@cicctencent/midwayjs-base 1.0.38 → 1.0.39

package/dist/config/env.js

@@ -39,13 +39,16 @@ const path = __importStar(require("path"));
 const fs = __importStar(require("fs"));
 function loadEnv(envPath) {
     envPath = envPath || path.join(process.cwd(), '.env');
-    console.log('env path', envPath);
     if (fs.existsSync(envPath)) {
-        const env = dotenv.config({
+        const result = dotenv.config({
             path: envPath,
             encoding: 'utf-8',
         });
-        console.log(env);
+        if (result.error) {
+            if (process.env.NODE_ENV !== 'production') {
+                console.warn('[midwayjs-base] Failed to load .env file:', result.error.message);
+            }
+        }
     }
     return process.env;
 }

package/dist/constants/error-code.d.ts

@@ -0,0 +1,27 @@
+export declare enum ErrorCode {
+    SUCCESS = 0,
+    SYSTEM_ERROR = 1001,
+    PARAM_ERROR = 1002,
+    TIMEOUT = 1003,
+    TOKEN_INVALID = 50001,
+    TOKEN_EXPIRED = 50002,
+    AUTH_REQUIRED = 50003,
+    IP_NOT_ALLOWED = 50004,
+    TIMESTAMP_EXPIRED = 50005,
+    TIMESTAMP_INVALID = 50006,
+    TOKEN_EMPTY = 50007
+}
+export declare const ErrorMessages: Record<ErrorCode, string>;
+export declare function createError(code: ErrorCode, msg?: string): {
+    ret: ErrorCode;
+    msg: string;
+};
+export declare class BizError extends Error {
+    ret: ErrorCode;
+    msg: string;
+    constructor(code: ErrorCode, msg?: string);
+    toJSON(): {
+        ret: ErrorCode;
+        msg: string;
+    };
+}

package/dist/constants/error-code.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BizError = exports.ErrorMessages = exports.ErrorCode = void 0;
+exports.createError = createError;
+var ErrorCode;
+(function (ErrorCode) {
+    ErrorCode[ErrorCode["SUCCESS"] = 0] = "SUCCESS";
+    ErrorCode[ErrorCode["SYSTEM_ERROR"] = 1001] = "SYSTEM_ERROR";
+    ErrorCode[ErrorCode["PARAM_ERROR"] = 1002] = "PARAM_ERROR";
+    ErrorCode[ErrorCode["TIMEOUT"] = 1003] = "TIMEOUT";
+    ErrorCode[ErrorCode["TOKEN_INVALID"] = 50001] = "TOKEN_INVALID";
+    ErrorCode[ErrorCode["TOKEN_EXPIRED"] = 50002] = "TOKEN_EXPIRED";
+    ErrorCode[ErrorCode["AUTH_REQUIRED"] = 50003] = "AUTH_REQUIRED";
+    ErrorCode[ErrorCode["IP_NOT_ALLOWED"] = 50004] = "IP_NOT_ALLOWED";
+    ErrorCode[ErrorCode["TIMESTAMP_EXPIRED"] = 50005] = "TIMESTAMP_EXPIRED";
+    ErrorCode[ErrorCode["TIMESTAMP_INVALID"] = 50006] = "TIMESTAMP_INVALID";
+    ErrorCode[ErrorCode["TOKEN_EMPTY"] = 50007] = "TOKEN_EMPTY";
+})(ErrorCode || (exports.ErrorCode = ErrorCode = {}));
+exports.ErrorMessages = {
+    [ErrorCode.SUCCESS]: 'success',
+    [ErrorCode.SYSTEM_ERROR]: '系统错误',
+    [ErrorCode.PARAM_ERROR]: '参数错误',
+    [ErrorCode.TIMEOUT]: '请求超时',
+    [ErrorCode.TOKEN_INVALID]: 'token输入错误',
+    [ErrorCode.TOKEN_EXPIRED]: 'token不存在或已过期',
+    [ErrorCode.AUTH_REQUIRED]: '需要登陆态',
+    [ErrorCode.IP_NOT_ALLOWED]: 'IP不在白名单内',
+    [ErrorCode.TIMESTAMP_EXPIRED]: 'timestamp已超过有效时间',
+    [ErrorCode.TIMESTAMP_INVALID]: 'timestamp时间异常',
+    [ErrorCode.TOKEN_EMPTY]: 'token为空，非法请求',
+};
+function createError(code, msg) {
+    return {
+        ret: code,
+        msg: msg || exports.ErrorMessages[code] || '未知错误',
+    };
+}
+class BizError extends Error {
+    constructor(code, msg) {
+        super(msg || exports.ErrorMessages[code] || '未知错误');
+        this.ret = code;
+        this.msg = this.message;
+        this.name = 'BizError';
+    }
+    toJSON() {
+        return {
+            ret: this.ret,
+            msg: this.msg,
+        };
+    }
+}
+exports.BizError = BizError;
+//# sourceMappingURL=error-code.js.map

