@lark-apaas/fullstack-nestjs-core 0.0.0-alpha.1 → 0.0.0-alpha.3

package/dist/index.cjs

@@ -0,0 +1,262 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __knownSymbol = (name, symbol) => (symbol = Symbol[name]) ? symbol : Symbol.for("Symbol." + name);
+var __typeError = (msg) => {
+  throw TypeError(msg);
+};
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var __decoratorStart = (base) => [, , , __create(base?.[__knownSymbol("metadata")] ?? null)];
+var __decoratorStrings = ["class", "method", "getter", "setter", "accessor", "field", "value", "get", "set"];
+var __expectFn = (fn) => fn !== void 0 && typeof fn !== "function" ? __typeError("Function expected") : fn;
+var __decoratorContext = (kind, name, done, metadata, fns) => ({ kind: __decoratorStrings[kind], name, metadata, addInitializer: (fn) => done._ ? __typeError("Already initialized") : fns.push(__expectFn(fn || null)) });
+var __decoratorMetadata = (array, target) => __defNormalProp(target, __knownSymbol("metadata"), array[3]);
+var __runInitializers = (array, flags, self, value) => {
+  for (var i = 0, fns = array[flags >> 1], n = fns && fns.length; i < n; i++) flags & 1 ? fns[i].call(self) : value = fns[i].call(self, value);
+  return value;
+};
+var __decorateElement = (array, flags, name, decorators, target, extra) => {
+  var fn, it, done, ctx, access, k = flags & 7, s = !!(flags & 8), p = !!(flags & 16);
+  var j = k > 3 ? array.length + 1 : k ? s ? 1 : 2 : 0, key = __decoratorStrings[k + 5];
+  var initializers = k > 3 && (array[j - 1] = []), extraInitializers = array[j] || (array[j] = []);
+  var desc = k && (!p && !s && (target = target.prototype), k < 5 && (k > 3 || !p) && __getOwnPropDesc(k < 4 ? target : { get [name]() {
+    return __privateGet(this, extra);
+  }, set [name](x) {
+    return __privateSet(this, extra, x);
+  } }, name));
+  k ? p && k < 4 && __name(extra, (k > 2 ? "set " : k > 1 ? "get " : "") + name) : __name(target, name);
+  for (var i = decorators.length - 1; i >= 0; i--) {
+    ctx = __decoratorContext(k, name, done = {}, array[3], extraInitializers);
+    if (k) {
+      ctx.static = s, ctx.private = p, access = ctx.access = { has: p ? (x) => __privateIn(target, x) : (x) => name in x };
+      if (k ^ 3) access.get = p ? (x) => (k ^ 1 ? __privateGet : __privateMethod)(x, target, k ^ 4 ? extra : desc.get) : (x) => x[name];
+      if (k > 2) access.set = p ? (x, y) => __privateSet(x, target, y, k ^ 4 ? extra : desc.set) : (x, y) => x[name] = y;
+    }
+    it = (0, decorators[i])(k ? k < 4 ? p ? extra : desc[key] : k > 4 ? void 0 : { get: desc.get, set: desc.set } : target, ctx), done._ = 1;
+    if (k ^ 4 || it === void 0) __expectFn(it) && (k > 4 ? initializers.unshift(it) : k ? p ? extra = it : desc[key] = it : target = it);
+    else if (typeof it !== "object" || it === null) __typeError("Object expected");
+    else __expectFn(fn = it.get) && (desc.get = fn), __expectFn(fn = it.set) && (desc.set = fn), __expectFn(fn = it.init) && initializers.unshift(fn);
+  }
+  return k || __decoratorMetadata(array, target), desc && __defProp(target, name, desc), p ? k ^ 4 ? extra : desc : target;
+};
+var __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg);
+var __privateIn = (member, obj) => Object(obj) !== obj ? __typeError('Cannot use the "in" operator on this value') : member.has(obj);
+var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj));
+var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
+var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  CsrfMiddleware: () => CsrfMiddleware,
+  CsrfTokenMiddleware: () => CsrfTokenMiddleware,
+  DevToolsModule: () => DevToolsModule
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/modules/devtool/index.ts
+var import_swagger = require("@nestjs/swagger");
+var import_node_fs2 = require("fs");
+var import_node_path2 = require("path");
+
+// src/modules/devtool/helper.ts
+var import_node_path = require("path");
+var import_node_fs = require("fs");
+function normalizeBasePath(rawBasePath) {
+  const normalizedBasePath = rawBasePath.startsWith("/") ? rawBasePath : `/${rawBasePath}`;
+  return normalizedBasePath.endsWith("/") ? normalizedBasePath.slice(0, -1) : normalizedBasePath;
+}
+function resolveOptsWithDefaultValue(options) {
+  const basePath = normalizeBasePath(options.basePath || "/");
+  const docsPath = normalizeBasePath(options.docsPath || `api/docs`);
+  return {
+    ...options,
+    basePath,
+    docsPath: `${basePath}${docsPath}`,
+    openapiOut: options.openapiOut || "./client/src/api/gen/openapi.json",
+    clientSdkOut: options.clientSdkOut || "./client/src/api/gen",
+    needGenerateClientSdk: options.needGenerateClientSdk ?? true,
+    swaggerOptions: {
+      title: options.swaggerOptions?.title ?? "NestJS Fullstack API",
+      version: options.swaggerOptions?.version ?? "1.0.0",
+      customSiteTitle: options.swaggerOptions?.customSiteTitle ?? "API Documentation",
+      customCss: options.swaggerOptions?.customCss ?? ".swagger-ui .topbar { display: none }"
+    }
+  };
+}
+function ensureDirAndWrite(filePath, content) {
+  const dir = (0, import_node_path.dirname)(filePath);
+  (0, import_node_fs.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs.writeFileSync)(filePath, content);
+}
+
+// src/modules/devtool/index.ts
+var DevToolsModule = class {
+  static async mount(app, opts = {}) {
+    const options = resolveOptsWithDefaultValue(opts);
+    const baseDirname = process.cwd();
+    const builder = new import_swagger.DocumentBuilder().setTitle(options.swaggerOptions.title).setVersion(options.swaggerOptions.version);
+    const document = import_swagger.SwaggerModule.createDocument(app, builder.build(), {
+      operationIdFactory: (_c, m) => m
+    });
+    import_swagger.SwaggerModule.setup(options.docsPath, app, document, {
+      customSiteTitle: options.swaggerOptions.customSiteTitle,
+      customCss: options.swaggerOptions.customCss,
