@h-ai/cli 1.0.0-beta.2 → 1.0.0-beta.3

package/dist/{chunk-EF7WOFWZ.js → chunk-YVNNMC4H.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { parseDocument, isScalar, stringify, isMap, isSeq, Scalar } from 'yaml';
+import { parseDocument, LineCounter, isScalar, stringify, isMap, isSeq, Scalar } from 'yaml';
 
 // src/commands/cli-config-catalog.json
 var cli_config_catalog_default = [
@@ -859,19 +859,11 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
   },
-  {
-    name: "HAI_AI_LLM_API",
-    module: "ai",
-    path: "ai.llm.api",
-    description: "\u5168\u5C40 API \u534F\u8BAE\uFF08\u5404\u6A21\u578B fallback\uFF0C\u9ED8\u8BA4 `'chat'`\uFF1B\u53EF\u9009 `chat` / `responses` / `anthropic`\uFF09",
-    value: "chat",
-    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Achat | responses | anthropic"
-  },
   {
     name: "HAI_AI_LLM_APIKEY",
     module: "ai",
     path: "ai.llm.apiKey",
-    description: "\u5168\u5C40 API Key\uFF08\u5404\u6A21\u578B fallback\uFF1B\u672A\u63D0\u4F9B\u65F6\u56DE\u9000\u5230 `process.env.HAI_AI_LLM_APIKEY` \u6216 `process.env.OPENAI_API_KEY`\uFF09",
+    description: "\u9ED8\u8BA4\u670D\u52A1\u5BC6\u94A5\uFF1B\u6A21\u578B\u9879\u53EF\u5355\u72EC\u8986\u76D6\u3002\u672A\u586B\u5199\u65F6\u8BFB\u53D6 HAI_AI_LLM_APIKEY \u6216\u5BF9\u5E94\u4F9B\u5E94\u5546\u5BC6\u94A5\u53D8\u91CF\uFF0C\u771F\u5B9E\u503C\u53EA\u653E\u670D\u52A1\u7AEF\u3002",
     value: "",
     constraint: "string,null"
   },
@@ -879,7 +871,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_LLM_BASEURL",
     module: "ai",
     path: "ai.llm.baseUrl",
-    description: "\u5168\u5C40 API \u57FA\u7840 URL\uFF08\u5404\u6A21\u578B fallback\uFF1B\u672A\u63D0\u4F9B\u65F6\u56DE\u9000\u5230 `process.env.HAI_AI_LLM_BASEURL` \u6216 `process.env.OPENAI_BASE_URL`\uFF09",
+    description: "\u9ED8\u8BA4\u6A21\u578B\u670D\u52A1\u5730\u5740\uFF1B\u4F7F\u7528\u4EE3\u7406\u65F6\u586B\u5199\uFF0C\u6A21\u578B\u9879\u53EF\u8986\u76D6\u3002\u672A\u586B\u5199\u65F6\u6309\u534F\u8BAE\u8BFB\u53D6\u73AF\u5883\u5730\u5740\u6216\u4F7F\u7528\u4F9B\u5E94\u5546\u9ED8\u8BA4\u5730\u5740\u3002",
     value: "",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F uri"
   },
@@ -887,7 +879,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_LLM_MAXTOKENS",
     module: "ai",
     path: "ai.llm.maxTokens",
-    description: "\u5168\u5C40\u6700\u5927 Token \u6570\uFF08\u5404\u6A21\u578B fallback\uFF0C\u9ED8\u8BA4 `4096`\uFF09",
+    description: "\u5355\u6B21\u56DE\u7B54\u6700\u591A\u751F\u6210\u591A\u5C11 Token\uFF0C\u9ED8\u8BA4 4096\uFF1B\u6A21\u578B\u9879\u53EF\u8986\u76D6\uFF0C\u9700\u7B26\u5408\u4F9B\u5E94\u5546\u9650\u5236\u3002",
     value: "4096",
     constraint: "\u6570\u5B57\uFF1B> 0"
   },
@@ -915,14 +907,6 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
   },
-  {
-    name: "HAI_AI_LLM_MODELS_0_API",
-    module: "ai",
-    path: "ai.llm.models.0.api",
-    description: "API \u534F\u8BAE\uFF08\u53EF\u9009\uFF0C\u672A\u6307\u5B9A\u65F6\u56DE\u9000\u5168\u5C40 `api`\uFF0C\u518D\u56DE\u9000 `chat`\uFF1B\u51B3\u5B9A\u8D70 Chat Completions / Responses / Anthropic\uFF09",
-    value: "chat",
-    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Achat | responses | anthropic"
-  },
   {
     name: "HAI_AI_LLM_MODELS_0_APIKEY",
     module: "ai",
@@ -963,6 +947,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_AI_LLM_MODELS_0_PROTOCOL",
+    module: "ai",
+    path: "ai.llm.models.0.protocol",
+    description: "API \u534F\u8BAE\uFF08\u53EF\u9009\uFF0C\u672A\u6307\u5B9A\u65F6\u56DE\u9000\u5168\u5C40 `protocol`\uFF0C\u518D\u56DE\u9000 `chat`\uFF1B\u51B3\u5B9A\u8D70 Chat Completions / Responses / Anthropic\uFF09",
+    value: "chat",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Achat | responses | anthropic"
+  },
   {
     name: "HAI_AI_LLM_MODELS_0_TEMPERATURE",
     module: "ai",
@@ -979,6 +971,14 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u6570\u5B57\uFF1B> 0"
   },
+  {
+    name: "HAI_AI_LLM_PROTOCOL",
+    module: "ai",
+    path: "ai.llm.protocol",
+    description: "\u9ED8\u8BA4\u8BF7\u6C42\u683C\u5F0F\uFF1Achat \u4E3A Chat Completions\uFF0Cresponses \u4E3A OpenAI Responses\uFF0Canthropic \u4E3A Anthropic Messages\uFF1B\u6A21\u578B\u9879\u53EF\u8986\u76D6\u3002",
+    value: "chat",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Achat | responses | anthropic"
+  },
   {
     name: "HAI_AI_LLM_SCENARIOS",
     module: "ai",
@@ -1079,7 +1079,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_LLM_TEMPERATURE",
     module: "ai",
     path: "ai.llm.temperature",
-    description: "\u5168\u5C40\u91C7\u6837\u6E29\u5EA6\uFF08\u5404\u6A21\u578B fallback\uFF0C\u8303\u56F4 `[0, 2]`\uFF0C\u9ED8\u8BA4 `0.7`\uFF09",
+    description: "\u56DE\u7B54\u7684\u968F\u673A\u7A0B\u5EA6\uFF0C0\u20132\uFF0C\u9ED8\u8BA4 0.7\uFF1B\u8F83\u4F4E\u901A\u5E38\u66F4\u7A33\u5B9A\uFF0C\u6A21\u578B\u9879\u53EF\u8986\u76D6\uFF0C\u90E8\u5206\u6A21\u578B\u4E0D\u652F\u6301\u81EA\u5B9A\u4E49\u3002",
     value: "0.7",
     constraint: "\u6570\u5B57\uFF1B>= 0\uFF1B<= 2"
   },
@@ -1095,7 +1095,7 @@ var cli_config_catalog_default = [
     name: "HAI_AI_LLM_TIMEOUT",
     module: "ai",
     path: "ai.llm.timeout",
-    description: "\u5168\u5C40\u8BF7\u6C42\u8D85\u65F6\u65F6\u95F4\uFF08\u5404\u6A21\u578B fallback\uFF0C\u6BEB\u79D2\uFF0C\u9ED8\u8BA4 `60000`\uFF09",
+    description: "\u4E00\u6B21\u6A21\u578B\u8BF7\u6C42\u6700\u591A\u7B49\u5F85\u591A\u5C11\u6BEB\u79D2\uFF0C\u9ED8\u8BA4 60000\uFF1B\u6A21\u578B\u9879\u53EF\u8986\u76D6\u3002",
     value: "60000",
     constraint: "\u6570\u5B57\uFF1B> 0"
   },
@@ -2031,7 +2031,7 @@ var cli_config_catalog_default = [
     name: "HAI_CORE_LOGGING_REDACT",
     module: "core",
     path: "core.logging.redact",
-    description: "\u8981\u8131\u654F\u7684\u5B57\u6BB5\u8DEF\u5F84\u5217\u8868\uFF08\u5982 ['password', 'token']\uFF0C\u9ED8\u8BA4 []\uFF09",
+    description: "\u989D\u5916\u4E1A\u52A1\u9690\u79C1\u7684\u65E5\u5FD7\u5B57\u6BB5\u8DEF\u5F84\uFF0C\u5982 customer.email\u3001recipients[*].phone\uFF1B* \u5339\u914D\u4E00\u5C42\uFF0C\u533A\u5206\u5927\u5C0F\u5199\uFF0C\u9ED8\u8BA4 []\u3002\u5DF2\u77E5\u5BC6\u7801/\u4EE4\u724C\u59CB\u7EC8\u8131\u654F\u3002",
     value: "[]",
     constraint: "JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55"
   },
@@ -2039,7 +2039,7 @@ var cli_config_catalog_default = [
     name: "HAI_CORE_LOGGING_REDACT_0",
     module: "core",
     path: "core.logging.redact.0",
-    description: "\u8981\u8131\u654F\u7684\u5B57\u6BB5\u8DEF\u5F84\u5217\u8868\uFF08\u5982 ['password', 'token']\uFF0C\u9ED8\u8BA4 []\uFF09\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
+    description: "\u989D\u5916\u4E1A\u52A1\u9690\u79C1\u7684\u65E5\u5FD7\u5B57\u6BB5\u8DEF\u5F84\uFF0C\u5982 customer.email\u3001recipients[*].phone\uFF1B* \u5339\u914D\u4E00\u5C42\uFF0C\u533A\u5206\u5927\u5C0F\u5199\uFF0C\u9ED8\u8BA4 []\u3002\u5DF2\u77E5\u5BC6\u7801/\u4EE4\u724C\u59CB\u7EC8\u8131\u654F\u3002\uFF1B\u6B64\u53D8\u91CF\u6574\u4F53\u66FF\u6362\u5355\u4E2A\u6570\u7EC4\u9879",
     value: "",
     constraint: "\u5B57\u7B26\u4E32"
   },
@@ -2419,6 +2419,78 @@ var cli_config_catalog_default = [
     value: "18080",
     constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 65535"
   },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS",
+    module: "deploy",
+    path: "deploy.provider.expose.https",
+    description: "\u53EF\u9009 HTTPS \u5165\u53E3\uFF1Bfiles \u4F7F\u7528\u5DF2\u6709\u8BC1\u4E66\uFF0Cletsencrypt \u4F7F\u7528\u5B98\u65B9 Certbot \u7533\u8BF7\u7EED\u671F\uFF0C\u7701\u7565\u4FDD\u6301 HTTP",
+    value: "",
+    constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_ACCEPTTERMS",
+    module: "deploy",
+    path: "deploy.provider.expose.https.acceptTerms",
+    description: "\u660E\u786E\u540C\u610F Let\u2019s Encrypt \u670D\u52A1\u6761\u6B3E\u540E\u624D\u53EF\u8BBE\u7F6E\u4E3A true",
+    value: "true",
+    constraint: "true\uFF1B\u53D6\u503C\uFF1Atrue"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_CERTIFICATEFILE",
+    module: "deploy",
+    path: "deploy.provider.expose.https.certificateFile",
+    description: "PEM \u5B8C\u6574\u8BC1\u4E66\u94FE\u8DEF\u5F84\uFF0C\u76F8\u5BF9\u5DE5\u7A0B\u6839\u6216\u7EDD\u5BF9\u8DEF\u5F84\uFF1B\u6253\u5305\u65F6\u590D\u5236\u5230\u79C1\u6709\u53D1\u5E03\u76EE\u5F55",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_DOMAIN",
+    module: "deploy",
+    path: "deploy.provider.expose.https.domain",
+    description: "HTTPS \u516C\u5F00\u57DF\u540D\uFF1B\u8BC1\u4E66\u5FC5\u987B\u5339\u914D\u8BE5\u57DF\u540D",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5927\u5B57\u7B26\u6570 253\uFF1B\u6B63\u5219 ^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?$"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_EMAIL",
+    module: "deploy",
+    path: "deploy.provider.expose.https.email",
+    description: "Let\u2019s Encrypt \u8D26\u53F7\u8054\u7CFB\u90AE\u7BB1",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u683C\u5F0F email\uFF1B\u6B63\u5219 ^(?:[A-Za-z0-9_'+\\-]+\\.)*[A-Za-z0-9_'+\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_PORT",
+    module: "deploy",
+    path: "deploy.provider.expose.https.port",
+    description: "HTTPS \u5BBF\u4E3B\u7AEF\u53E3\uFF0C\u9ED8\u8BA4 443\uFF0C\u987B\u4E0E HTTP \u7AEF\u53E3\u4E0D\u540C",
+    value: "443",
+    constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 65535"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_PRIVATEKEYFILE",
+    module: "deploy",
+    path: "deploy.provider.expose.https.privateKeyFile",
+    description: "\u672A\u52A0\u5BC6 PEM \u79C1\u94A5\u8DEF\u5F84\uFF0C\u76F8\u5BF9\u5DE5\u7A0B\u6839\u6216\u7EDD\u5BF9\u8DEF\u5F84\uFF1B\u5FC5\u987B\u4E0E\u8BC1\u4E66\u5339\u914D",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_REDIRECTHTTP",
+    module: "deploy",
+    path: "deploy.provider.expose.https.redirectHttp",
+    description: "\u666E\u901A HTTP \u8BF7\u6C42\u662F\u5426\u4EE5 308 \u8DF3\u8F6C\u81F3 HTTPS\uFF0C\u5065\u5EB7\u68C0\u67E5\u548C ACME \u6311\u6218\u9664\u5916",
+    value: "true",
+    constraint: "true | false"
+  },
+  {
+    name: "HAI_DEPLOY_PROVIDER_EXPOSE_HTTPS_TYPE",
+    module: "deploy",
+    path: "deploy.provider.expose.https.type",
+    description: "\u5E94\u7528\u90E8\u7F72\uFF1A\u5E73\u53F0/\u66B4\u9732\u65B9\u5F0F\uFF0C\u6309\u6240\u5728\u8282\u70B9\u7684\u679A\u4E3E\u9009\u62E9",
+    value: "files",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Afiles | letsencrypt"
+  },
   {
     name: "HAI_DEPLOY_PROVIDER_EXPOSE_TYPE",
     module: "deploy",
@@ -3977,7 +4049,7 @@ var cli_config_catalog_default = [
     path: "kit.access",
     description: "\u6BCF\u6B21\u8BF7\u6C42\u7684\u8DEF\u5F84/IP/\u65F6\u95F4\u7B56\u7565\uFF1Bfalse \u5173\u95ED\uFF0C\u5185\u8054\u89C4\u5219\u4E0E\u72EC\u7ACB YAML \u6587\u4EF6\u5F15\u7528\u4E0D\u80FD\u6DF7\u7528",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "true | false\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_KIT_ACCESS_FILE",
@@ -4273,7 +4345,7 @@ var cli_config_catalog_default = [
     path: "kit.transport",
     description: "\u4F20\u8F93\u52A0\u5BC6\u5F00\u5173\u6216\u5BC6\u94A5\u534F\u5546\u914D\u7F6E",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_KIT_TRANSPORT_EXCLUDEPATHS",
@@ -4707,14 +4779,6 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9"
   },
-  {
-    name: "HAI_REACH_PROVIDERS_0_HEADERS_AUTHORIZATION",
-    module: "reach",
-    path: "HAI_REACH_PROVIDERS_0_HEADERS_AUTHORIZATION",
-    description: "API \u901A\u77E5 Provider \u7684\u5B8C\u6574 Authorization \u8BF7\u6C42\u5934",
-    value: "",
-    constraint: "\u654F\u611F\u5B57\u7B26\u4E32\uFF0C\u5305\u542B\u8BA4\u8BC1\u65B9\u6848\u53CA\u51ED\u636E\uFF0C\u4F8B\u5982 Bearer <token>"
-  },
   {
     name: "HAI_REACH_PROVIDERS_0_HOST",
     module: "reach",
@@ -4827,6 +4891,22 @@ var cli_config_catalog_default = [
     value: "",
     constraint: "\u5B57\u7B26\u4E32"
   },
+  {
+    name: "HAI_REACH_PROVIDERS_1_ACCESSKEYID",
+    module: "reach",
+    path: "HAI_REACH_PROVIDERS_1_ACCESSKEYID",
+    description: "\u963F\u91CC\u4E91 AccessKey ID",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_1_ACCESSKEYSECRET",
+    module: "reach",
+    path: "HAI_REACH_PROVIDERS_1_ACCESSKEYSECRET",
+    description: "\u963F\u91CC\u4E91 AccessKey Secret",
+    value: "",
+    constraint: "\u5B57\u7B26\u4E32\uFF1B\u6700\u5C0F\u5B57\u7B26\u6570 1"
+  },
   {
     name: "HAI_REACH_PROVIDERS_1_TYPE",
     module: "reach",
@@ -4835,6 +4915,22 @@ var cli_config_catalog_default = [
     value: "console",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aconsole | smtp | aliyun-sms | api"
   },
+  {
+    name: "HAI_REACH_PROVIDERS_2_HEADERS_AUTHORIZATION",
+    module: "reach",
+    path: "HAI_REACH_PROVIDERS_2_HEADERS_AUTHORIZATION",
+    description: "\u51ED\u636E\u8F93\u5165\uFF1B\u4F7F\u7528\u4F4D\u7F6E packages/cli/src/commands/cli-config-templates.ts",
+    value: "",
+    constraint: "\u654F\u611F\u5B57\u7B26\u4E32\uFF1B\u542F\u7528\u76F8\u5E94\u529F\u80FD\u65F6\u5FC5\u586B\uFF0C\u4E0D\u5F97\u63D0\u4EA4\u771F\u5B9E\u503C"
+  },
+  {
+    name: "HAI_REACH_PROVIDERS_2_IDEMPOTENT",
+    module: "reach",
+    path: "HAI_REACH_PROVIDERS_2_IDEMPOTENT",
+    description: "\u63A5\u6536\u7AEF\u6309 Idempotency-Key \u539F\u5B50\u6301\u4E45\u53BB\u91CD\uFF0C\u4E14\u8986\u76D6\u6240\u6709\u91CD\u8BD5\u4E0E\u65E7\u8282\u70B9\u8FDF\u5230\u8BF7\u6C42\u65F6\u624D\u542F\u7528\uFF1B\u9ED8\u8BA4 false\u3002",
+    value: "false",
+    constraint: "true | false"
+  },
   {
     name: "HAI_REACH_QUEUE",
     module: "reach",
@@ -4847,7 +4943,7 @@ var cli_config_catalog_default = [
     name: "HAI_REACH_QUEUE_MAXATTEMPTS",
     module: "reach",
     path: "reach.queue.maxAttempts",
-    description: "\u81EA\u52A8\u9886\u53D6\u6B21\u6570\u4E0A\u9650\uFF08\u542B\u9996\u6B21\u53CA\u5D29\u6E83\u6062\u590D\uFF0C\u9ED8\u8BA4 5\uFF0C\u8303\u56F4 1\u2013100\uFF09\u3002",
+    description: "\u6BCF\u6761\u961F\u5217\u6D88\u606F\u6700\u591A\u5904\u7406\u591A\u5C11\u6B21\uFF0C\u5305\u542B\u9996\u6B21\u53D1\u9001\u3001\u5931\u8D25\u91CD\u8BD5\u548C\u5F02\u5E38\u9000\u51FA\u540E\u7684\u91CD\u65B0\u5904\u7406\uFF1B\u9ED8\u8BA4 5\uFF0C\u8303\u56F4 1\u2013100\u3002",
     value: "5",
     constraint: "\u6574\u6570\uFF1B>= 1\uFF1B<= 100"
   },
@@ -4855,7 +4951,7 @@ var cli_config_catalog_default = [
     name: "HAI_REACH_QUEUE_MAXRETRYDELAYMS",
     module: "reach",
     path: "reach.queue.maxRetryDelayMs",
-    description: "\u6307\u6570\u9000\u907F\u4E0A\u9650\u6BEB\u79D2\u6570\uFF0C\u4E0D\u5F97\u5C0F\u4E8E retryDelayMs\uFF08\u9ED8\u8BA4 3600000\uFF09\u3002",
+    description: "\u540E\u7EED\u5931\u8D25\u65F6\u7B49\u5F85\u65F6\u95F4\u9010\u6B21\u52A0\u500D\uFF0C\u4F46\u4E0D\u8D85\u8FC7\u6B64\u503C\uFF1B\u9ED8\u8BA4 3600000\uFF081 \u5C0F\u65F6\uFF09\uFF0C\u4E0D\u5F97\u5C0F\u4E8E retryDelayMs\u3002",
     value: "3600000",
     constraint: "\u6574\u6570\uFF1B>= 1000\uFF1B<= 86400000"
   },
@@ -4863,7 +4959,7 @@ var cli_config_catalog_default = [
     name: "HAI_REACH_QUEUE_RETRYDELAYMS",
     module: "reach",
     path: "reach.queue.retryDelayMs",
-    description: "\u9996\u6B21\u5931\u8D25\u540E\u7684\u9000\u907F\u6BEB\u79D2\u6570\uFF08\u9ED8\u8BA4 60000\uFF0C\u8303\u56F4 1000\u201386400000\uFF09\u3002",
+    description: "\u7B2C\u4E00\u6B21\u53D1\u9001\u5931\u8D25\u540E\uFF0C\u7B49\u5F85\u591A\u5C11\u6BEB\u79D2\u518D\u8BD5\uFF1B\u9ED8\u8BA4 60000\uFF081 \u5206\u949F\uFF09\uFF0C\u8303\u56F4 1000\u201386400000\u3002",
     value: "60000",
     constraint: "\u6574\u6570\uFF1B>= 1000\uFF1B<= 86400000"
   },
@@ -5433,7 +5529,7 @@ var cli_config_catalog_default = [
     path: "scheduler.enableDb",
     description: "\u5FC5\u987B\u4F7F\u7528\u5171\u4EAB\u6570\u636E\u5E93\u4FDD\u5B58\u6267\u884C\u72B6\u6001\uFF1Bfalse \u4E0D\u518D\u5141\u8BB8\uFF0C\u9700\u8981\u5148\u521D\u59CB\u5316",
     value: "true",
-    constraint: "true | false\uFF1B\u53D6\u503C\uFF1Atrue"
+    constraint: "true\uFF1B\u53D6\u503C\uFF1Atrue"
   },
   {
     name: "HAI_SCHEDULER_LEASEMS",
@@ -5641,7 +5737,7 @@ var cli_config_catalog_default = [
     path: "serv.http.access",
     description: "\u6BCF\u6B21\u8BF7\u6C42\u7684\u8DEF\u5F84/IP/\u65F6\u95F4\u7B56\u7565\uFF1Bfalse \u5173\u95ED\uFF0C\u5185\u8054\u89C4\u5219\u4E0E\u72EC\u7ACB YAML \u6587\u4EF6\u5F15\u7528\u4E0D\u80FD\u6DF7\u7528",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "true | false\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_HTTP_ACCESS_FILE",
@@ -5913,7 +6009,7 @@ var cli_config_catalog_default = [
     path: "serv.http.docs",
     description: "HTTP API \u6587\u6863\u529F\u80FD\u5F00\u5173\u6216\u6587\u6863\u8BBF\u95EE\u914D\u7F6E",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "true | false\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_HTTP_DOCS_PATH",
@@ -5937,7 +6033,7 @@ var cli_config_catalog_default = [
     path: "serv.http.health",
