@lark-apaas/fullstack-nestjs-core 1.1.34-alpha.7 → 1.1.34-alpha.70

package/dist/index.cjs

@@ -1371,8 +1371,8 @@ var require_node = __commonJS({
           }
           break;
         case "FILE":
-          var fs3 = require("fs");
-          stream2 = new fs3.SyncWriteStream(fd2, {
+          var fs4 = require("fs");
+          stream2 = new fs4.SyncWriteStream(fd2, {
             autoClose: false
           });
           stream2._type = "fs";
@@ -14215,11 +14215,11 @@ var require_mime_types = __commonJS({
       return exts[0];
     }
     __name(extension, "extension");
-    function lookup(path2) {
-      if (!path2 || typeof path2 !== "string") {
+    function lookup(path3) {
+      if (!path3 || typeof path3 !== "string") {
         return false;
       }
-      var extension2 = extname2("x." + path2).toLowerCase().substr(1);
+      var extension2 = extname2("x." + path3).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -18069,8 +18069,8 @@ var require_node2 = __commonJS({
           }
           break;
         case "FILE":
-          var fs3 = require("fs");
-          stream2 = new fs3.SyncWriteStream(fd2, {
+          var fs4 = require("fs");
+          stream2 = new fs4.SyncWriteStream(fd2, {
             autoClose: false
           });
           stream2._type = "fs";
@@ -18839,8 +18839,8 @@ var require_node3 = __commonJS({
           }
           break;
         case "FILE":
-          var fs3 = require("fs");
-          stream2 = new fs3.SyncWriteStream(fd2, {
+          var fs4 = require("fs");
+          stream2 = new fs4.SyncWriteStream(fd2, {
             autoClose: false
           });
           stream2._type = "fs";
@@ -18937,7 +18937,7 @@ var require_path_to_regexp = __commonJS({
     "use strict";
     module2.exports = pathToRegexp;
     var MATCHING_GROUP_REGEXP = /\\.|\((?:\?<(.*?)>)?(?!\?)/g;
-    function pathToRegexp(path2, keys, options) {
+    function pathToRegexp(path3, keys, options) {
       options = options || {};
       keys = keys || [];
       var strict = options.strict;
@@ -18951,8 +18951,8 @@ var require_path_to_regexp = __commonJS({
       var pos = 0;
       var backtrack = "";
       var m;
-      if (path2 instanceof RegExp) {
-        while (m = MATCHING_GROUP_REGEXP.exec(path2.source)) {
+      if (path3 instanceof RegExp) {
+        while (m = MATCHING_GROUP_REGEXP.exec(path3.source)) {
           if (m[0][0] === "\\") continue;
           keys.push({
             name: m[1] || name++,
@@ -18960,18 +18960,18 @@ var require_path_to_regexp = __commonJS({
             offset: m.index
           });
         }
-        return path2;
+        return path3;
       }
-      if (Array.isArray(path2)) {
-        path2 = path2.map(function(value) {
+      if (Array.isArray(path3)) {
+        path3 = path3.map(function(value) {
           return pathToRegexp(value, keys, options).source;
         });
-        return new RegExp(path2.join("|"), flags);
+        return new RegExp(path3.join("|"), flags);
       }
-      if (typeof path2 !== "string") {
+      if (typeof path3 !== "string") {
         throw new TypeError("path must be a string, array of strings, or regular expression");
       }
-      path2 = path2.replace(/\\.|(\/)?(\.)?:(\w+)(\(.*?\))?(\*)?(\?)?|[.*]|\/\(/g, function(match, slash, format, key, capture, star, optional, offset) {
+      path3 = path3.replace(/\\.|(\/)?(\.)?:(\w+)(\(.*?\))?(\*)?(\?)?|[.*]|\/\(/g, function(match, slash, format, key, capture, star, optional, offset) {
         if (match[0] === "\\") {
           backtrack += match;
           pos += 2;
@@ -18986,7 +18986,7 @@ var require_path_to_regexp = __commonJS({
         if (slash || format) {
           backtrack = "";
         } else {
-          backtrack += path2.slice(pos, offset);
+          backtrack += path3.slice(pos, offset);
         }
         pos = offset + match.length;
         if (match === "*") {
@@ -19013,7 +19013,7 @@ var require_path_to_regexp = __commonJS({
         extraOffset += result.length - match.length;
         return result;
       });
-      while (m = MATCHING_GROUP_REGEXP.exec(path2)) {
+      while (m = MATCHING_GROUP_REGEXP.exec(path3)) {
         if (m[0][0] === "\\") continue;
         if (keysOffset + i === keys.length || keys[keysOffset + i].offset > m.index) {
           keys.splice(keysOffset + i, 0, {
@@ -19024,13 +19024,13 @@ var require_path_to_regexp = __commonJS({
         }
         i++;
       }
-      path2 += strict ? "" : path2[path2.length - 1] === "/" ? "?" : "/?";
+      path3 += strict ? "" : path3[path3.length - 1] === "/" ? "?" : "/?";
       if (end) {
-        path2 += "$";
-      } else if (path2[path2.length - 1] !== "/") {
-        path2 += lookahead ? "(?=/|$)" : "(?:/|$)";
+        path3 += "$";
+      } else if (path3[path3.length - 1] !== "/") {
+        path3 += lookahead ? "(?=/|$)" : "(?:/|$)";
       }
-      return new RegExp("^" + path2, flags);
+      return new RegExp("^" + path3, flags);
     }
     __name(pathToRegexp, "pathToRegexp");
   }
@@ -19044,19 +19044,19 @@ var require_layer = __commonJS({
     var debug = require_src3()("express:router:layer");
     var hasOwnProperty = Object.prototype.hasOwnProperty;
     module2.exports = Layer;
-    function Layer(path2, options, fn) {
+    function Layer(path3, options, fn) {
       if (!(this instanceof Layer)) {
-        return new Layer(path2, options, fn);
+        return new Layer(path3, options, fn);
       }
-      debug("new %o", path2);
+      debug("new %o", path3);
       var opts = options || {};
       this.handle = fn;
       this.name = fn.name || "<anonymous>";
       this.params = void 0;
       this.path = void 0;
-      this.regexp = pathRegexp(path2, this.keys = [], opts);
-      this.regexp.fast_star = path2 === "*";
-      this.regexp.fast_slash = path2 === "/" && opts.end === false;
+      this.regexp = pathRegexp(path3, this.keys = [], opts);
+      this.regexp.fast_star = path3 === "*";
+      this.regexp.fast_slash = path3 === "/" && opts.end === false;
     }
     __name(Layer, "Layer");
     Layer.prototype.handle_error = /* @__PURE__ */ __name(function handle_error(error, req, res, next) {
@@ -19081,9 +19081,9 @@ var require_layer = __commonJS({
         next(err);
       }
     }, "handle");
-    Layer.prototype.match = /* @__PURE__ */ __name(function match(path2) {
+    Layer.prototype.match = /* @__PURE__ */ __name(function match(path3) {
       var match2;
-      if (path2 != null) {
+      if (path3 != null) {
         if (this.regexp.fast_slash) {
           this.params = {};
           this.path = "";
@@ -19091,12 +19091,12 @@ var require_layer = __commonJS({
         }
         if (this.regexp.fast_star) {
           this.params = {
-            "0": decode_param(path2)
+            "0": decode_param(path3)
           };
-          this.path = path2;
+          this.path = path3;
           return true;
         }
-        match2 = this.regexp.exec(path2);
+        match2 = this.regexp.exec(path3);
       }
       if (!match2) {
         this.params = void 0;
@@ -19192,10 +19192,10 @@ var require_route = __commonJS({
     var slice = Array.prototype.slice;
     var toString = Object.prototype.toString;
     module2.exports = Route;
-    function Route(path2) {
-      this.path = path2;
+    function Route(path3) {
+      this.path = path3;
       this.stack = [];
-      debug("new %o", path2);
+      debug("new %o", path3);
       this.methods = {};
     }
     __name(Route, "Route");
@@ -19411,8 +19411,8 @@ var require_router = __commonJS({
         if (++sync > 100) {
           return setImmediate(next, err);
         }
-        var path2 = getPathname(req);
-        if (path2 == null) {
+        var path3 = getPathname(req);
+        if (path3 == null) {
           return done(layerError);
         }
         var layer;
@@ -19420,7 +19420,7 @@ var require_router = __commonJS({
         var route;
         while (match !== true && idx < stack.length) {
           layer = stack[idx++];
-          match = matchLayer(layer, path2);
+          match = matchLayer(layer, path3);
           route = layer.route;
           if (typeof match !== "boolean") {
             layerError = layerError || match;
@@ -19458,19 +19458,19 @@ var require_router = __commonJS({
           } else if (route) {
             layer.handle_request(req, res, next);
           } else {
-            trim_prefix(layer, layerError, layerPath, path2);
+            trim_prefix(layer, layerError, layerPath, path3);
           }
           sync = 0;
         });
       }
       __name(next, "next");
-      function trim_prefix(layer, layerError, layerPath, path2) {
+      function trim_prefix(layer, layerError, layerPath, path3) {
         if (layerPath.length !== 0) {
-          if (layerPath !== path2.slice(0, layerPath.length)) {
+          if (layerPath !== path3.slice(0, layerPath.length)) {
             next(layerError);
             return;
           }
-          var c = path2[layerPath.length];
+          var c = path3[layerPath.length];
           if (c && c !== "/" && c !== ".") return next(layerError);
           debug("trim prefix (%s) from url %s", layerPath, req.url);
           removed = layerPath;
@@ -19551,7 +19551,7 @@ var require_router = __commonJS({
     }, "process_params");
     proto.use = /* @__PURE__ */ __name(function use(fn) {
       var offset = 0;
-      var path2 = "/";
+      var path3 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -19559,7 +19559,7 @@ var require_router = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path2 = fn;
+          path3 = fn;
         }
       }
       var callbacks = flatten(slice.call(arguments, offset));
@@ -19571,8 +19571,8 @@ var require_router = __commonJS({
         if (typeof fn !== "function") {
           throw new TypeError("Router.use() requires a middleware function but got a " + gettype(fn));
         }
-        debug("use %o %s", path2, fn.name || "<anonymous>");
-        var layer = new Layer(path2, {
+        debug("use %o %s", path3, fn.name || "<anonymous>");
+        var layer = new Layer(path3, {
           sensitive: this.caseSensitive,
           strict: false,
           end: false
@@ -19582,9 +19582,9 @@ var require_router = __commonJS({
       }
       return this;
     }, "use");
-    proto.route = /* @__PURE__ */ __name(function route(path2) {
-      var route2 = new Route(path2);
-      var layer = new Layer(path2, {
+    proto.route = /* @__PURE__ */ __name(function route(path3) {
+      var route2 = new Route(path3);
+      var layer = new Layer(path3, {
         sensitive: this.caseSensitive,
         strict: this.strict,
         end: true
@@ -19594,8 +19594,8 @@ var require_router = __commonJS({
       return route2;
     }, "route");
     methods.concat("all").forEach(function(method) {
-      proto[method] = function(path2) {
-        var route = this.route(path2);
+      proto[method] = function(path3) {
+        var route = this.route(path3);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
@@ -19635,9 +19635,9 @@ var require_router = __commonJS({
       return toString.call(obj).replace(objectRegExp, "$1");
     }
     __name(gettype, "gettype");
-    function matchLayer(layer, path2) {
+    function matchLayer(layer, path3) {
       try {
-        return layer.match(path2);
+        return layer.match(path3);
       } catch (err) {
         return err;
       }
@@ -20633,13 +20633,13 @@ var require_view = __commonJS({
   "../../../node_modules/express/lib/view.js"(exports2, module2) {
     "use strict";
     var debug = require_src3()("express:view");
-    var path2 = require("path");
-    var fs3 = require("fs");
-    var dirname2 = path2.dirname;
-    var basename = path2.basename;
-    var extname2 = path2.extname;
-    var join5 = path2.join;
-    var resolve2 = path2.resolve;
+    var path3 = require("path");
+    var fs4 = require("fs");
+    var dirname2 = path3.dirname;
+    var basename = path3.basename;
+    var extname2 = path3.extname;
+    var join5 = path3.join;
+    var resolve2 = path3.resolve;
     module2.exports = View;
     function View(name, options) {
       var opts = options || {};
@@ -20669,17 +20669,17 @@ var require_view = __commonJS({
     }
     __name(View, "View");
     View.prototype.lookup = /* @__PURE__ */ __name(function lookup(name) {
-      var path3;
+      var path4;
       var roots = [].concat(this.root);
       debug('lookup "%s"', name);
-      for (var i = 0; i < roots.length && !path3; i++) {
+      for (var i = 0; i < roots.length && !path4; i++) {
         var root = roots[i];
         var loc = resolve2(root, name);
         var dir = dirname2(loc);
         var file = basename(loc);
-        path3 = this.resolve(dir, file);
+        path4 = this.resolve(dir, file);
       }
-      return path3;
+      return path4;
     }, "lookup");
     View.prototype.render = /* @__PURE__ */ __name(function render(options, callback) {
       debug('render "%s"', this.path);
@@ -20687,21 +20687,21 @@ var require_view = __commonJS({
     }, "render");
     View.prototype.resolve = /* @__PURE__ */ __name(function resolve3(dir, file) {
       var ext = this.ext;
-      var path3 = join5(dir, file);
-      var stat = tryStat(path3);
+      var path4 = join5(dir, file);
+      var stat = tryStat(path4);
       if (stat && stat.isFile()) {
-        return path3;
+        return path4;
       }
-      path3 = join5(dir, basename(file, ext), "index" + ext);
-      stat = tryStat(path3);
+      path4 = join5(dir, basename(file, ext), "index" + ext);
+      stat = tryStat(path4);
       if (stat && stat.isFile()) {
-        return path3;
+        return path4;
       }
     }, "resolve");
-    function tryStat(path3) {
-      debug('stat "%s"', path3);
+    function tryStat(path4) {
+      debug('stat "%s"', path4);
       try {
-        return fs3.statSync(path3);
+        return fs4.statSync(path4);
       } catch (e) {
         return void 0;
       }
@@ -20771,9 +20771,9 @@ var require_safe_buffer = __commonJS({
   }
 });
 
