@abtnode/core 1.16.47-beta-20250721-073316-a6de1fa3 → 1.16.47-beta-20250723-114212-8da08071

package/lib/api/team.js

@@ -2085,6 +2085,11 @@ class TeamAPI extends EventEmitter {
     if (!userDid) {
       throw new Error('userDid is required');
     }
+    if (visitorId) {
+      if (visitorId.length > 80) {
+        throw new Error('visitorId should be less than 80 characters');
+      }
+    }
 
     const state = await this.getUserSessionState(teamDid);
     let data;

package/lib/blocklet/manager/disk.js

@@ -27,7 +27,7 @@ const { getDidDomainForBlocklet } = require('@abtnode/util/lib/get-domain-for-bl
 const logger = require('@abtnode/logger')('@abtnode/core:blocklet:manager');
 const promiseSpawn = require('@abtnode/util/lib/promise-spawn');
 const { sanitizeTag } = require('@abtnode/util/lib/sanitize');
-
+const { CustomError } = require('@blocklet/error');
 const {
   BLOCKLET_INSTALL_TYPE,
   APP_STRUCT_VERSION,
@@ -224,6 +224,7 @@ const {
   updateSelectedResources,
   connectToStore,
   connectToEndpoint,
+  connectToAigne,
   publishToStore,
   publishToEndpoint,
   connectByStudio,
@@ -243,6 +244,7 @@ const { generateUserUpdateData } = require('../../util/user');
 const { blockletThemeSchema } = require('../../validators/theme');
 const { removeDockerNetwork } = require('../../util/docker/docker-network.js');
 const parseDockerName = require('../../util/docker/parse-docker-name.js');
+const { verifyAigneConfig, decryptValue } = require('../../util/aigne-verify');
 
 const { formatEnvironments, getBlockletMeta, validateOwner, isCLI } = util;
 
@@ -2135,6 +2137,7 @@ class DiskBlockletManager extends BaseBlockletManager {
 
     sessionConfig.email = validateConfig.email;
     sessionConfig.phone = validateConfig.phone;
+    sessionConfig.enableBlacklist = validateConfig.enableBlacklist;
 
     // Do some final check
     if (sessionConfig.email?.enabled && sessionConfig.email?.requireVerified && !getEmailServiceProvider(blocklet)) {
@@ -2779,7 +2782,7 @@ class DiskBlockletManager extends BaseBlockletManager {
     return summary;
   }
 
-  async updateBlockletSettings({ did, enableSessionHardening, invite, gateway }, context) {
+  async updateBlockletSettings({ did, enableSessionHardening, invite, gateway, aigne }, context) {
     const params = {};
     if (!isNil(enableSessionHardening)) {
       params.enableSessionHardening = enableSessionHardening;
@@ -2793,6 +2796,21 @@ class DiskBlockletManager extends BaseBlockletManager {
       params.gateway = gateway;
     }
 
+    if (!isNil(aigne)) {
+      const { key, url } = aigne;
+      if (url && !isUrl(url)) {
+        throw new CustomError(400, 'The AIGNE API Url is either missing or incorrectly formatted');
+      }
+      if (!key) {
+        throw new CustomError(400, 'The AIGNE API key is missing');
+      }
+
+      const decryptedKey = decryptValue(key, did);
+      if (key && !decryptedKey) {
+        throw new CustomError(400, 'Save failed, the API key is not encrypted');
+      }
+      params.aigne = aigne;
+    }
     const keys = Object.keys(params);
     if (!keys.length) {
       throw new Error('No settings to update');
@@ -2880,6 +2898,56 @@ class DiskBlockletManager extends BaseBlockletManager {
     return connectToEndpoint({ ...params, context, manager: this });
   }
 
+  connectToAigne(params, context) {
+    return connectToAigne({ ...params, context, manager: this });
+  }
+
+  async disconnectToAigne({ did, url, key }, context) {
+    try {
+      const blocklet = await this.getBlocklet(did);
+      if (!blocklet) {
+        throw new CustomError(400, 'blocklet did invalid, no blocklet found');
+      }
+      const aigneSetting = get(blocklet, 'settings.aigne', {});
+      if (aigneSetting.key !== key && url !== aigneSetting.url) {
+        throw new CustomError(400, 'Invalid key or url provided');
+      }
+      await states.blockletExtras.setSettings(did, {
+        aigne: {
+          ...aigneSetting,
+          key: '',
+          accessKeyId: '',
+          secretAccessKey: '',
+        },
+      });
+      const newState = await this.getBlocklet(did);
+      this.emit(BlockletInternalEvents.appSettingChanged, { appDid: did });
+      this.emit(BlockletEvents.updated, { ...newState, context });
+
+      return newState;
+    } catch (error) {
+      logger.error('disconnectToAigne error', { did, url, key, error });
+      throw error;
+    }
+  }
+
+  async verifyAigneConnection({ did }) {
+    try {
+      const blocklet = await this.getBlocklet(did);
+      if (!blocklet) {
+        throw new CustomError(400, 'blocklet did invalid, no blocklet found');
+      }
+      const aigne = get(blocklet, 'settings.aigne', {});
+      const verified = await verifyAigneConfig(aigne, did);
+      if (!verified.valid) {
+        throw new CustomError(500, verified.error);
+      }
+    } catch (error) {
+      logger.error('verify aigne connection error', { did, error });
+      throw error;
+    }
+  }
+
   disconnectFromStore(params, context) {
     return disconnectFromStore({ ...params, context, manager: this });
   }
@@ -3912,6 +3980,7 @@ class DiskBlockletManager extends BaseBlockletManager {
     skSource = '',
     folder,
     onlyRequired,
+    requirements,
   }) {
     const environments = component?.meta?.environments || [];
 
