@h-ai/cli 1.0.0-beta.18 → 1.0.0-beta.19

package/templates/base/vitest.config.ts.hbs

@@ -7,9 +7,13 @@ import { resolveBuildMetadata } from './scripts/build-metadata.js'
 
 export default defineConfig({
 {{#unless isSvelteOnlyApp}}
-  plugins: [sveltekit()],
+  plugins: [
+    sveltekit(),
+  ],
 {{/unless}}
-  define: { __HAI_BUILD_METADATA__: JSON.stringify(resolveBuildMetadata(fileURLToPath(new URL('.', import.meta.url)))) },
+  define: {
+    __HAI_BUILD_METADATA__: JSON.stringify(resolveBuildMetadata(fileURLToPath(new URL('.', import.meta.url)))),
+  },
   test: {
     globals: true,
     environment: 'node',

package/templates/features/ai/routes/api/chat/+server.ts

@@ -6,7 +6,9 @@ import { ai } from '@h-ai/ai'
 import { kit } from '@h-ai/kit'
 import { z } from 'zod'
 
-const ChatInputSchema = z.object({ message: z.string().trim().min(1).max(4000) }).strict()
+const ChatInputSchema = z.object({
+  message: z.string().trim().min(1).max(4000),
+}).strict()
 
 export const POST: RequestHandler = kit.handler(async ({ request, locals }) => {
   const { message } = await kit.validate.body(request, ChatInputSchema)

package/templates/features/iam/routes-admin/(auth)/auth/forgot-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-admin/(auth)/auth/login/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='login' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/admin', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='login' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('admin'))} />

package/templates/features/iam/routes-admin/(auth)/auth/register/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='register' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/admin', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='register' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('admin'))} />

package/templates/features/iam/routes-admin/(auth)/auth/reset-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-h5/auth/forgot-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-h5/auth/login/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('/'))} />

package/templates/features/iam/routes-h5/auth/register/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('/'))} />

package/templates/features/iam/routes-h5/auth/reset-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-website/auth/forgot-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-website/auth/login/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('/'))} />

package/templates/features/iam/routes-website/auth/register/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('/'))} />

package/templates/features/iam/routes-website/auth/reset-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/payment/routes/api/v1/payment/create/+server.ts

@@ -1,10 +1,13 @@
 /** 创建支付参数 API；渠道、场景与 openid 必须通过显式校验，禁止回落到其它支付模式。 */
 import type { RequestHandler } from './$types'
-import { base } from '$app/paths'
+import { resolve } from '$app/paths'
 import { kit } from '@h-ai/kit'
 import { payment } from '@h-ai/payment'
 import { z } from 'zod'
 
+// Vite 配置固定 paths.relative=false，HTTP 前缀不会随 SSR 页面深度改变。
+const base = resolve('/').replace(/\/$/, '')
+
 /** 本模板的业务字段；服务端仍需从可信订单重新核对金额、描述、订单号和所属用户。 */
 const CreatePaymentSchema = z.object({
   provider: z.enum(['wechat', 'alipay', 'stripe']),
@@ -15,7 +18,13 @@ const CreatePaymentSchema = z.object({
   userId: z.string().trim().min(1).max(128).optional(),
   metadata: z.record(z.string(), z.string()).optional(),
   notifyUrl: z.url({ protocol: /^https?$/ }).optional(),
-}).strict().refine(input => input.tradeType === (input.provider === 'wechat' ? 'jsapi' : 'h5'), { path: ['tradeType'] }).refine(input => input.provider !== 'wechat' || input.userId !== undefined, { path: ['userId'] })
+}).strict().refine(input => input.tradeType === (input.provider === 'wechat'
+  ? 'jsapi'
+  : 'h5'), {
+  path: ['tradeType'],
+}).refine(input => input.provider !== 'wechat' || input.userId !== undefined, {
+  path: ['userId'],
+})
 
 export const POST: RequestHandler = async ({ request, locals }) => {
   const { provider, tradeType, outTradeNo, totalAmount, subject, notifyUrl, userId, metadata } = await kit.validate.body(request, CreatePaymentSchema)

package/templates/shared/browser-check/startup.js

@@ -44,12 +44,21 @@
     var currentMinor = Number(parts[1] || 0)
     if (currentMajor > major || (currentMajor === major && currentMinor >= minor))
       return null
-    return { name: name, version: version, minimum: minor ? major + '.' + minor : String(major), help: help }
+    return {
+      name: name,
+      version: version,
+      minimum: minor
+        ? major + '.' + minor
+        : String(major),
+      help: help,
+    }
   }
 
