@abtnode/core 1.16.51-beta-20250904-031834-c611f059 → 1.16.51-beta-20250905-023351-70af144b

package/lib/api/team.js

@@ -59,6 +59,7 @@ const { getBlocklet } = require('../util/blocklet');
 const StoreUtil = require('../util/store');
 const { profileSchema } = require('../validators/user');
 const { passportDisplaySchema } = require('../validators/util');
+const { validateUserRolePassport } = require('../util/validate-user-role-passport');
 
 const sanitizeUrl = (url) => {
   if (!url) {
@@ -683,9 +684,11 @@ class TeamAPI extends EventEmitter {
     }
   }
 
-  async getUserFollowStats({ teamDid, userDids }) {
+  async getUserFollowStats({ teamDid, userDids }, context = {}) {
     const state = await this.getUserState(teamDid);
-    return state.getFollowStats(userDids);
+    const info = await this.node.read();
+    const prefix = process.env.NODE_ENV === 'production' ? info.routing.adminPath : '';
+    return state.getFollowStats({ userDids, teamDid, prefix }, context);
   }
 
   async checkFollowing({ teamDid, userDids = [], followerDid }) {
@@ -1094,6 +1097,14 @@ class TeamAPI extends EventEmitter {
       throw new Error('Inviter does not exist');
     }
 
+    if ((user?.role || '').startsWith('blocklet-')) {
+      const userInfo = await this.getUser({ teamDid, user });
+      validateUserRolePassport({
+        role: (user?.role || '').replace('blocklet-', ''),
+        passports: userInfo?.passports || [],
+      });
+    }
+
     const expireDate = Date.now() + (expireTime || this.memberInviteExpireTime);
     const state = await this.getSessionState(teamDid);
     const { id: inviteId } = await state.start({

