@h-ai/cli 1.0.0-beta.18 → 1.0.0-beta.19

package/templates/apps/api/playwright.config.ts.hbs

@@ -24,7 +24,9 @@ function resolvePortFromBaseUrl(urlString: string, fallbackPort: string): string
       return url.port
     }
 
-    return url.protocol === 'https:' ? '443' : '80'
+    return url.protocol === 'https:'
+      ? '443'
+      : '80'
   }
   catch {
     return fallbackPort
@@ -46,22 +48,24 @@ export default defineConfig({
     trace: 'retain-on-failure',
     screenshot: 'only-on-failure',
   },
-  webServer: [{
-    name: '{{api.servPackageName}}',
-    command: 'pnpm --filter {{api.servPackageName}} exec node dist/index.js',
-    env: createE2eServerEnv({
-      ...createE2eNotificationEnv(),
-      HAI_CORE_ENV: 'test',
-      HAI_DB: JSON.stringify({ type: 'sqlite', database: `${process.env.HAI_E2E_DATA_ROOT}/api.db` }),
-      HAI_CACHE: JSON.stringify({ type: 'memory' }),
-      HAI_STORAGE: JSON.stringify({ type: 'local', root: `${process.env.HAI_E2E_DATA_ROOT}/uploads` }),
-      HAI_VECDB: JSON.stringify({ type: 'lancedb', path: `${process.env.HAI_E2E_DATA_ROOT}/vecdb` }),
-      HAI_CRYPTO_TRANSPORT_SERVERKEYRING: createE2eTransportRing(),
-      HOST: serviceHost,
-      PORT: servicePort,
-    }),
-    url: `${baseURL}/health`,
-    reuseExistingServer: false,
-    timeout: 120_000,
-  }],
+  webServer: [
+    {
+      name: '{{api.servPackageName}}',
+      command: 'pnpm --filter {{api.servPackageName}} exec node dist/index.js',
+      env: createE2eServerEnv({
+        ...createE2eNotificationEnv(),
+        HAI_CORE_ENV: 'test',
+        HAI_DB: JSON.stringify({ type: 'sqlite', database: `${process.env.HAI_E2E_DATA_ROOT}/api.db` }),
+        HAI_CACHE: JSON.stringify({ type: 'memory' }),
+        HAI_STORAGE: JSON.stringify({ type: 'local', root: `${process.env.HAI_E2E_DATA_ROOT}/uploads` }),
+        HAI_VECDB: JSON.stringify({ type: 'lancedb', path: `${process.env.HAI_E2E_DATA_ROOT}/vecdb` }),
+        HAI_CRYPTO_TRANSPORT_SERVERKEYRING: createE2eTransportRing(),
+        HOST: serviceHost,
+        PORT: servicePort,
+      }),
+      url: `${baseURL}/health`,
+      reuseExistingServer: false,
+      timeout: 120_000,
+    },
+  ],
 })

package/templates/apps/api/pnpm-workspace.yaml.hbs

@@ -1,5 +1,5 @@
 {{! @skipIfEmpty }}
-shellEmulator: true
+minimumReleaseAgeExcludePrune: true
 
 trustPolicy: no-downgrade
 # 上游构建工具仍要求 4.x；4.0.3 tarball 已核对原 lockfile 的 SHA-512。
@@ -8,33 +8,44 @@ trustPolicyExclude:
 
 # pnpm 12 配置；原生依赖仅运行明确列出的安装脚本。
 nodeLinker: hoisted
-allowBuilds:
-  cpu-features: true
-  onnxruntime-node: true
-  protobufjs: true
-  ssh2: true
-  vue-demi: true
-  better-sqlite3: true
-  esbuild: true
-  core-js: false
+shellEmulator: true
 
