@abtnode/constant 1.17.8-beta-20260119-102944-6ba93a16 → 1.17.8-beta-20260125-093329-64b43854

package/index.js

@@ -1,951 +0,0 @@
-const NODE_SERVICES = Object.freeze({
-  AUTH: 'auth',
-});
-
-const ROLES = Object.freeze({
-  OWNER: 'owner',
-  ADMIN: 'admin',
-  MEMBER: 'member',
-  GUEST: 'guest',
-});
-
-const SERVER_ROLES = Object.freeze({
-  ...ROLES,
-  CI: 'ci',
-  CERTIFICATE: 'certificate',
-
-  // blocklet user or sdk. must start with 'blocklet-
-  BLOCKLET_OWNER: 'blocklet-owner',
-  BLOCKLET_ADMIN: 'blocklet-admin',
-  BLOCKLET_MEMBER: 'blocklet-member',
-  BLOCKLET_SDK: 'blocklet-sdk',
-
-  // external user
-  EXTERNAL_BLOCKLET_CONTROLLER: 'external-blocklet-controller',
-  EXTERNAL_BLOCKLETS_MANAGER: 'external-blocklets-manager',
-});
-
-const SERVICES_ROLES = Object.freeze({
-  BLOCKLET_GUEST: 'blocklet-guest',
-});
-
-const BLOCKLET_ROLES = [
-  SERVER_ROLES.BLOCKLET_OWNER,
-  SERVER_ROLES.BLOCKLET_ADMIN,
-  SERVER_ROLES.BLOCKLET_MEMBER,
-  SERVER_ROLES.BLOCKLET_SDK,
-];
-
-const isBlockletRole = (role) => role && BLOCKLET_ROLES.includes(role);
-const isSystemRole = (role) => role && ROLES[(role || '').toUpperCase()];
-
-const BLOCKLET_MULTIPLE_TENANT_ROLES = [
-  SERVER_ROLES.BLOCKLET_OWNER,
-  SERVER_ROLES.BLOCKLET_ADMIN,
-  SERVER_ROLES.BLOCKLET_MEMBER,
-  SERVER_ROLES.BLOCKLET_SDK,
-  SERVICES_ROLES.BLOCKLET_GUEST,
-];
-
-const isBlockletMultipleTenantRole = (role) => role && BLOCKLET_MULTIPLE_TENANT_ROLES.includes(role);
-
-const AUTH_CERT_TYPE = {
-  USER: 'user',
-  OWNERSHIP_NFT: 'ownership_nft',
-  BLOCKLET_USER: 'blocklet_user',
-  BLOCKLET_CONTROLLER: 'blocklet_controller',
-};
-
-const RBAC_CONFIG = {
-  roles: Object.freeze([
-    {
-      name: SERVER_ROLES.OWNER,
-      title: 'Owner',
-      description: 'Has full administrative access to the Blocklet Server',
-      passport: true,
-    },
-    {
-      name: SERVER_ROLES.ADMIN,
-      title: 'Admin',
-      description:
-        'Has full permissions to manage blocklet and Blocklet Server such as install/remove/start/stop blocklet, manage blocklet URL mapping and certificates, manage blocklet team, manage node integrations and access keys, upgrade node to a new version',
-      passport: true,
-    },
-    {
-      name: SERVER_ROLES.MEMBER,
-      title: 'Member',
-      description:
-        'Has permissions to manage blocklets, such as install/remove/start/stop blocklet, manage blocklet URL mapping and certificates',
-      passport: true,
-    },
-    {
-      name: SERVER_ROLES.GUEST,
-      title: 'Guest',
-      description: 'Has all read permissions on Blocklet Server',
-      passport: true,
-    },
-    {
-      name: SERVER_ROLES.CI,
-      title: 'CI',
-      description: 'Deploy blocklet to Blocklet Server',
-      passport: true,
-      noHuman: true,
-    },
-    {
-      name: SERVER_ROLES.CERTIFICATE,
-      title: 'Certificate',
-      description: 'Manage https certificates for blocklets on the Blocklet Server',
-      noHuman: true,
-    },
-    {
-      name: SERVER_ROLES.BLOCKLET_OWNER,
-      title: 'Blocklet Owner',
-    },
-    {
-      name: SERVER_ROLES.BLOCKLET_ADMIN,
-      title: 'Blocklet Admin',
-    },
-    {
-      name: SERVER_ROLES.BLOCKLET_MEMBER,
-      title: 'Blocklet Member',
-    },
-    {
-      name: SERVER_ROLES.BLOCKLET_SDK,
-      title: 'Blocklet SDK',
-    },
-    {
