@h-ai/cli 1.0.0-beta.2 → 1.0.0-beta.21

package/templates/features/ai/routes/api/chat/+server.ts

@@ -6,7 +6,9 @@ import { ai } from '@h-ai/ai'
 import { kit } from '@h-ai/kit'
 import { z } from 'zod'
 
-const ChatInputSchema = z.object({ message: z.string().trim().min(1).max(4000) }).strict()
+const ChatInputSchema = z.object({
+  message: z.string().trim().min(1).max(4000),
+}).strict()
 
 export const POST: RequestHandler = kit.handler(async ({ request, locals }) => {
   const { message } = await kit.validate.body(request, ChatInputSchema)

package/templates/features/iam/routes-admin/(auth)/auth/forgot-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-admin/(auth)/auth/login/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='login' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/admin', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='login' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('admin'))} />

package/templates/features/iam/routes-admin/(auth)/auth/register/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='register' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/admin', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='register' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('admin'))} />

package/templates/features/iam/routes-admin/(auth)/auth/reset-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-h5/auth/forgot-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-h5/auth/login/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('/'))} />

package/templates/features/iam/routes-h5/auth/register/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('/'))} />

package/templates/features/iam/routes-h5/auth/reset-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-website/auth/forgot-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='forgot' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/iam/routes-website/auth/login/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='login' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('/'))} />

package/templates/features/iam/routes-website/auth/register/+page.svelte.hbs

@@ -1,11 +1,11 @@
 <script lang='ts'>
   import { goto } from '$app/navigation'
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const authActions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const authActions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('/auth/login', {})} registerUrl={resolve('/auth/register', {})} onauthenticated={() => goto(resolve('/', {}))} />
+<AuthPanel config={page.data.iamPublicConfig} actions={authActions} initialMode='register' loginUrl={resolve('auth/login')} registerUrl={resolve('auth/register')} onauthenticated={() => goto(resolve('/'))} />

package/templates/features/iam/routes-website/auth/reset-password/+page.svelte.hbs

@@ -1,10 +1,10 @@
 <script lang='ts'>
-  import { base, resolve } from '$app/paths'
+  import { resolve } from '$app/paths'
   import { page } from '$app/state'
   import { kit } from '@h-ai/kit'
   import { AuthPanel } from '@h-ai/ui/components/scenes/iam/index'
 
-  const actions = kit.client.createAuthActions({ basePath: `${base}/api/auth` })
+  const actions = kit.client.createAuthActions({ basePath: `${resolve('/').replace(/\/$/, '')}/api/auth` })
 </script>
 
-<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('/auth/login', {})} />
+<AuthPanel config={page.data.iamPublicConfig} {actions} initialMode='reset' resetToken={page.url.searchParams.get('token') ?? ''} loginUrl={resolve('auth/login')} />

package/templates/features/payment/routes/api/v1/payment/create/+server.ts

@@ -1,10 +1,13 @@
 /** 创建支付参数 API；渠道、场景与 openid 必须通过显式校验，禁止回落到其它支付模式。 */
 import type { RequestHandler } from './$types'
-import { base } from '$app/paths'
+import { resolve } from '$app/paths'
 import { kit } from '@h-ai/kit'
 import { payment } from '@h-ai/payment'
 import { z } from 'zod'
 
+// Vite 配置固定 paths.relative=false，HTTP 前缀不会随 SSR 页面深度改变。
+const base = resolve('/').replace(/\/$/, '')
+
 /** 本模板的业务字段；服务端仍需从可信订单重新核对金额、描述、订单号和所属用户。 */
 const CreatePaymentSchema = z.object({
   provider: z.enum(['wechat', 'alipay', 'stripe']),
@@ -15,7 +18,13 @@ const CreatePaymentSchema = z.object({
   userId: z.string().trim().min(1).max(128).optional(),
   metadata: z.record(z.string(), z.string()).optional(),
   notifyUrl: z.url({ protocol: /^https?$/ }).optional(),
-}).strict().refine(input => input.tradeType === (input.provider === 'wechat' ? 'jsapi' : 'h5'), { path: ['tradeType'] }).refine(input => input.provider !== 'wechat' || input.userId !== undefined, { path: ['userId'] })
+}).strict().refine(input => input.tradeType === (input.provider === 'wechat'
+  ? 'jsapi'
+  : 'h5'), {
+  path: ['tradeType'],
+}).refine(input => input.provider !== 'wechat' || input.userId !== undefined, {
+  path: ['userId'],
+})
 
