@h-ai/cli 1.0.0-beta.2 → 1.0.0-beta.21

package/templates/apps/website/src/routes/+layout.svelte.hbs

@@ -4,19 +4,9 @@
    * 官网根布局
    */
   import type { Snippet } from 'svelte'
-{{#if hasI18n}}
-  import { browser } from '$app/environment'
-{{else}}
-{{#if features.crypto}}
-  import { browser } from '$app/environment'
-{{/if}}
-{{/if}}
-  import { {{#if features.iam}}base, {{else}}{{#if features.crypto}}base, {{/if}}{{/if}}resolve } from '$app/paths'
+  import { browser } from '$app/env'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
-{{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
-  import { getLocale, setLocale } from '$lib/paraglide/runtime.js'
-{{/if}}
 {{#if features.crypto}}
   import { crypto } from '@h-ai/crypto'
   import { kit } from '@h-ai/kit'
@@ -26,12 +16,17 @@
 {{/if}}
 {{/if}}
 {{#if hasI18n}}
-  import { LanguageSwitch, setGlobalLocale, ToastContainer } from '@h-ai/ui'
+  import { LanguageSwitch, setGlobalLocale, ThemeSelector, ToastContainer } from '@h-ai/ui'
 {{else}}
-  import { ToastContainer } from '@h-ai/ui'
+  import { ThemeSelector, ToastContainer } from '@h-ai/ui'
 {{/if}}
+  import { applyTheme, getSavedTheme } from '@h-ai/ui/theme'
 {{#if features.crypto}}
   import { untrack } from 'svelte'
+{{/if}}
+{{#if hasI18n}}
+  import * as m from '#lib/paraglide/messages.js'
+  import { getLocale, setLocale } from '#lib/paraglide/runtime.js'
 {{/if}}
   import '../app.css'
 
@@ -40,26 +35,53 @@
   }
 
   const { children }: Props = $props()
-{{#if features.crypto}}
+  const initialTheme = browser
+    ? getSavedTheme()
+    : 'light'
+  let currentTheme = $state(initialTheme)
   if (browser)
-    kit.client.installBrowserTransport(untrack(() => page.data.kitConfig), { crypto, basePath: base })
+    applyTheme(initialTheme, false)
+
+  function handleThemeChange(theme: string) {
+    currentTheme = theme
+    applyTheme(theme)
+  }
+{{#if features.crypto}}
+  if (browser) {
+    kit.client.installBrowserTransport(untrack(() => page.data.kitConfig), {
+      crypto,
+      basePath: resolve('/').replace(/\/$/, ''),
+    })
+  }
 {{/if}}
 {{#if features.iam}}
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
   $effect(() => authActions.bindPageExit({ enabled: page.data.iamPublicConfig?.session.endOnPageHide }))
 {{/if}}
 
   const navItems = [
 {{#if hasI18n}}
-    { path: '/', label: m.nav_home() },
-    { path: '/about', label: m.nav_about() },
-    { path: '/services', label: m.nav_services() },
-    { path: '/contact', label: m.nav_contact() },
+    {
+      path: resolve('/'),
+      label: m.nav_home(),
+    },
+    {
+      path: resolve('about'),
+      label: m.nav_about(),
+    },
+    {
+      path: resolve('services'),
+      label: m.nav_services(),
+    },
+    {
+      path: resolve('contact'),
+      label: m.nav_contact(),
+    },
 {{else}}
-    { path: '/', label: '首页' },
-    { path: '/about', label: '关于' },
-    { path: '/services', label: '服务' },
-    { path: '/contact', label: '联系我们' },
+    { path: resolve('/'), label: '首页' },
+    { path: resolve('about'), label: '关于' },
+    { path: resolve('services'), label: '服务' },
+    { path: resolve('contact'), label: '联系我们' },
 {{/if}}
   ] as const
 {{#if hasI18n}}
@@ -84,21 +106,24 @@
   <header class='navbar flex-wrap bg-base-100 shadow-sm'>
     <div class='flex-1'>
 {{#if hasI18n}}
-      <a href={resolve('/', {})} class='btn btn-ghost text-xl font-black tracking-tight'>{page.data.appConfig.name}</a>
+      <a href={resolve('/')} class='btn btn-ghost text-xl font-black tracking-tight'>{page.data.appConfig.name}</a>
 {{else}}
-      <a href={resolve('/', {})} class='btn btn-ghost text-xl font-black tracking-tight'>{page.data.appConfig.name}</a>
+      <a href={resolve('/')} class='btn btn-ghost text-xl font-black tracking-tight'>{page.data.appConfig.name}</a>
 {{/if}}
     </div>
     <nav class='w-full flex-none sm:w-auto'>
       <ul class='menu menu-horizontal flex-wrap px-1'>
         {#each navItems as item (item.path)}
-          <li><a href={resolve(item.path, {})}>{item.label}</a></li>
+          <li><!-- eslint-disable svelte/no-navigation-without-resolve -- 菜单字段已由 resolve 生成完整挂载地址；规则无法追踪派生/筛选后的集合，不能二次添加前缀。 -->
+            <a href={item.path}>{item.label}</a>
+            <!-- eslint-enable svelte/no-navigation-without-resolve --></li>
         {/each}
       </ul>
     </nav>
 {{#if hasI18n}}
     <LanguageSwitch currentLanguage={getLocale()} onchange={handleLanguageChange} />
 {{/if}}
+    <ThemeSelector {currentTheme} onchange={handleThemeChange} compact />
   </header>
 