   function getLanguage(value) {
     var language = (value || '').toLowerCase().split(/[-_]/)[0]
-    return language === 'zh' || language === 'ja' || language === 'en' ? language : ''
+    return language === 'zh' || language === 'ja' || language === 'en'
+      ? language
+      : ''
   }
 
   function openUpdatePage() {
@@ -62,13 +71,30 @@
   function showUpdateInstructions() {
     var locale = getLanguage(location.hash.slice(1)) || getLanguage(navigator.language) || 'en'
     var messages = {
-      zh: ['浏览器版本过低', '当前使用 {name} {version}。此站点至少需要 {name} {minimum}。', '请更新到最新版本，然后重新打开此站点。', '查看官方更新说明'],
-      en: ['Update your browser', 'You are using {name} {version}. This site requires {name} {minimum} or later.', 'Install the latest update, then reopen this site.', 'Official update instructions'],
-      ja: ['ブラウザーを更新してください', '現在のバージョンは {name} {version} です。このサイトには {name} {minimum} 以降が必要です。', '最新版に更新してから、このサイトを開き直してください。', '公式の更新手順を見る'],
+      zh: [
+        '浏览器版本过低',
+        '当前使用 {name} {version}。此站点至少需要 {name} {minimum}。',
+        '请更新到最新版本，然后重新打开此站点。',
+        '查看官方更新说明',
+      ],
+      en: [
+        'Update your browser',
+        'You are using {name} {version}. This site requires {name} {minimum} or later.',
+        'Install the latest update, then reopen this site.',
+        'Official update instructions',
+      ],
+      ja: [
+        'ブラウザーを更新してください',
+        '現在のバージョンは {name} {version} です。このサイトには {name} {minimum} 以降が必要です。',
+        '最新版に更新してから、このサイトを開き直してください。',
+        '公式の更新手順を見る',
+      ],
     }
     var message = messages[locale]
     var help = document.getElementById('browser-update-help')
-    root.lang = locale === 'zh' ? 'zh-CN' : locale
+    root.lang = locale === 'zh'
+      ? 'zh-CN'
+      : locale
     document.title = message[0]
     document.getElementById('browser-update-title').textContent = message[0]
     document.getElementById('browser-update-version').textContent = message[1].replace(/\{(name|version|minimum)\}/g, function (_match, key) {

package/templates/shared/browser-startup.spec.ts

@@ -3,7 +3,9 @@ import { expect, test } from '@playwright/test'
 test('old browser sees upgrade instructions without the application bundles', async ({ page }) => {
   // 只改变浏览器脚本看到的版本，确保检测在客户端执行。
   await page.addInitScript(() => {
-    Object.defineProperty(navigator, 'userAgent', { get: () => 'Mozilla/5.0 Gecko/20100101 Firefox/113.0' })
+    Object.defineProperty(navigator, 'userAgent', {
+      get: () => 'Mozilla/5.0 Gecko/20100101 Firefox/113.0',
+    })
   })
   await page.route('**/*', async (route) => {
     const { pathname } = new URL(route.request().url())

