@h-ai/cli 0.1.0-alpha.56 → 0.1.0-alpha.58

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@h-ai/cli",
   "type": "module",
-  "version": "0.1.0-alpha.56",
+  "version": "0.1.0-alpha.58",
   "description": "Hai Framework CLI for project scaffolding and code generation.",
   "license": "Apache-2.0",
   "keywords": [
@@ -27,36 +27,36 @@
     "access": "public"
   },
   "engines": {
-    "node": ">=22.12.0"
+    "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
   },
   "dependencies": {
-    "cac": "^7.0.0",
-    "chalk": "^5.4.1",
-    "fs-extra": "^11.2.0",
-    "handlebars": "^4.7.8",
-    "ora": "^9.1.0",
+    "@h-ai/core": "0.1.0-alpha.58",
+    "cac": "^7.0.1",
+    "chalk": "^6.0.1",
+    "fs-extra": "^11.4.1",
+    "handlebars": "^4.7.10",
+    "ora": "^9.4.1",
     "prompts": "^2.4.2",
-    "yaml": "^2.7.0",
-    "@h-ai/core": "0.1.0-alpha.56"
+    "yaml": "^2.9.1"
   },
   "devDependencies": {
+    "@h-ai/cache": "0.1.0-alpha.58",
+    "@h-ai/deploy": "0.1.0-alpha.58",
+    "@h-ai/reach": "0.1.0-alpha.58",
+    "@h-ai/reldb": "0.1.0-alpha.58",
+    "@h-ai/storage": "0.1.0-alpha.58",
     "@types/fs-extra": "^11.0.4",
-    "@types/node": "^25.9.1",
+    "@types/node": "^26.6.5",
     "@types/prompts": "^2.4.9",
     "rimraf": "^6.1.3",
     "tsup": "^8.5.1",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.7",
-    "@h-ai/cache": "0.1.0-alpha.56",
-    "@h-ai/deploy": "0.1.0-alpha.56",
-    "@h-ai/reach": "0.1.0-alpha.56",
-    "@h-ai/reldb": "0.1.0-alpha.56",
-    "@h-ai/storage": "0.1.0-alpha.56"
+    "vitest": "^4.1.11"
   },
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "node ../../scripts/typecheck.mjs --noEmit",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "test": "vitest run",

package/templates/README.md

@@ -57,7 +57,7 @@ templates/
 │       └── settings.json    # Paraglide 项目配置
 │
 └── skills/                  # AI Skill 与各 appType 桥接指引
-    └── bridges/             # admin / api / website / h5 / mobile-app / fullstack 专属 AGENTS/Copilot/Claude
+    └── bridges/             # admin / api / website / h5 / mobile-app / fullstack 专属 AGENTS/Copilot
 ```
 
 ## AI Skill 模板（Single Source of Truth）
@@ -66,12 +66,12 @@ templates/
 
 - `hai create` 会把 `templates/skills/` 下所有 `hai-*` Skill 目录复制到 `.agents/skills/<skill>/`，再按 appType 排除互斥项（例如 fullstack 不复制 `hai-kit`；admin / website / h5 不复制 `hai-serv`、`hai-api-contract`、`hai-api-client`、`hai-capacitor`；mobile-app 不复制 `hai-core`、`hai-kit`、`hai-serv`、`hai-api-contract`）
 - `bridges/<appType>/copilot-instructions.md` 会复制到 `.github/copilot-instructions.md`；没有专属文件时回退到通用桥接文件
-- `bridges/<appType>/AGENTS.md`、`bridges/<appType>/CLAUDE.md` 会复制到项目根目录，确保不同样板工程使用自己的 AI 指引
+- `bridges/<appType>/AGENTS.md` 会复制到项目根目录，确保不同样板工程使用自己的 AI 指引；通用 `CLAUDE.md` 仅包含 `@AGENTS.md`
 - `opencode.json` 会复制到项目根目录
 - `templates/skills/AGENTS.md`、`CLAUDE.md`、`copilot-instructions.md` 与 `opencode.json` 不是多余副本：它们是 generic fallback，主要服务于缺少 appType 上下文时的桥接复制与 `hai add` 回填 AI 支持
 - `opencode.json` 使用 OpenCode 的 `instructions` 配置复用 `.github/copilot-instructions.md`；`.agents/skills/` 由 OpenCode 原生发现，不再写入过期的 `skills.paths`
-- `CLAUDE.md` 作为 Claude Code 的原生项目指引入口，并通过 `@AGENTS.md` 复用共享规范；`.agents/skills/` 仍是共享参考目录，而非 Claude Code 的原生 project skills 目录