-      name: SERVER_ROLES.EXTERNAL_BLOCKLET_CONTROLLER,
-      title: 'External Blocklet Controller',
-    },
-    {
-      name: SERVER_ROLES.EXTERNAL_BLOCKLETS_MANAGER,
-      title: 'External Blocklets Manager',
-      description: 'Manage external blocklets in the Blocklet Server',
-      noHuman: true,
-    },
-  ]),
-  permissions: Object.freeze([
-    {
-      name: 'query_node',
-      description:
-        'View node data, include dashboard and node settings, log stream for both Blocklet Server and blocklets',
-    },
-    {
-      name: 'mutate_node',
-      description: 'Change node settings, upgrade node to a new version',
-    },
-    {
-      name: 'query_session',
-      description: 'Get data from a long running session',
-    },
-    {
-      name: 'mutate_session',
-      description: 'Start/update/end a long running session',
-    },
-    {
-      name: 'query_accessKey',
-      description: 'View access keys for Blocklet Server',
-    },
-    {
-      name: 'mutate_accessKey',
-      description: 'Manage access keys for server and blocklets, such as create/update/delete',
-    },
-    {
-      name: 'query_team',
-      description: 'View team data(members/roles/permissions) for Blocklet Server and blocklets',
-    },
-    {
-      name: 'mutate_team',
-      description: 'Manage team data(members/roles/permissions) for Blocklet Server and blocklets',
-    },
-    {
-      name: 'query_blocklets',
-      description: 'View store and installed blocklets, including blocklet runtime configuration, domains and urls',
-    },
-    {
-      name: 'mutate_blocklets',
-      description: 'Perform state changing actions on blocklets, such as install/upgrade/config/start/stop/remove',
-    },
-    {
-      name: 'query_router',
-      description: 'View sites, URL mapping and certificates in service gateway',
-    },
-    {
-      name: 'mutate_router',
-      description: 'Manage sites, URL mapping and certificates in service gateway',
-    },
-    {
-      name: 'query_certificate',
-      description: 'View certificates in service gateway',
-    },
-    {
-      name: 'mutate_certificate',
-      description: 'Manage certificates in service gateway',
-    },
-    {
-      name: 'query_notification',
-      description: 'View notifications',
-    },
-    {
-      name: 'mutate_notification',
-      description: 'Manage notifications, such as mark notifications as read',
-    },
-    {
-      name: 'query_webhook',
-      description: 'View integrations',
-    },
-    {
-      name: 'mutate_webhook',
-      description: 'Manage integrations',
-    },
-    // query_blocklet, mutate_blocklet are only for blocklet members
-    {
-      name: 'query_blocklet',
-      description: 'View a blocklet, including blocklet runtime configuration, domains and urls',
-    },
-    {
-      name: 'mutate_blocklet',
-      description: 'Perform state changing actions on a blocklet, such as upgrade/config/start/stop',
-    },
-  ]),
-  grants: Object.freeze({
-    [SERVER_ROLES.GUEST]: [
-      'query_blocklets',
-      'query_router',
-      'query_webhook',
-      'query_notification',
-      'query_team',
-      'query_accessKey',
-      'query_node',
-      'query_session',
-    ],
-    [SERVER_ROLES.MEMBER]: [
-      SERVER_ROLES.GUEST,
-      'mutate_blocklets',
-      'mutate_router',
-      'mutate_notification',
-      'mutate_session',