package/templates/shared/build-metadata.ts

@@ -7,7 +7,9 @@ import process from 'node:process'
 /** 当前编译目标的私有产物身份；同一 SSR 构建重入复用身份，各端版本来自自己的 manifest。 */
 export function resolveBuildMetadata(directory: string): { appVersion: string, buildId: string, commit: string } {
   const manifest: { version?: unknown } = JSON.parse(readFileSync(join(directory, 'package.json'), 'utf8'))
-  const appVersion = typeof manifest.version === 'string' && manifest.version.trim() ? manifest.version.trim() : 'unknown'
+  const appVersion = typeof manifest.version === 'string' && manifest.version.trim()
+    ? manifest.version.trim()
+    : 'unknown'
   if (appVersion.length > 128)
     throw new Error('Invalid package.json version: maximum length is 128')
   const suppliedId = process.env.HAI_BUILD_ID?.trim()
@@ -27,14 +29,26 @@ export function resolveBuildMetadata(directory: string): { appVersion: string, b
 /** 未跟踪的生成工程不能把临时目录的父框架提交冒充自身源码。 */
 function sourceCommit(directory: string): string {
   try {
-    const options = { cwd: directory, encoding: 'utf8' as const, stdio: 'pipe' as const, windowsHide: true }
+    const options = {
+      cwd: directory,
+      encoding: 'utf8' as const,
+      stdio: 'pipe' as const,
+      windowsHide: true,
+    }
     const root = execFileSync('git', ['rev-parse', '--show-toplevel'], options).trim()
     const manifest = relative(root, join(directory, 'package.json')).replaceAll('\\', '/')
     if (manifest.startsWith('../'))
       return 'unknown'
-    execFileSync('git', ['ls-files', '--error-unmatch', '--', manifest], { ...options, cwd: root })
+    execFileSync('git', [
+      'ls-files',
+      '--error-unmatch',
+      '--',
+      manifest,
+    ], { ...options, cwd: root })
     const commit = execFileSync('git', ['rev-parse', 'HEAD'], options).trim()
-    return /^(?:[a-f\d]{40}|[a-f\d]{64})$/i.test(commit) ? commit : 'unknown'
+    return /^(?:[a-f\d]{40}|[a-f\d]{64})$/i.test(commit)
+      ? commit
+      : 'unknown'
   }
   catch {
     return 'unknown'

package/templates/shared/e2e-env.ts

@@ -29,7 +29,12 @@ export function createE2eServerEnv(profile: Record<string, string>): Record<stri
   const environment: Record<string, string | undefined> = Object.fromEntries(
     Object.keys(process.env).filter(key => /^(?:HAI_|PUBLIC_|VITE_)/i.test(key)).map(key => [key, undefined]),
   )
-  for (const name of ['HAI_E2E_DATA_ROOT', 'HAI_AUTH_EVIDENCE_DIR', 'HAI_CORE_NAME', 'HAI_CORE_VERSION']) {
+  for (const name of [
+    'HAI_E2E_DATA_ROOT',
+    'HAI_AUTH_EVIDENCE_DIR',
+    'HAI_CORE_NAME',
+    'HAI_CORE_VERSION',
+  ]) {
     if (process.env[name] !== undefined)
       environment[name] = process.env[name]
   }
@@ -56,10 +61,15 @@ export function createE2eServerEnv(profile: Record<string, string>): Record<stri
 export function createE2eTransportRing(): string {
   const key = createECDH('SM2')
   key.generateKeys()
-  return JSON.stringify({ activeKeyId: 'e2e-v1', keys: { 'e2e-v1': {
-    publicKey: key.getPublicKey('hex'),
-    privateKey: key.getPrivateKey('hex').padStart(64, '0'),
-  } } })
+  return JSON.stringify({
+    activeKeyId: 'e2e-v1',
+    keys: {
+      'e2e-v1': {
+        publicKey: key.getPublicKey('hex'),
+        privateKey: key.getPrivateKey('hex').padStart(64, '0'),
+      },
+    },
+  })
 }
 
 /**
@@ -93,6 +103,12 @@ export function createE2eNotificationEnv(): Record<string, string> {
       { name: 'password_reset', provider: 'email', body: 'Reset: {token}' },
       { name: 'password_reset_sms', provider: 'sms', body: 'Reset: {token}' },
     ]),
-    HAI_IAM_AGREEMENTS: JSON.stringify({ showOnRegister: true, showOnLogin: true, userAgreementMarkdown: '# Configured registration agreement\n\n**Registration terms**\n\n- Keep your account credentials secure.', userAgreementUrl: new URL('/terms', url).href, privacyPolicyUrl: new URL('/privacy', url).href }),
+    HAI_IAM_AGREEMENTS: JSON.stringify({
+      showOnRegister: true,
+      showOnLogin: true,
+      userAgreementMarkdown: '# Configured registration agreement\n\n**Registration terms**\n\n- Keep your account credentials secure.',
+      userAgreementUrl: new URL('/terms', url).href,
+      privacyPolicyUrl: new URL('/privacy', url).href,
+    }),
   }
 }