+packages:
+  - apps/*
+
+# 构建与浏览器依赖的安全修复；版本与框架工作区同步维护。
 overrides:
-  "@ai-sdk/provider-utils@>=4.0.0 <4.0.33": 4.0.57
+  '@ai-sdk/provider-utils@>=4.0.0 <4.0.33': 4.0.57
+  '@types/node': {{versions.nodeTypes}}
+  body-parser@>=2 <2.4.0: 2.4.0
   cookie@<0.7.0: 0.7.2
+  dompurify@>=3 <3.4.17: 3.4.17
   esbuild@<0.28.1: 0.28.2
+  fast-uri@>=3 <3.1.9: 3.1.9
+  follow-redirects@>=1.16.0 <1.16.2: 1.16.2
+  glob@>=9 <=14.0.1: 14.0.4
+  ip-address@<=10.7.3: 10.7.6
   katex@<0.18.2: 0.18.10
+  minimatch@>=7 <11.0.1: 11.0.5
+  parse5@>=8 <8.1.0: 8.1.0
+  qs@>=6.7 <6.16.1: 6.17.1
+  runed@<0.38.0: 0.38.0
   sharp@<0.35.5: 0.35.5
   tinypool@<2.1.2: 2.2.0
-  '@qdrant/js-client-rest>undici': 7.30.0
   xcode>uuid: 11.1.1
-  "@types/node": "{{versions.nodeTypes}}"
 
-packages:
-  - apps/*
+allowBuilds:
+  core-js: false
+  cpu-features: true
+  esbuild: true
+  onnxruntime-node: true
+  protobufjs: true
+  ssh2: true
+  vue-demi: true
 
 {{#if useCatalogProtocol}}
 catalog:
 {{#each haiCatalogPackages}}
-  '{{@key}}': {{this}}
+  {{{yaml @key this}}}
 {{/each}}
 {{/if}}

package/templates/apps/fullstack/apps/{{projectName}}-app/capacitor.config.ts.hbs

@@ -6,7 +6,6 @@ import process from 'node:process'
 import { resolveNativeName } from '../../scripts/native-name.mjs'
 
 const envDir = resolve(process.cwd(), '../..')
-
 const config: CapacitorConfig = {
   appId: 'com.hai.{{fullstack.nativeAppIdSegment}}.app',
   appName: resolveNativeName(envDir, resolve(envDir, 'packages/{{fullstack.servPackageName}}/config/_core.yml')),
@@ -14,11 +13,10 @@ const config: CapacitorConfig = {
   server: process.env.NODE_ENV === 'production'
     ? undefined
     : {
-        // 仅用于 Capacitor live reload 前端页面；API 地址由前端配置或 shared client 参数控制。
+      // 仅用于 Capacitor live reload 前端页面；API 地址由前端配置或 shared client 参数控制。
         url: process.env.CAPACITOR_SERVER_URL,
         cleartext: process.env.CAPACITOR_SERVER_URL?.startsWith('http://') ?? false,
       },
 }
-
 export default config
 {{/if}}

package/templates/apps/fullstack/apps/{{projectName}}-app/eslint.config.js.hbs

@@ -5,9 +5,17 @@ import { haiQualityConfig } from '../../eslint-rules.js'
 
 export default antfu({
   // unused-imports 使用 TS 规则，JS 同样使用 TS parser 以保持 scope 契约一致。
-  typescript: { files: [GLOB_SRC] },
+  typescript: {
+    files: [GLOB_SRC],
+  },
   formatters: true,
-  ignores: ['**/build/**', '**/dist/**', '**/*.d.ts', '**/project.inlang/**', '**/src/lib/paraglide/**'],
+  ignores: [
+    '**/build/**',
+    '**/dist/**',
+    '**/*.d.ts',
+    '**/project.inlang/**',
+    '**/src/lib/paraglide/**',
+  ],
   svelte: true,
 }, haiQualityConfig, {
   files: ['**/*.svelte'],

package/templates/apps/fullstack/apps/{{projectName}}-app/src/App.svelte.hbs

@@ -30,7 +30,13 @@
     apiOptions = {
       clientName: '{{projectName}}-app',
       terminalType: 'app',
-      ...(capacitor.isNative() ? { requireApiBase: true, tokenStorage: createCapacitorTokenStorage(), headers: { 'X-HAI-Token-Transport': 'body' } } : {}),
+      ...(capacitor.isNative()
+        ? {
+          requireApiBase: true,
+          tokenStorage: createCapacitorTokenStorage(),
+          headers: { 'X-HAI-Token-Transport': 'body' },
+        }
+        : {}),
     }
   }
   onMount(() => {
@@ -42,7 +48,9 @@
       })
     }
   })
-  useToastFeedback(() => startupFailed ? messages.operation_failed() : '')
+  useToastFeedback(() => startupFailed
+    ? messages.operation_failed()
+    : '')
 </script>
 
