@lark-apaas/fullstack-nestjs-core 1.1.51-alpha.6 → 1.1.51

package/dist/index.cjs

@@ -34423,24 +34423,10 @@ __export(index_exports, {
   UserContextMiddleware: () => UserContextMiddleware,
   ViewContextMiddleware: () => ViewContextMiddleware,
   configureApp: () => configureApp,
-  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware,
-  createLocalDevMiddleware: () => createLocalDevMiddleware,
-  isLocalDev: () => isLocalDev
+  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware
 });
 module.exports = __toCommonJS(index_exports);
 
-// src/load-env.ts
-try {
-  const dotenv = require("dotenv");
-  dotenv.config({
-    path: ".env.local"
-  });
-  dotenv.config({
-    path: ".env"
-  });
-} catch {
-}
-
 // src/modules/platform/module.ts
 var import_common16 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
@@ -34451,6 +34437,7 @@ var import_axios2 = require("@nestjs/axios");
 var import_nestjs_logger2 = require("@lark-apaas/nestjs-logger");
 var import_nestjs_datapaas = require("@lark-apaas/nestjs-datapaas");
 var import_nestjs_authnpaas = require("@lark-apaas/nestjs-authnpaas");
+var import_nestjs_http_forwarder = require("@lark-apaas/nestjs-http-forwarder");
 var import_nestjs_trigger = require("@lark-apaas/nestjs-trigger");
 var import_nestjs_common7 = require("@lark-apaas/nestjs-common");
 var import_nestjs_capability = require("@lark-apaas/nestjs-capability");
@@ -34458,41 +34445,20 @@ var import_nestjs_capability = require("@lark-apaas/nestjs-capability");
 // src/middlewares/user-context/index.ts
 var import_common = require("@nestjs/common");
 
-// src/utils/parse-suda-webuser.ts
-function parseSudaWebUserEnv(raw) {
-  if (!raw) return null;
-  try {
-    return JSON.parse(raw);
-  } catch {
-  }
-  try {
-    return JSON.parse(raw.replace(/\\"/g, '"'));
-  } catch {
-    return null;
-  }
-}
-__name(parseSudaWebUserEnv, "parseSudaWebUserEnv");
-
 // src/middlewares/user-context/helper.ts
 var sudaWebUserHeaderKey = "x-larkgw-suda-webuser";
 function getWebUserFromHeader(req) {
   const sudaWebUserContent = req.headers[sudaWebUserHeaderKey];
-  if (sudaWebUserContent) {
-    try {
-      const sudaWebUserJsonStr = decodeURIComponent(sudaWebUserContent);
-      const sudaWebUserJson = JSON.parse(sudaWebUserJsonStr);
-      return sudaWebUserJson;
-    } catch (err) {
-      console.error("parse suda webuser from header failed, err=%o", err);
-      return null;
-    }
+  if (!sudaWebUserContent) {
+    return null;
   }
-  if (process.env.MIAODA_LOCAL_DEV === "1") {
-    const parsed = parseSudaWebUserEnv(process.env.SUDA_WEBUSER);
-    if (parsed) return parsed;
-    if (process.env.SUDA_WEBUSER) {
-      console.error("parse suda webuser from env failed, value head=%s", process.env.SUDA_WEBUSER.slice(0, 80));
-    }
+  try {
+    const sudaWebUserJsonStr = decodeURIComponent(sudaWebUserContent);
+    const sudaWebUserJson = JSON.parse(sudaWebUserJsonStr);
+    return sudaWebUserJson;
+  } catch (err) {
+    console.error("parse suda webuser from header failed, err=%o", err);
+    return null;
   }
   return null;
 }
@@ -34588,7 +34554,7 @@ CsrfMiddleware = _ts_decorate2([
   (0, import_common2.Injectable)()
 ], CsrfMiddleware);
 
-// src/middlewares/view-context/index.ts
+// src/middlewares/view-context/middleware.ts
 var import_common3 = require("@nestjs/common");
 var import_nestjs_common = require("@lark-apaas/nestjs-common");
 
@@ -34635,7 +34601,7 @@ function safeEscape(s) {
 }
 __name(safeEscape, "safeEscape");
 