@@ -3937,6 +4006,7 @@ class DiskBlockletManager extends BaseBlockletManager {
       timeout: {
         start: process.env.NODE_ENV === 'test' ? 10 : 60,
       },
+      ...(requirements ? { requirements } : {}),
     };
 
     let children;

package/lib/blocklet/manager/helper/install-application-from-general.js

@@ -57,6 +57,7 @@ const installApplicationFromGeneral = async ({
 
   // create component
   let component;
+  let requirements;
   if (componentSourceUrl) {
     const meta = await getBlockletMetaFromUrl(componentSourceUrl);
 
@@ -92,6 +93,7 @@ const installApplicationFromGeneral = async ({
           }
         : { url: componentSourceUrl },
     };
+    requirements = meta.requirements;
   }
 
   // app wallet
@@ -113,7 +115,16 @@ const installApplicationFromGeneral = async ({
   }
 
   // create app
-  const blocklet = await manager._addBlocklet({ component, name, did, title, description, skSource, onlyRequired });
+  const blocklet = await manager._addBlocklet({
+    component,
+    name,
+    did,
+    title,
+    description,
+    skSource,
+    onlyRequired,
+    requirements,
+  });
   logger.info('blocklet added to database', { did: blocklet.meta.did });
 
   // create config

package/lib/blocklet/migration-dist/migration.cjs

@@ -846,6 +846,7 @@ module.exports = Object.freeze({
     'blocklet:read': 'Read blocklet information and database',
     'blocklet:write': 'Manage blocklet components and configuration',
   },
+  AIGNE_CONFIG_ENCRYPT_SALT: 'AIGNE_CONFIG_ENCRYPT_SALT',
 });
 
 
@@ -7637,7 +7638,7 @@ function hookChildProcess(cp, parsed) {
         // the command exists and emit an "error" instead
         // See https://github.com/IndigoUnited/node-cross-spawn/issues/16
         if (name === 'exit') {
-            const err = verifyENOENT(arg1, parsed, 'spawn');
+            const err = verifyENOENT(arg1, parsed);
 
             if (err) {
                 return originalEmit.call(cp, 'error', err);
@@ -7794,15 +7795,17 @@ function escapeArgument(arg, doubleEscapeMetaChars) {
     arg = `${arg}`;
 
     // Algorithm below is based on https://qntm.org/cmd
+    // It's slightly altered to disable JS backtracking to avoid hanging on specially crafted input
+    // Please see https://github.com/moxystudio/node-cross-spawn/pull/160 for more information
 
     // Sequence of backslashes followed by a double quote:
     // double up all the backslashes and escape the double quote
-    arg = arg.replace(/(\\*)"/g, '$1$1\\"');
+    arg = arg.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
 
     // Sequence of backslashes followed by the end of the string
     // (which will become a double quote later):
     // double up all the backslashes
-    arg = arg.replace(/(\\*)$/, '$1$1');
+    arg = arg.replace(/(?=(\\+?)?)\1$/, '$1$1');
 
     // All other backslashes occur literally
 
@@ -38915,7 +38918,7 @@ module.exports = require("zlib");
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.16.46","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib","test":"node tools/jest.js","coverage":"npm run test -- --coverage"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.16.46","@abtnode/auth":"1.16.46","@abtnode/certificate-manager":"1.16.46","@abtnode/client":"1.16.46","@abtnode/constant":"1.16.46","@abtnode/cron":"1.16.46","@abtnode/db-cache":"1.16.46","@abtnode/docker-utils":"1.16.46","@abtnode/logger":"1.16.46","@abtnode/models":"1.16.46","@abtnode/queue":"1.16.46","@abtnode/rbac":"1.16.46","@abtnode/router-provider":"1.16.46","@abtnode/static-server":"1.16.46","@abtnode/timemachine":"1.16.46","@abtnode/util":"1.16.46","@arcblock/did":"1.20.16","@arcblock/did-auth":"1.20.16","@arcblock/did-ext":"1.20.16","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.20.16","@arcblock/event-hub":"1.20.16","@arcblock/jwt":"1.20.16","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.20.16","@arcblock/vc":"1.20.16","@blocklet/constant":"1.16.46","@blocklet/did-space-js":"^1.1.7","@blocklet/env":"1.16.46","@blocklet/error":"^0.2.5","@blocklet/meta":"1.16.46","@blocklet/resolver":"1.16.46","@blocklet/sdk":"1.16.46","@blocklet/store":"1.16.46","@blocklet/theme":"^3.0.26","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.20.16","@ocap/util":"1.20.16","@ocap/wallet":"1.20.16","@slack/webhook":"^5.0.4","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"^2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^9.0.1","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"expand-tilde":"^2.0.2","express":"^4.18.2","jest":"^29.7.0","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.16.46","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib","test":"node tools/jest.js","coverage":"npm run test -- --coverage"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.16.46","@abtnode/auth":"1.16.46","@abtnode/certificate-manager":"1.16.46","@abtnode/client":"1.16.46","@abtnode/constant":"1.16.46","@abtnode/cron":"1.16.46","@abtnode/db-cache":"1.16.46","@abtnode/docker-utils":"1.16.46","@abtnode/logger":"1.16.46","@abtnode/models":"1.16.46","@abtnode/queue":"1.16.46","@abtnode/rbac":"1.16.46","@abtnode/router-provider":"1.16.46","@abtnode/static-server":"1.16.46","@abtnode/timemachine":"1.16.46","@abtnode/util":"1.16.46","@aigne/aigne-hub":"^0.1.3","@arcblock/did":"1.21.0","@arcblock/did-auth":"1.21.0","@arcblock/did-ext":"1.21.0","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.21.0","@arcblock/event-hub":"1.21.0","@arcblock/jwt":"1.21.0","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.21.0","@arcblock/vc":"1.21.0","@blocklet/constant":"1.16.46","@blocklet/did-space-js":"^1.1.8","@blocklet/env":"1.16.46","@blocklet/error":"^0.2.5","@blocklet/meta":"1.16.46","@blocklet/resolver":"1.16.46","@blocklet/sdk":"1.16.46","@blocklet/store":"1.16.46","@blocklet/theme":"^3.0.30","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.21.0","@ocap/util":"1.21.0","@ocap/wallet":"1.21.0","@slack/webhook":"^5.0.4","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"^2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"expand-tilde":"^2.0.2","express":"^4.18.2","jest":"^29.7.0","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
 