     description: "HTTP \u5065\u5EB7\u68C0\u67E5\u5F00\u5173\u6216\u68C0\u67E5\u914D\u7F6E",
     value: '{"path":"/health","readyPath":"/ready"}',
-    constraint: "JSON \u5BF9\u8C61\uFF1Btrue | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "JSON \u5BF9\u8C61\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_HTTP_HEALTH_PATH",
@@ -5961,7 +6057,7 @@ var cli_config_catalog_default = [
     path: "serv.http.openapi",
     description: "OpenAPI \u7AEF\u70B9\u5F00\u5173\u6216\u7AEF\u70B9\u914D\u7F6E",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "true | false\uFF1Bfalse\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_HTTP_OPENAPI_PATH",
@@ -5971,46 +6067,6 @@ var cli_config_catalog_default = [
     value: "/openapi.json",
     constraint: "\u5B57\u7B26\u4E32\uFF1B\u4EE5 / \u5F00\u5934\u7684\u8DEF\u5F84\u5B57\u7B26\u4E32"
   },
-  {
-    name: "HAI_SERV_HTTP_RPC",
-    module: "serv",
-    path: "serv.http.rpc",
-    description: "RPC \u7AEF\u70B9\u5F00\u5173\u6216\u8BBF\u95EE\u914D\u7F6E",
-    value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
-  },
-  {
-    name: "HAI_SERV_HTTP_RPC_ACCESS",
-    module: "serv",
-    path: "serv.http.rpc.access",
-    description: "RPC \u5BF9\u5916\u8BBF\u95EE\u7B56\u7565",
-    value: "loopback",
-    constraint: "\u5B57\u7B26\u4E32\uFF1B\u53D6\u503C\uFF1Aloopback | private-network | gateway-only"
-  },
-  {
-    name: "HAI_SERV_HTTP_RPC_GATEWAYHEADER",
-    module: "serv",
-    path: "serv.http.rpc.gatewayHeader",
-    description: "\u53D7\u4FE1\u7F51\u5173\u8BA4\u8BC1\u8BF7\u6C42\u5934\u540D\u79F0",
-    value: "",
-    constraint: "\u5B57\u7B26\u4E32"
-  },
-  {
-    name: "HAI_SERV_HTTP_RPC_GATEWAYSECRET",
-    module: "serv",
-    path: "serv.http.rpc.gatewaySecret",
-    description: "\u53D7\u4FE1\u7F51\u5173\u8BA4\u8BC1\u5BC6\u94A5",
-    value: "",
-    constraint: "\u5B57\u7B26\u4E32"
-  },
-  {
-    name: "HAI_SERV_HTTP_RPC_PREFIX",
-    module: "serv",
-    path: "serv.http.rpc.prefix",
-    description: "RPC \u7AEF\u70B9\u7684\u8DEF\u5F84\u524D\u7F00",
-    value: "/rpc",
-    constraint: "\u5B57\u7B26\u4E32\uFF1B\u4EE5 / \u5F00\u5934\u7684\u8DEF\u5F84\u5B57\u7B26\u4E32"
-  },
   {
     name: "HAI_SERV_HTTP_TRUSTEDPROXIES",
     module: "serv",
@@ -6057,7 +6113,7 @@ var cli_config_catalog_default = [
     path: "serv.transport",
     description: "\u4F20\u8F93\u52A0\u5BC6\u5F00\u5173\u6216\u5BC6\u94A5\u534F\u5546\u914D\u7F6E",
     value: "false",
-    constraint: "true | false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
+    constraint: "false\uFF1BJSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9\uFF1B\u53D6\u503C\uFF1Afalse"
   },
   {
     name: "HAI_SERV_TRANSPORT_EXCLUDEPATHS",
@@ -6472,7 +6528,50 @@ var cli_config_catalog_default = [
 // src/commands/cli-config-environment.ts
 var catalogByName = new Map(cli_config_catalog_default.map((entry) => [entry.name, entry]));
 var catalogByPath = new Map(cli_config_catalog_default.map((entry) => [entry.path, entry]));
+function configurationConstraint(value) {
+  return value.replaceAll("JSON \u5BF9\u8C61\uFF1B\u6574\u4F53\u8986\u76D6\u65F6\u66FF\u6362\u8BE5\u8282\u70B9", "\u914D\u7F6E\u5757\uFF08\u586B\u5199\u4E0B\u65B9\u7F29\u8FDB\u5B57\u6BB5\uFF09").replaceAll("JSON \u6570\u7EC4\uFF1B\u7D22\u5F15\u53EF\u6309 0\u30011\u30012 \u6269\u5C55", "\u5217\u8868\uFF08\u6BCF\u9879\u4EE5 - \u5F00\u5934\uFF09").replaceAll("string,null", "\u5B57\u7B26\u4E32\u6216\u7A7A\u503C").replaceAll("\uFF1B<= 9007199254740991", "");
+}
+function withoutGeneratedDocumentation(content) {
+  const { lines, document: optional, counter } = readOptionalConfig(content);
+  const starts = [];
+  let offset = 0;
+  for (const line of lines) {
+    starts.push(offset);
+    offset += line.length + 1;
+  }
+  const ranges = [];
+  function originalOffset(position, end) {
+    const location = counter.linePos(position);
+    const line = lines[location.line - 1] ?? "";
+    const prefix = /^(\s*)# (?=\s*(?:[a-z][\w-]*:|-\s))/i.exec(line);
+    const column = location.col - 1;
+    const removed = prefix && (column > prefix[1].length || !end && column === prefix[1].length) ? 2 : 0;
+    return (starts[location.line - 1] ?? content.length) + column + removed;
+  }
+  function collect(node, virtual) {
+    if (isMap(node)) {
+      for (const pair of node.items)
+        collect(pair.value, virtual);
+    } else if (isSeq(node)) {
+      node.items.forEach((item) => collect(item, virtual));
+    } else if (isScalar(node) && node.range) {
+      ranges.push(virtual ? [originalOffset(node.range[0], false), originalOffset(node.range[1], true)] : [node.range[0], node.range[1]]);
+    }
+  }
+  collect(parseDocument(content).contents, false);
+  if (!optional.errors.length)
+    collect(optional.contents, true);
+  const protectedAt = (position) => ranges.some(([start, end]) => position >= start && position < end);
+  return lines.flatMap((line, index) => {
+    const metadata = /^(\s*)#\s*(?:用途|说明|取值)：/.exec(line);
+    if (metadata && !protectedAt(starts[index] + metadata[1].length))
+      return [];
+    const suffix = line.lastIndexOf(" # \u8BF4\u660E\uFF1A");
+    return [suffix >= 0 && !protectedAt(starts[index] + suffix + 1) ? line.slice(0, suffix) : line];
+  }).join("\n");
+}
 function documentConfig(name, content) {
+  content = withoutGeneratedDocumentation(content);
   const document = parseDocument(content);
   if (document.errors.length)
     throw new Error(`Invalid ${name} configuration documentation source`);
@@ -6483,7 +6582,7 @@ function documentConfig(name, content) {
         const previous = node[field];
         if (!previous)
           continue;
-        const kept = previous.split("\n").filter((line) => !/^\s*用途：/.test(line)).join("\n") || null;
+        const kept = previous.split("\n").filter((line) => !/^\s*(?:用途|说明|取值)：/.test(line)).join("\n") || null;
         if (kept !== previous) {
           node[field] = kept;
           changed = true;
@@ -6502,7 +6601,8 @@ function documentConfig(name, content) {
         const description = catalogByPath.get([name, ...field].join(".").replace(/\.\d+(?=\.|$)/g, ".0"))?.description;
         if (description) {
           const target = sequenceItem && index === 0 ? node : pair.key;
-          const comment = [target.commentBefore, ` \u7528\u9014\uFF1A${description}`].filter(Boolean).join("\n");
+          const entry = catalogByPath.get([name, ...field].join(".").replace(/\.\d+(?=\.|$)/g, ".0"));
+          const comment = [target.commentBefore, ` \u8BF4\u660E\uFF1A${description}`, entry?.constraint ? ` \u53D6\u503C\uFF1A${configurationConstraint(entry.constraint)}` : void 0].filter(Boolean).join("\n");
           if (target.commentBefore !== comment) {
             target.commentBefore = comment;
             changed = true;
@@ -6515,14 +6615,50 @@ function documentConfig(name, content) {
     }
   }
   walk(document.contents, []);
-  return changed ? document.toString({ lineWidth: 0 }) : content;
+  return documentOptionalConfig(name, changed ? document.toString({ lineWidth: 0 }) : content);
+}
+function documentOptionalConfig(name, content) {
+  const { lines, document, counter } = readOptionalConfig(content);
+  if (document.errors.length)
+    return content;
+  const additions = /* @__PURE__ */ new Map();
+  function walk(node, path) {
+    if (isMap(node)) {
+      for (const pair of node.items) {
+        if (!isScalar(pair.key))
+          continue;
+        const segments = [...path, String(pair.key.value)];
+        const entry = catalogByPath.get([name, ...segments].join(".").replace(/\.\d+(?=\.|$)/g, ".0"));
+        if (entry && pair.key.range) {
+          const line = counter.linePos(pair.key.range[0]).line - 1;
+          const prefix = /^(\s*#\s*)(?:-\s*)?[A-Z][\w-]*:/i.exec(lines[line])?.[1];
+          if (prefix && !additions.has(line))
+            additions.set(line, ` # \u8BF4\u660E\uFF1A${entry.description}\uFF1B\u53D6\u503C\uFF1A${configurationConstraint(entry.constraint)}`);
+        }
+        walk(pair.value, segments);
+      }
+    } else if (isSeq(node)) {
+      node.items.forEach((item, index) => walk(item, [...path, String(index)]));
+    }
+  }
+  walk(document.contents, []);
+  return lines.map((line, index) => line + (additions.get(index) ?? "")).join("\n");
+}
+function readOptionalConfig(content) {
+  const lines = content.split("\n");
+  const virtual = lines.map((line) => line.replace(/^(\s*)# (?=\s*(?:[A-Z][\w-]*:|-\s))/i, "$1")).join("\n");
+  const counter = new LineCounter();
+  const document = parseDocument(virtual, { uniqueKeys: false, lineCounter: counter });
+  return { lines, document, counter };
 }
 function parameterizeConfig(name, content) {
+  content = parameterizeOptionalConfig(name, content);
   const document = parseDocument(content);
   if (document.errors.length > 0)
     throw new Error(`Invalid ${name} configuration template`);
   if (!document.contents || isScalar(document.contents) && document.contents.value === null)
     return content;
+  let changed = false;
   function walk(node, path) {
     if (["templates", "supportedLocales", "id"].includes(path[0]) || path.includes("redact") || name === "audit" && /^(?:userTable|userIdColumn|userNameColumn)$/.test(path[0] ?? "") || name === "iam" && ["ui", "agreements", "rbac"].includes(path[0]) && !(path.at(-1) ?? "").endsWith("Url") || ["id", "name", "operations"].includes(path.at(-1) ?? "") && path.some((segment) => /^\d+$/.test(segment))) {
       return;
@@ -6543,14 +6679,54 @@ function parameterizeConfig(name, content) {
       const fallback = typeof node.value === "string" && value !== "" && (parsed.errors.length > 0 || !isScalar(parsed.contents) || parsed.contents.value !== value) ? JSON.stringify(value) : value;
       node.value = `\${${variable}:${fallback}}`;
       node.type = Scalar.PLAIN;
+      changed = true;
     }
   }
   walk(document.contents, []);
-  return document.toString({ lineWidth: 0 });
+  return changed ? document.toString({ lineWidth: 0 }) : content;
+}
+function parameterizeOptionalConfig(name, content) {
+  const { lines, document, counter } = readOptionalConfig(content);
+  if (document.errors.length)
+    return content;
+  const edits = /* @__PURE__ */ new Map();
+  function walk(node, segments) {
+    if (isMap(node)) {
+      for (const pair of node.items) {
+        if (isScalar(pair.key))
+          walk(pair.value, [...segments, String(pair.key.value)]);
+      }
+    } else if (isSeq(node)) {
+      node.items.forEach((item, index) => walk(item, [...segments, String(index)]));
+    } else if (isScalar(node) && node.range && node.value !== null && node.value !== void 0) {
+      const location = counter.linePos(node.range[0]);
+      const line = lines[location.line - 1];
+      if (!/^\s*# /.test(line) || /[\n\r}]/.test(String(node.value)) || String(node.value).includes("${"))
+        return;
+      const field = [name, ...segments].join(".").replace(/\.\d+(?=\.|$)/g, ".0");
+      if (!catalogByPath.has(field) || ["id", "name", "operations"].includes(segments.at(-1) ?? "") || segments.includes("templates") || segments.includes("redact"))
+        return;
+      const variable = ["HAI", name, ...segments].map((part) => part.replace(/[^a-z0-9]+/gi, "_").replace(/^_+|_+$/g, "").toUpperCase()).join("_");
+      const text = String(node.value);
+      const parsed = parseDocument(text);
+      const fallback = typeof node.value === "string" && text !== "" && (parsed.errors.length > 0 || !isScalar(parsed.contents) || parsed.contents.value !== text) ? JSON.stringify(text) : text;
+      const replacement = `\${${variable}:${fallback}}`;
+      const list = edits.get(location.line - 1) ?? [];
+      list.push({ start: location.col + 1, end: location.col + 1 + node.range[1] - node.range[0], value: JSON.stringify(replacement) });
+      edits.set(location.line - 1, list);
+    }
+  }
+  walk(document.contents, []);
+  for (const [index, replacements] of edits) {
+    for (const edit of replacements.sort((a, b) => b.start - a.start))
+      lines[index] = lines[index].slice(0, edit.start) + edit.value + lines[index].slice(edit.end);
+  }
+  return lines.join("\n");
 }
 function configEnvironmentVariables(name, content) {
   const variables = /* @__PURE__ */ new Map();
   const locations = /* @__PURE__ */ new Map();
+  const activeValues = /* @__PURE__ */ new Map();
   function locate(node, path) {
     if (isMap(node)) {
       for (const pair of node.items) {
@@ -6560,25 +6736,35 @@ function configEnvironmentVariables(name, content) {
     } else if (isSeq(node)) {
       node.items.forEach((item, index) => locate(item, [...path, String(index)]));
     } else if (isScalar(node) && typeof node.value === "string") {
-      for (const match of node.value.matchAll(/\$\{([^}:]+)/g))
+      for (const match of node.value.matchAll(/\$\{([^}:]+)(?::([^}]*))?\}/g)) {
         locations.set(match[1], [name, ...path].join("."));
+        if (!activeValues.has(match[1]))
+          activeValues.set(match[1], match[2] ?? "");
+      }
     }
   }
   locate(parseDocument(content).contents, []);
   for (const match of content.matchAll(/\$\{((?:HAI_|PUBLIC_|VITE_|AI_|OPENAI_|GEMINI_|DASHSCOPE_|ARK_|LDAP_)[A-Z0-9_]*)(?::([^}]*))?\}/g)) {
     const [, variable, value = ""] = match;
+    if (variables.has(variable))
+      continue;
+    const normalized = catalogByName.get(variable.replace(/_\d+(?=_|$)/g, "_0"));
+    const entry = catalogByName.get(variable) ?? normalized;
+    const indices = [...variable.matchAll(/_(\d+)(?=_|$)/g)].map((item) => item[1]);
+    const catalogPath = (entry?.path === variable ? normalized?.path : entry?.path)?.replace(/\.0(?=\.|$)/g, () => `.${indices.shift() ?? "0"}`);
     variables.set(variable, {
       name: variable,
-      path: locations.get(variable) ?? `${name} (${variable}\uFF0C\u53EF\u9009\u5757)`,
-      value,
+      path: locations.get(variable) ?? catalogPath ?? `${name} (${variable}\uFF0C\u53EF\u9009\u5757)`,
+      value: activeValues.get(variable) ?? value,
       constraint: variableConstraint(variable, value),
-      description: catalogByName.get(variable)?.description
+      description: entry?.description,
+      optional: !locations.has(variable)
     });
   }
   return [...variables.values()];
 }
 function variableConstraint(name, value) {
-  const known = catalogByName.get(name);
+  const known = catalogByName.get(name) ?? catalogByName.get(name.replace(/_\d+(?=_|$)/g, "_0"));
   if (known)
     return known.constraint;
   const enums = {
@@ -6589,7 +6775,7 @@ function variableConstraint(name, value) {
     HAI_CACHE_TYPE: "memory | redis",
     HAI_STORAGE_TYPE: "local | s3",
     HAI_VECDB_TYPE: "lancedb | pgvector | qdrant | chroma",
-    HAI_AI_LLM_API: "chat | responses | anthropic",
+    HAI_AI_LLM_PROTOCOL: "chat | responses | anthropic",
     HAI_DB_SSL: "MySQL\uFF1Afalse \u6216\u4E25\u683C TLS \u5BF9\u8C61\uFF08{} \u9ED8\u8BA4\u6821\u9A8C\u8BC1\u4E66\u94FE\u548C DNS \u8EAB\u4EFD\uFF09\uFF1BPostgreSQL\uFF1A\u5E03\u5C14\u503C\u3001require/prefer/allow/disable \u6216 TLS \u5BF9\u8C61",
     HAI_IAM_PASSWORD_MINLENGTH: "\u6574\u6570 >= 1\uFF0C\u4E14\u4E0D\u5927\u4E8E maxLength",
     HAI_IAM_PASSWORD_MAXLENGTH: "\u6574\u6570 1\u2013256\uFF0C\u4E14\u4E0D\u5C0F\u4E8E minLength",
@@ -6709,6 +6895,8 @@ logging:
   format: pretty
   # context:
   #   service: api
+  # redact \u586B\u65E5\u5FD7\u5B57\u6BB5\u8DEF\u5F84\uFF1Bcustomer.email \u906E\u76D6\u5BA2\u6237\u90AE\u7BB1\uFF0Crecipients[*].phone \u906E\u76D6\u6570\u7EC4\u4E2D\u7684\u7535\u8BDD\u3002
+  # \u53EA\u5339\u914D\u6307\u5B9A\u5C42\u7EA7\uFF0C* \u5339\u914D\u4E00\u5C42\uFF1B\u5BC6\u7801\u548C\u4EE4\u724C\u7B49\u5DF2\u77E5\u51ED\u636E\u9ED8\u8BA4\u4ECD\u4F1A\u8131\u654F\u3002
   redact:
     - password
     - token
@@ -6745,22 +6933,24 @@ http:
   access: false
   # access:
   #   file: ./config/security/request-access.yml
+  # \u6216\u5C06 access: false \u66FF\u6362\u4E3A\u4E0B\u5217\u5185\u8054\u914D\u7F6E\uFF1B\u4E0E file \u4E8C\u9009\u4E00\u3002
+  # access:
+  #   global:
+  #     timezone: UTC # \u53EF\u7528 HAI_SERV_HTTP_ACCESS_GLOBAL_TIMEZONE=Asia/Shanghai
+  #     allowIps: []
+  #     denyIps: []
+  #     windows: []
+  #   rules: []
   apiPrefix: /api/v1
   openapi:
     path: /openapi.json
+  # HAI_SERV_HTTP_DOCS=false \u5173\u95ED\u6587\u6863\uFF1B\u5F00\u542F\u65F6\u518D\u914D\u7F6E path/requireAuth\u3002
   docs:
     path: /docs
     # requireAuth: true
   health:
     path: /health
     readyPath: /ready
-  rpc: false
-  # \u542F\u7528\u5185\u90E8 RPC \u65F6\u7528\u5BF9\u8C61\u66FF\u6362 false\uFF0Cgateway-only \u5FC5\u987B\u914D\u7F6E\u7F51\u5173\u5BC6\u94A5\u3002
-  # rpc:
-  #   prefix: /api/rpc
-  #   access: gateway-only # loopback | private-network | gateway-only
-  #   gatewayHeader: X-Gateway-Key
-  #   gatewaySecret: \${HAI_SERV_HTTP_RPC_GATEWAYSECRET}
 