   <main class='flex-1'>
@@ -108,7 +133,9 @@
   <footer class='footer footer-center p-4 bg-base-300 text-base-content'>
     <span>{page.data.appConfig.name} · {page.data.appConfig.version} · {page.data.appConfig.env}</span>
 {{#if hasI18n}}
-    <p>{m.footer_copyright({ year: new Date().getFullYear() })}</p>
+    <p>{m.footer_copyright({
+      year: new Date().getFullYear(),
+    })}</p>
 {{else}}
     <p>Copyright © 2025 - All rights reserved</p>
 {{/if}}

package/templates/apps/website/src/routes/+page.svelte.hbs

@@ -5,10 +5,10 @@
    */
   import { resolve } from '$app/paths'
   import { page } from '$app/state'
+  import { Badge } from '@h-ai/ui'
 {{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
+  import * as m from '#lib/paraglide/messages.js'
 {{/if}}
-  import { Badge } from '@h-ai/ui'
 </script>
 
 <svelte:head>
@@ -35,14 +35,14 @@
 {{#if hasI18n}}
       <h1 class='mt-5 text-5xl font-black tracking-tight'>{m.page_home_title()}</h1>
       <p class='py-6 text-base-content/60'>{m.page_home_subtitle()}</p>
-      <a href={resolve('/about', {})} class='btn btn-primary'>
+      <a href={resolve('about')} class='btn btn-primary'>
         <span class='icon-[tabler--arrow-right] size-5'></span>
         {m.page_home_cta()}
       </a>
 {{else}}
       <h1 class='mt-5 text-5xl font-black tracking-tight'>欢迎</h1>
       <p class='py-6 text-base-content/60'>基于 hai Agent Framework 构建</p>
-      <a href={resolve('/about', {})} class='btn btn-primary'>
+      <a href={resolve('about')} class='btn btn-primary'>
         <span class='icon-[tabler--arrow-right] size-5'></span>
         了解更多
       </a>

package/templates/apps/website/src/routes/about/+page.svelte.hbs

@@ -3,10 +3,10 @@
   /**
    * 关于页面
    */
+  import { Card, PageHeader } from '@h-ai/ui'
 {{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
+  import * as m from '#lib/paraglide/messages.js'
 {{/if}}
-  import { Card, PageHeader } from '@h-ai/ui'
 </script>
 
 <svelte:head>

package/templates/apps/website/src/routes/contact/+page.svelte.hbs

@@ -3,10 +3,10 @@
   /**
    * 联系我们页面
    */
+  import { Button, Card, FormField, FormLayout, Input, notifyWarning, PageHeader, Textarea } from '@h-ai/ui'
 {{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
+  import * as m from '#lib/paraglide/messages.js'
 {{/if}}
-  import { Button, Card, FormField, FormLayout, Input, notifyWarning, PageHeader, Textarea } from '@h-ai/ui'
 
   let name = $state('')
   let email = $state('')

package/templates/apps/website/src/routes/services/+page.svelte.hbs

@@ -3,16 +3,31 @@
   /**
    * 服务页面
    */
+  import { Card, PageHeader } from '@h-ai/ui'
 {{#if hasI18n}}
-  import * as m from '$lib/paraglide/messages'
+  import * as m from '#lib/paraglide/messages.js'
 {{/if}}
-  import { Card, PageHeader } from '@h-ai/ui'
 