 /***/ }),
 

package/lib/blocklet/project/connect-to-aigne.js

@@ -0,0 +1,61 @@
+const validUrl = require('valid-url');
+
+const { encrypt } = require('@abtnode/util/lib/security');
+const { joinURL, withHttps } = require('ufo');
+const { WELLKNOWN_SERVICE_PATH_PREFIX, AIGNE_CONFIG_ENCRYPT_SALT } = require('@abtnode/constant');
+const { getDisplayName, getAppUrl } = require('@blocklet/meta/lib/util');
+const { CustomError } = require('@blocklet/error');
+const logger = require('@abtnode/logger')('connect-to-aigne');
+const { createConnect, fetchConfigs } = require('./create-connect');
+
+// eslint-disable-next-line require-await
+const connectToAigne = async ({ did, baseUrl, provider, model, manager }) => {
+  if (!did) {
+    throw new CustomError(400, 'Invalid did');
+  }
+
+  if (!validUrl.isWebUri(baseUrl)) {
+    throw new CustomError(400, 'Invalid endpoint url:', baseUrl);
+  }
+
+  // eslint-disable-next-line no-async-promise-executor, consistent-return
+  return new Promise(async (resolve, reject) => {
+    try {
+      const blocklet = await manager.getBlocklet(did);
+      const appUrl = getAppUrl(blocklet);
+
+      const fetchData = await createConnect({
+        connectUrl: joinURL(new URL(baseUrl).origin, WELLKNOWN_SERVICE_PATH_PREFIX),
+        connectAction: 'gen-simple-access-key',
+        source: `Connect to AIGNE hub (${getDisplayName(blocklet)})`,
+        closeOnSuccess: true,
+        openPage: (pageUrl) => resolve(pageUrl),
+        intervalFetchConfig: fetchConfigs,
+        appUrl: withHttps(appUrl),
+      });
+
+      if (!fetchData.accessKeySecret) {
+        throw new CustomError(400, 'Failed to generate access key secret');
+      }
+
+      const encryptedKey = encrypt(fetchData.accessKeySecret, did || AIGNE_CONFIG_ENCRYPT_SALT, '');
+
+      await manager.updateBlockletSettings({
+        did,
+        aigne: {
+          key: encryptedKey,
+          url: baseUrl,
+          provider,
+          model,
+          accessKeyId: '',
+          secretAccessKey: '',
+        },
+      });
+    } catch (error) {
+      logger.error('connect to aigne error', { error, did, baseUrl });
+      reject(error);
+    }
+  });
+};
+
+module.exports = connectToAigne;

package/lib/blocklet/project/create-connect.js

@@ -0,0 +1,85 @@
+const { joinURL } = require('ufo');
+const { withQuery } = require('ufo');
+const pWaitFor = require('p-wait-for');
+const { encodeEncryptionKey, decrypt } = require('@abtnode/util/lib/security');
+const axios = require('@abtnode/util/lib/axios');
+
+const ACCESS_KEY_PREFIX = '/api/access-key/session';
+
+const fetchConfigs = async ({ connectUrl, sessionId, fetchInterval, fetchTimeout }) => {
+  const url = withQuery(joinURL(connectUrl, ACCESS_KEY_PREFIX), { sid: sessionId });
+
+  const condition = async () => {
+    const { data: session } = await axios({ url });
+    return Boolean(session.accessKeyId && session.accessKeySecret);
+  };
+
+  await pWaitFor(condition, { interval: fetchInterval, timeout: fetchTimeout });
+
+  const { data: session } = await axios({ url });
+  await axios({
+    url: withQuery(joinURL(connectUrl, ACCESS_KEY_PREFIX), { sid: sessionId }),
+    method: 'DELETE',
+  });
+
+  return {
+    ...session,
+    accessKeyId: session.accessKeyId,
+    accessKeySecret: decrypt(session.accessKeySecret, session.accessKeyId, session.challenge),
+  };
+};
+
+async function createConnect({
+  connectUrl,
+  openPage,
+  fetchInterval = 3 * 1000,
+  retry = 1500,
+  source = 'Blocklet CLI',
+  connectAction = 'connect-cli',
+  wrapSpinner = (_, waiting) => Promise.resolve(waiting()),
+  closeOnSuccess,
+  prettyUrl,
+  intervalFetchConfig,
+  appUrl,
+}) {
+  try {
+    const { data: session } = await axios(joinURL(connectUrl, ACCESS_KEY_PREFIX), { method: 'POST' });
+    const token = session.id;
+
+    const pageUrl = withQuery(joinURL(connectUrl, connectAction), {
+      __token__: encodeEncryptionKey(token),
+      __url__: encodeEncryptionKey(appUrl),
+      source,
+      closeOnSuccess,
+    });
+
+    // eslint-disable-next-line no-console
+    console.info(
+      'If browser does not open automatically, please open the following link in your browser: ',
+      prettyUrl?.(pageUrl) || pageUrl
+    );
+
+    openPage?.(pageUrl);
+
+    return await wrapSpinner(`Waiting for connection: ${connectUrl}`, async () => {
+      const fn = intervalFetchConfig ?? fetchConfigs;
+
+      const fetchData = await fn({
+        connectUrl,
+        sessionId: token,
+        fetchTimeout: retry * fetchInterval,
+        fetchInterval: retry,
+      });
+
+      return fetchData;
+    });
+  } catch (e) {
+    console.error(e);
+    throw e;
+  }
+}
+
+module.exports = {
+  createConnect,
+  fetchConfigs,
+};

