@h-ai/cli 0.1.0-alpha.20 → 0.1.0-alpha.22

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@h-ai/cli",
   "type": "module",
-  "version": "0.1.0-alpha.20",
+  "version": "0.1.0-alpha.22",
   "description": "Hai Framework CLI for project scaffolding and code generation.",
   "license": "Apache-2.0",
   "keywords": [
@@ -34,7 +34,7 @@
     "ora": "^9.1.0",
     "prompts": "^2.4.2",
     "yaml": "^2.7.0",
-    "@h-ai/core": "0.1.0-alpha.20"
+    "@h-ai/core": "0.1.0-alpha.22"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",
@@ -52,6 +52,7 @@
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "test": "vitest run",
+    "test:e2e": "pnpm test:scaffold-gates",
     "test:scaffold-gates": "pnpm build && node tests/run-scaffold-gates.mjs",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",

package/templates/README.md

@@ -9,13 +9,13 @@ templates/
 ├── base/                    # 所有应用类型共用的骨架文件
 │   ├── package.json.hbs     # 动态：按 features 注入依赖
 │   ├── vite.config.ts.hbs   # 动态：按 hasI18n / hasUi 注入插件
-│   ├── tsconfig.json
-│   ├── svelte.config.js
-│   ├── .gitignore
+│   ├── tsconfig.json.hbs    # 动态：SvelteKit / 纯 Svelte 5 分支
+│   ├── svelte.config.js.hbs # 动态：SvelteKit / 纯 Svelte 5 分支
+│   ├── .gitignore.hbs      # 动态：纯 Svelte 5 应用不输出 .svelte-kit
 │   ├── playwright.config.ts
 │   └── src/
-│       ├── app.html.hbs         # 动态：i18n 时输出 %lang% 占位符
-│       ├── app.d.ts
+│       ├── app.html.hbs         # 动态：SvelteKit 应用输出 app shell
+│       ├── app.d.ts.hbs         # 动态：SvelteKit 应用输出 App namespace
 │       ├── app.css
 │       ├── hooks.server.ts.hbs  # 动态：按 features / hasI18n 组装 handle 序列
 │       └── lib/server/
@@ -33,6 +33,10 @@ templates/
 │   │   └── src/routes/
 │   ├── api/                 # 纯 API 服务（无 UI / 无 i18n）
 │   │   └── src/routes/
+│   ├── mobile-app/          # Svelte 5 + Vite + Capacitor 移动应用
+│   │   ├── index.html.hbs
+│   │   ├── messages/
+│   │   └── src/App.svelte.hbs
 │   └── fullstack/           # 前后端分离多包工程（contract / serv / web / app / desktop / miniapp 占位）
 │       ├── packages/        # 共享 contract 与后端 serv 包
 │       ├── apps/            # 多前端目标，按用户选择条件生成
@@ -52,17 +56,20 @@ templates/
 │   └── project.inlang/
 │       └── settings.json    # Paraglide 项目配置
 │
-└── skills/                  # AI Skill 单一来源模板（分发到 .agents/skills/）
+└── skills/                  # AI Skill 与各 appType 桥接指引
+    └── bridges/             # admin / api / website / h5 / mobile-app / fullstack 专属 AGENTS/Copilot/Claude
 ```
 
 ## AI Skill 模板（Single Source of Truth）
 
 `templates/skills/` 是 CLI 生成共享 AI 上下文时的单一来源，同时用于 `hai create` 与 `hai add`。
 
-- 每个 Skill 目录会复制到 `.agents/skills/<skill>/`
-- `copilot-instructions.md` 会复制到 `.github/copilot-instructions.md`，并引导 Copilot/其他助手读取 `.agents/skills/`
-- `AGENTS.md`、`CLAUDE.md`、`opencode.json` 会复制到项目根目录
-- `opencode.json` 使用 OpenCode 的 `instructions` 与 `skills.paths` 配置，将项目级指令与 Skill 目录显式指向 `AGENTS.md` 和 `.agents/skills/`
+- `hai create` 会把 `templates/skills/` 下所有 `hai-*` Skill 目录复制到 `.agents/skills/<skill>/`，再按 appType 排除互斥项（例如 fullstack 不复制 `hai-kit`；admin / website / h5 不复制 `hai-serv`、`hai-api-contract`、`hai-api-client`、`hai-capacitor`；mobile-app 不复制 `hai-core`、`hai-kit`、`hai-serv`、`hai-api-contract`）
+- `bridges/<appType>/copilot-instructions.md` 会复制到 `.github/copilot-instructions.md`；没有专属文件时回退到通用桥接文件
+- `bridges/<appType>/AGENTS.md`、`bridges/<appType>/CLAUDE.md` 会复制到项目根目录，确保不同样板工程使用自己的 AI 指引
+- `opencode.json` 会复制到项目根目录