 export const POST: RequestHandler = async ({ request, locals }) => {
   const { provider, tradeType, outTradeNo, totalAmount, subject, notifyUrl, userId, metadata } = await kit.validate.body(request, CreatePaymentSchema)
@@ -28,5 +37,7 @@ export const POST: RequestHandler = async ({ request, locals }) => {
     metadata,
     notifyUrl: notifyUrl ?? `${new URL(request.url).origin}${base}/api/v1/payment/notify/${provider}`,
   })
-  return kit.response.fromResult(result, locals.requestId)
+  if (!result.success)
+    return kit.response.fromError(result.error, locals.requestId)
+  return kit.response.ok(result.data, locals.requestId)
 }

package/templates/shared/browser-check/startup.js

@@ -0,0 +1,115 @@
+/* eslint-disable no-var, object-shorthand, prefer-template, prefer-arrow-callback -- 此脚本须在低版本浏览器中直接执行，使用 ES5 语法。 */
+;(function () {
+  var agent = navigator.userAgent
+  var root = document.documentElement
+  var location = window.location
+  var edgeHelp = 'https://support.microsoft.com/edge/microsoft-edge-update-settings'
+  var chromeHelp = 'https://support.google.com/chrome/answer/95414'
+  var firefoxHelp = 'https://support.mozilla.org/kb/update-firefox-latest-release'
+  var safariHelp = 'https://support.apple.com/102665'
+  var iosHelp = 'https://support.apple.com/118575'
+  var browser = getOutdatedBrowser()
+
+  // 匹配 Vite 8 的默认构建基线。Edge 的 UA 同时包含 Chrome，iOS 先按系统版本判断。
+  function getOutdatedBrowser() {
+    var version = /\b(?:CPU (?:iPhone )?OS|iPhone OS) (\d+_\d+(?:_\d+)?)/.exec(agent)
+    if (version && /\b(?:iPhone|iPad|iPod)\b/.test(agent)) {
+      return outdated('iOS / iPadOS', version, 16, 4, iosHelp)
+    }
+    version = /\b(?:EdgA?|Edge)\/(\d+(?:\.\d+)*)/.exec(agent)
+    if (version) {
+      return outdated('Microsoft Edge', version, 111, 0, edgeHelp)
+    }
+    version = /\bFirefox\/(\d+(?:\.\d+)*)/.exec(agent)
+    if (version) {
+      return outdated('Firefox', version, 114, 0, firefoxHelp)
+    }
+    version = /\bChrome\/(\d+(?:\.\d+)*)/.exec(agent)
+    if (version) {
+      if (/\b(?:wv|OPR\/|SamsungBrowser\/|Vivaldi\/|YaBrowser\/|HeadlessChrome\/)/.test(agent))
+        return null
+      return outdated('Google Chrome', version, 111, 0, chromeHelp)
+    }
+    version = /\bVersion\/(\d+(?:\.\d+)*)/.exec(agent)
+    if (version && /\bSafari\//.test(agent)) {
+      return outdated('Safari', version, 16, 4, safariHelp)
+    }
+    return null
+  }
+
+  function outdated(name, match, major, minor, help) {
+    var version = match[1].replace(/_/g, '.')
+    var parts = version.split('.')
+    var currentMajor = Number(parts[0])
+    var currentMinor = Number(parts[1] || 0)
+    if (currentMajor > major || (currentMajor === major && currentMinor >= minor))
+      return null
+    return {
+      name: name,
+      version: version,
+      minimum: minor
+        ? major + '.' + minor
+        : String(major),
+      help: help,
+    }
+  }
+
+  function getLanguage(value) {
+    var language = (value || '').toLowerCase().split(/[-_]/)[0]
+    return language === 'zh' || language === 'ja' || language === 'en'
+      ? language
+      : ''
+  }
+
+  function openUpdatePage() {
+    // 以静态脚本地址为基准，保留发布目录。仅传语言，不把原页面地址写到升级页。
+    var script = document.getElementById('hai-browser-startup')
+    var language = getLanguage(root.lang) || getLanguage(navigator.language) || 'en'
+    location.replace(script.src.replace(/\/startup\.js$/, '/update.html') + '#' + language)
+  }
+
+  function showUpdateInstructions() {
+    var locale = getLanguage(location.hash.slice(1)) || getLanguage(navigator.language) || 'en'
+    var messages = {
+      zh: [
+        '浏览器版本过低',
+        '当前使用 {name} {version}。此站点至少需要 {name} {minimum}。',
+        '请更新到最新版本，然后重新打开此站点。',
+        '查看官方更新说明',
+      ],
+      en: [
+        'Update your browser',
+        'You are using {name} {version}. This site requires {name} {minimum} or later.',
+        'Install the latest update, then reopen this site.',
+        'Official update instructions',
+      ],
+      ja: [
+        'ブラウザーを更新してください',
+        '現在のバージョンは {name} {version} です。このサイトには {name} {minimum} 以降が必要です。',
+        '最新版に更新してから、このサイトを開き直してください。',
+        '公式の更新手順を見る',
+      ],
+    }
+    var message = messages[locale]
+    var help = document.getElementById('browser-update-help')
+    root.lang = locale === 'zh'
+      ? 'zh-CN'
+      : locale
+    document.title = message[0]
+    document.getElementById('browser-update-title').textContent = message[0]
+    document.getElementById('browser-update-version').textContent = message[1].replace(/\{(name|version|minimum)\}/g, function (_match, key) {
+      return browser[key]
+    })
+    document.getElementById('browser-update-instruction').textContent = message[2]
+    help.textContent = message[3]
+    help.href = browser.help
+    help.hidden = false
+  }
+
+  if (!browser)
+    return
+  if (root.hasAttribute('data-hai-browser-update'))
+    showUpdateInstructions()
+  else
+    openUpdatePage()
+})()