package/lib/blocklet/project/index.js

@@ -24,6 +24,7 @@ const {
 const createPackRelease = require('./create-pack-release');
 const connectToStore = require('./connect-to-store');
 const connectToEndpoint = require('./connect-to-endpoint');
+const connectToAigne = require('./connect-to-aigne');
 const publishToStore = require('./publish-to-store');
 const publishToEndpoint = require('./publish-to-endpoint');
 const connectByStudio = require('./connect-by-studio');
@@ -590,4 +591,5 @@ module.exports = {
   publishToStore,
   connectToEndpoint,
   publishToEndpoint,
+  connectToAigne,
 };

package/lib/event/index.js

@@ -171,7 +171,7 @@ module.exports = ({
           { message: `${routingSnapshotPrefix(blocklet)}Install blocklet ${blocklet.meta.name}`, dryRun: false },
           context
         );
-        logger.info('create.url.mapping', { event: name, did: blocklet.meta.did, hash });
+        logger.info('created.url.mapping', { event: name, did: blocklet.meta.did, hash });
       }
 
       await teamAPI.refreshBlockletInterfacePermissions(blocklet.meta);

package/lib/index.js

@@ -590,6 +590,9 @@ function ABTNode(options) {
     addUploadEndpoint: teamAPI.addEndpoint.bind(teamAPI),
     deleteUploadEndpoint: teamAPI.deleteEndpoint.bind(teamAPI),
     connectToEndpoint: blockletManager.connectToEndpoint.bind(blockletManager),
+    connectToAigne: blockletManager.connectToAigne.bind(blockletManager),
+    disconnectToAigne: blockletManager.disconnectToAigne.bind(blockletManager),
+    verifyAigneConnection: blockletManager.verifyAigneConnection.bind(blockletManager),
     disconnectFromEndpoint: blockletManager.disconnectFromEndpoint.bind(blockletManager),
     publishToEndpoint: blockletManager.publishToEndpoint.bind(blockletManager),
 

package/lib/router/helper.js

@@ -1409,20 +1409,19 @@ module.exports = function getRouterHelpers({
     return ruleChanged || siteChanged;
   };
 
-  async function readRoutingSites() {
-    const info = await nodeState.read();
-    let snapshotHash = get(info, 'routing.snapshotHash', null);
-    if (!snapshotHash) {
+  async function readRoutingSites(snapshotHash) {
+    let hash = snapshotHash;
+    if (!hash) {
       logger.debug('router.readRoutingSites read snapshot hash from snapshot db');
-      snapshotHash = await routingSnapshot.getLastSnapshot();
+      hash = await routingSnapshot.getLastSnapshot();
     }
 
-    if (!snapshotHash) {
+    if (!hash) {
       logger.error('Can not determine routing snapshot hash, there must be something wrong!');
       return {};
     }
 
-    const result = await routingSnapshot.readSnapshot(snapshotHash);
+    const result = await routingSnapshot.readSnapshot(hash);
     result.sites = await ensureLatestInfo(result.sites);
 
     return result;
@@ -1531,7 +1530,9 @@ module.exports = function getRouterHelpers({
 
   const handleRouting = async (nodeInfo) => {
     const now = Date.now();
-    logger.info('start handle routing');
+    logger.info('start handle routing', {
+      snapshotHash: nodeInfo?.routing?.snapshotHash,
+    });
     const providerName = get(nodeInfo, 'routing.provider', null);
     const httpsEnabled = get(nodeInfo, 'routing.https', true);
     logger.debug('handle routing', { providerName, httpsEnabled });
@@ -1551,8 +1552,10 @@ module.exports = function getRouterHelpers({
         provider: createProviderInstance({ nodeInfo, routerDataDir: dataDirs.router }),
         getRoutingParams: async () => {
           try {
-            const info = await nodeState.read();
-            let { sites } = await readRoutingSites();
+            const info = await nodeState._read();
+            logger.info('router:getRoutingParams read routing params', { snapshotHash: info.routing?.snapshotHash });
+
+            let { sites } = await readRoutingSites(info.routing?.snapshotHash);
             sites = await ensureLatestInfo(sites);
             sites = await ensureServiceRule(sites);
             sites = await ensureRootRule(sites);
@@ -1793,12 +1796,17 @@ module.exports = function getRouterHelpers({
 
     const hash = await routingSnapshot.takeSnapshot(msg, dryRun);
     if (!dryRun) {
-      const nodeInfo = await nodeState.read();
-      const result = await nodeState.updateNodeRouting({ ...nodeInfo.routing, snapshotHash: hash });
+      let nodeInfo = await nodeState.read();
+      nodeInfo = await nodeState.updateNodeRouting({ ...nodeInfo.routing, snapshotHash: hash });
       if (handle) {
         await handleRouting(nodeInfo);
       }
-      logger.debug('takeRoutingSnapshot', { dryRun, result, handleRouting: handle });
+      logger.info('takeRoutingSnapshot', {
+        dryRun,
+        handleRouting: handle,
+        hash,
+        dbSnapshotHash: nodeInfo?.routing?.snapshotHash,
+      });
     }
 
     return hash;

package/lib/router/index.js

@@ -208,6 +208,9 @@ class Router {
       outboundAnomalyScoreThreshold: 10,
     };
 