package/templates/shared/native-name.mjs

@@ -8,7 +8,12 @@ import { core, CoreConfigSchema } from '@h-ai/core'
  * @returns {Record<string, unknown>} Core 环境覆盖值。
  */
 function resolveCoreInputs(environment) {
-  const resolved = core.config.resolve({ name: 'core', value: {}, schema: CoreConfigSchema, environment })
+  const resolved = core.config.resolve({
+    name: 'core',
+    value: {},
+    schema: CoreConfigSchema,
+    environment,
+  })
   if (!resolved.success)
     throw new Error(resolved.error.message)
   const { data } = resolved
@@ -42,7 +47,9 @@ export function nativeNameEnvironment(envDir) {
   for (const key of ['name', 'env']) {
     if (value[key] === undefined)
       continue
-    const schema = key === 'name' ? CoreConfigSchema.shape.name : CoreConfigSchema.shape.env
+    const schema = key === 'name'
+      ? CoreConfigSchema.shape.name
+      : CoreConfigSchema.shape.env
     const parsed = schema.safeParse(value[key])
     if (!parsed.success)
       throw new Error(`Invalid HAI_CORE_${key.toUpperCase()}`)

package/templates/shared/public-base-path.mjs

@@ -8,12 +8,25 @@ const basePathMessage = core.i18n.createMessageGetter({
   'ja-JP': { invalid: 'PUBLIC_BASE_PATHは空、または/で始まるサイト内ディレクトリーです。外部URL、末尾の/、クエリー、フラグメント、パス逸脱は使えません。' },
 })
 
-/** @param {string} [value] - 无末尾斜杠的公开目录；空字符串表示域名根目录。 */
+/**
+ * @param {string} [value] - 无末尾斜杠的公开目录；空字符串表示域名根目录。
+ * @returns {'' | `/${string}`} 经校验的站内挂载目录，可直接用于 SvelteKit paths.base。
+ */
 export function resolvePublicBasePath(value = process.env.PUBLIC_BASE_PATH ?? '') {
   if (value && (!/^\/[\w.-]+(?:\/[\w.-]+)*$/.test(value) || value.split('/').some(segment => segment === '.' || segment === '..'))) {
-    const language = [process.env.HAI_CORE_DEFAULTLOCALE, process.env.LC_ALL, process.env.LC_MESSAGES, process.env.LANG].find(item => item?.trim())?.split(/[_.-]/)[0]?.toLowerCase()
-    const locale = language === 'en' || language === 'c' || language === 'posix' ? 'en-US' : language === 'ja' ? 'ja-JP' : 'zh-CN'
+    const language = [
+      process.env.HAI_CORE_DEFAULTLOCALE,
+      process.env.LC_ALL,
+      process.env.LC_MESSAGES,
+      process.env.LANG,
+    ].find(item => item?.trim())?.split(/[_.-]/)[0]?.toLowerCase()
+    const locale = language === 'en' || language === 'c' || language === 'posix'
+      ? 'en-US'
+      : language === 'ja'
+        ? 'ja-JP'
+        : 'zh-CN'
     throw new Error(basePathMessage('invalid', { locale }))
   }
-  return value
+  // 已排除不以 / 开头的非空字符串；正则校验无法自动收窄 TypeScript 字符串类型。
+  return /** @type {'' | `/${string}`} */ (value)
 }