package/dist/filter/default.filter.d.ts

@@ -1,7 +1,8 @@
 import { Context } from '@midwayjs/koa';
+import { ErrorCode, BizError } from '../constants/error-code';
 export declare class DefaultErrorFilter {
-    catch(err: Error, ctx: Context): Promise<{
-        success: boolean;
-        message: string;
+    catch(err: Error | BizError, ctx: Context): Promise<{
+        ret: ErrorCode;
+        msg: string;
     }>;
 }

package/dist/filter/default.filter.js

@@ -8,11 +8,21 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DefaultErrorFilter = void 0;
 const core_1 = require("@midwayjs/core");
+const error_code_1 = require("../constants/error-code");
 let DefaultErrorFilter = class DefaultErrorFilter {
     async catch(err, ctx) {
-        return {
-            success: false,
+        if (err instanceof error_code_1.BizError) {
+            ctx.logger?.error('Business error:', err.toJSON());
+            return err.toJSON();
+        }
+        ctx.logger?.error('Unhandled error:', {
+            name: err.name,
             message: err.message,
+            stack: err.stack,
+        });
+        return {
+            ret: error_code_1.ErrorCode.SYSTEM_ERROR,
+            msg: err.message || '系统错误',
         };
     }
 };

package/dist/guard/api.js

@@ -16,6 +16,7 @@ exports.ApiGuard = void 0;
 const core_1 = require("@midwayjs/core");
 const decorator_1 = require("../lib/decorator");
 const api_1 = __importDefault(require("@fefeding/common/dist/utils/api"));
+const error_code_1 = require("../constants/error-code");
 let ApiGuard = class ApiGuard {
     async canActivate(context, supplierClz, methodName) {
         const needIP = (0, decorator_1.getCheckIP)(supplierClz, methodName);
@@ -40,16 +41,21 @@ let ApiGuard = class ApiGuard {
             context.cookies.get('timestamp'));
         if (!reqToken || !timestamp) {
             context.logger.error(`token为空，非法请求, token: ${reqToken}, timestamp: ${timestamp}`);
-            throw Error('token为空，非法请求');
+            throw new error_code_1.BizError(error_code_1.ErrorCode.TOKEN_EMPTY);
         }
-        console.log('token time', reqToken, timestamp);
-        if (timestamp < Date.now() - 5 * 60 * 1000) {
-            throw Error('timestamp已超过有效时间');
+        const now = Date.now();
+        const validWindow = 5 * 60 * 1000;
+        if (timestamp < now - validWindow) {
+            throw new error_code_1.BizError(error_code_1.ErrorCode.TIMESTAMP_EXPIRED);
+        }
+        if (timestamp > now + validWindow) {
+            context.logger.error(`timestamp时间异常，客户端时间超前: ${timestamp}, 当前时间: ${now}`);
+            throw new error_code_1.BizError(error_code_1.ErrorCode.TIMESTAMP_INVALID);
         }
         const thisToken = api_1.default.createApiToken(this.apiOption.key, timestamp);
         if (reqToken !== thisToken.sign) {
             context.logger.error(`输入token:${reqToken}  本地: ${thisToken.sign} 不一致`);
-            throw Error('token输入错误');
+            throw new error_code_1.BizError(error_code_1.ErrorCode.TOKEN_INVALID);
         }
     }
     checkIPInWhiteList(context) {
@@ -57,7 +63,7 @@ let ApiGuard = class ApiGuard {
         if (this.ipOption?.whiteList && !this.ipOption.whiteList.includes('*')) {
             if (!this.ipOption.whiteList.includes(requestIp)) {
                 context.logger.error(`IP:${requestIp} 不在白名单内`);
-                throw Error(`IP:${requestIp} 不在白名单内`);
+                throw new error_code_1.BizError(error_code_1.ErrorCode.IP_NOT_ALLOWED, `IP:${requestIp} 不在白名单内`);
             }
         }
     }