+    logger.info('router: update routing table', {
+      snapshotHash: nodeInfo?.routing?.snapshotHash,
+    });
     await this.provider.update({
       routingTable: this.routingTable,
       certificates,
@@ -223,12 +226,16 @@ class Router {
       enableDefaultServer: nodeInfo.routing.enableDefaultServer ?? false,
       enableIpServer: nodeInfo.routing.enableIpServer ?? false,
     });
+    logger.info('router: update routing table success', {
+      snapshotHash: nodeInfo?.routing?.snapshotHash,
+    });
   }
 
   async update() {
     logger.info('router: update');
     await this.updateRoutingTable();
     await this.provider.reload();
+    logger.info('router: reload provider success');
   }
 
   async start() {

package/lib/states/node.js

@@ -16,7 +16,7 @@ const {
   DEFAULT_NFT_DOMAIN_URL,
   SERVER_CACHE_TTL,
 } = require('@abtnode/constant');
-// const logger = require('@abtnode/logger')('@abtnode/core:states:node');
+const logger = require('@abtnode/logger')('@abtnode/core:states:node');
 
 const BaseState = require('./base');
 const { validateOwner } = require('../util');
@@ -69,7 +69,12 @@ class NodeState extends BaseState {
   }
 
   deleteCache = async () => {
-    await this.cache.del(this.cacheGroup);
+    try {
+      await this.cache.del(this.cacheGroup);
+      logger.debug('deleteCache success', { cacheGroup: this.cacheGroup });
+    } catch (error) {
+      logger.error('deleteCache failed', { error });
+    }
   };
 
   /**
@@ -172,7 +177,7 @@ class NodeState extends BaseState {
 
   // FIXME: 这个接口比较危险，可能会修改一些本不应该修改的字段，后续需要考虑改进
   async updateNodeInfo(entity = {}) {
-    this.deleteCache();
+    await this.deleteCache();
     const old = await this.read();
     const doc = await this.update({ $set: omit(entity, ['ownerNft', 'sk']) });
     this.emit(EVENTS.NODE_UPDATED, doc, old);
@@ -338,10 +343,10 @@ class NodeState extends BaseState {
   }
 
   async update(updates) {
-    this.deleteCache();
+    await this.deleteCache();
     await this.read(); // CAUTION: 这一行不要删，当 node state 不存在时，read() 会插入新数据
     const [, [updated]] = await super.update({ did: this.config.nodeDid }, updates);
-    this.deleteCache();
+    await this.deleteCache();
     return updated;
   }
 }

package/lib/util/aigne-verify.js

@@ -0,0 +1,101 @@
+/**
+ * 用于验证 aigne 的配置是否正确
+ */
+const { AIGNEHubChatModel } = require('@aigne/aigne-hub');
+const { AIGNE_CONFIG_ENCRYPT_SALT } = require('@abtnode/constant');
+const { decrypt } = require('@abtnode/util/lib/security');
+const axios = require('@abtnode/util/lib/axios');
+const { joinURL } = require('ufo');
+const logger = require('@abtnode/logger')('@abtnode/core:util:aigne-verify');
+
+const decryptValue = (value, did) => {
+  return value ? decrypt(value, did || AIGNE_CONFIG_ENCRYPT_SALT, '') : value;
+};
+
+const getAigneHubModelApi = async (url) => {
+  try {
+    const urlObj = new URL(url);
+    const appUrl = urlObj.origin;
+    const { data: blockletJson } = await axios.get(joinURL(appUrl, '__blocklet__.js?type=json'));
+    const { componentMountPoints = [] } = blockletJson || {};
+
+    const aigneHubMountPoint = componentMountPoints.find((item) => item.name === 'ai-kit');
+    if (!aigneHubMountPoint) {
+      throw new Error("The current application doesn't have the AIGNE Hub component installed");
+    }
+
+    return joinURL(appUrl, aigneHubMountPoint.mountPoint, 'api/v2/chat');
+  } catch (error) {
+    throw new Error('Failed to establish connection to AIGNE Hub API endpoint at the specified URL');
+  }
+};
+
+const verifyAigneHub = async (config, did) => {
+  try {
+    if (!config.url) {
+      return {
+        valid: false,
+        error: 'AIGNE Hub API URL must be provided in the configuration',
+      };
+    }
+    if (!config.key) {
+      return {
+        valid: false,
+        error: 'AIGNE Hub API key must be provided in the configuration',
+      };
+    }
+
+    const baseUrl = await getAigneHubModelApi(config.url);
+
+    const modelConfig = {
+      accessKey: decryptValue(config.key, did),
+      model: !config.model || config.model === 'auto' ? undefined : config.model,
+      url: baseUrl,
+    };
+
+    const model = new AIGNEHubChatModel(modelConfig);
+
+    const result = await model.invoke({
+      messages: [{ role: 'user', content: 'Hello, who are you?' }],
+    });
+
+    return { valid: !!result };
+  } catch (error) {
+    logger.error(`verify ${config.provider} config error`, { error });
+    return { valid: false, error: error.message };
+  }
+};
+
+/**
+ * 主验证函数 - 根据配置中的 provider 执行对应的验证方法
+ * @param {Object} config - 配置对象
+ * @param {string} config.provider - 提供商名称
+ * @param {string} config.apiKey - API 密钥
+ * @param {string} [config.baseURL] - 基础 URL
+ * @param {string} [config.model] - 模型名称
+ * @param {Object} [config.options] - 其他选项
+ * @returns {Promise<{valid: boolean, error?: string}>}
+ */
+async function verifyAigneConfig(config, did) {
+  try {
+    if (!config || typeof config !== 'object') {
+      return {
+        valid: false,
+        error: 'AIGNE configuration must be a valid object',
+      };
+    }
+
+    return await verifyAigneHub(config, did);
+  } catch (error) {
+    return {
+      valid: false,
+      error: `Verification failed: ${error.message}`,
+    };
+  }
+}
+
+module.exports = {
+  verifyAigneConfig,
+  verifyAigneHub,
+  decryptValue,
+};