package/templates/shared/browser-check/update.css

@@ -0,0 +1,37 @@
+body {
+  margin: 0;
+  padding: 12vh 20px 32px;
+  background: #f4f6fa;
+  color: #1b263b;
+  font-family: system-ui, sans-serif;
+  font-size: 1rem;
+  line-height: 1.6;
+}
+
+main {
+  max-width: 33rem;
+  margin: 0 auto;
+  padding: 1.5rem;
+  border: 1px solid #dce2ec;
+  border-radius: 0.75rem;
+  background: #fff;
+}
+
+h1 {
+  margin: 0 0 1rem;
+  font-size: 1.5rem;
+  line-height: 1.25;
+}
+
+p {
+  margin: 0 0 0.75rem;
+}
+
+a {
+  color: #1642a3;
+}
+
+a:focus {
+  outline: 2px solid currentColor;
+  outline-offset: 4px;
+}

package/templates/shared/browser-check/update.html

@@ -0,0 +1,19 @@
+<!doctype html>
+<html lang="en" data-hai-browser-update>
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="noindex" />
+    <title>Browser requirements</title>
+    <link rel="stylesheet" href="./update.css" />
+  </head>
+  <body>
+    <main>
+      <h1 id="browser-update-title">Browser requirements</h1>
+      <p id="browser-update-version">This site requires a current browser.</p>
+      <p id="browser-update-instruction">Install the latest update, then reopen this site.</p>
+      <a id="browser-update-help" rel="noreferrer" hidden></a>
+    </main>
+    <script src="./startup.js"></script>
+  </body>
+</html>

package/templates/shared/browser-startup.spec.ts

@@ -0,0 +1,23 @@
+import { expect, test } from '@playwright/test'
+
+test('old browser sees upgrade instructions without the application bundles', async ({ page }) => {
+  // 只改变浏览器脚本看到的版本，确保检测在客户端执行。
+  await page.addInitScript(() => {
+    Object.defineProperty(navigator, 'userAgent', {
+      get: () => 'Mozilla/5.0 Gecko/20100101 Firefox/113.0',
+    })
+  })
+  await page.route('**/*', async (route) => {
+    const { pathname } = new URL(route.request().url())
+    if (/\.(?:js|css)$/.test(pathname) && !pathname.includes('/_hai/browser-check/'))
+      await route.abort()
+    else
+      await route.continue()
+  })
+  await page.goto('./', { waitUntil: 'commit' })
+  await expect(page).toHaveURL(/\/_hai\/browser-check\/update\.html#(?:zh|en|ja)$/)
+  await expect(page.getByRole('heading', { level: 1 })).toBeVisible()
+  await expect(page.getByRole('main')).toContainText('Firefox 113.0')
+  await expect(page.getByRole('main')).toContainText('Firefox 114')
+  await expect(page.getByRole('link')).toHaveAttribute('href', 'https://support.mozilla.org/kb/update-firefox-latest-release')
+})