+- `templates/skills/AGENTS.md`、`CLAUDE.md`、`copilot-instructions.md` 与 `opencode.json` 不是多余副本：它们是 generic fallback，主要服务于缺少 appType 上下文时的桥接复制与 `hai add` 回填 AI 支持
+- `opencode.json` 使用 OpenCode 的 `instructions` 配置复用 `.github/copilot-instructions.md`；`.agents/skills/` 由 OpenCode 原生发现，不再写入过期的 `skills.paths`
 - `CLAUDE.md` 作为 Claude Code 的原生项目指引入口，并通过 `@AGENTS.md` 复用共享规范；`.agents/skills/` 仍是共享参考目录，而非 Claude Code 的原生 project skills 目录
 - `hai add` 只补齐缺失的 AI 支持文件，不覆盖用户已自定义的桥接文件，也不会自动删除遗留的 `.github/skills/`
 
@@ -77,23 +84,27 @@ templates/
 
 所有 `.hbs` 文件可使用以下变量：
 
-| 变量                   | 类型      | 说明                                         |
-| ---------------------- | --------- | -------------------------------------------- |
-| `{{projectName}}`      | `string`  | 项目名称（如 `my-app`）                      |
-| `{{appType}}`          | `string`  | 应用类型：`admin` / `website` / `h5` / `api` |
-| `{{hasUi}}`            | `boolean` | 是否包含 UI（非 `api` 类型为 `true`）        |
-| `{{hasI18n}}`          | `boolean` | 是否启用 i18n（非 `api` 类型为 `true`）      |
-| `{{defaultLocale}}`    | `string`  | 默认语言，如 `zh-CN`                         |
-| `{{packageManager}}`   | `string`  | 包管理器：`pnpm` / `npm` / `yarn`            |
-| `{{fullstack.*}}`      | `object`  | fullstack 类型专用上下文                     |
-| `{{features.iam}}`     | `boolean` | 是否选中 iam feature                         |
-| `{{features.db}}`      | `boolean` | 是否选中 db feature                          |
-| `{{features.cache}}`   | `boolean` | 是否选中 cache feature                       |
-| `{{features.crypto}}`  | `boolean` | 是否选中 crypto feature                      |
-| `{{features.storage}}` | `boolean` | 是否选中 storage feature                     |
-| `{{features.ai}}`      | `boolean` | 是否选中 ai feature                          |
-
-`fullstack.*` 包含包名、前端选择、依赖版本和 `contractExportName`，用于渲染 contract / serv / 多端 UI 的模板。
+| 变量                   | 类型      | 说明                                      |
+| ---------------------- | --------- | ----------------------------------------- |
+| `{{projectName}}`      | `string`  | 项目名称（如 `my-app`）                   |
+| `{{appType}}`          | `string`  | 应用类型                                  |
+| `{{hasUi}}`            | `boolean` | 是否包含 UI（非 `api` 类型为 `true`）     |
+| `{{hasI18n}}`          | `boolean` | 是否启用 i18n（非 `api` 类型为 `true`）   |
+| `{{isSvelteOnlyApp}}`  | `boolean` | 是否为不依赖 SvelteKit 的纯 Svelte 5 应用 |
+| `{{isCapacitorApp}}`   | `boolean` | 是否为 Capacitor 移动应用                 |
+| `{{defaultLocale}}`    | `string`  | 默认语言，如 `zh-CN`                      |
+| `{{packageManager}}`   | `string`  | 包管理器：`pnpm` / `npm` / `yarn`         |
+| `{{fullstack.*}}`      | `object`  | fullstack 类型专用上下文                  |
+| `{{features.iam}}`     | `boolean` | 是否选中 iam feature                      |
+| `{{features.db}}`      | `boolean` | 是否选中 db feature                       |
+| `{{features.cache}}`   | `boolean` | 是否选中 cache feature                    |
+| `{{features.crypto}}`  | `boolean` | 是否选中 crypto feature                   |
+| `{{features.storage}}` | `boolean` | 是否选中 storage feature                  |
+| `{{features.ai}}`      | `boolean` | 是否选中 ai feature                       |
+
+`appType` 支持 `admin` / `website` / `h5` / `api` / `mobile-app` / `fullstack`。
+
+`fullstack.*` 包含包名、前端选择、依赖版本、`contractExportName` 和原生壳 `nativeAppIdSegment`，用于渲染 contract / serv / 多端 UI / Capacitor / Tauri 模板。
 
 ### 常用条件写法
 
@@ -116,8 +127,8 @@ import { iam } from '@h-ai/iam'
 模板引擎执行 6 个步骤：
 
 1. **复制 `base/` 静态文件** → 项目根