-// src/middlewares/view-context/index.ts
+// src/middlewares/view-context/middleware.ts
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -34686,6 +34652,7 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
     const { userId, tenantId, appId, loginUrl, userType } = req.userContext;
     const csrfToken = req.csrfToken;
     const environment = mapToWindowEnvironment(process.env.FORCE_FRAMEWORK_ENVIRONMENT);
+    const basename = safeEscape(req.headers["x-miaoda-custom-host"] !== void 0 ? "/" : `/app/${appId || ""}`);
     const appPublishedData = await this.getAppPublished(appId);
     const appInfo = appPublishedData?.app_info ?? null;
     req.__platform_data__ = {
@@ -34700,7 +34667,8 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       tenantId,
       environment,
       showBadge: appInfo?.show_badge !== false,
-      appPublished: appPublishedData ?? null
+      appPublished: appPublishedData ?? null,
+      basename
     };
     res.locals = {
       ...res.locals ?? {},
@@ -34713,7 +34681,8 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       appName: safeEscape(appInfo?.app_name ?? "\u5999\u642D\u5E94\u7528"),
       appAvatar: appInfo?.app_avatar ?? "",
       appDescription: safeEscape(appInfo?.app_description ?? ""),
-      environment
+      environment,
+      basename
     };
     next();
   }
@@ -36438,6 +36407,9 @@ var PlatformModule = class _PlatformModule {
           ...options.authz || {}
         }),
         import_nestjs_trigger.AutomationModule.forRoot(),
+        // 通用内网转发：自动注册 ALL /api/__platform__/http-forward?targetUrl=...
+        // 业务方接入 PlatformModule 后零改动获得内网代理路由
+        import_nestjs_http_forwarder.HttpForwarderModule.forRoot(options.httpForwarder),
         import_nestjs_capability.CapabilityModule.forRoot({
           capabilitiesDir: options.capabilitiesDir,
           enableWatching: process.env.NODE_ENV === "development"
@@ -36581,43 +36553,6 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
-// src/middlewares/local-dev/index.ts
-var CSRF_COOKIE_KEY = "suda-csrf-token";
-var CSRF_HEADER_KEY = "x-suda-csrf-token";
-var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
-function isLocalDev() {
-  if (process.env.NODE_ENV === "production") return false;
-  const flag = process.env.MIAODA_LOCAL_DEV;
-  return flag === "1" || flag === "true";
-}
-__name(isLocalDev, "isLocalDev");
-function extractCsrfFromCookie(cookieHeader) {
-  if (!cookieHeader) return void 0;
-  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
-  const m = cookieHeader.match(re);
-  return m?.[1];
-}
-__name(extractCsrfFromCookie, "extractCsrfFromCookie");
-function createLocalDevMiddleware() {
-  let webUserHeader = "";
-  const parsed = parseSudaWebUserEnv(process.env.SUDA_WEBUSER);
-  if (parsed) {
-    webUserHeader = encodeURIComponent(JSON.stringify(parsed));
-  }
-  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
-    const headers = req.headers;
-    if (!headers[CSRF_HEADER_KEY]) {
-      const token = extractCsrfFromCookie(req.headers.cookie);
-      if (token) headers[CSRF_HEADER_KEY] = token;
-    }
-    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
-      headers[WEBUSER_HEADER_KEY] = webUserHeader;
-    }
-    next();
-  }, "localDevMiddleware");
-}
-__name(createLocalDevMiddleware, "createLocalDevMiddleware");
-
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36635,9 +36570,6 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use((0, import_cookie_parser.default)());
-  if (isLocalDev()) {
-    app.use(createLocalDevMiddleware());
-  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36689,8 +36621,6 @@ var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
   ViewContextMiddleware,
   configureApp,
   createLegacyPathRedirectMiddleware,
-  createLocalDevMiddleware,
-  isLocalDev,
   ...require("@lark-apaas/nestjs-authnpaas"),
   ...require("@lark-apaas/nestjs-capability"),
   ...require("@lark-apaas/nestjs-datapaas"),

