@h-ai/cli 0.1.0-alpha.66 → 0.1.0-alpha.68

package/templates/apps/fullstack/packages/{{projectName}}-shared/tests/api-client.test.ts.hbs

@@ -1,6 +1,5 @@
-import type { EncryptedPayload } from '@h-ai/crypto'
 import { HaiApiClientError } from '@h-ai/api-client'
-import { crypto, TRANSPORT_PROTOCOL } from '@h-ai/crypto'
+import { authenticateTransportRequest, createInMemoryKeyStore, crypto, TRANSPORT_PROTOCOL } from '@h-ai/crypto'
 import { afterAll, beforeAll, describe, expect, it, vi } from 'vitest'
 import { initializeManagementApi, managementApi, resolveAvatarUrl } from '../src/lib/api/api-client.js'
 
@@ -16,7 +15,10 @@ const runtimeInfo = {
 
 /** 使用真实 crypto 公共入口模拟对端，覆盖握手及双向加解密。 */
 function createServerFetch() {
-  const created = crypto.transport.createServer()
+  const key = crypto.asymmetric.generateKeyPair()
+  if (!key.success)
+    throw new Error(key.error.message)
+  const created = crypto.transport.createServer({ serverKeyRing: { activeKeyId: 'test-v1', keys: { 'test-v1': key.data } }, keyStore: createInMemoryKeyStore() })
   if (!created.success)
     throw new Error(created.error.message)
   const server = created.data
@@ -29,25 +31,22 @@ function createServerFetch() {
     if (url.pathname.endsWith('/_hai/key-exchange')) {
       const body = await request.json() as { clientPublicKey: string }
       const clientId = await server.registerClientKey(body.clientPublicKey)
-      return Response.json({ serverPublicKey: server.getServerPublicKey(), clientId })
+      return Response.json({ serverKeyId: server.getServerKeyId(), serverPublicKey: server.getServerPublicKey(), clientId })
     }
     const clientId = request.headers.get(TRANSPORT_PROTOCOL.CLIENT_ID_HEADER)
     if (!clientId)
       return Response.json({ success: false }, { status: 400 })
+    const verified = await authenticateTransportRequest(server, request)
+    if (!verified.success)
+      throw new Error(verified.error.message)
     let data: unknown = runtimeInfo
     if (url.pathname.endsWith('/app/echo')) {
       expect(request.headers.get(TRANSPORT_PROTOCOL.ENCRYPTED_HEADER)).toBe(TRANSPORT_PROTOCOL.ENCRYPTED_HEADER_VALUE)
-      const encrypted = await request.json() as EncryptedPayload
-      expect(JSON.stringify(encrypted)).not.toContain('private message')
-      const decrypted = server.decryptRequest(encrypted)
-      expect(decrypted.success).toBe(true)
-      if (!decrypted.success)
-        throw new Error(decrypted.error.message)
-      const payload = JSON.parse(decrypted.data) as { message: string }
+      const payload = JSON.parse(verified.data.plaintext) as { message: string }
       messages.push(payload.message)
       data = { message: payload.message, echoedAt: '2026-01-01T00:00:00.000Z', requestId: 'test-request' }
     }
-    const response = await server.encryptResponse(clientId, JSON.stringify({ success: true, data }))
+    const response = await server.encryptResponse(verified.data.context, JSON.stringify({ success: true, data }), 200)
     if (!response.success)
       throw new Error(response.error.message)
     return Response.json(response.data, { headers: { [TRANSPORT_PROTOCOL.ENCRYPTED_HEADER]: TRANSPORT_PROTOCOL.ENCRYPTED_HEADER_VALUE } })
@@ -75,11 +74,11 @@ describe('shared API transport', () => {
     expect(server.requests.at(-1)?.headers.get('x-request-client')).toBe('configured-client')
   })
 