package/lib/blocklet/migration-dist/migration.cjs

@@ -5429,11 +5429,457 @@ SafeBuffer.allocUnsafeSlow = function (size) {
 
 /***/ }),
 
-/***/ 6872:
+/***/ 4953:
+/***/ ((module) => {
+
+"use strict";
+
+
+module.exports = {
+	"aliceblue": [240, 248, 255],
+	"antiquewhite": [250, 235, 215],
+	"aqua": [0, 255, 255],
+	"aquamarine": [127, 255, 212],
+	"azure": [240, 255, 255],
+	"beige": [245, 245, 220],
+	"bisque": [255, 228, 196],
+	"black": [0, 0, 0],
+	"blanchedalmond": [255, 235, 205],
+	"blue": [0, 0, 255],
+	"blueviolet": [138, 43, 226],
+	"brown": [165, 42, 42],
+	"burlywood": [222, 184, 135],
+	"cadetblue": [95, 158, 160],
+	"chartreuse": [127, 255, 0],
+	"chocolate": [210, 105, 30],
+	"coral": [255, 127, 80],
+	"cornflowerblue": [100, 149, 237],
+	"cornsilk": [255, 248, 220],
+	"crimson": [220, 20, 60],
+	"cyan": [0, 255, 255],
+	"darkblue": [0, 0, 139],
+	"darkcyan": [0, 139, 139],
+	"darkgoldenrod": [184, 134, 11],
+	"darkgray": [169, 169, 169],
+	"darkgreen": [0, 100, 0],
+	"darkgrey": [169, 169, 169],
+	"darkkhaki": [189, 183, 107],
+	"darkmagenta": [139, 0, 139],
+	"darkolivegreen": [85, 107, 47],
+	"darkorange": [255, 140, 0],
+	"darkorchid": [153, 50, 204],
+	"darkred": [139, 0, 0],
+	"darksalmon": [233, 150, 122],
+	"darkseagreen": [143, 188, 143],
+	"darkslateblue": [72, 61, 139],
+	"darkslategray": [47, 79, 79],
+	"darkslategrey": [47, 79, 79],
+	"darkturquoise": [0, 206, 209],
+	"darkviolet": [148, 0, 211],
+	"deeppink": [255, 20, 147],
+	"deepskyblue": [0, 191, 255],
+	"dimgray": [105, 105, 105],
+	"dimgrey": [105, 105, 105],
+	"dodgerblue": [30, 144, 255],
+	"firebrick": [178, 34, 34],
+	"floralwhite": [255, 250, 240],
+	"forestgreen": [34, 139, 34],
+	"fuchsia": [255, 0, 255],
+	"gainsboro": [220, 220, 220],
+	"ghostwhite": [248, 248, 255],
+	"gold": [255, 215, 0],
+	"goldenrod": [218, 165, 32],
+	"gray": [128, 128, 128],
+	"green": [0, 128, 0],
+	"greenyellow": [173, 255, 47],
+	"grey": [128, 128, 128],
+	"honeydew": [240, 255, 240],
+	"hotpink": [255, 105, 180],
+	"indianred": [205, 92, 92],
+	"indigo": [75, 0, 130],
+	"ivory": [255, 255, 240],
+	"khaki": [240, 230, 140],
+	"lavender": [230, 230, 250],
+	"lavenderblush": [255, 240, 245],
+	"lawngreen": [124, 252, 0],
+	"lemonchiffon": [255, 250, 205],
+	"lightblue": [173, 216, 230],
+	"lightcoral": [240, 128, 128],
+	"lightcyan": [224, 255, 255],
+	"lightgoldenrodyellow": [250, 250, 210],
+	"lightgray": [211, 211, 211],
+	"lightgreen": [144, 238, 144],
+	"lightgrey": [211, 211, 211],
+	"lightpink": [255, 182, 193],
+	"lightsalmon": [255, 160, 122],
+	"lightseagreen": [32, 178, 170],
+	"lightskyblue": [135, 206, 250],
+	"lightslategray": [119, 136, 153],
+	"lightslategrey": [119, 136, 153],
+	"lightsteelblue": [176, 196, 222],
+	"lightyellow": [255, 255, 224],
+	"lime": [0, 255, 0],
+	"limegreen": [50, 205, 50],
+	"linen": [250, 240, 230],
+	"magenta": [255, 0, 255],
+	"maroon": [128, 0, 0],
+	"mediumaquamarine": [102, 205, 170],
+	"mediumblue": [0, 0, 205],
+	"mediumorchid": [186, 85, 211],
+	"mediumpurple": [147, 112, 219],
+	"mediumseagreen": [60, 179, 113],
+	"mediumslateblue": [123, 104, 238],
+	"mediumspringgreen": [0, 250, 154],
+	"mediumturquoise": [72, 209, 204],
+	"mediumvioletred": [199, 21, 133],
+	"midnightblue": [25, 25, 112],
+	"mintcream": [245, 255, 250],
+	"mistyrose": [255, 228, 225],
+	"moccasin": [255, 228, 181],
+	"navajowhite": [255, 222, 173],
+	"navy": [0, 0, 128],
+	"oldlace": [253, 245, 230],
+	"olive": [128, 128, 0],
+	"olivedrab": [107, 142, 35],
+	"orange": [255, 165, 0],
+	"orangered": [255, 69, 0],
+	"orchid": [218, 112, 214],
+	"palegoldenrod": [238, 232, 170],
+	"palegreen": [152, 251, 152],
+	"paleturquoise": [175, 238, 238],
+	"palevioletred": [219, 112, 147],
+	"papayawhip": [255, 239, 213],
+	"peachpuff": [255, 218, 185],
+	"peru": [205, 133, 63],
+	"pink": [255, 192, 203],
+	"plum": [221, 160, 221],
+	"powderblue": [176, 224, 230],
+	"purple": [128, 0, 128],