+      swaggerOptions: { persistAuthorization: true }
+    });
+    const openapiPath = (0, import_node_path2.resolve)(baseDirname, options.openapiOut);
+    ensureDirAndWrite(openapiPath, JSON.stringify(document, null, 2));
+    if (options.needGenerateClientSdk) {
+      const clientSdkOutPath = (0, import_node_path2.resolve)(baseDirname, options.clientSdkOut);
+      (0, import_node_fs2.mkdirSync)(clientSdkOutPath, { recursive: true });
+      const { generate } = await import("openapi-typescript-codegen");
+      await generate({
+        input: openapiPath,
+        output: clientSdkOutPath,
+        httpClient: "axios",
+        useOptions: false,
+        exportServices: true
+      });
+      console.log("[OpenAPI] \u5BFC\u51FA openapi.json \u5E76\u751F\u6210 axios SDK \u2705");
+    }
+  }
+};
+
+// src/middlewares/csrf_token/index.ts
+var import_common = require("@nestjs/common");
+
+// src/middlewares/csrf_token/helper.ts
+var import_crypto = __toESM(require("crypto"), 1);
+function resolveCsrfTokenOptions(options) {
+  return {
+    ...options,
+    cookieKey: options.cookieKey ?? "suda-csrf-token",
+    cookieMaxAge: options.cookieMaxAge ?? 60 * 60 * 24 * 7,
+    cookiePath: options.cookiePath ?? "/"
+  };
+}
+function genToken() {
+  const ts = Math.floor(Date.now() / 1e3);
+  const randInt64 = BigInt(
+    "0x" + import_crypto.default.randomBytes(8).toString("hex")
+  ).toString();
+  const s = `${randInt64}.${ts}`;
+  const sha1 = import_crypto.default.createHash("sha1");
+  sha1.update(s);
+  return `${sha1.digest("hex")}-${ts}`;
+}
+
+// src/middlewares/csrf_token/index.ts
+var _CsrfTokenMiddleware_decorators, _init;
+_CsrfTokenMiddleware_decorators = [(0, import_common.Injectable)()];
+var _CsrfTokenMiddleware = class _CsrfTokenMiddleware {
+  static options;
+  static configure(opts) {
+    this.options = resolveCsrfTokenOptions(opts);
+  }
+  use(req, res, next) {
+    const { cookieKey, cookieMaxAge, cookiePath } = _CsrfTokenMiddleware.options;
+    const originToken = req.cookies[cookieKey.toLowerCase()];
+    if (originToken) {
+      req.csrfToken = originToken;
+      next();
+    } else {
+      const token = genToken();
+      req.csrfToken = token;
+      res.cookie(cookieKey, token, {
+        maxAge: cookieMaxAge,
+        path: cookiePath,
+        httpOnly: true,
+        secure: true,
+        sameSite: "none",
+        partitioned: true
+        // 默认开启 Partitioned Cookie
+      });
+      next();
+    }
+  }
+};
+_init = __decoratorStart(null);
+_CsrfTokenMiddleware = __decorateElement(_init, 0, "CsrfTokenMiddleware", _CsrfTokenMiddleware_decorators, _CsrfTokenMiddleware);
+__runInitializers(_init, 1, _CsrfTokenMiddleware);
+var CsrfTokenMiddleware = _CsrfTokenMiddleware;
+
+// src/middlewares/csrf/index.ts
+var import_common2 = require("@nestjs/common");
+
+// src/middlewares/csrf/helper.ts
+function resolveCsrfOptions(options) {
+  return {
+    ...options,
+    headerKey: options.headerKey ?? "x-suda-csrf-token",
+    cookieKey: options.cookieKey ?? "suda-csrf-token"
+  };
+}
+function sendForbidden(res, message) {
+  res.status(403).send(`Forbidden\uFF0C${message}`);
+}
+
+// src/middlewares/csrf/index.ts
+var _CsrfMiddleware_decorators, _init2;
+_CsrfMiddleware_decorators = [(0, import_common2.Injectable)()];
+var _CsrfMiddleware = class _CsrfMiddleware {
+  static options;
+  static configure(opts) {
+    this.options = resolveCsrfOptions(opts);
+  }
+  use(req, res, next) {
+    const { headerKey, cookieKey } = _CsrfMiddleware.options;
+    const cookieCsrfToken = req.cookies[cookieKey.toLowerCase()];
+    if (!cookieCsrfToken) {
+      sendForbidden(res, "csrf token not found in cookie.");
+      return;
+    }
+    const headerCsrfToken = req.headers[headerKey.toLowerCase()];
+    if (!headerCsrfToken) {
+      sendForbidden(res, "csrf token not found in header.");
+      return;
+    }
+    if (cookieCsrfToken !== headerCsrfToken) {
+      sendForbidden(res, "csrf token not match.");
+      return;
+    }
+    next();
+  }
+};
+_init2 = __decoratorStart(null);
+_CsrfMiddleware = __decorateElement(_init2, 0, "CsrfMiddleware", _CsrfMiddleware_decorators, _CsrfMiddleware);
+__runInitializers(_init2, 1, _CsrfMiddleware);
+var CsrfMiddleware = _CsrfMiddleware;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CsrfMiddleware,
+  CsrfTokenMiddleware,
+  DevToolsModule
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/modules/devtool/index.ts","../src/modules/devtool/helper.ts","../src/middlewares/csrf_token/index.ts","../src/middlewares/csrf_token/helper.ts","../src/middlewares/csrf/index.ts","../src/middlewares/csrf/helper.ts"],"sourcesContent":["import './types/express.d';\n\nexport { DevToolsModule } from './modules/devtool';\n\n// Middlewares\nexport { CsrfTokenMiddleware } from './middlewares/csrf_token';\nexport { CsrfMiddleware } from './middlewares/csrf';\n","import type { INestApplication } from '@nestjs/common';\n\nimport { SwaggerModule, DocumentBuilder } from '@nestjs/swagger';\nimport { mkdirSync } from 'node:fs';\nimport { resolve } from 'node:path';\n\nimport { resolveOptsWithDefaultValue, ensureDirAndWrite } from './helper';\nimport { DevToolsOptions } from './type';\n\nexport class DevToolsModule {\n  static async mount(app: INestApplication, opts: DevToolsOptions = {}) {\n    const options = resolveOptsWithDefaultValue(opts);\n    const baseDirname = process.cwd(); // 跟随命令的根目录\n\n    // 1) 生成 Swagger 文档\n    const builder = new DocumentBuilder()\n      .setTitle(options.swaggerOptions.title)\n      .setVersion(options.swaggerOptions.version);\n    const document = SwaggerModule.createDocument(app, builder.build(), {\n      operationIdFactory: (_c, m) => m,\n    });\n\n    SwaggerModule.setup(options.docsPath, app, document, {\n      customSiteTitle: options.swaggerOptions.customSiteTitle,\n      customCss: options.swaggerOptions.customCss,\n      swaggerOptions: { persistAuthorization: true },\n    });\n\n    // 2) 导出 openapi.json\n    const openapiPath = resolve(baseDirname, options.openapiOut);\n    ensureDirAndWrite(openapiPath, JSON.stringify(document, null, 2));\n\n    // 3) 生成 axios SDK（可关）\n    if (options.needGenerateClientSdk) {\n      const clientSdkOutPath = resolve(baseDirname, options.clientSdkOut);\n      mkdirSync(clientSdkOutPath, { recursive: true });\n      const { generate } = await import('openapi-typescript-codegen');\n      await generate({\n        input: openapiPath,\n        output: clientSdkOutPath,\n        httpClient: 'axios',\n        useOptions: false,\n        exportServices: true,\n      });\n      console.log('[OpenAPI] 导出 openapi.json 并生成 axios SDK ✅');\n    }\n  }\n}\n","import { dirname } from 'node:path';\nimport { writeFileSync, mkdirSync } from 'node:fs';\n\nimport { DevToolsOptions } from './type';\n/**\n * 标准化基础路径，确保以 '/' 开头且以 '/' 结尾\n *\n * @param rawBasePath 原始的基础路径，可能以 '/' 开头或结尾\n * @returns 标准化后的基础路径，确保以 '/' 开头且不以 '/' 结尾\n */\nexport function normalizeBasePath(rawBasePath: string): string {\n  const normalizedBasePath = rawBasePath.startsWith('/')\n    ? rawBasePath\n    : `/${rawBasePath}`;\n  return normalizedBasePath.endsWith('/')\n    ? normalizedBasePath.slice(0, -1)\n    : normalizedBasePath;\n}\n\ntype ResolvedDevToolsOptions = Required<\n  Omit<DevToolsOptions, 'swaggerOptions'>\n> & {\n  swaggerOptions: Required<NonNullable<DevToolsOptions['swaggerOptions']>>;\n};\n\nexport function resolveOptsWithDefaultValue(\n  options: DevToolsOptions\n): ResolvedDevToolsOptions {\n  const basePath = normalizeBasePath(options.basePath || '/');\n  const docsPath = normalizeBasePath(options.docsPath || `api/docs`);\n  return {\n    ...options,\n    basePath,\n    docsPath: `${basePath}${docsPath}`,\n    openapiOut: options.openapiOut || './client/src/api/gen/openapi.json',\n    clientSdkOut: options.clientSdkOut || './client/src/api/gen',\n    needGenerateClientSdk: options.needGenerateClientSdk ?? true,\n    swaggerOptions: {\n      title: options.swaggerOptions?.title ?? 'NestJS Fullstack API',\n      version: options.swaggerOptions?.version ?? '1.0.0',\n      customSiteTitle:\n        options.swaggerOptions?.customSiteTitle ?? 'API Documentation',\n      customCss:\n        options.swaggerOptions?.customCss ??\n        '.swagger-ui .topbar { display: none }',\n    },\n  };\n}\n\nexport function ensureDirAndWrite(filePath: string, content: string) {\n  // 1. 拿到文件的上级目录\n  const dir = dirname(filePath);\n\n  // 2. 确保目录存在，不存在就递归创建\n  mkdirSync(dir, { recursive: true });\n\n  // 3. 写文件\n  writeFileSync(filePath, content);\n}\n","import { Injectable, NestMiddleware } from '@nestjs/common';\nimport type { Request, Response, NextFunction } from 'express';\n\nimport type { CsrfTokenOptions, ResolvedCsrfTokenOptions } from './type';\nimport { resolveCsrfTokenOptions, genToken } from './helper';\n\n@Injectable()\nexport class CsrfTokenMiddleware implements NestMiddleware {\n  private static options: ResolvedCsrfTokenOptions;\n\n  public static configure(opts: CsrfTokenOptions) {\n    this.options = resolveCsrfTokenOptions(opts);\n  }\n\n  public use(req: Request, res: Response, next: NextFunction) {\n    const { cookieKey, cookieMaxAge, cookiePath } = CsrfTokenMiddleware.options;\n    const originToken = req.cookies[cookieKey.toLowerCase()];\n    // 如果存在 Cookie，则直接消费，无需生成\n    if (originToken) {\n      req.csrfToken = originToken;\n      next();\n    } else {\n      // 如果不存在 token，则生成新的 csrfToken，并 setCookie\n      const token = genToken();\n      req.csrfToken = token;\n      res.cookie(cookieKey, token, {\n        maxAge: cookieMaxAge,\n        path: cookiePath,\n        httpOnly: true,\n        secure: true,\n        sameSite: 'none',\n        partitioned: true, // 默认开启 Partitioned Cookie\n      });\n      next();\n    }\n  }\n}\n","import crypto from 'crypto';\nimport { CsrfTokenOptions, ResolvedCsrfTokenOptions } from './type';\n\nexport function resolveCsrfTokenOptions(\n  options: CsrfTokenOptions\n): ResolvedCsrfTokenOptions {\n  return {\n    ...options,\n    cookieKey: options.cookieKey ?? 'suda-csrf-token',\n    cookieMaxAge: options.cookieMaxAge ?? 60 * 60 * 24 * 7,\n    cookiePath: options.cookiePath ?? '/',\n  };\n}\n\n// 生成 CsrfToken\nexport function genToken() {\n  // 时间戳（秒级，和 Go 一致）\n  const ts = Math.floor(Date.now() / 1000);\n\n  // 随机 int64 模拟：生成 8 字节随机数并转成十进制字符串\n  const randInt64 = BigInt(\n    '0x' + crypto.randomBytes(8).toString('hex')\n  ).toString();\n\n  // 拼接 \"<rand>.<timestamp>\"\n  const s = `${randInt64}.${ts}`;\n\n  // 计算 sha1\n  const sha1 = crypto.createHash('sha1');\n  sha1.update(s);\n\n  // 返回 \"<sha1Hex>-<timestamp>\"\n  return `${sha1.digest('hex')}-${ts}`;\n}\n","import { Injectable, NestMiddleware } from '@nestjs/common';\nimport type { Request, Response, NextFunction } from 'express';\n\nimport type { CsrfOptions, ResolvedCsrfOptions } from './type';\nimport { resolveCsrfOptions, sendForbidden } from './helper';\n\n@Injectable()\nexport class CsrfMiddleware implements NestMiddleware {\n  private static options: ResolvedCsrfOptions;\n\n  public static configure(opts: CsrfOptions) {\n    this.options = resolveCsrfOptions(opts);\n  }\n\n  public use(req: Request, res: Response, next: NextFunction) {\n    const { headerKey, cookieKey } = CsrfMiddleware.options;\n    const cookieCsrfToken = req.cookies[cookieKey.toLowerCase()];\n    if (!cookieCsrfToken) {\n      sendForbidden(res, 'csrf token not found in cookie.');\n      return;\n    }\n    const headerCsrfToken = req.headers[headerKey.toLowerCase()];\n    if (!headerCsrfToken) {\n      sendForbidden(res, 'csrf token not found in header.');\n      return;\n    }\n    if (cookieCsrfToken !== headerCsrfToken) {\n      sendForbidden(res, 'csrf token not match.');\n      return;\n    }\n    next();\n  }\n}\n","import type { Response } from 'express';\n\nimport { CsrfOptions, ResolvedCsrfOptions } from './type';\n\nexport function resolveCsrfOptions(options: CsrfOptions): ResolvedCsrfOptions {\n  return {\n    ...options,\n    headerKey: options.headerKey ?? 