-  it('uses the API origin injected at container startup', async () => {
+  it.each([false, true])('uses the injected API origin when native configuration is required: %s', async (requireApiBase) => {
     Object.assign(globalThis, { __HAI_PUBLIC_CONFIG__: { apiBase: 'https://runtime.example.com' } })
     const server = createServerFetch()
     try {
-      expect((await initializeManagementApi({ fetchFn: server.fetchFn })).success).toBe(true)
+      expect((await initializeManagementApi({ fetchFn: server.fetchFn, requireApiBase })).success).toBe(true)
       expect((await managementApi.app.info()).success).toBe(true)
       expect(server.requests.every(request => request.url.startsWith('https://runtime.example.com/api/v1/'))).toBe(true)
     }

package/templates/apps/fullstack/playwright.config.ts.hbs

@@ -1,5 +1,6 @@
 import process from 'node:process'
 import { defineConfig } from '@playwright/test'
+import { createE2eNotificationEnv, createE2eServerEnv, createE2eTransportRing } from './scripts/e2e-env.js'
 
 const defaultBaseURL = '{{#if fullstack.e2eFrontend}}http://127.0.0.1:{{fullstack.e2eFrontend.port}}{{else}}http://127.0.0.1:3000{{/if}}'
 const defaultServiceBaseURL = 'http://127.0.0.1:3000'
@@ -49,32 +50,39 @@ function resolvePortFromBaseUrl(urlString: string, fallbackPort: string): string
 
 export default defineConfig({
   testDir: './e2e',
+  // 多个界面验收共用管理员资料与引导状态，保留串行以免互相覆盖。
   fullyParallel: false,
   forbidOnly: !!process.env.CI,
-  retries: process.env.CI ? 2 : 0,
+  retries: 0,
   workers: 1,
   reporter: 'list',
   timeout: 30_000,
   use: {
     baseURL,
     channel: 'chrome',
-    trace: 'on-first-retry',
+    trace: 'retain-on-failure',
     screenshot: 'only-on-failure',
   },
   webServer: [
     {
       name: '{{fullstack.servPackageName}}',
-      command: 'pnpm --filter {{fullstack.servPackageName}} start',
-      env: {
+      command: 'pnpm --filter {{fullstack.servPackageName}} exec node dist/index.js',
+      env: createE2eServerEnv({
+        ...createE2eNotificationEnv(),
+        HAI_DB: JSON.stringify({ type: 'sqlite', database: `${process.env.HAI_E2E_DATA_ROOT}/fullstack.db` }),
+        HAI_CACHE: JSON.stringify({ type: 'memory' }),
+        HAI_STORAGE: JSON.stringify({ type: 'local', root: `${process.env.HAI_E2E_DATA_ROOT}/uploads` }),
+        HAI_VECDB: JSON.stringify({ type: 'lancedb', path: `${process.env.HAI_E2E_DATA_ROOT}/vecdb` }),
+        HAI_CRYPTO_TRANSPORT_SERVERKEYRING: createE2eTransportRing(),
         HOST: serviceHost,
         PORT: servicePort,
         // 仅供脚手架验收：生产启动必须由部署环境提供初始管理员密码。
         HAI_ADMIN_DEFAULT_PASSWORD: process.env.E2E_ADMIN_PASSWORD || 'Scaffold-test-Admin123!',
         HAI_CORE_NAME: process.env.HAI_CORE_NAME || 'Configured scaffold',
         HAI_CORE_VERSION: process.env.HAI_CORE_VERSION || '9.8.7',
-        HAI_CORE_ENV: process.env.HAI_CORE_ENV || 'test',
+        HAI_CORE_ENV: 'test',
         HAI_CORE_LOGGING_LEVEL: 'warn',
-      },
+      }),
       url: `${serviceBaseURL}/health`,
       reuseExistingServer: false,
       timeout: 120_000,
@@ -84,6 +92,7 @@ export default defineConfig({
       return {
         name: frontend.name,
         command: `pnpm --filter ${frontend.name} exec vite preview --host ${resolveHostFromBaseUrl(url, '127.0.0.1')} --port ${resolvePortFromBaseUrl(url, '3000')} --strictPort`,
+        env: createE2eServerEnv({ PUBLIC_API_BASE: serviceBaseURL }),
         url,
         reuseExistingServer: false,
         timeout: 120_000,