package/dist/guard/auth.d.ts

@@ -11,8 +11,12 @@ export declare class AuthGuard implements IGuard<Context> {
     apiOption: any;
     koa: any;
     init(): Promise<void>;
-    checkNeedAuth(context: Context, supplierClz: any, methodName: string): any;
+    private isPathIgnored;
+    checkNeedAuth(context: Context, supplierClz: any, methodName: string): boolean;
     canActivate(context: Context, supplierClz: any, methodName: string): Promise<boolean>;
-    checkAuth(context: Context, token: string, needAuth?: boolean): Promise<boolean>;
-    authError(context: Context, error?: any): void;
+    checkAuth(context: Context, token: string, needAuth?: boolean): Promise<void>;
+    authError(context: Context, error: {
+        ret: number;
+        msg: string;
+    }): void;
 }

package/dist/guard/auth.js

@@ -14,59 +14,53 @@ const core_1 = require("@midwayjs/core");
 const decorator_1 = require("../lib/decorator");
 const utils_1 = require("../lib/utils");
 const session_service_interface_1 = require("../types/session.service.interface");
+const error_code_1 = require("../constants/error-code");
 let AuthGuard = class AuthGuard {
     async init() {
         const appContext = this.app.getApplicationContext();
-        console.log('init auth guard');
         this.sessionService = await appContext.getAsync(session_service_interface_1.DEFAULT_SESSION_SERVICE_KEY);
-        if (this.sessionService?.sessionOption?.serviceKey &&
-            this.sessionService?.sessionOption.serviceKey !==
-                session_service_interface_1.DEFAULT_SESSION_SERVICE_KEY) {
-            const sessionServiceObj = await appContext.getAsync(this.sessionService.sessionOption.serviceKey);
-            if (sessionServiceObj) {
-                console.log('use custom session service for auth guard', this.sessionService.sessionOption.serviceKey);
-                this.sessionService = sessionServiceObj;
+        const customKey = this.sessionService?.sessionOption?.serviceKey;
+        if (customKey && customKey !== session_service_interface_1.DEFAULT_SESSION_SERVICE_KEY) {
+            const customService = await appContext.getAsync(customKey);
+            if (customService) {
+                this.sessionService = customService;
             }
         }
     }
+    isPathIgnored(path) {
+        const ignores = this.authOption?.ignores;
+        if (!ignores)
+            return false;
+        if (ignores === '*')
+            return true;
+        if (typeof ignores === 'string') {
+            return ignores === path;
+        }
+        if (Array.isArray(ignores)) {
+            return ignores.some(rule => rule === '*' ||
+                (rule instanceof RegExp ? rule.test(path) : rule === path));
+        }
+        return false;
+    }
     checkNeedAuth(context, supplierClz, methodName) {
-        if (this.authOption?.ignores) {
-            if (this.authOption.ignores === '*' ||
-                this.authOption.ignores === context.path) {
-                return false;
-            }
-            if (Array.isArray(this.authOption.ignores)) {
-                if (this.authOption.ignores.includes('*'))
-                    return false;
-                for (const t of this.authOption.ignores) {
-                    if (t instanceof RegExp) {
-                        if (t.test(context.path))
-                            return false;
-                    }
-                    else if (typeof t === 'string') {
-                        if (t === context.path)
-                            return false;
-                    }
-                }
-            }
+        if (this.isPathIgnored(context.path)) {
+            return false;
         }
-        const needAuth = (0, decorator_1.getCheckLogin)(supplierClz, methodName);
-        return needAuth;
+        return (0, decorator_1.getCheckLogin)(supplierClz, methodName) === true;
     }
     async canActivate(context, supplierClz, methodName) {
         const needAuth = this.checkNeedAuth(context, supplierClz, methodName);
         const token = (0, utils_1.getAuthToken)(context);
         if (token)
             context.auth_token = token;
-        const ret = await this.checkAuth(context, token, needAuth);
-        return ret;
+        await this.checkAuth(context, token, needAuth);
+        return true;