+	"rebeccapurple": [102, 51, 153],
+	"red": [255, 0, 0],
+	"rosybrown": [188, 143, 143],
+	"royalblue": [65, 105, 225],
+	"saddlebrown": [139, 69, 19],
+	"salmon": [250, 128, 114],
+	"sandybrown": [244, 164, 96],
+	"seagreen": [46, 139, 87],
+	"seashell": [255, 245, 238],
+	"sienna": [160, 82, 45],
+	"silver": [192, 192, 192],
+	"skyblue": [135, 206, 235],
+	"slateblue": [106, 90, 205],
+	"slategray": [112, 128, 144],
+	"slategrey": [112, 128, 144],
+	"snow": [255, 250, 250],
+	"springgreen": [0, 255, 127],
+	"steelblue": [70, 130, 180],
+	"tan": [210, 180, 140],
+	"teal": [0, 128, 128],
+	"thistle": [216, 191, 216],
+	"tomato": [255, 99, 71],
+	"turquoise": [64, 224, 208],
+	"violet": [238, 130, 238],
+	"wheat": [245, 222, 179],
+	"white": [255, 255, 255],
+	"whitesmoke": [245, 245, 245],
+	"yellow": [255, 255, 0],
+	"yellowgreen": [154, 205, 50]
+};
+
+
+/***/ }),
+
+/***/ 9407:
+/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
+
+/* MIT license */
+var colorNames = __nccwpck_require__(4953);
+var swizzle = __nccwpck_require__(4421);
+var hasOwnProperty = Object.hasOwnProperty;
+
+var reverseNames = Object.create(null);
+
+// create a list of reverse color names
+for (var name in colorNames) {
+	if (hasOwnProperty.call(colorNames, name)) {
+		reverseNames[colorNames[name]] = name;
+	}
+}
+
+var cs = module.exports = {
+	to: {},
+	get: {}
+};
+
+cs.get = function (string) {
+	var prefix = string.substring(0, 3).toLowerCase();
+	var val;
+	var model;
+	switch (prefix) {
+		case 'hsl':
+			val = cs.get.hsl(string);
+			model = 'hsl';
+			break;
+		case 'hwb':
+			val = cs.get.hwb(string);
+			model = 'hwb';
+			break;
+		default:
+			val = cs.get.rgb(string);
+			model = 'rgb';
+			break;
+	}
+
+	if (!val) {
+		return null;
+	}
+
+	return {model: model, value: val};
+};
+
+cs.get.rgb = function (string) {
+	if (!string) {
+		return null;
+	}
+
+	var abbr = /^#([a-f0-9]{3,4})$/i;
+	var hex = /^#([a-f0-9]{6})([a-f0-9]{2})?$/i;
+	var rgba = /^rgba?\(\s*([+-]?\d+)(?=[\s,])\s*(?:,\s*)?([+-]?\d+)(?=[\s,])\s*(?:,\s*)?([+-]?\d+)\s*(?:[,|\/]\s*([+-]?[\d\.]+)(%?)\s*)?\)$/;
+	var per = /^rgba?\(\s*([+-]?[\d\.]+)\%\s*,?\s*([+-]?[\d\.]+)\%\s*,?\s*([+-]?[\d\.]+)\%\s*(?:[,|\/]\s*([+-]?[\d\.]+)(%?)\s*)?\)$/;
+	var keyword = /^(\w+)$/;
+
+	var rgb = [0, 0, 0, 1];
+	var match;
+	var i;
+	var hexAlpha;
+
+	if (match = string.match(hex)) {
+		hexAlpha = match[2];
+		match = match[1];
+
+		for (i = 0; i < 3; i++) {
+			// https://jsperf.com/slice-vs-substr-vs-substring-methods-long-string/19
+			var i2 = i * 2;
+			rgb[i] = parseInt(match.slice(i2, i2 + 2), 16);
+		}
+
+		if (hexAlpha) {
+			rgb[3] = parseInt(hexAlpha, 16) / 255;
+		}
+	} else if (match = string.match(abbr)) {
+		match = match[1];
+		hexAlpha = match[3];
+
+		for (i = 0; i < 3; i++) {
+			rgb[i] = parseInt(match[i] + match[i], 16);
+		}
+
+		if (hexAlpha) {
+			rgb[3] = parseInt(hexAlpha + hexAlpha, 16) / 255;
+		}
+	} else if (match = string.match(rgba)) {
+		for (i = 0; i < 3; i++) {
+			rgb[i] = parseInt(match[i + 1], 0);
+		}
+
+		if (match[4]) {
+			if (match[5]) {
+				rgb[3] = parseFloat(match[4]) * 0.01;
+			} else {
+				rgb[3] = parseFloat(match[4]);
+			}
+		}
+	} else if (match = string.match(per)) {
+		for (i = 0; i < 3; i++) {
+			rgb[i] = Math.round(parseFloat(match[i + 1]) * 2.55);
+		}
+
+		if (match[4]) {
+			if (match[5]) {
+				rgb[3] = parseFloat(match[4]) * 0.01;
+			} else {
+				rgb[3] = parseFloat(match[4]);
+			}
+		}
+	} else if (match = string.match(keyword)) {
+		if (match[1] === 'transparent') {
+			return [0, 0, 0, 0];
+		}
+
+		if (!hasOwnProperty.call(colorNames, match[1])) {
+			return null;
+		}
+
+		rgb = colorNames[match[1]];
+		rgb[3] = 1;
+
+		return rgb;
+	} else {
+		return null;
+	}
+
+	for (i = 0; i < 3; i++) {
+		rgb[i] = clamp(rgb[i], 0, 255);
+	}
+	rgb[3] = clamp(rgb[3], 0, 1);
+
+	return rgb;
+};
+
+cs.get.hsl = function (string) {
+	if (!string) {
+		return null;
+	}