package/templates/apps/h5/messages/ja-JP.json

@@ -0,0 +1,40 @@
+{
+  "app_title": "H5アプリ",
+  "app_description": "hai Agent Frameworkで構築したH5モバイルアプリ",
+  "nav_home": "ホーム",
+  "nav_discover": "見つける",
+  "nav_profile": "プロフィール",
+  "page_home_title": "ホーム",
+  "page_home_desc": "H5アプリへようこそ",
+  "page_home_search": "検索...",
+  "page_home_feature1": "機能1",
+  "page_home_feature2": "機能2",
+  "page_home_feature3": "機能3",
+  "page_home_feature4": "機能4",
+  "page_home_latest": "最新情報",
+  "page_home_welcome": "H5アプリへようこそ",
+  "page_discover_title": "見つける",
+  "page_discover_desc": "さらに多くのコンテンツを探す。",
+  "page_profile_title": "プロフィール",
+  "page_profile_desc": "個人情報を管理します",
+  "page_profile_username": "ユーザー名",
+  "page_profile_login_hint": "タップしてログイン",
+  "page_profile_info": "個人情報",
+  "page_profile_settings": "設定",
+  "page_profile_about": "会社概要",
+  "auth_login_title": "ログイン",
+  "auth_login_submit": "ログイン",
+  "auth_login_loading": "ログイン中...",
+  "auth_login_failed": "ログインに失敗しました",
+  "auth_login_to_register": "アカウントをお持ちでない方は新規登録",
+  "auth_register_title": "登録",
+  "auth_register_submit": "登録",
+  "auth_register_loading": "登録中...",
+  "auth_register_failed": "登録に失敗しました",
+  "auth_register_to_login": "既にアカウントをお持ちの方はログイン",
+  "auth_label_username": "ユーザー名",
+  "auth_label_password": "パスワード",
+  "auth_label_confirm_password": "パスワードの確認",
+  "auth_error_network": "ネットワークエラー",
+  "auth_error_password_mismatch": "パスワードが一致しません"
+}

package/templates/apps/h5/src/routes/+layout.svelte.hbs

@@ -13,8 +13,8 @@
   import { page } from '$app/state'
 {{#if hasI18n}}
   import * as m from '$lib/paraglide/messages'
-  import { getLocale } from '$lib/paraglide/runtime.js'
-  import { AppBar, BottomNav, setGlobalLocale } from '@h-ai/ui'
+  import { getLocale, setLocale } from '$lib/paraglide/runtime.js'
+  import { AppBar, BottomNav, LanguageSwitch, setGlobalLocale } from '@h-ai/ui'
 {{else}}
   import { AppBar, BottomNav } from '@h-ai/ui'
 {{/if}}
@@ -49,6 +49,11 @@
   }
 {{#if hasI18n}}
 
+  function handleLanguageChange(language: string) {
+    setGlobalLocale(language)
+    setLocale(language as Parameters<typeof setLocale>[0])
+  }
+
   if (browser) {
     const paraglideLocale = getLocale()
     setGlobalLocale(paraglideLocale)
@@ -61,14 +66,20 @@
 </svelte:head>
 
 <div class='hai-mobile-viewport'>
-  <div class='hai-mobile-shell max-w-lg'>
-    <AppBar title={page.data.appConfig.name} safeArea fixed={false} />
+  <div class='hai-mobile-shell min-w-0'>
+    <AppBar title={page.data.appConfig.name} safeArea fixed={false}>
+{{#if hasI18n}}
+      {#snippet trailing()}
+        <LanguageSwitch currentLanguage={getLocale()} onchange={handleLanguageChange} compact />
+      {/snippet}
+{{/if}}
+    </AppBar>
     <main class='hai-mobile-main'>{@render children()}</main>
     <footer class='border-t border-base-300 bg-base-100 p-2 text-center text-xs text-base-content/60'>
       {page.data.appConfig.name} · {page.data.appConfig.version} · {page.data.appConfig.env}
     </footer>
     {#if !isAuthPage}
-      <BottomNav items={navItems} active={activeNav} onchange={handleNavigation} centered maxWidth='lg' safeArea />
+      <BottomNav items={navItems} active={activeNav} onchange={handleNavigation} centered maxWidth='none' safeArea />
     {/if}
   </div>
 </div>