 # \u6309\u9700\u5F00\u542F\u8DE8\u57DF\u8BBF\u95EE\uFF0C\u751F\u4EA7\u73AF\u5883\u586B\u5199\u660E\u786E\u7684 Origin\u3002
 # cors:
@@ -6776,6 +6966,9 @@ transport: false
 #   maxPlaintextBytes: \${HAI_SERV_TRANSPORT_MAXPLAINTEXTBYTES:1048576} # \u53CC\u5411 UTF-8 \u660E\u6587\uFF0C1 KiB\uFF5E64 MiB
 #   keyExchangePath: /_hai/key-exchange
 #   excludePaths: [/health, /ready]
+# \u5355\u6761\u8DEF\u5F84\u9700\u8981\u66F4\u5927\u8BF7\u6C42\u4F53\u65F6\u586B\u5199\u5B57\u8282\u6570\uFF0C* \u53EA\u5339\u914D\u4E00\u6BB5\u8DEF\u5F84\u3002
+#   routePlaintextBytes: # HAI_SERV_TRANSPORT_ROUTEPLAINTEXTBYTES \u53EF\u586B JSON \u8DEF\u5F84\u6620\u5C04
+#     /api/v1/uploads/*: 8388608
 `;
 }
 function generateDbConfig(cfg) {
@@ -6797,7 +6990,7 @@ function generateDbConfig(cfg) {
 # MySQL \u4E13\u7528\uFF1BPostgreSQL \u65E0\u9700\u6B64\u5757\u3002
 # mysql:
 #   charset: utf8mb4
-#   timezone: '+08:00'`;
+# MySQL \u4E0D\u652F\u6301 timezone \u914D\u7F6E\uFF1B\u4E0D\u8981\u5728 mysql \u5757\u5185\u586B\u5199\u8BE5\u5B57\u6BB5\u3002`;
   return `# =============================================================================
 # \u6570\u636E\u5E93\u914D\u7F6E
 # =============================================================================
@@ -6813,7 +7006,7 @@ url: \${HAI_DB_URL:}
 ssl: \${HAI_DB_SSL:false}
 ${networkOptions}
 