-- `hai add` 只补齐缺失的 AI 支持文件，不覆盖用户已自定义的桥接文件，也不会自动删除遗留的 `.github/skills/`
+- `CLAUDE.md` 通过 `@AGENTS.md` 复用共享规范，Claude Code 按其中的任务导航读取 `.agents/skills/` 正文与参考。CLI 不生成 `.claude/` 技能副本；此模式不提供 Claude 原生技能自动发现或 `/skill` 命令。依据：[Claude Code 项目指引](https://code.claude.com/docs/en/memory)、[原生 skills](https://code.claude.com/docs/en/skills)
+- `hai add` / `hai init` 只补齐缺失的 AI 支持文件，不覆盖用户已自定义的桥接文件，也不会自动删除遗留的 `.github/skills/` 或 `.claude/`
 
 ## 文件类型说明
 

package/templates/apps/admin/src/routes/+layout.svelte.hbs

@@ -6,6 +6,9 @@
   import type { Snippet } from 'svelte'
 {{#if hasI18n}}
   import { browser } from '$app/environment'
+{{/if}}
+  import { page } from '$app/state'
+{{#if hasI18n}}
   import { getLocale } from '$lib/paraglide/runtime.js'
   import { setGlobalLocale } from '@h-ai/ui'
 {{/if}}
@@ -25,6 +28,10 @@
 {{/if}}
 </script>
 
+<svelte:head>
+  <title>{page.data.appConfig.name}</title>
+</svelte:head>
+
 <div class='min-h-screen bg-base-200'>
   {@render children()}
 </div>

package/templates/apps/admin/src/routes/+page.svelte.hbs

@@ -4,6 +4,7 @@
    * 管理后台首页 — 入口导航
    */
   import { resolve } from '$app/paths'
+  import { page } from '$app/state'
 {{#if hasI18n}}
   import * as m from '$lib/paraglide/messages'
 {{/if}}
@@ -12,9 +13,9 @@
 
 <svelte:head>
 {{#if hasI18n}}
-  <title>{m.app_title()}</title>
+  <title>{page.data.appConfig.name}</title>
 {{else}}
-  <title>管理后台</title>
+  <title>{page.data.appConfig.name}</title>
 {{/if}}
 </svelte:head>
 
@@ -27,7 +28,7 @@
         {m.page_home_badge()}
       </Badge>
     </div>
-    <h1 class='mt-4 text-4xl font-black tracking-tight'>{m.app_title()}</h1>
+    <h1 class='mt-4 text-4xl font-black tracking-tight'>{page.data.appConfig.name}</h1>
     <p class='mt-3 text-base-content/60'>{m.page_home_subtitle()}</p>
     <div class='mt-8 flex flex-wrap gap-3 justify-center'>
       <a href={resolve('/admin', {})} class='btn btn-primary'>
@@ -42,7 +43,7 @@
         由 hai 驱动
       </Badge>
     </div>
-    <h1 class='mt-4 text-4xl font-black tracking-tight'>管理后台</h1>
+    <h1 class='mt-4 text-4xl font-black tracking-tight'>{page.data.appConfig.name}</h1>
     <p class='mt-3 text-base-content/60'>基于 hai Agent Framework 构建</p>
     <div class='mt-8 flex flex-wrap gap-3 justify-center'>
       <a href={resolve('/admin', {})} class='btn btn-primary'>

package/templates/apps/admin/src/routes/admin/+layout.svelte.hbs

@@ -41,9 +41,9 @@
       <div class='flex items-center gap-2 px-2 mb-6 text-xl font-bold'>
         <span class='icon-[tabler--cube] size-6 text-primary'></span>
 {{#if hasI18n}}
-        {m.app_title()}
+        {page.data.appConfig.name}
 {{else}}
-        管理后台
+        {page.data.appConfig.name}
 {{/if}}
       </div>
       <ul class='gap-1'>

package/templates/apps/api/.gitignore.hbs

@@ -0,0 +1,13 @@
+node_modules
+.turbo
+dist
+build
+playwright-report
+test-results
+.env
+.env.*
+!.env.example
+!.env.example.hbs
+
+# hai deploy 产物（compose / .env.runtime / 镜像 tar / sidecar 凭据）
+.hai/

package/templates/apps/api/.npmrc.hbs

@@ -0,0 +1 @@
+# 注册表与认证可配置在此；pnpm 专属设置统一位于 pnpm-workspace.yaml。

package/templates/apps/api/Dockerfile.hbs