-    ],
-    [SERVER_ROLES.ADMIN]: [
-      SERVER_ROLES.MEMBER,
-      'mutate_team',
-      'mutate_webhook',
-      'mutate_accessKey',
-      'mutate_node',
-      'mutate_certificate',
-    ],
-    [SERVER_ROLES.OWNER]: [ROLES.ADMIN],
-    [SERVER_ROLES.CI]: ['query_blocklets', 'mutate_blocklets'],
-    [SERVER_ROLES.CERTIFICATE]: ['query_certificate', 'mutate_certificate'],
-
-    // blocklet app or blocklet user
-    [SERVER_ROLES.BLOCKLET_SDK]: ['query_team', 'mutate_team', 'query_blocklet', 'query_accessKey', 'mutate_accessKey'],
-    [SERVER_ROLES.BLOCKLET_OWNER]: [SERVER_ROLES.BLOCKLET_ADMIN],
-    [SERVER_ROLES.BLOCKLET_ADMIN]: [
-      SERVER_ROLES.BLOCKLET_MEMBER,
-      'mutate_team',
-      'mutate_accessKey',
-      'mutate_blocklet',
-      'mutate_notification',
-    ],
-    [SERVER_ROLES.BLOCKLET_MEMBER]: ['query_team', 'query_blocklet', 'query_notification', 'query_accessKey'],
-
-    // external user
-    [SERVER_ROLES.EXTERNAL_BLOCKLET_CONTROLLER]: ['query_blocklets', 'mutate_blocklets'],
-    [SERVER_ROLES.EXTERNAL_BLOCKLETS_MANAGER]: ['query_blocklets', 'mutate_blocklets', 'query_node'],
-  }),
-};
-
-const DAY_IN_MS = 24 * 60 * 60 * 1000;
-
-const EVENTS = {
-  NOTIFICATION_CREATE: 'notification.create',
-  NOTIFICATION_READ: 'notification.read',
-  NOTIFICATION_BLOCKLET_READ: 'blocklet.notification.read',
-  NOTIFICATION_BLOCKLET_CREATE: 'notification.blockletCreate',
-  NOTIFICATION_BLOCKLET_UPDATE: 'notification.blockletUpdate',
-  ROUTING_UPDATED: 'routing.updated',
-  NODE_UPDATED: 'node.updated',
-  NODE_MAINTAIN_PROGRESS: 'node.upgrade.progress',
-  NODE_STARTED: 'node.started',
-  NODE_STOPPED: 'node.stopped',
-  NODE_ADDED_OWNER: 'node.addedOwner',
-  NODE_RUNTIME_INFO: 'node.runtimeInfo',
-  BLOCKLETS_RUNTIME_INFO: 'node.blockletsRuntimeInfo',
-  DOMAIN_STATUS: 'domain.status',
-  CERT_ADDED: 'cert.added',
-  CERT_ISSUED: 'cert.issued',
-  CERT_UPDATED: 'cert.updated',
-  CERT_REMOVED: 'cert.removed',
-  CERT_ERROR: 'cert.error',
-  RELOAD_GATEWAY: 'gateway.reload',
-  NOTIFICATION_CREATE_QUEUED: 'notification.create.queued',
-  UPDATE_DOMAIN_ALIAS: 'router.domain.alias.updated',
-
-  WEBHOOK_ATTEMPT: 'webhook.attempt',
-};
-
-const WHO_CAN_ACCESS = Object.freeze({
-  OWNER: 'owner',
-  ADMIN: 'admin',
-  INVITED: 'invited',
-  ALL: 'all',
-});
-
-const TEST_STORE_URL = 'https://test.store.blocklet.dev';
-const BLOCKLET_STORE_URL = 'https://store.blocklet.dev';
-const BLOCKLET_STORE_URL_DEV = 'https://dev.store.blocklet.dev';
-const MAIN_CHAIN_ENDPOINT = 'https://main.abtnetwork.io/api/';
-
-const USER_TYPE = Object.freeze({
-  DERIVED: 'derived',
-  WALLET: 'wallet',
-});
-
-const BACKUPS = {
-  STATUS: {
-    PROGRESS: null,
-    SUCCEEDED: 0,
-    FAILED: 1,
-  },
-  // 备份的超时时间是 6 小时
-  TIMEOUT_HOURS: 6,
-  // 备份策略
-  STRATEGY: {
-    // 自动备份
-    AUTO: 0,
-    // 手动备份
-    MANUAL: 1,
-  },
-  JOB: {
-    // 自动备份的时间间隔,单位为 s,目前是间隔2个小时
-    INTERVAL: 2 * 60 * 60,
-  },
-};
-
-const CHECK_UPDATE = {
-  STATUS: {
-    PROGRESS: null,
-    SUCCEEDED: 0,
-    FAILED: 1,
-  },
-  // 备份的超时时间是 6 小时
-  TIMEOUT_HOURS: 6,
-  // 备份策略
-  STRATEGY: {
-    // 自动备份
-    AUTO: 0,
-    // 手动备份
-    MANUAL: 1,
-  },
-  JOB: {
-    // 自动备份的时间间隔,单位为 s,目前是间隔2个小时
-    INTERVAL: 2 * 60 * 60,
-    // 1 天
-    DAY_INTERVAL: 24 * 60 * 60,
-  },
-};
-
-// 10s 上报统计一次
-const MONITOR_RECORD_INTERVAL_SEC = 20;
