@h-ai/cli 0.1.0-alpha.64 → 0.1.0-alpha.66

package/templates/apps/fullstack/packages/{{projectName}}-shared/tests/management-store.test.ts.hbs

@@ -1,4 +1,5 @@
-import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { HashRouter } from '../src/lib/navigation/hash-router.svelte.js'
 import * as m from '../src/lib/paraglide/messages.js'
 import { ManagementStore } from '../src/lib/stores/management-store.svelte.js'
 
@@ -35,15 +36,24 @@ function deferred<T>() {
 
 beforeEach(() => {
   vi.resetAllMocks()
+  vi.stubGlobal('location', { hash: '#/users' })
+  vi.stubGlobal('history', { replaceState: vi.fn(), pushState: vi.fn() })
   api.iam.auth.logout.mockResolvedValue({ success: true })
   api.iam.auth.currentUser.mockResolvedValue({ success: true, data: member })
 })
 
+afterEach(() => vi.unstubAllGlobals())
+
+/** 会话测试使用真实路由状态，浏览器历史由 E2E 验证。 */
+function createStore() {
+  return new ManagementStore(new HashRouter(['../pages/users.svelte', '../pages/settings.svelte'], '/users'))
+}
+
 describe('management session and request ownership', () => {
   it('ignores a previous administrator failure after logout and another user login', async () => {
     const oldRequest = deferred<typeof forbidden>()
     api.admin.users.list.mockReturnValueOnce(oldRequest.promise)
-    const store = new ManagementStore()
+    const store = createStore()
     store.user = administrator
     const loading = store.loadUsers()
     await store.logout()
@@ -60,7 +70,7 @@ describe('management session and request ownership', () => {
   it('ignores an obsolete page failure after opening personal settings', async () => {
     const oldRequest = deferred<typeof forbidden>()
     api.admin.users.list.mockReturnValueOnce(oldRequest.promise)
-    const store = new ManagementStore()
+    const store = createStore()
     store.user = administrator
     const loading = store.loadUsers()
     await store.navigate('settings')
@@ -75,7 +85,7 @@ describe('management session and request ownership', () => {
 
   it('refreshes revoked roles once and clears administration data', async () => {
     api.admin.users.list.mockResolvedValueOnce(forbidden)
-    const store = new ManagementStore()
+    const store = createStore()
     store.user = administrator
     store.roles = [{ id: 'role-id', code: 'admin', name: 'Administrator', userCount: 1 }]
     await store.loadUsers()
@@ -90,7 +100,7 @@ describe('management session and request ownership', () => {
 
   it('reports a connection failure when loading the authenticated user', async () => {
     api.iam.auth.currentUser.mockRejectedValueOnce(new Error('Connection unavailable'))
-    const store = new ManagementStore()
+    const store = createStore()
     await store.authenticated()
     expect(store.error).toBe(m.network_error())
     expect(store.error).not.toBe(m.login_invalid())

package/templates/apps/fullstack/playwright.config.ts.hbs

@@ -5,12 +5,17 @@ const defaultBaseURL = '{{#if fullstack.e2eFrontend}}http://127.0.0.1:{{fullstac
 const defaultServiceBaseURL = 'http://127.0.0.1:3000'
 const baseURL = process.env.BASE_URL || defaultBaseURL
 const primaryFrontend = '{{fullstack.e2eFrontend.target}}'
+const frontendUrls = {
+  web: process.env.HAI_E2E_WEB_URL,
+  app: process.env.HAI_E2E_APP_URL,
+  desktop: process.env.HAI_E2E_DESKTOP_URL,
+}
 const frontends: { target: string, name: string, url: string }[] = [
 {{#each fullstack.frontendApps}}
   {
     target: '{{target}}',
     name: '{{packageName}}',
-    url: process.env.HAI_E2E_{{target}}_URL || 'http://127.0.0.1:{{port}}',
+    url: frontendUrls.{{target}} || 'http://127.0.0.1:{{port}}',
   },
 {{/each}}
 ]

package/templates/apps/fullstack/pnpm-workspace.yaml.hbs

@@ -9,7 +9,6 @@ trustPolicyExclude:
 # pnpm 12 配置；原生依赖仅运行明确列出的安装脚本。
 nodeLinker: hoisted
 allowBuilds:
-  onnxruntime-node: true
   protobufjs: true
   vue-demi: true
   better-sqlite3: true

package/templates/apps/h5/src/routes/+layout.svelte.hbs

@@ -14,9 +14,9 @@
 {{#if hasI18n}}
   import * as m from '$lib/paraglide/messages'
   import { getLocale } from '$lib/paraglide/runtime.js'
-  import { BottomNav, setGlobalLocale } from '@h-ai/ui'
+  import { AppBar, BottomNav, setGlobalLocale } from '@h-ai/ui'
 {{else}}
-  import { BottomNav } from '@h-ai/ui'
+  import { AppBar, BottomNav } from '@h-ai/ui'
 {{/if}}
   import '../app.css'
 