@@ -1,22 +1,23 @@
 # syntax=docker/dockerfile:1.7
-FROM node:22-bookworm-slim AS build
+FROM node:24-bookworm-slim AS build
 
 ENV PNPM_HOME=/pnpm
 ENV PATH=$PNPM_HOME:$PATH
 ENV CI=true
 WORKDIR /workspace
 
-RUN corepack enable && corepack prepare pnpm@9.15.0 --activate
+RUN corepack enable && corepack prepare pnpm@12.11.2 --activate
 COPY pnpm-lock.yaml pnpm-workspace.yaml ./
-RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm fetch --frozen-lockfile
+RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm fetch
 COPY . .
 RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm install --offline --frozen-lockfile --ignore-scripts
 RUN pnpm build
-RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm --filter {{api.servicePackageName}} --prod deploy /prod/app
+RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm pm deploy --filter {{api.servicePackageName}} --prod /prod/app
 
-FROM node:22-bookworm-slim AS runtime-base
+FROM node:24-bookworm-slim AS runtime-base
 
 ENV NODE_ENV=production
+ENV HAI_CORE_ENV=production
 ENV HOST=0.0.0.0
 ENV PORT=3000
 WORKDIR /app

package/templates/apps/api/apps/{{projectName}}-contract/package.json.hbs

@@ -1,5 +1,5 @@
 {
-  "engines": { "node": ">=22.12.0" },
+  "engines": { "node": "^22.22.2 || ^24.15.0 || >=26.0.0" },
   "name": "{{api.contractPackageName}}",
   "type": "module",
   "version": "0.1.0",

package/templates/apps/api/apps/{{projectName}}-contract/src/app-schemas.ts.hbs

@@ -4,6 +4,8 @@ import { z } from 'zod'
 export const AppInfoOutputDataSchema = z.object({
   name: z.string(),
   version: z.string(),
+  env: z.enum(['development', 'production', 'test', 'staging']),
+  defaultLocale: z.string(),
   uptimeMs: z.number().int().nonnegative(),
   transportEnabled: z.boolean(),
 })

package/templates/apps/api/apps/{{projectName}}-contract/tsup.config.ts.hbs

@@ -6,6 +6,6 @@ export default defineConfig({
   target: 'node22',
   sourcemap: true,
   clean: true,
-  dts: true,
+  dts: { compilerOptions: { ignoreDeprecations: '6.0' } },
   external: ['@h-ai/api-contract', 'zod'],
 })

package/templates/apps/api/apps/{{projectName}}-service/config/_core.yml.hbs

@@ -7,6 +7,14 @@ version: 0.1.0
 env: ${HAI_ENV:development}
 debug: ${HAI_DEBUG:false}
 
+logging:
+  level: info
+  format: json
+  redact:
+    - password
+    - token
+    - secret
+
 defaultLocale: {{defaultLocale}}
 supportedLocales:
 {{#if_eq defaultLocale 'en-US'}}  - en-US

package/templates/apps/api/apps/{{projectName}}-service/package.json.hbs

@@ -1,5 +1,5 @@
 {
-  "engines": { "node": ">=22.12.0" },
+  "engines": { "node": "^22.22.2 || ^24.15.0 || >=26.0.0" },
   "name": "{{api.servicePackageName}}",
   "type": "module",
   "version": "0.1.0",

package/templates/apps/api/apps/{{projectName}}-service/src/app.ts.hbs

@@ -1,10 +1,10 @@
+import type { CoreConfig } from '@h-ai/core'
 import type { ServConfig } from '@h-ai/serv'
 import { core } from '@h-ai/core'
 {{#if features.crypto}}import { crypto } from '@h-ai/crypto'
 {{/if}}{{#if features.iam}}import { iam } from '@h-ai/iam'
 {{/if}}import { serv } from '@h-ai/serv'
 import { {{api.contractExportName}} } from '{{api.contractPackageName}}'
