@h-ai/cli 0.1.0-alpha9 → 1.0.0-beta.2

package/templates/apps/mobile-app/src/lib/api.ts.hbs

@@ -0,0 +1,213 @@
+/**
+ * {{projectName}} — API 客户端初始化。
+ * Web 预览仅使用内存 TokenStore；原生端使用 Capacitor 安全存储。
+ * 原生存储失败会拒绝 Promise；登录/退出调用方须处理 auth.setTokens/clear 失败并释放界面 loading。
+ */
+import { apiClient } from '@h-ai/api-client'
+import { createCapacitorTokenStorage } from '@h-ai/capacitor'
+{{#if features.crypto}}
+import { crypto } from '@h-ai/crypto'
+{{/if}}
+
+const DEFAULT_API_BASE = 'http://localhost:3000/api/v1'
+
+let initialized = false
+let initializing: Promise<void> | undefined
+let closing: Promise<void> | undefined
+{{#if features.crypto}}
+// 只关闭本客户端实际初始化的 crypto，保留外部调用方已有实例。
+let ownsCrypto = false
+
+/**
+ * 解析客户端传输选项；仅显式 off 连接匹配的明文 API，握手失败不降级。
+ * @returns 绑定实际 crypto 与公开协商子路径的选项，或显式明文模式的 undefined。
+ * @example 模块内部上下文
+ * ```ts
+ * const transport = resolveTransport()
+ * if (transport) {
+ *   await initApi()
+ *   try {
+ *     if (!apiClient.config?.transport) throw new Error('Transport configuration missing')
+ *   }
+ *   finally { await closeApi() }
+ * }
+ * ```
+ */
+function resolveTransport() {
+  const runtime = (globalThis as typeof globalThis & { __HAI_PUBLIC_CONFIG__?: { apiTransport?: string, apiKeyExchangePath?: string } }).__HAI_PUBLIC_CONFIG__
+  if ((runtime?.apiTransport || import.meta.env.PUBLIC_API_TRANSPORT) === 'off')
+    return undefined
+  return { crypto, keyExchangePath: runtime?.apiKeyExchangePath || import.meta.env.PUBLIC_API_KEY_EXCHANGE_PATH || '/_hai/key-exchange' }
+}
+{{/if}}
+
+/**
+ * 按公开运行配置、构建配置、本地示例地址的顺序解析含 API 前缀的 baseUrl。
+ * @returns API baseUrl；服务端私钥和连接配置不属于该公开地址。
+ * @example 模块内部上下文
+ * ```ts
+ * const base = new URL(resolveApiBase())
+ * const apiOrigin = base.origin
+ * ```
+ */
+export function resolveApiBase(): string {
+  const runtime = (globalThis as typeof globalThis & { __HAI_PUBLIC_CONFIG__?: { apiBase?: string } }).__HAI_PUBLIC_CONFIG__
+  return runtime?.apiBase || import.meta.env.PUBLIC_API_BASE || DEFAULT_API_BASE
+}
+
+/**
+ * 查询实际 Capacitor 平台，决定安全原生存储或 Web 内存存储。
+ * @returns 是否处于 Capacitor 原生平台；浏览器预览返回 false。
+ * @throws Error - 平台模块加载或检测失败时拒绝 Promise，不伪装为 Web 模式。
+ * @example 模块内部上下文
+ * ```ts
+ * if (await usesNativeTokenStorage()) {
+ *   const storage = createCapacitorTokenStorage()
+ *   const accessToken = await storage.getAccessToken() // 只用于认证，不输出令牌。
+ * }
+ * ```
+ */
+export async function usesNativeTokenStorage(): Promise<boolean> {
+  const { Capacitor } = await import('@capacitor/core')
+  return Capacitor.isNativePlatform()
+}
+
+/**
+ * 按真实平台创建 TokenStorage；绑定 client 后通过 client.auth 变更身份。
+ * @returns 原生安全存储或 Web 内存存储；其方法的读写故障继续拒绝 Promise。
+ * @throws Error - 平台检测或存储工厂失败时拒绝，不改用较弱的持久化方式。
+ * @example 模块内部上下文
+ * ```ts
+ * const storage = await createTokenStorage()
+ * const accessToken = await storage.getAccessToken() // null 表示未认证，不记录令牌。
+ * ```
+ */
+async function createTokenStorage() {
+  if (await usesNativeTokenStorage())
+    return createCapacitorTokenStorage()
+
+  return apiClient.tokenStorage.memory()
+}
+
+/**
+ * 合并在途初始化并等待关闭；安全存储、所选 crypto 与 typed client 依次就绪。
+ * @returns 客户端已准备；重复调用复用同一客户端。
+ * @throws Error - 安全存储、crypto 或 client 初始化失败，业务 HaiResult 在此边界明确转成拒绝。