 {{#if hasI18n}}
   const services = $derived([
-    { id: 'consulting', title: m.page_services_item1(), desc: m.page_services_desc(), icon: 'icon-[tabler--message-circle]' },
-    { id: 'development', title: m.page_services_item2(), desc: m.page_services_desc(), icon: 'icon-[tabler--code]' },
-    { id: 'operations', title: m.page_services_item3(), desc: m.page_services_desc(), icon: 'icon-[tabler--server-cog]' },
+    {
+      id: 'consulting',
+      title: m.page_services_item1(),
+      desc: m.page_services_desc(),
+      icon: 'icon-[tabler--message-circle]',
+    },
+    {
+      id: 'development',
+      title: m.page_services_item2(),
+      desc: m.page_services_desc(),
+      icon: 'icon-[tabler--code]',
+    },
+    {
+      id: 'operations',
+      title: m.page_services_item3(),
+      desc: m.page_services_desc(),
+      icon: 'icon-[tabler--server-cog]',
+    },
   ])
 {{else}}
   const services = [

package/templates/base/.dockerignore.hbs

@@ -25,3 +25,13 @@ ios
 # 仅保留公共基础 .env；分环境配置、私有覆盖及已有交付包不进入构建上下文。
 **/.env.*
 **/.hai
+# 部署证书和测试材料不进入镜像构建上下文。
+**/*.pem
+**/*.key
+**/*.p12
+**/*.pfx
+**/tests
+**/e2e
+**/*.test.*
+**/*.spec.*
+docs

package/templates/base/.gitignore.hbs

@@ -6,8 +6,13 @@ node_modules
 build
 dist
 .turbo
-android
-ios
+android/.gradle/
+android/**/build/
+ios/Pods/
+ios/App/Pods/
+*.keystore
+*.jks
+*.p12
 **/src/lib/paraglide
 **/src-tauri/gen/
 **/src-tauri/target/

package/templates/base/e2e/app.spec.ts.hbs

@@ -1,3 +1,6 @@
+{{#if_eq appType 'h5'}}
+import type { Page } from '@playwright/test'
+{{/if_eq}}
 {{#if features.iam}}
 import { randomUUID } from 'node:crypto'
 {{/if}}
@@ -6,17 +9,40 @@ import path from 'node:path'
 import process from 'node:process'
 import { expect, test } from '@playwright/test'
 