+
+	var hsl = /^hsla?\(\s*([+-]?(?:\d{0,3}\.)?\d+)(?:deg)?\s*,?\s*([+-]?[\d\.]+)%\s*,?\s*([+-]?[\d\.]+)%\s*(?:[,|\/]\s*([+-]?(?=\.\d|\d)(?:0|[1-9]\d*)?(?:\.\d*)?(?:[eE][+-]?\d+)?)\s*)?\)$/;
+	var match = string.match(hsl);
+
+	if (match) {
+		var alpha = parseFloat(match[4]);
+		var h = ((parseFloat(match[1]) % 360) + 360) % 360;
+		var s = clamp(parseFloat(match[2]), 0, 100);
+		var l = clamp(parseFloat(match[3]), 0, 100);
+		var a = clamp(isNaN(alpha) ? 1 : alpha, 0, 1);
+
+		return [h, s, l, a];
+	}
+
+	return null;
+};
+
+cs.get.hwb = function (string) {
+	if (!string) {
+		return null;
+	}
+
+	var hwb = /^hwb\(\s*([+-]?\d{0,3}(?:\.\d+)?)(?:deg)?\s*,\s*([+-]?[\d\.]+)%\s*,\s*([+-]?[\d\.]+)%\s*(?:,\s*([+-]?(?=\.\d|\d)(?:0|[1-9]\d*)?(?:\.\d*)?(?:[eE][+-]?\d+)?)\s*)?\)$/;
+	var match = string.match(hwb);
+
+	if (match) {
+		var alpha = parseFloat(match[4]);
+		var h = ((parseFloat(match[1]) % 360) + 360) % 360;
+		var w = clamp(parseFloat(match[2]), 0, 100);
+		var b = clamp(parseFloat(match[3]), 0, 100);
+		var a = clamp(isNaN(alpha) ? 1 : alpha, 0, 1);
+		return [h, w, b, a];
+	}
+
+	return null;
+};
+
+cs.to.hex = function () {
+	var rgba = swizzle(arguments);
+
+	return (
+		'#' +
+		hexDouble(rgba[0]) +
+		hexDouble(rgba[1]) +
+		hexDouble(rgba[2]) +
+		(rgba[3] < 1
+			? (hexDouble(Math.round(rgba[3] * 255)))
+			: '')
+	);
+};
+
+cs.to.rgb = function () {
+	var rgba = swizzle(arguments);
+
+	return rgba.length < 4 || rgba[3] === 1
+		? 'rgb(' + Math.round(rgba[0]) + ', ' + Math.round(rgba[1]) + ', ' + Math.round(rgba[2]) + ')'
+		: 'rgba(' + Math.round(rgba[0]) + ', ' + Math.round(rgba[1]) + ', ' + Math.round(rgba[2]) + ', ' + rgba[3] + ')';
+};
+
+cs.to.rgb.percent = function () {
+	var rgba = swizzle(arguments);
+
+	var r = Math.round(rgba[0] / 255 * 100);
+	var g = Math.round(rgba[1] / 255 * 100);
+	var b = Math.round(rgba[2] / 255 * 100);
+
+	return rgba.length < 4 || rgba[3] === 1
+		? 'rgb(' + r + '%, ' + g + '%, ' + b + '%)'
+		: 'rgba(' + r + '%, ' + g + '%, ' + b + '%, ' + rgba[3] + ')';
+};
+
+cs.to.hsl = function () {
+	var hsla = swizzle(arguments);
+	return hsla.length < 4 || hsla[3] === 1
+		? 'hsl(' + hsla[0] + ', ' + hsla[1] + '%, ' + hsla[2] + '%)'
+		: 'hsla(' + hsla[0] + ', ' + hsla[1] + '%, ' + hsla[2] + '%, ' + hsla[3] + ')';
+};
+
+// hwb is a bit different than rgb(a) & hsl(a) since there is no alpha specific syntax
+// (hwb have alpha optional & 1 is default value)
+cs.to.hwb = function () {
+	var hwba = swizzle(arguments);
+
+	var a = '';
+	if (hwba.length >= 4 && hwba[3] !== 1) {
+		a = ', ' + hwba[3];
+	}
+
+	return 'hwb(' + hwba[0] + ', ' + hwba[1] + '%, ' + hwba[2] + '%' + a + ')';
+};
+
+cs.to.keyword = function (rgb) {
+	return reverseNames[rgb.slice(0, 3)];
+};
+
+// helpers
+function clamp(num, min, max) {
+	return Math.min(Math.max(min, num), max);
+}
+
+function hexDouble(num) {
+	var str = Math.round(num).toString(16).toUpperCase();
+	return (str.length < 2) ? '0' + str : str;
+}
+
+
+/***/ }),
+
+/***/ 8107:
+/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
+
+"use strict";
+
+
+var color = __nccwpck_require__(1696)
+  , hex = __nccwpck_require__(5143);
+
+/**
+ * Generate a color for a given name. But be reasonably smart about it by
+ * understanding name spaces and coloring each namespace a bit lighter so they
+ * still have the same base color as the root.
+ *
+ * @param {string} namespace The namespace
+ * @param {string} [delimiter] The delimiter
+ * @returns {string} color
+ */
+module.exports = function colorspace(namespace, delimiter) {
+  var split = namespace.split(delimiter || ':');
+  var base = hex(split[0]);
+
+  if (!split.length) return base;
+
+  for (var i = 0, l = split.length - 1; i < l; i++) {
+    base = color(base)
+    .mix(color(hex(split[i + 1])))
+    .saturate(1)
+    .hex();
+  }
+
+  return base;
+};
+
+
+/***/ }),
+
+/***/ 4618:
 /***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
 