+ * @throws AggregateError - 初始化和本次 crypto 清理同时失败，后续 closeApi 可重试。
+ * @example 模块内部上下文；目标 API 已提供标准 IAM 端点。
+ * ```ts
+ * await initApi()
+ * try {
+ *   const current = await apiClient.iam.auth.currentUser()
+ *   if (!current.success) throw new Error(current.error.message)
+ * }
+ * finally { await closeApi() }
+ * ```
+ */
+export async function initApi(): Promise<void> {
+  if (closing)
+    await closing
+  if (initialized)
+    return
+  if (initializing)
+    return initializing
+{{#if features.crypto}}
+  if (ownsCrypto)
+    await closeApi()
+{{/if}}
+  initializing = initialize().finally(() => {
+    initializing = undefined
+  })
+  return initializing
+}
+
+/**
+ * 在初始化屏障内装配客户端；安全存储先就绪，失败不退回明文并释放本次资源。
+ * @returns 当前客户端已初始化；由 initApi 管理并发屏障。
+ * @throws Error - 平台、所选 crypto 或 client 拒绝初始化。
+ * @throws AggregateError - 初始化失败且本次 crypto 未确认清理，保留关闭重试义务。
+ * @example 模块内部上下文；仅在初始化屏障内调用。
+ * ```ts
+ * await initialize()
+ * try {
+ *   const current = await apiClient.iam.auth.currentUser()
+ *   if (!current.success) throw new Error(current.error.message)
+ * }
+ * finally { await closeApi() }
+ * ```
+ */
+async function initialize(): Promise<void> {
+  const storage = await createTokenStorage()
+{{#if features.crypto}}
+  const transport = resolveTransport()
+  try {
+    if (transport && !crypto.isInitialized) {
+      const result = await crypto.init()
+      if (!result.success)
+        throw new Error(result.error.message)
+      ownsCrypto = true
+    }
+    const result = await apiClient.init({
+      baseUrl: resolveApiBase(),
+      auth: { storage },
+      ...(transport ? { transport } : {}),
+    })
+    if (!result.success)
+      throw new Error(result.error.message)
+    initialized = true
+  }
+  catch (error) {
+    if (ownsCrypto) {
+      try {
+        await crypto.close()
+        ownsCrypto = false
+      }
+      catch (cleanupError) {
+        throw new AggregateError([error, cleanupError], 'Mobile API initialization and crypto cleanup failed')
+      }
+    }
+    throw error
+  }
+{{else}}
+  const result = await apiClient.init({ baseUrl: resolveApiBase(), auth: { storage } })
+  if (!result.success)
+    throw new Error(result.error.message)
+  initialized = true
+{{/if}}
+}
+
+/**
+ * 等待在途初始化，先销毁客户端 transport，再释放自身初始化的 crypto。
+ * @returns 所有本次资源确认关闭；无资源或并发关闭时安全复用。
+ * @throws Error - client 或 crypto 未确认关闭；保留状态供下一次 closeApi 重试。
+ * @example 模块内部上下文；目标 API 已提供标准 IAM 端点。
+ * ```ts
+ * await initApi()
+ * try {
+ *   const current = await apiClient.iam.auth.currentUser()
+ *   if (!current.success) throw new Error(current.error.message)
+ * }
+ * finally { await closeApi() } // 先 client，再本客户端初始化的 crypto。
+ * ```
+ */
+export async function closeApi(): Promise<void> {
+  closing ??= (async () => {
+    if (initializing)
+      await initializing.catch(() => undefined)
+    if (initialized) {
+      await apiClient.close()
+      initialized = false
+    }
+{{#if features.crypto}}
+    if (ownsCrypto) {
+      await crypto.close()
+      ownsCrypto = false
+    }
+{{/if}}
+  })().finally(() => {
+    closing = undefined
+  })
+  return closing
+}
+
+export { apiClient }