-# SQL \u65E5\u5FD7\u6309\u9700\u5F00\u542F\uFF1BmaxLength \u9650\u5236 SQL / \u53C2\u6570\u8F93\u51FA\u957F\u5EA6\u3002
+# \u64CD\u4F5C\u65E5\u5FD7\u6309\u9700\u5F00\u542F\uFF0C\u53EA\u8BB0\u5F55\u8017\u65F6\u3001\u6570\u91CF\u7B49\u5B89\u5168\u6458\u8981\uFF1BmaxLength \u9650\u5236\u6458\u8981\u957F\u5EA6\uFF0C\u4E0D\u8BB0\u5F55 SQL \u539F\u6587\u548C\u53C2\u6570\u3002
 # operationLog:
 #   read: false
 #   write: false
@@ -6903,7 +7096,7 @@ captcha:
 # apikey:
 #   maxKeysPerUser: 10
 #   defaultExpirationDays: 0 # 0 \u8868\u793A\u4E0D\u9650\u5236\u6709\u6548\u671F
-#   prefix: hai_
+#   prefix: hai_ # \u65B0\u5EFA API Key \u7684\u5F00\u5934\uFF0C\u4F8B\u5982 hai_abc123\uFF1B\u53EA\u586B\u5E94\u7528\u6807\u8BC6\uFF0C\u4E0D\u653E\u5BC6\u7801\u3002
 # OTP \u9700\u542F\u7528 login.otp\uFF0C\u5E76\u9009\u62E9 Reach \u6807\u51C6\u6A21\u677F\u6216\u81EA\u5B9A\u4E49\u53D1\u9001\u56DE\u8C03\u3002
 ${(loginOtp ? "" : "# \u4FDD\u7559\u9ED8\u8BA4\u7B56\u7565\u5165\u53E3\uFF0C\u5355\u72EC\u5207\u6362 login.otp \u5373\u53EF\u542F\u7528\u9A8C\u8BC1\u7801\u767B\u5F55\u3002\notp: {}\n# \u5B9A\u5236\u7B56\u7565\u65F6\u7528\u4E0B\u65B9\u914D\u7F6E\u5757\u66FF\u6362\u7A7A\u5BF9\u8C61\uFF0C\u6216\u901A\u8FC7 HAI_IAM_OTP \u6574\u4F53\u8986\u76D6\u3002\n") + `otp:
   email: true
@@ -6967,7 +7160,12 @@ loginAccess:
   timezone: UTC
   allowIps: [] # \u7A7A\u5217\u8868\u4E0D\u9650\u5236\uFF1B\u652F\u6301 IPv4\u3001IPv6 \u4E0E CIDR
   denyIps: [] # \u62D2\u7EDD\u4F18\u5148
-  windows: [] # days \u4E3A\u5468\u4E001\u81F3\u5468\u65E57\uFF1Bstart/end \u4E3A HH:mm\uFF0C\u652F\u6301\u8DE8\u5348\u591C
+  windows: [] # \u7559\u7A7A\u5141\u8BB8\u4EFB\u4F55\u65F6\u95F4\uFF1B\u4EE5\u4E0B\u4F8B\u5B50\u53EA\u5141\u8BB8\u5468\u4E00\u81F3\u5468\u4E94 09:00\u201318:00 \u767B\u5F55\u3002
+  # windows:
+  #   - days: [1, 2, 3, 4, 5]
+  #     start: '09:00'
+  #     end: '18:00'
+  # timezone \u8BBE\u4E3A Asia/Shanghai \u65F6\uFF0C\u4E0A\u8FF0\u65F6\u95F4\u6309\u5317\u4EAC\u65F6\u95F4\u89E3\u91CA\u3002
 