@@ -39,7 +39,7 @@
   ]
 
   const activeNav = $derived(navItems.find(item => item.path === page.url.pathname)?.id)
-  // 认证页面独立显示；业务页面复用框架导航和移动端安全区域样式。
+  // 所有页面共用页头页脚；仅业务页面显示底部导航。
   const isAuthPage = $derived(page.url.pathname.startsWith('/auth'))
 
   function handleNavigation(id: string) {
@@ -60,15 +60,15 @@
   <title>{page.data.appConfig.name}</title>
 </svelte:head>
 
-{#if isAuthPage}
-  {@render children()}
-{:else}
-  <div class='hai-mobile-viewport'>
-    <div class='hai-mobile-shell max-w-lg'>
-      <main class='hai-mobile-main'>
-        {@render children()}
-      </main>
+<div class='hai-mobile-viewport'>
+  <div class='hai-mobile-shell max-w-lg'>
+    <AppBar title={page.data.appConfig.name} safeArea fixed={false} />
+    <main class='hai-mobile-main'>{@render children()}</main>
+    <footer class='border-t border-base-300 bg-base-100 p-2 text-center text-xs text-base-content/60'>
+      {page.data.appConfig.name} · {page.data.appConfig.version} · {page.data.appConfig.env}
+    </footer>
+    {#if !isAuthPage}
       <BottomNav items={navItems} active={activeNav} onchange={handleNavigation} centered maxWidth='lg' safeArea />
-    </div>
+    {/if}
   </div>
-{/if}
+</div>

package/templates/apps/mobile-app/index.html.hbs

@@ -5,6 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
     <meta name="theme-color" content="#2563eb" />
     <title></title>
+    <script src="/runtime-config.js"></script>
   </head>
   <body>
     <div id="app"></div>

package/templates/apps/mobile-app/public/runtime-config.js

@@ -0,0 +1 @@
+globalThis.__HAI_PUBLIC_CONFIG__ ??= {}

package/templates/apps/mobile-app/src/App.svelte.hbs

@@ -1,6 +1,9 @@
 <script lang='ts'>
 {{#if features.iam}}
   import type { IamPublicConfig } from '@h-ai/api-contract'
+{{/if}}
+  import type { Component } from 'svelte'
+{{#if features.iam}}
   import { apiClient } from '@h-ai/api-client'
 {{/if}}
   import { applyTheme, getSavedTheme, setGlobalLocale } from '@h-ai/ui'
@@ -8,9 +11,11 @@
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 {{/if}}
   import { onMount } from 'svelte'
-  import { closeApi, initApi, resolveApiBase, usesNativeTokenStorage } from './lib/api.js'
+
+  import { closeApi, initApi, usesNativeTokenStorage } from './lib/api.js'
   import { appConfig, initClientCore } from './lib/app-config.js'
   import { initCapacitor, isNativeApp } from './lib/capacitor.js'
+  import { HashRouter } from './lib/navigation/hash-router.svelte.js'
   import * as m from './lib/paraglide/messages.js'
   import { getLocale } from './lib/paraglide/runtime.js'
 
@@ -31,11 +36,12 @@
   }
 {{/if}}
 
-  type TabId = 'home' | 'tasks' | 'profile'
+  const pages = import.meta.glob<{ default: Component<{ nativeRuntime: boolean, nativeTokenStorage: boolean }> }>('./lib/pages/**/*.svelte')
+  const router = new HashRouter(Object.keys(pages), '/home')
+  const pageComponent = $derived(pages[router.file]())
 
   let booting = $state(true)
   let bootError = $state<string | null>(null)
-  let activeTab = $state<TabId>('home')
   let nativeRuntime = $state(false)
   let nativeTokenStorage = $state(false)
 