-// ../../../node_modules/express/node_modules/content-disposition/index.js
+// ../../../node_modules/content-disposition/index.js
 var require_content_disposition = __commonJS({
-  "../../../node_modules/express/node_modules/content-disposition/index.js"(exports2, module2) {
+  "../../../node_modules/content-disposition/index.js"(exports2, module2) {
     "use strict";
     module2.exports = contentDisposition;
     module2.exports.parse = parse;
@@ -21350,8 +21350,8 @@ var require_node4 = __commonJS({
           }
           break;
         case "FILE":
-          var fs3 = require("fs");
-          stream2 = new fs3.SyncWriteStream(fd2, {
+          var fs4 = require("fs");
+          stream2 = new fs4.SyncWriteStream(fd2, {
             autoClose: false
           });
           stream2._type = "fs";
@@ -21536,8 +21536,8 @@ var require_types = __commonJS({
 var require_mime = __commonJS({
   "../../../node_modules/mime/mime.js"(exports2, module2) {
     "use strict";
-    var path2 = require("path");
-    var fs3 = require("fs");
+    var path3 = require("path");
+    var fs4 = require("fs");
     function Mime() {
       this.types = /* @__PURE__ */ Object.create(null);
       this.extensions = /* @__PURE__ */ Object.create(null);
@@ -21559,7 +21559,7 @@ var require_mime = __commonJS({
     };
     Mime.prototype.load = function(file) {
       this._loading = file;
-      var map = {}, content = fs3.readFileSync(file, "ascii"), lines = content.split(/[\r\n]+/);
+      var map = {}, content = fs4.readFileSync(file, "ascii"), lines = content.split(/[\r\n]+/);
       lines.forEach(function(line) {
         var fields = line.replace(/\s*#.*|^\s*|\s*$/g, "").split(/\s+/);
         map[fields.shift()] = fields;
@@ -21567,8 +21567,8 @@ var require_mime = __commonJS({
       this.define(map);
       this._loading = null;
     };
-    Mime.prototype.lookup = function(path3, fallback) {
-      var ext = path3.replace(/^.*[\.\/\\]/, "").toLowerCase();
+    Mime.prototype.lookup = function(path4, fallback) {
+      var ext = path4.replace(/^.*[\.\/\\]/, "").toLowerCase();
       return this.types[ext] || fallback || this.default_type;
     };
     Mime.prototype.extension = function(mimeType) {
@@ -21804,34 +21804,34 @@ var require_send = __commonJS({
     var escapeHtml = require_escape_html();
     var etag = require_etag();
     var fresh = require_fresh();
-    var fs3 = require("fs");
+    var fs4 = require("fs");
     var mime = require_mime();
     var ms = require_ms5();
     var onFinished = require_on_finished();
     var parseRange = require_range_parser();
-    var path2 = require("path");
+    var path3 = require("path");
     var statuses = require_statuses();
     var Stream = require("stream");
     var util = require("util");
-    var extname2 = path2.extname;
-    var join5 = path2.join;
-    var normalize2 = path2.normalize;
-    var resolve2 = path2.resolve;
-    var sep = path2.sep;
+    var extname2 = path3.extname;
+    var join5 = path3.join;
+    var normalize2 = path3.normalize;
+    var resolve2 = path3.resolve;
+    var sep = path3.sep;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
     var UP_PATH_REGEXP = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
     module2.exports = send;
     module2.exports.mime = mime;
-    function send(req, path3, options) {
-      return new SendStream(req, path3, options);
+    function send(req, path4, options) {
+      return new SendStream(req, path4, options);
     }
     __name(send, "send");
-    function SendStream(req, path3, options) {
+    function SendStream(req, path4, options) {
       Stream.call(this);
       var opts = options || {};
       this.options = opts;
-      this.path = path3;
+      this.path = path4;
       this.req = req;
       this._acceptRanges = opts.acceptRanges !== void 0 ? Boolean(opts.acceptRanges) : true;
       this._cacheControl = opts.cacheControl !== void 0 ? Boolean(opts.cacheControl) : true;
@@ -21880,8 +21880,8 @@ var require_send = __commonJS({
       this._index = index2;
       return this;
     }, "index"), "send.index: pass index as option");
-    SendStream.prototype.root = /* @__PURE__ */ __name(function root(path3) {
-      this._root = resolve2(String(path3));
+    SendStream.prototype.root = /* @__PURE__ */ __name(function root(path4) {
+      this._root = resolve2(String(path4));
       debug("root %s", this._root);
       return this;
     }, "root");
@@ -21988,10 +21988,10 @@ var require_send = __commonJS({
       var lastModified = this.res.getHeader("Last-Modified");
       return parseHttpDate(lastModified) <= parseHttpDate(ifRange);
     }, "isRangeFresh");
-    SendStream.prototype.redirect = /* @__PURE__ */ __name(function redirect(path3) {
+    SendStream.prototype.redirect = /* @__PURE__ */ __name(function redirect(path4) {
       var res = this.res;
       if (hasListeners(this, "directory")) {
-        this.emit("directory", res, path3);
+        this.emit("directory", res, path4);
         return;
       }
       if (this.hasTrailingSlash()) {
@@ -22011,42 +22011,42 @@ var require_send = __commonJS({
     SendStream.prototype.pipe = /* @__PURE__ */ __name(function pipe(res) {
       var root = this._root;
       this.res = res;
-      var path3 = decode(this.path);
-      if (path3 === -1) {
+      var path4 = decode(this.path);
+      if (path4 === -1) {
         this.error(400);
         return res;
       }
-      if (~path3.indexOf("\0")) {
+      if (~path4.indexOf("\0")) {
         this.error(400);
         return res;
       }
       var parts;
       if (root !== null) {
-        if (path3) {
-          path3 = normalize2("." + sep + path3);
+        if (path4) {
+          path4 = normalize2("." + sep + path4);
         }
-        if (UP_PATH_REGEXP.test(path3)) {
-          debug('malicious path "%s"', path3);
+        if (UP_PATH_REGEXP.test(path4)) {
+          debug('malicious path "%s"', path4);
           this.error(403);
           return res;
         }
-        parts = path3.split(sep);
-        path3 = normalize2(join5(root, path3));
+        parts = path4.split(sep);
+        path4 = normalize2(join5(root, path4));
       } else {
-        if (UP_PATH_REGEXP.test(path3)) {
-          debug('malicious path "%s"', path3);
+        if (UP_PATH_REGEXP.test(path4)) {
+          debug('malicious path "%s"', path4);
           this.error(403);
           return res;
         }
-        parts = normalize2(path3).split(sep);
-        path3 = resolve2(path3);
+        parts = normalize2(path4).split(sep);
+        path4 = resolve2(path4);
       }
       if (containsDotFile(parts)) {
         var access = this._dotfiles;
         if (access === void 0) {
           access = parts[parts.length - 1][0] === "." ? this._hidden ? "allow" : "ignore" : "allow";
         }
-        debug('%s dotfile "%s"', access, path3);
+        debug('%s dotfile "%s"', access, path4);
         switch (access) {
           case "allow":
             break;
@@ -22060,13 +22060,13 @@ var require_send = __commonJS({
         }
       }
       if (this._index.length && this.hasTrailingSlash()) {
-        this.sendIndex(path3);
+        this.sendIndex(path4);
         return res;
       }
-      this.sendFile(path3);
+      this.sendFile(path4);
       return res;
     }, "pipe");
-    SendStream.prototype.send = /* @__PURE__ */ __name(function send2(path3, stat) {
+    SendStream.prototype.send = /* @__PURE__ */ __name(function send2(path4, stat) {
       var len = stat.size;
       var options = this.options;
       var opts = {};
@@ -22078,9 +22078,9 @@ var require_send = __commonJS({
         this.headersAlreadySent();
         return;
       }
-      debug('pipe "%s"', path3);
-      this.setHeader(path3, stat);
-      this.type(path3);
+      debug('pipe "%s"', path4);
+      this.setHeader(path4, stat);
+      this.type(path4);
       if (this.isConditionalGET()) {
         if (this.isPreconditionFailure()) {
           this.error(412);
@@ -22131,28 +22131,28 @@ var require_send = __commonJS({
         res.end();
         return;
       }
-      this.stream(path3, opts);
+      this.stream(path4, opts);
     }, "send");
-    SendStream.prototype.sendFile = /* @__PURE__ */ __name(function sendFile(path3) {
+    SendStream.prototype.sendFile = /* @__PURE__ */ __name(function sendFile(path4) {
       var i = 0;
       var self = this;
-      debug('stat "%s"', path3);
-      fs3.stat(path3, /* @__PURE__ */ __name(function onstat(err, stat) {
-        if (err && err.code === "ENOENT" && !extname2(path3) && path3[path3.length - 1] !== sep) {
+      debug('stat "%s"', path4);
+      fs4.stat(path4, /* @__PURE__ */ __name(function onstat(err, stat) {
+        if (err && err.code === "ENOENT" && !extname2(path4) && path4[path4.length - 1] !== sep) {
           return next(err);
         }
         if (err) return self.onStatError(err);
-        if (stat.isDirectory()) return self.redirect(path3);
-        self.emit("file", path3, stat);
-        self.send(path3, stat);
+        if (stat.isDirectory()) return self.redirect(path4);
+        self.emit("file", path4, stat);
+        self.send(path4, stat);
       }, "onstat"));
       function next(err) {
         if (self._extensions.length <= i) {
           return err ? self.onStatError(err) : self.error(404);
         }
-        var p = path3 + "." + self._extensions[i++];
+        var p = path4 + "." + self._extensions[i++];
         debug('stat "%s"', p);
-        fs3.stat(p, function(err2, stat) {
+        fs4.stat(p, function(err2, stat) {
           if (err2) return next(err2);
           if (stat.isDirectory()) return next();
           self.emit("file", p, stat);
@@ -22161,7 +22161,7 @@ var require_send = __commonJS({
       }
       __name(next, "next");
     }, "sendFile");
-    SendStream.prototype.sendIndex = /* @__PURE__ */ __name(function sendIndex(path3) {
+    SendStream.prototype.sendIndex = /* @__PURE__ */ __name(function sendIndex(path4) {
       var i = -1;
       var self = this;
       function next(err) {
@@ -22169,9 +22169,9 @@ var require_send = __commonJS({
           if (err) return self.onStatError(err);
           return self.error(404);
         }
-        var p = join5(path3, self._index[i]);
+        var p = join5(path4, self._index[i]);
         debug('stat "%s"', p);
-        fs3.stat(p, function(err2, stat) {
+        fs4.stat(p, function(err2, stat) {
           if (err2) return next(err2);
           if (stat.isDirectory()) return next();
           self.emit("file", p, stat);
@@ -22181,10 +22181,10 @@ var require_send = __commonJS({
       __name(next, "next");
       next();
     }, "sendIndex");
-    SendStream.prototype.stream = /* @__PURE__ */ __name(function stream(path3, options) {
+    SendStream.prototype.stream = /* @__PURE__ */ __name(function stream(path4, options) {
       var self = this;
       var res = this.res;
-      var stream2 = fs3.createReadStream(path3, options);
+      var stream2 = fs4.createReadStream(path4, options);
       this.emit("stream", stream2);
       stream2.pipe(res);
       function cleanup() {
@@ -22200,10 +22200,10 @@ var require_send = __commonJS({
         self.emit("end");
       }, "onend"));
     }, "stream");
-    SendStream.prototype.type = /* @__PURE__ */ __name(function type(path3) {
+    SendStream.prototype.type = /* @__PURE__ */ __name(function type(path4) {
       var res = this.res;
       if (res.getHeader("Content-Type")) return;
-      var type2 = mime.lookup(path3);
+      var type2 = mime.lookup(path4);
       if (!type2) {
         debug("no content-type");
         return;
@@ -22212,9 +22212,9 @@ var require_send = __commonJS({
       debug("content-type %s", type2);
       res.setHeader("Content-Type", type2 + (charset ? "; charset=" + charset : ""));
     }, "type");
-    SendStream.prototype.setHeader = /* @__PURE__ */ __name(function setHeader(path3, stat) {
+    SendStream.prototype.setHeader = /* @__PURE__ */ __name(function setHeader(path4, stat) {
       var res = this.res;
-      this.emit("headers", res, path3, stat);
+      this.emit("headers", res, path4, stat);
       if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
         debug("accept ranges");
         res.setHeader("Accept-Ranges", "bytes");
@@ -22281,9 +22281,9 @@ var require_send = __commonJS({
       }) : createError(status, err);
     }
     __name(createHttpError, "createHttpError");
-    function decode(path3) {
+    function decode(path4) {
       try {
-        return decodeURIComponent(path3);
+        return decodeURIComponent(path4);
       } catch (err) {
         return -1;
       }
@@ -23541,10 +23541,10 @@ var require_utils3 = __commonJS({
     exports2.wetag = createETagGenerator({
       weak: true
     });
-    exports2.isAbsolute = function(path2) {
-      if ("/" === path2[0]) return true;
-      if (":" === path2[1] && ("\\" === path2[2] || "/" === path2[2])) return true;
-      if ("\\\\" === path2.substring(0, 2)) return true;
+    exports2.isAbsolute = function(path3) {
+      if ("/" === path3[0]) return true;
+      if (":" === path3[1] && ("\\" === path3[2] || "/" === path3[2])) return true;
+      if ("\\\\" === path3.substring(0, 2)) return true;
     };
     exports2.flatten = deprecate.function(flatten, "utils.flatten: use array-flatten npm module instead");
     exports2.normalizeType = function(type) {
@@ -23760,7 +23760,7 @@ var require_application = __commonJS({
     }, "handle");
     app.use = /* @__PURE__ */ __name(function use(fn) {
       var offset = 0;
-      var path2 = "/";
+      var path3 = "/";
       if (typeof fn !== "function") {
         var arg = fn;
         while (Array.isArray(arg) && arg.length !== 0) {
@@ -23768,7 +23768,7 @@ var require_application = __commonJS({
         }
         if (typeof arg !== "function") {
           offset = 1;
-          path2 = fn;
+          path3 = fn;
         }
       }
       var fns = flatten(slice.call(arguments, offset));
@@ -23779,12 +23779,12 @@ var require_application = __commonJS({
       var router = this._router;
       fns.forEach(function(fn2) {
         if (!fn2 || !fn2.handle || !fn2.set) {
-          return router.use(path2, fn2);
+          return router.use(path3, fn2);
         }
-        debug(".use app under %s", path2);
-        fn2.mountpath = path2;
+        debug(".use app under %s", path3);
+        fn2.mountpath = path3;
         fn2.parent = this;
-        router.use(path2, /* @__PURE__ */ __name(function mounted_app(req, res, next) {
+        router.use(path3, /* @__PURE__ */ __name(function mounted_app(req, res, next) {
           var orig = req.app;
           fn2.handle(req, res, function(err) {
             setPrototypeOf(req, orig.request);
@@ -23796,9 +23796,9 @@ var require_application = __commonJS({
       }, this);
       return this;
     }, "use");
-    app.route = /* @__PURE__ */ __name(function route(path2) {
+    app.route = /* @__PURE__ */ __name(function route(path3) {
       this.lazyrouter();
-      return this._router.route(path2);
+      return this._router.route(path3);
     }, "route");
     app.engine = /* @__PURE__ */ __name(function engine(ext, fn) {
       if (typeof fn !== "function") {
@@ -23849,7 +23849,7 @@ var require_application = __commonJS({
       }
       return this;
     }, "set");
-    app.path = /* @__PURE__ */ __name(function path2() {
+    app.path = /* @__PURE__ */ __name(function path3() {
       return this.parent ? this.parent.path() + this.mountpath : "";
     }, "path");
     app.enabled = /* @__PURE__ */ __name(function enabled(setting) {
@@ -23865,19 +23865,19 @@ var require_application = __commonJS({
       return this.set(setting, false);
     }, "disable");
     methods.forEach(function(method) {
-      app[method] = function(path2) {
+      app[method] = function(path3) {
         if (method === "get" && arguments.length === 1) {
-          return this.set(path2);
+          return this.set(path3);
         }
         this.lazyrouter();
-        var route = this._router.route(path2);
+        var route = this._router.route(path3);
         route[method].apply(route, slice.call(arguments, 1));
         return this;
       };
     });
-    app.all = /* @__PURE__ */ __name(function all(path2) {
+    app.all = /* @__PURE__ */ __name(function all(path3) {
       this.lazyrouter();
-      var route = this._router.route(path2);
+      var route = this._router.route(path3);
       var args = slice.call(arguments, 1);
       for (var i = 0; i < methods.length; i++) {
         route[methods[i]].apply(route, args);
@@ -33091,11 +33091,11 @@ var require_mime_types2 = __commonJS({
       return exts[0];
     }
     __name(extension, "extension");
-    function lookup(path2) {
-      if (!path2 || typeof path2 !== "string") {
+    function lookup(path3) {
+      if (!path3 || typeof path3 !== "string") {
         return false;
       }
-      var extension2 = extname2("x." + path2).toLowerCase().substr(1);
+      var extension2 = extname2("x." + path3).toLowerCase().substr(1);
       if (!extension2) {
         return false;
       }
@@ -33325,7 +33325,7 @@ var require_request = __commonJS({
       ];
       return subdomains2.slice(offset);
     }, "subdomains"));
-    defineGetter(req, "path", /* @__PURE__ */ __name(function path2() {
+    defineGetter(req, "path", /* @__PURE__ */ __name(function path3() {
       return parse(this).pathname;
     }, "path"));
     defineGetter(req, "hostname", /* @__PURE__ */ __name(function hostname() {
@@ -33660,7 +33660,7 @@ var require_response = __commonJS({
     var http = require("http");
     var isAbsolute = require_utils3().isAbsolute;
     var onFinished = require_on_finished();
-    var path2 = require("path");
+    var path3 = require("path");
     var statuses = require_statuses();
     var merge = require_utils_merge();
     var sign = require_cookie_signature().sign;
@@ -33669,9 +33669,9 @@ var require_response = __commonJS({
     var setCharset = require_utils3().setCharset;
     var cookie = require_cookie();
     var send = require_send();
-    var extname2 = path2.extname;
+    var extname2 = path3.extname;
     var mime = send.mime;
-    var resolve2 = path2.resolve;
+    var resolve2 = path3.resolve;
     var vary = require_vary();
     var res = Object.create(http.ServerResponse.prototype);
     module2.exports = res;
@@ -33848,26 +33848,26 @@ var require_response = __commonJS({
       this.type("txt");
       return this.send(body);
     }, "sendStatus");
-    res.sendFile = /* @__PURE__ */ __name(function sendFile(path3, options, callback) {
+    res.sendFile = /* @__PURE__ */ __name(function sendFile(path4, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
       var next = req.next;
       var opts = options || {};
-      if (!path3) {
+      if (!path4) {
         throw new TypeError("path argument is required to res.sendFile");
       }
-      if (typeof path3 !== "string") {
+      if (typeof path4 !== "string") {
         throw new TypeError("path must be a string to res.sendFile");
       }
       if (typeof options === "function") {
         done = options;
         opts = {};
       }
-      if (!opts.root && !isAbsolute(path3)) {
+      if (!opts.root && !isAbsolute(path4)) {
         throw new TypeError("path must be absolute or specify root to res.sendFile");
       }
-      var pathname = encodeURI(path3);
+      var pathname = encodeURI(path4);
       var file = send(req, pathname, opts);
       sendfile(res2, file, opts, function(err) {
         if (done) return done(err);
@@ -33877,7 +33877,7 @@ var require_response = __commonJS({
         }
       });
     }, "sendFile");
-    res.sendfile = function(path3, options, callback) {
+    res.sendfile = function(path4, options, callback) {
       var done = callback;
       var req = this.req;
       var res2 = this;
@@ -33887,7 +33887,7 @@ var require_response = __commonJS({
         done = options;
         opts = {};
       }
-      var file = send(req, path3, opts);
+      var file = send(req, path4, opts);
       sendfile(res2, file, opts, function(err) {
         if (done) return done(err);
         if (err && err.code === "EISDIR") return next();
@@ -33897,7 +33897,7 @@ var require_response = __commonJS({
       });
     };
     res.sendfile = deprecate.function(res.sendfile, "res.sendfile: Use res.sendFile instead");
-    res.download = /* @__PURE__ */ __name(function download(path3, filename, options, callback) {
+    res.download = /* @__PURE__ */ __name(function download(path4, filename, options, callback) {
       var done = callback;
       var name = filename;
       var opts = options || null;
@@ -33914,7 +33914,7 @@ var require_response = __commonJS({
         opts = filename;
       }
       var headers = {
-        "Content-Disposition": contentDisposition(name || path3)
+        "Content-Disposition": contentDisposition(name || path4)
       };
       if (opts && opts.headers) {
         var keys = Object.keys(opts.headers);
@@ -33927,7 +33927,7 @@ var require_response = __commonJS({
       }
       opts = Object.create(opts);
       opts.headers = headers;
-      var fullPath = !opts.root ? resolve2(path3) : path3;
+      var fullPath = !opts.root ? resolve2(path4) : path4;
       return this.sendFile(fullPath, opts, done);
     }, "download");
     res.contentType = res.type = /* @__PURE__ */ __name(function contentType(type) {
@@ -34245,11 +34245,11 @@ var require_serve_static = __commonJS({
         }
         var forwardError = !fallthrough;
         var originalUrl = parseUrl.original(req);
-        var path2 = parseUrl(req).pathname;
-        if (path2 === "/" && originalUrl.pathname.substr(-1) !== "/") {
-          path2 = "";
+        var path3 = parseUrl(req).pathname;
+        if (path3 === "/" && originalUrl.pathname.substr(-1) !== "/") {
+          path3 = "";
         }
-        var stream = send(req, path2, opts);
+        var stream = send(req, path3, opts);
         stream.on("directory", onDirectory);
         if (setHeaders) {
           stream.on("headers", setHeaders);
@@ -34404,7 +34404,10 @@ var require_express2 = __commonJS({
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  AuthZPaasModule: () => import_nestjs_authzpaas2.AuthZPaasModule,
+  AuthorizationSDK: () => import_nestjs_authzpaas2.AuthorizationSDK,
   AutoTrace: () => import_nestjs_common8.AutoTrace,
+  Can: () => import_nestjs_authzpaas2.Can,
   CanRole: () => import_nestjs_authzpaas2.CanRole,
   CsrfMiddleware: () => CsrfMiddleware,
   CsrfTokenMiddleware: () => CsrfTokenMiddleware,
@@ -34413,18 +34416,20 @@ __export(index_exports, {
   FileService: () => FileService,
   HtmlHotUpdateModule: () => HtmlHotUpdateModule,
   HtmlHotUpdateService: () => HtmlHotUpdateService,
+  PERMISSION_RESOLVER_TOKEN: () => import_nestjs_authzpaas2.PERMISSION_RESOLVER_TOKEN,
   PlatformHttpClientService: () => PlatformHttpClientService,
   PlatformModule: () => PlatformModule,
   StaticModule: () => StaticModule,
   UserContextMiddleware: () => UserContextMiddleware,
   ViewContextMiddleware: () => ViewContextMiddleware,
   configureApp: () => configureApp,
-  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware,
+  registerOpenApiSpecEndpoint: () => registerOpenApiSpecEndpoint
 });
 module.exports = __toCommonJS(index_exports);
 