+{{#if_eq appType 'h5'}}
+/** 延迟客户端脚本，覆盖 SSR 已显示而事件尚未绑定的阶段。 */
+async function whileClientBootPaused(page: Page, inspect: () => Promise<void>) {
+  let resumeClient = () => { }
+  const clientBoot = new Promise<void>((resolve) => {
+    resumeClient = resolve
+  })
+  await page.route('**/*.js', async (route) => {
+    if (!new URL(route.request().url()).pathname.endsWith('/_hai/browser-check/startup.js'))
+      await clientBoot
+    await route.continue()
+  })
+  try {
+    await inspect()
+  }
+  finally {
+    resumeClient()
+    await page.unrouteAll({ behavior: 'wait' })
+  }
+}
+{{/if_eq}}
 {{#if_eq appType 'admin'}}
 test('high contrast appearance is selectable and survives reload', async ({ page }) => {
   await page.goto('./')
   const header = page.locator('header').first()
-  await header.getByRole('button', { name: /选择主题|Select theme|テーマを選択/, exact: true }).click()
+  const themeToggle = header.getByRole('button', { name: /选择主题|Select theme|テーマを選択/, exact: true })
+  await themeToggle.click()
   await header.getByRole('button', { name: /高对比|High contrast|ハイコントラスト/, exact: true }).click()
   await expect(page.locator('html')).toHaveAttribute('data-theme', 'high-contrast')
   await page.reload()
   await expect(page.locator('html')).toHaveAttribute('data-theme', 'high-contrast')
   await expect.poll(() => page.evaluate(() => getComputedStyle(document.documentElement).colorScheme)).toBe('dark')
-  await header.getByRole('button', { name: /选择主题|Select theme|テーマを選択/, exact: true }).press('Enter')
+  await expect(themeToggle).toBeEnabled()
+  await themeToggle.press('Enter')
   await header.getByRole('button', { name: /简洁商务|Formal|ビジネス（角丸なし）/, exact: true }).press('Enter')
   await expect(page.locator('html')).toHaveAttribute('data-theme', 'formal')
   await page.reload()
@@ -24,12 +50,49 @@ test('high contrast appearance is selectable and survives reload', async ({ page
   expect(await header.locator('button').first().evaluate(element => getComputedStyle(element).borderTopLeftRadius)).toBe('0px')
 })
 {{/if_eq}}
-
+{{#if hasUi}}
+{{#unless isCapacitorApp}}
+test('eye care appearance is selectable and survives reload', async ({ page }, testInfo) => {
+  const header = page.locator('header').first()
+  const themeToggle = header.getByRole('button', { name: /选择主题|Select theme|テーマを選択/, exact: true })
+{{#if_eq appType 'h5'}}
+  await whileClientBootPaused(page, async () => {
+    await page.goto('./', { waitUntil: 'commit' })
+    await expect(themeToggle).toBeDisabled()
+  })
+{{else}}
+  await page.goto('./')
+{{/if_eq}}
+  await page.setViewportSize({ width: 1440, height: 960 })
+  await themeToggle.click()
+  await header.getByRole('button', { name: /护眼|Eye care|目にやさしい/, exact: true }).click()
+  await expect(page.locator('html')).toHaveAttribute('data-theme', 'eye-care')
+  await page.reload()
+  await expect(page.locator('html')).toHaveAttribute('data-theme', 'eye-care')
+  await expect.poll(() => page.evaluate(() => getComputedStyle(document.documentElement).colorScheme)).toBe('light')
+  await expect.poll(() => page.evaluate(() => getComputedStyle(document.documentElement).getPropertyValue('--color-base-100').trim())).toBe('#e8f0df')
+  await page.screenshot({
+    path: testInfo.outputPath('eye-care-desktop.png'),
+    animations: 'disabled',
+  })
+  await page.setViewportSize({ width: 390, height: 844 })
+  expect(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth)).toBe(true)
+  await page.screenshot({
+    path: testInfo.outputPath('eye-care-mobile.png'),
+    animations: 'disabled',
+  })
+})
+{{/unless}}
+{{/if}}
 {{#if_eq appType 'h5'}}
-test.use({ viewport: { width: 390, height: 844 } })
+test.use({
+  viewport: { width: 390, height: 844 },
+})
 {{/if_eq}}
 {{#if isCapacitorApp}}
-test.use({ viewport: { width: 390, height: 844 } })
+test.use({
+  viewport: { width: 390, height: 844 },
+})
 {{/if}}
 
 /** 首页从真实浏览器页面发起，覆盖基础渲染链路。 */
@@ -60,10 +123,14 @@ test('home page renders from browser', async ({ page }) => {
   const nav = page.locator('nav')
   await nav.getByRole('button', { name: /发现|Discover/i, exact: true }).click()
   await expect(page).toHaveURL(/\/discover$/)
-  await page.reload()
-  await expect(page).toHaveURL(/\/discover$/)
-  await expect(page.getByRole('heading', { name: /发现|Discover/i })).toBeVisible()
-  await nav.getByRole('button', { name: /首页|Home/i, exact: true }).click()
+  const home = nav.getByRole('button', { name: /首页|Home/i, exact: true })
+  await whileClientBootPaused(page, async () => {
+    await page.reload({ waitUntil: 'commit' })
+    await expect(page).toHaveURL(/\/discover$/)
+    await expect(page.getByRole('heading', { name: /发现|Discover/i })).toBeVisible()
+    await expect(home).toBeDisabled()
+  })
+  await home.click()
   await expect(page).toHaveURL(/\/$/)
   expect(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth)).toBe(true)
 {{/if_eq}}
@@ -77,7 +144,11 @@ test('home page renders from browser', async ({ page }) => {
   const evidence = process.env.HAI_AUTH_EVIDENCE_DIR || path.resolve('test-results/auth-screenshots')
   await mkdir(evidence, { recursive: true })
   await page.evaluate(() => document.fonts.ready)
-  await page.screenshot({ path: path.join(evidence, '{{projectName}}-home.png'), fullPage: true, animations: 'disabled' })
+  await page.screenshot({
+    path: path.join(evidence, '{{projectName}}-home.png'),
+    fullPage: true,
+    animations: 'disabled',
+  })
 })
 {{#if features.iam}}
 