@@ -74,136 +80,59 @@
     }
   }
 
+  /** 切换底部导航；例如 handleTabChange('tasks') 会写入 #/tasks。 */
   function handleTabChange(id: string): void {
-    if (id === 'home' || id === 'tasks' || id === 'profile')
-      activeTab = id
+    router.navigate(`/${id}`)
   }
 
   onMount(() => {
+    const stopRouting = router.start()
 {{#if features.iam}}
     resetToken = new URL(location.href).searchParams.get('token') ?? ''
 {{/if}}
     void bootstrap()
 
     return () => {
+      stopRouting()
       void closeApi()
     }
   })
 </script>
 
-{#if booting}
-  <div class='hai-mobile-viewport'>
-    <div class='hai-mobile-shell max-w-lg'>
-      <div class='flex min-h-screen items-center justify-center'>
-        <span class='loading loading-spinner loading-lg'></span>
-      </div>
-    </div>
-  </div>
-{:else if bootError}
-  <div class='hai-mobile-viewport'>
-    <div class='hai-mobile-shell max-w-lg'>
-      <div class='flex min-h-screen flex-col items-center justify-center gap-3 p-6 text-center'>
-        <span class='icon-[tabler--alert-triangle] text-error text-4xl'></span>
-        <h1 class='text-lg font-bold'>{m.boot_failed_title()}</h1>
-        <p class='text-base-content/60 text-sm'>{bootError}</p>
-        <Button variant='primary' size='sm' onclick={() => location.reload()}>{m.common_retry()}</Button>
-      </div>
-    </div>
-  </div>
+<div class='hai-mobile-viewport'>
+  <div class='hai-mobile-shell max-w-lg'>
+    <AppBar title={appConfig.name} safeArea fixed={false} class='bg-base-100/95 backdrop-blur border-base-content/8' />
+    <main class='hai-mobile-main'>
+      {#if booting}
+        <div class='grid min-h-64 place-items-center'><span class='loading loading-spinner loading-lg'></span></div>
+      {:else if bootError}
+        <section class='flex min-h-64 flex-col items-center justify-center gap-3 p-6 text-center'>
+          <h1 class='text-lg font-bold'>{m.boot_failed_title()}</h1>
+          <p class='text-base-content/60 text-sm'>{bootError}</p>
+          <Button variant='primary' size='sm' onclick={() => location.reload()}>{m.common_retry()}</Button>
+        </section>
 {{#if features.iam}}
-{:else if !authenticated}
-  <main>
-    <AuthPanel config={authConfig} actions={authActions} {resetToken} initialMode={resetToken ? 'reset' : 'login'} onauthenticated={handleAuthenticated} />
-  </main>
+      {:else if !authenticated}
+        <AuthPanel config={authConfig} actions={authActions} {resetToken} initialMode={resetToken ? 'reset' : 'login'} onauthenticated={handleAuthenticated} />
+{{/if}}
+      {:else}
+        {#await pageComponent}
+          <div class='grid min-h-64 place-items-center'><span class='loading loading-spinner'></span></div>
+        {:then { default: Page }}
+          <Page {nativeRuntime} {nativeTokenStorage} />
+        {/await}
+      {/if}
+    </main>
+    <footer class='border-t border-base-content/8 bg-base-100 p-2 text-center text-xs text-base-content/50'>
+      {appConfig.name} · {appConfig.version} · {appConfig.env}
+    </footer>
+{{#if features.iam}}
+    {#if authenticated && !booting && !bootError}
+{{/if}}
+      <BottomNav items={navItems} active={router.path.slice(1)} onchange={handleTabChange} safeArea centered maxWidth='lg' />
+{{#if features.iam}}
+    {/if}
 {{/if}}
-{:else}
-  <div class='hai-mobile-viewport'>
-    <div class='hai-mobile-shell max-w-lg'>
-      <AppBar title={appConfig.name} safeArea fixed={false} class='bg-base-100/95 backdrop-blur border-base-content/8' />
-
-      <main class='hai-mobile-main'>
-        {#if activeTab === 'home'}
-          <section class='space-y-4 p-4 pb-6'>
-            <div class='bg-primary text-primary-content rounded-2xl p-5 shadow-sm'>