package/lib/util/blocklet.js

@@ -7,6 +7,7 @@ const shelljs = require('shelljs');
 const os = require('os');
 const tar = require('tar');
 const get = require('lodash/get');
+const isNil = require('lodash/isNil');
 const uniq = require('lodash/uniq');
 const cloneDeep = require('lodash/cloneDeep');
 const mergeWith = require('lodash/mergeWith');
@@ -30,7 +31,7 @@ const logger = require('@abtnode/logger')('@abtnode/core:util:blocklet');
 const pm2 = require('@abtnode/util/lib/async-pm2');
 const sleep = require('@abtnode/util/lib/sleep');
 const getPm2ProcessInfo = require('@abtnode/util/lib/get-pm2-process-info');
-const { formatEnv, getSecurityNodeOptions } = require('@abtnode/util/lib/security');
+const { formatEnv, getSecurityNodeOptions, decrypt } = require('@abtnode/util/lib/security');
 const ensureEndpointHealthy = require('@abtnode/util/lib/ensure-endpoint-healthy');
 const getFolderSize = require('@abtnode/util/lib/get-folder-size');
 const normalizePathPrefix = require('@abtnode/util/lib/normalize-path-prefix');
@@ -42,6 +43,7 @@ const {
   BLOCKLET_INSTALL_TYPE,
   APP_STRUCT_VERSION,
   BLOCKLET_CACHE_TTL,
+  AIGNE_CONFIG_ENCRYPT_SALT,
 } = require('@abtnode/constant');
 const { BLOCKLET_THEME_LIGHT, BLOCKLET_THEME_DARK } = require('@blocklet/theme');
 const {
@@ -527,6 +529,23 @@ const getRuntimeEnvironments = (blocklet, nodeEnvironments, ancestors) => {
     ...safeNodeEnvironments,
   };
 
+  const aigne = get(root, 'settings.aigne', {});
+  const salt = root.meta.did || AIGNE_CONFIG_ENCRYPT_SALT;
+  if (!isNil(aigne) && aigne.provider) {
+    const { key, accessKeyId, secretAccessKey, provider } = aigne;
+    const selectedModel = !aigne.model || aigne.model === 'auto' ? undefined : aigne.model;
+    env.BLOCKLET_AIGNE_API_MODEL = selectedModel;
+    env.BLOCKLET_AIGNE_API_PROVIDER = aigne.provider;
+    const credential = {
+      apiKey: key ? decrypt(key, salt, '') : key || '',
+      accessKeyId: accessKeyId && provider === 'bedrock' ? decrypt(accessKeyId, salt, '') : accessKeyId || '',
+      secretAccessKey:
+        secretAccessKey && provider === 'bedrock' ? decrypt(secretAccessKey, salt, '') : secretAccessKey || '',
+    };
+    env.BLOCKLET_AIGNE_API_CREDENTIAL = JSON.stringify(credential);
+    env.BLOCKLET_AIGNE_API_URL = aigne.url || '';
+  }
+
   if (root?.environmentObj?.BLOCKLET_APP_DATA_DIR) {
     env.BLOCKLET_APP_SHARE_DIR = path.join(root.environmentObj.BLOCKLET_APP_DATA_DIR, '.share');
     env.BLOCKLET_SHARE_DIR = path.join(root.environmentObj.BLOCKLET_APP_DATA_DIR, '.share', blocklet.meta.did);

package/lib/util/check-dns.js

@@ -1,26 +1,53 @@
-const dns = require('dns');
-const { promisify } = require('util');
+const dns = require('dns').promises;
+const { Resolver } = require('dns').promises;
 const logger = require('@abtnode/logger')('checkDNS');
 
-const resolveCname = promisify(dns.resolveCname);
-const resolve = promisify(dns.resolve);
+async function checkIsSameIp(domain1, domain2) {
+  const resolver = new Resolver();
+  resolver.setServers(['8.8.8.8']);
+
+  try {
+    const [ips1, ips2] = await Promise.all([resolver.resolve(domain1), resolver.resolve(domain2)]);
+
+    const set1 = new Set(ips1);
+    const set2 = new Set(ips2);
+    const hasIntersection = [...set1].some((ip) => set2.has(ip));
+
+    logger.info('checkIsSameIp', {
+      domain1: { domain: domain1, ips: ips1 },
+      domain2: { domain: domain2, ips: ips2 },
+    });
+
+    return hasIntersection;
+  } catch (err) {
+    logger.error('DNS resolution error:', {
+      domain1,
+      domain2,
+      error: err.message,
+    });
+    return false;
+  }
+}
 
 async function checkDnsAndCname(domain, expectedCname = '') {
   try {
-    await resolve(domain);
+    await dns.resolve(domain);
 
     try {
-      const cnameRecords = await resolveCname(domain);
+      const cnameRecords = await dns.resolveCname(domain);
       const isCnameMatch = cnameRecords.some((cname) => cname.toLowerCase() === expectedCname.toLowerCase());
 
       return {
         isDnsResolved: true,
         hasCname: true,
         cnameRecords,
-        isCnameMatch,
+        isCnameMatch: isCnameMatch || (await checkIsSameIp(domain, expectedCname)),
       };
     } catch (cnameError) {
-      logger.error('match resolve name error', cnameError?.message);
+      logger.error('match resolve name error', {
+        domain,
+        error: cnameError?.message,
+      });
 
       return {
         isDnsResolved: true,
@@ -31,7 +58,10 @@ async function checkDnsAndCname(domain, expectedCname = '') {
       };
     }
   } catch (error) {
-    logger.error('resolve name error', error?.message);
+    logger.error('resolve name error', {
+      domain,
+      error: error?.message,
+    });
 