package/templates/apps/mobile-app/src/lib/app-config.ts.hbs

@@ -0,0 +1,14 @@
+import type { CoreConfig } from '@h-ai/core'
+import { core } from '@h-ai/core'
+
+declare const __APP_CORE_CONFIG__: Pick<CoreConfig, 'name' | 'version' | 'env' | 'defaultLocale'> & {
+  logging?: Pick<NonNullable<CoreConfig['logging']>, 'level' | 'format'>
+}
+
+/** 构建包含公开默认值；预览或容器启动时的公开配置覆盖默认值，不重建静态资源。 */
+const runtime = (globalThis as typeof globalThis & { __HAI_PUBLIC_CONFIG__?: { core?: Partial<typeof __APP_CORE_CONFIG__> } }).__HAI_PUBLIC_CONFIG__?.core
+export const appConfig = { ...__APP_CORE_CONFIG__, ...runtime, logging: { ...__APP_CORE_CONFIG__.logging, ...runtime?.logging } }
+
+export function initClientCore(): void {
+  core.init({ logging: appConfig.logging })
+}

package/templates/apps/{android-app → mobile-app}/src/lib/capacitor.ts

@@ -1,20 +1,19 @@
 /**
- * Capacitor 初始化
- *
- * 在应用启动时调用，配置状态栏等原生能力。
+ * Capacitor 初始化。
  */
 import { capacitor } from '@h-ai/capacitor'
 
-/**
- * 初始化 Capacitor 原生能力
- */
+export async function isNativeApp(): Promise<boolean> {
+  return capacitor.isNative()
+}
+
 export async function initCapacitor(): Promise<void> {
   await capacitor.init()
 
   if (capacitor.isNative()) {
     await capacitor.statusBar.configure({
       backgroundColor: '#ffffff',
-      style: 'LIGHT',
+      style: 'light',
       overlay: false,
     })
   }

package/templates/apps/mobile-app/src/lib/pages/home.svelte.hbs

@@ -0,0 +1,58 @@
+<script lang='ts'>
+  import { resolveApiBase } from '../api.js'
+  import { appConfig } from '../app-config.js'
+  import * as m from '../paraglide/messages.js'
+  /** 首页展示的平台运行状态；例如 { nativeRuntime: true, nativeTokenStorage: true }。 */
+  interface Props {
+    /** 是否运行于原生壳。 */
+    nativeRuntime: boolean
+    /** 是否使用原生安全凭据存储。 */
+    nativeTokenStorage: boolean
+  }
+  const { nativeRuntime, nativeTokenStorage }: Props = $props()
+</script>
+
+<section class='grid gap-4 p-4 pb-6 lg:grid-cols-2'>
+  <div class='lg:col-span-2 bg-primary text-primary-content rounded-2xl p-5 shadow-sm'>
+    <p class='text-sm opacity-75'>{m.hero_eyebrow()}</p>
+    <h1 class='mt-1 text-2xl font-bold'>{m.hero_title()}</h1>
+    <p class='mt-2 text-sm opacity-80'>{m.hero_subtitle()}</p>
+  </div>
+
+  <div class='grid grid-cols-2 gap-3'>
+    <Card padding='sm' shadow='sm'>
+      <div class='flex flex-col gap-2'>
+        <span class='icon-[tabler--device-mobile-code] text-primary text-2xl'></span>
+        <span class='text-sm font-medium'>{m.feature_native_title()}</span>
+        <span class='text-base-content/60 text-xs'>{m.feature_native_desc()}</span>
+      </div>
+    </Card>
+    <Card padding='sm' shadow='sm'>
+      <div class='flex flex-col gap-2'>
+        <span class='icon-[tabler--api-app] text-primary text-2xl'></span>
+        <span class='text-sm font-medium'>{m.feature_api_title()}</span>
+        <span class='text-base-content/60 text-xs'>{m.feature_api_desc()}</span>
+      </div>
+    </Card>
+  </div>
+
+  <Card title={m.status_title()} shadow='sm'>
+    <p class='mb-3 text-xs text-base-content/50'>{appConfig.name} · {appConfig.version} · {appConfig.env}</p>
+    <div class='grid grid-cols-2 gap-3 text-sm'>
+      <div>
+        <p class='text-base-content/50'>{m.status_api_label()}</p>
+        <p class='font-medium break-all'>{resolveApiBase()}</p>
+      </div>
+      <div>
+        <p class='text-base-content/50'>{m.status_runtime_label()}</p>
+        <Badge variant={nativeRuntime ? 'success' : 'warning'} size='sm'>
+          {nativeRuntime ? m.status_runtime_native() : m.status_runtime_web()}
+        </Badge>
+      </div>
+      <div class='col-span-2'>
+        <p class='text-base-content/50'>{m.status_token_label()}</p>
+        <p class='font-medium'>{nativeTokenStorage ? m.status_token_native() : m.status_token_memory()}</p>
+      </div>
+    </div>
+  </Card>
+</section>