package/dist/index.d.cts

@@ -2,11 +2,12 @@ import { NestModule, DynamicModule, MiddlewareConsumer, OnModuleInit, NestMiddle
 import { HttpClientConfig, PlatformPluginOptions, HttpClient } from '@lark-apaas/http-client';
 import { AuthZPaasModuleOptions } from '@lark-apaas/nestjs-authzpaas';
 export { AddMembersParams, AuthZPaasModule, AuthorizationSDK, Can, CanRole, ChatSimpleDTO, CommonParam, CreateRoleParams, CreateRoleResponse, DepartmentDTO, DepartmentEntity, DepartmentSimpleDTO, FilterParams, ForceRoleDTO, I18nText, IPermissionResolver, ListMembersParams, ListMembersResponse, ListRolesParams, MemberMutationData, MemberType, PERMISSION_RESOLVER_TOKEN, PermissionPoint, PermissionRequirement, PresetGroupDTO, RemoveMembersParams, RoleMemberDTO, SearchChatEntity, SearchParams, SearchResponse, SearchResult, SearchUserEntity, UpdateRoleParams, UserSimpleDTO } from '@lark-apaas/nestjs-authzpaas';
+import { HttpForwarderModuleOptions } from '@lark-apaas/nestjs-http-forwarder';
 import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction, RequestHandler } from 'express';
+import { Request, Response, NextFunction } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -23,6 +24,8 @@ declare global {
         userId?: string;
         tenantId?: number;
         csrfToken?: string;
+        /** React Router basename，由 ViewContextMiddleware 注入；自定义域名场景下 = / 或 /<alias>，默认域名 = /app/<appId> */
+        basename?: string;
         [key: string]: unknown;
       };
       userContext: {
@@ -78,6 +81,12 @@ interface PlatformModuleOptions {
      * 可传入 permissionResolver 等选项，透传给 AuthZPaasModule.forRoot()
      */
     authz?: AuthZPaasModuleOptions;
+    /**
+     * HttpForwarder 模块配置（默认自动启用，注册 ALL /api/__platform__/http-forward 路由）
+     * 透传给 HttpForwarderModule.forRoot()；不传则使用模块默认值
+     * （requestTimeoutMs=30s, maxResponseBytes=10MB）。
+     */
+    httpForwarder?: HttpForwarderModuleOptions;
 }
 
 declare class PlatformModule implements NestModule {
@@ -221,9 +230,6 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
-declare function isLocalDev(): boolean;
-declare function createLocalDevMiddleware(): RequestHandler;
-
 /**
  * API 404 响应格式
  */
@@ -405,4 +411,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };

package/dist/index.d.ts

@@ -2,11 +2,12 @@ import { NestModule, DynamicModule, MiddlewareConsumer, OnModuleInit, NestMiddle
 import { HttpClientConfig, PlatformPluginOptions, HttpClient } from '@lark-apaas/http-client';
 import { AuthZPaasModuleOptions } from '@lark-apaas/nestjs-authzpaas';
 export { AddMembersParams, AuthZPaasModule, AuthorizationSDK, Can, CanRole, ChatSimpleDTO, CommonParam, CreateRoleParams, CreateRoleResponse, DepartmentDTO, DepartmentEntity, DepartmentSimpleDTO, FilterParams, ForceRoleDTO, I18nText, IPermissionResolver, ListMembersParams, ListMembersResponse, ListRolesParams, MemberMutationData, MemberType, PERMISSION_RESOLVER_TOKEN, PermissionPoint, PermissionRequirement, PresetGroupDTO, RemoveMembersParams, RoleMemberDTO, SearchChatEntity, SearchParams, SearchResponse, SearchResult, SearchUserEntity, UpdateRoleParams, UserSimpleDTO } from '@lark-apaas/nestjs-authzpaas';
+import { HttpForwarderModuleOptions } from '@lark-apaas/nestjs-http-forwarder';
 import { NestExpressApplication } from '@nestjs/platform-express';
 import { PlatformHttpClient, RequestContextService, ObservableService } from '@lark-apaas/nestjs-common';
 export { AutoTrace } from '@lark-apaas/nestjs-common';
 export { DevToolsModule, DevToolsOptions, DevToolsV2Module, DevToolsV2Options } from '@lark-apaas/nestjs-openapi-devtools';
-import { Request, Response, NextFunction, RequestHandler } from 'express';
+import { Request, Response, NextFunction } from 'express';
 import * as _lark_apaas_file_service from '@lark-apaas/file-service';
 import { FileBody, UploadOptions, FileDownloadBuilder, SearchOptions } from '@lark-apaas/file-service';
 export * from '@lark-apaas/file-service';
@@ -23,6 +24,8 @@ declare global {
         userId?: string;
         tenantId?: number;
         csrfToken?: string;
+        /** React Router basename，由 ViewContextMiddleware 注入；自定义域名场景下 = / 或 /<alias>，默认域名 = /app/<appId> */
+        basename?: string;
         [key: string]: unknown;
       };
       userContext: {
@@ -78,6 +81,12 @@ interface PlatformModuleOptions {
      * 可传入 permissionResolver 等选项，透传给 AuthZPaasModule.forRoot()
      */
     authz?: AuthZPaasModuleOptions;
+    /**
+     * HttpForwarder 模块配置（默认自动启用，注册 ALL /api/__platform__/http-forward 路由）
+     * 透传给 HttpForwarderModule.forRoot()；不传则使用模块默认值
+     * （requestTimeoutMs=30s, maxResponseBytes=10MB）。
+     */
+    httpForwarder?: HttpForwarderModuleOptions;
 }
 