package/templates/shared/build-metadata.ts

@@ -7,7 +7,9 @@ import process from 'node:process'
 /** 当前编译目标的私有产物身份；同一 SSR 构建重入复用身份，各端版本来自自己的 manifest。 */
 export function resolveBuildMetadata(directory: string): { appVersion: string, buildId: string, commit: string } {
   const manifest: { version?: unknown } = JSON.parse(readFileSync(join(directory, 'package.json'), 'utf8'))
-  const appVersion = typeof manifest.version === 'string' && manifest.version.trim() ? manifest.version.trim() : 'unknown'
+  const appVersion = typeof manifest.version === 'string' && manifest.version.trim()
+    ? manifest.version.trim()
+    : 'unknown'
   if (appVersion.length > 128)
     throw new Error('Invalid package.json version: maximum length is 128')
   const suppliedId = process.env.HAI_BUILD_ID?.trim()
@@ -27,14 +29,26 @@ export function resolveBuildMetadata(directory: string): { appVersion: string, b
 /** 未跟踪的生成工程不能把临时目录的父框架提交冒充自身源码。 */
 function sourceCommit(directory: string): string {
   try {
-    const options = { cwd: directory, encoding: 'utf8' as const, stdio: 'pipe' as const, windowsHide: true }
+    const options = {
+      cwd: directory,
+      encoding: 'utf8' as const,
+      stdio: 'pipe' as const,
+      windowsHide: true,
+    }
     const root = execFileSync('git', ['rev-parse', '--show-toplevel'], options).trim()
     const manifest = relative(root, join(directory, 'package.json')).replaceAll('\\', '/')
     if (manifest.startsWith('../'))
       return 'unknown'
-    execFileSync('git', ['ls-files', '--error-unmatch', '--', manifest], { ...options, cwd: root })
+    execFileSync('git', [
+      'ls-files',
+      '--error-unmatch',
+      '--',
+      manifest,
+    ], { ...options, cwd: root })
     const commit = execFileSync('git', ['rev-parse', 'HEAD'], options).trim()
-    return /^(?:[a-f\d]{40}|[a-f\d]{64})$/i.test(commit) ? commit : 'unknown'
+    return /^(?:[a-f\d]{40}|[a-f\d]{64})$/i.test(commit)
+      ? commit
+      : 'unknown'
   }
   catch {
     return 'unknown'

package/templates/shared/e2e-env.ts

@@ -29,7 +29,12 @@ export function createE2eServerEnv(profile: Record<string, string>): Record<stri
   const environment: Record<string, string | undefined> = Object.fromEntries(
     Object.keys(process.env).filter(key => /^(?:HAI_|PUBLIC_|VITE_)/i.test(key)).map(key => [key, undefined]),
   )
-  for (const name of ['HAI_E2E_DATA_ROOT', 'HAI_AUTH_EVIDENCE_DIR', 'HAI_CORE_NAME', 'HAI_CORE_VERSION']) {
+  for (const name of [
+    'HAI_E2E_DATA_ROOT',
+    'HAI_AUTH_EVIDENCE_DIR',
+    'HAI_CORE_NAME',
+    'HAI_CORE_VERSION',
+  ]) {
     if (process.env[name] !== undefined)
       environment[name] = process.env[name]
   }
@@ -56,10 +61,15 @@ export function createE2eServerEnv(profile: Record<string, string>): Record<stri
 export function createE2eTransportRing(): string {
   const key = createECDH('SM2')
   key.generateKeys()
-  return JSON.stringify({ activeKeyId: 'e2e-v1', keys: { 'e2e-v1': {
-    publicKey: key.getPublicKey('hex'),
-    privateKey: key.getPrivateKey('hex').padStart(64, '0'),
-  } } })
+  return JSON.stringify({
+    activeKeyId: 'e2e-v1',
+    keys: {
+      'e2e-v1': {
+        publicKey: key.getPublicKey('hex'),
+        privateKey: key.getPrivateKey('hex').padStart(64, '0'),
+      },
+    },
+  })
 }
 
 /**
@@ -93,6 +103,12 @@ export function createE2eNotificationEnv(): Record<string, string> {
       { name: 'password_reset', provider: 'email', body: 'Reset: {token}' },
       { name: 'password_reset_sms', provider: 'sms', body: 'Reset: {token}' },
     ]),
-    HAI_IAM_AGREEMENTS: JSON.stringify({ showOnRegister: true, showOnLogin: true, userAgreementMarkdown: '# Configured registration agreement\n\n**Registration terms**\n\n- Keep your account credentials secure.', userAgreementUrl: new URL('/terms', url).href, privacyPolicyUrl: new URL('/privacy', url).href }),
+    HAI_IAM_AGREEMENTS: JSON.stringify({
+      showOnRegister: true,
+      showOnLogin: true,
+      userAgreementMarkdown: '# Configured registration agreement\n\n**Registration terms**\n\n- Keep your account credentials secure.',
+      userAgreementUrl: new URL('/terms', url).href,
+      privacyPolicyUrl: new URL('/privacy', url).href,
+    }),
   }
 }