'x-suda-csrf-token',\n    cookieKey: options.cookieKey ?? 'suda-csrf-token',\n  };\n}\n\nexport function sendForbidden(res: Response, message: string) {\n  res.status(403).send(`Forbidden，${message}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACEA,qBAA+C;AAC/C,IAAAA,kBAA0B;AAC1B,IAAAC,oBAAwB;;;ACJxB,uBAAwB;AACxB,qBAAyC;AASlC,SAAS,kBAAkB,aAA6B;AAC7D,QAAM,qBAAqB,YAAY,WAAW,GAAG,IACjD,cACA,IAAI,WAAW;AACnB,SAAO,mBAAmB,SAAS,GAAG,IAClC,mBAAmB,MAAM,GAAG,EAAE,IAC9B;AACN;AAQO,SAAS,4BACd,SACyB;AACzB,QAAM,WAAW,kBAAkB,QAAQ,YAAY,GAAG;AAC1D,QAAM,WAAW,kBAAkB,QAAQ,YAAY,UAAU;AACjE,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA,UAAU,GAAG,QAAQ,GAAG,QAAQ;AAAA,IAChC,YAAY,QAAQ,cAAc;AAAA,IAClC,cAAc,QAAQ,gBAAgB;AAAA,IACtC,uBAAuB,QAAQ,yBAAyB;AAAA,IACxD,gBAAgB;AAAA,MACd,OAAO,QAAQ,gBAAgB,SAAS;AAAA,MACxC,SAAS,QAAQ,gBAAgB,WAAW;AAAA,MAC5C,iBACE,QAAQ,gBAAgB,mBAAmB;AAAA,MAC7C,WACE,QAAQ,gBAAgB,aACxB;AAAA,IACJ;AAAA,EACF;AACF;AAEO,SAAS,kBAAkB,UAAkB,SAAiB;AAEnE,QAAM,UAAM,0BAAQ,QAAQ;AAG5B,gCAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAGlC,oCAAc,UAAU,OAAO;AACjC;;;ADjDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,aAAa,MAAM,KAAuB,OAAwB,CAAC,GAAG;AACpE,UAAM,UAAU,4BAA4B,IAAI;AAChD,UAAM,cAAc,QAAQ,IAAI;AAGhC,UAAM,UAAU,IAAI,+BAAgB,EACjC,SAAS,QAAQ,eAAe,KAAK,EACrC,WAAW,QAAQ,eAAe,OAAO;AAC5C,UAAM,WAAW,6BAAc,eAAe,KAAK,QAAQ,MAAM,GAAG;AAAA,MAClE,oBAAoB,CAAC,IAAI,MAAM;AAAA,IACjC,CAAC;AAED,iCAAc,MAAM,QAAQ,UAAU,KAAK,UAAU;AAAA,MACnD,iBAAiB,QAAQ,eAAe;AAAA,MACxC,WAAW,QAAQ,eAAe;AAAA,MAClC,gBAAgB,EAAE,sBAAsB,KAAK;AAAA,IAC/C,CAAC;AAGD,UAAM,kBAAc,2BAAQ,aAAa,QAAQ,UAAU;AAC3D,sBAAkB,aAAa,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAGhE,QAAI,QAAQ,uBAAuB;AACjC,YAAM,uBAAmB,2BAAQ,aAAa,QAAQ,YAAY;AAClE,qCAAU,kBAAkB,EAAE,WAAW,KAAK,CAAC;AAC/C,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,4BAA4B;AAC9D,YAAM,SAAS;AAAA,QACb,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,gBAAgB;AAAA,MAClB,CAAC;AACD,cAAQ,IAAI,yEAA2C;AAAA,IACzD;AAAA,EACF;AACF;;;AE/CA,oBAA2C;;;ACA3C,oBAAmB;AAGZ,SAAS,wBACd,SAC0B;AAC1B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,WAAW,QAAQ,aAAa;AAAA,IAChC,cAAc,QAAQ,gBAAgB,KAAK,KAAK,KAAK;AAAA,IACrD,YAAY,QAAQ,cAAc;AAAA,EACpC;AACF;AAGO,SAAS,WAAW;AAEzB,QAAM,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAGvC,QAAM,YAAY;AAAA,IAChB,OAAO,cAAAC,QAAO,YAAY,CAAC,EAAE,SAAS,KAAK;AAAA,EAC7C,EAAE,SAAS;AAGX,QAAM,IAAI,GAAG,SAAS,IAAI,EAAE;AAG5B,QAAM,OAAO,cAAAA,QAAO,WAAW,MAAM;AACrC,OAAK,OAAO,CAAC;AAGb,SAAO,GAAG,KAAK,OAAO,KAAK,CAAC,IAAI,EAAE;AACpC;;;ADjCA;AAMA,uCAAC,0BAAW;AACL,IAAM,uBAAN,MAAM,qBAA8C;AAAA,EACzD,OAAe;AAAA,EAEf,OAAc,UAAU,MAAwB;AAC9C,SAAK,UAAU,wBAAwB,IAAI;AAAA,EAC7C;AAAA,EAEO,IAAI,KAAc,KAAe,MAAoB;AAC1D,UAAM,EAAE,WAAW,cAAc,WAAW,IAAI,qBAAoB;AACpE,UAAM,cAAc,IAAI,QAAQ,UAAU,YAAY,CAAC;AAEvD,QAAI,aAAa;AACf,UAAI,YAAY;AAChB,WAAK;AAAA,IACP,OAAO;AAEL,YAAM,QAAQ,SAAS;AACvB,UAAI,YAAY;AAChB,UAAI,OAAO,WAAW,OAAO;AAAA,QAC3B,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,aAAa;AAAA;AAAA,MACf,CAAC;AACD,WAAK;AAAA,IACP;AAAA,EACF;AACF;AA7BO;AAAM,uBAAN,mDADP,iCACa;AAAN,4BAAM;AAAN,IAAM,sBAAN;;;AEPP,IAAAC,iBAA2C;;;ACIpC,SAAS,mBAAmB,SAA2C;AAC5E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,WAAW,QAAQ,aAAa;AAAA,IAChC,WAAW,QAAQ,aAAa;AAAA,EAClC;AACF;AAEO,SAAS,cAAc,KAAe,SAAiB;AAC5D,MAAI,OAAO,GAAG,EAAE,KAAK,kBAAa,OAAO,EAAE;AAC7C;;;ADdA,gCAAAC;AAMA,kCAAC,2BAAW;AACL,IAAM,kBAAN,MAAM,gBAAyC;AAAA,EACpD,OAAe;AAAA,EAEf,OAAc,UAAU,MAAmB;AACzC,SAAK,UAAU,mBAAmB,IAAI;AAAA,EACxC;AAAA,EAEO,IAAI,KAAc,KAAe,MAAoB;AAC1D,UAAM,EAAE,WAAW,UAAU,IAAI,gBAAe;AAChD,UAAM,kBAAkB,IAAI,QAAQ,UAAU,YAAY,CAAC;AAC3D,QAAI,CAAC,iBAAiB;AACpB,oBAAc,KAAK,iCAAiC;AACpD;AAAA,IACF;AACA,UAAM,kBAAkB,IAAI,QAAQ,UAAU,YAAY,CAAC;AAC3D,QAAI,CAAC,iBAAiB;AACpB,oBAAc,KAAK,iCAAiC;AACpD;AAAA,IACF;AACA,QAAI,oBAAoB,iBAAiB;AACvC,oBAAc,KAAK,uBAAuB;AAC1C;AAAA,IACF;AACA,SAAK;AAAA,EACP;AACF;AAzBOA,SAAA;AAAM,kBAAN,kBAAAA,QAAA,qBADP,4BACa;AAAN,kBAAAA,QAAA,GAAM;AAAN,IAAM,iBAAN;","names":["import_node_fs","import_node_path","crypto","import_common","_init"]}

package/dist/index.d.cts

@@ -0,0 +1,53 @@
+import { INestApplication, NestMiddleware } from '@nestjs/common';
+import { Request, Response, NextFunction } from 'express';
+
+declare global {
+  namespace Express {
+    interface Request {
+      csrfToken?: string;
+    }
+  }
+}
+
+interface DevToolsOptions {
+    basePath?: string;
+    docsPath?: string;
+    openapiOut?: string;
+    needGenerateClientSdk?: boolean;
+    clientSdkOut?: string;
+    swaggerOptions?: {
+        title?: string;
+        version?: string;
+        customSiteTitle?: string;
+        customCss?: string;
+    };
+}
+
+declare class DevToolsModule {
+    static mount(app: INestApplication, opts?: DevToolsOptions): Promise<void>;
+}
+
+interface CsrfTokenOptions {
+    cookieKey?: string;
+    cookieMaxAge?: number;
+    cookiePath?: string;
+}
+
+declare class CsrfTokenMiddleware implements NestMiddleware {
+    private static options;
+    static configure(opts: CsrfTokenOptions): void;
+    use(req: Request, res: Response, next: NextFunction): void;
+}
+
+interface CsrfOptions {
+    headerKey: string;
+    cookieKey?: string;
+}
+
+declare class CsrfMiddleware implements NestMiddleware {
+    private static options;
+    static configure(opts: CsrfOptions): void;
+    use(req: Request, res: Response, next: NextFunction): void;
+}
+
+export { CsrfMiddleware, CsrfTokenMiddleware, DevToolsModule };

package/dist/index.d.ts

@@ -1,3 +1,53 @@
-declare function HelloWorld(): string;
+import { INestApplication, NestMiddleware } from '@nestjs/common';
+import { Request, Response, NextFunction } from 'express';
 
-export { HelloWorld, HelloWorld as default };
+declare global {
+  namespace Express {
+    interface Request {
+      csrfToken?: string;
+    }
+  }
+}
+
+interface DevToolsOptions {
+    basePath?: string;