 # \u4F1A\u8BDD\u914D\u7F6E
 session:
@@ -6978,7 +7176,11 @@ session:
   singleDeviceMode: replace # replace \u9876\u65E7\u4FDD\u65B0\uFF1Breject \u62D2\u7EDD\u91CD\u590D\u767B\u5F55
   maxSessions: 0 # \u6BCF\u7528\u6237\u6709\u6548\u4F1A\u8BDD\u4E0A\u9650\uFF0C0 \u4E0D\u9650\u5236
   # \u6309\u7EC8\u7AEF\u5206\u522B\u9650\u5236\uFF1B\u975E\u7A7A\u65F6\u4EC5\u5141\u8BB8\u5217\u51FA\u7684\u7C7B\u578B\uFF0C\u4ECD\u53D7\u5168\u5C40\u6700\u5927\u4F1A\u8BDD\u6570\u7EA6\u675F\u3002
-  terminalLimits: {}
+  terminalLimits: {} # \u7559\u7A7A\u4E0D\u6309\u7EC8\u7AEF\u9650\u5236\u3002\u4E0B\u9762\u4F8B\u5B50\u5141\u8BB8 web 2 \u4E2A\u3001app 1 \u4E2A\uFF0C\u5176\u4F59\u7EC8\u7AEF\u4E0D\u5141\u8BB8\u65B0\u767B\u5F55\u3002
+  # terminalLimits:
+  #   web: 2
+  #   app: 1
+  # \u524D\u7AEF\u53D1\u9001\u7684\u7EC8\u7AEF\u540D\u79F0\u5FC5\u987B\u4E0E\u952E\u540D\u76F8\u540C\uFF1B\u6B64\u9650\u5236\u540C\u65F6\u53D7 maxSessions \u7EA6\u675F\u3002
   terminalLimitMode: reject
   idleTimeout: 0 # \u95F2\u7F6E\u671F\u9650\uFF08\u79D2\uFF09\uFF0C0 \u5173\u95ED\uFF1Baccess/refresh \u5747\u6267\u884C
   absoluteTimeout: 0 # \u4ECE\u9996\u6B21\u767B\u5F55\u8D77\u7684\u7EDD\u5BF9\u671F\u9650\uFF08\u79D2\uFF09\uFF0C0 \u5173\u95ED
@@ -7012,8 +7214,8 @@ accessKeyId: ''
 secretAccessKey: ''
 endpoint: \${HAI_STORAGE_ENDPOINT:https://s3.amazonaws.com}
 forcePathStyle: false
-# prefix: ''
-# publicEndpoint: https://app.example.com # \u79C1\u6709\u9884\u7B7E\u540D\u8BBF\u95EE\u6E90\uFF1B\u4E0D\u542B\u6876\u540D\u6216\u7F51\u7AD9\u76EE\u5F55
+# prefix: '' # \u5BF9\u8C61\u8DEF\u5F84\u524D\u7F00\uFF0C\u4F8B\u5982 invoices/2026\uFF1B\u4FDD\u5B58 report.pdf \u540E\u952E\u540D\u4E3A invoices/2026/report.pdf\u3002
+# publicEndpoint: https://app.example.com # \u6D4F\u89C8\u5668\u4E0B\u8F7D\u5165\u53E3\uFF0C\u53EF\u5E26 /files \u7B49\u4EE3\u7406\u76EE\u5F55\uFF1B\u4E0D\u542B\u6876\u540D
 # publicUrl: https://cdn.example.com`;
   return `# \u5B58\u50A8\u914D\u7F6E\uFF1BHAI_STORAGE \u53EF\u6574\u4F53\u66FF\u6362\u8FDE\u63A5\u914D\u7F6E\u3002
 type: ${type}
@@ -7037,7 +7239,7 @@ function generateAiConfig(cfg) {
 # AI \u914D\u7F6E
 # =============================================================================
 