package/templates/apps/mobile-app/messages/ja-JP.json

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://inlang.com/schema/inlang-message-format",
+  "app_title": "モバイルワークスペース",
+  "app_description": "hai Agent Framework + Capacitor + Svelte 5で構築したモバイルアプリ",
+  "boot_failed_title": "起動に失敗しました",
+  "common_retry": "再試行",
+  "common_refresh": "更新",
+  "common_enabled": "有効",
+  "common_disabled": "無効",
+  "nav_home": "ワークスペース",
+  "nav_tasks": "タスク",
+  "nav_profile": "プロフィール",
+  "hero_eyebrow": "モバイルワークスペース",
+  "hero_title": "モバイルを中心にした実用的な出発点",
+  "hero_subtitle": "Capacitorのネイティブ機能、安全なトークン保存、共通APIクライアント、@h-ai/uiのモバイルコンポーネントを組み込んでいます。",
+  "feature_native_title": "ネイティブ対応",
+  "feature_native_desc": "ステータスバー、セーフエリア、デバイスランタイムを設定済み。プッシュ通知やカメラなどのプラグインを追加できます。",
+  "feature_api_title": "共通API",
+  "feature_api_desc": "PUBLIC_API_BASEでバックエンドに接続します。ネイティブ端末ではトークンを安全なストレージに保存します。",
+  "status_title": "実行状態",
+  "status_api_label": "APIベースURL",
+  "status_runtime_label": "実行環境",
+  "status_runtime_native": "ネイティブアプリ",
+  "status_runtime_web": "ブラウザープレビュー",
+  "status_token_label": "トークン保存",
+  "status_token_native": "安全なストレージ",
+  "status_token_memory": "メモリー内保存",
+  "tasks_title": "本日のタスク",
+  "tasks_sync": "バックエンドAPIを接続",
+  "tasks_polish": "モバイルUXを改善",
+  "tasks_release": "ネイティブのパッケージ化を準備",
+  "profile_title": "アプリ設定",
+  "profile_language": "言語はParaglideに従います",
+  "profile_theme": "テーマは@h-ai/uiに従います",
+  "profile_secure": "機密トークンはlocalStorageに保存しません"
+}

package/templates/apps/mobile-app/src/App.svelte.hbs

@@ -6,7 +6,7 @@
 {{#if features.iam}}
   import { apiClient } from '@h-ai/api-client'
 {{/if}}
-  import { applyTheme, getSavedTheme, setGlobalLocale } from '@h-ai/ui'
+  import { applyTheme, getSavedTheme, LanguageSwitch, setGlobalLocale } from '@h-ai/ui'
 {{#if features.iam}}
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 {{/if}}
@@ -17,7 +17,7 @@
   import { initCapacitor, isNativeApp } from './lib/capacitor.js'
   import { HashRouter } from './lib/navigation/hash-router.svelte.js'
   import * as m from './lib/paraglide/messages.js'
-  import { getLocale } from './lib/paraglide/runtime.js'
+  import { getLocale, setLocale } from './lib/paraglide/runtime.js'
 
 {{#if features.iam}}
   const authActions = apiClient.createAuthActions(apiClient)
@@ -57,6 +57,7 @@
       document.title = appConfig.name
       applyTheme(getSavedTheme(), false)
       setGlobalLocale(getLocale())
+      document.documentElement.lang = getLocale()
       await initCapacitor()
       await initApi()
 {{#if features.iam}}
@@ -80,6 +81,11 @@
     }
   }
 