@@ -96,21 +167,30 @@ test('configured IAM registration and password login', async ({ page, context })
   await expect(page.locator('#login-username')).toBeVisible()
   await expect(page.locator('header').first()).toBeVisible()
   await expect(page.locator('footer')).toBeVisible()
-  await page.screenshot({ path: path.join(evidence, '{{projectName}}-login.png'), fullPage: true })
+  await page.screenshot({
+    path: path.join(evidence, '{{projectName}}-login.png'),
+    fullPage: true,
+  })
   await page.getByRole('{{#if isCapacitorApp}}button{{else}}link{{/if}}', { name: /立即注册|Register now/i }).click()
 {{#unless isCapacitorApp}}
   await expect(page).toHaveURL(/\/auth\/register(?:\?|$)/)
 {{/unless}}
   const registerForm = page.locator('.register-form')
   await expect(registerForm.locator('#register-username')).toBeVisible()
-  await page.screenshot({ path: path.join(evidence, '{{projectName}}-register.png'), fullPage: true })
+  await page.screenshot({
+    path: path.join(evidence, '{{projectName}}-register.png'),
+    fullPage: true,
+  })
   if (process.env.IAM_NOTIFICATION_URL) {
     // 协议弹窗留在认证页，关闭后继续填写注册表单。
     await registerForm.getByRole('button', { name: /用户协议|Terms of Service/i, exact: true }).click()
     await expect(page.getByRole('dialog')).toBeVisible()
     await expect(page.getByRole('dialog').getByRole('heading', { name: 'Configured registration agreement' })).toBeVisible()
     await expect(page.locator('iframe')).toHaveCount(0)
-    await page.screenshot({ path: path.join(evidence, '{{projectName}}-agreement.png'), fullPage: true })
+    await page.screenshot({
+      path: path.join(evidence, '{{projectName}}-agreement.png'),
+      fullPage: true,
+    })
     await page.keyboard.press('Escape')
     await expect(page.getByRole('dialog')).not.toBeVisible()
   }
@@ -120,12 +200,30 @@ test('configured IAM registration and password login', async ({ page, context })
   await registerForm.locator('#register-confirm-password').fill(password)
   await registerForm.locator('button[type="submit"]').click()
   await expect(page.locator('.register-form')).not.toBeVisible()
-{{#unless isCapacitorApp}}
+{{#if isCapacitorApp}}
+  // 浏览器预览通过刷新 Cookie 恢复会话，不能把页面重载当作退出。
+  await page.reload()
+  await expect(page.getByRole('navigation')).toBeVisible()
+  await page.getByRole('navigation').getByRole('button', { name: /我的|Profile|プロフィール/, exact: true }).click()
+  const appearance = page.getByTestId('profile-theme')
+  await appearance.getByRole('button', { name: /选择主题|Select theme|テーマを選択/, exact: true }).click()
+  await appearance.getByRole('button', { name: /护眼|Eye care|目にやさしい/, exact: true }).click()
+  await expect(page.locator('html')).toHaveAttribute('data-theme', 'eye-care')
+  await page.reload()
+  await expect(page.getByTestId('profile-theme')).toBeVisible()
+  await expect(page.locator('html')).toHaveAttribute('data-theme', 'eye-care')
+  await expect.poll(() => page.evaluate(() => getComputedStyle(document.documentElement).getPropertyValue('--color-base-100').trim())).toBe('#e8f0df')
+  await page.screenshot({
+    path: path.join(evidence, '{{projectName}}-eye-care.png'),
+    fullPage: true,
+    animations: 'disabled',
+  })
+{{else}}
   // 通过页面 fetch 复用 Cookie 与已安装的传输加密，避免 HTTP 辅助客户端绕过浏览器协议。
   const me = await page.evaluate(async url => (await fetch(url)).status, new URL('./api/auth/me', test.info().project.use.baseURL).href)