-import pkg from '../package.json' with { type: 'json' }
 import { {{api.serviceProceduresFactoryName}} } from './server/procedures/index.js'
 
 const startedAt = Date.now()
@@ -14,15 +14,12 @@ interface CreateApiServiceAppOptions {
   refreshCookie?: 'enabled' | 'disabled'
 }
 
-interface AppCoreConfig {
-  readonly env?: string
-}
 /** 创建 API Service HTTP 应用。 */
 export function {{api.serviceAppFactoryName}}(_options: CreateApiServiceAppOptions = {}) {
   const servConfig = core.config.getOrThrow<ServConfig>('serv')
-  const coreConfig = core.config.get<AppCoreConfig>('core')
+  const coreConfig = core.config.getOrThrow<CoreConfig>('core')
   const security = serv.createRuntimeSecurityPolicy({
-    environment: coreConfig?.env,
+    environment: coreConfig.env,
     corsOrigin: servConfig.cors.origin,
     nativeOrigins: servConfig.cors.nativeOrigins,
   })
@@ -46,8 +43,10 @@ export function {{api.serviceAppFactoryName}}(_options: CreateApiServiceAppOptio
     procedures: {{api.serviceProceduresFactoryName}}({
       app: {
         info: {
-          name: pkg.name,
-          version: pkg.version,
+          name: coreConfig.name,
+          version: coreConfig.version,
+          env: coreConfig.env,
+          defaultLocale: coreConfig.defaultLocale,
           transportEnabled: transport !== undefined,
         },
         startedAt,

package/templates/apps/api/apps/{{projectName}}-service/src/index.ts.hbs

@@ -1,3 +1,4 @@
+import type { CoreConfig } from '@h-ai/core'
 import type { ServConfig } from '@h-ai/serv'
 import process from 'node:process'
 import { core } from '@h-ai/core'
@@ -5,10 +6,10 @@ import { serv } from '@h-ai/serv'
 import { {{api.serviceAppFactoryName}} } from './app.js'
 import { closeApp, initApp } from './lib/server/init.js'
 
-const logger = core.logger.child({ app: '{{api.servicePackageName}}', scope: 'entrypoint' })
-
 async function main(): Promise<void> {
   await initApp()
+  const config = core.config.getOrThrow<CoreConfig>('core')
+  const logger = core.logger.child({ app: config.name, scope: 'entrypoint' })
 
   // host/port 来自 config/_serv.yml 的 server（HOST/PORT 环境变量高于配置文件）。
   const { server } = core.config.getOrThrow<ServConfig>('serv')
@@ -21,6 +22,6 @@ async function main(): Promise<void> {
 }
 
 main().catch((error: unknown) => {
-  logger.error('API service failed to start', { error })
+  core.logger.error('API service failed to start', { error })
   process.exitCode = 1
 })

package/templates/apps/api/apps/{{projectName}}-service/src/lib/server/init.ts.hbs

@@ -42,7 +42,6 @@ export async function initApp(): Promise<void> {
 async function doInit(): Promise<void> {
   core.init({
     configDir: './config',
-    logging: { level: 'info' },
   })
 
   const servValidation = core.config.validate('serv', ServConfigSchema)

package/templates/apps/api/apps/{{projectName}}-service/src/server/procedures/app-procedures.ts.hbs

@@ -8,6 +8,8 @@ export interface AppProcedureDeps {
   readonly info: {
     readonly name: string
     readonly version: string
+    readonly env: AppInfoOutputData['env']
+    readonly defaultLocale: string
     readonly transportEnabled: boolean
   }
   readonly startedAt: number
