@abtnode/core 1.16.32-beta-93e1a798 → 1.16.32-beta-820e4cfa

package/lib/api/team.js

@@ -421,14 +421,20 @@ class TeamAPI extends EventEmitter {
 
   async updateUser({ teamDid, user }) {
     const state = await this.getUserState(teamDid);
-    const doc = await state.updateUser(user.did, user);
+    const exist = await state.getUserByDid(user.did);
+    const updated = await state.updateUser(user.did, user);
     logger.info('user updated successfully', { teamDid, userDid: user.did });
-    this.emit(TeamEvents.userUpdated, { teamDid, user: doc });
-    if (user.kycChanged) {
+
+    this.emit(TeamEvents.userUpdated, { teamDid, user: updated });
+    const kycChanged =
+      (typeof user.emailVerified === 'boolean' && user.emailVerified !== exist.emailVerified) ||
+      (typeof user.phoneVerified === 'boolean' && user.phoneVerified !== exist.phoneVerified);
+    if (kycChanged) {
       logger.info('user updated with kycChanged', { teamDid, userDid: user.did });
-      this.emit(TeamEvents.userPermissionUpdated, { teamDid, user: doc });
+      this.emit(TeamEvents.userPermissionUpdated, { teamDid, user: updated });
     }
-    return doc;
+
+    return updated;
   }
 
   updateUserExtra(args) {

package/lib/states/user.js

@@ -71,13 +71,15 @@ class User extends ExtendBase {
       throw new Error('user is invalid');
     }
 
-    // create user
-    await this.insert({
+    const newUser = {
       ...user,
       ...(await this._extractInviteInfo(user)),
       sourceProvider: user.sourceProvider || LOGIN_PROVIDER.WALLET,
       approved: !!user.approved,
-    });
+    };
+
+    // create user
+    await this.insert(this._normalizeUser(newUser));
 
     // create passports and connectedAccounts
     await Promise.all((get(user, 'passports') || []).map((x) => this.passport.insert({ ...x, userDid: user.did })));
@@ -103,7 +105,7 @@ class User extends ExtendBase {
     }
 
     // Allow to update inviter only when inviter is not set
-    const pending = cloneDeep(updates);
+    const pending = this._normalizeUser(cloneDeep(updates));
     if (exist.inviter) {
       delete pending.inviter;
     } else {
@@ -659,7 +661,7 @@ SELECT did,inviter,generation FROM UserTree`.trim();
   }
 
   async isEmailUsed(email, verified = false) {
-    const condition = { email };
+    const condition = this._normalizeUser({ email });
     if (verified) {
       condition.emailVerified = true;
     }
@@ -668,13 +670,23 @@ SELECT did,inviter,generation FROM UserTree`.trim();
   }
 
   async isPhoneUsed(phone, verified = false) {
-    const condition = { phone };
+    const condition = this._normalizeUser({ phone });
     if (verified) {
       condition.phoneVerified = true;
     }
     const doc = await this.findOne(condition);
     return phone && !!doc;
   }
+
+  _normalizeUser(user) {
+    if (user.email) {
+      user.email = String(user.email).trim().toLowerCase();
+    }
+    if (user.phone) {
+      user.phone = String(user.phone).trim().toLowerCase().replace(/\s+/g, '').replace(/[()-]/g, '');
+    }
+    return user;
+  }
 }
 
 module.exports = User;

package/lib/states/verify-code.js

@@ -6,18 +6,20 @@ const { VERIFY_CODE_LENGTH, VERIFY_CODE_TTL, VERIFY_SEND_TTL } = require('@abtno
 
 const BaseState = require('./base');
 
-const schema = Joi.string().email().required();
+const schema = Joi.string().email().lowercase().required();
 