-
-// 保存当天数据, 每天上报 8640 次
-const MONITOR_HISTORY_LENGTH = 86400 / MONITOR_RECORD_INTERVAL_SEC;
-
-const FEDERATED = {
-  SYNC_LIMIT: 30,
-};
-
-const ROUTING_RESPONSE_TYPES = [
-  {
-    text: 'Plain Text',
-    value: 'text/plain',
-  },
-  {
-    text: 'JSON',
-    value: 'application/json',
-  },
-  {
-    text: 'XML',
-    value: 'application/xml',
-  },
-  {
-    text: 'HTML Document',
-    value: 'text/html',
-  },
-  {
-    text: 'YAML',
-    value: 'application/x-yaml',
-  },
-  {
-    text: 'TOML',
-    value: 'application/toml',
-  },
-  {
-    text: 'CSS',
-    value: 'text/css',
-  },
-  {
-    text: 'JavaScript',
-    value: 'application/javascript',
-  },
-  {
-    text: 'CSV',
-    value: 'text/csv',
-  },
-  {
-    text: 'Markdown',
-    value: 'text/markdown',
-  },
-  {
-    text: 'SVG',
-    value: 'image/svg+xml',
-  },
-];
-
-const SERVERLESS_BLOCKLET_DATA_RETENTION_DAYS = 30;
-
-const LAUNCH_SESSION_STATUS = Object.freeze({
-  created: 0,
-  selected: 10,
-  connected: 20,
-  timeout: 25,
-  paid: 30,
-  nftMinted: 35,
-  allocated: 40,
-  consuming: 46,
-  installed: 50,
-  overdue: 60,
-  canceled: 65,
-  terminated: 70,
-  transferred: 90,
-});
-
-// security rule relates
-const SECURITY_RULE_DEFAULT_ID = 'default';
-const ACCESS_POLICY_PUBLIC = 'public';
-const ACCESS_POLICY_INVITED_ONLY = 'invited-only';
-const ACCESS_POLICY_OWNER_ONLY = 'owner-only';
-const ACCESS_POLICY_ADMIN_ONLY = 'admin-only';
-const RESPONSE_HEADER_POLICY_SIMPLE_CORS = 'simple-cors';
-const RESPONSE_HEADER_POLICY_SECURITY_HEADER = 'security-header';
-const RESPONSE_HEADER_POLICY_SIMPLE_CORS_AND_SECURITY_HEADER = 'simple-cors-and-security-header';
-
-const EVENT_BUS_EVENT = 'event-bus';
-
-const NAVIGATION_I18N_FIELDS = Object.freeze(['title', 'description', 'link']);
-
-// NOTICE: keep sync with @blocklet/constant
-const USER_SESSION_STATUS = {
-  ONLINE: 'online',
-  OFFLINE: 'offline',
-  EXPIRED: 'expired',
-};
-
-module.exports = Object.freeze({
-  // Blocklet Server
-  NODE_MODES: Object.freeze({
-    PRODUCTION: 'production',
-    DEBUG: 'debug',
-    MAINTENANCE: 'maintenance',
-    SERVERLESS: 'serverless',
-  }),
-
-  DEFAULT_DESCRIPTION: 'Web Interface to manage your Blocklet Server',
-
-  NODE_MAINTAIN_PROGRESS: Object.freeze({
-    SETUP: 'setup', // backup
-    INSTALLING: 'installing',
-    VERIFYING: 'verifying',
-    RESTARTING: 'restarting',
-    CLEANUP: 'cleanup',
-    COMPLETE: 'complete',
-    ROLLBACK: 'rollback',
-  }),
-
-  VC_TYPE_BLOCKLET_PURCHASE: 'BlockletPurchaseCredential',
-  VC_TYPE_NODE_PASSPORT: 'ABTNodePassport',
-  VC_TYPE_GENERAL_PASSPORT: 'NFTPassport',
-
-  NFT_TYPE_SERVER_OWNERSHIP: 'BlockletServerOwnershipNFT',
-  NFT_TYPE_SERVERLESS: 'BlockletServerServerlessNFT',
-
-  NODE_PACKAGE_NAME: '@abtnode/cli', // deprecated in 1.6.0
-  NODE_COMMAND_NAME: 'abtnode', // deprecated in 1.6.0
-  NODE_DATA_DIR_NAME: '_abtnode',
-  USER_AVATAR_DIR: '/.assets/avatar',
-  USER_AVATAR_URL_PREFIX: 'bn://avatar',
-  USER_AVATAR_PATH_PREFIX: '/user/avatar',
-  USER_MAX_INVITE_DEPTH: 8,
-
-  PROCESS_NAME_DAEMON: 'abt-node-daemon',
-  PROCESS_NAME_PROXY: 'abt-node-db-hub',
-  PROCESS_NAME_UPDATER: 'abt-node-updater',
-  PROCESS_NAME_SERVICE: 'abt-node-service',
-  PROCESS_NAME_ROUTER: 'abt-node-router',
-  PROCESS_NAME_LOG_ROTATE: 'abt-node-log-rotate',
-  PROCESS_NAME_EVENT_HUB: 'abt-node-event-hub',