-2. **复制 `apps/{appType}/` 路由** → 项目根（`messages/` 仅 `hasI18n` 时复制）
-3. **叠加 feature 静态路由** → `src/routes/`
+2. **复制 `apps/{appType}/` 专属文件** → 项目根（`messages/` 仅 `hasI18n` 时复制）
+3. **叠加 feature 静态路由** → `src/routes/`（纯 Svelte 5 应用跳过 SvelteKit 路由）
 4. **渲染所有 `.hbs` 文件** — `base/` + `apps/{appType}/` 输出到项目根；`features/*/routes*/` 输出到 `src/routes/`
 5. **复制 `i18n/` 脚手架** → 项目根（仅 `hasI18n` 时）
 6. **确保 `static/` 目录存在**

package/templates/apps/api/apps/{{projectName}}-contract/README.md.hbs

@@ -0,0 +1,16 @@
+# {{api.contractPackageName}}
+
+{{projectName}} API service 的共享 contract 包。
+
+## 包含内容
+
+- `app-contract.ts`：应用级路由定义
+- `app-schemas.ts`：输入输出 Zod schema
+- `{{projectName}}-contract.ts`：工程级 contract 聚合入口
+
+## 常用命令
+
+```bash
+pnpm --filter {{api.contractPackageName}} build
+pnpm --filter {{api.contractPackageName}} test
+```

package/templates/apps/api/apps/{{projectName}}-contract/package.json.hbs

@@ -0,0 +1,38 @@
+{
+  "name": "{{api.contractPackageName}}",
+  "type": "module",
+  "version": "0.1.0",
+  "private": true,
+  "license": "MIT",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rimraf dist .turbo"
+  },
+  "dependencies": {
+    "@h-ai/api-contract": "{{haiPackageSpecifier}}",
+    "zod": "{{api.packageSpecifiers.zod}}"
+  },
+  "devDependencies": {
+    "@types/node": "{{api.packageSpecifiers.nodeTypes}}",
+    "rimraf": "{{api.packageSpecifiers.rimraf}}",
+    "tsup": "{{api.packageSpecifiers.tsup}}",
+    "typescript": "{{api.packageSpecifiers.typescript}}",
+    "vitest": "{{api.packageSpecifiers.vitest}}"
+  }
+}

package/templates/apps/api/apps/{{projectName}}-contract/src/app-contract.ts.hbs

@@ -0,0 +1,27 @@
+import { apiContract } from '@h-ai/api-contract'
+import { AppEchoInputSchema, AppEchoOutputSchema, AppInfoOutputSchema } from './app-schemas.js'
+
+/** 应用自有 app contract。 */
+export const appContract = {
+  info: apiContract
+    .route({
+      method: 'POST',
+      path: '/app/info',
+      operationId: 'app.info',
+      summary: 'Get service info',
+      tags: ['app'],
+    })
+    .output(AppInfoOutputSchema),
+  echo: apiContract
+    .route({
+      method: 'POST',
+      path: '/app/echo',
+      operationId: 'app.echo',
+      summary: '{{#if features.iam}}Echo a message (auth required){{else}}Echo a message{{/if}}',
+      tags: ['app'],
+    })
+    .input(AppEchoInputSchema)
+    .output(AppEchoOutputSchema),
+}
+
+export type AppContract = typeof appContract

package/templates/apps/api/apps/{{projectName}}-contract/src/app-schemas.ts.hbs

@@ -0,0 +1,33 @@
+import { apiContract } from '@h-ai/api-contract'
+import { z } from 'zod'
+
+/** 服务元信息响应数据。 */
+export const AppInfoOutputDataSchema = z.object({
+  name: z.string(),
+  version: z.string(),
+  uptimeMs: z.number().int().nonnegative(),
+  transportEnabled: z.boolean(),
+})
+
+/** app.info 标准 HaiResult 输出。 */
+export const AppInfoOutputSchema = apiContract.haiResultSchema(AppInfoOutputDataSchema)
+
+/** 输入：单条文本消息（演示用，限制最大长度防止误用）。 */
+export const AppEchoInputSchema = z.object({
+  message: z.string().min(1).max(2000),
+})
+
+/** 输出：原样回显 + 调用者快照。 */
+export const AppEchoOutputDataSchema = z.object({
+  message: z.string(),
+  requestId: z.string(),
+  timestamp: z.string(),
+  userId: z.string().optional(),
+})
+
+/** app.echo 标准 HaiResult 输出。 */
+export const AppEchoOutputSchema = apiContract.haiResultSchema(AppEchoOutputDataSchema)
+
+export type AppInfoOutputData = z.infer<typeof AppInfoOutputDataSchema>
+export type AppEchoInput = z.infer<typeof AppEchoInputSchema>