 // src/modules/platform/module.ts
-var import_common16 = require("@nestjs/common");
+var import_common17 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
 var import_nestjs_common6 = require("@lark-apaas/nestjs-common");
 var import_config2 = require("@nestjs/config");
@@ -34769,18 +34774,24 @@ function createApiNotFoundResponse(req) {
   };
 }
 __name(createApiNotFoundResponse, "createApiNotFoundResponse");
-function getApiPathPrefix() {
+function getApiPathPrefixes() {
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   if (!globalPrefix) {
-    return "/api/";
+    return [
+      "/api/",
+      "/openapi/"
+    ];
   }
   const normalizedPrefix = globalPrefix.replace(/\/+$/, "");
-  return `${normalizedPrefix}/api/`;
+  return [
+    `${normalizedPrefix}/api/`,
+    `${normalizedPrefix}/openapi/`
+  ];
 }
-__name(getApiPathPrefix, "getApiPathPrefix");
+__name(getApiPathPrefixes, "getApiPathPrefixes");
 function apiResponseInterceptor(req, res, next) {
-  const apiPrefix = getApiPathPrefix();
-  if (!req.baseUrl.startsWith(apiPrefix)) {
+  const apiPrefixes = getApiPathPrefixes();
+  if (!apiPrefixes.some((prefix) => req.baseUrl.startsWith(prefix))) {
     return next();
   }
   res.render = function() {
@@ -34813,19 +34824,22 @@ var RequestContextMiddleware = class {
     this.requestContext = requestContext;
   }
   use(req, _res, next) {
-    const path2 = req.originalUrl ?? req.url;
+    const path3 = req.originalUrl ?? req.url;
     const userContext = req.userContext ?? {};
     const ttEnv = req.headers["x-tt-env"];
+    const rawPageRoute = req.get("X-Page-Route");
+    const pageRoute = (0, import_nestjs_common2.stripBasePath)(rawPageRoute, process.env.CLIENT_BASE_PATH) ?? void 0;
     const refererPath = req.headers["rpc-persist-apaas-observability-referer-path"];
     const observabilityApi = req.headers["rpc-persist-apaas-observability-api"];
     this.requestContext.run({
-      path: path2,
+      path: path3,
       method: req.method,
       userId: userContext.userId,
       tenantId: userContext.tenantId,
       appId: userContext.appId,
       isSystemAccount: userContext.isSystemAccount,
       ttEnv,
+      pageRoute,
       refererPath,
       observabilityApi
     }, () => next());
@@ -35007,10 +35021,10 @@ FrameworkDebugMiddleware = _ts_decorate7([
   ])
 ], FrameworkDebugMiddleware);
 