-  PROCESS_NAME_PM2_EVENT_HUB: 'abt-node-pm2-event-hub',
-  PROCESS_NAME_ORPHAN_CLEANUP: 'abt-node-orphan-cleanup',
-
-  // Process script paths for orphan detection
-  DAEMON_SCRIPT_PATH: 'cli/lib/process/daemon.js',
-  SERVICE_SCRIPT_PATH: 'cli/lib/process/service.js',
-
-  // Orphan process cleanup settings
-  ORPHAN_CHECK_DELAY: 60 * 1000, // 60 seconds - delay before checking for orphan processes
-  ORPHAN_MIN_UPTIME: 60, // 60 seconds - minimum process uptime to be considered orphan
-
-  BLOCKLET_LAUNCHER_URL: 'https://launcher.arcblock.io/',
-  WEB_WALLET_URL: 'https://web.abtwallet.io',
-  TEST_STORE_URL,
-  BLOCKLET_STORE_URL,
-  BLOCKLET_STORE_URL_DEV,
-  BLOCKLET_STORE_DID: 'z8ia29UsENBg6tLZUKi2HABj38Cw1LmHZocbQ',
-  BLOCKLET_STORE_API_PREFIX: '/api',
-  BLOCKLET_STORE_API_BLOCKLET_PREFIX: '/api/blocklets',
-  BLOCKLET_STORE_META_PATH: '/api/store.json',
-  BLOCKLET_STORE: {
-    id: 'zNKqX7D8ZAYa77HgzpoFfnV3BFbcmSRrE9aT',
-    name: 'Official Store',
-    description: 'ArcBlock official store for production ready blocklets',
-    url: BLOCKLET_STORE_URL,
-    logoUrl: '/logo.png',
-    maintainer: 'arcblock',
-  },
-  BLOCKLET_STORE_DEV: {
-    id: 'zNKmfUatDhzfMVACfr3u97eqndj8f1yXXw3m',
-    name: 'Dev Store',
-    description: 'ArcBlock official store for demo and example blocklets',
-    url: BLOCKLET_STORE_URL_DEV,
-    maintainer: 'arcblock',
-    logoUrl: '/logo.png',
-  },
-  BLOCKLET_TEST_STORE: {
-    id: 'zNKirQVRx4xbyTPMkvH3kguRfofTJana8WBK',
-    name: 'Test Store',
-    description: 'ArcBlock official store for non-production ready blocklets',
-    url: TEST_STORE_URL,
-    maintainer: 'arcblock',
-    logoUrl: '/logo.png',
-  },
-
-  // application is a container, components have no hierarchy and are tiled in application
-  APP_STRUCT_VERSION: '2',
-
-  DEFAULT_DID_REGISTRY: 'https://registry.abtnet.io',
-  DEFAULT_SLP_DOMAIN: 'slp.abtnet.io',
-  DEFAULT_DID_DOMAIN: 'did.abtnet.io',
-  DEFAULT_IP_DOMAIN: '*.ip.abtnet.io',
-  DEFAULT_IP_DOMAIN_SUFFIX: 'ip.abtnet.io',
-  DEFAULT_WILDCARD_CERT_HOST: 'https://releases.arcblock.io/',
-  DEFAULT_NFT_DOMAIN_URL: 'https://domain.didlabs.org/',
-
-  DEFAULT_CERTIFICATE_EMAIL: 'certs@arcblock.io',
-
-  CONFIG_FILENAME: 'config.yml',
-  CONFIG_FILENAME_OLD: 'abtnode.yml',
-  CONFIG_FOLDER_NAME: '.blocklet-server',
-  CONFIG_FOLDER_NAME_OLD: '.abtnode',
-  EXPORTED_FOLDER_NAME: 'exported_blocklet_server',
-
-  DEFAULT_WELLKNOWN_PORT: 8088,
-
-  StatusCode: Object.freeze({
-    ok: 0,
-
-    blocklet_not_found: 1,
-    blocklet_not_purchased: 2,
-
-    forbidden: 403,
-    internal: 500,
-    timeout: 504,
-  }),
-
-  // Service Gateway
-  // eslint-disable-next-line prefer-regex-literals
-  IP: new RegExp('-(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)(?:\\-(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]\\d|\\d)){3}'),
-  DOMAIN_FOR_IP_SITE: '',
-  DOMAIN_FOR_IP_SITE_REGEXP: `~^\\d+.\\d+.\\d+.\\d+$`, // eslint-disable-line
-  DOMAIN_FOR_DEFAULT_SITE: '*',
-  DOMAIN_FOR_INTERNAL_SITE: '127.0.0.1',
-  NAME_FOR_WELLKNOWN_SITE: 'wellknown',
-  WELLKNOWN_PATH_PREFIX: '/.well-known',
-  WELLKNOWN_ACME_CHALLENGE_PREFIX: '/.well-known/acme-challenge',
-  WELLKNOWN_DID_RESOLVER_PREFIX: '/.well-known/did.json', // server wellknown endpoint
-  WELLKNOWN_OAUTH_SERVER: '/.well-known/oauth-authorization-server',