@@ -22,6 +24,8 @@ export function createAppProcedures(deps: AppProcedureDeps) {
       const data: AppInfoOutputData = {
         name: deps.info.name,
         version: deps.info.version,
+        env: deps.info.env,
+        defaultLocale: deps.info.defaultLocale,
         transportEnabled: deps.info.transportEnabled,
         uptimeMs: Math.max(0, Date.now() - deps.startedAt),
       }

package/templates/apps/api/apps/{{projectName}}-service/tests/service.test.ts.hbs

@@ -1,3 +1,4 @@
+import type { CoreConfig } from '@h-ai/core'
 import type { ServConfig } from '@h-ai/serv'
 import type { AddressInfo } from 'node:net'
 import { mkdtempSync, rmSync } from 'node:fs'
@@ -130,7 +131,8 @@ describe('{{api.servicePackageName}}', () => {
 
     expect(result.success).toBe(true)
     if (result.success) {
-      expect(result.data.name).toContain('{{projectName}}')
+      const config = core.config.getOrThrow<CoreConfig>('core')
+      expect(result.data).toMatchObject({ name: config.name, version: config.version, env: config.env, defaultLocale: config.defaultLocale })
       expect(typeof result.data.transportEnabled).toBe('boolean')
     }
   })

package/templates/apps/api/e2e/api-service.spec.ts.hbs

@@ -1,5 +1,5 @@
-import { expect, test } from '@playwright/test'
 import { apiContract } from '@h-ai/api-contract'
+import { expect, test } from '@playwright/test'
 import { {{api.contractExportName}} } from '{{api.contractPackageName}}'
 
 const API_PREFIX = '/api/v1'
@@ -17,6 +17,8 @@ test('service app.info endpoint returns HaiResult', async ({ request }) => {
 
   expect(response.status()).toBe(200)
   expect(body.success).toBe(true)
-  expect(body.data.name).toContain('{{projectName}}')
+  expect(body.data.name).toBe(process.env.HAI_CORE_NAME ?? '{{projectName}} API Service')
+  expect(body.data.version).toBe(process.env.HAI_CORE_VERSION ?? '0.1.0')
+  expect(body.data.env).toBe(process.env.HAI_CORE_ENV ?? 'development')
   expect(typeof body.data.transportEnabled).toBe('boolean')
 })

package/templates/apps/api/{eslint.config.js → eslint.config.js.hbs}

@@ -1,11 +1,15 @@
-import antfu from '@antfu/eslint-config'
+import antfu, { GLOB_SRC } from '@antfu/eslint-config'
+import { haiQualityConfig } from './eslint-rules.js'
 
 export default antfu({
+  // unused-imports 使用 TS 规则，JS 同样使用 TS parser 以保持 scope 契约一致。
+  typescript: { files: [GLOB_SRC] },
   formatters: true,
   ignores: [
     '**/dist/**',
     '**/node_modules/**',
     '**/.agents/**',
+    '**/.claude/**',
     '**/.github/**',
     '**/AGENTS.md',
     '**/CLAUDE.md',
@@ -13,13 +17,7 @@ export default antfu({
     '**/opencode.json',
     '**/package.json',
   ],
-}, {
-  files: ['**/*.js', '**/*.mjs', '**/*.ts'],
-  rules: {
-    'no-console': 'error',
-    'ts/no-explicit-any': 'error',
-  },
-}, {
+}, haiQualityConfig, {
   files: ['**/tsconfig.json', '**/tsconfig.*.json'],
   rules: {
     'jsonc/sort-keys': 'off',

package/templates/apps/api/package.json.hbs

@@ -1,10 +1,10 @@
 {
-  "engines": { "node": ">=22.12.0" },
+  "engines": { "node": "^22.22.2 || ^24.15.0 || >=26.0.0" },
   "name": "{{projectName}}",
   "type": "module",
   "version": "0.1.0",
   "private": true,