-# LLM \u914D\u7F6E\uFF08\u5FC5\u586B\uFF09
+# \u5BF9\u8BDD\u6A21\u578B\uFF08\u4F7F\u7528\u5BF9\u8BDD\u529F\u80FD\u65F6\u914D\u7F6E\uFF09
 llm:
   # API Key\uFF08\u7EA6\u5B9A\u73AF\u5883\u53D8\u91CF HAI_AI_LLM_APIKEY \u4F18\u5148\uFF09
   apiKey: ''
@@ -7045,7 +7247,7 @@ llm:
   # baseUrl: https://api.openai.com/v1
   # \u9ED8\u8BA4\u6A21\u578B
 ${stringify({ model }).trim().split("\n").map((line) => `  ${line}`).join("\n")}
-  api: ${api} # chat | responses | anthropic
+  protocol: ${api} # \u8BF7\u6C42\u683C\u5F0F\uFF1AOpenAI \u517C\u5BB9\u9009 chat\uFF0CResponses \u9009 responses\uFF0CClaude Messages \u9009 anthropic\u3002
   # \u5168\u5C40\u6700\u5927 Token \u6570\uFF08\u9ED8\u8BA4 4096\uFF09
   # maxTokens: 4096
   # \u91C7\u6837\u6E29\u5EA6\uFF080-2\uFF0C\u9ED8\u8BA4 0.7\uFF09
@@ -7054,11 +7256,11 @@ ${stringify({ model }).trim().split("\n").map((line) => `  ${line}`).join("\n")}
   # timeout: 60000
   # tempModelCacheTtl: 600000
 