-  WELLKNOWN_OPENID_SERVER: '/.well-known/openid-configuration',
-  WELLKNOWN_BLACKLIST_PREFIX: '/.well-known/blacklist',
-  WELLKNOWN_PING_PREFIX: '/.well-known/ping',
-  WELLKNOWN_ANALYTICS_PREFIX: '/.well-known/analytics',
-  WELLKNOWN_SERVICE_PATH_PREFIX: '/.well-known/service',
-  WELLKNOWN_BLOCKLET_ADMIN_PATH: '/.well-known/service/admin',
-  WELLKNOWN_BLOCKLET_USER_PATH: '/.well-known/service/user',
-  WELLKNOWN_BLOCKLET_HEALTH_PATH: '/.well-known/service/health',
-  WELLKNOWN_BLOCKLET_LOGO_PATH: '/.well-known/service/blocklet/logo',
-  SLOT_FOR_IP_DNS_SITE: '888-888-888-888',
-
-  DEFAULT_ADMIN_PATH: '/admin',
-  WELLKNOWN_SERVER_ADMIN_PATH: '/.well-known/server/admin',
-  DEFAULT_HTTP_PORT: 80,
-  DEFAULT_HTTPS_PORT: 443,
-  MAX_UPLOAD_FILE_SIZE: 100, // unit: MB
-  DEFAULT_DAEMON_PORT: 8089,
-  MAX_NGINX_WORKER_CONNECTIONS: 10240,
-
-  BLOCKLET_PROXY_PATH_PREFIX: '/.blocklet/proxy',
-  BLOCKLET_SITE_GROUP_SUFFIX: '.blocklet-domain-group',
-
-  // Time and dates
-  DAY_IN_MS,
-  DAEMON_MAX_MEM_LIMIT_IN_MB: 800,
-  BLOCKLET_MAX_MEM_LIMIT_IN_MB: 800,
-  CERTIFICATE_EXPIRES_OFFSET: 10 * DAY_IN_MS,
-  ROUTING_RESPONSE_TYPES,
-  ROUTING_RULE_TYPES: Object.freeze({
-    NONE: 'none',
-    DAEMON: 'daemon',
-    SERVICE: 'service',
-    BLOCKLET: 'blocklet',
-    REDIRECT: 'redirect',
-    GENERAL_REWRITE: 'rewrite',
-    GENERAL_PROXY: 'general_proxy',
-    DIRECT_RESPONSE: 'direct_response',
-    COMPONENT: 'component',
-  }),
-
-  // Team
-  ROLES,
-  SERVER_ROLES,
-  BLOCKLET_ROLES,
-  isBlockletRole,
-  isSystemRole,
-  isBlockletMultipleTenantRole,
-  AUTH_CERT_TYPE,
-  RBAC_CONFIG,
-  genPermissionName: (resource, action = 'access') => `${action}_${resource.replace('_', '-')}`, // resource cannot include '_'
-
-  PASSPORT_STATUS: {
-    VALID: 'valid',
-    REVOKED: 'revoked',
-    EXPIRED: 'expired',
-  },
-
-  // Service
-  NODE_SERVICES,
-
-  DISK_ALERT_THRESHOLD_PERCENT: 80,
-
-  // EVENTS
-  EVENTS,
-
-  WHO_CAN_ACCESS,
-  WHO_CAN_ACCESS_PREFIX_ROLES: 'roles:',
-
-  GATEWAY_RATE_LIMIT: { min: 5, max: 500 },
-  GATEWAY_RATE_LIMIT_BURST_FACTOR: { min: 1, max: 10 },
-  GATEWAY_RATE_LIMIT_GLOBAL: { min: 100, max: 5000 },
-  GATEWAY_RATE_LIMIT_METHODS: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS', 'HEAD'],
-
-  // Store
-  STORE_DETAIL_PAGE_PATH_PREFIX: '/blocklets',
-
-  MAX_USER_PAGE_SIZE: 100,
-  // 默认最大 page size
-  MAX_PAGE_SIZE: 100,
-
-  SERVER_STATUS: {
-    RUNNING: 1,
-    STOPPED: 2,
-    START_FROM_CRASH: 3,
-  },
-
-  LOG_RETAIN_IN_DAYS: 60,
-
-  BLOCKLET_INSTALL_TYPE: {
-    STORE: 'store',
-    URL: 'url',
-    DEV: 'dev',
-    CREATE: 'create',
-    RESTORE: 'restore',
-  },
-
-  // @link https://docs.nginx.com/nginx/admin-guide/content-cache/content-caching/
-  // @link https://www.sheshbabu.com/posts/nginx-caching-proxy/
-  // @link https://www.nginx.com/blog/nginx-caching-guide/
-  ROUTER_CACHE_GROUPS: {
-    blockletProxy: {
-      minSize: '10m',
-      maxSize: '10g',
-      period: '30d',
-    },
-    // TODO: disabled because we can not bust nginx cache effectively for now
-    // blockletJs: {
-    //   minSize: '1m',
-    //   maxSize: '64m',
-    //   period: '5m',
-    // },
-  },
-
-  MAIN_CHAIN_ENDPOINT,
-  USER_TYPE,
-  SERVER_CACHE_TTL: 300 * 1000, // 5 minutes
-  RBAC_CACHE_TTL: 300 * 1000, // 5 minutes
-  BLOCKLET_CACHE_TTL: 300 * 1000, // 5 minutes
-  SESSION_CACHE_TTL: 3600, // 1h: unit seconds