-              <p class='text-sm opacity-75'>{m.hero_eyebrow()}</p>
-              <h1 class='mt-1 text-2xl font-bold'>{m.hero_title()}</h1>
-              <p class='mt-2 text-sm opacity-80'>{m.hero_subtitle()}</p>
-            </div>
-
-            <div class='grid grid-cols-2 gap-3'>
-              <Card padding='sm' shadow='sm'>
-                <div class='flex flex-col gap-2'>
-                  <span class='icon-[tabler--device-mobile-code] text-primary text-2xl'></span>
-                  <span class='text-sm font-medium'>{m.feature_native_title()}</span>
-                  <span class='text-base-content/60 text-xs'>{m.feature_native_desc()}</span>
-                </div>
-              </Card>
-              <Card padding='sm' shadow='sm'>
-                <div class='flex flex-col gap-2'>
-                  <span class='icon-[tabler--api-app] text-primary text-2xl'></span>
-                  <span class='text-sm font-medium'>{m.feature_api_title()}</span>
-                  <span class='text-base-content/60 text-xs'>{m.feature_api_desc()}</span>
-                </div>
-              </Card>
-            </div>
-
-            <Card title={m.status_title()} shadow='sm'>
-              <p class='mb-3 text-xs text-base-content/50'>{appConfig.name} · {appConfig.version} · {appConfig.env}</p>
-              <div class='grid grid-cols-2 gap-3 text-sm'>
-                <div>
-                  <p class='text-base-content/50'>{m.status_api_label()}</p>
-                  <p class='font-medium break-all'>{resolveApiBase()}</p>
-                </div>
-                <div>
-                  <p class='text-base-content/50'>{m.status_runtime_label()}</p>
-                  <Badge variant={nativeRuntime ? 'success' : 'warning'} size='sm'>
-                    {nativeRuntime ? m.status_runtime_native() : m.status_runtime_web()}
-                  </Badge>
-                </div>
-                <div class='col-span-2'>
-                  <p class='text-base-content/50'>{m.status_token_label()}</p>
-                  <p class='font-medium'>{nativeTokenStorage ? m.status_token_native() : m.status_token_memory()}</p>
-                </div>
-              </div>
-            </Card>
-          </section>
-        {:else if activeTab === 'tasks'}
-          <section class='space-y-4 p-4 pb-6'>
-            <Card title={m.tasks_title()} shadow='sm'>
-              <div class='space-y-3'>
-                {#each [m.tasks_sync(), m.tasks_polish(), m.tasks_release()] as task (task)}
-                  <div class='bg-base-200 rounded-xl flex items-center gap-3 p-3'>
-                    <span class='icon-[tabler--circle-check] text-success text-xl'></span>
-                    <span class='text-sm font-medium'>{task}</span>
-                  </div>
-                {/each}
-              </div>
-            </Card>
-          </section>
-        {:else}
-          <section class='space-y-4 p-4 pb-6'>
-            <Card title={m.profile_title()} shadow='sm'>
-              <div class='space-y-3 text-sm'>
-                <div class='bg-base-200 rounded-xl p-3'>{m.profile_language()}</div>
-                <div class='bg-base-200 rounded-xl p-3'>{m.profile_theme()}</div>
-                <div class='bg-base-200 rounded-xl p-3'>{m.profile_secure()}</div>
-              </div>
-            </Card>
-          </section>
-        {/if}
-      </main>
-
-      <BottomNav
-        items={navItems}
-        active={activeTab}
-        onchange={handleTabChange}
-        safeArea
-        centered
-        maxWidth='lg'
-        class='border-base-content/8 shadow-[0_-12px_32px_rgba(15,23,42,0.08)]'
-      />
-    </div>
   </div>
-{/if}
-
+</div>
 <ToastContainer />

