@abtnode/constant 1.8.34 → 1.8.36

package/index.js

@@ -18,15 +18,31 @@ const SERVER_ROLES = Object.freeze({
   ...ROLES,
   CI: 'ci',
   CERTIFICATE: 'certificate',
-  BLOCKLET: 'blocklet',
+
+  // blocklet user or sdk. must start with 'blocklet-
+  BLOCKLET_OWNER: 'blocklet-owner',
+  BLOCKLET_ADMIN: 'blocklet-admin',
+  BLOCKLET_MEMBER: 'blocklet-member',
+  BLOCKLET_SDK: 'blocklet-sdk',
+
+  // external user
   EXTERNAL_BLOCKLET_CONTROLLER: 'external-blocklet-controller',
   EXTERNAL_BLOCKLETS_MANAGER: 'external-blocklets-manager',
 });
 
+const isBlockletRole = (role) =>
+  role &&
+  [
+    SERVER_ROLES.BLOCKLET_OWNER,
+    SERVER_ROLES.BLOCKLET_ADMIN,
+    SERVER_ROLES.BLOCKLET_MEMBER,
+    SERVER_ROLES.BLOCKLET_SDK,
+  ].includes(role);
+
 const AUTH_CERT_TYPE = {
   USER: 'user',
   OWNERSHIP_NFT: 'ownership_nft',
-  BLOCKLET: 'blocklet',
+  BLOCKLET_USER: 'blocklet_user',
   BLOCKLET_CONTROLLER: 'blocklet_controller',
 };
 
@@ -73,9 +89,20 @@ const RBAC_CONFIG = {
       noHuman: true,
     },
     {
-      name: SERVER_ROLES.BLOCKLET,
-      title: 'Blocklet',
-      // passport: true, // TODO enable this when we support access key for manage single blocklet
+      name: SERVER_ROLES.BLOCKLET_OWNER,
+      title: 'Blocklet Owner',
+    },
+    {
+      name: SERVER_ROLES.BLOCKLET_ADMIN,
+      title: 'Blocklet Admin',
+    },
+    {
+      name: SERVER_ROLES.BLOCKLET_MEMBER,
+      title: 'Blocklet Member',
+    },
+    {
+      name: SERVER_ROLES.BLOCKLET_SDK,
+      title: 'Blocklet SDK',
     },
     {
       name: SERVER_ROLES.EXTERNAL_BLOCKLET_CONTROLLER,
@@ -129,15 +156,11 @@ const RBAC_CONFIG = {
       description: 'Manage team data(members/roles/permissions) for Blocklet Server and blocklets',
     },
     {
-      name: 'manage_blocklet',
-      description: 'Manage a single blocklet',
-    },
-    {
-      name: 'query_blocklet',
+      name: 'query_blocklets',
       description: 'View store and installed blocklets, including blocklet runtime configuration, domains and urls',
     },
     {
-      name: 'mutate_blocklet',
+      name: 'mutate_blocklets',
       description: 'Perform state changing actions on blocklets, such as install/upgrade/config/start/stop/remove',
     },
     {
@@ -172,10 +195,18 @@ const RBAC_CONFIG = {
       name: 'mutate_webhook',
       description: 'Manage integrations',
     },
+    {
+      name: 'query_blocklet',
+      description: 'View a blocklet, including blocklet runtime configuration, domains and urls',
+    },
+    {
+      name: 'mutate_blocklet',
+      description: 'Perform state changing actions on a blocklet, such as upgrade/config/start/stop',
+    },
   ]),
   grants: Object.freeze({
     [SERVER_ROLES.GUEST]: [
-      'query_blocklet',
+      'query_blocklets',
       'query_router',
       'query_webhook',
       'query_notification',
@@ -186,7 +217,7 @@ const RBAC_CONFIG = {
     ],
     [SERVER_ROLES.MEMBER]: [
       SERVER_ROLES.GUEST,
-      'mutate_blocklet',
+      'mutate_blocklets',
       'mutate_router',
       'mutate_notification',
       'mutate_session',
@@ -200,14 +231,18 @@ const RBAC_CONFIG = {
       'mutate_certificate',
     ],
     [SERVER_ROLES.OWNER]: [ROLES.ADMIN],
-    [SERVER_ROLES.CI]: ['query_blocklet', 'mutate_blocklet'],
+    [SERVER_ROLES.CI]: ['query_blocklets', 'mutate_blocklets'],
     [SERVER_ROLES.CERTIFICATE]: ['query_certificate', 'mutate_certificate'],
-    [SERVER_ROLES.BLOCKLET]: ['query_team', 'mutate_team', 'manage_blocklet'],
-    [SERVER_ROLES.EXTERNAL_BLOCKLET_CONTROLLER]: ['query_blocklet', 'mutate_blocklet'],
-    [SERVER_ROLES.EXTERNAL_BLOCKLETS_MANAGER]: ['query_blocklet', 'mutate_blocklet'],
 