 /* MIT license */
-var cssKeywords = __nccwpck_require__(7888);
+var cssKeywords = __nccwpck_require__(8402);
 
 // NOTE: conversions should only return primitive values (i.e. arrays, or
 //       values that give correct `typeof` results).
@@ -6304,11 +6750,11 @@ convert.rgb.gray = function (rgb) {
 
 /***/ }),
 
-/***/ 4185:
+/***/ 192:
 /***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
 
-var conversions = __nccwpck_require__(6872);
-var route = __nccwpck_require__(4200);
+var conversions = __nccwpck_require__(4618);
+var route = __nccwpck_require__(209);
 
 var convert = {};
 
@@ -6389,170 +6835,10 @@ module.exports = convert;
 
 /***/ }),
 
-/***/ 7888:
-/***/ ((module) => {
-
-"use strict";
-
-
-module.exports = {
-	"aliceblue": [240, 248, 255],
-	"antiquewhite": [250, 235, 215],
-	"aqua": [0, 255, 255],
-	"aquamarine": [127, 255, 212],
-	"azure": [240, 255, 255],
-	"beige": [245, 245, 220],
-	"bisque": [255, 228, 196],
-	"black": [0, 0, 0],
-	"blanchedalmond": [255, 235, 205],
-	"blue": [0, 0, 255],
-	"blueviolet": [138, 43, 226],
-	"brown": [165, 42, 42],
-	"burlywood": [222, 184, 135],
-	"cadetblue": [95, 158, 160],
-	"chartreuse": [127, 255, 0],
-	"chocolate": [210, 105, 30],
-	"coral": [255, 127, 80],
-	"cornflowerblue": [100, 149, 237],
-	"cornsilk": [255, 248, 220],
-	"crimson": [220, 20, 60],
-	"cyan": [0, 255, 255],
-	"darkblue": [0, 0, 139],
-	"darkcyan": [0, 139, 139],
-	"darkgoldenrod": [184, 134, 11],
-	"darkgray": [169, 169, 169],
-	"darkgreen": [0, 100, 0],
-	"darkgrey": [169, 169, 169],
-	"darkkhaki": [189, 183, 107],
-	"darkmagenta": [139, 0, 139],
-	"darkolivegreen": [85, 107, 47],
-	"darkorange": [255, 140, 0],
-	"darkorchid": [153, 50, 204],
-	"darkred": [139, 0, 0],
-	"darksalmon": [233, 150, 122],
-	"darkseagreen": [143, 188, 143],
-	"darkslateblue": [72, 61, 139],
-	"darkslategray": [47, 79, 79],
-	"darkslategrey": [47, 79, 79],
-	"darkturquoise": [0, 206, 209],
-	"darkviolet": [148, 0, 211],
-	"deeppink": [255, 20, 147],
-	"deepskyblue": [0, 191, 255],
-	"dimgray": [105, 105, 105],
-	"dimgrey": [105, 105, 105],
-	"dodgerblue": [30, 144, 255],
-	"firebrick": [178, 34, 34],
-	"floralwhite": [255, 250, 240],
-	"forestgreen": [34, 139, 34],
-	"fuchsia": [255, 0, 255],
-	"gainsboro": [220, 220, 220],
-	"ghostwhite": [248, 248, 255],
-	"gold": [255, 215, 0],
-	"goldenrod": [218, 165, 32],
-	"gray": [128, 128, 128],
-	"green": [0, 128, 0],
-	"greenyellow": [173, 255, 47],
-	"grey": [128, 128, 128],
-	"honeydew": [240, 255, 240],
-	"hotpink": [255, 105, 180],
-	"indianred": [205, 92, 92],
-	"indigo": [75, 0, 130],
-	"ivory": [255, 255, 240],
-	"khaki": [240, 230, 140],
-	"lavender": [230, 230, 250],
-	"lavenderblush": [255, 240, 245],
-	"lawngreen": [124, 252, 0],
-	"lemonchiffon": [255, 250, 205],
-	"lightblue": [173, 216, 230],
-	"lightcoral": [240, 128, 128],
-	"lightcyan": [224, 255, 255],
-	"lightgoldenrodyellow": [250, 250, 210],
-	"lightgray": [211, 211, 211],
-	"lightgreen": [144, 238, 144],
-	"lightgrey": [211, 211, 211],
-	"lightpink": [255, 182, 193],
-	"lightsalmon": [255, 160, 122],
-	"lightseagreen": [32, 178, 170],
-	"lightskyblue": [135, 206, 250],
-	"lightslategray": [119, 136, 153],
-	"lightslategrey": [119, 136, 153],
-	"lightsteelblue": [176, 196, 222],
-	"lightyellow": [255, 255, 224],
-	"lime": [0, 255, 0],
-	"limegreen": [50, 205, 50],
-	"linen": [250, 240, 230],
-	"magenta": [255, 0, 255],
-	"maroon": [128, 0, 0],
-	"mediumaquamarine": [102, 205, 170],
-	"mediumblue": [0, 0, 205],
-	"mediumorchid": [186, 85, 211],
-	"mediumpurple": [147, 112, 219],
-	"mediumseagreen": [60, 179, 113],
-	"mediumslateblue": [123, 104, 238],
-	"mediumspringgreen": [0, 250, 154],
-	"mediumturquoise": [72, 209, 204],
-	"mediumvioletred": [199, 21, 133],
-	"midnightblue": [25, 25, 112],
-	"mintcream": [245, 255, 250],
-	"mistyrose": [255, 228, 225],
-	"moccasin": [255, 228, 181],
-	"navajowhite": [255, 222, 173],
-	"navy": [0, 0, 128],
-	"oldlace": [253, 245, 230],
-	"olive": [128, 128, 0],
-	"olivedrab": [107, 142, 35],
-	"orange": [255, 165, 0],
-	"orangered": [255, 69, 0],
-	"orchid": [218, 112, 214],
-	"palegoldenrod": [238, 232, 170],
-	"palegreen": [152, 251, 152],
-	"paleturquoise": [175, 238, 238],
-	"palevioletred": [219, 112, 147],
-	"papayawhip": [255, 239, 213],
-	"peachpuff": [255, 218, 185],
-	"peru": [205, 133, 63],
-	"pink": [255, 192, 203],
-	"plum": [221, 160, 221],
-	"powderblue": [176, 224, 230],
-	"purple": [128, 0, 128],
-	"rebeccapurple": [102, 51, 153],
-	"red": [255, 0, 0],
-	"rosybrown": [188, 143, 143],
-	"royalblue": [65, 105, 225],
-	"saddlebrown": [139, 69, 19],
-	"salmon": [250, 128, 114],
-	"sandybrown": [244, 164, 96],
-	"seagreen": [46, 139, 87],
-	"seashell": [255, 245, 238],
-	"sienna": [160, 82, 45],
-	"silver": [192, 192, 192],
-	"skyblue": [135, 206, 235],
-	"slateblue": [106, 90, 205],
-	"slategray": [112, 128, 144],
-	"slategrey": [112, 128, 144],
-	"snow": [255, 250, 250],
-	"springgreen": [0, 255, 127],
-	"steelblue": [70, 130, 180],
-	"tan": [210, 180, 140],
-	"teal": [0, 128, 128],
-	"thistle": [216, 191, 216],
-	"tomato": [255, 99, 71],
-	"turquoise": [64, 224, 208],
-	"violet": [238, 130, 238],
-	"wheat": [245, 222, 179],
-	"white": [255, 255, 255],
-	"whitesmoke": [245, 245, 245],
-	"yellow": [255, 255, 0],
-	"yellowgreen": [154, 205, 50]
-};
-
-
-/***/ }),
-
-/***/ 4200:
+/***/ 209:
 /***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
 