   expect(me).toBe(200)
+{{/if}}
   await context.clearCookies()
-{{/unless}}
   await page.reload()
   await page.goto(authUrl)
   await expect(page.locator('#login-username')).toBeVisible()
@@ -141,7 +239,10 @@ test('configured IAM registration and password login', async ({ page, context })
   await page.reload()
   await page.goto(authUrl)
   await page.getByRole('button', { name: /邮件验证码|Email code/i, exact: true }).click()
-  await page.screenshot({ path: path.join(evidence, '{{projectName}}-email.png'), fullPage: true })
+  await page.screenshot({
+    path: path.join(evidence, '{{projectName}}-email.png'),
+    fullPage: true,
+  })
   const email = `${username}@example.com`
   await page.locator('#login-username').fill(email)
   await page.getByRole('button', { name: /发送验证码|Send code/i, exact: true }).click()
@@ -160,34 +261,26 @@ test('configured IAM registration and password login', async ({ page, context })
   await page.reload()
   await page.goto(authUrl)
   await page.getByRole('button', { name: /忘记密码|Forgot password/i }).click()
-  await page.screenshot({ path: path.join(evidence, '{{projectName}}-forgot.png'), fullPage: true })
+  await page.screenshot({
+    path: path.join(evidence, '{{projectName}}-forgot.png'),
+    fullPage: true,
+  })
   await page.locator('input[type="email"]').fill(email)
   await page.locator('button[type="submit"]').click()
   await expect(page.locator('.hai-toast-item[data-variant="success"]')).toBeVisible()
   const reset = await received('password_reset')
   expect(Boolean(reset?.token)).toBe(true)
   await page.getByRole('button', { name: /已有重置令牌|I have a reset token/i }).click()
-  await page.screenshot({ path: path.join(evidence, '{{projectName}}-reset.png'), fullPage: true })
+  await page.screenshot({
+    path: path.join(evidence, '{{projectName}}-reset.png'),
+    fullPage: true,
+  })
   const resetUrl = `{{#if isCapacitorApp}}/{{else}}/auth/reset-password{{/if}}?token=${encodeURIComponent(reset?.token ?? '')}`
 {{#if_eq appType 'h5'}}
-  // 延迟客户端脚本，确定性覆盖 SSR 页面已显示、事件绑定尚未完成的窗口。
-  let resumeClient = () => {}
-  const clientBoot = new Promise<void>((resolve) => {
-    resumeClient = resolve
-  })
-  await page.route('**/*.js', async (route) => {
-    await clientBoot
-    await route.continue()
-  })
-  try {
+  await whileClientBootPaused(page, async () => {
     await page.goto(resetUrl, { waitUntil: 'commit' })
     await expect(page.locator('input[type="password"]').nth(0)).toBeDisabled()
-  }
-  finally {
-    resumeClient()
-    // 等待正在恢复的路由完成，避免提前移除拦截导致 continue 被重复处理。
-    await page.unrouteAll({ behavior: 'wait' })
-  }
+  })
 {{else}}
   await page.goto(resetUrl)
 {{/if_eq}}
@@ -204,8 +297,9 @@ test('configured IAM registration and password login', async ({ page, context })
   expect(new URL(page.url()).searchParams.has('token')).toBe(false)
   await page.reload()
 {{#if isCapacitorApp}}
-  // Web 预览采用内存 TokenStore，刷新后应回到登录，而不是已消费令牌的重置页面。
-  await expect(page.locator('#login-username')).toBeVisible()
+  // 已消费的重置令牌不再参与启动；刷新 Cookie 恢复同一已登录会话。
+  await expect(page.getByRole('navigation')).toBeVisible()
+  await expect(page.locator('#login-username')).not.toBeVisible()
 {{else}}
   expect(await page.evaluate(async url => (await fetch(url)).status, new URL('./api/auth/me', test.info().project.use.baseURL).href)).toBe(200)
 {{/if}}