package/templates/apps/mobile-app/src/lib/pages/profile.svelte.hbs

@@ -0,0 +1,13 @@
+<script lang='ts'>
+  import * as m from '../paraglide/messages.js'
+</script>
+
+<section class='space-y-4 p-4 pb-6'>
+  <Card title={m.profile_title()} shadow='sm'>
+    <div class='space-y-3 text-sm'>
+      <div class='bg-base-200 rounded-xl p-3'>{m.profile_language()}</div>
+      <div class='bg-base-200 rounded-xl p-3'>{m.profile_theme()}</div>
+      <div class='bg-base-200 rounded-xl p-3'>{m.profile_secure()}</div>
+    </div>
+  </Card>
+</section>

package/templates/apps/mobile-app/src/lib/pages/tasks.svelte.hbs

@@ -0,0 +1,16 @@
+<script lang='ts'>
+  import * as m from '../paraglide/messages.js'
+</script>
+
+<section class='space-y-4 p-4 pb-6'>
+  <Card title={m.tasks_title()} shadow='sm'>
+    <div class='space-y-3'>
+      {#each [m.tasks_sync(), m.tasks_polish(), m.tasks_release()] as task (task)}
+        <div class='bg-base-200 rounded-xl flex items-center gap-3 p-3'>
+          <span class='icon-[tabler--circle-check] text-success text-xl'></span>
+          <span class='text-sm font-medium'>{task}</span>
+        </div>
+      {/each}
+    </div>
+  </Card>
+</section>

package/templates/apps/mobile-app/src/main.ts.hbs

@@ -0,0 +1,11 @@
+import { mount } from 'svelte'
+import App from './App.svelte'
+import './app.css'
+
+const target = document.getElementById('app')
+if (!target)
+  throw new Error('Root element #app not found')
+
+const app = mount(App, { target })
+
+export default app

package/templates/apps/website/messages/en-US.json

@@ -19,8 +19,9 @@
   "page_about_title": "About Us",
   "page_about_desc": "Company information and development history.",
   "page_services_title": "Our Services",
-  "page_services_item1": "Service One",
-  "page_services_item2": "Service Two",
+  "page_services_item1": "Technical Consulting",
+  "page_services_item2": "Custom Development",
+  "page_services_item3": "Operations Support",
   "page_services_desc": "Service description content.",
   "page_contact_title": "Contact Us",
   "page_contact_desc": "Have any questions? Feel free to contact us.",
@@ -28,5 +29,6 @@
   "page_contact_email": "Email",
   "page_contact_message": "Message",
   "page_contact_submit": "Send",
+  "page_contact_unavailable": "Online messages are not available yet. Please use another contact method. Your input has been kept.",
   "footer_copyright": "Copyright © {year}. All rights reserved."
 }

package/templates/apps/website/messages/ja-JP.json

@@ -0,0 +1,34 @@
+{
+  "app_title": "企業サイト",
+  "app_description": "企業の公式サイト",
+  "meta_description": "企業の公式サイト",
+  "nav_home": "ホーム",
+  "nav_about": "会社概要",
+  "nav_services": "サービス",
+  "nav_contact": "担当者",
+  "page_home_title": "ようこそ",
+  "page_home_subtitle": "専門的で信頼できる企業向けサービス",
+  "page_home_cta": "お問い合わせ",
+  "page_home_advantages": "私たちの強み",
+  "page_home_team": "専門チーム",
+  "page_home_team_desc": "長年の業界経験を持つチームです。",
+  "page_home_service": "高品質なサービス",
+  "page_home_service_desc": "総合的で質の高いサポートを提供します。",
+  "page_home_tech": "革新的な技術",
+  "page_home_tech_desc": "業界をリードする革新的な技術ソリューション。",
+  "page_about_title": "会社概要",
+  "page_about_desc": "企業情報とこれまでの歩み。",
+  "page_services_title": "サービス",
+  "page_services_item1": "技術コンサルティング",
+  "page_services_item2": "カスタム開発",
+  "page_services_item3": "運用サポート",
+  "page_services_desc": "サービスの説明。",
+  "page_contact_title": "お問い合わせ",
+  "page_contact_desc": "ご質問はお気軽にお問い合わせください。",
+  "page_contact_name": "お名前",
+  "page_contact_email": "メールアドレス",
+  "page_contact_message": "メッセージ",
+  "page_contact_submit": "送信",
+  "page_contact_unavailable": "オンラインメッセージは未対応です。別の連絡方法をご利用ください。入力内容は保持されています。",
+  "footer_copyright": "Copyright © {year}. All rights reserved."
+}