-var conversions = __nccwpck_require__(6872);
+var conversions = __nccwpck_require__(4618);
 
 /*
 	this function routes a model to all other models.
@@ -6653,7 +6939,7 @@ module.exports = function (fromModel) {
 
 /***/ }),
 
-/***/ 4953:
+/***/ 8402:
 /***/ ((module) => {
 
 "use strict";
@@ -6811,292 +7097,6 @@ module.exports = {
 };
 
 
-/***/ }),
-
-/***/ 9407:
-/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
-
-/* MIT license */
-var colorNames = __nccwpck_require__(4953);
-var swizzle = __nccwpck_require__(4421);
-var hasOwnProperty = Object.hasOwnProperty;
-
-var reverseNames = Object.create(null);
-
-// create a list of reverse color names
-for (var name in colorNames) {
-	if (hasOwnProperty.call(colorNames, name)) {
-		reverseNames[colorNames[name]] = name;
-	}
-}
-
-var cs = module.exports = {
-	to: {},
-	get: {}
-};
-
-cs.get = function (string) {
-	var prefix = string.substring(0, 3).toLowerCase();
-	var val;
-	var model;
-	switch (prefix) {
-		case 'hsl':
-			val = cs.get.hsl(string);
-			model = 'hsl';
-			break;
-		case 'hwb':
-			val = cs.get.hwb(string);
-			model = 'hwb';
-			break;
-		default:
-			val = cs.get.rgb(string);
-			model = 'rgb';
-			break;
-	}
-
-	if (!val) {
-		return null;
-	}
-
-	return {model: model, value: val};
-};
-
-cs.get.rgb = function (string) {
-	if (!string) {
-		return null;
-	}
-
-	var abbr = /^#([a-f0-9]{3,4})$/i;
-	var hex = /^#([a-f0-9]{6})([a-f0-9]{2})?$/i;
-	var rgba = /^rgba?\(\s*([+-]?\d+)(?=[\s,])\s*(?:,\s*)?([+-]?\d+)(?=[\s,])\s*(?:,\s*)?([+-]?\d+)\s*(?:[,|\/]\s*([+-]?[\d\.]+)(%?)\s*)?\)$/;
-	var per = /^rgba?\(\s*([+-]?[\d\.]+)\%\s*,?\s*([+-]?[\d\.]+)\%\s*,?\s*([+-]?[\d\.]+)\%\s*(?:[,|\/]\s*([+-]?[\d\.]+)(%?)\s*)?\)$/;
-	var keyword = /^(\w+)$/;
-
-	var rgb = [0, 0, 0, 1];
-	var match;
-	var i;
-	var hexAlpha;
-
-	if (match = string.match(hex)) {
-		hexAlpha = match[2];
-		match = match[1];
-
-		for (i = 0; i < 3; i++) {
-			// https://jsperf.com/slice-vs-substr-vs-substring-methods-long-string/19
-			var i2 = i * 2;
-			rgb[i] = parseInt(match.slice(i2, i2 + 2), 16);
-		}
-
-		if (hexAlpha) {
-			rgb[3] = parseInt(hexAlpha, 16) / 255;
-		}
-	} else if (match = string.match(abbr)) {
-		match = match[1];
-		hexAlpha = match[3];
-
-		for (i = 0; i < 3; i++) {
-			rgb[i] = parseInt(match[i] + match[i], 16);
-		}
-
-		if (hexAlpha) {
-			rgb[3] = parseInt(hexAlpha + hexAlpha, 16) / 255;
-		}
-	} else if (match = string.match(rgba)) {
-		for (i = 0; i < 3; i++) {
-			rgb[i] = parseInt(match[i + 1], 0);
-		}
-
-		if (match[4]) {
-			if (match[5]) {
-				rgb[3] = parseFloat(match[4]) * 0.01;
-			} else {
-				rgb[3] = parseFloat(match[4]);
-			}
-		}
-	} else if (match = string.match(per)) {
-		for (i = 0; i < 3; i++) {
-			rgb[i] = Math.round(parseFloat(match[i + 1]) * 2.55);
-		}
-
-		if (match[4]) {
-			if (match[5]) {
-				rgb[3] = parseFloat(match[4]) * 0.01;
-			} else {
-				rgb[3] = parseFloat(match[4]);
-			}
-		}
-	} else if (match = string.match(keyword)) {
-		if (match[1] === 'transparent') {
-			return [0, 0, 0, 0];
-		}
-
-		if (!hasOwnProperty.call(colorNames, match[1])) {
-			return null;
-		}
-
-		rgb = colorNames[match[1]];
-		rgb[3] = 1;
-
-		return rgb;
-	} else {
-		return null;
-	}
-
-	for (i = 0; i < 3; i++) {
-		rgb[i] = clamp(rgb[i], 0, 255);
-	}
-	rgb[3] = clamp(rgb[3], 0, 1);
-
-	return rgb;
-};
-
-cs.get.hsl = function (string) {
-	if (!string) {
-		return null;
-	}
-
-	var hsl = /^hsla?\(\s*([+-]?(?:\d{0,3}\.)?\d+)(?:deg)?\s*,?\s*([+-]?[\d\.]+)%\s*,?\s*([+-]?[\d\.]+)%\s*(?:[,|\/]\s*([+-]?(?=\.\d|\d)(?:0|[1-9]\d*)?(?:\.\d*)?(?:[eE][+-]?\d+)?)\s*)?\)$/;
-	var match = string.match(hsl);
-
-	if (match) {
-		var alpha = parseFloat(match[4]);
-		var h = ((parseFloat(match[1]) % 360) + 360) % 360;
-		var s = clamp(parseFloat(match[2]), 0, 100);
-		var l = clamp(parseFloat(match[3]), 0, 100);
-		var a = clamp(isNaN(alpha) ? 1 : alpha, 0, 1);
-
-		return [h, s, l, a];
-	}
-
-	return null;
-};
-
-cs.get.hwb = function (string) {
-	if (!string) {
-		return null;
-	}
-
-	var hwb = /^hwb\(\s*([+-]?\d{0,3}(?:\.\d+)?)(?:deg)?\s*,\s*([+-]?[\d\.]+)%\s*,\s*([+-]?[\d\.]+)%\s*(?:,\s*([+-]?(?=\.\d|\d)(?:0|[1-9]\d*)?(?:\.\d*)?(?:[eE][+-]?\d+)?)\s*)?\)$/;
-	var match = string.match(hwb);
-
-	if (match) {
-		var alpha = parseFloat(match[4]);
-		var h = ((parseFloat(match[1]) % 360) + 360) % 360;
-		var w = clamp(parseFloat(match[2]), 0, 100);
-		var b = clamp(parseFloat(match[3]), 0, 100);
-		var a = clamp(isNaN(alpha) ? 1 : alpha, 0, 1);
-		return [h, w, b, a];
-	}
-
-	return null;
-};
-
-cs.to.hex = function () {
-	var rgba = swizzle(arguments);
-
-	return (
-		'#' +
-		hexDouble(rgba[0]) +
-		hexDouble(rgba[1]) +
-		hexDouble(rgba[2]) +
-		(rgba[3] < 1
-			? (hexDouble(Math.round(rgba[3] * 255)))
-			: '')
-	);
-};
-
-cs.to.rgb = function () {
-	var rgba = swizzle(arguments);
-
-	return rgba.length < 4 || rgba[3] === 1
-		? 'rgb(' + Math.round(rgba[0]) + ', ' + Math.round(rgba[1]) + ', ' + Math.round(rgba[2]) + ')'
-		: 'rgba(' + Math.round(rgba[0]) + ', ' + Math.round(rgba[1]) + ', ' + Math.round(rgba[2]) + ', ' + rgba[3] + ')';
-};
-
-cs.to.rgb.percent = function () {
-	var rgba = swizzle(arguments);
-
-	var r = Math.round(rgba[0] / 255 * 100);
-	var g = Math.round(rgba[1] / 255 * 100);
-	var b = Math.round(rgba[2] / 255 * 100);
-
-	return rgba.length < 4 || rgba[3] === 1
-		? 'rgb(' + r + '%, ' + g + '%, ' + b + '%)'
-		: 'rgba(' + r + '%, ' + g + '%, ' + b + '%, ' + rgba[3] + ')';
-};
-
-cs.to.hsl = function () {
-	var hsla = swizzle(arguments);
-	return hsla.length < 4 || hsla[3] === 1
-		? 'hsl(' + hsla[0] + ', ' + hsla[1] + '%, ' + hsla[2] + '%)'
-		: 'hsla(' + hsla[0] + ', ' + hsla[1] + '%, ' + hsla[2] + '%, ' + hsla[3] + ')';
-};
-
-// hwb is a bit different than rgb(a) & hsl(a) since there is no alpha specific syntax
-// (hwb have alpha optional & 1 is default value)
-cs.to.hwb = function () {
-	var hwba = swizzle(arguments);
-
-	var a = '';
-	if (hwba.length >= 4 && hwba[3] !== 1) {
-		a = ', ' + hwba[3];
-	}
-
-	return 'hwb(' + hwba[0] + ', ' + hwba[1] + '%, ' + hwba[2] + '%' + a + ')';
-};
-
-cs.to.keyword = function (rgb) {
-	return reverseNames[rgb.slice(0, 3)];
-};
-
-// helpers
-function clamp(num, min, max) {
-	return Math.min(Math.max(min, num), max);
-}
-
-function hexDouble(num) {
-	var str = Math.round(num).toString(16).toUpperCase();
-	return (str.length < 2) ? '0' + str : str;
-}
-
-
-/***/ }),
-
-/***/ 8107:
-/***/ ((module, __unused_webpack_exports, __nccwpck_require__) => {
-
-"use strict";
-
-
-var color = __nccwpck_require__(1696)
-  , hex = __nccwpck_require__(5143);
-
-/**
- * Generate a color for a given name. But be reasonably smart about it by
- * understanding name spaces and coloring each namespace a bit lighter so they
- * still have the same base color as the root.
- *
- * @param {string} namespace The namespace
- * @param {string} [delimiter] The delimiter
- * @returns {string} color
- */
-module.exports = function colorspace(namespace, delimiter) {
-  var split = namespace.split(delimiter || ':');
-  var base = hex(split[0]);
-
-  if (!split.length) return base;
-
-  for (var i = 0, l = split.length - 1; i < l; i++) {
-    base = color(base)
-    .mix(color(hex(split[i + 1])))
-    .saturate(1)
-    .hex();
-  }
-
-  return base;
-};
-
-
 /***/ }),
 