     }
     async checkAuth(context, token, needAuth) {
         this.sessionService.ctx = context;
-        const authRet = 50001;
         let errRes = null;
+        let session = null;
         try {
-            let session = null;
             const authCode = context.URL.searchParams.get('auth_code');
             if (authCode) {
                 session = await this.sessionService.loginByCode(authCode);
@@ -75,11 +69,10 @@ let AuthGuard = class AuthGuard {
                 }
                 context.URL.searchParams.delete('auth_code');
                 context.URL.hostname = context.detect?.HOSTNAME || context.hostname;
-                const url = context.URL.toString();
-                context.redirect(url);
-                return true;
+                context.redirect(context.URL.toString());
+                return;
             }
-            if (token && !errRes && !session) {
+            if (token) {
                 if (token.startsWith('Bearer ')) {
                     const jwtData = (0, utils_1.decodeJWT)(token.replace('Bearer ', ''), this.sessionService?.sessionOption?.secretKey || 'fefeding');
                     if (jwtData) {
@@ -89,58 +82,58 @@ let AuthGuard = class AuthGuard {
                 else {
                     session = await this.sessionService.getLoginSession(token);
                 }
-                if (!session || !session.id) {
+                if (!session?.id) {
                     (0, utils_1.setAuthToken)(context, '');
                     errRes = {
-                        ret: authRet,
+                        ret: error_code_1.ErrorCode.TOKEN_EXPIRED,
                         msg: 'token不存在或已过期',
                     };
                 }
             }
             if (!session) {
                 errRes = {
-                    ret: authRet,
+                    ret: error_code_1.ErrorCode.AUTH_REQUIRED,
                     msg: '需要登陆态',
                 };
             }
             context.currentSession = session;
-            if (session && context.logger?.setOptions) {
-                context.logger.setOptions({
-                    loginId: session?.loginId || '',
-                    userId: (session?.userId || '').toString(),
-                });
+            if (session && context.logger) {
+                if (typeof context.logger.setOptions === 'function') {
+                    context.logger.setOptions({
+                        loginId: session.loginId || '',
+                        userId: (session.userId || '').toString(),
+                    });
+                }
             }
         }
         catch (e) {
             errRes = {
-                ret: e?.ret || authRet,
+                ret: e?.ret || error_code_1.ErrorCode.SYSTEM_ERROR,
                 msg: e?.msg || e?.message || 'auth error',
             };
-            console.error(e);
+            context.logger?.error('Auth check error:', e);
         }
         if (errRes && needAuth) {
             this.authError(context, errRes);
         }
-        return true;
     }
     authError(context, error) {
         const isApi = this.apiOption?.reg?.test(context.path);
         if (isApi) {
             context.status = 200;
-            context.res.write('', 'utf8');
-            throw error;
+            throw new error_code_1.BizError(error.ret, error.msg);
         }
         else {
             const loginUrl = `${this.ssoOption?.baseUrl || this.koa?.globalPrefix || ''}/login`;
             if (!/\/login\/?(\?|$|#)/.test(context.URL.pathname)) {
                 const URL = context.URL;
-                if (context.detect?.HOSTNAME &&
-                    URL.hostname !== context.detect?.HOSTNAME)
+                if (context.detect?.HOSTNAME && URL.hostname !== context.detect.HOSTNAME) {
                     URL.hostname = context.detect.HOSTNAME;
+                }
                 URL.searchParams.delete('jv_auth_code');
                 URL.searchParams.delete('token');
                 URL.searchParams.delete('auth_code');
-                const redirectUrl = context.URL.toString();
+                const redirectUrl = URL.toString();
                 context.redirect(`${loginUrl}?url=${encodeURIComponent(redirectUrl)}&appid=${this.ssoOption?.appId || 0}`);
             }
             else {