-  SESSION_TTL: 7 * 86400, // 7d: unit seconds
-
-  BACKUPS,
-
-  CHECK_UPDATE,
-
-  MONITOR_HISTORY_LENGTH,
-  MONITOR_RECORD_INTERVAL_SEC,
-
-  INSTALL_ACTIONS: {
-    INSTALL: 'install',
-    INSTALL_COMPONENT: 'installComponent',
-    UPGRADE_COMPONENT: 'upgradeComponent',
-  },
-
-  COPYRIGHT_OWNER: 'ArcBlock',
-  FEDERATED,
-  SESSION_TOKEN_STORAGE_KEY: 'login_token',
-  REFRESH_TOKEN_STORAGE_KEY: 'refresh_token',
-  SERVERLESS_BLOCKLET_DATA_RETENTION_DAYS,
-  LAUNCH_SESSION_STATUS,
-  UNOWNED_DID: 'z'.repeat(35),
-
-  STUDIO_CONNECTED_STORE: 'studio_connected_store',
-  STUDIO_CONNECTED_AND_DEVELOPED: 'studio_connected_and_developed',
-
-  VERIFY_CODE_LENGTH: 6,
-  VERIFY_CODE_TTL: 30 * 60 * 1000,
-  VERIFY_SEND_TTL: 1 * 60 * 1000,
-
-  SECURITY_RULE_DEFAULT_ID,
-  ACCESS_POLICY_PUBLIC,
-  ACCESS_POLICY_INVITED_ONLY,
-  ACCESS_POLICY_OWNER_ONLY,
-  ACCESS_POLICY_ADMIN_ONLY,
-  RESPONSE_HEADER_POLICY_SIMPLE_CORS,
-  RESPONSE_HEADER_POLICY_SECURITY_HEADER,
-  RESPONSE_HEADER_POLICY_SIMPLE_CORS_AND_SECURITY_HEADER,
-
-  // 无论如何都需要二次验证的接口
-  MFA_PROTECTED_METHODS: [
-    'deleteBlocklet',
-    'deleteComponent',
-    'rotateSessionKey',
-    'upgradeNodeVersion',
-    'removeUser',
-    'updateUserApproval',
-    'deleteRoutingRule',
-    'deleteDomainAlias',
-    'deleteCertificate',
-    'deleteAccessKey',
-    'deleteWebHook',
-    'deleteBlockletSecurityRule',
-    'deleteBlockletResponseHeaderPolicy',
-    'deleteBlockletAccessPolicy',
-    'configVault',
-    'removeOrgMember',
-    'deleteOrg',
-  ],
-
-  // 如果是 multiple tenant 的情况下, 这些白名单不会验证 RBAC
-  STUDIO_ALLOWED_METHODS: {
-    getBlocklet: true,
-    createProject: true,
-    getProjects: true,
-    getProject: true,
-    updateProject: true,
-    deleteProject: true,
-    getReleases: true,
-    getRelease: true,
-    createRelease: true,
-    deleteRelease: true,
-    addBlockletStore: true,
-    deleteBlockletStore: true,
-    publishToStore: true,
-    connectToStore: true,
-    connectByStudio: true,
-    disconnectFromStore: true,
-    getSelectedResources: true,
-    updateSelectedResources: true,
-    // FIXME: 梁柱, 下面两个 get 接口, 可以不开放但是前端需要根据情况取消获取这两个接口的调用
-    getBlockletRuntimeHistory: true,
-    checkDomains: true,
-    isDidDomain: true,
-  },
-  SDK_ALLOWED_METHODS: {
-    configBlocklet: true,
-    configNavigations: true,
-    addRoutingRule: true,
-    updateRoutingRule: true,
-    deleteRoutingRule: true,
-  },
-  // 这些接口可以跳过 ACCESS VERIFY
-  SKIP_ACCESS_VERIFY_METHODS: {
-    makeAllNotificationsAsRead: true,
-    readNotifications: true,
-    unreadNotifications: true,
-    launchBlockletByLauncher: true,
-    launchBlockletWithoutWallet: true,
-    backupBlocklet: true,
-    destroySelf: true,
-    connectToAigne: true,
-    disconnectToAigne: true,
-    verifyAigneConnection: true,
-    connectToEndpoint: true,
-    disconnectFromEndpoint: true,
-  },
-  NOTIFICATION_SEND_STATUS: {
-    PENDING: 0, // 待发送
-    SENT: 1, // 已发送
-    FAILED: 2, // 发送失败
-  },
-  NOTIFICATION_SEND_FAILED_REASON: {
-    USER_DISABLED: 'user_disabled', // 用户未开启渠道
-    CHANNEL_UNAVAILABLE: 'channel_unavailable', // 未开启服务
-    CHANNEL_DISABLED: 'channel_disabled', // 开发者未选择此渠道
-    NOT_ONLINE: 'not_online', // 用户未上线 - 只针对于wallet
-  },
-  NOTIFICATION_SEND_CHANNEL: {
-    WALLET: 'app',
-    EMAIL: 'email',
-    PUSH: 'push',
-    WEBHOOK: 'webhook',