 /**
  * @extends BaseState<import('@abtnode/models').VerifyCodeState>
  */
 class VerifyCodeState extends BaseState {
-  async create(subject, scope = 'email') {
+  async create(raw, scope = 'email') {
+    let subject = raw;
     if (scope === 'email') {
-      const { error } = schema.validate(subject);
+      const { error, value } = schema.validate(subject);
       if (error) {
         throw new Error('Invalid email specified when create verify code');
       }
+      subject = value;
     }
 
     const count = await super.remove({ subject, verified: false });
@@ -87,12 +89,12 @@ class VerifyCodeState extends BaseState {
   }
 
   async isVerified(subject) {
-    const doc = await this.findOne({ subject, verified: true });
+    const doc = await this.findOne({ subject: String(subject).trim().toLowerCase(), verified: true });
     return !!doc;
   }
 
   async isSent(subject) {
-    const doc = await this.findOne({ subject, sent: true });
+    const doc = await this.findOne({ subject: String(subject).trim().toLowerCase(), sent: true });
     if (!doc) {
       return false;
     }

package/lib/util/blocklet.js

@@ -346,6 +346,7 @@ const getAppSystemEnvironments = (blocklet, nodeInfo, dataDirs) => {
     BLOCKLET_APP_URL: appUrl,
     BLOCKLET_APP_DATA_DIR: path.join(dataDirs.data, blocklet.meta.name),
     BLOCKLET_APP_TENANT_MODE: result.tenantMode || BLOCKLET_TENANT_MODES.SINGLE,
+    BLOCKLET_APP_SHARE_DIR: path.join(path.join(dataDirs.data, blocklet.meta.name), '.share'),
   };
 };
 
@@ -678,6 +679,8 @@ const startBlockletProcess = async (
         serverSk: nodeEnvironments.ABT_NODE_SK,
       });
 
+      options.env.BLOCKLET_SHARE_DIR = path.join(options.env.BLOCKLET_APP_SHARE_DIR, b.meta.did);
+
       const nextOptions = await parseDockerOptionsFromPm2(options, nodeInfo);
       await pm2.startAsync(nextOptions);
 

package/lib/util/docker/create-docker-image.js

@@ -3,7 +3,7 @@ const path = require('path');
 const { execSync } = require('child_process');
 const logger = require('@abtnode/logger')('@abtnode/core:util:blocklet');
 
-const DOCKER_IMAGE_NAME = 'blocklet-node-app';
+const DOCKER_IMAGE_NAME = 'blocklet-node-v1';
 
 let isCreated = false;
 
@@ -13,67 +13,95 @@ async function createDockerImage() {
   }
   isCreated = true;
 
-  const dir = process.env.ABT_NODE_DATA_DIR;
-  if (!dir) {
-    logger.error('ABT_NODE_DATA_DIR is not set');
-    return;
-  }
-  await fs.mkdir(dir, { recursive: true });
-  // 生成 Dockerfile
-  const uid = process.getuid();
-  const gid = process.getgid();
-  const dockerfilePath = path.join(dir, 'Dockerfile');
-  const dockerfilePathDone = path.join(dir, `Dockerfile.done-${uid}-${gid}`);
-  const [accessDone] = await Promise.allSettled([fs.access(`${dockerfilePathDone}`)]);
-  if (accessDone.status === 'fulfilled') {
-    return;
-  }
-  const dockerfileContent = `
-  FROM node:22-alpine
-
-  
-  # RUN apk add --no-cache shadow
-  RUN apk add --no-cache socat
-  
-  RUN node -v
-  RUN npm i -g pnpm
-  RUN npm i -g nr
-  
-  # 使用主机用户的 home 目录
-  WORKDIR /blocklet
-  
-  RUN mkdir -p /blocklet/app
-  RUN mkdir -p /blocklet/data
-  RUN mkdir -p /blocklet/logs
-  RUN mkdir -p /blocklet/cache
-  RUN mkdir -p /data/bin/meilisearch
-  RUN chmod -R 775 /blocklet
-  RUN chown -R ${uid}:${gid} /blocklet
-  RUN chown -R ${uid}:${gid} /data/bin/meilisearch
-  # USER ${uid}:${gid}
-  `;
+  const runner = async () => {
+    const dir = process.env.ABT_NODE_DATA_DIR;
+    if (!dir) {
+      logger.error('ABT_NODE_DATA_DIR is not set');
+      return;
+    }
+    // 生成 Dockerfile
+    const uid = process.getuid();
+    const gid = process.getgid();
+    const dockerfilePath = path.join(dir, 'Dockerfile');
+    const dockerfilePathDone = path.join(dir, `Dockerfile.done-${DOCKER_IMAGE_NAME}-${uid}-${gid}`);
+    const [accessDone] = await Promise.allSettled([fs.access(`${dockerfilePathDone}`)]);
+    if (accessDone.status === 'fulfilled') {
+      return;
+    }
+    const dockerfileContent = `
+# Base image
+FROM node:22-alpine
 