 {#if startupFailed}

package/templates/apps/fullstack/apps/{{projectName}}-app/src/build-metadata.ts.hbs

@@ -3,7 +3,6 @@
 {{#if features.feedback}}
 /** 当前应用编译时烘焙的产物身份；运行时配置不能覆盖。 */
 declare const __HAI_BUILD_METADATA__: { appVersion: string, buildId: string, commit: string }
-
 export const buildMetadata = __HAI_BUILD_METADATA__
 {{/if}}
 {{/if}}

package/templates/apps/fullstack/apps/{{projectName}}-app/src/lib/capacitor.ts.hbs

@@ -7,7 +7,6 @@ export async function initCapacitor(): Promise<HaiResult<void>> {
   const result = await capacitor.init()
   if (!result.success)
     return result
-
   if (capacitor.isNative()) {
     return capacitor.statusBar.configure({
       style: 'dark',

package/templates/apps/fullstack/apps/{{projectName}}-app/svelte.config.js.hbs

@@ -5,7 +5,10 @@ import { vitePreprocess } from '@sveltejs/vite-plugin-svelte'
 
 /** @type {import('@sveltejs/vite-plugin-svelte').SvelteConfig} */
 const config = {
-  preprocess: [autoImportHaiUi(), vitePreprocess()],
+  preprocess: [
+    vitePreprocess(),
+    autoImportHaiUi(),
+  ],
   compilerOptions: {
     // 使用 Svelte 5 Runes，和 @h-ai/ui 组件库保持一致。
     runes: true,

package/templates/apps/fullstack/apps/{{projectName}}-app/vite.config.ts.hbs

@@ -14,7 +14,9 @@ import { resolveBuildMetadata } from '../../scripts/build-metadata.js'
 const envDir = fileURLToPath(new URL('../../', import.meta.url))
 
 export default defineConfig(({ mode, command }) => {
-  const envResult = command === 'build' || process.env.HAI_E2E === '1' ? { success: true as const, data: {} as Record<string, string> } : core.config.loadEnvFiles({ mode, envDir })
+  const envResult = command === 'build' || process.env.HAI_E2E === '1'
+    ? { success: true as const, data: {} as Record<string, string> }
+    : core.config.loadEnvFiles({ mode, envDir })
   if (!envResult.success)
     throw new Error(envResult.error.message)
   const env = envResult.data
@@ -23,15 +25,23 @@ export default defineConfig(({ mode, command }) => {
   const metadataAsset: Plugin = {
     name: 'hai-build-metadata',
     generateBundle() {
-      this.emitFile({ type: 'asset', fileName: 'build-metadata.json', source: JSON.stringify(buildMetadata) })
+      this.emitFile({
+        type: 'asset',
+        fileName: 'build-metadata.json',
+        source: JSON.stringify(buildMetadata),
+      })
     },
   }
   const target = (env.PUBLIC_API_BASE || process.env.SERVICE_BASE_URL || 'http://127.0.0.1:3000').replace(/\/api\/v1\/?$/, '')
-  const proxy = { '/api': { target, changeOrigin: true } }
+  const proxy = {
+    '/api': { target, changeOrigin: true },
+  }
   return {
     base: './',
     envDir: false,
-    define: { __HAI_BUILD_METADATA__: JSON.stringify(buildMetadata) },
+    define: {
+      __HAI_BUILD_METADATA__: JSON.stringify(buildMetadata),
+    },
     server: { proxy },
     preview: { proxy },
     build: {
@@ -51,6 +61,8 @@ export default defineConfig(({ mode, command }) => {
       metadataAsset,
       svelte(),
       paraglideVitePlugin({
+        // 共享物理消息产物供独立 Vitest/Node 工具读取。
+        outputStructure: 'message-modules',
         project: './project.inlang',
         outdir: './src/lib/paraglide',
         strategy: ['cookie', 'baseLocale'],

package/templates/apps/fullstack/apps/{{projectName}}-desktop/src/App.svelte.hbs

@@ -12,8 +12,14 @@
   const native = '__TAURI_INTERNALS__' in globalThis
   const apiOptions: ManagementApiOptions = {
     clientName: '{{projectName}}-desktop',
-      terminalType: 'desktop',
-    ...(native ? { requireApiBase: true, tokenStorage: apiClient.tokenStorage.memory(), headers: { 'X-HAI-Token-Transport': 'body' } } : {}),
+    terminalType: 'desktop',
+    ...(native
+      ? {
+        requireApiBase: true,
+        tokenStorage: apiClient.tokenStorage.memory(),
+        headers: { 'X-HAI-Token-Transport': 'body' },
+      }
+      : {}),
   }
 
   function syncLocale(locale: string) {

package/templates/apps/fullstack/apps/{{projectName}}-desktop/src/build-metadata.ts.hbs