-// src/services/platform-http-client.service.ts
+// src/middlewares/openapi-spec/index.ts
+var import_node_fs = __toESM(require("fs"), 1);
+var import_swagger = require("@nestjs/swagger");
 var import_common8 = require("@nestjs/common");
-var import_http_client = require("@lark-apaas/http-client");
-var import_nestjs_common3 = require("@lark-apaas/nestjs-common");
 function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -35018,6 +35032,203 @@ function _ts_decorate8(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate8, "_ts_decorate");
+var _app = null;
+var _openapiFile = null;
+var _specCache = null;
+var _fallbackCache = null;
+function registerOpenApiSpecEndpoint(app, options) {
+  const globalPrefix = (process.env.CLIENT_BASE_PATH ?? "").replace(/\/+$/, "");
+  _app = app;
+  _openapiFile = options.openapiFile;
+  console.log(`[OpenAPI] Registered GET ${globalPrefix}/api/__framework__/openapi-spec (source: ${_openapiFile})`);
+}
+__name(registerOpenApiSpecEndpoint, "registerOpenApiSpecEndpoint");
+var OpenApiSpecMiddleware = class {
+  static {
+    __name(this, "OpenApiSpecMiddleware");
+  }
+  use(_req, res, next) {
+    if (!_app) {
+      next();
+      return;
+    }
+    try {
+      const fromFile = loadSpecFromFile(_openapiFile);
+      if (fromFile) {
+        res.json(fromFile);
+        return;
+      }
+      const fallback = loadFallbackSpec(_app);
+      res.json(fallback);
+    } catch (err) {
+      console.error("[openapi-spec] Failed to generate spec:", err);
+      res.json({
+        openapi: "3.0.0",
+        paths: {},
+        components: {
+          schemas: {}
+        }
+      });
+    }
+  }
+};
+OpenApiSpecMiddleware = _ts_decorate8([
+  (0, import_common8.Injectable)()
+], OpenApiSpecMiddleware);
+function loadSpecFromFile(file) {
+  if (!file) return null;
+  let statBefore;
+  try {
+    statBefore = import_node_fs.default.statSync(file);
+  } catch {
+    return null;
+  }
+  const sig = `${file}:${statBefore.mtimeMs}:${statBefore.size}`;
+  if (_specCache && _specCache.sig === sig) {
+    return _specCache.spec;
+  }
+  let raw;
+  try {
+    raw = import_node_fs.default.readFileSync(file, "utf8");
+  } catch (err) {
+    console.warn(`[openapi-spec] ${file} read failed: ${err.message}, falling back`);
+    return null;
+  }
+  let statAfter;
+  try {
+    statAfter = import_node_fs.default.statSync(file);
+  } catch {
+    return null;
+  }
+  const raced = statAfter.mtimeMs !== statBefore.mtimeMs || statAfter.size !== statBefore.size;
+  const spec = parseOpenApiSpec(file, raw);
+  if (!spec) return null;
+  if (!raced) {
+    _specCache = {
+      spec,
+      sig
+    };
+  }
+  return spec;
+}
+__name(loadSpecFromFile, "loadSpecFromFile");
+function parseOpenApiSpec(file, raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    console.warn(`[openapi-spec] ${file} invalid: ${err.message}, falling back`);
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || !parsed.paths || typeof parsed.paths !== "object") {
+    console.warn(`[openapi-spec] ${file} missing "paths", falling back`);
+    return null;
+  }
+  return {
+    openapi: "3.0.0",
+    info: {
+      title: "OpenAPI Spec",
+      version: "1.0.0"
+    },
+    paths: parsed.paths
+  };
+}
+__name(parseOpenApiSpec, "parseOpenApiSpec");
+function loadFallbackSpec(app) {
+  if (_fallbackCache) return _fallbackCache;
+  const globalPrefix = (process.env.CLIENT_BASE_PATH ?? "").replace(/\/+$/, "");
+  const config = new import_swagger.DocumentBuilder().setTitle("OpenAPI Spec").setVersion("1.0").build();
+  const spec = import_swagger.SwaggerModule.createDocument(app, config);
+  console.warn("[openapi-spec] docs/openapi.json not available, falling back to SwaggerModule.createDocument(). Populate docs/openapi.json to use the static-first path.");
+  _fallbackCache = buildFilteredSpec(spec, globalPrefix);
+  return _fallbackCache;
+}
+__name(loadFallbackSpec, "loadFallbackSpec");
+function buildFilteredSpec(spec, globalPrefix) {
+  const schemas = spec.components?.schemas ?? {};
+  const paths = spec.paths ?? {};
+  const filteredPaths = {};
+  for (const [pathKey, methods] of Object.entries(paths)) {
+    const cleanPath = stripPrefix(pathKey, globalPrefix);
+    if (!cleanPath.startsWith("/openapi")) continue;
+    filteredPaths[cleanPath] = {};
+    for (const [method, operation] of Object.entries(methods)) {
+      if ([
+        "parameters",
+        "summary",
+        "description",
+        "servers"
+      ].includes(method)) continue;
+      filteredPaths[cleanPath][method] = resolveRefsDeep(structuredClone(operation), schemas);
+    }
+  }
+  return {
+    openapi: spec.openapi,
+    paths: filteredPaths,
+    components: {
+      schemas: resolveAllSchemaRefs(structuredClone(schemas))
+    }
+  };
+}
+__name(buildFilteredSpec, "buildFilteredSpec");
+function stripPrefix(pathStr, prefix) {
+  if (prefix && pathStr.startsWith(prefix)) {
+    return pathStr.slice(prefix.length);
+  }
+  return pathStr;
+}
+__name(stripPrefix, "stripPrefix");
+var MAX_REF_DEPTH = 5;
+function resolveRefsDeep(obj, schemas, depth = 0) {
+  if (depth > MAX_REF_DEPTH || obj === null || obj === void 0) return obj;
+  if (typeof obj !== "object") return obj;
+  if (Array.isArray(obj)) {
+    return obj.map((item) => resolveRefsDeep(item, schemas, depth));
+  }
+  const record = obj;
+  if (typeof record["$ref"] === "string") {
+    const resolved = resolveRef(record["$ref"], schemas);
+    if (resolved !== void 0) {
+      return resolveRefsDeep(structuredClone(resolved), schemas, depth + 1);
+    }
+    return record;
+  }
+  const result = {};
+  for (const [key, value] of Object.entries(record)) {
+    result[key] = resolveRefsDeep(value, schemas, depth);
+  }
+  return result;
+}
+__name(resolveRefsDeep, "resolveRefsDeep");
+function resolveRef(ref, schemas) {
+  const prefix = "#/components/schemas/";
+  if (ref.startsWith(prefix)) {
+    const name = ref.slice(prefix.length);
+    return schemas[name];
+  }
+  return void 0;
+}
+__name(resolveRef, "resolveRef");
+function resolveAllSchemaRefs(schemas) {
+  const result = {};
+  for (const [name, schema] of Object.entries(schemas)) {
+    result[name] = resolveRefsDeep(schema, schemas);
+  }
+  return result;
+}
+__name(resolveAllSchemaRefs, "resolveAllSchemaRefs");
+
+// src/services/platform-http-client.service.ts
+var import_common9 = require("@nestjs/common");
+var import_http_client = require("@lark-apaas/http-client");
+var import_nestjs_common3 = require("@lark-apaas/nestjs-common");
+function _ts_decorate9(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
 function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35056,7 +35267,7 @@ var PlatformHttpClientService = class _PlatformHttpClientService {
   requestContext;
   client;
   protectedClient;
-  logger = new import_common8.Logger(_PlatformHttpClientService.name);
+  logger = new import_common9.Logger(_PlatformHttpClientService.name);
   constructor(requestContext) {
     this.requestContext = requestContext;
     const baseConfig = {
@@ -35212,8 +35423,8 @@ var PlatformHttpClientService = class _PlatformHttpClientService {
     });
   }
 };
-PlatformHttpClientService = _ts_decorate8([
-  (0, import_common8.Injectable)(),
+PlatformHttpClientService = _ts_decorate9([
+  (0, import_common9.Injectable)(),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
     typeof import_nestjs_common3.RequestContextService === "undefined" ? Object : import_nestjs_common3.RequestContextService
@@ -35224,16 +35435,16 @@ PlatformHttpClientService = _ts_decorate8([
 var DISABLE_DATAPASS = process.env.FORCE_FRAMEWORK_DISABLE_DATAPASS === "true";
 