+  function handleLanguageChange(language: string): void {
+    setGlobalLocale(language)
+    setLocale(language as Parameters<typeof setLocale>[0])
+  }
+
   /** 切换底部导航；例如 handleTabChange('tasks') 会写入 #/tasks。 */
   function handleTabChange(id: string): void {
     router.navigate(`/${id}`)
@@ -100,8 +106,12 @@
 </script>
 
 <div class='hai-mobile-viewport'>
-  <div class='hai-mobile-shell max-w-lg'>
-    <AppBar title={appConfig.name} safeArea fixed={false} class='bg-base-100/95 backdrop-blur border-base-content/8' />
+  <div class='hai-mobile-shell min-w-0'>
+    <AppBar title={appConfig.name} safeArea fixed={false} class='bg-base-100/95 backdrop-blur border-base-content/8'>
+      {#snippet trailing()}
+        <LanguageSwitch currentLanguage={getLocale()} onchange={handleLanguageChange} compact />
+      {/snippet}
+    </AppBar>
     <main class='hai-mobile-main'>
       {#if booting}
         <div class='grid min-h-64 place-items-center'><span class='loading loading-spinner loading-lg'></span></div>
@@ -129,7 +139,7 @@
 {{#if features.iam}}
     {#if authenticated && !booting && !bootError}
 {{/if}}
-      <BottomNav items={navItems} active={router.path.slice(1)} onchange={handleTabChange} safeArea centered maxWidth='lg' />
+      <BottomNav items={navItems} active={router.path.slice(1)} onchange={handleTabChange} safeArea centered maxWidth='none' />
 {{#if features.iam}}
     {/if}
 {{/if}}

package/templates/apps/mobile-app/src/lib/api.ts.hbs

@@ -1,24 +1,87 @@
 /**
  * {{projectName}} — API 客户端初始化。
  * Web 预览仅使用内存 TokenStore；原生端使用 Capacitor 安全存储。
+ * 原生存储失败会拒绝 Promise；登录/退出调用方须处理 auth.setTokens/clear 失败并释放界面 loading。
  */
 import { apiClient } from '@h-ai/api-client'
 import { createCapacitorTokenStorage } from '@h-ai/capacitor'
+{{#if features.crypto}}
+import { crypto } from '@h-ai/crypto'
+{{/if}}
 
 const DEFAULT_API_BASE = 'http://localhost:3000/api/v1'
 
 let initialized = false
+let initializing: Promise<void> | undefined
+let closing: Promise<void> | undefined
+{{#if features.crypto}}
+// 只关闭本客户端实际初始化的 crypto，保留外部调用方已有实例。
+let ownsCrypto = false
 
+/**
+ * 解析客户端传输选项；仅显式 off 连接匹配的明文 API，握手失败不降级。
+ * @returns 绑定实际 crypto 与公开协商子路径的选项，或显式明文模式的 undefined。
+ * @example 模块内部上下文
+ * ```ts
+ * const transport = resolveTransport()
+ * if (transport) {
+ *   await initApi()
+ *   try {
+ *     if (!apiClient.config?.transport) throw new Error('Transport configuration missing')
+ *   }
+ *   finally { await closeApi() }
+ * }
+ * ```
+ */
+function resolveTransport() {
+  const runtime = (globalThis as typeof globalThis & { __HAI_PUBLIC_CONFIG__?: { apiTransport?: string, apiKeyExchangePath?: string } }).__HAI_PUBLIC_CONFIG__
+  if ((runtime?.apiTransport || import.meta.env.PUBLIC_API_TRANSPORT) === 'off')
+    return undefined
+  return { crypto, keyExchangePath: runtime?.apiKeyExchangePath || import.meta.env.PUBLIC_API_KEY_EXCHANGE_PATH || '/_hai/key-exchange' }
+}
+{{/if}}
+
+/**
+ * 按公开运行配置、构建配置、本地示例地址的顺序解析含 API 前缀的 baseUrl。
+ * @returns API baseUrl；服务端私钥和连接配置不属于该公开地址。
+ * @example 模块内部上下文
+ * ```ts
+ * const base = new URL(resolveApiBase())
+ * const apiOrigin = base.origin
+ * ```
+ */
 export function resolveApiBase(): string {
   const runtime = (globalThis as typeof globalThis & { __HAI_PUBLIC_CONFIG__?: { apiBase?: string } }).__HAI_PUBLIC_CONFIG__
   return runtime?.apiBase || import.meta.env.PUBLIC_API_BASE || DEFAULT_API_BASE
 }
 