package/dist/index.d.ts

@@ -5,6 +5,7 @@ export * as jwt from './lib/jwt';
 export * as decorators from './lib/decorator';
 export * from '@fefeding/common/dist/models/base/enumType';
 export { BaseORM as BaseEntity } from '@fefeding/common/dist/models/base/baseORM';
+export * from './constants/error-code';
 export * from './middleware/apiResultFormatter';
 export * from './middleware/requestInit';
 export * from './middleware/detect.middleware';
@@ -16,3 +17,4 @@ export * from './types/base.controller';
 export * from './types/session.service.interface';
 export * from './service/session.service';
 export * from './service/tencent.service';
+export * from './filter/default.filter';

package/dist/index.js

@@ -46,6 +46,7 @@ exports.decorators = __importStar(require("./lib/decorator"));
 __exportStar(require("@fefeding/common/dist/models/base/enumType"), exports);
 var baseORM_1 = require("@fefeding/common/dist/models/base/baseORM");
 Object.defineProperty(exports, "BaseEntity", { enumerable: true, get: function () { return baseORM_1.BaseORM; } });
+__exportStar(require("./constants/error-code"), exports);
 __exportStar(require("./middleware/apiResultFormatter"), exports);
 __exportStar(require("./middleware/requestInit"), exports);
 __exportStar(require("./middleware/detect.middleware"), exports);
@@ -57,4 +58,5 @@ __exportStar(require("./types/base.controller"), exports);
 __exportStar(require("./types/session.service.interface"), exports);
 __exportStar(require("./service/session.service"), exports);
 __exportStar(require("./service/tencent.service"), exports);
+__exportStar(require("./filter/default.filter"), exports);
 //# sourceMappingURL=index.js.map

package/dist/lib/decorator.d.ts

@@ -1,5 +1,5 @@
 export declare function checkApiToken(need?: boolean): MethodDecorator;
-export declare function getApiToken(target: any, propertyKey: string | symbol): any;
+export declare function getApiToken(target: any, propertyKey: string | symbol): boolean;
 export declare function checkLogin(need?: boolean): MethodDecorator;
 export declare function getCheckLogin(target: any, propertyKey: string | symbol): any;
 export declare function checkIP(need?: boolean): MethodDecorator;

package/dist/lib/decorator.js

@@ -20,10 +20,9 @@ function checkApiToken(need = true) {
 function getApiToken(target, propertyKey) {
     try {
         const value = (0, core_1.getPropertyMetadata)(decorator_1.default.apiTokenMetadataKey, target, propertyKey);
-        return value;
+        return value === true;
     }
-    catch (e) {
-        console.log(e);
+    catch {
         return false;
     }
 }

package/dist/middleware/apiResultFormatter.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ApiResultFormatterMiddleware = void 0;
 const core_1 = require("@midwayjs/core");
 const stream_1 = require("stream");
+const error_code_1 = require("../constants/error-code");
 let ApiResultFormatterMiddleware = class ApiResultFormatterMiddleware {
     ignore(ctx) {
         const koaCtx = ctx;
@@ -42,17 +43,16 @@ let ApiResultFormatterMiddleware = class ApiResultFormatterMiddleware {
                     }
                 }
                 catch (err) {
-                    console.error(err);
-                    if (typeof err?.ret === 'number') {
-                        koaCtx.body = err;
+                    if (err instanceof error_code_1.BizError || typeof err?.ret === 'number') {
+                        koaCtx.body = err instanceof error_code_1.BizError ? err.toJSON() : err;
                     }
                     else {
                         koaCtx.body = {
-                            ret: 1001,
-                            msg: err?.message || 'Error',
+                            ret: error_code_1.ErrorCode.SYSTEM_ERROR,
+                            msg: err?.message || '系统错误',
                         };
                     }
-                    koaCtx.logger.error(koaCtx.request.rawBody, koaCtx.body);
+                    koaCtx.logger.error('API error:', koaCtx.request.rawBody, koaCtx.body);
                 }
                 finally {
                     if (koaCtx.status !== 302)

package/dist/types/base.model.service.d.ts

@@ -13,7 +13,7 @@ export declare abstract class BaseModelService<K extends BaseEntity> extends Bas
     save(entity: K, qryRunner?: QueryRunner): Promise<K>;
     insert(data: DeepPartial<K> | DeepPartial<K>[]): Promise<K | K[]>;
     update(data: DeepPartial<K> | DeepPartial<K>[], repo?: Repository<K>): Promise<K | K[]>;
-    delete(data: DeepPartial<K> | DeepPartial<K>[], repo?: Repository<K>): Promise<K | DeepPartial<K>[]>;
+    delete(data: DeepPartial<K> | DeepPartial<K>[], repo?: Repository<K>): Promise<K | K[]>;
     findAndCount(where: FindOptionsWhere<K> | FindOptionsWhere<K>[], options?: Options<K>): Promise<{
         rows: K[];
         count: number;

package/dist/types/base.model.service.js

@@ -47,14 +47,21 @@ class BaseModelService extends base_service_1.BaseService {
     }
     async delete(data, repo) {
         repo = repo || this.model;
+        const updater = this.ctx.currentSession?.loginId;
         if (Array.isArray(data)) {
-            for (const m of data) {
-                await this.delete(m, repo);
-            }
-            return data;
+            const entities = data.map(item => {
+                return this.model.create({
+                    ...item,
+                    valid: enumType_1.EValid.Unvalid,
+                    updater,
+                });
+            });
+            return await repo.save(entities);
         }
         else {
             data.valid = enumType_1.EValid.Unvalid;
+            if (updater)
+                data.updater = updater;
             return await repo.save(data);
         }
     }
@@ -64,7 +71,6 @@ class BaseModelService extends base_service_1.BaseService {
         let take = Number(size);
         if (take > 10000)
             take = 10000;
-        console.log('find count', where, skip, take);
         const [rows, count] = await Promise.all([
             this.model.find({ where, select, order, skip, take, relations }),
             this.model.countBy(where),