 /***/ 1696:
@@ -7106,7 +7106,7 @@ module.exports = function colorspace(namespace, delimiter) {
 
 
 var colorString = __nccwpck_require__(9407);
-var convert = __nccwpck_require__(4185);
+var convert = __nccwpck_require__(192);
 
 var _slice = [].slice;
 
@@ -38946,7 +38946,7 @@ module.exports = require("zlib");
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.16.50","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib","test":"node tools/jest.js","coverage":"npm run test -- --coverage"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.16.50","@abtnode/auth":"1.16.50","@abtnode/certificate-manager":"1.16.50","@abtnode/constant":"1.16.50","@abtnode/cron":"1.16.50","@abtnode/db-cache":"1.16.50","@abtnode/docker-utils":"1.16.50","@abtnode/logger":"1.16.50","@abtnode/models":"1.16.50","@abtnode/queue":"1.16.50","@abtnode/rbac":"1.16.50","@abtnode/router-provider":"1.16.50","@abtnode/static-server":"1.16.50","@abtnode/timemachine":"1.16.50","@abtnode/util":"1.16.50","@aigne/aigne-hub":"^0.8.6","@arcblock/did":"1.24.0","@arcblock/did-connect-js":"1.24.0","@arcblock/did-ext":"1.24.0","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.24.0","@arcblock/event-hub":"1.24.0","@arcblock/jwt":"1.24.0","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.24.0","@arcblock/vc":"1.24.0","@blocklet/constant":"1.16.50","@blocklet/did-space-js":"^1.1.19","@blocklet/env":"1.16.50","@blocklet/error":"^0.2.5","@blocklet/meta":"1.16.50","@blocklet/resolver":"1.16.50","@blocklet/sdk":"1.16.50","@blocklet/server-js":"1.16.50","@blocklet/store":"1.16.50","@blocklet/theme":"^3.1.33","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.24.0","@ocap/util":"1.24.0","@ocap/wallet":"1.24.0","@slack/webhook":"^5.0.4","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"^2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"expand-tilde":"^2.0.2","express":"^4.18.2","jest":"^29.7.0","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.16.50","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib","test":"node tools/jest.js","coverage":"npm run test -- --coverage"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.16.50","@abtnode/auth":"1.16.50","@abtnode/certificate-manager":"1.16.50","@abtnode/constant":"1.16.50","@abtnode/cron":"1.16.50","@abtnode/db-cache":"1.16.50","@abtnode/docker-utils":"1.16.50","@abtnode/logger":"1.16.50","@abtnode/models":"1.16.50","@abtnode/queue":"1.16.50","@abtnode/rbac":"1.16.50","@abtnode/router-provider":"1.16.50","@abtnode/static-server":"1.16.50","@abtnode/timemachine":"1.16.50","@abtnode/util":"1.16.50","@aigne/aigne-hub":"^0.8.6","@arcblock/did":"1.24.0","@arcblock/did-connect-js":"1.24.0","@arcblock/did-ext":"1.24.0","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.24.0","@arcblock/event-hub":"1.24.0","@arcblock/jwt":"1.24.0","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.24.0","@arcblock/vc":"1.24.0","@blocklet/constant":"1.16.50","@blocklet/did-space-js":"^1.1.22","@blocklet/env":"1.16.50","@blocklet/error":"^0.2.5","@blocklet/meta":"1.16.50","@blocklet/resolver":"1.16.50","@blocklet/sdk":"1.16.50","@blocklet/server-js":"1.16.50","@blocklet/store":"1.16.50","@blocklet/theme":"^3.1.34","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.24.0","@ocap/util":"1.24.0","@ocap/wallet":"1.24.0","@slack/webhook":"^5.0.4","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"^2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"expand-tilde":"^2.0.2","express":"^4.18.2","jest":"^29.7.0","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
 