     return {
       isDnsResolved: false,

package/lib/util/docker/ensure-docker-postgres.js

@@ -71,6 +71,7 @@ async function _ensureDockerPostgres(dataDir, name = 'abtnode-postgres', port =
     '-e POSTGRES_USER=postgres',
     '-e POSTGRES_DB=postgres',
     'postgres:17.5',
+    '-c max_connections=200',
   ].join(' ');
 
   const url = `postgresql://postgres:postgres@localhost:${port}/postgres`;

package/lib/util/install-external-dependencies.js

@@ -2,14 +2,13 @@ const { spawn } = require('child_process');
 const fs = require('fs-extra');
 const path = require('path');
 const { ensureBun, getBunCacheDir } = require('./ensure-bun');
-const checkDockerRunHistory = require('./docker/check-docker-run-history');
 const { dockerInstallDependencies, saveLastInstallOs, isSameOs } = require('./docker/docker-install-dependenices');
 
 function isDependencyInstalled(appDir, dependency) {
   return fs.existsSync(path.resolve(appDir, 'node_modules', dependency));
 }
 
-async function installExternalDependencies({ appDir, forceInstall = false, nodeInfo } = {}) {
+async function installExternalDependencies({ appDir, forceInstall = false, nodeInfo = {} } = {}) {
   if (!appDir) {
     throw new Error('appDir is required');
   }
@@ -17,7 +16,7 @@ async function installExternalDependencies({ appDir, forceInstall = false, nodeI
     throw new Error(`not a correct appDir directory: ${appDir}`);
   }
 
-  const isUseDocker = checkDockerRunHistory(nodeInfo);
+  const isUseDocker = nodeInfo.isDockerInstalled && nodeInfo.enableDocker;
 
   // 读取 BLOCKLET_APP_DIR 的 package.json
   const packageJsonPath = path.resolve(appDir, 'package.json');

package/lib/util/migration-sqlite-to-postgres.js

@@ -10,6 +10,9 @@ const path = require('path');
 
 const ignoreErrorTableNames = new Set(['runtime_insights', 'notification_receivers', 'notifications']);
 const needCleanDataTableNames = new Set(['sessions']);
+const notCheckPrimaryKeyTableNames = new Set(['tagging']);
+
+const needBreakErrors = [];
 
 function sortTableNames(tableNames, sort) {
   return [...tableNames].sort((a, b) => {
@@ -49,10 +52,8 @@ async function migrateAllTablesNoModels(dbPath) {
   // 把 tableNames 排序, 把被依赖的表放前面
   tableNames = sortTableNames(tableNames, ['users', 'notification_receivers']);
 
-  console.log('Start migration database: ', dbPath);
-
   for (const tableName of tableNames) {
-    console.log(`\n➡️ Starting migration for table: ${tableName}`);
+    console.log(`\n➡️ Starting migration for table: ${dbPath} ${tableName}`);
 
     const colInfos = await sqliteDb.query(`PRAGMA TABLE_INFO("${tableName}")`, { type: QueryTypes.SELECT });
     const sqliteSchema = {};
@@ -80,6 +81,14 @@ async function migrateAllTablesNoModels(dbPath) {
     // Describe PG table to detect JSON/auto-inc
     const pgSchema = await pgQI.describeTable(tableName);
 
+    const varcharLimits = {};
+    for (const [col, def] of Object.entries(pgSchema)) {
+      const m = def.type.match(/character varying\((\d+)\)/i);
+      if (m) {
+        varcharLimits[col] = parseInt(m[1], 10);
+      }
+    }
+
     // find JSON/JSONB
     const jsonCols = Object.entries(pgSchema)
       .filter(([, def]) => def.type && ['JSON', 'JSONB'].includes(def.type.toUpperCase()))
@@ -115,12 +124,22 @@ async function migrateAllTablesNoModels(dbPath) {
           return jc ? `"${c}" = EXCLUDED."${c}"::${jc.type.toLowerCase()}` : `"${c}" = EXCLUDED."${c}"`;
         })
         .join(',');
-      upsertSQL = `
+      if (notCheckPrimaryKeyTableNames.has(tableName)) {
+        console.log('   ❌ Not check primary key for, can not upsert only insert:', tableName);
+        // 只做普通插入
+        upsertSQL = `
+            INSERT INTO "${tableName}" (${insertColsList})
+            VALUES (${placeholders});
+          `;
+      } else {
+        // 正常的 upsert 逻辑
+        upsertSQL = `
         INSERT INTO "${tableName}" (${insertColsList})
         VALUES (${placeholders})
         ON CONFLICT (${conflictKeys})
         DO UPDATE SET ${updateSet};
       `;
+      }
     } else {
       upsertSQL = `
         INSERT INTO "${tableName}" (${insertColsList})
@@ -153,6 +172,18 @@ async function migrateAllTablesNoModels(dbPath) {
           row.feedType = '';
         }
 