-  "packageManager": "pnpm@9.15.0",
+  "packageManager": "pnpm@12.11.2",
   "description": "Typed hai API workspace with separated contract and service packages.",
   "scripts": {
     "dev": "pnpm --filter {{api.servicePackageName}} dev",
@@ -15,7 +15,7 @@
     "podman:build": "podman build --format docker --jobs=1 --target runtime -t {{projectName}}:latest .",
     "podman:build:data": "podman build --format docker --jobs=1 --target runtime-with-data --build-context embedded-data=./apps/{{projectName}}-service/data -t {{projectName}}:latest .",
     "typecheck": "pnpm --filter {{api.contractPackageName}} build && pnpm -r --if-present typecheck",
-    "lint": "pnpm -r --if-present lint",
+    "lint": "eslint *.js *.ts e2e && pnpm -r --if-present lint",
     "test": "pnpm --filter {{api.contractPackageName}} build && pnpm -r --if-present test",
     "test:e2e": "pnpm build && playwright test",
     "clean": "pnpm -r --if-present clean && rimraf node_modules .turbo"

package/templates/apps/api/pnpm-workspace.yaml.hbs

@@ -2,6 +2,32 @@
 shellEmulator: true
 
 trustPolicy: no-downgrade
+# 上游构建工具仍要求 4.x；4.0.3 tarball 已核对原 lockfile 的 SHA-512。
+trustPolicyExclude:
+  - chokidar@4.0.3
+
+# pnpm 12 配置；原生依赖仅运行明确列出的安装脚本。
+nodeLinker: hoisted
+allowBuilds:
+  cpu-features: true
+  onnxruntime-node: true
+  protobufjs: true
+  ssh2: true
+  vue-demi: true
+  better-sqlite3: true
+  esbuild: true
+  core-js: false
+
+overrides:
+  "@ai-sdk/provider-utils@>=4.0.0 <4.0.33": 4.0.57
+  cookie@<0.7.0: 0.7.2
+  esbuild@<0.28.1: 0.28.2
+  katex@<0.18.2: 0.18.10
+  sharp@<0.35.5: 0.35.5
+  tinypool@<2.1.2: 2.2.0
+  '@qdrant/js-client-rest>undici': 7.30.0
+  xcode>uuid: 11.1.1
+  "@types/node": "{{versions.nodeTypes}}"
 
 packages:
   - apps/*

package/templates/apps/api/tsconfig.base.json

@@ -3,7 +3,6 @@
     "target": "ES2022",
     "module": "ESNext",
     "moduleResolution": "bundler",
-    "ignoreDeprecations": "6.0",
     "resolveJsonModule": true,
     "strict": true,
     "esModuleInterop": true,

package/templates/apps/fullstack/.dockerignore.hbs

@@ -6,6 +6,9 @@ Dockerfile
 .codex
 .opencode
 .turbo
+.env
+.env.*
+!.env.example
 **/build
 **/dist
 **/node_modules

package/templates/apps/fullstack/.gitignore.hbs

@@ -0,0 +1,16 @@
+node_modules
+.turbo
+dist
+build
+**/src/lib/paraglide
+playwright-report
+test-results
+.env
+.env.*
+!.env.example
+!.env.example.hbs
+**/src-tauri/gen/
+**/src-tauri/target/
+
+# hai deploy 产物（compose / .env.runtime / 镜像 tar / sidecar 凭据）
+.hai/

package/templates/apps/fullstack/.npmrc.hbs

@@ -0,0 +1 @@
+# 注册表与认证可配置在此；pnpm 专属设置统一位于 pnpm-workspace.yaml。

package/templates/apps/fullstack/Dockerfile.hbs

@@ -1,25 +1,26 @@
 # syntax=docker/dockerfile:1.7
-FROM node:22-bookworm-slim AS build
+FROM node:24-bookworm-slim AS build
 
 ENV PNPM_HOME=/pnpm
 ENV PATH=$PNPM_HOME:$PATH
 ENV CI=true
 WORKDIR /workspace
 
-RUN corepack enable && corepack prepare pnpm@9.15.0 --activate
+RUN corepack enable && corepack prepare pnpm@12.11.2 --activate
 COPY pnpm-lock.yaml pnpm-workspace.yaml ./
-RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm fetch --frozen-lockfile
+RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm fetch
 COPY . .
 RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm install --offline --frozen-lockfile --ignore-scripts
 RUN pnpm build
 
 FROM build AS service-build
 
-RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm --filter {{fullstack.servPackageName}} --prod deploy /prod/service
+RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm pm deploy --filter {{fullstack.servPackageName}} --prod /prod/service
 
-FROM node:22-bookworm-slim AS service
+FROM node:24-bookworm-slim AS service
 
 ENV NODE_ENV=production
+ENV HAI_CORE_ENV=production
 ENV HOST=0.0.0.0
 ENV PORT=3000
 WORKDIR /app

package/templates/apps/fullstack/apps/{{projectName}}-app/README.md.hbs

@@ -2,14 +2,14 @@
 {{#if fullstack.frontends.app}}
 # {{projectName}}-app
 
-App/H5 前端工程，参考 `apps/mobile-app` 的移动端 UI 风格，使用 Svelte 5 + Vite + Capacitor，可输出 Web 预览并同步 Android / iOS 原生工程。
+App/H5 前端工程，复用 shared 的响应式 mini 后台，使用 Svelte 5 + Vite + Capacitor，可输出 Web 预览并同步 Android / iOS 原生工程。
 
 ## i18n 与 shared 协同
 
 - 本端页面文案：`messages/{locale}.json` + `project.inlang/settings.json`
 - 共享 Shell/主题/语言/API：`packages/{{fullstack.sharedPackageName}}`
 - 语言切换通过 shared runtime 与本端 `src/lib/paraglide/runtime.js` 同步。
-- 设置 tab 默认集成 shared 的 `ThemeSwitcher` / `LanguageSwitcher`，可直接验证主题与语言同步。
+- 个人设置提供头像、语言、风格与改密，管理员可打开用户、角色与审计日志页面。原生端使用 Capacitor 安全 TokenStorage；浏览器预览使用 httpOnly refresh Cookie。
 
 自定义建议：移动端独有引导、运营位、按钮文案放在本目录 `messages/`；跨端通用组件放到 shared。
 

package/templates/apps/fullstack/apps/{{projectName}}-app/capacitor.config.ts.hbs

@@ -5,7 +5,7 @@ import process from 'node:process'
 
 const config: CapacitorConfig = {
   appId: 'com.hai.{{fullstack.nativeAppIdSegment}}.app',
-  appName: '{{projectName}} App',
+  appName: {{jsString fullstack.appName}},
   webDir: 'dist',
   server: {
     // 仅用于 Capacitor live reload 前端页面；API 地址由前端配置或 shared client 参数控制。

package/templates/apps/fullstack/apps/{{projectName}}-app/eslint.config.js.hbs

@@ -1,18 +1,15 @@
 {{! @skipIfEmpty }}
 {{#if fullstack.frontends.app}}
-import antfu from '@antfu/eslint-config'
+import antfu, { GLOB_SRC } from '@antfu/eslint-config'
+import { haiQualityConfig } from '../../eslint-rules.js'
 
 export default antfu({
+  // unused-imports 使用 TS 规则，JS 同样使用 TS parser 以保持 scope 契约一致。
+  typescript: { files: [GLOB_SRC] },
   formatters: true,
   ignores: ['**/build/**', '**/dist/**', '**/*.d.ts', '**/project.inlang/**', '**/src/lib/paraglide/**'],
   svelte: true,
-}, {
-  files: ['**/*.ts', '**/*.svelte'],
-  rules: {
-    'no-console': 'error',
-    'ts/no-explicit-any': 'error',
-  },
-}, {
+}, haiQualityConfig, {
   files: ['**/*.svelte'],
   rules: {
     'svelte/html-quotes': 'off',

package/templates/apps/fullstack/apps/{{projectName}}-app/index.html.hbs

@@ -6,11 +6,16 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
     <meta name="theme-color" content="#2563eb" />
-    <title>{{projectName}} App</title>
+    <title>{{html fullstack.appName}}</title>
+    <link
+      rel="icon"
+      type="image/svg+xml"
+      href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect width='32' height='32' rx='8' fill='%234438df'/%3E%3Cpath d='M10 8v16M22 8v16M10 16h12' fill='none' stroke='white' stroke-width='3'/%3E%3C/svg%3E"
+    />
   </head>
   <body>
     <div id="app"></div>
     <script type="module" src="/src/main.ts"></script>
   </body>
 </html>
-{{/if}}
+{{/if}}