package/templates/apps/website/messages/zh-CN.json

@@ -19,8 +19,9 @@
   "page_about_title": "关于我们",
   "page_about_desc": "在此介绍公司信息和发展历程。",
   "page_services_title": "我们的服务",
-  "page_services_item1": "服务一",
-  "page_services_item2": "服务二",
+  "page_services_item1": "咨询服务",
+  "page_services_item2": "定制开发",
+  "page_services_item3": "运维支持",
   "page_services_desc": "服务描述内容。",
   "page_contact_title": "联系我们",
   "page_contact_desc": "有任何疑问？欢迎联系我们。",
@@ -28,5 +29,6 @@
   "page_contact_email": "邮箱",
   "page_contact_message": "留言",
   "page_contact_submit": "发送",
+  "page_contact_unavailable": "在线留言尚未开通，请使用其他联系方式。您的输入已保留。",
   "footer_copyright": "Copyright © {year}. All rights reserved."
 }

package/templates/apps/website/scripts/static-website.mjs.hbs

@@ -0,0 +1,67 @@
+/** website静态构建的显式开关、公开子路径和路由边界；普通SSR保持默认。 */
+import { existsSync, lstatSync, readdirSync } from 'node:fs'
+import path from 'node:path'
+import process from 'node:process'
+import { core } from '@h-ai/core'
+import { resolvePublicBasePath } from './public-base-path.mjs'
+
+const message = core.i18n.createMessageGetter({
+  'zh-CN': {
+    flag: 'HAI_BUILD_STATIC仅支持0或1；省略或0保持SSR，1启用website静态构建。',
+    base: 'PUBLIC_BASE_PATH须为空或以/开头的站内目录；不允许外部地址、末尾/、查询、片段或路径逃逸。',
+    modules: '静态website不能启用服务端业务模块。请使用--features none创建纯展示站点，或继续使用默认SSR。',
+    routes: '静态website不能包含自定义API、表单actions或未预渲染页面；请移除动态入口或使用SSR。',
+    assets: 'static是公开资产目录，不能放入.env私有环境文件或符号链接；请移动私有内容后重新构建。',
+  },
+  'en-US': {
+    flag: 'HAI_BUILD_STATIC accepts only 0 or 1: omitted/0 keeps SSR, and 1 enables a static website build.',
+    base: 'PUBLIC_BASE_PATH must be empty or a site-local directory beginning with /. External URLs, trailing /, queries, fragments and path traversal are not allowed.',
+    modules: 'A static website cannot enable server-side business modules. Create a presentation site with --features none, or keep the default SSR mode.',
+    routes: 'A static website cannot contain custom APIs, form actions or pages that were not prerendered. Remove dynamic routes or use SSR.',
+    assets: 'static is a public asset directory and cannot contain private .env files or symbolic links. Move private content before building.',
+  },
+  'ja-JP': {
+    flag: 'HAI_BUILD_STATICは0または1です。省略/0はSSR、1はwebsiteの静的構築を有効にします。',
+    base: 'PUBLIC_BASE_PATHは空、または/で始まるサイト内ディレクトリーです。外部URL、末尾の/、クエリー、フラグメント、パス逸脱は使えません。',
+    modules: '静的websiteではサーバー業務モジュールを有効にできません。--features noneで表示専用サイトを作成するか、既定のSSRを使用してください。',
+    routes: '静的websiteに独自API、form actions、事前描画されないページを含められません。動的ルートを削除するかSSRを使用してください。',
+    assets: 'staticは公開資産ディレクトリーです。非公開.envファイルやシンボリックリンクを置かず、非公開内容を移動してから構築してください。',
+  },
+})
+const serverFeatures = [{{#each websiteServerFeatures}}'{{this}}'{{#unless @last}}, {{/unless}}{{/each}}]
+const requestedLocale = [process.env.HAI_CORE_DEFAULTLOCALE, process.env.LC_ALL, process.env.LC_MESSAGES, process.env.LANG].find(value => value?.trim())?.split(/[_.-]/)[0]?.toLowerCase()