 // src/services/file.service.ts
-var import_common9 = require("@nestjs/common");
+var import_common10 = require("@nestjs/common");
 var import_nestjs_common4 = require("@lark-apaas/nestjs-common");
 var import_file_service = require("@lark-apaas/file-service");
-function _ts_decorate9(decorators, target, key, desc) {
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
+__name(_ts_decorate10, "_ts_decorate");
 function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35258,7 +35469,7 @@ var FileService = class {
     this.httpClient = httpClient;
     this.observable = observable;
     this.fileServiceCore = new import_file_service.FileService(this.httpClient);
-    this.nestLogger = new import_common9.Logger("file");
+    this.nestLogger = new import_common10.Logger("file");
   }
   /**
    * 返回一个绑定了指定 bucket 的代理对象
@@ -35267,10 +35478,10 @@ var FileService = class {
   from(bucket) {
     return {
       upload: /* @__PURE__ */ __name((file, options) => this._upload(bucket, file, options), "upload"),
-      download: /* @__PURE__ */ __name((path2) => this._download(bucket, path2), "download"),
+      download: /* @__PURE__ */ __name((path3) => this._download(bucket, path3), "download"),
       list: /* @__PURE__ */ __name((prefix, searchOptions) => this._list(bucket, prefix, searchOptions), "list"),
       remove: /* @__PURE__ */ __name((filePaths) => this._remove(bucket, filePaths), "remove"),
-      createSignedUrl: /* @__PURE__ */ __name((path2, expiresIn) => this._createSignedUrl(bucket, path2, expiresIn), "createSignedUrl"),
+      createSignedUrl: /* @__PURE__ */ __name((path3, expiresIn) => this._createSignedUrl(bucket, path3, expiresIn), "createSignedUrl"),
       getFileMetadata: /* @__PURE__ */ __name((filePath) => this._getFileMetadata(bucket, filePath), "getFileMetadata")
     };
   }
@@ -35278,9 +35489,9 @@ var FileService = class {
   async upload(file, options) {
     return this._upload(await this.getDefaultBucket(), file, options);
   }
-  download(path2) {
+  download(path3) {
     const capturedBucketPromise = this.getDefaultBucket();
-    return this._download(capturedBucketPromise, path2);
+    return this._download(capturedBucketPromise, path3);
   }
   async list(prefix, searchOptions) {
     return this._list(await this.getDefaultBucket(), prefix, searchOptions);
@@ -35288,8 +35499,8 @@ var FileService = class {
   async remove(filePaths) {
     return this._remove(await this.getDefaultBucket(), filePaths);
   }
-  async createSignedUrl(path2, expiresIn) {
-    return this._createSignedUrl(await this.getDefaultBucket(), path2, expiresIn);
+  async createSignedUrl(path3, expiresIn) {
+    return this._createSignedUrl(await this.getDefaultBucket(), path3, expiresIn);
   }
   async getFileMetadata(filePath) {
     return this._getFileMetadata(await this.getDefaultBucket(), filePath);
@@ -35356,7 +35567,7 @@ var FileService = class {
       span.end();
     }
   }
-  _download(bucket, path2) {
+  _download(bucket, path3) {
     const capturedAppId = this.getAppId();
     const capturedRootSpan = this.requestContextService.getContext()?.requestRootSpan;
     const downloadFn = /* @__PURE__ */ __name(async () => {
@@ -35376,7 +35587,7 @@ var FileService = class {
         method: "download",
         source_type: "server",
         request: {
-          path: path2
+          path: path3
         }
       };
       const startTime = Date.now();
@@ -35384,7 +35595,7 @@ var FileService = class {
         const res = await this.fileServiceCore.downloadInner({
           appId: capturedAppId,
           bucketId: await bucket,
-          filePath: path2
+          filePath: path3
         });
         this.nestLogger.log(JSON.stringify({
           ...baseParams,
@@ -35503,7 +35714,7 @@ var FileService = class {
       span.end();
     }
   }
-  async _createSignedUrl(bucket, path2, expiresIn) {
+  async _createSignedUrl(bucket, path3, expiresIn) {
     const span = this.observable.startTrace("\u6587\u4EF6: createSignedUrl", this.requestContextService.getContext()?.requestRootSpan);
     span.setAttribute("module", "file");
     span.setAttribute("source_type", "platform");
@@ -35520,7 +35731,7 @@ var FileService = class {
       method: "createSignedUrl",
       source_type: "server",
       request: {
-        path: path2,
+        path: path3,
         expiresIn
       }
     };
@@ -35529,7 +35740,7 @@ var FileService = class {
       const res = await this.fileServiceCore.createSignedUrl({
         appId: this.getAppId(),
         bucketId: await bucket,
-        filePath: path2,
+        filePath: path3,
         expiresIn
       });
       this.nestLogger.log(JSON.stringify({
@@ -35598,10 +35809,10 @@ var FileService = class {
     }
   }
 };
-FileService = _ts_decorate9([
-  (0, import_common9.Injectable)(),
-  _ts_param2(1, (0, import_common9.Inject)(import_nestjs_common4.PLATFORM_HTTP_CLIENT)),
-  _ts_param2(2, (0, import_common9.Inject)(import_nestjs_common4.OBSERVABLE_SERVICE)),
+FileService = _ts_decorate10([
+  (0, import_common10.Injectable)(),
+  _ts_param2(1, (0, import_common10.Inject)(import_nestjs_common4.PLATFORM_HTTP_CLIENT)),
+  _ts_param2(2, (0, import_common10.Inject)(import_nestjs_common4.OBSERVABLE_SERVICE)),
   _ts_metadata6("design:type", Function),
   _ts_metadata6("design:paramtypes", [
     typeof import_nestjs_common4.RequestContextService === "undefined" ? Object : import_nestjs_common4.RequestContextService,
@@ -35614,21 +35825,21 @@ FileService = _ts_decorate9([
 var import_nestjs_authzpaas = require("@lark-apaas/nestjs-authzpaas");
 