@@ -3,7 +3,6 @@
 {{#if features.feedback}}
 /** 当前应用编译时烘焙的产物身份；运行时配置不能覆盖。 */
 declare const __HAI_BUILD_METADATA__: { appVersion: string, buildId: string, commit: string }
-
 export const buildMetadata = __HAI_BUILD_METADATA__
 {{/if}}
 {{/if}}

package/templates/apps/fullstack/apps/{{projectName}}-desktop/svelte.config.js.hbs

@@ -5,7 +5,10 @@ import { vitePreprocess } from '@sveltejs/vite-plugin-svelte'
 
 /** @type {import('@sveltejs/vite-plugin-svelte').SvelteConfig} */
 export default {
-  preprocess: [autoImportHaiUi(), vitePreprocess()],
+  preprocess: [
+    vitePreprocess(),
+    autoImportHaiUi(),
+  ],
   compilerOptions: {
     // 使用 Svelte 5 Runes，和 @h-ai/ui 组件库保持一致。
     runes: true,

package/templates/apps/fullstack/apps/{{projectName}}-desktop/vite.config.ts.hbs

@@ -15,7 +15,9 @@ const host = process.env.TAURI_DEV_HOST
 const envDir = fileURLToPath(new URL('../../', import.meta.url))
 
 export default defineConfig(({ mode, command }) => {
-  const envResult = command === 'build' || process.env.HAI_E2E === '1' ? { success: true as const, data: {} as Record<string, string> } : core.config.loadEnvFiles({ mode, envDir })
+  const envResult = command === 'build' || process.env.HAI_E2E === '1'
+    ? { success: true as const, data: {} as Record<string, string> }
+    : core.config.loadEnvFiles({ mode, envDir })
   if (!envResult.success)
     throw new Error(envResult.error.message)
   const env = envResult.data
@@ -24,16 +26,24 @@ export default defineConfig(({ mode, command }) => {
   const metadataAsset: Plugin = {
     name: 'hai-build-metadata',
     generateBundle() {
-      this.emitFile({ type: 'asset', fileName: 'build-metadata.json', source: JSON.stringify(buildMetadata) })
+      this.emitFile({
+        type: 'asset',
+        fileName: 'build-metadata.json',
+        source: JSON.stringify(buildMetadata),
+      })
     },
   }
   const target = (env.PUBLIC_API_BASE || process.env.SERVICE_BASE_URL || 'http://127.0.0.1:3000').replace(/\/api\/v1\/?$/, '')
-  const proxy = { '/api': { target, changeOrigin: true } }
+  const proxy = {
+    '/api': { target, changeOrigin: true },
+  }
 
   return {
     base: './',
     envDir: false,
-    define: { __HAI_BUILD_METADATA__: JSON.stringify(buildMetadata) },
+    define: {
+      __HAI_BUILD_METADATA__: JSON.stringify(buildMetadata),
+    },
     preview: { proxy },
     build: {
       rolldownOptions: {
@@ -53,6 +63,8 @@ export default defineConfig(({ mode, command }) => {
       svelte(),
       tailwindcss(),
       paraglideVitePlugin({
+        // 共享物理消息产物供独立 Vitest/Node 工具读取。
+        outputStructure: 'message-modules',
         project: './project.inlang',
         outdir: './src/lib/paraglide',
         strategy: ['cookie', 'baseLocale'],

package/templates/apps/fullstack/apps/{{projectName}}-web/eslint.config.js.hbs

@@ -5,9 +5,17 @@ import { haiQualityConfig } from '../../eslint-rules.js'
 
 export default antfu({
   // unused-imports 使用 TS 规则，JS 同样使用 TS parser 以保持 scope 契约一致。
-  typescript: { files: [GLOB_SRC] },
+  typescript: {
+    files: [GLOB_SRC],
+  },
   formatters: true,
-  ignores: ['**/build/**', '**/dist/**', '**/*.d.ts', '**/project.inlang/**', '**/src/lib/paraglide/**'],
+  ignores: [
+    '**/build/**',
+    '**/dist/**',
+    '**/*.d.ts',
+    '**/project.inlang/**',
+    '**/src/lib/paraglide/**',
+  ],
   svelte: true,
 }, haiQualityConfig, {
   files: ['**/*.svelte'],

package/templates/apps/fullstack/apps/{{projectName}}-web/src/build-metadata.ts.hbs