-  },
-
-  BLACKLIST_SCOPE: {
-    ROUTER: 'router',
-  },
-
-  EVENT_BUS_EVENT,
-
-  NAVIGATION_I18N_FIELDS,
-
-  PASSPORT_SOURCE: {
-    INVITE: 'invite',
-    ISSUE: 'issue',
-    RECOVER: 'recover',
-    TRUSTED: 'trusted',
-  },
-
-  PASSPORT_LOG_ACTION: {
-    ISSUE: 'issue',
-    REVOKE: 'revoke',
-    APPROVE: 'approve',
-    RECOVER: 'recover',
-    LOGIN: 'login',
-    EXPIRED: 'expired',
-    USED: 'used',
-  },
-
-  PASSPORT_ISSUE_ACTION: {
-    ISSUE_ON_INVITE: 'issueOnInvite',
-    ISSUE_ON_LAUNCH: 'issueOnLaunch',
-    ISSUE_ON_KYC: 'issueOnKyc',
-    ISSUE_ON_RECOVER: 'issueOnRecover',
-    ISSUE_ON_ROTATE_KEY_PAIR: 'issueOnRotateKeyPair',
-    ISSUE_ON_TRANSFER: 'issueOnTransferPassportForBindWallet',
-    ISSUE_ON_BLOCKLET_START: 'issueOnBlockletStart',
-    ISSUE_ON_RECEIVE_TRANSFER_APP_OWNER: 'receiveTransferAppOwner',
-    ISSUE_ON_AUTH0: 'issueOnAuth0',
-    ISSUE_ON_SETUP_APP_OWNER: 'issueOnLaunchSetupAppOwner',
-    ISSUE_ON_EXCHANGE_PASSPORT: 'issueOnExchangePassport',
-    ISSUE_ON_TRUST_PASSPORT: 'issueOnTrustPassport',
-  },
-
-  OAUTH_ENDPOINTS: {
-    AUTHORIZATION: '/authorize',
-    TOKEN: '/token',
-    REGISTRATION: '/register',
-    REVOCATION: '/revoke',
-    USERINFO: '/userinfo',
-    JWKS: '/jwks',
-    LOGOUT: '/logout',
-  },
-  OAUTH_CODE_TTL: 10 * 60, // 10 minutes
-  OAUTH_ACCESS_TOKEN_TTL: 24 * 60 * 60, // 1 day
-  OAUTH_REFRESH_TOKEN_TTL: 30 * 24 * 60 * 60, // 30 days
-  OAUTH_CLIENT_SECRET_TTL: 30 * 24 * 60 * 60, // 90 days
-  OAUTH_SCOPES: {
-    // User scopes
-    'profile:read': 'Read your profile (name, email, avatar)',
-
-    // Blocklet related scopes
-    'blocklet:read': 'Read blocklet information and database',
-    'blocklet:write': 'Manage blocklet components and configuration',
-  },
-  AIGNE_CONFIG_ENCRYPT_SALT: 'AIGNE_CONFIG_ENCRYPT_SALT',
-  ASSET_CDN_HOST: 'https://cdn.blocklet.io',
-  CSP_OFFICIAL_SOURCES: [
-    'https://*.arcblock.io',
-    'https://*.didnames.io',
-    'https://*.didwallet.io',
-    'https://*.abtnetwork.io',
-    'https://*.didspaces.com',
-    'https://*.blocklet.dev',
-    'https://domain.didlabs.org',
-    'https://cdn.blocklet.io',
-  ],
-  CSP_SYSTEM_SOURCES: [
-    'https://*.did.abtnet.io',
-    'https://*.ip.abtnet.io',
-    'https://*.slp.abtnet.io',
-    'https://*.did.life',
-    'https://*.did.rocks',
-  ],
-  CSP_THIRD_PARTY_SOURCES: [
-    'https://cdnjs.cloudflare.com',
-    'https://js.stripe.com',
-    'https://ipapi.co',
-    'https://unpkg.com',
-  ],
-  CSP_ICONIFY_SOURCES: ['https://*.simplesvg.com', 'https://*.iconify.design', 'https://*.unisvg.com'],
-
-  USER_PROFILE_SYNC_FIELDS: [
-    'action', // 表示对该 user 的操作
-    'did',
-    'pk',
-    'avatar',
-    'fullName',
-    'locale',
-    'email',
-    'connectedAccount',
-    'disconnectedAccount',
-    'sourceAppPid',
-    'inviter',
-    'generation',
-    'emailVerified',
-    'phoneVerified',
-    'metadata',
-    'address',
-    'extra',
-  ],
-
-  SITE_SYNC_FIELDS: [
-    'action',
-    'appId',
-    'appPid',
-    'aliasDid',
-    'appName',
-    'appDescription',
-    'appUrl',
-    'aliasDomain',
-    'appLogo',
-    'appLogoRect',
-    'appliedAt',
-    'did',
-    'pk',
-    'serverId',
-    'serverVersion',
-    'version',
-    'isMaster',
-    'status',
-  ],
-  USER_SESSION_STATUS,
-  WEBHOOK_CONSECUTIVE_FAILURES_THRESHOLD: 50,
-});