+    docsPath?: string;
+    openapiOut?: string;
+    needGenerateClientSdk?: boolean;
+    clientSdkOut?: string;
+    swaggerOptions?: {
+        title?: string;
+        version?: string;
+        customSiteTitle?: string;
+        customCss?: string;
+    };
+}
+
+declare class DevToolsModule {
+    static mount(app: INestApplication, opts?: DevToolsOptions): Promise<void>;
+}
+
+interface CsrfTokenOptions {
+    cookieKey?: string;
+    cookieMaxAge?: number;
+    cookiePath?: string;
+}
+
+declare class CsrfTokenMiddleware implements NestMiddleware {
+    private static options;
+    static configure(opts: CsrfTokenOptions): void;
+    use(req: Request, res: Response, next: NextFunction): void;
+}
+
+interface CsrfOptions {
+    headerKey: string;
+    cookieKey?: string;
+}
+
+declare class CsrfMiddleware implements NestMiddleware {
+    private static options;
+    static configure(opts: CsrfOptions): void;
+    use(req: Request, res: Response, next: NextFunction): void;
+}
+
+export { CsrfMiddleware, CsrfTokenMiddleware, DevToolsModule };

package/dist/index.js

@@ -1,10 +1,227 @@
-// src/index.ts
-function HelloWorld() {
-  return `Hello World!`;
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __knownSymbol = (name, symbol) => (symbol = Symbol[name]) ? symbol : Symbol.for("Symbol." + name);
+var __typeError = (msg) => {
+  throw TypeError(msg);
+};
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __decoratorStart = (base) => [, , , __create(base?.[__knownSymbol("metadata")] ?? null)];
+var __decoratorStrings = ["class", "method", "getter", "setter", "accessor", "field", "value", "get", "set"];
+var __expectFn = (fn) => fn !== void 0 && typeof fn !== "function" ? __typeError("Function expected") : fn;
+var __decoratorContext = (kind, name, done, metadata, fns) => ({ kind: __decoratorStrings[kind], name, metadata, addInitializer: (fn) => done._ ? __typeError("Already initialized") : fns.push(__expectFn(fn || null)) });
+var __decoratorMetadata = (array, target) => __defNormalProp(target, __knownSymbol("metadata"), array[3]);
+var __runInitializers = (array, flags, self, value) => {
+  for (var i = 0, fns = array[flags >> 1], n = fns && fns.length; i < n; i++) flags & 1 ? fns[i].call(self) : value = fns[i].call(self, value);
+  return value;
+};
+var __decorateElement = (array, flags, name, decorators, target, extra) => {
+  var fn, it, done, ctx, access, k = flags & 7, s = !!(flags & 8), p = !!(flags & 16);
+  var j = k > 3 ? array.length + 1 : k ? s ? 1 : 2 : 0, key = __decoratorStrings[k + 5];
+  var initializers = k > 3 && (array[j - 1] = []), extraInitializers = array[j] || (array[j] = []);
+  var desc = k && (!p && !s && (target = target.prototype), k < 5 && (k > 3 || !p) && __getOwnPropDesc(k < 4 ? target : { get [name]() {
+    return __privateGet(this, extra);
+  }, set [name](x) {
+    return __privateSet(this, extra, x);
+  } }, name));
+  k ? p && k < 4 && __name(extra, (k > 2 ? "set " : k > 1 ? "get " : "") + name) : __name(target, name);
+  for (var i = decorators.length - 1; i >= 0; i--) {
+    ctx = __decoratorContext(k, name, done = {}, array[3], extraInitializers);
+    if (k) {
+      ctx.static = s, ctx.private = p, access = ctx.access = { has: p ? (x) => __privateIn(target, x) : (x) => name in x };
+      if (k ^ 3) access.get = p ? (x) => (k ^ 1 ? __privateGet : __privateMethod)(x, target, k ^ 4 ? extra : desc.get) : (x) => x[name];
+      if (k > 2) access.set = p ? (x, y) => __privateSet(x, target, y, k ^ 4 ? extra : desc.set) : (x, y) => x[name] = y;
+    }
+    it = (0, decorators[i])(k ? k < 4 ? p ? extra : desc[key] : k > 4 ? void 0 : { get: desc.get, set: desc.set } : target, ctx), done._ = 1;
+    if (k ^ 4 || it === void 0) __expectFn(it) && (k > 4 ? initializers.unshift(it) : k ? p ? extra = it : desc[key] = it : target = it);
+    else if (typeof it !== "object" || it === null) __typeError("Object expected");
+    else __expectFn(fn = it.get) && (desc.get = fn), __expectFn(fn = it.set) && (desc.set = fn), __expectFn(fn = it.init) && initializers.unshift(fn);
+  }
+  return k || __decoratorMetadata(array, target), desc && __defProp(target, name, desc), p ? k ^ 4 ? extra : desc : target;
+};
+var __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg);
+var __privateIn = (member, obj) => Object(obj) !== obj ? __typeError('Cannot use the "in" operator on this value') : member.has(obj);
+var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj));
+var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
+var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
+
+// src/modules/devtool/index.ts
+import { SwaggerModule, DocumentBuilder } from "@nestjs/swagger";
+import { mkdirSync as mkdirSync2 } from "fs";
+import { resolve } from "path";
+
+// src/modules/devtool/helper.ts
+import { dirname } from "path";
+import { writeFileSync, mkdirSync } from "fs";
+function normalizeBasePath(rawBasePath) {
+  const normalizedBasePath = rawBasePath.startsWith("/") ? rawBasePath : `/${rawBasePath}`;
+  return normalizedBasePath.endsWith("/") ? normalizedBasePath.slice(0, -1) : normalizedBasePath;
+}
+function resolveOptsWithDefaultValue(options) {
+  const basePath = normalizeBasePath(options.basePath || "/");
+  const docsPath = normalizeBasePath(options.docsPath || `api/docs`);
+  return {
+    ...options,
+    basePath,
+    docsPath: `${basePath}${docsPath}`,
+    openapiOut: options.openapiOut || "./client/src/api/gen/openapi.json",
+    clientSdkOut: options.clientSdkOut || "./client/src/api/gen",
+    needGenerateClientSdk: options.needGenerateClientSdk ?? true,
+    swaggerOptions: {
+      title: options.swaggerOptions?.title ?? "NestJS Fullstack API",
+      version: options.swaggerOptions?.version ?? "1.0.0",
+      customSiteTitle: options.swaggerOptions?.customSiteTitle ?? "API Documentation",
+      customCss: options.swaggerOptions?.customCss ?? ".swagger-ui .topbar { display: none }"