package/templates/shared/native-name.d.mts

@@ -0,0 +1,5 @@
+/** 原生构建只透传显式的 Core 名称与环境模式。 */
+export declare function nativeNameEnvironment(envDir?: string): Record<string, string>
+
+/** 从 Core YAML 与分层环境配置解析原生应用名称。 */
+export declare function resolveNativeName(envDir: string, configFile: string, mode?: string): string

package/templates/shared/native-name.mjs

@@ -0,0 +1,94 @@
+/** 原生工具在 Node 边界解析 Core 名称，不初始化服务或导出完整配置。 */
+import process from 'node:process'
+import { core, CoreConfigSchema } from '@h-ai/core'
+
+/**
+ * 读取原生构建所需的 Core 环境覆盖，父级必须是对象。
+ * @param {NodeJS.ProcessEnv} [environment] 原生构建的已合并环境。
+ * @returns {Record<string, unknown>} Core 环境覆盖值。
+ */
+function resolveCoreInputs(environment) {
+  const resolved = core.config.resolve({
+    name: 'core',
+    value: {},
+    schema: CoreConfigSchema,
+    environment,
+  })
+  if (!resolved.success)
+    throw new Error(resolved.error.message)
+  const { data } = resolved
+  if (data === null || typeof data !== 'object' || Array.isArray(data))
+    throw new Error('Invalid HAI_CORE: expected a JSON object')
+  return /** @type {Record<string, unknown>} */ (data)
+}
+
+/**
+ * 只将显式名称和环境模式传给原生构建子进程，父 JSON 中的其他字段不透传。
+ * @param {string} [envDir] 指定时先读取该目录的环境文件，供隔离容器的名称输入使用。
+ * @returns {Record<string, string>} 原生名称的公开构建输入。
+ */
+export function nativeNameEnvironment(envDir) {
+  let inputs = process.env
+  /** @type {string | undefined} */
+  let selectedMode
+  if (envDir) {
+    selectedMode = /** @type {string | undefined} */ (resolveCoreInputs().env) ?? 'production'
+    const loaded = core.config.loadEnvFiles({ envDir, mode: selectedMode })
+    if (!loaded.success)
+      throw new Error(loaded.error.message)
+    inputs = loaded.data
+  }
+  const value = resolveCoreInputs(inputs)
+  // 父 JSON 替换 YAML。只转发细项时也要保留 name 缺省后的 Schema 默认值。
+  if (inputs.HAI_CORE !== undefined && value.name === undefined)
+    value.name = CoreConfigSchema.shape.name.parse(undefined)
+  /** @type {Record<string, string>} */
+  const environment = {}
+  for (const key of ['name', 'env']) {
+    if (value[key] === undefined)
+      continue
+    const schema = key === 'name'
+      ? CoreConfigSchema.shape.name
+      : CoreConfigSchema.shape.env
+    const parsed = schema.safeParse(value[key])
+    if (!parsed.success)
+      throw new Error(`Invalid HAI_CORE_${key.toUpperCase()}`)
+    environment[`HAI_CORE_${key.toUpperCase()}`] = parsed.data
+  }
+  // 保留本次入口选择的模式，避免 dotenv 的运行环境字段改变子进程二次加载的文件集合。
+  if (selectedMode)
+    environment.HAI_CORE_ENV = selectedMode
+  return environment
+}
+
+/**
+ * 按 Core 统一的 dotenv 优先级加载名称；环境只在同步解析期间注入并在结束后还原。
+ * @param {string} envDir 环境文件目录。
+ * @param {string} configFile Core YAML 的绝对路径。
+ * @param {string} [mode] 未指定时使用显式 Core 模式、NODE_ENV，最后默认为 prod。
+ * @returns {string} 应用显示名称。
+ */
+export function resolveNativeName(envDir, configFile, mode) {
+  const overrides = nativeNameEnvironment()
+  const loaded = core.config.loadEnvFiles({ mode: overrides.HAI_CORE_ENV ?? mode ?? process.env.NODE_ENV ?? 'prod', envDir })
+  if (!loaded.success)
+    throw new Error(loaded.error.message)
+  const previous = new Map(Object.keys(loaded.data).map(key => [key, process.env[key]]))
+  try {
+    Object.assign(process.env, loaded.data)
+    const result = core.config.load('core', configFile, CoreConfigSchema)
+    if (!result.success)
+      throw new Error(result.error.message)
+    if (!result.data.name.trim())
+      throw new Error('Invalid HAI_CORE_NAME: expected a nonempty application name')
+    return result.data.name
+  }
+  finally {
+    for (const [key, value] of previous) {
+      if (value === undefined)
+        delete process.env[key]
+      else
+        process.env[key] = value
+    }
+  }
+}