package/templates/apps/mobile-app/src/lib/api.ts.hbs

@@ -10,7 +10,8 @@ const DEFAULT_API_BASE = 'http://localhost:3000/api/v1'
 let initialized = false
 
 export function resolveApiBase(): string {
-  return import.meta.env.PUBLIC_API_BASE ?? DEFAULT_API_BASE
+  const runtime = (globalThis as typeof globalThis & { __HAI_PUBLIC_CONFIG__?: { apiBase?: string } }).__HAI_PUBLIC_CONFIG__
+  return runtime?.apiBase || import.meta.env.PUBLIC_API_BASE || DEFAULT_API_BASE
 }
 
 export async function usesNativeTokenStorage(): Promise<boolean> {

package/templates/apps/mobile-app/src/lib/app-config.ts.hbs

@@ -5,8 +5,9 @@ declare const __APP_CORE_CONFIG__: Pick<CoreConfig, 'name' | 'version' | 'env' |
   logging?: Pick<NonNullable<CoreConfig['logging']>, 'level' | 'format'>
 }
 
-/** Vite 经 core 加载后注入的公开配置，修改 YAML 后重新构建客户端。 */
-export const appConfig = __APP_CORE_CONFIG__
+/** 构建包含公开默认值；预览或容器启动时的公开配置覆盖默认值，不重建静态资源。 */
+const runtime = (globalThis as typeof globalThis & { __HAI_PUBLIC_CONFIG__?: { core?: Partial<typeof __APP_CORE_CONFIG__> } }).__HAI_PUBLIC_CONFIG__?.core
+export const appConfig = { ...__APP_CORE_CONFIG__, ...runtime, logging: { ...__APP_CORE_CONFIG__.logging, ...runtime?.logging } }
 
 export function initClientCore(): void {
   core.init({ logging: appConfig.logging })

package/templates/apps/mobile-app/src/lib/pages/home.svelte.hbs

@@ -0,0 +1,58 @@
+<script lang='ts'>
+  import { resolveApiBase } from '../api.js'
+  import { appConfig } from '../app-config.js'
+  import * as m from '../paraglide/messages.js'
+  /** 首页展示的平台运行状态；例如 { nativeRuntime: true, nativeTokenStorage: true }。 */
+  interface Props {
+    /** 是否运行于原生壳。 */
+    nativeRuntime: boolean
+    /** 是否使用原生安全凭据存储。 */
+    nativeTokenStorage: boolean
+  }
+  const { nativeRuntime, nativeTokenStorage }: Props = $props()
+</script>
+
+<section class='space-y-4 p-4 pb-6'>
+  <div class='bg-primary text-primary-content rounded-2xl p-5 shadow-sm'>
+    <p class='text-sm opacity-75'>{m.hero_eyebrow()}</p>
+    <h1 class='mt-1 text-2xl font-bold'>{m.hero_title()}</h1>
+    <p class='mt-2 text-sm opacity-80'>{m.hero_subtitle()}</p>
+  </div>
+
+  <div class='grid grid-cols-2 gap-3'>
+    <Card padding='sm' shadow='sm'>
+      <div class='flex flex-col gap-2'>
+        <span class='icon-[tabler--device-mobile-code] text-primary text-2xl'></span>
+        <span class='text-sm font-medium'>{m.feature_native_title()}</span>
+        <span class='text-base-content/60 text-xs'>{m.feature_native_desc()}</span>
+      </div>
+    </Card>
+    <Card padding='sm' shadow='sm'>
+      <div class='flex flex-col gap-2'>
+        <span class='icon-[tabler--api-app] text-primary text-2xl'></span>
+        <span class='text-sm font-medium'>{m.feature_api_title()}</span>
+        <span class='text-base-content/60 text-xs'>{m.feature_api_desc()}</span>
+      </div>
+    </Card>
+  </div>
+
+  <Card title={m.status_title()} shadow='sm'>
+    <p class='mb-3 text-xs text-base-content/50'>{appConfig.name} · {appConfig.version} · {appConfig.env}</p>
+    <div class='grid grid-cols-2 gap-3 text-sm'>
+      <div>
+        <p class='text-base-content/50'>{m.status_api_label()}</p>
+        <p class='font-medium break-all'>{resolveApiBase()}</p>
+      </div>
+      <div>
+        <p class='text-base-content/50'>{m.status_runtime_label()}</p>
+        <Badge variant={nativeRuntime ? 'success' : 'warning'} size='sm'>
+          {nativeRuntime ? m.status_runtime_native() : m.status_runtime_web()}
+        </Badge>
+      </div>
+      <div class='col-span-2'>
+        <p class='text-base-content/50'>{m.status_token_label()}</p>
+        <p class='font-medium'>{nativeTokenStorage ? m.status_token_native() : m.status_token_memory()}</p>
+      </div>
+    </div>
+  </Card>
+</section>

package/templates/apps/mobile-app/src/lib/pages/profile.svelte.hbs

@@ -0,0 +1,13 @@
+<script lang='ts'>
+  import * as m from '../paraglide/messages.js'
+</script>
+
+<section class='space-y-4 p-4 pb-6'>
+  <Card title={m.profile_title()} shadow='sm'>
+    <div class='space-y-3 text-sm'>
+      <div class='bg-base-200 rounded-xl p-3'>{m.profile_language()}</div>
+      <div class='bg-base-200 rounded-xl p-3'>{m.profile_theme()}</div>
+      <div class='bg-base-200 rounded-xl p-3'>{m.profile_secure()}</div>
+    </div>
+  </Card>
+</section>