 declare class PlatformModule implements NestModule {
@@ -221,9 +230,6 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
-declare function isLocalDev(): boolean;
-declare function createLocalDevMiddleware(): RequestHandler;
-
 /**
  * API 404 响应格式
  */
@@ -405,4 +411,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, createLocalDevMiddleware, isLocalDev };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };

package/dist/index.js

@@ -34400,18 +34400,6 @@ var require_express2 = __commonJS({
   }
 });
 
-// src/load-env.ts
-try {
-  const dotenv = __require("dotenv");
-  dotenv.config({
-    path: ".env.local"
-  });
-  dotenv.config({
-    path: ".env"
-  });
-} catch {
-}
-
 // src/modules/platform/module.ts
 import { Global, Module as Module3, ValidationPipe } from "@nestjs/common";
 import { APP_INTERCEPTOR, APP_PIPE } from "@nestjs/core";
@@ -34422,6 +34410,7 @@ import { HttpModule } from "@nestjs/axios";
 import { LoggerModule, AppLogger as AppLogger2, LoggerContextMiddleware } from "@lark-apaas/nestjs-logger";
 import { DataPaasModule, SqlExecutionContextMiddleware } from "@lark-apaas/nestjs-datapaas";
 import { AuthNPaasModule } from "@lark-apaas/nestjs-authnpaas";
+import { HttpForwarderModule } from "@lark-apaas/nestjs-http-forwarder";
 import { AutomationModule } from "@lark-apaas/nestjs-trigger";
 import { PLATFORM_HTTP_CLIENT as PLATFORM_HTTP_CLIENT4 } from "@lark-apaas/nestjs-common";
 import { CapabilityModule } from "@lark-apaas/nestjs-capability";
@@ -34429,41 +34418,20 @@ import { CapabilityModule } from "@lark-apaas/nestjs-capability";
 // src/middlewares/user-context/index.ts
 import { Injectable } from "@nestjs/common";
 