-  # \u591A\u6A21\u578B\u914D\u7F6E\uFF08\u53EF\u9009\uFF0C\u7528\u4E8E\u573A\u666F\u8DEF\u7531\uFF09
+  # \u591A\u6A21\u578B\u914D\u7F6E\uFF1Aid \u662F\u5E94\u7528\u4E2D\u7684\u77ED\u540D\uFF0Cmodel \u662F\u4F9B\u5E94\u5546\u7684\u771F\u5B9E\u578B\u53F7\u3002\u5404\u9879\u53EF\u5355\u72EC\u8BBE\u7F6E\u534F\u8BAE\u3001\u5730\u5740\u548C\u5BC6\u94A5\u3002
   # models:
   #   - id: fast
   #     model: gpt-4o-mini
-  #     api: chat
+  #     protocol: chat
   #     apiKey: ''
   #     baseUrl: https://api.openai.com/v1
   #     maxTokens: 4096
@@ -7068,7 +7270,7 @@ ${stringify({ model }).trim().split("\n").map((line) => `  ${line}`).join("\n")}
   #     model: gpt-4o
   #     apiKey: ''
 
-  # \u573A\u666F\u6A21\u578B\u6620\u5C04\uFF08\u53EF\u9009\uFF09
+  # \u573A\u666F\u6A21\u578B\u6620\u5C04\uFF1A\u666E\u901A\u5BF9\u8BDD\u7528 fast\uFF0C\u590D\u6742\u63A8\u7406\u7528 smart\uFF1B\u503C\u5BF9\u5E94\u4E0A\u65B9 models \u7684 id\u3002
   # scenarios:
   #   default: fast
   #   chat: fast
@@ -7220,14 +7422,18 @@ function generateEnvExample(features, configs, includeDisabled = false, configCo
     if (!keys.has(key) && !includeDisabled)
       continue;
     const variables = configEnvironmentVariables(key, configContents[key] ?? generateConfigFile(key, configs));
-    const section = renderEnvironment(variables);
+    const section = renderEnvironment(variables.filter((variable) => !variable.optional));
+    const declaredOptional = renderEnvironment(variables.filter((variable) => variable.optional));
     const activeNames = new Set(variables.map((variable) => variable.name));
-    const optional = renderEnvironment(moduleEnvironmentVariables(key).filter((variable) => !activeNames.has(variable.name)));
+    const candidates = moduleEnvironmentVariables(key);
+    const primitiveArrays = candidates.filter((variable) => variable.constraint.includes("JSON \u6570\u7EC4") && candidates.some((child) => child.name === `${variable.name}_0` && !child.constraint.includes("JSON \u5BF9\u8C61")));
+    const optional = renderEnvironment(candidates.filter((variable) => !activeNames.has(variable.name) && !primitiveArrays.some((parent) => variable.name.startsWith(`${parent.name}_`)) && !variables.some((child) => child.name.startsWith(`${variable.name}_`) && (variable.constraint.includes("JSON \u5BF9\u8C61") || variable.constraint.includes("JSON \u6570\u7EC4")) && !variable.constraint.includes("false")) && (!(variable.constraint.includes("JSON \u5BF9\u8C61") || variable.constraint.includes("JSON \u6570\u7EC4")) || variable.constraint.includes("false") || !candidates.some((child) => child.name.startsWith(`${variable.name}_`)) || primitiveArrays.includes(variable))));
     const commented = (value) => value.split("\n").map((line) => line && !line.startsWith("#") ? `# ${line}` : line).join("\n");
     sections.push(`# --- ${key} ---
 ${keys.has(key) ? section : commented(section)}
 
-# \u53EF\u9009\u5B57\u6BB5\uFF1A\u5148\u542F\u7528 YAML \u8DEF\u5F84\uFF0C\u6216\u7528\u7236\u7EA7\u5BF9\u8C61\u6574\u4F53\u8986\u76D6\u3002
+# \u53EF\u9009\u5B57\u6BB5\uFF1A\u5148\u5728 YAML \u4E2D\u542F\u7528\u5BF9\u5E94\u914D\u7F6E\u5757\uFF1B\u4E0B\u5217\u53D8\u91CF\u540D\u4E0E\u5B57\u6BB5\u8DEF\u5F84\u4E00\u4E00\u5BF9\u5E94\u3002
+${commented(declaredOptional)}
 ${commented(optional)}`);
   }
   return `${sections.join("\n\n")}
@@ -7276,6 +7482,16 @@ provider:
   expose:
     hostPort: 18080
     containerPort: 3000
+    # HTTPS \u4E5F\u53EF\u5728 pnpm run deploy \u7684\u53EF\u9009\u8BC1\u4E66\u73AF\u8282\u4E2D\u914D\u7F6E\u3002
+    # https:
+    #   type: files
+    #   domain: app.example.com
+    #   port: 443
+    #   redirectHttp: true
+    #   certificateFile: .hai/certificates/fullchain.pem
+    #   privateKeyFile: .hai/certificates/privkey.pem
+    # Let's Encrypt\uFF1Atype \u6539\u4E3A letsencrypt\uFF0CHTTP hostPort \u8BBE\u4E3A 80\uFF1B
+    # \u4EE5 email \u548C acceptTerms: true \u66FF\u4EE3\u4E24\u4E2A\u6587\u4EF6\u8DEF\u5F84\u3002
 
 container:
   s3Engine: \${HAI_DEPLOY_CONTAINER_S3ENGINE:rustfs} # rustfs | minio
@@ -7348,7 +7564,10 @@ providers:
   - name: console_dev
     type: console
 
-  # SMTP \u90AE\u4EF6\uFF08\u6309\u9700\u5F00\u542F\uFF09
+# \u751F\u4EA7\u793A\u4F8B\uFF1A\u7528\u4E0B\u9762 providers \u6574\u6BB5\u66FF\u6362\u4E0A\u65B9\u63A7\u5236\u53F0\u5217\u8868\uFF1B\u4FDD\u7559\u9700\u8981\u7684\u9879\u3002
+# \u6570\u7EC4\u7D22\u5F15\u4ECE 0 \u5F00\u59CB\uFF0C\u5220\u6389\u67D0\u9879\u540E\u540C\u6B65\u4FEE\u6539\u5176\u4F59\u73AF\u5883\u53D8\u91CF\u4E2D\u7684\u7D22\u5F15\u3002
+# providers:
+  # SMTP \u90AE\u4EF6
   # - name: email
   #   type: smtp
   #   host: \${HAI_REACH_PROVIDERS_0_HOST:smtp.example.com}
@@ -7361,8 +7580,8 @@ providers:
   # \u963F\u91CC\u4E91\u77ED\u4FE1\uFF08\u6309\u9700\u5F00\u542F\uFF09
   # - name: sms
   #   type: aliyun-sms
-  #   accessKeyId: \${HAI_REACH_PROVIDERS_0_ACCESSKEYID}
-  #   accessKeySecret: \${HAI_REACH_PROVIDERS_0_ACCESSKEYSECRET}
+  #   accessKeyId: \${HAI_REACH_PROVIDERS_1_ACCESSKEYID}
+  #   accessKeySecret: \${HAI_REACH_PROVIDERS_1_ACCESSKEYSECRET}
   #   signName: MyApp
   #   endpoint: dysmsapi.aliyuncs.com
 
@@ -7372,7 +7591,7 @@ providers:
   #   url: https://notify.example.com/send
   #   method: POST # POST | PUT
   #   headers:
-  #     Authorization: 'Bearer \${HAI_REACH_PROVIDERS_0_HEADERS_AUTHORIZATION}'
+  #     Authorization: 'Bearer \${HAI_REACH_PROVIDERS_2_HEADERS_AUTHORIZATION}'
   #   timeout: 10000
   #   redirect: error # \u666E\u901A\u6D88\u606F\u624D\u53EF\u663E\u5F0F follow\uFF1B\u654F\u611F\u53D1\u9001\u59CB\u7EC8\u62D2\u7EDD\u8DF3\u8F6C\u3002
   #   requireHttps: true # \u5F3A\u5236 HTTPS\uFF1B\u7701\u7565\u65F6\u751F\u4EA7\u654F\u611F\u53D1\u9001\u4ECD\u8981\u6C42 HTTPS\u3002
@@ -7403,7 +7622,8 @@ templates: []
 #   start: "22:00"
 #   end: "08:00"
 
-# \u5EF6\u8FDF\u961F\u5217\u91CD\u8BD5\u7B56\u7565\uFF08\u5165\u961F\u65F6\u6301\u4E45\u4FDD\u5B58\uFF1B\u9886\u53D6/\u5D29\u6E83\u6062\u590D\u8BA1\u6570\uFF0C\u8D85\u9650 dead\uFF1Bunknown \u7981\u6B62\u81EA\u52A8\u91CD\u53D1\uFF09
+# \u53D1\u9001\u5931\u8D25\u65F6\u6700\u591A\u5C1D\u8BD5 5 \u6B21\uFF1B\u7B49\u5F85\u65F6\u95F4\u4ECE 1 \u5206\u949F\u9010\u6B21\u52A0\u500D\uFF0C\u6700\u957F 1 \u5C0F\u65F6\u3002
+# \u65E0\u6CD5\u786E\u8BA4\u5BF9\u65B9\u662F\u5426\u6536\u5230\u65F6\u505C\u6B62\u81EA\u52A8\u91CD\u53D1\uFF0C\u5148\u6838\u5BF9\u6295\u9012\u7ED3\u679C\u3002\u4FEE\u6539\u7B56\u7565\u53EA\u5F71\u54CD\u4EE5\u540E\u8FDB\u5165\u961F\u5217\u7684\u6D88\u606F\u3002
 queue:
   maxAttempts: \${HAI_REACH_QUEUE_MAXATTEMPTS:5}
   retryDelayMs: \${HAI_REACH_QUEUE_RETRYDELAYMS:60000}
@@ -7436,7 +7656,7 @@ function generateAuditConfig() {
 # \u5BA1\u8BA1\u65E5\u5FD7\u914D\u7F6E (@h-ai/audit)
 # =============================================================================
 