+    }
+  };
+}
+function ensureDirAndWrite(filePath, content) {
+  const dir = dirname(filePath);
+  mkdirSync(dir, { recursive: true });
+  writeFileSync(filePath, content);
+}
+
+// src/modules/devtool/index.ts
+var DevToolsModule = class {
+  static async mount(app, opts = {}) {
+    const options = resolveOptsWithDefaultValue(opts);
+    const baseDirname = process.cwd();
+    const builder = new DocumentBuilder().setTitle(options.swaggerOptions.title).setVersion(options.swaggerOptions.version);
+    const document = SwaggerModule.createDocument(app, builder.build(), {
+      operationIdFactory: (_c, m) => m
+    });
+    SwaggerModule.setup(options.docsPath, app, document, {
+      customSiteTitle: options.swaggerOptions.customSiteTitle,
+      customCss: options.swaggerOptions.customCss,
+      swaggerOptions: { persistAuthorization: true }
+    });
+    const openapiPath = resolve(baseDirname, options.openapiOut);
+    ensureDirAndWrite(openapiPath, JSON.stringify(document, null, 2));
+    if (options.needGenerateClientSdk) {
+      const clientSdkOutPath = resolve(baseDirname, options.clientSdkOut);
+      mkdirSync2(clientSdkOutPath, { recursive: true });
+      const { generate } = await import("openapi-typescript-codegen");
+      await generate({
+        input: openapiPath,
+        output: clientSdkOutPath,
+        httpClient: "axios",
+        useOptions: false,
+        exportServices: true
+      });
+      console.log("[OpenAPI] \u5BFC\u51FA openapi.json \u5E76\u751F\u6210 axios SDK \u2705");
+    }
+  }
+};
+
+// src/middlewares/csrf_token/index.ts
+import { Injectable } from "@nestjs/common";
+
+// src/middlewares/csrf_token/helper.ts
+import crypto from "crypto";
+function resolveCsrfTokenOptions(options) {
+  return {
+    ...options,
+    cookieKey: options.cookieKey ?? "suda-csrf-token",
+    cookieMaxAge: options.cookieMaxAge ?? 60 * 60 * 24 * 7,
+    cookiePath: options.cookiePath ?? "/"
+  };
+}
+function genToken() {
+  const ts = Math.floor(Date.now() / 1e3);
+  const randInt64 = BigInt(
+    "0x" + crypto.randomBytes(8).toString("hex")
+  ).toString();
+  const s = `${randInt64}.${ts}`;
+  const sha1 = crypto.createHash("sha1");
+  sha1.update(s);
+  return `${sha1.digest("hex")}-${ts}`;
+}
+
+// src/middlewares/csrf_token/index.ts
+var _CsrfTokenMiddleware_decorators, _init;
+_CsrfTokenMiddleware_decorators = [Injectable()];
+var _CsrfTokenMiddleware = class _CsrfTokenMiddleware {
+  static options;
+  static configure(opts) {
+    this.options = resolveCsrfTokenOptions(opts);
+  }
+  use(req, res, next) {
+    const { cookieKey, cookieMaxAge, cookiePath } = _CsrfTokenMiddleware.options;
+    const originToken = req.cookies[cookieKey.toLowerCase()];
+    if (originToken) {
+      req.csrfToken = originToken;
+      next();
+    } else {
+      const token = genToken();
+      req.csrfToken = token;
+      res.cookie(cookieKey, token, {
+        maxAge: cookieMaxAge,
+        path: cookiePath,
+        httpOnly: true,
+        secure: true,
+        sameSite: "none",
+        partitioned: true
+        // 默认开启 Partitioned Cookie
+      });
+      next();
+    }
+  }
+};
+_init = __decoratorStart(null);
+_CsrfTokenMiddleware = __decorateElement(_init, 0, "CsrfTokenMiddleware", _CsrfTokenMiddleware_decorators, _CsrfTokenMiddleware);
+__runInitializers(_init, 1, _CsrfTokenMiddleware);
+var CsrfTokenMiddleware = _CsrfTokenMiddleware;
+
+// src/middlewares/csrf/index.ts
+import { Injectable as Injectable2 } from "@nestjs/common";
+
+// src/middlewares/csrf/helper.ts
+function resolveCsrfOptions(options) {
+  return {
+    ...options,
+    headerKey: options.headerKey ?? "x-suda-csrf-token",
+    cookieKey: options.cookieKey ?? "suda-csrf-token"
+  };
+}
+function sendForbidden(res, message) {
+  res.status(403).send(`Forbidden\uFF0C${message}`);
 }
-var index_default = HelloWorld;
+
+// src/middlewares/csrf/index.ts
+var _CsrfMiddleware_decorators, _init2;
+_CsrfMiddleware_decorators = [Injectable2()];
+var _CsrfMiddleware = class _CsrfMiddleware {
+  static options;
+  static configure(opts) {
+    this.options = resolveCsrfOptions(opts);
+  }
+  use(req, res, next) {
+    const { headerKey, cookieKey } = _CsrfMiddleware.options;
+    const cookieCsrfToken = req.cookies[cookieKey.toLowerCase()];
+    if (!cookieCsrfToken) {
+      sendForbidden(res, "csrf token not found in cookie.");
+      return;
+    }
+    const headerCsrfToken = req.headers[headerKey.toLowerCase()];
+    if (!headerCsrfToken) {
+      sendForbidden(res, "csrf token not found in header.");
+      return;
+    }
+    if (cookieCsrfToken !== headerCsrfToken) {
+      sendForbidden(res, "csrf token not match.");
+      return;
+    }
+    next();
+  }
+};
+_init2 = __decoratorStart(null);
+_CsrfMiddleware = __decorateElement(_init2, 0, "CsrfMiddleware", _CsrfMiddleware_decorators, _CsrfMiddleware);
+__runInitializers(_init2, 1, _CsrfMiddleware);
+var CsrfMiddleware = _CsrfMiddleware;
 export {
-  HelloWorld,
-  index_default as default
+  CsrfMiddleware,
+  CsrfTokenMiddleware,
+  DevToolsModule
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export function HelloWorld(): string {\n  return `Hello World!`;\n}\n\nexport default HelloWorld;"],"mappings":";AAAO,SAAS,aAAqB;AACnC,SAAO;AACT;AAEA,IAAO,gBAAQ;","names":[]}