-// src/utils/parse-suda-webuser.ts
-function parseSudaWebUserEnv(raw) {
-  if (!raw) return null;
-  try {
-    return JSON.parse(raw);
-  } catch {
-  }
-  try {
-    return JSON.parse(raw.replace(/\\"/g, '"'));
-  } catch {
-    return null;
-  }
-}
-__name(parseSudaWebUserEnv, "parseSudaWebUserEnv");
-
 // src/middlewares/user-context/helper.ts
 var sudaWebUserHeaderKey = "x-larkgw-suda-webuser";
 function getWebUserFromHeader(req) {
   const sudaWebUserContent = req.headers[sudaWebUserHeaderKey];
-  if (sudaWebUserContent) {
-    try {
-      const sudaWebUserJsonStr = decodeURIComponent(sudaWebUserContent);
-      const sudaWebUserJson = JSON.parse(sudaWebUserJsonStr);
-      return sudaWebUserJson;
-    } catch (err) {
-      console.error("parse suda webuser from header failed, err=%o", err);
-      return null;
-    }
+  if (!sudaWebUserContent) {
+    return null;
   }
-  if (process.env.MIAODA_LOCAL_DEV === "1") {
-    const parsed = parseSudaWebUserEnv(process.env.SUDA_WEBUSER);
-    if (parsed) return parsed;
-    if (process.env.SUDA_WEBUSER) {
-      console.error("parse suda webuser from env failed, value head=%s", process.env.SUDA_WEBUSER.slice(0, 80));
-    }
+  try {
+    const sudaWebUserJsonStr = decodeURIComponent(sudaWebUserContent);
+    const sudaWebUserJson = JSON.parse(sudaWebUserJsonStr);
+    return sudaWebUserJson;
+  } catch (err) {
+    console.error("parse suda webuser from header failed, err=%o", err);
+    return null;
   }
   return null;
 }
@@ -34559,7 +34527,7 @@ CsrfMiddleware = _ts_decorate2([
   Injectable2()
 ], CsrfMiddleware);
 
-// src/middlewares/view-context/index.ts
+// src/middlewares/view-context/middleware.ts
 import { Inject, Injectable as Injectable3, Logger } from "@nestjs/common";
 import { PLATFORM_HTTP_CLIENT } from "@lark-apaas/nestjs-common";
 
@@ -34606,7 +34574,7 @@ function safeEscape(s) {
 }
 __name(safeEscape, "safeEscape");
 
-// src/middlewares/view-context/index.ts
+// src/middlewares/view-context/middleware.ts
 function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -34657,6 +34625,7 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
     const { userId, tenantId, appId, loginUrl, userType } = req.userContext;
     const csrfToken = req.csrfToken;
     const environment = mapToWindowEnvironment(process.env.FORCE_FRAMEWORK_ENVIRONMENT);
+    const basename = safeEscape(req.headers["x-miaoda-custom-host"] !== void 0 ? "/" : `/app/${appId || ""}`);
     const appPublishedData = await this.getAppPublished(appId);
     const appInfo = appPublishedData?.app_info ?? null;
     req.__platform_data__ = {
@@ -34671,7 +34640,8 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       tenantId,
       environment,
       showBadge: appInfo?.show_badge !== false,
-      appPublished: appPublishedData ?? null
+      appPublished: appPublishedData ?? null,
+      basename
     };
     res.locals = {
       ...res.locals ?? {},
@@ -34684,7 +34654,8 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       appName: safeEscape(appInfo?.app_name ?? "\u5999\u642D\u5E94\u7528"),
       appAvatar: appInfo?.app_avatar ?? "",
       appDescription: safeEscape(appInfo?.app_description ?? ""),
-      environment
+      environment,
+      basename
     };
     next();
   }
@@ -36409,6 +36380,9 @@ var PlatformModule = class _PlatformModule {
           ...options.authz || {}
         }),
         AutomationModule.forRoot(),
+        // 通用内网转发：自动注册 ALL /api/__platform__/http-forward?targetUrl=...
+        // 业务方接入 PlatformModule 后零改动获得内网代理路由
+        HttpForwarderModule.forRoot(options.httpForwarder),
         CapabilityModule.forRoot({
           capabilitiesDir: options.capabilitiesDir,
           enableWatching: process.env.NODE_ENV === "development"
@@ -36552,43 +36526,6 @@ function createLegacyPathRedirectMiddleware() {
 }
 __name(createLegacyPathRedirectMiddleware, "createLegacyPathRedirectMiddleware");
 