+const locale = requestedLocale === 'en' || requestedLocale === 'c' || requestedLocale === 'posix' ? 'en-US' : requestedLocale === 'ja' ? 'ja-JP' : 'zh-CN'
+
+/** 只读取显式构建值，不加载dotenv和服务端秘密。 */
+export function resolveStaticWebsite() {
+  const flag = process.env.HAI_BUILD_STATIC
+  if (flag !== undefined && flag !== '' && flag !== '0' && flag !== '1')
+    throw new Error(message('flag', { locale }))
+  const enabled = flag === '1'
+  const base = resolvePublicBasePath()
+  if (enabled && serverFeatures.length)
+    throw new Error(`${message('modules', { locale })} (${serverFeatures.join(', ')})`)
+  if (enabled) {
+    const assets = path.resolve(process.cwd(), 'static')
+    if (existsSync(assets)) {
+      if (lstatSync(assets).isSymbolicLink())
+        throw new Error(message('assets', { locale }))
+      for (const entry of readdirSync(assets, { recursive: true, withFileTypes: true })) {
+        if (entry.isSymbolicLink() || entry.name === '.env' || entry.name.startsWith('.env.'))
+          throw new Error(message('assets', { locale }))
+      }
+    }
+  }
+  return { enabled, base }
+}
+
+/** @param {import('@sveltejs/kit').Builder['routes']} routes - SvelteKit实际解析的路由。 */
+export function validateStaticRoutes(routes) {
+  const invalid = routes.filter((route) => {
+    // Builder始终提供api/page对象；只按实际方法判断，模板健康端点也不能豁免新增写入方法。
+    const templateHealth = route.id === '/api/health' && route.page.methods.length === 0 && route.api.methods.length > 0 && route.api.methods.every(method => method === 'GET' || method === 'HEAD')
+    return !templateHealth && (route.api.methods.length > 0 || route.prerender !== true || route.page.methods.includes('POST'))
+  })
+  if (invalid.length)
+    throw new Error(`${message('routes', { locale })} (${invalid.map(route => route.id).join(', ')})`)
+}

package/templates/apps/website/src/routes/+layout.svelte.hbs

@@ -1,23 +1,73 @@
 {{!-- 官网根布局 --}}
-<script lang="ts">
+<script lang='ts'>
   /**
    * 官网根布局
    */
   import type { Snippet } from 'svelte'
-  import '../app.css'
 {{#if hasI18n}}
   import { browser } from '$app/environment'
-  import { setGlobalLocale } from '@h-ai/ui'
-  import { getLocale } from '$lib/paraglide/runtime.js'
+{{else}}
+{{#if features.crypto}}
+  import { browser } from '$app/environment'
+{{/if}}
+{{/if}}
+  import { {{#if features.iam}}base, {{else}}{{#if features.crypto}}base, {{/if}}{{/if}}resolve } from '$app/paths'
+  import { page } from '$app/state'
+{{#if hasI18n}}
   import * as m from '$lib/paraglide/messages'
+  import { getLocale, setLocale } from '$lib/paraglide/runtime.js'
+{{/if}}
+{{#if features.crypto}}
+  import { crypto } from '@h-ai/crypto'
+  import { kit } from '@h-ai/kit'
+{{else}}
+{{#if features.iam}}
+  import { kit } from '@h-ai/kit'
+{{/if}}
 {{/if}}
+{{#if hasI18n}}
+  import { LanguageSwitch, setGlobalLocale, ToastContainer } from '@h-ai/ui'
+{{else}}
+  import { ToastContainer } from '@h-ai/ui'
+{{/if}}
+{{#if features.crypto}}
+  import { untrack } from 'svelte'
+{{/if}}
+  import '../app.css'
 