-  try {
-    await fs.access(dockerfilePath);
-    await fs.unlink(dockerfilePath);
-  } catch (_) {
-    // File doesn't exist, no need to remove
-  }
+# Install necessary packages
+RUN apk add --no-cache python3 make gcc g++ build-base socat curl gnupg wget su-exec shadow git ca-certificates
+
+# Create a symlink for python if necessary
+RUN ln -sf /usr/bin/python3 /usr/bin/python
+
+
+# RUN install --verbose --directory --owner blocklet --group blocklet --mode 3777 /var/run/blocklet
+
+ENV DOCKER_DATA /var/lib/blocklet
+VOLUME /var/lib/blocklet
+
+RUN mkdir -p /var/lib/blocklet
+# RUN chown -R blocklet:blocklet /var/lib/blocklet
+
+# Environment variables
+ENV NPM_CONFIG_CACHE=/var/lib/blocklet/.npm
+
+# Set appropriate ownership and permission
+RUN mkdir -p /var/lib/blocklet/.npm
+RUN mkdir -p /var/lib/blocklet/logs
+RUN mkdir -p /var/lib/blocklet/cache
+RUN mkdir -p /var/lib/blocklet/data
+RUN mkdir -p /var/lib/blocklet/blocklets
+RUN chmod -R 777 /var/lib/blocklet
+
+# Install global npm packages
+RUN npm install -g pnpm nr
+
+# Ensure correct PATH
+ENV PATH=/sbin:$PATH
+
+# Set working directory
+WORKDIR /var/lib/blocklet
+
+    `.trim();
+
+    try {
+      await fs.access(dockerfilePath);
+      await fs.unlink(dockerfilePath);
+    } catch (_) {
+      // File doesn't exist, no need to remove
+    }
+
+    await fs.writeFile(dockerfilePath, dockerfileContent);
+    try {
+      execSync(
+        `docker build -f ${path.join(dir, 'Dockerfile')} --no-cache --build-arg uid=$(id -u) --build-arg gid=$(id -g) -t ${DOCKER_IMAGE_NAME} .`,
+        {
+          stdio: 'inherit',
+          encoding: 'utf-8',
+        }
+      );
+    } catch (error) {
+      // 如果 docker 会报错: ERROR: failed to solve: failed to read dockerfile: open /var/snap/docker/common/var-lib-docker/tmp/buildkit-mount875872699/Dockerfile: no such file or directory
+      // 表示 docker 没有权限访问 ABT_NODE_DATA_DIR 目录, 后续的一系列操作也会失败
+      logger.error('Failed to build Docker image. Error:', error.message);
+      throw error;
+    }
+    await fs.rename(dockerfilePath, dockerfilePathDone);
+    logger.info('Success build docker image');
+  };
 
