@h-ai/cli 1.0.0-beta.21 → 1.0.0-beta.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.en.md +13 -12
- package/README.ja.md +13 -12
- package/README.md +13 -12
- package/dist/{chunk-2ZL5ORQ2.js → chunk-P2VZ3VV6.js} +2 -14
- package/dist/chunk-P2VZ3VV6.js.map +1 -0
- package/dist/{chunk-L53P43B2.js → chunk-V7WGSBX3.js} +41 -21
- package/dist/chunk-V7WGSBX3.js.map +1 -0
- package/dist/cli-config-templates-VLXJTHCQ.js +5 -0
- package/dist/{cli-config-templates-LWMD2I6V.js.map → cli-config-templates-VLXJTHCQ.js.map} +1 -1
- package/dist/{cli-skill-templates-D6S2OQ6X.js → cli-skill-templates-JKF6E3PI.js} +3 -3
- package/dist/{cli-skill-templates-D6S2OQ6X.js.map → cli-skill-templates-JKF6E3PI.js.map} +1 -1
- package/dist/index.js +161 -244
- package/dist/index.js.map +1 -1
- package/dist/metafile-esm.json +1 -1
- package/package.json +14 -14
- package/templates/apps/fullstack/docs/security-configuration.md.hbs +3 -3
- package/templates/apps/fullstack/images/web/nginx.conf.hbs +3 -1
- package/templates/apps/fullstack/packages/{{projectName}}-serv/README.md.hbs +1 -1
- package/templates/apps/fullstack/packages/{{projectName}}-shared/tests/api-client.test.ts.hbs +4 -1
- package/templates/base/images/web/nginx.conf.hbs +3 -1
- package/templates/base/package.json.hbs +1 -1
- package/templates/shared/download-error/http.conf +19 -0
- package/templates/shared/download-error/server.conf +52 -0
- package/templates/skills/hai-ai/acp.md +1 -1
- package/templates/skills/hai-ai/guide.md +1 -1
- package/templates/skills/hai-ai/reference.md +1 -1
- package/templates/skills/hai-api-client/SKILL.md +2 -2
- package/templates/skills/hai-app-create/SKILL.md +2 -0
- package/templates/skills/hai-app-create/development.md +3 -3
- package/templates/skills/hai-app-create/logging.md +32 -0
- package/templates/skills/hai-app-create/project.md +1 -0
- package/templates/skills/hai-app-create/reference.md +2 -4
- package/templates/skills/hai-app-review/SKILL.md +1 -1
- package/templates/skills/hai-audit/SKILL.md +1 -1
- package/templates/skills/hai-audit/reference.md +1 -1
- package/templates/skills/hai-build/SKILL.md +1 -1
- package/templates/skills/hai-build/paths.md +1 -1
- package/templates/skills/hai-core/reference.md +2 -11
- package/templates/skills/hai-crypto/SKILL.md +1 -1
- package/templates/skills/hai-crypto/reference.md +3 -3
- package/templates/skills/hai-deploy/SKILL.md +8 -8
- package/templates/skills/hai-deploy/middleware.md +2 -2
- package/templates/skills/hai-framework-sync/SKILL.md +4 -4
- package/templates/skills/hai-iam/SKILL.md +1 -1
- package/templates/skills/hai-iam/reference.md +1 -1
- package/templates/skills/hai-kit/SKILL.md +2 -2
- package/templates/skills/hai-kit/reference.md +3 -3
- package/templates/skills/hai-reach/SKILL.md +1 -1
- package/templates/skills/hai-reldb/SKILL.md +1 -1
- package/templates/skills/hai-reldb/reference.md +2 -3