-# \u7528\u6237\u8868\u540D\uFF08\u7528\u4E8E JOIN \u67E5\u8BE2\uFF09
+# \u5BA1\u8BA1\u5217\u8868\u67E5\u8BE2\u64CD\u4F5C\u8005\u540D\u79F0\u65F6\u4F7F\u7528\u7684\u7528\u6237\u8868\u3002\u4F7F\u7528\u6846\u67B6 IAM \u65F6\u4FDD\u6301\u4E0B\u9762\u4E09\u4E2A\u9ED8\u8BA4\u503C\u3002
 userTable: hai_iam_users
 
 # \u7528\u6237\u8868\u4E3B\u952E\u5217\u540D
@@ -7445,22 +7665,27 @@ userIdColumn: id
 # \u7528\u6237\u540D\u5217\u540D
 userNameColumn: username
 
-# \u6846\u67B6\u81EA\u52A8\u4E8B\u4EF6\u91C7\u96C6\uFF1B\u663E\u5F0F\u4E1A\u52A1 audit.log \u4E0D\u53D7\u6B64\u5F00\u5173\u5F71\u54CD
+# \u81EA\u52A8\u8BB0\u5F55\u5DF2\u63A5\u5165\u6846\u67B6\u7684\u91CD\u8981\u64CD\u4F5C\uFF1BincludeReads=true \u65F6\u4E5F\u8BB0\u5F55\u6210\u529F\u67E5\u8BE2\uFF0C\u4F1A\u589E\u52A0\u8BB0\u5F55\u91CF\u3002
+# enabled=false \u53EA\u5173\u95ED\u81EA\u52A8\u91C7\u96C6\uFF0C\u4E1A\u52A1\u4E3B\u52A8\u8C03\u7528 audit.log() \u4ECD\u53EF\u5199\u5165\u3002
 capture:
   enabled: true
   includeReads: false
 
-# \u5E94\u7528\u793A\u4F8B\u4FDD\u62A4\u8FD1\u671F\u65E5\u5FD7\uFF1B\u6846\u67B6\u672A\u914D\u7F6E\u65F6\u4E0D\u5F3A\u5236\u542F\u7528\u30020\u5929\u6E05\u7406\u4E0D\u80FD\u7ED5\u8FC7\u5DF2\u542F\u7528\u4FDD\u62A4\u3002
+# enabled=true \u540E\uFF0C\u6700\u8FD1 minDays \u5929\u7684\u8BB0\u5F55\u4E0D\u80FD\u4FEE\u6539\u6216\u5220\u9664\uFF1B\u8D85\u8FC7\u4FDD\u62A4\u671F\u4E5F\u4E0D\u4F1A\u81EA\u52A8\u5220\u9664\u3002
+# \u4FDD\u62A4\u8BBE\u7F6E\u4F1A\u5B58\u5165\u6570\u636E\u5E93\uFF0C\u5220\u6389\u8FD9\u4E00\u6BB5\u4F1A\u6CBF\u7528\u5DF2\u6709\u8BBE\u7F6E\uFF1B\u660E\u786E enabled=false \u624D\u5173\u95ED\u4FDD\u62A4\u3002
 retention:
   enabled: false
   minDays: 90
 
-# \u51ED\u636E\u59CB\u7EC8\u8131\u654F\uFF1B\u4EC5\u4E1A\u52A1\u9690\u79C1\u53EF\u5173\u95ED\uFF0C\u53EF\u8865\u5145\u9879\u76EE\u5B57\u6BB5\u540D
+# fields \u586B\u989D\u5916\u7684\u9690\u79C1\u5B57\u6BB5\u540D\uFF0C\u4F8B\u5982 [customerPhone, idCard]\uFF0C\u4E0D\u533A\u5206\u5927\u5C0F\u5199\u3002
+# \u5BC6\u7801\u3001\u4EE4\u724C\u7B49\u51ED\u636E\u59CB\u7EC8\u906E\u76D6\uFF1Benabled \u53EA\u63A7\u5236\u8FD9\u91CC\u8865\u5145\u7684\u4E1A\u52A1\u5B57\u6BB5\uFF0C\u4E0D\u6062\u590D\u5386\u53F2\u539F\u6587\u3002
 privacy:
   enabled: true
   fields: []
 
-# \u79C1\u6709 JSONL \u5F52\u6863\uFF1B\u751F\u4EA7\u4F7F\u7528\u79C1\u6709\u5B58\u50A8\uFF0C\u5B9A\u65F6\u6267\u884C\u7531\u5E94\u7528\u73B0\u6709 Scheduler \u88C5\u914D\u3002
+# \u5C06\u5BA1\u8BA1\u53E6\u5B58\u4E3A\u79C1\u6709 JSONL \u5907\u4EFD\uFF0C\u542F\u7528\u524D\u5148\u521D\u59CB\u5316\u79C1\u6709 Storage\u3002
+# batchSize \u662F\u6BCF\u6279\u8BFB\u53D6\u6761\u6570\uFF1BmaxRecordBytes \u662F\u5355\u6761\u4E0A\u9650\uFF08\u5B57\u8282\uFF09\uFF0C\u8D85\u9650\u62A5\u9519\uFF0C\u4E0D\u622A\u65AD\u8BB0\u5F55\u3002
+# schedule.enabled=true \u6309 cron \u81EA\u52A8\u5907\u4EFD\uFF1B\u4F8B\u5982 UTC 02:00 \u5BF9\u5E94\u5317\u4EAC\u65F6\u95F4 10:00\u3002
 backup:
   enabled: false
   batchSize: 200
@@ -7470,18 +7695,21 @@ backup:
     cron: '0 2 * * *'
     timezone: UTC
 
-# \u5206\u7EA7\u9608\u503C\u544A\u8B66\uFF1A\u542F\u7528\u524D\u914D\u7F6E\u89C4\u5219\u53CA Reach \u901A\u77E5\u76EE\u6807\u3002\u53EA\u7EDF\u8BA1\u5DF2\u63D0\u4EA4\u4E8B\u4EF6\u3002
+# \u6309\u4E00\u6BB5\u65F6\u95F4\u5185\u7684\u4E8B\u4EF6\u6570\u91CF\u901A\u77E5\u7BA1\u7406\u5458\uFF1B\u542F\u7528\u524D\u914D\u7F6E Reach\uFF0C\u5E76\u5C06 provider \u586B\u4E3A\u5DF2\u6CE8\u518C\u7684\u901A\u9053\u540D\u79F0\u3002
+# \u4F8B\u5B50\uFF1A5 \u5206\u949F\u5185\u767B\u5F55\u5931\u8D25/\u62D2\u7EDD\u8FBE\u5230 10 \u6B21\u65F6\u901A\u77E5\u5B89\u5168\u56E2\u961F\uFF1B\u89C4\u5219\u548C\u5B9A\u65F6\u68C0\u67E5\u9700\u8981\u5206\u522B\u542F\u7528\u3002
 alerts:
   enabled: false
   maxNotificationsPerCheck: 100
   rules: []
-  # - id: login-failures
-  #   actions: [auth.login]
-  #   outcomes: [failure, denied]
-  #   threshold: 10
-  #   windowSeconds: 300
-  #   severity: warning
-  #   targets: [{ id: security-team, provider: email, to: security@example.com }]
+  # \u7528\u4E0B\u9762\u7684 rules \u5217\u8868\u66FF\u6362\u7A7A\u6570\u7EC4\u3002
+  # rules:
+  #   - id: login-failures
+  #     actions: [auth.login]
+  #     outcomes: [failure, denied]
+  #     threshold: 10
+  #     windowSeconds: 300
+  #     severity: warning
+  #     targets: [{ id: security-team, provider: email, to: security@example.com }]
   schedule:
     enabled: false
     cron: '* * * * *'
@@ -7552,6 +7780,6 @@ envAllowlist:
 `;
 }
 
-export { generateConfigFile, generateEnvExample, generateProductionEnvironment, moduleEnvironmentVariables, parameterizeConfig, renderEnvironment, runtimeEnvironmentVariables };
-//# sourceMappingURL=chunk-EF7WOFWZ.js.map
-//# sourceMappingURL=chunk-EF7WOFWZ.js.map
+export { documentConfig, generateConfigFile, generateEnvExample, generateProductionEnvironment, moduleEnvironmentVariables, parameterizeConfig, renderEnvironment, runtimeEnvironmentVariables };
+//# sourceMappingURL=chunk-YVNNMC4H.js.map
+//# sourceMappingURL=chunk-YVNNMC4H.js.map