package/templates/apps/mobile-app/src/lib/pages/tasks.svelte.hbs

@@ -0,0 +1,16 @@
+<script lang='ts'>
+  import * as m from '../paraglide/messages.js'
+</script>
+
+<section class='space-y-4 p-4 pb-6'>
+  <Card title={m.tasks_title()} shadow='sm'>
+    <div class='space-y-3'>
+      {#each [m.tasks_sync(), m.tasks_polish(), m.tasks_release()] as task (task)}
+        <div class='bg-base-200 rounded-xl flex items-center gap-3 p-3'>
+          <span class='icon-[tabler--circle-check] text-success text-xl'></span>
+          <span class='text-sm font-medium'>{task}</span>
+        </div>
+      {/each}
+    </div>
+  </Card>
+</section>

package/templates/base/.dockerignore.hbs

@@ -1,4 +1,5 @@
 .git
+**/*.tar
 .github
 .agents
 .claude
@@ -15,3 +16,6 @@ playwright-report
 test-results
 **/data
 *.log
+# 仅保留公共基础 .env；分环境配置、私有覆盖及已有交付包不进入构建上下文。
+**/.env.*
+**/.hai

package/templates/base/.gitignore.hbs

@@ -1,19 +1,34 @@
+# 构建产物目录
 node_modules
 {{#unless isSvelteOnlyApp}}
 .svelte-kit
 {{/unless}}
 build
 dist
+.turbo
 android
 ios
-.env
-.env.*
-!.env.example
+**/src/lib/paraglide
+**/src-tauri/gen/
+**/src-tauri/target/
+**/hash-core/target/
+
+# 日志测试目录
 *.log
-.DS_Store
 test-results/
 playwright-report/
+
+
+# 系统文件
+.DS_Store
+
+# 本地数据目录
 **/data/
 
-# hai deploy 产物（compose / .env.runtime / 镜像 tar / sidecar 凭据）
+# 构建与部署产物（镜像 / Compose tar / 私有运行配置）
 .hai/
+*.tar
+
+# 本机私有配置；公共 .env 与 dev/test/prod 环境文件纳入版本控制。
+.env.local
+.env.*.local

package/templates/base/Dockerfile.hbs

@@ -1,6 +1,8 @@
 # syntax=docker/dockerfile:1.7
 {{#if isSvelteOnlyApp}}
 FROM node:24-bookworm-slim AS build
+ARG SQLITE_PREBUILD_MIRROR
+ENV npm_config_better_sqlite3_binary_host_mirror=$SQLITE_PREBUILD_MIRROR
 
 ENV PNPM_HOME=/pnpm
 ENV PATH=$PNPM_HOME:$PATH
@@ -8,14 +10,14 @@ ENV CI=true
 WORKDIR /workspace
 
 RUN corepack enable && corepack prepare pnpm@12.11.2 --activate
-COPY pnpm-lock.yaml pnpm-workspace.yaml ./
-RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm fetch
 COPY . .
+RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm fetch
 RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm install --offline --frozen-lockfile --ignore-scripts
-RUN pnpm build
+RUN pnpm compile
 
 FROM nginxinc/nginx-unprivileged:1.29-alpine AS runtime
 
+COPY --chmod=755 docker/19-runtime-config.sh /docker-entrypoint.d/19-hai-runtime-config.sh
 COPY docker/nginx.conf /etc/nginx/conf.d/default.conf
 COPY --from=build /workspace/dist /usr/share/nginx/html
 
@@ -24,6 +26,8 @@ HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
   CMD wget -q -O /dev/null http://127.0.0.1:8080/health || exit 1
 {{else}}
 FROM node:24-bookworm-slim AS build
+ARG SQLITE_PREBUILD_MIRROR
+ENV npm_config_better_sqlite3_binary_host_mirror=$SQLITE_PREBUILD_MIRROR
 
 ENV PNPM_HOME=/pnpm
 ENV PATH=$PNPM_HOME:$PATH
@@ -31,17 +35,16 @@ ENV CI=true
 WORKDIR /workspace
 