   interface Props {
     children: Snippet
   }
 
-  let { children }: Props = $props()
+  const { children }: Props = $props()
+{{#if features.crypto}}
+  if (browser)
+    kit.client.installBrowserTransport(untrack(() => page.data.kitConfig), { crypto, basePath: base })
+{{/if}}
+{{#if features.iam}}
+  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  $effect(() => authActions.bindPageExit({ enabled: page.data.iamPublicConfig?.session.endOnPageHide }))
+{{/if}}
+
+  const navItems = [
 {{#if hasI18n}}
+    { path: '/', label: m.nav_home() },
+    { path: '/about', label: m.nav_about() },
+    { path: '/services', label: m.nav_services() },
+    { path: '/contact', label: m.nav_contact() },
+{{else}}
+    { path: '/', label: '首页' },
+    { path: '/about', label: '关于' },
+    { path: '/services', label: '服务' },
+    { path: '/contact', label: '联系我们' },
+{{/if}}
+  ] as const
+{{#if hasI18n}}
+
+  function handleLanguageChange(language: string) {
+    setGlobalLocale(language)
+    setLocale(language as Parameters<typeof setLocale>[0])
+  }
 
   if (browser) {
     const paraglideLocale = getLocale()
@@ -26,41 +76,42 @@
 {{/if}}
 </script>
 
-<div class="min-h-screen flex flex-col">
-  <header class="navbar bg-base-100 shadow-sm">
-    <div class="flex-1">
+<svelte:head>
+  <title>{page.data.appConfig.name}</title>
+</svelte:head>
+
+<div class='min-h-screen flex flex-col'>
+  <header class='navbar flex-wrap bg-base-100 shadow-sm'>
+    <div class='flex-1'>
 {{#if hasI18n}}
-      <a href="/" class="btn btn-ghost text-xl">{m.app_title()}</a>
+      <a href={resolve('/', {})} class='btn btn-ghost text-xl font-black tracking-tight'>{page.data.appConfig.name}</a>
 {{else}}
-      <a href="/" class="btn btn-ghost text-xl">官网</a>
+      <a href={resolve('/', {})} class='btn btn-ghost text-xl font-black tracking-tight'>{page.data.appConfig.name}</a>
 {{/if}}
     </div>
-    <nav class="flex-none">
-      <ul class="menu menu-horizontal px-1">
-{{#if hasI18n}}
-        <li><a href="/">{m.nav_home()}</a></li>
-        <li><a href="/about">{m.nav_about()}</a></li>
-        <li><a href="/services">{m.nav_services()}</a></li>
-        <li><a href="/contact">{m.nav_contact()}</a></li>
-{{else}}
-        <li><a href="/">首页</a></li>
-        <li><a href="/about">关于</a></li>
-        <li><a href="/services">服务</a></li>
-        <li><a href="/contact">联系我们</a></li>
-{{/if}}
+    <nav class='w-full flex-none sm:w-auto'>
+      <ul class='menu menu-horizontal flex-wrap px-1'>
+        {#each navItems as item (item.path)}
+          <li><a href={resolve(item.path, {})}>{item.label}</a></li>
+        {/each}
       </ul>
     </nav>
+{{#if hasI18n}}
+    <LanguageSwitch currentLanguage={getLocale()} onchange={handleLanguageChange} />
+{{/if}}
   </header>
 
-  <main class="flex-1">
+  <main class='flex-1'>
     {@render children()}
   </main>
 
-  <footer class="footer footer-center p-4 bg-base-300 text-base-content">
+  <footer class='footer footer-center p-4 bg-base-300 text-base-content'>
+    <span>{page.data.appConfig.name} · {page.data.appConfig.version} · {page.data.appConfig.env}</span>
 {{#if hasI18n}}
-    <p>{m.footer_copyright()}</p>
+    <p>{m.footer_copyright({ year: new Date().getFullYear() })}</p>
 {{else}}
     <p>Copyright © 2025 - All rights reserved</p>
 {{/if}}
   </footer>
 </div>
+<ToastContainer />

package/templates/apps/website/src/routes/+layout.ts

@@ -0,0 +1,3 @@
+// Vite公开开关只影响静态展示；服务端模块在构建入口预检时拒绝，不降级运行守卫。
+export const prerender = __HAI_BUILD_STATIC__
+export const trailingSlash = __HAI_BUILD_STATIC__ ? 'always' : 'never'