+/**
+ * 查询实际 Capacitor 平台，决定安全原生存储或 Web 内存存储。
+ * @returns 是否处于 Capacitor 原生平台；浏览器预览返回 false。
+ * @throws Error - 平台模块加载或检测失败时拒绝 Promise，不伪装为 Web 模式。
+ * @example 模块内部上下文
+ * ```ts
+ * if (await usesNativeTokenStorage()) {
+ *   const storage = createCapacitorTokenStorage()
+ *   const accessToken = await storage.getAccessToken() // 只用于认证，不输出令牌。
+ * }
+ * ```
+ */
 export async function usesNativeTokenStorage(): Promise<boolean> {
   const { Capacitor } = await import('@capacitor/core')
   return Capacitor.isNativePlatform()
 }
 
+/**
+ * 按真实平台创建 TokenStorage；绑定 client 后通过 client.auth 变更身份。
+ * @returns 原生安全存储或 Web 内存存储；其方法的读写故障继续拒绝 Promise。
+ * @throws Error - 平台检测或存储工厂失败时拒绝，不改用较弱的持久化方式。
+ * @example 模块内部上下文
+ * ```ts
+ * const storage = await createTokenStorage()
+ * const accessToken = await storage.getAccessToken() // null 表示未认证，不记录令牌。
+ * ```
+ */
 async function createTokenStorage() {
   if (await usesNativeTokenStorage())
     return createCapacitorTokenStorage()
@@ -26,29 +89,125 @@ async function createTokenStorage() {
   return apiClient.tokenStorage.memory()
 }
 
+/**
+ * 合并在途初始化并等待关闭；安全存储、所选 crypto 与 typed client 依次就绪。
+ * @returns 客户端已准备；重复调用复用同一客户端。
+ * @throws Error - 安全存储、crypto 或 client 初始化失败，业务 HaiResult 在此边界明确转成拒绝。
+ * @throws AggregateError - 初始化和本次 crypto 清理同时失败，后续 closeApi 可重试。
+ * @example 模块内部上下文；目标 API 已提供标准 IAM 端点。
+ * ```ts
+ * await initApi()
+ * try {
+ *   const current = await apiClient.iam.auth.currentUser()
+ *   if (!current.success) throw new Error(current.error.message)
+ * }
+ * finally { await closeApi() }
+ * ```
+ */
 export async function initApi(): Promise<void> {
+  if (closing)
+    await closing
   if (initialized)
     return
-
-  const initResult = await apiClient.init({
-    baseUrl: resolveApiBase(),
-    auth: {
-      storage: await createTokenStorage(),
-    },
+  if (initializing)
+    return initializing
+{{#if features.crypto}}
+  if (ownsCrypto)
+    await closeApi()
+{{/if}}
+  initializing = initialize().finally(() => {
+    initializing = undefined
   })
+  return initializing
+}
 