+export type AppEchoOutputData = z.infer<typeof AppEchoOutputDataSchema>

package/templates/apps/api/apps/{{projectName}}-contract/src/index.ts.hbs

@@ -0,0 +1,3 @@
+export * from './app-contract.js'
+export * from './app-schemas.js'
+export * from './{{projectName}}-contract.js'

package/templates/apps/api/apps/{{projectName}}-contract/src/{{projectName}}-contract.ts.hbs

@@ -0,0 +1,12 @@
+import { apiContract } from '@h-ai/api-contract'
+import { appContract } from './app-contract.js'
+
+/** 工程级应用 contract。 */
+export const {{api.contractExportName}} = apiContract.create({
+{{#if features.iam}}  iam: apiContract.iam,
+{{/if}}{{#if features.storage}}  storage: apiContract.storage,
+{{/if}}{{#if features.ai}}  ai: apiContract.ai,
+{{/if}}  app: appContract,
+})
+
+export type ApiWorkspaceContract = typeof {{api.contractExportName}}

package/templates/apps/api/apps/{{projectName}}-contract/tests/contract.test.ts.hbs

@@ -0,0 +1,18 @@
+import { describe, expect, it } from 'vitest'
+import { AppEchoInputSchema, {{api.contractExportName}} } from '../src/index.js'
+
+describe('{{api.contractPackageName}}', () => {
+  it('includes generated contract routes', () => {
+    expect({{api.contractExportName}}.app.info).toBeDefined()
+    expect({{api.contractExportName}}.app.echo).toBeDefined()
+{{#if features.iam}}    expect({{api.contractExportName}}.iam.auth.login).toBeDefined()
+{{/if}}{{#if features.storage}}    expect({{api.contractExportName}}.storage.presignedUrls.createUpload).toBeDefined()
+{{/if}}{{#if features.ai}}    expect({{api.contractExportName}}.ai.chats.createCompletion).toBeDefined()
+{{/if}}  })
+
+  it('validates app.echo input length', () => {
+    expect(AppEchoInputSchema.safeParse({ message: 'hello' }).success).toBe(true)
+    expect(AppEchoInputSchema.safeParse({ message: '' }).success).toBe(false)
+    expect(AppEchoInputSchema.safeParse({ message: 'x'.repeat(2001) }).success).toBe(false)
+  })
+})

package/templates/apps/api/apps/{{projectName}}-contract/tsconfig.json.hbs

@@ -0,0 +1,12 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {},
+  "include": [
+    "src/**/*"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "tests"
+  ]
+}

package/templates/apps/api/apps/{{projectName}}-contract/tsup.config.ts.hbs

@@ -0,0 +1,11 @@
+import { defineConfig } from 'tsup'
+
+export default defineConfig({
+  entry: { index: 'src/index.ts' },
+  format: ['esm'],
+  target: 'node22',
+  sourcemap: true,
+  clean: true,
+  dts: true,
+  external: ['@h-ai/api-contract', 'zod'],
+})

package/templates/apps/api/apps/{{projectName}}-contract/vitest.config.ts.hbs

@@ -0,0 +1,9 @@
+import { defineConfig } from 'vitest/config'
+
+export default defineConfig({
+  test: {
+    globals: true,
+    environment: 'node',
+    include: ['tests/**/*.test.ts'],
+  },
+})

package/templates/apps/api/apps/{{projectName}}-service/README.md.hbs

@@ -0,0 +1,17 @@
+# {{api.servicePackageName}}
+
+{{projectName}} API service 包，负责模块初始化、procedure 装配与 HTTP 入口。
+
+## 常用命令
+
+```bash
+pnpm --filter {{api.servicePackageName}} dev
+pnpm --filter {{api.servicePackageName}} test
+```
+
+## 关键目录
+
+- `config/`：service 配置
+- `src/app.ts`：HTTP App 装配
+- `src/lib/server/init.ts`：模块初始化与关闭
+- `src/server/procedures/`：应用级 procedures

package/templates/apps/api/apps/{{projectName}}-service/config/_core.yml.hbs

@@ -0,0 +1,19 @@
+# =============================================================================
+# {{projectName}} API Service - 应用配置