 // src/modules/static/static.module.ts
-var import_common11 = require("@nestjs/common");
+var import_common12 = require("@nestjs/common");
 
 // src/modules/static/static.controller.ts
-var import_common10 = require("@nestjs/common");
-var import_swagger = require("@nestjs/swagger");
-var fs = __toESM(require("fs"), 1);
+var import_common11 = require("@nestjs/common");
+var import_swagger2 = require("@nestjs/swagger");
+var fs2 = __toESM(require("fs"), 1);
 var path = __toESM(require("path"), 1);
 var crypto2 = __toESM(require("crypto"), 1);
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
+__name(_ts_decorate11, "_ts_decorate");
 function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35696,7 +35907,7 @@ var StaticController = class _StaticController {
   static {
     __name(this, "StaticController");
   }
-  logger = new import_common10.Logger(_StaticController.name);
+  logger = new import_common11.Logger(_StaticController.name);
   staticDir;
   constructor() {
     this.staticDir = path.resolve(process.cwd(), "shared/static");
@@ -35717,7 +35928,7 @@ var StaticController = class _StaticController {
     try {
       const relativePath = params["0"] || params["*"] || "";
       if (!relativePath) {
-        res.status(import_common10.HttpStatus.BAD_REQUEST).json({
+        res.status(import_common11.HttpStatus.BAD_REQUEST).json({
           error: "Bad Request",
           message: "File path is required"
         });
@@ -35727,22 +35938,22 @@ var StaticController = class _StaticController {
       const normalizedPath = path.normalize(filePath);
       if (!normalizedPath.startsWith(this.staticDir)) {
         this.logger.warn(`Path traversal attempt detected: ${relativePath}`);
-        res.status(import_common10.HttpStatus.FORBIDDEN).json({
+        res.status(import_common11.HttpStatus.FORBIDDEN).json({
           error: "Forbidden",
           message: "Access denied"
         });
         return;
       }
-      if (!fs.existsSync(normalizedPath)) {
-        res.status(import_common10.HttpStatus.NOT_FOUND).json({
+      if (!fs2.existsSync(normalizedPath)) {
+        res.status(import_common11.HttpStatus.NOT_FOUND).json({
           error: "Not Found",
           message: "File not found"
         });
         return;
       }
-      const stat = fs.statSync(normalizedPath);
+      const stat = fs2.statSync(normalizedPath);
       if (stat.isDirectory()) {
-        res.status(import_common10.HttpStatus.FORBIDDEN).json({
+        res.status(import_common11.HttpStatus.FORBIDDEN).json({
           error: "Forbidden",
           message: "Directory listing not allowed"
         });
@@ -35752,18 +35963,18 @@ var StaticController = class _StaticController {
       const etag = generateETag(stat);
       const ifNoneMatch = req.headers["if-none-match"];
       if (ifNoneMatch === etag) {
-        res.status(import_common10.HttpStatus.NOT_MODIFIED).end();
+        res.status(import_common11.HttpStatus.NOT_MODIFIED).end();
         return;
       }
       res.setHeader("Content-Type", mimeType);
       res.setHeader("Content-Length", stat.size);
       res.setHeader("ETag", etag);
       res.setHeader("Cache-Control", "public, max-age=0, must-revalidate");
-      const stream = fs.createReadStream(normalizedPath);
+      const stream = fs2.createReadStream(normalizedPath);
       stream.on("error", (error) => {
         this.logger.error(`Error streaming file: ${relativePath}`, error);
         if (!res.headersSent) {
-          res.status(import_common10.HttpStatus.INTERNAL_SERVER_ERROR).json({
+          res.status(import_common11.HttpStatus.INTERNAL_SERVER_ERROR).json({
             error: "Internal Server Error",
             message: "Failed to read file"
           });
@@ -35773,7 +35984,7 @@ var StaticController = class _StaticController {
     } catch (error) {
       this.logger.error("Error serving static file", error);
       if (!res.headersSent) {
-        res.status(import_common10.HttpStatus.INTERNAL_SERVER_ERROR).json({
+        res.status(import_common11.HttpStatus.INTERNAL_SERVER_ERROR).json({
           error: "Internal Server Error",
           message: "An unexpected error occurred"
         });
@@ -35781,11 +35992,11 @@ var StaticController = class _StaticController {
     }
   }
 };
-_ts_decorate10([
-  (0, import_common10.Get)("*"),
-  _ts_param3(0, (0, import_common10.Param)()),
-  _ts_param3(1, (0, import_common10.Req)()),
-  _ts_param3(2, (0, import_common10.Res)()),
+_ts_decorate11([
+  (0, import_common11.Get)("*"),
+  _ts_param3(0, (0, import_common11.Param)()),
+  _ts_param3(1, (0, import_common11.Req)()),
+  _ts_param3(2, (0, import_common11.Res)()),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
     typeof Record === "undefined" ? Object : Record,
@@ -35794,28 +36005,28 @@ _ts_decorate10([
   ]),
   _ts_metadata7("design:returntype", void 0)
 ], StaticController.prototype, "serveFile", null);
-StaticController = _ts_decorate10([
-  (0, import_swagger.ApiExcludeController)(),
-  (0, import_common10.Controller)("static"),
+StaticController = _ts_decorate11([
+  (0, import_swagger2.ApiExcludeController)(),
+  (0, import_common11.Controller)("static"),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [])
 ], StaticController);
 