-  await fs.writeFile(dockerfilePath, dockerfileContent);
   try {
-    execSync(`docker build -f ${path.join(dir, 'Dockerfile')} --no-cache -t ${DOCKER_IMAGE_NAME} .`, {
-      stdio: 'inherit',
-      encoding: 'utf-8',
-    });
+    await runner();
   } catch (error) {
-    // 如果 docker 会报错: ERROR: failed to solve: failed to read dockerfile: open /var/snap/docker/common/var-lib-docker/tmp/buildkit-mount875872699/Dockerfile: no such file or directory
-    // 表示 docker 没有权限访问 ABT_NODE_DATA_DIR 目录, 后续的一系列操作也会失败
-    logger.error('Failed to build Docker image. Error:', error.message);
+    logger.error('Failed to build docker image. Error:', error.message);
+    isCreated = false;
     throw error;
   }
-  await fs.rename(dockerfilePath, dockerfilePathDone);
-  logger.info('Success build docker image');
 }
 
 module.exports = {

package/lib/util/docker/parse-docker-options-from-pm2.js

@@ -1,5 +1,5 @@
 require('./docker-container-prune');
-
+const { COMPONENT_DOCKER_ENV_FILE_NAME } = require('@blocklet/constant');
 const { stringify: stringifyEnvFile } = require('envfile');
 const path = require('path');
 const fs = require('fs/promises');
@@ -44,18 +44,50 @@ async function parseDockerOptionsFromPm2(input, nodeInfo) {
   options.env.INTERNAL_HOST = 'host.docker.internal';
 
   const dockerEnv = { ...options.env };
-  const baseDir = '/blocklet';
-  dockerEnv.BLOCKLET_APP_DIR = path.join(baseDir, 'app');
-  dockerEnv.BLOCKLET_DATA_DIR = path.join(baseDir, options.env.BLOCKLET_REAL_NAME);
+  const baseDir = '/var/lib/blocklet';
+  const serverDir = process.env.ABT_NODE_DATA_DIR;
+  dockerEnv.ABT_NODE_DATA_DIR = baseDir;
+  dockerEnv.BLOCKLET_APP_DATA_DIR = options.env.BLOCKLET_APP_DATA_DIR.replace(serverDir, baseDir);
+  dockerEnv.BLOCKLET_APP_DIR = options.env.BLOCKLET_APP_DIR.replace(serverDir, baseDir);
+  dockerEnv.BLOCKLET_DATA_DIR = options.env.BLOCKLET_DATA_DIR.replace(serverDir, baseDir);
   dockerEnv.BLOCKLET_LOG_DIR = path.join(baseDir, 'logs');
   dockerEnv.BLOCKLET_CACHE_DIR = path.join(baseDir, 'cache');
+  dockerEnv.BLOCKLET_APP_SHARE_DIR = options.env.BLOCKLET_APP_SHARE_DIR.replace(serverDir, baseDir);
+  dockerEnv.BLOCKLET_SHARE_DIR = options.env.BLOCKLET_SHARE_DIR.replace(serverDir, baseDir);
   dockerEnv.BLOCKLET_DOCKER_NAME = name;
   dockerEnv.BLOCKLET_HOST = 'host.docker.internal';
   dockerEnv.USING_DOCKER = 'true';
-  const envVars = stringifyEnvFile(dockerEnv);
+  dockerEnv.LOCAL_USER_ID = process.getuid();
+
+  // 清理冗余的 docker-env 文件, 应该放到 APP_CONFIG_DIR 目录下
+  const oldDockerEnvFile = path.join(options.env.BLOCKLET_DATA_DIR, 'docker-env');
+  if (existsSync(oldDockerEnvFile)) {
+    await fs.rm(oldDockerEnvFile);
+  }
+
+  let nodeModulesName = 'node_modules';
+  let installScript = '';
+  if (existsSync(path.join(options.env.BLOCKLET_APP_DIR, 'package.json'))) {
+    const packageJson = JSON.parse(await fs.readFile(path.join(options.env.BLOCKLET_APP_DIR, 'package.json'), 'utf-8'));
+    if (packageJson.dependencies || packageJson.devDependencies) {
+      dockerEnv.BLOCKLET_APP_PACKAGE_JSON = JSON.stringify(packageJson);
+      nodeModulesName = 'docker_node_modules';
+      installScript = 'pnpm install --unsafe-perm --fetch-timeout=60000 --fetch-retries=5 && ';
+    }
+  }
 