+        // 对所有需插入的列, 操过长度的做截断
+        for (const col of insertCols) {
+          const val = row[col];
+          const limit = varcharLimits[col];
+          if (typeof val === 'string' && limit && val.length > limit) {
+            console.warn(`⚠️ Truncate "${col}" from length ${val.length} → ${limit}`);
+            console.log('   ❌ Old value:', val);
+            // 暂时不截断, 这样插入会失败, 后续会忽略这条数据的插入
+            // row[col] = val.slice(0, limit);
+          }
+        }
+
         for (const jc of jsonCols) {
           const raw = row[jc.name];
           let parsed = null;
@@ -265,7 +296,34 @@ async function migrateAllTablesNoModels(dbPath) {
             }
             continue;
           }
-          throw err;
+          if (err.message.includes('user_sessions_userDid_fkey')) {
+            const violationFilePath = dbPath.replace('.db', '.user_sessions_userDid_fkey.json');
+            console.log(
+              '   ❌ Ignore error for user_sessions_userDid_fkey',
+              err.message,
+              'save to:',
+              violationFilePath,
+              'count: '
+            );
+            try {
+              await fsp.appendFile(
+                violationFilePath,
+                // eslint-disable-next-line prefer-template
+                JSON.stringify({ table: tableName, row, error: 'user_sessions_userDid_fkey' }) + '\n',
+                'utf8'
+              );
+            } catch (writeErr) {
+              console.warn('   ⚠️ Failed to write violation record:', writeErr);
+            }
+            continue;
+          }
+
+          if (needBreakErrors.length < 2000) {
+            console.error('   ❌ Error:', err.message);
+            needBreakErrors.push(err.message);
+          } else {
+            throw err;
+          }
         }
       }
 
@@ -418,6 +476,12 @@ async function migrationSqliteToPostgres(dataDir, dbPaths) {
     await validateTableRowCounts(dbPath);
   }
 
+  if (needBreakErrors.length > 0) {
+    console.error('   ❌ Has some errors, please check the violation files');
+    console.error(needBreakErrors.join('\n'));
+    throw new Error('Has some errors, please check the error log');
+  }
+
   savePostgresLock(dataDir);
 }
 

package/lib/validators/util.js

@@ -73,6 +73,7 @@ const sessionConfigSchema = Joi.object({
       .optional()
       .default([]),
   }),
+  enableBlacklist: Joi.boolean().default(false),
 });
 
 const passportDisplaySchema = Joi.object({

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.16.47-beta-20250721-073316-a6de1fa3",
+  "version": "1.16.47-beta-20250723-114212-8da08071",
   "description": "",
   "main": "lib/index.js",
   "files": [
@@ -19,45 +19,46 @@
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/analytics": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/auth": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/certificate-manager": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/client": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/constant": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/cron": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/db-cache": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/docker-utils": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/logger": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/models": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/queue": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/rbac": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/router-provider": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/static-server": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/timemachine": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@abtnode/util": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@arcblock/did": "1.20.16",
-    "@arcblock/did-auth": "1.20.16",
-    "@arcblock/did-ext": "1.20.16",
+    "@abtnode/analytics": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/auth": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/certificate-manager": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/client": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/constant": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/cron": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/db-cache": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/docker-utils": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/logger": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/models": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/queue": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/rbac": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/router-provider": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/static-server": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/timemachine": "1.16.47-beta-20250723-114212-8da08071",
+    "@abtnode/util": "1.16.47-beta-20250723-114212-8da08071",
+    "@aigne/aigne-hub": "^0.1.3",
+    "@arcblock/did": "1.21.0",
+    "@arcblock/did-auth": "1.21.0",
+    "@arcblock/did-ext": "1.21.0",
     "@arcblock/did-motif": "^1.1.14",
-    "@arcblock/did-util": "1.20.16",
-    "@arcblock/event-hub": "1.20.16",
-    "@arcblock/jwt": "1.20.16",
+    "@arcblock/did-util": "1.21.0",
+    "@arcblock/event-hub": "1.21.0",
+    "@arcblock/jwt": "1.21.0",
     "@arcblock/pm2-events": "^0.0.5",
-    "@arcblock/validator": "1.20.16",
-    "@arcblock/vc": "1.20.16",
-    "@blocklet/constant": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@blocklet/did-space-js": "^1.1.7",
-    "@blocklet/env": "1.16.47-beta-20250721-073316-a6de1fa3",
+    "@arcblock/validator": "1.21.0",
+    "@arcblock/vc": "1.21.0",
+    "@blocklet/constant": "1.16.47-beta-20250723-114212-8da08071",
+    "@blocklet/did-space-js": "^1.1.8",
+    "@blocklet/env": "1.16.47-beta-20250723-114212-8da08071",
     "@blocklet/error": "^0.2.5",
-    "@blocklet/meta": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@blocklet/resolver": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@blocklet/sdk": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@blocklet/store": "1.16.47-beta-20250721-073316-a6de1fa3",
-    "@blocklet/theme": "^3.0.26",
+    "@blocklet/meta": "1.16.47-beta-20250723-114212-8da08071",
+    "@blocklet/resolver": "1.16.47-beta-20250723-114212-8da08071",
+    "@blocklet/sdk": "1.16.47-beta-20250723-114212-8da08071",
+    "@blocklet/store": "1.16.47-beta-20250723-114212-8da08071",
+    "@blocklet/theme": "^3.0.30",
     "@fidm/x509": "^1.2.1",
-    "@ocap/mcrypto": "1.20.16",
-    "@ocap/util": "1.20.16",
-    "@ocap/wallet": "1.20.16",
+    "@ocap/mcrypto": "1.21.0",
+    "@ocap/util": "1.21.0",
+    "@ocap/wallet": "1.21.0",
     "@slack/webhook": "^5.0.4",
     "archiver": "^7.0.1",
     "axios": "^1.7.9",
@@ -105,7 +106,7 @@
     "transliteration": "^2.3.5",
     "ua-parser-js": "^1.0.2",
     "ufo": "^1.5.3",
-    "uuid": "^9.0.1",
+    "uuid": "^11.1.0",
     "valid-url": "^1.0.9",
     "which": "^2.0.2",
     "xbytes": "^1.8.0"
@@ -116,5 +117,5 @@
     "jest": "^29.7.0",
     "unzipper": "^0.10.11"
   },
-  "gitHead": "2163d72cfb533e6dbcedd7082c45d7f3dbe3cd90"
+  "gitHead": "39a8ac5b8ca38755da47fd6f895d4fb0e19c0093"
 }