA1\u8BA1\u53E6\u5B58\u4E3A\u79C1\u6709 JSONL \u5907\u4EFD\uFF0C\u542F\u7528\u524D\u5148\u521D\u59CB\u5316\u79C1\u6709 Storage\u3002
+# batchSize \u662F\u6BCF\u6279\u8BFB\u53D6\u6761\u6570\uFF1BmaxRecordBytes \u662F\u5355\u6761\u4E0A\u9650\uFF08\u5B57\u8282\uFF09\uFF0C\u8D85\u9650\u62A5\u9519\uFF0C\u4E0D\u622A\u65AD\u8BB0\u5F55\u3002
+# schedule.enabled=true \u6309 cron \u81EA\u52A8\u5907\u4EFD\uFF1B\u4F8B\u5982 UTC 02:00 \u5BF9\u5E94\u5317\u4EAC\u65F6\u95F4 10:00\u3002
 backup:
   enabled: false
   batchSize: 200
@@ -7470,18 +8616,21 @@ backup:
     cron: '0 2 * * *'
     timezone: UTC
 
-# \u5206\u7EA7\u9608\u503C\u544A\u8B66\uFF1A\u542F\u7528\u524D\u914D\u7F6E\u89C4\u5219\u53CA Reach \u901A\u77E5\u76EE\u6807\u3002\u53EA\u7EDF\u8BA1\u5DF2\u63D0\u4EA4\u4E8B\u4EF6\u3002
+# \u6309\u4E00\u6BB5\u65F6\u95F4\u5185\u7684\u4E8B\u4EF6\u6570\u91CF\u901A\u77E5\u7BA1\u7406\u5458\uFF1B\u542F\u7528\u524D\u914D\u7F6E Reach\uFF0C\u5E76\u5C06 provider \u586B\u4E3A\u5DF2\u6CE8\u518C\u7684\u901A\u9053\u540D\u79F0\u3002
+# \u4F8B\u5B50\uFF1A5 \u5206\u949F\u5185\u767B\u5F55\u5931\u8D25/\u62D2\u7EDD\u8FBE\u5230 10 \u6B21\u65F6\u901A\u77E5\u5B89\u5168\u56E2\u961F\uFF1B\u89C4\u5219\u548C\u5B9A\u65F6\u68C0\u67E5\u9700\u8981\u5206\u522B\u542F\u7528\u3002
 alerts:
   enabled: false
   maxNotificationsPerCheck: 100
   rules: []
-  # - id: login-failures
-  #   actions: [auth.login]
-  #   outcomes: [failure, denied]
-  #   threshold: 10
-  #   windowSeconds: 300
-  #   severity: warning
-  #   targets: [{ id: security-team, provider: email, to: security@example.com }]
+  # \u7528\u4E0B\u9762\u7684 rules \u5217\u8868\u66FF\u6362\u7A7A\u6570\u7EC4\u3002
+  # rules:
+  #   - id: login-failures
+  #     actions: [auth.login]
+  #     outcomes: [failure, denied]
+  #     threshold: 10
+  #     windowSeconds: 300
+  #     severity: warning
+  #     targets: [{ id: security-team, provider: email, to: security@example.com }]
   schedule:
     enabled: false
     cron: '* * * * *'
@@ -7552,6 +8701,6 @@ envAllowlist:
 `;
 }
 
-export { generateConfigFile, generateEnvExample, generateProductionEnvironment, moduleEnvironmentVariables, parameterizeConfig, renderEnvironment, runtimeEnvironmentVariables };
-//# sourceMappingURL=chunk-EF7WOFWZ.js.map
-//# sourceMappingURL=chunk-EF7WOFWZ.js.map
+export { documentConfig, generateConfigFile, generateEnvExample, generateProductionEnvironment, moduleEnvironmentVariables, parameterizeConfig, renderEnvironment, runtimeEnvironmentVariables };
+//# sourceMappingURL=chunk-L53P43B2.js.map
+//# sourceMappingURL=chunk-L53P43B2.js.map