-  const dockerEnvFile = path.join(options.env.BLOCKLET_DATA_DIR, 'docker-env');
+  let envVars = stringifyEnvFile(dockerEnv);
+  envVars = envVars.replace(new RegExp(serverDir, 'g'), baseDir);
+  const dockerEnvFile = path.join(
+    serverDir,
+    'tmp',
+    'docker',
+    options.env.BLOCKLET_REAL_NAME,
+    COMPONENT_DOCKER_ENV_FILE_NAME
+  );
+  await mkdirpWithPermissions(path.dirname(dockerEnvFile));
   await fs.writeFile(dockerEnvFile, envVars);
+
   const runScript = /(npm|yarn|pnpm|bun)/g.test(options.script) ? options.script : `node ${options.script}`;
   const networkHost = os.platform() === 'linux' ? '--network host' : '';
   const port = os.platform() === 'linux' ? '' : `-p ${options.env.BLOCKLET_PORT}:${options.env.BLOCKLET_PORT}`;
@@ -70,48 +102,94 @@ async function parseDockerOptionsFromPm2(input, nodeInfo) {
           .join(' ');
 
   options.args = [];
+  options.namespace = 'blocklets_docker';
+  const uid = process.getuid();
+  const gid = process.getgid();
+
+  const sourceDirs = new Set();
 
   const bindMounts = [
-    { source: options.env.BLOCKLET_APP_DIR, target: dockerEnv.BLOCKLET_APP_DIR },
-    { source: options.env.BLOCKLET_DATA_DIR, target: dockerEnv.BLOCKLET_DATA_DIR },
-    { source: options.env.BLOCKLET_LOG_DIR, target: dockerEnv.BLOCKLET_LOG_DIR },
-    { source: options.env.BLOCKLET_CACHE_DIR, target: dockerEnv.BLOCKLET_CACHE_DIR },
     {
-      source: path.join(options.env.BLOCKLET_APP_DIR, 'docker_node_modules'),
-      target: `${dockerEnv.BLOCKLET_APP_DIR}/node_modules`,
+      source: path.join(serverDir, 'blocklets'),
+      target: path.join(baseDir, 'blocklets'),
+      canEdit: false,
+    },
+    { source: options.env.BLOCKLET_APP_DIR, target: dockerEnv.BLOCKLET_APP_DIR, canEdit: true },
+    { source: options.env.BLOCKLET_DATA_DIR, target: dockerEnv.BLOCKLET_DATA_DIR, canEdit: true },
+    { source: options.env.BLOCKLET_LOG_DIR, target: dockerEnv.BLOCKLET_LOG_DIR, canEdit: true },
+    { source: options.env.BLOCKLET_CACHE_DIR, target: dockerEnv.BLOCKLET_CACHE_DIR, canEdit: true },
+    {
+      source: path.join(options.env.BLOCKLET_APP_DIR, nodeModulesName),
+      target: path.join(dockerEnv.BLOCKLET_APP_DIR, 'node_modules'),
+      canEdit: true,
+    },
+    {
+      source: path.join(options.env.BLOCKLET_SHARE_DIR),
+      target: path.join(dockerEnv.BLOCKLET_SHARE_DIR),
+      canEdit: false,
+    },
+    {
+      source: path.join(options.env.BLOCKLET_APP_SHARE_DIR),
+      target: path.join(dockerEnv.BLOCKLET_APP_SHARE_DIR),
+      canEdit: true,
     },
-  ];
+    {
+      source: path.join(options.env.BLOCKLET_APP_DATA_DIR, '.config'),
+      target: path.join(dockerEnv.BLOCKLET_APP_DATA_DIR, '.config'),
+      canEdit: false,
+    },
+    {
+      source: path.join(options.env.BLOCKLET_APP_DATA_DIR, '.assets'),
+      target: path.join(dockerEnv.BLOCKLET_APP_DATA_DIR, '.assets'),
+      canEdit: false,
+    },
+    {
+      source: path.join(options.env.BLOCKLET_APP_DATA_DIR),
+      target: path.join(dockerEnv.BLOCKLET_APP_DATA_DIR),
+      canEdit: false,
+    },
+  ].filter((v) => {
+    if (sourceDirs.has(v.source)) {
+      return false;
+    }
+    sourceDirs.add(v.source);
+    return true;
+  });
   let mount = '';
   for (const bindMount of bindMounts) {
     if (!existsSync(bindMount.source)) {
       // eslint-disable-next-line no-await-in-loop
       await mkdirpWithPermissions(bindMount.source);
     }
-    // 使用 --mount 需要系统有 mnt 磁盘挂载配置
-    // mount += ` --mount type=bind,source=${bindMount.source},target=${bindMount.target},bind-propagation=rshared`;
-    mount += ` -v ${bindMount.source}:${bindMount.target}:rw `;
-  }
-  if (!existsSync(path.join(options.env.BLOCKLET_APP_DIR, 'node_modules'))) {
-    await mkdirpWithPermissions(path.join(options.env.BLOCKLET_APP_DIR, 'node_modules'));
+    mount += ` -v ${bindMount.source}:${bindMount.target}:${bindMount.canEdit ? 'rw' : 'ro'} `;
   }
+  await mkdirpWithPermissions(path.join(options.env.BLOCKLET_APP_DIR, 'node_modules'));
 