- package/templates/skills/hai-scheduler/reference.md +1 -1
- package/templates/skills/hai-serv/SKILL.md +1 -1
- package/templates/skills/hai-serv/reference.md +2 -2
- package/templates/skills/hai-storage/SKILL.md +1 -0
- package/templates/skills/hai-storage/reference.md +14 -4
- package/templates/skills/hai-vecdb/reference.md +1 -1
- package/dist/chunk-2ZL5ORQ2.js.map +0 -1
- package/dist/chunk-L53P43B2.js.map +0 -1
- package/dist/cli-config-templates-LWMD2I6V.js +0 -5
- package/templates/skills/hai-deploy/credentials.md +0 -19
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
#!/usr/bin/env node
|
|
2
|
-
export { generateConfigFile, generateEnvExample, generateProductionEnvironment } from './chunk-L53P43B2.js';
|
|
3
|
-
import './chunk-ZSDEVXZ7.js';
|
|
4
|
-
//# sourceMappingURL=cli-config-templates-LWMD2I6V.js.map
|
|
5
|
-
//# sourceMappingURL=cli-config-templates-LWMD2I6V.js.map
|
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
# 旧部署凭据导入
|
|
2
|
-
|
|
3
|
-
缺状态且已有卷时必须继续拒绝普通部署，不能删除卷或拿新随机密码替代。导入工具在目标 Linux 服务器运行，需要受支持的 Node 及同版本 CLI/deploy；常规离线部署仍无需 Node。
|
|
4
|
-
|
|
5
|
-
先停止业务写入、排除旧部署进程，备份 DB、对象、数据卷、凭据、current 和成功发布目录。原服务保持运行用于只读认证；S3 还需要同项目且共享网络的 `hai-<projectName>-app` Node 容器。
|
|
6
|
-
|
|
7
|
-
准备非软链接、0600 的私有 JSON：version=1，projectName 为含环境后缀但不含 hai- 前缀的部署名；credentials 只列 DB_PASSWORD / STORAGE_PASSWORD / LDAP_PASSWORD 中实际需要的组；services 列 service、kind、container、volumes。db/vecdb 对应同一 DB_PASSWORD，kind 支持 postgresql/mysql；storage 对应 s3；ldap 对应 ldap。用户名/数据库默认 hai；S3 accessKeyId/bucket/region 默认 hai-storage/hai/us-east-1；LDAP bindDn 默认 cn=admin,dc=example,dc=org。这些是受管 sidecar 固定身份，自定义账户/库/桶/region/DN 不导入，应继续作为外部中间件配置保留。MySQL app/root 必须使用同一凭据，且分别通过正确密码成功、错误密码认证拒绝的正反验证。PostgreSQL 预检需要支持 require_auth 的 libpq 16+ 客户端，连接非 loopback 容器地址并要求实际密码认证，不能用 trust 成功代替密码有效。所有值和实际旧服务核对，不从不可信旧包猜测密码。
|
|
8
|
-
|
|
9
|
-
```sh
|
|
10
|
-
hai deploy-secrets /opt/hai/apps/shop-test --import /private/shop-import.json --runtime docker
|
|
11
|
-
# 预检核验项目标签、服务标签、实际卷和真实凭据，不写状态或锁。
|
|
12
|
-
hai deploy-secrets /opt/hai/apps/shop-test --import /private/shop-import.json --runtime docker --apply
|
|
13
|
-
```
|
|
14
|
-
|
|
15
|
-
SDK `importDeploymentSecrets({ directory, inputFile, runtime })` 默认 dryRun:true；只有显式 false 提交。提交在固定部署 flock 内由持锁进程原子写入 v2 状态，权限0600。密码保留特殊字符和 Unicode，但拒绝空值/控制字符；十六进制只是编码，状态和备份仍须作为秘密保护。工具不停止服务、不轮换密码、不推进 current、不创建成功基线，不接受不同项目/卷或损坏状态。
|
|
16
|
-
|
|
17
|
-
后续用当前 CLI、原项目/卷身份生成新 ID 完整包；无 current 的首次接管必须全量，不带 --services，不用部分制品，完整成功后才可增量。对于账本未认领的 db/storage/vecdb 卷，合法 v2 的项目、组、精确卷绑定须与唯一运行原容器的真实角色标签（Docker/Podman namespace均不得冲突）、Mounts、Config.Image 家族全部吻合；db/vecdb 共组不等于同角色。FORMAT1、停止容器或任一证据缺失均拒绝，已知 ledger/context/daemon 身份冲突不能用导入覆盖。
|
|
18
|
-
|
|
19
|
-
失败时检查 error.ext.phase/state；unknown 先核对服务器状态，不能据此自动重复部署。相同输入可重复核验。中断 next 文件不作为已提交状态；确认无相关进程后只清理本次文件。状态丢失优先恢复受保护备份，或用可信旧凭据重新验证导入。核对旧 DB/S3 数据后再恢复写入；导入不恢复数据或执行格式迁移，轮换另行计划。
|