@@ -3,7 +3,6 @@
 {{#if features.feedback}}
 /** 当前应用编译时烘焙的产物身份；运行时配置不能覆盖。 */
 declare const __HAI_BUILD_METADATA__: { appVersion: string, buildId: string, commit: string }
-
 export const buildMetadata = __HAI_BUILD_METADATA__
 {{/if}}
 {{/if}}

package/templates/apps/fullstack/apps/{{projectName}}-web/src/main.ts.hbs

@@ -7,8 +7,6 @@ import './app.css'
 const target = document.getElementById('app')
 if (!target)
   throw new Error('Root element #app not found')
-
 const app = mount(App, { target })
-
 export default app
 {{/if}}

package/templates/apps/fullstack/apps/{{projectName}}-web/svelte.config.js.hbs

@@ -5,7 +5,10 @@ import { vitePreprocess } from '@sveltejs/vite-plugin-svelte'
 
 /** @type {import('@sveltejs/vite-plugin-svelte').SvelteConfig} */
 const config = {
-  preprocess: [autoImportHaiUi(), vitePreprocess()],
+  preprocess: [
+    vitePreprocess(),
+    autoImportHaiUi(),
+  ],
   compilerOptions: {
     // 使用 Svelte 5 Runes，和 @h-ai/ui 组件库保持一致。
     runes: true,

package/templates/apps/fullstack/apps/{{projectName}}-web/vite.config.ts.hbs

@@ -15,7 +15,9 @@ import { resolvePublicBasePath } from '../../scripts/public-base-path.mjs'
 const envDir = fileURLToPath(new URL('../../', import.meta.url))
 
 export default defineConfig(({ mode, command }) => {
-  const envResult = command === 'build' || process.env.HAI_E2E === '1' ? { success: true as const, data: {} as Record<string, string> } : core.config.loadEnvFiles({ mode, envDir })
+  const envResult = command === 'build' || process.env.HAI_E2E === '1'
+    ? { success: true as const, data: {} as Record<string, string> }
+    : core.config.loadEnvFiles({ mode, envDir })
   if (!envResult.success)
     throw new Error(envResult.error.message)
   const env = envResult.data
@@ -24,16 +26,26 @@ export default defineConfig(({ mode, command }) => {
   const metadataAsset: Plugin = {
     name: 'hai-build-metadata',
     generateBundle() {
-      this.emitFile({ type: 'asset', fileName: 'build-metadata.json', source: JSON.stringify(buildMetadata) })
+      this.emitFile({
+        type: 'asset',
+        fileName: 'build-metadata.json',
+        source: JSON.stringify(buildMetadata),
+      })
     },
   }
   const target = (env.PUBLIC_API_BASE || process.env.SERVICE_BASE_URL || 'http://127.0.0.1:3000').replace(/\/api\/v1\/?$/, '')
-  const proxy = { '/api': { target, changeOrigin: true } }
+  const proxy = {
+    '/api': { target, changeOrigin: true },
+  }
   const publicBase = resolvePublicBasePath()
   return {
-    base: publicBase ? `${publicBase}/` : './',
+    base: publicBase
+      ? `${publicBase}/`
+      : './',
     envDir: false,
-    define: { __HAI_BUILD_METADATA__: JSON.stringify(buildMetadata) },
+    define: {
+      __HAI_BUILD_METADATA__: JSON.stringify(buildMetadata),
+    },
     server: { proxy },
     preview: { proxy },
     build: {
@@ -53,6 +65,8 @@ export default defineConfig(({ mode, command }) => {
       metadataAsset,
       svelte(),
       paraglideVitePlugin({
+        // 共享物理消息产物供独立 Vitest/Node 工具读取。
+        outputStructure: 'message-modules',
         project: './project.inlang',
         outdir: './src/lib/paraglide',
         strategy: ['cookie', 'baseLocale'],