-  options.script = `docker rm -f ${name} > /dev/null 2>&1 || true && docker run -u $(id -u):$(id -g) --name ${name} \
+  options.script = `
+  docker rm -f ${name} > /dev/null 2>&1 || true && \
+  docker run --name ${name} \
   ${port} \
   ${mount} \
-  -v ${path.join(options.env.BLOCKLET_APP_DIR, 'node_modules')} \
   ${diskSize} \
   --cpus="${dockerEnv.BLOCKLET_DOCKER_CPUS}" \
   --memory="${dockerEnv.BLOCKLET_DOCKER_MEMORY}" \
   --env-file ${dockerEnvFile} \
   ${networkHost} \
   ${DOCKER_IMAGE_NAME} \
-  sh -c \
-  '${socatCommand} \
-   cd ${dockerEnv.BLOCKLET_APP_DIR} && npm install && ${runScript}'`;
+  sh -c '
+    ${socatCommand}
+    chown ${uid}:${gid} ${baseDir} && \
+    exec su-exec ${uid}:${gid} sh -c "
+    cd ${dockerEnv.BLOCKLET_APP_DIR} && \
+    ${installScript} \
+    ${runScript}
+    "
+  '`;
 
   options.env = {
     USING_DOCKER: 'true',
   };
+  fs.writeFile(path.join(serverDir, 'docker-options.json'), JSON.stringify(options, null, 2));
 
   return options;
 }

package/lib/validators/util.js

@@ -33,7 +33,16 @@ const sessionConfigSchema = Joi.object({
     requireVerified: Joi.boolean().default(false),
     requireUnique: Joi.boolean().default(false),
     trustOauthProviders: Joi.boolean().default(false),
-    domainBlackList: Joi.array().items(Joi.string()).optional().default([]),
+    enableDomainBlackList: Joi.boolean().default(false),
+    domainBlackList: Joi.array()
+      .items(Joi.string().uri({ scheme: ['http', 'https'] }))
+      .optional()
+      .default([]),
+    enableDomainWhiteList: Joi.boolean().default(false),
+    domainWhiteList: Joi.array()
+      .items(Joi.string().uri({ scheme: ['http', 'https'] }))
+      .optional()
+      .default([]),
     trustedIssuers: Joi.array()
       .items(
         Joi.object({
@@ -49,7 +58,10 @@ const sessionConfigSchema = Joi.object({
     enabled: Joi.boolean().default(false),
     requireVerified: Joi.boolean().default(false),
     requireUnique: Joi.boolean().default(false),
+    enableRegionBlackList: Joi.boolean().default(false),
     regionBlackList: Joi.array().items(Joi.string()).optional().default([]),
+    enableRegionWhiteList: Joi.boolean().default(false),
+    regionWhiteList: Joi.array().items(Joi.string()).optional().default([]),
     trustedIssuers: Joi.array()
       .items(
         Joi.object({