 // src/modules/static/static.module.ts
-function _ts_decorate11(decorators, target, key, desc) {
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
+__name(_ts_decorate12, "_ts_decorate");
 var StaticModule = class {
   static {
     __name(this, "StaticModule");
   }
 };
-StaticModule = _ts_decorate11([
-  (0, import_common11.Module)({
+StaticModule = _ts_decorate12([
+  (0, import_common12.Module)({
     controllers: [
       StaticController
     ]
@@ -35823,16 +36034,16 @@ StaticModule = _ts_decorate11([
 ], StaticModule);
 
 // src/modules/html-hot-update/html-hot-update.module.ts
-var import_common14 = require("@nestjs/common");
+var import_common15 = require("@nestjs/common");
 
 // src/modules/html-hot-update/html-hot-update.controller.ts
-var import_common13 = require("@nestjs/common");
-var import_swagger2 = require("@nestjs/swagger");
+var import_common14 = require("@nestjs/common");
+var import_swagger3 = require("@nestjs/swagger");
 
 // src/modules/html-hot-update/html-hot-update.service.ts
-var import_common12 = require("@nestjs/common");
-var import_node_fs = require("fs");
+var import_common13 = require("@nestjs/common");
 var import_node_fs2 = require("fs");
+var import_node_fs3 = require("fs");
 var import_node_crypto = require("crypto");
 var import_node_path2 = require("path");
 var import_nestjs_common5 = require("@lark-apaas/nestjs-common");
@@ -35863,13 +36074,13 @@ function setActiveHtmlVersion(version) {
 __name(setActiveHtmlVersion, "setActiveHtmlVersion");
 
 // src/modules/html-hot-update/html-hot-update.service.ts
-function _ts_decorate12(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
+__name(_ts_decorate13, "_ts_decorate");
 function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35912,7 +36123,7 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
     __name(this, "HtmlHotUpdateService");
   }
   httpClient;
-  logger = new import_common12.Logger(_HtmlHotUpdateService.name);
+  logger = new import_common13.Logger(_HtmlHotUpdateService.name);
   fileLock = new Mutex();
   hotUpdateDir = getHotUpdateHtmlDir();
   hotUpdateVersionsDir = getHotUpdateVersionsDir();
@@ -35937,7 +36148,7 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
     const activeVersion = getActiveHtmlVersion();
     if (activeVersion) {
       const hotPath = (0, import_node_path2.join)(getHotUpdateVersionDir(activeVersion), fileName);
-      if ((0, import_node_fs2.existsSync)(hotPath)) {
+      if ((0, import_node_fs3.existsSync)(hotPath)) {
         return hotPath;
       }
     }
@@ -35951,7 +36162,7 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
       ];
     }
     const activeVersionDir = getHotUpdateVersionDir(activeVersion);
-    return (0, import_node_fs2.existsSync)(activeVersionDir) ? [
+    return (0, import_node_fs3.existsSync)(activeVersionDir) ? [
       activeVersionDir,
       this.originalHtmlDir
     ] : [
@@ -35994,28 +36205,28 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
     const version = this.computeVersion(fileMap);
     const versionDir = getHotUpdateVersionDir(version);
     const currentVersion = getActiveHtmlVersion();
-    if (currentVersion === version && (0, import_node_fs2.existsSync)(versionDir)) {
+    if (currentVersion === version && (0, import_node_fs3.existsSync)(versionDir)) {
       this.logger.log(`HTML hot update skipped: version ${version} already active`);
       return result;
     }
     const stagingDir = (0, import_node_path2.join)(this.hotUpdateDir, "staging", `${version}-${process.pid}-${Date.now()}`);
     await this.fileLock.acquire();
     try {
-      if (getActiveHtmlVersion() === version && (0, import_node_fs2.existsSync)(versionDir)) {
+      if (getActiveHtmlVersion() === version && (0, import_node_fs3.existsSync)(versionDir)) {
         this.logger.log(`HTML hot update skipped after lock: version ${version} already active`);
         return result;
       }
-      await import_node_fs.promises.mkdir(stagingDir, {
+      await import_node_fs2.promises.mkdir(stagingDir, {
         recursive: true
       });
       for (const [rawFilePath, content] of entries) {
         try {
           const filePath = this.normalizeFilePath(rawFilePath);
           const localPath = (0, import_node_path2.join)(stagingDir, filePath);
-          await import_node_fs.promises.mkdir((0, import_node_path2.dirname)(localPath), {
+          await import_node_fs2.promises.mkdir((0, import_node_path2.dirname)(localPath), {
             recursive: true
           });
-          await import_node_fs.promises.writeFile(localPath, content, "utf-8");
+          await import_node_fs2.promises.writeFile(localPath, content, "utf-8");
           result.updatedFiles.push(filePath);
         } catch (error) {
           const reason = error instanceof Error ? error.message : String(error);
@@ -36027,7 +36238,7 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
         }
       }
       if (result.updatedFiles.length === 0) {
-        await import_node_fs.promises.rm(stagingDir, {
+        await import_node_fs2.promises.rm(stagingDir, {
           recursive: true,
           force: true
         });
@@ -36038,7 +36249,7 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
       await this.cleanupOldVersions(version);
       this.logger.log(`HTML hot update activated: version=${version}, files=${result.updatedFiles.length}`);
     } finally {
-      await import_node_fs.promises.rm(stagingDir, {
+      await import_node_fs2.promises.rm(stagingDir, {
         recursive: true,
         force: true
       }).catch(() => void 0);
@@ -36047,11 +36258,11 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
     return result;
   }
   async promoteVersionDirectory(stagingDir, versionDir) {
-    await import_node_fs.promises.mkdir(this.hotUpdateVersionsDir, {
+    await import_node_fs2.promises.mkdir(this.hotUpdateVersionsDir, {
       recursive: true
     });
     try {
-      await import_node_fs.promises.rename(stagingDir, versionDir);
+      await import_node_fs2.promises.rename(stagingDir, versionDir);
     } catch (error) {
       const err = error;
       if (err.code !== "EEXIST") {
@@ -36062,11 +36273,11 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
   async cleanupOldVersions(activeVersion) {
     let versions = [];
     try {
-      versions = await import_node_fs.promises.readdir(this.hotUpdateVersionsDir);
+      versions = await import_node_fs2.promises.readdir(this.hotUpdateVersionsDir);
     } catch {
       return;
     }
-    await Promise.all(versions.filter((version) => version !== activeVersion).map((version) => import_node_fs.promises.rm(getHotUpdateVersionDir(version), {
+    await Promise.all(versions.filter((version) => version !== activeVersion).map((version) => import_node_fs2.promises.rm(getHotUpdateVersionDir(version), {
       recursive: true,
       force: true
     })));
@@ -36114,9 +36325,9 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
     return "";
   }
 };
-HtmlHotUpdateService = _ts_decorate12([
-  (0, import_common12.Injectable)(),
-  _ts_param4(0, (0, import_common12.Inject)(import_nestjs_common5.PLATFORM_HTTP_CLIENT)),
+HtmlHotUpdateService = _ts_decorate13([
+  (0, import_common13.Injectable)(),
+  _ts_param4(0, (0, import_common13.Inject)(import_nestjs_common5.PLATFORM_HTTP_CLIENT)),
   _ts_metadata8("design:type", Function),
   _ts_metadata8("design:paramtypes", [
     typeof PlatformHttpClient === "undefined" ? Object : PlatformHttpClient
@@ -36124,13 +36335,13 @@ HtmlHotUpdateService = _ts_decorate12([
 ], HtmlHotUpdateService);
 