+# =============================================================================
+
+name: {{projectName}} API Service
+version: 0.1.0
+env: ${HAI_ENV:development}
+debug: false
+
+defaultLocale: {{defaultLocale}}
+supportedLocales:
+{{#if_eq defaultLocale 'en-US'}}  - en-US
+  - zh-CN
+{{else}}  - zh-CN
+  - en-US
+{{/if_eq}}
+
+features:
+  apiAccess: true

package/templates/apps/api/apps/{{projectName}}-service/config/_serv.yml.hbs

@@ -0,0 +1,26 @@
+# =============================================================================
+# {{projectName}} API Service - Serv / HTTP 入口配置
+# =============================================================================
+
+http:
+  apiPrefix: /api/v1
+  openapi:
+    path: /openapi.json
+  docs:
+    path: /docs
+  health:
+    path: /health
+    readyPath: /ready
+  rpc: false
+
+{{#if features.crypto}}transport:
+  keyExchangePath: /_hai/key-exchange
+  excludePaths:
+    - /health
+    - /ready
+    - /openapi.json
+    - /docs
+    - /_hai/scalar.js
+  maxClients: 10000
+{{else}}transport: false
+{{/if}}

package/templates/apps/api/apps/{{projectName}}-service/package.json.hbs

@@ -0,0 +1,55 @@
+{
+  "name": "{{api.servicePackageName}}",
+  "type": "module",
+  "version": "0.1.0",
+  "private": true,
+  "license": "MIT",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rimraf dist .turbo",
+    "dev": "pnpm build && node dist/index.js",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@h-ai/core": "{{haiPackageSpecifier}}",
+    "@h-ai/serv": "{{haiPackageSpecifier}}",
+    "{{api.contractPackageName}}": "workspace:*"{{#if features.ai}},
+    "@h-ai/ai": "{{haiPackageSpecifier}}"{{/if}}{{#if features.audit}},
+    "@h-ai/audit": "{{haiPackageSpecifier}}"{{/if}}{{#if features.cache}},
+    "@h-ai/cache": "{{haiPackageSpecifier}}"{{/if}}{{#if features.crypto}},
+    "@h-ai/crypto": "{{haiPackageSpecifier}}"{{/if}}{{#if features.datapipe}},
+    "@h-ai/datapipe": "{{haiPackageSpecifier}}"{{/if}}{{#if features.deploy}},
+    "@h-ai/deploy": "{{haiPackageSpecifier}}"{{/if}}{{#if features.iam}},
+    "@h-ai/iam": "{{haiPackageSpecifier}}"{{/if}}{{#if features.payment}},
+    "@h-ai/payment": "{{haiPackageSpecifier}}"{{/if}}{{#if features.reach}},
+    "@h-ai/reach": "{{haiPackageSpecifier}}"{{/if}}{{#if features.db}},
+    "@h-ai/reldb": "{{haiPackageSpecifier}}"{{/if}}{{#if features.scheduler}},
+    "@h-ai/scheduler": "{{haiPackageSpecifier}}"{{/if}}{{#if features.storage}},
+    "@h-ai/storage": "{{haiPackageSpecifier}}"{{/if}}{{#if features.vecdb}},
+    "@h-ai/vecdb": "{{haiPackageSpecifier}}"{{/if}}
+  },
+  "devDependencies": {
+    "@h-ai/api-client": "{{haiPackageSpecifier}}",
+    "@types/node": "{{api.packageSpecifiers.nodeTypes}}",
+    "rimraf": "{{api.packageSpecifiers.rimraf}}",
+    "tsup": "{{api.packageSpecifiers.tsup}}",
+    "typescript": "{{api.packageSpecifiers.typescript}}",
+    "vitest": "{{api.packageSpecifiers.vitest}}"
+  }
+}

package/templates/apps/api/apps/{{projectName}}-service/src/app.ts.hbs

@@ -0,0 +1,98 @@
+import type { ServConfig } from '@h-ai/serv'
+import { core } from '@h-ai/core'
+{{#if features.crypto}}import { crypto, TRANSPORT_PROTOCOL } from '@h-ai/crypto'
+{{/if}}{{#if features.iam}}import { iam } from '@h-ai/iam'
+{{/if}}import { serv } from '@h-ai/serv'
+import { {{api.contractExportName}} } from '{{api.contractPackageName}}'
+import pkg from '../package.json' with { type: 'json' }
+import { {{api.serviceProceduresFactoryName}} } from './server/procedures/index.js'