-  if (!initResult.success)
-    throw new Error(initResult.error.message)
-
+/**
+ * 在初始化屏障内装配客户端；安全存储先就绪，失败不退回明文并释放本次资源。
+ * @returns 当前客户端已初始化；由 initApi 管理并发屏障。
+ * @throws Error - 平台、所选 crypto 或 client 拒绝初始化。
+ * @throws AggregateError - 初始化失败且本次 crypto 未确认清理，保留关闭重试义务。
+ * @example 模块内部上下文；仅在初始化屏障内调用。
+ * ```ts
+ * await initialize()
+ * try {
+ *   const current = await apiClient.iam.auth.currentUser()
+ *   if (!current.success) throw new Error(current.error.message)
+ * }
+ * finally { await closeApi() }
+ * ```
+ */
+async function initialize(): Promise<void> {
+  const storage = await createTokenStorage()
+{{#if features.crypto}}
+  const transport = resolveTransport()
+  try {
+    if (transport && !crypto.isInitialized) {
+      const result = await crypto.init()
+      if (!result.success)
+        throw new Error(result.error.message)
+      ownsCrypto = true
+    }
+    const result = await apiClient.init({
+      baseUrl: resolveApiBase(),
+      auth: { storage },
+      ...(transport ? { transport } : {}),
+    })
+    if (!result.success)
+      throw new Error(result.error.message)
+    initialized = true
+  }
+  catch (error) {
+    if (ownsCrypto) {
+      try {
+        await crypto.close()
+        ownsCrypto = false
+      }
+      catch (cleanupError) {
+        throw new AggregateError([error, cleanupError], 'Mobile API initialization and crypto cleanup failed')
+      }
+    }
+    throw error
+  }
+{{else}}
+  const result = await apiClient.init({ baseUrl: resolveApiBase(), auth: { storage } })
+  if (!result.success)
+    throw new Error(result.error.message)
   initialized = true
+{{/if}}
 }
 
+/**
+ * 等待在途初始化，先销毁客户端 transport，再释放自身初始化的 crypto。
+ * @returns 所有本次资源确认关闭；无资源或并发关闭时安全复用。
+ * @throws Error - client 或 crypto 未确认关闭；保留状态供下一次 closeApi 重试。
+ * @example 模块内部上下文；目标 API 已提供标准 IAM 端点。
+ * ```ts
+ * await initApi()
+ * try {
+ *   const current = await apiClient.iam.auth.currentUser()
+ *   if (!current.success) throw new Error(current.error.message)
+ * }
+ * finally { await closeApi() } // 先 client，再本客户端初始化的 crypto。
+ * ```
+ */
 export async function closeApi(): Promise<void> {
-  if (!initialized)
-    return
-
-  await apiClient.close()
-  initialized = false
+  closing ??= (async () => {
+    if (initializing)
+      await initializing.catch(() => undefined)
+    if (initialized) {
+      await apiClient.close()
+      initialized = false
+    }
+{{#if features.crypto}}
+    if (ownsCrypto) {
+      await crypto.close()
+      ownsCrypto = false
+    }
+{{/if}}
+  })().finally(() => {
+    closing = undefined
+  })
+  return closing
 }
 
 export { apiClient }

package/templates/apps/mobile-app/src/lib/pages/home.svelte.hbs

@@ -12,8 +12,8 @@
   const { nativeRuntime, nativeTokenStorage }: Props = $props()
 </script>
 
-<section class='space-y-4 p-4 pb-6'>
-  <div class='bg-primary text-primary-content rounded-2xl p-5 shadow-sm'>
+<section class='grid gap-4 p-4 pb-6 lg:grid-cols-2'>
+  <div class='lg:col-span-2 bg-primary text-primary-content rounded-2xl p-5 shadow-sm'>
     <p class='text-sm opacity-75'>{m.hero_eyebrow()}</p>
     <h1 class='mt-1 text-2xl font-bold'>{m.hero_title()}</h1>
     <p class='mt-2 text-sm opacity-80'>{m.hero_subtitle()}</p>