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.16.32-beta-93e1a798",
+  "version": "1.16.32-beta-820e4cfa",
   "description": "",
   "main": "lib/index.js",
   "files": [
@@ -19,19 +19,19 @@
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/analytics": "1.16.32-beta-93e1a798",
-    "@abtnode/auth": "1.16.32-beta-93e1a798",
-    "@abtnode/certificate-manager": "1.16.32-beta-93e1a798",
-    "@abtnode/constant": "1.16.32-beta-93e1a798",
-    "@abtnode/cron": "1.16.32-beta-93e1a798",
-    "@abtnode/logger": "1.16.32-beta-93e1a798",
-    "@abtnode/models": "1.16.32-beta-93e1a798",
-    "@abtnode/queue": "1.16.32-beta-93e1a798",
-    "@abtnode/rbac": "1.16.32-beta-93e1a798",
-    "@abtnode/router-provider": "1.16.32-beta-93e1a798",
-    "@abtnode/static-server": "1.16.32-beta-93e1a798",
-    "@abtnode/timemachine": "1.16.32-beta-93e1a798",
-    "@abtnode/util": "1.16.32-beta-93e1a798",
+    "@abtnode/analytics": "1.16.32-beta-820e4cfa",
+    "@abtnode/auth": "1.16.32-beta-820e4cfa",
+    "@abtnode/certificate-manager": "1.16.32-beta-820e4cfa",
+    "@abtnode/constant": "1.16.32-beta-820e4cfa",
+    "@abtnode/cron": "1.16.32-beta-820e4cfa",
+    "@abtnode/logger": "1.16.32-beta-820e4cfa",
+    "@abtnode/models": "1.16.32-beta-820e4cfa",
+    "@abtnode/queue": "1.16.32-beta-820e4cfa",
+    "@abtnode/rbac": "1.16.32-beta-820e4cfa",
+    "@abtnode/router-provider": "1.16.32-beta-820e4cfa",
+    "@abtnode/static-server": "1.16.32-beta-820e4cfa",
+    "@abtnode/timemachine": "1.16.32-beta-820e4cfa",
+    "@abtnode/util": "1.16.32-beta-820e4cfa",
     "@arcblock/did": "1.18.135",
     "@arcblock/did-auth": "1.18.135",
     "@arcblock/did-ext": "^1.18.135",
@@ -42,13 +42,13 @@
     "@arcblock/pm2-events": "^0.0.5",
     "@arcblock/validator": "^1.18.135",
     "@arcblock/vc": "1.18.135",
-    "@blocklet/constant": "1.16.32-beta-93e1a798",
-    "@blocklet/env": "1.16.32-beta-93e1a798",
-    "@blocklet/meta": "1.16.32-beta-93e1a798",
-    "@blocklet/resolver": "1.16.32-beta-93e1a798",
-    "@blocklet/sdk": "1.16.32-beta-93e1a798",
-    "@blocklet/store": "1.16.32-beta-93e1a798",
-    "@did-space/client": "^0.5.37",
+    "@blocklet/constant": "1.16.32-beta-820e4cfa",
+    "@blocklet/env": "1.16.32-beta-820e4cfa",
+    "@blocklet/meta": "1.16.32-beta-820e4cfa",
+    "@blocklet/resolver": "1.16.32-beta-820e4cfa",
+    "@blocklet/sdk": "1.16.32-beta-820e4cfa",
+    "@blocklet/store": "1.16.32-beta-820e4cfa",
+    "@did-space/client": "^0.5.39",
     "@fidm/x509": "^1.2.1",
     "@ocap/mcrypto": "1.18.135",
     "@ocap/util": "1.18.135",
@@ -105,5 +105,5 @@
     "jest": "^29.7.0",
     "unzipper": "^0.10.11"
   },
-  "gitHead": "608fab914e6ee5cb5659c11ab3d0713945ab99a0"
+  "gitHead": "5d9721ea660974e75815a6b74de4dd233459ec58"
 }