+{"version":3,"sources":["../src/modules/devtool/index.ts","../src/modules/devtool/helper.ts","../src/middlewares/csrf_token/index.ts","../src/middlewares/csrf_token/helper.ts","../src/middlewares/csrf/index.ts","../src/middlewares/csrf/helper.ts"],"sourcesContent":["import type { INestApplication } from '@nestjs/common';\n\nimport { SwaggerModule, DocumentBuilder } from '@nestjs/swagger';\nimport { mkdirSync } from 'node:fs';\nimport { resolve } from 'node:path';\n\nimport { resolveOptsWithDefaultValue, ensureDirAndWrite } from './helper';\nimport { DevToolsOptions } from './type';\n\nexport class DevToolsModule {\n  static async mount(app: INestApplication, opts: DevToolsOptions = {}) {\n    const options = resolveOptsWithDefaultValue(opts);\n    const baseDirname = process.cwd(); // 跟随命令的根目录\n\n    // 1) 生成 Swagger 文档\n    const builder = new DocumentBuilder()\n      .setTitle(options.swaggerOptions.title)\n      .setVersion(options.swaggerOptions.version);\n    const document = SwaggerModule.createDocument(app, builder.build(), {\n      operationIdFactory: (_c, m) => m,\n    });\n\n    SwaggerModule.setup(options.docsPath, app, document, {\n      customSiteTitle: options.swaggerOptions.customSiteTitle,\n      customCss: options.swaggerOptions.customCss,\n      swaggerOptions: { persistAuthorization: true },\n    });\n\n    // 2) 导出 openapi.json\n    const openapiPath = resolve(baseDirname, options.openapiOut);\n    ensureDirAndWrite(openapiPath, JSON.stringify(document, null, 2));\n\n    // 3) 生成 axios SDK（可关）\n    if (options.needGenerateClientSdk) {\n      const clientSdkOutPath = resolve(baseDirname, options.clientSdkOut);\n      mkdirSync(clientSdkOutPath, { recursive: true });\n      const { generate } = await import('openapi-typescript-codegen');\n      await generate({\n        input: openapiPath,\n        output: clientSdkOutPath,\n        httpClient: 'axios',\n        useOptions: false,\n        exportServices: true,\n      });\n      console.log('[OpenAPI] 导出 openapi.json 并生成 axios SDK ✅');\n    }\n  }\n}\n","import { dirname } from 'node:path';\nimport { writeFileSync, mkdirSync } from 'node:fs';\n\nimport { DevToolsOptions } from './type';\n/**\n * 标准化基础路径，确保以 '/' 开头且以 '/' 结尾\n *\n * @param rawBasePath 原始的基础路径，可能以 '/' 开头或结尾\n * @returns 标准化后的基础路径，确保以 '/' 开头且不以 '/' 结尾\n */\nexport function normalizeBasePath(rawBasePath: string): string {\n  const normalizedBasePath = rawBasePath.startsWith('/')\n    ? rawBasePath\n    : `/${rawBasePath}`;\n  return normalizedBasePath.endsWith('/')\n    ? normalizedBasePath.slice(0, -1)\n    : normalizedBasePath;\n}\n\ntype ResolvedDevToolsOptions = Required<\n  Omit<DevToolsOptions, 'swaggerOptions'>\n> & {\n  swaggerOptions: Required<NonNullable<DevToolsOptions['swaggerOptions']>>;\n};\n\nexport function resolveOptsWithDefaultValue(\n  options: DevToolsOptions\n): ResolvedDevToolsOptions {\n  const basePath = normalizeBasePath(options.basePath || '/');\n  const docsPath = normalizeBasePath(options.docsPath || `api/docs`);\n  return {\n    ...options,\n    basePath,\n    docsPath: `${basePath}${docsPath}`,\n    openapiOut: options.openapiOut || './client/src/api/gen/openapi.json',\n    clientSdkOut: options.clientSdkOut || './client/src/api/gen',\n    needGenerateClientSdk: options.needGenerateClientSdk ?? true,\n    swaggerOptions: {\n      title: options.swaggerOptions?.title ?? 'NestJS Fullstack API',\n      version: options.swaggerOptions?.version ?? '1.0.0',\n      customSiteTitle:\n        options.swaggerOptions?.customSiteTitle ?? 'API Documentation',\n      customCss:\n        options.swaggerOptions?.customCss ??\n        '.swagger-ui .topbar { display: none }',\n    },\n  };\n}\n\nexport function ensureDirAndWrite(filePath: string, content: string) {\n  // 1. 拿到文件的上级目录\n  const dir = dirname(filePath);\n\n  // 2. 确保目录存在，不存在就递归创建\n  mkdirSync(dir, { recursive: true });\n\n  // 3. 写文件\n  writeFileSync(filePath, content);\n}\n","import { Injectable, NestMiddleware } from '@nestjs/common';\nimport type { Request, Response, NextFunction } from 'express';\n\nimport type { CsrfTokenOptions, ResolvedCsrfTokenOptions } from './type';\nimport { resolveCsrfTokenOptions, genToken } from './helper';\n\n@Injectable()\nexport class CsrfTokenMiddleware implements NestMiddleware {\n  private static options: ResolvedCsrfTokenOptions;\n\n  public static configure(opts: CsrfTokenOptions) {\n    this.options = resolveCsrfTokenOptions(opts);\n  }\n\n  public use(req: Request, res: Response, next: NextFunction) {\n    const { cookieKey, cookieMaxAge, cookiePath } = CsrfTokenMiddleware.options;\n    const originToken = req.cookies[cookieKey.toLowerCase()];\n    // 如果存在 Cookie，则直接消费，无需生成\n    if (originToken) {\n      req.csrfToken = originToken;\n      next();\n    } else {\n      // 如果不存在 token，则生成新的 csrfToken，并 setCookie\n      const token = genToken();\n      req.csrfToken = token;\n      res.cookie(cookieKey, token, {\n        maxAge: cookieMaxAge,\n        path: cookiePath,\n        httpOnly: true,\n        secure: true,\n        sameSite: 'none',\n        partitioned: true, // 默认开启 Partitioned Cookie\n      });\n      next();\n    }\n  }\n}\n","import crypto from 'crypto';\nimport { CsrfTokenOptions, ResolvedCsrfTokenOptions } from './type';\n\nexport function resolveCsrfTokenOptions(\n  options: CsrfTokenOptions\n): ResolvedCsrfTokenOptions {\n  return {\n    ...options,\n    cookieKey: options.cookieKey ?? 'suda-csrf-token',\n    cookieMaxAge: options.cookieMaxAge ?? 60 * 60 * 24 * 7,\n    cookiePath: options.cookiePath ?? '/',\n  };\n}\n\n// 生成 CsrfToken\nexport function genToken() {\n  // 时间戳（秒级，和 Go 一致）\n  const ts = Math.floor(Date.now() / 1000);\n\n  // 随机 int64 模拟：生成 8 字节随机数并转成十进制字符串\n  const randInt64 = BigInt(\n    '0x' + crypto.randomBytes(8).toString('hex')\n  ).toString();\n\n  // 拼接 \"<rand>.<timestamp>\"\n  const s = `${randInt64}.${ts}`;\n\n  // 计算 sha1\n  const sha1 = crypto.createHash('sha1');\n  sha1.update(s);\n\n  // 返回 \"<sha1Hex>-<timestamp>\"\n  return `${sha1.digest('hex')}-${ts}`;\n}\n","import { Injectable, NestMiddleware } from '@nestjs/common';\nimport type { Request, Response, NextFunction } from 'express';\n\nimport type { CsrfOptions, ResolvedCsrfOptions } from './type';\nimport { resolveCsrfOptions, sendForbidden } from './helper';\n\n@Injectable()\nexport class CsrfMiddleware implements NestMiddleware {\n  private static options: ResolvedCsrfOptions;\n\n  public static configure(opts: CsrfOptions) {\n    this.options = resolveCsrfOptions(opts);\n  }\n\n  public use(req: Request, res: Response, next: NextFunction) {\n    const { headerKey, cookieKey } = CsrfMiddleware.options;\n    const cookieCsrfToken = req.cookies[cookieKey.toLowerCase()];\n    if (!cookieCsrfToken) {\n      sendForbidden(res, 'csrf token not found in cookie.');\n      return;\n    }\n    const headerCsrfToken = req.headers[headerKey.toLowerCase()];\n    if (!headerCsrfToken) {\n      sendForbidden(res, 'csrf token not found in header.');\n      return;\n    }\n    if (cookieCsrfToken !