package/templates/base/eslint-rules.js

@@ -11,35 +11,54 @@ export const haiQualityConfig = {
   rules: {
     'no-console': ['error', {}],
     'ts/no-explicit-any': 'error',
-    'ts/ban-ts-comment': ['error', {
-      'ts-ignore': true,
-      'ts-nocheck': true,
-      'ts-check': false,
-      'ts-expect-error': 'allow-with-description',
-      'minimumDescriptionLength': 10,
-    }],
+    'ts/ban-ts-comment': [
+      'error',
+      {
+        'ts-ignore': true,
+        'ts-nocheck': true,
+        'ts-check': false,
+        'ts-expect-error': 'allow-with-description',
+        'minimumDescriptionLength': 10,
+      },
+    ],
     'eslint-comments/no-unlimited-disable': 'error',
     'eslint-comments/require-description': 'error',
     // 只禁内部源码/构建目录，公开的 /client、/adapter 等 exports 子路径可用。
-    'no-restricted-imports': ['error', {
-      patterns: [{
-        group: ['@h-ai/*/src', '@h-ai/*/src/**', '@h-ai/*/dist', '@h-ai/*/dist/**'],
+    'no-restricted-imports': [
+      'error',
+      {
+        patterns: [
+          {
+            group: [
+              '@h-ai/*/src',
+              '@h-ai/*/src/**',
+              '@h-ai/*/dist',
+              '@h-ai/*/dist/**',
+            ],
+            message: 'Use the public exports of hai packages instead of their src/dist internals.',
+          },
+        ],
+      },
+    ],
+    'no-restricted-syntax': [
+      'error',
+      {
+        selector: ':matches(TSAsExpression, TSTypeAssertion)[expression.typeAnnotation.type="TSUnknownKeyword"]',
+        message: 'Use the real upstream type or narrow unknown. Explain necessary third-party workarounds with a scoped lint exception.',
+      },
+      {
+        selector: 'ImportExpression[source.value=/^@h-ai\\/[^/]+\\/(src|dist)(\\/|$)/]',
         message: 'Use the public exports of hai packages instead of their src/dist internals.',
-      }],
-    }],
-    'no-restricted-syntax': ['error', {
-      selector: ':matches(TSAsExpression, TSTypeAssertion)[expression.typeAnnotation.type="TSUnknownKeyword"]',
-      message: 'Use the real upstream type or narrow unknown. Explain necessary third-party workarounds with a scoped lint exception.',
-    }, {
-      selector: 'ImportExpression[source.value=/^@h-ai\\/[^/]+\\/(src|dist)(\\/|$)/]',
-      message: 'Use the public exports of hai packages instead of their src/dist internals.',
-    }, {
+      },
+      {
       // 仅识别明确的静态敏感键；变量键、别名及业务敏感程度仍需审查。
-      selector: 'CallExpression[callee.property.name="setItem"][callee.object.name="localStorage"][arguments.0.value=/^(token|password|secret|api[_-]?key|(access|refresh|auth|session)[_-]?token)$/i]',
-      message: 'Keep sensitive tokens in memory, httpOnly cookies or a secure native TokenStore instead of localStorage.',
-    }, {
-      selector: 'CallExpression[callee.property.name="setItem"][callee.object.property.name="localStorage"][arguments.0.value=/^(token|password|secret|api[_-]?key|(access|refresh|auth|session)[_-]?token)$/i]',
-      message: 'Keep sensitive tokens in memory, httpOnly cookies or a secure native TokenStore instead of localStorage.',
-    }],
+        selector: 'CallExpression[callee.property.name="setItem"][callee.object.name="localStorage"][arguments.0.value=/^(token|password|secret|api[_-]?key|(access|refresh|auth|session)[_-]?token)$/i]',
+        message: 'Keep sensitive tokens in memory, httpOnly cookies or a secure native TokenStore instead of localStorage.',
+      },
+      {
+        selector: 'CallExpression[callee.property.name="setItem"][callee.object.property.name="localStorage"][arguments.0.value=/^(token|password|secret|api[_-]?key|(access|refresh|auth|session)[_-]?token)$/i]',
+        message: 'Keep sensitive tokens in memory, httpOnly cookies or a secure native TokenStore instead of localStorage.',
+      },
+    ],
   },
 }

package/templates/base/eslint.config.js.hbs

@@ -9,7 +9,9 @@ import { haiQualityConfig } from './eslint-rules.js'
 
 export default antfu({
   // unused-imports 使用 TS 规则，JS 同样使用 TS parser 以保持 scope 契约一致。
-  typescript: { files: [GLOB_SRC] },
+  typescript: {
+    files: [GLOB_SRC],
+  },
   formatters: true,
   ignores: [
 {{#unless isSvelteOnlyApp}}