 RUN corepack enable && corepack prepare pnpm@12.11.2 --activate
-COPY pnpm-lock.yaml pnpm-workspace.yaml ./
-RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm fetch
 COPY . .
+RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm fetch
 RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm install --offline --frozen-lockfile --ignore-scripts
-RUN pnpm build
+RUN pnpm compile
+RUN if [ -d node_modules/better-sqlite3 ]; then cd node_modules/better-sqlite3; for attempt in 1 2 3; do node -e "require('node:child_process').execFileSync(process.execPath,[require.resolve('prebuild-install/bin.js'),'--verbose'],{stdio:'inherit'})" && break; [ "$attempt" = 3 ] && exit 1; sleep 3; done; fi
 RUN --mount=type=cache,id={{projectName}}-pnpm,target=/pnpm/store pnpm pm deploy --filter {{projectName}} --prod /prod/app
 
 FROM node:24-bookworm-slim AS runtime-base
 
 ENV NODE_ENV=production
-ENV HAI_CORE_ENV=production
 ENV HOST=0.0.0.0
 ENV PORT=3000
 WORKDIR /app
@@ -55,9 +58,5 @@ HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
   CMD node -e "fetch('http://127.0.0.1:'+process.env.PORT+'/').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
 CMD ["node", "build"]
 
-FROM runtime-base AS runtime-with-data
-
-COPY --from=embedded-data --chown=node:node / /app/data/
-
 FROM runtime-base AS runtime
 {{/if}}

package/templates/base/docker/nginx.conf.hbs

@@ -9,6 +9,12 @@ server {
     try_files $uri $uri/ /index.html;
   }
 
+  location = /runtime-config.js {
+    alias /tmp/hai-runtime-config/runtime-config.js;
+    add_header Cache-Control "no-store";
+    default_type application/javascript;
+  }
+
   location = /health {
     access_log off;
     add_header Content-Type text/plain;

package/templates/base/e2e/app.spec.ts.hbs

@@ -21,14 +21,26 @@ test('home page renders from browser', async ({ page }) => {
   await expect(page).toHaveTitle(process.env.HAI_CORE_NAME ?? '{{projectName}}')
   await expect(pageErrors).toEqual([])
   await expect(page.locator('main, section').first()).toBeVisible()
+  await expect(page.locator('header').first()).toBeVisible()
+  await expect(page.locator('footer').first()).toBeAttached()
 {{#if_eq appType 'h5'}}
   // 在手机宽度验证导航真正切换路由，避免样式失效但首页渲染测试仍通过。
   const nav = page.locator('nav')
   await nav.getByRole('button', { name: /发现|Discover/i, exact: true }).click()
   await expect(page).toHaveURL(/\/discover$/)
+  await page.reload()
+  await expect(page).toHaveURL(/\/discover$/)
+  await expect(page.getByRole('heading', { name: /发现|Discover/i })).toBeVisible()
   await nav.getByRole('button', { name: /首页|Home/i, exact: true }).click()
   await expect(page).toHaveURL(/\/$/)
   expect(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth)).toBe(true)
+{{/if_eq}}
+{{#if_eq appType 'website'}}
+  await page.goto('/about')
+  await page.reload()
+  await expect(page).toHaveURL(/\/about$/)
+  await expect(page.locator('header')).toBeVisible()
+  await expect(page.locator('footer')).toBeVisible()
 {{/if_eq}}
   const evidence = process.env.HAI_AUTH_EVIDENCE_DIR || path.resolve('test-results/auth-screenshots')
   await mkdir(evidence, { recursive: true })
@@ -50,6 +62,8 @@ test('configured IAM registration and password login', async ({ page, context })
   const authUrl = '{{#if isCapacitorApp}}/{{else}}/auth/login{{/if}}'
   await page.goto(authUrl)
   await expect(page.locator('#login-username')).toBeVisible()
+  await expect(page.locator('header').first()).toBeVisible()
+  await expect(page.locator('footer')).toBeVisible()
   await page.screenshot({ path: path.join(evidence, '{{projectName}}-login.png'), fullPage: true })
   await page.getByRole('{{#if isCapacitorApp}}button{{else}}link{{/if}}', { name: /立即注册|Register now/i }).click()
   await expect(page.locator('input[name="username"]')).toBeVisible()

package/templates/base/hai.build.json.hbs

@@ -0,0 +1 @@
+{ "images": [{ "name": "app", "target": "runtime", "containerPort": {{#if isSvelteOnlyApp}}8080{{else}}3000{{/if}} }] }