package/templates/shared/run-e2e.mjs

@@ -12,7 +12,9 @@ const cli = require.resolve('@playwright/test/cli')
 const dataParent = resolve(process.env.HAI_E2E_DATA_ROOT || tmpdir())
 mkdirSync(dataParent, { recursive: true })
 const dataRoot = mkdtempSync(join(dataParent, 'hai-browser-e2e-'))
-const groups = [{ args: [], name: undefined }]
+const groups = [
+  { args: [], name: undefined },
+]
 for (const argument of process.argv.slice(2)) {
   if (argument === '--next')
     groups.push({ args: [], name: undefined })
@@ -39,7 +41,12 @@ function stop() {
   if (process.platform === 'win32' && child?.pid && child.exitCode === null) {
     // Windows 的 kill 不传递 SIGTERM；同时结束本次 Playwright 创建的浏览器与服务进程。
     stopping = new Promise((resolve) => {
-      const killer = spawn('taskkill', ['/pid', String(child.pid), '/t', '/f'], { windowsHide: true, stdio: 'ignore' })
+      const killer = spawn('taskkill', [
+        '/pid',
+        String(child.pid),
+        '/t',
+        '/f',
+      ], { windowsHide: true, stdio: 'ignore' })
       killer.once('error', () => {
         child?.kill()
         resolve()
@@ -63,16 +70,30 @@ try {
     const groupDataRoot = join(dataRoot, `group-${index + 1}`)
     mkdirSync(groupDataRoot)
     const hasOutput = args.some(argument => argument === '--output' || argument.startsWith('--output='))
-    const outputArgs = hasOutput ? [] : ['--output', join(groupRoot, 'results')]
+    const outputArgs = hasOutput
+      ? []
+      : [
+          '--output',
+          join(groupRoot, 'results'),
+        ]
     const html = process.env.PLAYWRIGHT_HTML_OUTPUT_DIR || process.env.PLAYWRIGHT_HTML_REPORT
     const code = await new Promise((resolve, reject) => {
-      child = spawn(process.execPath, [cli, 'test', ...args, ...outputArgs], {
+      child = spawn(process.execPath, [
+        cli,
+        'test',
+        ...args,
+        ...outputArgs,
+      ], {
         cwd,
         windowsHide: true,
         stdio: 'inherit',
         env: {
           ...process.env,
-          ...(!html ? { PLAYWRIGHT_HTML_OUTPUT_DIR: join(groupRoot, 'html') } : {}),
+          ...(!html
+            ? {
+                PLAYWRIGHT_HTML_OUTPUT_DIR: join(groupRoot, 'html'),
+              }
+            : {}),
           HAI_AUTH_EVIDENCE_DIR: process.env.HAI_AUTH_EVIDENCE_DIR || join(groupRoot, 'evidence'),
           HAI_E2E_DATA_ROOT: groupDataRoot,
           HAI_E2E_GROUP: name,
@@ -82,8 +103,11 @@ try {
       child.once('exit', resolve)
     })
     // 配置组互相独立，普通失败继续收集；保留首个失败码，中断才停止后续组。
-    if (code !== 0)
-      process.exitCode ||= typeof code === 'number' && code !== 0 ? code : 1
+    if (code !== 0) {
+      process.exitCode ||= typeof code === 'number' && code !== 0
+        ? code
+        : 1
+    }
     if (interrupted) {
       process.exitCode ||= 1
       break
@@ -96,10 +120,17 @@ finally {
   await stopping
   // Playwright 退出后服务进程已关闭，此时删除 SQLite / storage，避免 Windows 文件锁。
   try {
-    rmSync(dataRoot, { recursive: true, force: true, maxRetries: 3, retryDelay: 100 })
+    rmSync(dataRoot, {
+      recursive: true,
+      force: true,
+      maxRetries: 3,
+      retryDelay: 100,
+    })
   }
   catch (error) {
-    process.stderr.write(`E2E data cleanup failed: ${error instanceof Error ? error.message : String(error)}\n`)
+    process.stderr.write(`E2E data cleanup failed: ${error instanceof Error
+      ? error.message
+      : String(error)}\n`)
     // 清理错误不能把原始失败（如 exit 7）覆盖成另一状态，也不能让成功变为假成功。
     if (!process.exitCode)
       process.exitCode = 1

package/templates/shared/run-node.mjs

@@ -12,13 +12,22 @@ if (!mode || !environmentDirectory || !entry)
 // 从实际应用解析公开 Core 入口，脚本可以放在 workspace 根目录。
 const require = createRequire(resolve('package.json'))
 const { core } = await import(pathToFileURL(require.resolve('@h-ai/core')).href)
-const loaded = core.config.loadEnvFiles({ mode, envDir: resolve(environmentDirectory) })
+const loaded = core.config.loadEnvFiles({
+  mode,
+  envDir: resolve(environmentDirectory),
+})
 if (!loaded.success)
   throw new Error(loaded.error.message)
 
-const child = spawn(process.execPath, [resolve(entry), ...arguments_], {
+const child = spawn(process.execPath, [
+  resolve(entry),
+  ...arguments_,
+], {
   cwd: process.cwd(),
-  env: { ...process.env, ...loaded.data },
+  env: {
+    ...process.env,
+    ...loaded.data,
+  },
   stdio: 'inherit',
   windowsHide: true,
 })
@@ -35,7 +44,9 @@ try {
     child.once('error', reject)
     child.once('close', (code, signal) => resolve({ code, signal }))
   })
-  process.exitCode = result.code ?? (result.signal === 'SIGINT' ? 130 : 143)
+  process.exitCode = result.code ?? (result.signal === 'SIGINT'
+    ? 130
+    : 143)
 }
 finally {
   process.off('SIGINT', interrupt)