package/templates/apps/website/messages/ja-JP.json

@@ -0,0 +1,32 @@
+{
+  "app_title": "企業サイト",
+  "app_description": "企業の公式サイト",
+  "meta_description": "企業の公式サイト",
+  "nav_home": "ホーム",
+  "nav_about": "会社概要",
+  "nav_services": "サービス",
+  "nav_contact": "担当者",
+  "page_home_title": "ようこそ",
+  "page_home_subtitle": "専門的で信頼できる企業向けサービス",
+  "page_home_cta": "お問い合わせ",
+  "page_home_advantages": "私たちの強み",
+  "page_home_team": "専門チーム",
+  "page_home_team_desc": "長年の業界経験を持つチームです。",
+  "page_home_service": "高品質なサービス",
+  "page_home_service_desc": "総合的で質の高いサポートを提供します。",
+  "page_home_tech": "革新的な技術",
+  "page_home_tech_desc": "業界をリードする革新的な技術ソリューション。",
+  "page_about_title": "会社概要",
+  "page_about_desc": "企業情報とこれまでの歩み。",
+  "page_services_title": "サービス",
+  "page_services_item1": "サービス1",
+  "page_services_item2": "サービス2",
+  "page_services_desc": "サービスの説明。",
+  "page_contact_title": "お問い合わせ",
+  "page_contact_desc": "ご質問はお気軽にお問い合わせください。",
+  "page_contact_name": "お名前",
+  "page_contact_email": "メールアドレス",
+  "page_contact_message": "メッセージ",
+  "page_contact_submit": "送信",
+  "footer_copyright": "Copyright © {year}. All rights reserved."
+}

package/templates/apps/website/src/routes/+layout.svelte.hbs

@@ -11,8 +11,8 @@
   import { page } from '$app/state'
 {{#if hasI18n}}
   import * as m from '$lib/paraglide/messages'
-  import { getLocale } from '$lib/paraglide/runtime.js'
-  import { setGlobalLocale } from '@h-ai/ui'
+  import { getLocale, setLocale } from '$lib/paraglide/runtime.js'
+  import { LanguageSwitch, setGlobalLocale } from '@h-ai/ui'
 {{/if}}
   import '../app.css'
 
@@ -37,6 +37,11 @@
   ] as const
 {{#if hasI18n}}
 
+  function handleLanguageChange(language: string) {
+    setGlobalLocale(language)
+    setLocale(language as Parameters<typeof setLocale>[0])
+  }
+
   if (browser) {
     const paraglideLocale = getLocale()
     setGlobalLocale(paraglideLocale)
@@ -49,7 +54,7 @@
 </svelte:head>
 
 <div class='min-h-screen flex flex-col'>
-  <header class='navbar bg-base-100 shadow-sm'>
+  <header class='navbar flex-wrap bg-base-100 shadow-sm'>
     <div class='flex-1'>
 {{#if hasI18n}}
       <a href={resolve('/', {})} class='btn btn-ghost text-xl font-black tracking-tight'>{page.data.appConfig.name}</a>
@@ -57,13 +62,16 @@
       <a href={resolve('/', {})} class='btn btn-ghost text-xl font-black tracking-tight'>{page.data.appConfig.name}</a>
 {{/if}}
     </div>
-    <nav class='flex-none'>
-      <ul class='menu menu-horizontal px-1'>
+    <nav class='w-full flex-none sm:w-auto'>
+      <ul class='menu menu-horizontal flex-wrap px-1'>
         {#each navItems as item (item.path)}
           <li><a href={resolve(item.path, {})}>{item.label}</a></li>
         {/each}
       </ul>
     </nav>
+{{#if hasI18n}}
+    <LanguageSwitch currentLanguage={getLocale()} onchange={handleLanguageChange} />
+{{/if}}
   </header>
 
   <main class='flex-1'>

package/templates/apps/website/src/routes/services/+page.svelte.hbs

@@ -31,7 +31,7 @@
 {{/if}}
 </svelte:head>
 
-<section class='py-16 px-4 max-w-4xl mx-auto'>
+<section class='mx-auto w-full max-w-[120rem] px-4 py-16 sm:px-6 lg:px-8'>
 {{#if hasI18n}}
   <PageHeader title={m.page_services_title()} description={m.page_services_desc()} />
 {{else}}