== headerCsrfToken) {\n      sendForbidden(res, 'csrf token not match.');\n      return;\n    }\n    next();\n  }\n}\n","import type { Response } from 'express';\n\nimport { CsrfOptions, ResolvedCsrfOptions } from './type';\n\nexport function resolveCsrfOptions(options: CsrfOptions): ResolvedCsrfOptions {\n  return {\n    ...options,\n    headerKey: options.headerKey ?? 'x-suda-csrf-token',\n    cookieKey: options.cookieKey ?? 'suda-csrf-token',\n  };\n}\n\nexport function sendForbidden(res: Response, message: string) {\n  res.status(403).send(`Forbidden，${message}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,SAAS,eAAe,uBAAuB;AAC/C,SAAS,aAAAA,kBAAiB;AAC1B,SAAS,eAAe;;;ACJxB,SAAS,eAAe;AACxB,SAAS,eAAe,iBAAiB;AASlC,SAAS,kBAAkB,aAA6B;AAC7D,QAAM,qBAAqB,YAAY,WAAW,GAAG,IACjD,cACA,IAAI,WAAW;AACnB,SAAO,mBAAmB,SAAS,GAAG,IAClC,mBAAmB,MAAM,GAAG,EAAE,IAC9B;AACN;AAQO,SAAS,4BACd,SACyB;AACzB,QAAM,WAAW,kBAAkB,QAAQ,YAAY,GAAG;AAC1D,QAAM,WAAW,kBAAkB,QAAQ,YAAY,UAAU;AACjE,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA,UAAU,GAAG,QAAQ,GAAG,QAAQ;AAAA,IAChC,YAAY,QAAQ,cAAc;AAAA,IAClC,cAAc,QAAQ,gBAAgB;AAAA,IACtC,uBAAuB,QAAQ,yBAAyB;AAAA,IACxD,gBAAgB;AAAA,MACd,OAAO,QAAQ,gBAAgB,SAAS;AAAA,MACxC,SAAS,QAAQ,gBAAgB,WAAW;AAAA,MAC5C,iBACE,QAAQ,gBAAgB,mBAAmB;AAAA,MAC7C,WACE,QAAQ,gBAAgB,aACxB;AAAA,IACJ;AAAA,EACF;AACF;AAEO,SAAS,kBAAkB,UAAkB,SAAiB;AAEnE,QAAM,MAAM,QAAQ,QAAQ;AAG5B,YAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAGlC,gBAAc,UAAU,OAAO;AACjC;;;ADjDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,aAAa,MAAM,KAAuB,OAAwB,CAAC,GAAG;AACpE,UAAM,UAAU,4BAA4B,IAAI;AAChD,UAAM,cAAc,QAAQ,IAAI;AAGhC,UAAM,UAAU,IAAI,gBAAgB,EACjC,SAAS,QAAQ,eAAe,KAAK,EACrC,WAAW,QAAQ,eAAe,OAAO;AAC5C,UAAM,WAAW,cAAc,eAAe,KAAK,QAAQ,MAAM,GAAG;AAAA,MAClE,oBAAoB,CAAC,IAAI,MAAM;AAAA,IACjC,CAAC;AAED,kBAAc,MAAM,QAAQ,UAAU,KAAK,UAAU;AAAA,MACnD,iBAAiB,QAAQ,eAAe;AAAA,MACxC,WAAW,QAAQ,eAAe;AAAA,MAClC,gBAAgB,EAAE,sBAAsB,KAAK;AAAA,IAC/C,CAAC;AAGD,UAAM,cAAc,QAAQ,aAAa,QAAQ,UAAU;AAC3D,sBAAkB,aAAa,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAGhE,QAAI,QAAQ,uBAAuB;AACjC,YAAM,mBAAmB,QAAQ,aAAa,QAAQ,YAAY;AAClE,MAAAC,WAAU,kBAAkB,EAAE,WAAW,KAAK,CAAC;AAC/C,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,4BAA4B;AAC9D,YAAM,SAAS;AAAA,QACb,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,gBAAgB;AAAA,MAClB,CAAC;AACD,cAAQ,IAAI,yEAA2C;AAAA,IACzD;AAAA,EACF;AACF;;;AE/CA,SAAS,kBAAkC;;;ACA3C,OAAO,YAAY;AAGZ,SAAS,wBACd,SAC0B;AAC1B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,WAAW,QAAQ,aAAa;AAAA,IAChC,cAAc,QAAQ,gBAAgB,KAAK,KAAK,KAAK;AAAA,IACrD,YAAY,QAAQ,cAAc;AAAA,EACpC;AACF;AAGO,SAAS,WAAW;AAEzB,QAAM,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAGvC,QAAM,YAAY;AAAA,IAChB,OAAO,OAAO,YAAY,CAAC,EAAE,SAAS,KAAK;AAAA,EAC7C,EAAE,SAAS;AAGX,QAAM,IAAI,GAAG,SAAS,IAAI,EAAE;AAG5B,QAAM,OAAO,OAAO,WAAW,MAAM;AACrC,OAAK,OAAO,CAAC;AAGb,SAAO,GAAG,KAAK,OAAO,KAAK,CAAC,IAAI,EAAE;AACpC;;;ADjCA;AAMA,mCAAC,WAAW;AACL,IAAM,uBAAN,MAAM,qBAA8C;AAAA,EACzD,OAAe;AAAA,EAEf,OAAc,UAAU,MAAwB;AAC9C,SAAK,UAAU,wBAAwB,IAAI;AAAA,EAC7C;AAAA,EAEO,IAAI,KAAc,KAAe,MAAoB;AAC1D,UAAM,EAAE,WAAW,cAAc,WAAW,IAAI,qBAAoB;AACpE,UAAM,cAAc,IAAI,QAAQ,UAAU,YAAY,CAAC;AAEvD,QAAI,aAAa;AACf,UAAI,YAAY;AAChB,WAAK;AAAA,IACP,OAAO;AAEL,YAAM,QAAQ,SAAS;AACvB,UAAI,YAAY;AAChB,UAAI,OAAO,WAAW,OAAO;AAAA,QAC3B,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,aAAa;AAAA;AAAA,MACf,CAAC;AACD,WAAK;AAAA,IACP;AAAA,EACF;AACF;AA7BO;AAAM,uBAAN,mDADP,iCACa;AAAN,4BAAM;AAAN,IAAM,sBAAN;;;AEPP,SAAS,cAAAC,mBAAkC;;;ACIpC,SAAS,mBAAmB,SAA2C;AAC5E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,WAAW,QAAQ,aAAa;AAAA,IAChC,WAAW,QAAQ,aAAa;AAAA,EAClC;AACF;AAEO,SAAS,cAAc,KAAe,SAAiB;AAC5D,MAAI,OAAO,GAAG,EAAE,KAAK,kBAAa,OAAO,EAAE;AAC7C;;;ADdA,gCAAAC;AAMA,8BAACC,YAAW;AACL,IAAM,kBAAN,MAAM,gBAAyC;AAAA,EACpD,OAAe;AAAA,EAEf,OAAc,UAAU,MAAmB;AACzC,SAAK,UAAU,mBAAmB,IAAI;AAAA,EACxC;AAAA,EAEO,IAAI,KAAc,KAAe,MAAoB;AAC1D,UAAM,EAAE,WAAW,UAAU,IAAI,gBAAe;AAChD,UAAM,kBAAkB,IAAI,QAAQ,UAAU,YAAY,CAAC;AAC3D,QAAI,CAAC,iBAAiB;AACpB,oBAAc,KAAK,iCAAiC;AACpD;AAAA,IACF;AACA,UAAM,kBAAkB,IAAI,QAAQ,UAAU,YAAY,CAAC;AAC3D,QAAI,CAAC,iBAAiB;AACpB,oBAAc,KAAK,iCAAiC;AACpD;AAAA,IACF;AACA,QAAI,oBAAoB,iBAAiB;AACvC,oBAAc,KAAK,uBAAuB;AAC1C;AAAA,IACF;AACA,SAAK;AAAA,EACP;AACF;AAzBOD,SAAA;AAAM,kBAAN,kBAAAA,QAAA,qBADP,4BACa;AAAN,kBAAAA,QAAA,GAAM;AAAN,IAAM,iBAAN;","names":["mkdirSync","mkdirSync","Injectable","_init","Injectable"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/fullstack-nestjs-core",
-  "version": "0.0.0-alpha.1",
+  "version": "0.0.0-alpha.3",
   "description": "FullStack Nestjs Core",
   "type": "module",
   "main": "./dist/index.js",
@@ -24,7 +24,8 @@
   "exports": {
     ".": {
       "import": "./dist/index.js",
-      "types": "./dist/index.d.ts"
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.cjs"
     }
   },
   "scripts": {
@@ -36,9 +37,21 @@
     "lint": "echo 'ESLint skipped for TypeScript files'",
     "lint:fix": "eslint src --ext .ts --fix"
   },
-  "dependencies": {},
+  "dependencies": {
+    "openapi-typescript-codegen": "^0.29.0"
+  },
   "devDependencies": {
-    "typescript": "^5.2.0",
-    "tsup": "^8.0.0"
+    "@nestjs/common": "^10.4.20",
+    "@nestjs/platform-express": "^10.4.20",
+    "@nestjs/swagger": "^7.4.2",
+    "@types/cookie-parser": "^1.4.9",
+    "@types/express": "^5.0.3",
+    "tsup": "^8.0.0",
+    "typescript": "^5.2.0"
+  },
+  "peerDependencies": {
+    "@nestjs/common": "^10.4.20",
+    "@nestjs/platform-express": "^10.4.20",
+    "@nestjs/swagger": "^7.4.2"
   }
-}
+}