-    // for backwards compatibility
-    [NODE_SERVICES.AUTH_SERVICE]: ['query_team', 'mutate_team'],
+    // blocklet app or blocklet user
+    [SERVER_ROLES.BLOCKLET_SDK]: ['query_team', 'mutate_team'],
+    [SERVER_ROLES.BLOCKLET_OWNER]: [SERVER_ROLES.BLOCKLET_ADMIN],
+    [SERVER_ROLES.BLOCKLET_ADMIN]: [SERVER_ROLES.BLOCKLET_MEMBER, 'mutate_team', 'mutate_blocklet'],
+    [SERVER_ROLES.BLOCKLET_MEMBER]: ['query_team', 'query_blocklet'],
+
+    // external user
+    [SERVER_ROLES.EXTERNAL_BLOCKLET_CONTROLLER]: ['query_blocklets', 'mutate_blocklets'],
+    [SERVER_ROLES.EXTERNAL_BLOCKLETS_MANAGER]: ['query_blocklets', 'mutate_blocklets'],
   }),
 };
 
@@ -260,8 +295,8 @@ module.exports = Object.freeze({
   VC_TYPE_NODE_PASSPORT: 'ABTNodePassport',
   VC_TYPE_GENERAL_PASSPORT: 'NFTPassport',
 
-  VC_TYPE_SERVER_SHARE: 'BlockletServerShareCertificate',
   NFT_TYPE_SERVER_OWNERSHIP: 'BlockletServerOwnershipNFT',
+  NFT_TYPE_SERVER_USAGE_CREDENTIAL: 'BlockletServerUsageCredential',
 
   NODE_PACKAGE_NAME: '@abtnode/cli', // deprecated in 1.6.0
   NODE_COMMAND_NAME: 'abtnode', // deprecated in 1.6.0
@@ -332,6 +367,7 @@ module.exports = Object.freeze({
   DEFAULT_HTTPS_PORT: 443,
   MAX_UPLOAD_FILE_SIZE: 500, // unit: MB
   DEFAULT_DAEMON_PORT: 8089,
+  MAX_NGINX_WORKER_CONNECTIONS: 10240,
 
   BLOCKLET_PROXY_PATH_PREFIX: '/.blocklet/proxy',
   BLOCKLET_SITE_GROUP_SUFFIX: '.blocklet-domain-group',
@@ -355,6 +391,7 @@ module.exports = Object.freeze({
   // Team
   ROLES,
   SERVER_ROLES,
+  isBlockletRole,
   AUTH_CERT_TYPE,
   RBAC_CONFIG,
   genPermissionName: (resource, action = 'access') => `${action}_${resource.replace('_', '-')}`, // resource cannot include '_'

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.8.34",
+  "version": "1.8.36",
   "description": "ABT Node constants",
   "main": "index.js",
   "files": [
@@ -20,5 +20,5 @@
   "devDependencies": {
     "jest": "^27.5.1"
   },
-  "gitHead": "c5fbb8e57493db62f212217cfde1980c82f00297"
+  "gitHead": "507e974ce88bad1aa002c593130b32982207f803"
 }