-// src/middlewares/local-dev/index.ts
-var CSRF_COOKIE_KEY = "suda-csrf-token";
-var CSRF_HEADER_KEY = "x-suda-csrf-token";
-var WEBUSER_HEADER_KEY = "x-larkgw-suda-webuser";
-function isLocalDev() {
-  if (process.env.NODE_ENV === "production") return false;
-  const flag = process.env.MIAODA_LOCAL_DEV;
-  return flag === "1" || flag === "true";
-}
-__name(isLocalDev, "isLocalDev");
-function extractCsrfFromCookie(cookieHeader) {
-  if (!cookieHeader) return void 0;
-  const re = new RegExp(`(?:^|;\\s*)${CSRF_COOKIE_KEY}=([^;]+)`);
-  const m = cookieHeader.match(re);
-  return m?.[1];
-}
-__name(extractCsrfFromCookie, "extractCsrfFromCookie");
-function createLocalDevMiddleware() {
-  let webUserHeader = "";
-  const parsed = parseSudaWebUserEnv(process.env.SUDA_WEBUSER);
-  if (parsed) {
-    webUserHeader = encodeURIComponent(JSON.stringify(parsed));
-  }
-  return /* @__PURE__ */ __name(function localDevMiddleware(req, _res, next) {
-    const headers = req.headers;
-    if (!headers[CSRF_HEADER_KEY]) {
-      const token = extractCsrfFromCookie(req.headers.cookie);
-      if (token) headers[CSRF_HEADER_KEY] = token;
-    }
-    if (webUserHeader && !headers[WEBUSER_HEADER_KEY]) {
-      headers[WEBUSER_HEADER_KEY] = webUserHeader;
-    }
-    next();
-  }, "localDevMiddleware");
-}
-__name(createLocalDevMiddleware, "createLocalDevMiddleware");
-
 // src/setup.ts
 var DEFAULT_BODY_LIMIT = "1mb";
 var defaultPerms = {
@@ -36606,9 +36543,6 @@ async function configureApp(app, perms = defaultPerms) {
     extended: true
   }));
   app.use(cookieParser());
-  if (isLocalDev()) {
-    app.use(createLocalDevMiddleware());
-  }
   app.use(createLegacyPathRedirectMiddleware());
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   app.setGlobalPrefix(globalPrefix);
@@ -36658,9 +36592,7 @@ export {
   UserContextMiddleware,
   ViewContextMiddleware,
   configureApp,
-  createLegacyPathRedirectMiddleware,
-  createLocalDevMiddleware,
-  isLocalDev
+  createLegacyPathRedirectMiddleware
 };
 /*! Bundled license information:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/fullstack-nestjs-core",
-  "version": "1.1.51-alpha.6",
+  "version": "1.1.51",
   "description": "FullStack Nestjs Core",
   "type": "module",
   "main": "./dist/index.js",
@@ -40,20 +40,20 @@
   },
   "dependencies": {
     "@lark-apaas/file-service": "^0.1.2",
-    "@lark-apaas/http-client": "0.1.7-alpha.6",
-    "@lark-apaas/nestjs-authnpaas": "^1.0.3",
-    "@lark-apaas/nestjs-authzpaas": "^0.1.8",
-    "@lark-apaas/nestjs-capability": "^0.1.13",
-    "@lark-apaas/nestjs-common": "^0.1.8",
-    "@lark-apaas/nestjs-datapaas": "^1.0.20",
-    "@lark-apaas/nestjs-logger": "^1.0.16",
-    "@lark-apaas/nestjs-observable": "^0.0.11",
+    "@lark-apaas/http-client": "^0.1.6",
+    "@lark-apaas/nestjs-authnpaas": "^1.0.4",
+    "@lark-apaas/nestjs-authzpaas": "^0.1.9",
+    "@lark-apaas/nestjs-capability": "^0.1.14",
+    "@lark-apaas/nestjs-common": "^0.1.9",
+    "@lark-apaas/nestjs-datapaas": "^1.0.21",
+    "@lark-apaas/nestjs-http-forwarder": "^0.1.3",
+    "@lark-apaas/nestjs-logger": "^1.0.17",
+    "@lark-apaas/nestjs-observable": "^0.0.12",
     "@lark-apaas/nestjs-openapi-devtools": "^1.0.10",
     "@lark-apaas/nestjs-trigger": "^0.0.3",
     "@nestjs/axios": "^4.0.1",
     "axios": "^1.13.2",
-    "cookie-parser": "^1.4.7",
-    "dotenv": "^16.4.5"
+    "cookie-parser": "^1.4.7"
   },
   "devDependencies": {
     "@nestjs/common": "^10.4.20",