package/dist/types/base.service.js

@@ -27,7 +27,7 @@ class BaseService {
     async requestBaseServer(req, option) {
         option = {
             method: 'POST',
-            baseURL: this.baseServiceOption.url,
+            baseURL: this.baseServiceOption?.url || '',
             accessKey: this.apiOption?.key || '',
             ...option,
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cicctencent/midwayjs-base",
-  "version": "1.0.38",
+  "version": "1.0.39",
   "description": "基础框架，服务",
   "main": "dist/index.js",
   "typings": "index.d.ts",
@@ -24,47 +24,47 @@
   ],
   "license": "MIT",
   "devDependencies": {
-    "@jest/globals": "^30.0.5",
-    "@midwayjs/mock": "^3.20.11",
+    "@jest/globals": "^30.4.1",
+    "@midwayjs/mock": "^3.20.24",
     "@types/ip": "^1.1.3",
     "@types/jest": "^30.0.0",
     "@types/jsonwebtoken": "^9.0.10",
-    "@types/koa": "^3.0.0",
-    "@types/lodash": "^4.17.23",
+    "@types/koa": "^3.0.3",
+    "@types/lodash": "^4.17.24",
     "@types/lodash-es": "^4.17.12",
-    "@types/node": "^24.3.0",
-    "cross-env": "^10.0.0",
-    "jest": "^30.0.5",
+    "@types/node": "^24.12.4",
+    "cross-env": "^10.1.0",
+    "jest": "^30.4.2",
     "mwts": "^1.3.0",
-    "mwtsc": "^1.4.0",
+    "mwtsc": "^1.16.0",
     "npm-run-all": "^4.1.5",
-    "ts-jest": "^29.4.1",
-    "typescript": "^5.9.2"
+    "ts-jest": "^29.4.10",
+    "typescript": "^5.9.3"
   },
   "dependencies": {
-    "@fefeding/common": "^1.0.58",
-    "@midwayjs/axios": "^3.20.11",
-    "@midwayjs/bootstrap": "^3.20.11",
-    "@midwayjs/cache-manager": "^3.20.11",
+    "@fefeding/common": "^1.0.59",
+    "@midwayjs/axios": "^3.20.24",
+    "@midwayjs/bootstrap": "^3.20.24",
+    "@midwayjs/cache-manager": "^3.20.24",
     "@midwayjs/cli": "^2.1.1",
     "@midwayjs/cookies": "^1.3.0",
-    "@midwayjs/core": "^3.20.11",
-    "@midwayjs/decorator": "^3.20.11",
-    "@midwayjs/info": "^3.20.16",
-    "@midwayjs/koa": "^3.20.16",
+    "@midwayjs/core": "^3.20.24",
+    "@midwayjs/decorator": "^3.20.24",
+    "@midwayjs/info": "^3.20.24",
+    "@midwayjs/koa": "^3.20.24",
     "@midwayjs/logger": "^4.0.1",
-    "@midwayjs/static-file": "^3.20.16",
-    "@midwayjs/typeorm": "^3.20.11",
-    "@midwayjs/view-nunjucks": "^3.20.16",
-    "axios": "^1.12.2",
-    "dayjs": "^1.11.18",
-    "dotenv": "^17.2.3",
+    "@midwayjs/static-file": "^3.20.24",
+    "@midwayjs/typeorm": "^3.20.24",
+    "@midwayjs/view-nunjucks": "^3.20.24",
+    "axios": "^1.16.1",
+    "dayjs": "^1.11.20",
+    "dotenv": "^17.4.2",
     "ip": "^2.0.1",
-    "jsonwebtoken": "^9.0.2",
-    "lodash": "^4.17.21",
-    "mysql2": "^3.15.2",
+    "jsonwebtoken": "^9.0.3",
+    "lodash": "^4.18.1",
+    "mysql2": "^3.22.3",
     "reflect-metadata": "^0.2.2",
-    "typeorm": "^0.3.27",
-    "uuid": "^13.0.0"
+    "typeorm": "^0.3.30",
+    "uuid": "^13.0.2"
   }
 }