 // src/modules/html-hot-update/html-hot-update.controller.ts
-function _ts_decorate13(decorators, target, key, desc) {
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
+__name(_ts_decorate14, "_ts_decorate");
 function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -36153,7 +36364,7 @@ var HtmlHotUpdateController = class _HtmlHotUpdateController {
     __name(this, "HtmlHotUpdateController");
   }
   htmlHotUpdateService;
-  logger = new import_common13.Logger(_HtmlHotUpdateController.name);
+  logger = new import_common14.Logger(_HtmlHotUpdateController.name);
   constructor(htmlHotUpdateService) {
     this.htmlHotUpdateService = htmlHotUpdateService;
   }
@@ -36195,19 +36406,19 @@ var HtmlHotUpdateController = class _HtmlHotUpdateController {
     }
   }
 };
-_ts_decorate13([
-  (0, import_common13.Post)("update_html_files"),
-  (0, import_common13.HttpCode)(import_common13.HttpStatus.OK),
-  _ts_param5(0, (0, import_common13.Body)()),
+_ts_decorate14([
+  (0, import_common14.Post)("update_html_files"),
+  (0, import_common14.HttpCode)(import_common14.HttpStatus.OK),
+  _ts_param5(0, (0, import_common14.Body)()),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
     typeof UpdateHtmlFilesDto === "undefined" ? Object : UpdateHtmlFilesDto
   ]),
   _ts_metadata9("design:returntype", Promise)
 ], HtmlHotUpdateController.prototype, "updateHtmlFiles", null);
-HtmlHotUpdateController = _ts_decorate13([
-  (0, import_swagger2.ApiExcludeController)(),
-  (0, import_common13.Controller)("__innerapi__"),
+HtmlHotUpdateController = _ts_decorate14([
+  (0, import_swagger3.ApiExcludeController)(),
+  (0, import_common14.Controller)("__innerapi__"),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
     typeof HtmlHotUpdateService === "undefined" ? Object : HtmlHotUpdateService
@@ -36215,20 +36426,20 @@ HtmlHotUpdateController = _ts_decorate13([
 ], HtmlHotUpdateController);
 
 // src/modules/html-hot-update/html-hot-update.module.ts
-function _ts_decorate14(decorators, target, key, desc) {
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
+__name(_ts_decorate15, "_ts_decorate");
 var HtmlHotUpdateModule = class {
   static {
     __name(this, "HtmlHotUpdateModule");
   }
 };
-HtmlHotUpdateModule = _ts_decorate14([
-  (0, import_common14.Module)({
+HtmlHotUpdateModule = _ts_decorate15([
+  (0, import_common15.Module)({
     controllers: [
       HtmlHotUpdateController
     ],
@@ -36242,16 +36453,16 @@ HtmlHotUpdateModule = _ts_decorate14([
 ], HtmlHotUpdateModule);
 
 // src/middlewares/html-hot-update-view/index.ts
-var import_common15 = require("@nestjs/common");
-var import_node_fs3 = require("fs");
+var import_common16 = require("@nestjs/common");
+var import_node_fs4 = require("fs");
 var import_node_path3 = require("path");
-function _ts_decorate15(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
+__name(_ts_decorate16, "_ts_decorate");
 var HtmlHotUpdateViewMiddleware = class {
   static {
     __name(this, "HtmlHotUpdateViewMiddleware");
@@ -36270,7 +36481,7 @@ var HtmlHotUpdateViewMiddleware = class {
       }
       const activeVersion = getActiveHtmlVersion();
       const hotPath = activeVersion ? (0, import_node_path3.join)(getHotUpdateVersionDir(activeVersion), `${view}.html`) : "";
-      if (hotPath && (0, import_node_fs3.existsSync)(hotPath)) {
+      if (hotPath && (0, import_node_fs4.existsSync)(hotPath)) {
         return originalRender(hotPath, renderOptions, renderCallback);
       }
       return originalRender(view, renderOptions, renderCallback);
@@ -36278,18 +36489,18 @@ var HtmlHotUpdateViewMiddleware = class {
     next();
   }
 };
-HtmlHotUpdateViewMiddleware = _ts_decorate15([
-  (0, import_common15.Injectable)()
+HtmlHotUpdateViewMiddleware = _ts_decorate16([
+  (0, import_common16.Injectable)()
 ], HtmlHotUpdateViewMiddleware);
 
 // src/modules/platform/module.ts
-function _ts_decorate16(decorators, target, key, desc) {
+function _ts_decorate17(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
+__name(_ts_decorate17, "_ts_decorate");
 var PLATFORM_MODULE_OPTIONS = /* @__PURE__ */ Symbol("PLATFORM_MODULE_OPTIONS");
 var PlatformModule = class _PlatformModule {
   static {
@@ -36344,13 +36555,16 @@ var PlatformModule = class _PlatformModule {
               };
               return {
                 connectionString: configService.get("app.databaseUrl") ?? "",
-                logger: drizzleLogger
+                logger: drizzleLogger,
+                connectionTokenFilePath: "/var/run/secrets/zti/credential"
               };
             }, "useFactory")
           })
         ],
         import_nestjs_authnpaas.AuthNPaasModule.forRoot(),
-        import_nestjs_authzpaas.AuthZPaasModule.forRoot(),
+        import_nestjs_authzpaas.AuthZPaasModule.forRoot({
+          ...options.authz || {}
+        }),
         import_nestjs_trigger.AutomationModule.forRoot(),
         import_nestjs_capability.CapabilityModule.forRoot({
           capabilitiesDir: options.capabilitiesDir,
@@ -36374,7 +36588,7 @@ var PlatformModule = class _PlatformModule {
         },
         {
           provide: import_core2.APP_PIPE,
-          useValue: new import_common16.ValidationPipe({
+          useValue: new import_common17.ValidationPipe({
             transform: true,
             transformOptions: {
               enableImplicitConversion: true
@@ -36427,16 +36641,21 @@ var PlatformModule = class _PlatformModule {
   */
   configure(consumer) {
     const options = _PlatformModule.moduleOptions;
-    consumer.apply(apiResponseInterceptor).forRoutes("/api/*");
+    consumer.apply(apiResponseInterceptor).forRoutes("/api/*", "/openapi/*");
     if (process.env.NODE_ENV === "development") {
       consumer.apply(FrameworkDebugMiddleware).forRoutes("/api/__framework__/debug");
     }
+    if (process.env.NODE_ENV !== "production") {
+      consumer.apply(OpenApiSpecMiddleware).forRoutes("/api/__framework__/openapi-spec");
+    }
     consumer.apply(UserContextMiddleware, RequestContextMiddleware, import_nestjs_logger2.LoggerContextMiddleware, import_nestjs_observable.ObservableTraceMiddleware, ...DISABLE_DATAPASS ? [] : [
       import_nestjs_datapaas.SqlExecutionContextMiddleware
     ]).forRoutes("/*");
-    consumer.apply(CsrfTokenMiddleware, ViewContextMiddleware, HtmlHotUpdateViewMiddleware).exclude("/api/(.*)", "/static/(.*)").forRoutes("*");
+    consumer.apply(CsrfTokenMiddleware, ViewContextMiddleware, HtmlHotUpdateViewMiddleware).exclude("/api/(.*)", "/openapi/(.*)", "/static/(.*)").forRoutes("*");
     if (options.enableCsrf !== false) {
-      const csrfRoutes = options.csrfRoutes || "/api/*";
+      const csrfRoutes = options.csrfRoutes || [
+        "/api/*"
+      ];
       if (Array.isArray(csrfRoutes)) {
         csrfRoutes.forEach((route) => {
           consumer.apply(CsrfMiddleware).forRoutes(route);
@@ -36447,12 +36666,13 @@ var PlatformModule = class _PlatformModule {
     }
   }
 };
-PlatformModule = _ts_decorate16([
-  (0, import_common16.Global)(),
-  (0, import_common16.Module)({})
+PlatformModule = _ts_decorate17([
+  (0, import_common17.Global)(),
+  (0, import_common17.Module)({})
 ], PlatformModule);
 
 // src/setup.ts
+var import_node_path4 = __toESM(require("path"), 1);
 var import_nestjs_logger3 = require("@lark-apaas/nestjs-logger");
 var import_cookie_parser = __toESM(require("cookie-parser"), 1);
 var import_express = __toESM(require_express2(), 1);
@@ -36525,6 +36745,11 @@ async function configureApp(app, perms = defaultPerms) {
       console.error("[OpenAPI] OpenAPI \u751F\u6210\u5931\u8D25:", err);
     }
   }
+  if (process.env.NODE_ENV !== "production") {
+    registerOpenApiSpecEndpoint(app, {
+      openapiFile: import_node_path4.default.resolve(process.cwd(), "docs/openapi.json")
+    });
+  }
   console.log("App Started Successfully.");
 }
 __name(configureApp, "configureApp");
@@ -36541,7 +36766,10 @@ var import_nestjs_common8 = require("@lark-apaas/nestjs-common");
 var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AuthZPaasModule,
+  AuthorizationSDK,
   AutoTrace,
+  Can,
   CanRole,
   CsrfMiddleware,
   CsrfTokenMiddleware,
@@ -36550,6 +36778,7 @@ var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
   FileService,
   HtmlHotUpdateModule,
   HtmlHotUpdateService,
+  PERMISSION_RESOLVER_TOKEN,
   PlatformHttpClientService,
   PlatformModule,
   StaticModule,
@@ -36557,6 +36786,7 @@ var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
   ViewContextMiddleware,
   configureApp,
   createLegacyPathRedirectMiddleware,
+  registerOpenApiSpecEndpoint,
   ...require("@lark-apaas/nestjs-authnpaas"),
   ...require("@lark-apaas/nestjs-capability"),
   ...require("@lark-apaas/nestjs-datapaas"),