+
+const startedAt = Date.now()
+
+interface CreateApiServiceAppOptions {
+  transport?: 'config' | 'disabled'
+  refreshCookie?: 'enabled' | 'disabled'
+}
+
+const LOOPBACK_ORIGIN_RE = /^https?:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?::\d+)?$/
+const WEBVIEW_ORIGINS = new Set([
+  'capacitor://localhost',
+  'http://localhost',
+  'https://tauri.localhost',
+  'tauri://localhost',
+])
+const DEFAULT_CORS_ALLOWED_HEADERS = [
+  'Authorization',
+  'Content-Type',
+{{#if features.crypto}}  TRANSPORT_PROTOCOL.CLIENT_ID_HEADER,
+  TRANSPORT_PROTOCOL.ENCRYPTED_HEADER,
+{{/if}}  'X-Hai-Locale',
+  'X-Request-Id',
+  'X-Requested-With',
+]
+
+/** 创建 API Service HTTP 应用。 */
+export function {{api.serviceAppFactoryName}}(_options: CreateApiServiceAppOptions = {}) {
+  const servConfig = core.config.getOrThrow<ServConfig>('serv')
+{{#if features.crypto}}  const transportMode = _options.transport ?? 'config'
+  const transport = transportMode === 'disabled' || servConfig.transport === false
+    ? undefined
+    : {
+        crypto,
+        keyExchangePath: servConfig.transport.keyExchangePath,
+        excludePaths: [...servConfig.transport.excludePaths],
+        maxClients: servConfig.transport.maxClients,
+      }
+{{else}}  const transport = undefined
+{{/if}}
+{{#if features.iam}}
+  const refreshCookie = _options.refreshCookie === 'disabled' ? undefined : {}
+{{/if}}
+
+  const appOptions: Parameters<typeof serv.createApp>[0] = {
+    contract: {{api.contractExportName}},
+    procedures: {{api.serviceProceduresFactoryName}}({
+      app: {
+        info: {
+          name: pkg.name,
+          version: pkg.version,
+          transportEnabled: transport !== undefined,
+        },
+        startedAt,
+      },
+    }),
+    http: servConfig.http,
+{{#if features.iam}}
+    iam,
+{{/if}}
+    middlewares: [
+      {
+        middleware: serv.cors({
+          origin: origin => resolveCorsOrigin(origin) !== null,
+{{#if features.iam}}          credentials: true,
+{{/if}}          allowedHeaders: DEFAULT_CORS_ALLOWED_HEADERS,{{#if features.crypto}}
+          exposedHeaders: [TRANSPORT_PROTOCOL.ENCRYPTED_HEADER, 'X-Request-Id'],{{/if}}
+        }),
+      },
+    ],
+  }
+{{#if features.iam}}
+
+  appOptions.refreshCookie = refreshCookie
+{{/if}}{{#if features.crypto}}
+  if (transport)
+    appOptions.transport = transport
+{{/if}}
+
+  return serv.createApp(appOptions)
+}
+
+function resolveCorsOrigin(origin: string | undefined): string | null {
+  if (!origin)
+    return null
+  if (WEBVIEW_ORIGINS.has(origin))
+    return origin
+  if (LOOPBACK_ORIGIN_RE.test(origin))
+    return origin
+  return null
+}

package/templates/apps/api/apps/{{projectName}}-service/src/index.ts.hbs

@@ -0,0 +1,21 @@
+import process from 'node:process'
+import { core } from '@h-ai/core'
+import { serv } from '@h-ai/serv'
+import { {{api.serviceAppFactoryName}} } from './app.js'
+import { closeApp, initApp } from './lib/server/init.js'
+
+const logger = core.logger.child({ app: '{{api.servicePackageName}}', scope: 'entrypoint' })
+
+async function main(): Promise<void> {
+  await initApp()
+
+  serv.listen({{api.serviceAppFactoryName}}(), {
+    onListening: info => logger.info('API service listening', { address: info.address, port: info.port }),
+    onClose: closeApp,
+  })
+}
+
+main().catch((error: unknown) => {
+  logger.error('API service failed to start', { error })
+  process.exitCode = 1
+})