 /***/ }),
 

package/lib/blocklet/webhook/event-bus.js

@@ -51,7 +51,7 @@ const init = ({ states, teamManager }) => {
     const { event } = data;
     const { type, source, object_id: objectId, object_type: objectType } = event;
 
-    const request = event.data;
+    const request = { ...event.data, $eventName: type };
     logger.info('create webhook event', { type, source, request });
 
     const { webhookEventState } = await teamManager.getWebhookState(appDid);

package/lib/states/user.js

@@ -11,12 +11,12 @@ const { updateConnectedAccount } = require('@abtnode/util/lib/user');
 const { LOGIN_PROVIDER } = require('@blocklet/constant');
 const { CustomError } = require('@blocklet/error');
 const { Joi } = require('@arcblock/validator');
-
 const logger = require('@abtnode/logger')('@abtnode/core:states:user');
 
 const { validateOwner } = require('../util');
 const { loginSchema, disconnectAccountSchema } = require('../validators/user');
 const ExtendBase = require('./base');
+const { isInDashboard, isUserPrivacyEnabled, isAdminUser } = require('../util/verify-user-private');
 
 const isNullOrUndefined = (x) => x === undefined || x === null;
 
@@ -962,6 +962,8 @@ SELECT did,inviter,generation FROM UserTree`.trim();
 
     const { user: contextUser } = context;
 
+    const contextUserDid = contextUser?.userInfo?.did || contextUser?.did;
+
     await this._validateUsersExist([targetDid]);
 
     const isFollowers = type === 'followers';
@@ -977,15 +979,15 @@ SELECT did,inviter,generation FROM UserTree`.trim();
       const userDids = [...new Set(result.list.map((follow) => (isFollowers ? follow.followerDid : follow.userDid)))];
       const users = await this.find({
         where: { did: { [Op.in]: userDids } },
-        attributes: ['did', 'fullName', 'avatar', 'email'],
+        attributes: ['did', 'fullName', 'avatar'],
       });
       userMap = new Map(users.map((user) => [user.did, user]));
     }
 
     // 准备关注状态映射
     let followingStatusMap = {};
-    if (includeFollowStatus && contextUser?.did) {
-      if (contextUser.did !== targetDid) {
+    if (includeFollowStatus && contextUserDid) {
+      if (contextUserDid !== targetDid) {
         // 查询当前用户对列表中所有用户的关注状态
         const targetUserDids = result.list.map((follow) => (isFollowers ? follow.followerDid : follow.userDid));
         followingStatusMap = await this.isFollowing(contextUser.did, targetUserDids);
@@ -1008,8 +1010,8 @@ SELECT did,inviter,generation FROM UserTree`.trim();
       }
 
       // 添加关注状态
-      if (includeFollowStatus && contextUser?.did) {
-        if (contextUser.did !== targetDid) {
+      if (includeFollowStatus && contextUserDid) {
+        if (contextUserDid !== targetDid) {
           // 如果查看的是别人的关注列表，需要添加是否已关注的信息
           enrichedFollow.isFollowing = followingStatusMap[userDid] || false;
         } else if (isFollowers) {
@@ -1087,7 +1089,7 @@ SELECT did,inviter,generation FROM UserTree`.trim();
    * @param {string[]} userDids - 用户的 DID 数组
    * @returns {Promise<{[userDid: string]: {followers: number, following: number}}>} - 返回对象，键为用户DID，值为统计信息
    */
-  async getFollowStats(userDids = []) {
+  async getFollowStats({ userDids = [], teamDid, prefix }, context = {}) {
     if (!this.userFollowers || !Array.isArray(userDids) || userDids.length === 0) {
       return userDids.reduce(
         (acc, userDid) => ({
@@ -1099,6 +1101,20 @@ SELECT did,inviter,generation FROM UserTree`.trim();
     }
 
     try {
+      const { user: contextUser } = context;
+      const contextUserDid = contextUser?.userInfo?.did || contextUser?.did;
+
+      const privacyMap = new Map();
+      if (!(isInDashboard(teamDid, prefix, context) && isAdminUser(context))) {
+        // 批量获取用户隐私设置
+        const usersInfo = await this.find({ did: { $in: userDids } }, { did: 1, extra: 1 });
+
+        usersInfo.forEach((userInfo) => {
+          const isPrivate = isUserPrivacyEnabled(userInfo);
+          privacyMap.set(userInfo.did, isPrivate);
+        });
+      }
+
       // 使用原生 SQL 查询进行批量统计，提高性能
       const followersQuery = `
         SELECT "userDid", COUNT(*) as count
@@ -1123,15 +1139,25 @@ SELECT did,inviter,generation FROM UserTree`.trim();
       const followersMap = new Map(followersResults.map((row) => [row.userDid, Number(row.count)]));
       const followingMap = new Map(followingResults.map((row) => [row.followerDid, Number(row.count)]));
 
-      // 使用 Object.fromEntries 优化结果对象构建
+      // 使用 Object.fromEntries 优化结果对象构建，并进行隐私判断
       const result = Object.fromEntries(
-        userDids.map((userDid) => [
-          userDid,
-          {
-            followers: followersMap.get(userDid) || 0,
-            following: followingMap.get(userDid) || 0,
-          },
-        ])
+        userDids.map((userDid) => {
+          const isPrivate = privacyMap.get(userDid) || false;
+          const isOwner = contextUserDid === userDid;
+
+          // 如果用户设置了隐私且查看者不是用户本人，返回 0
+          if (isPrivate && !isOwner) {
+            return [userDid, { followers: 0, following: 0 }];
+          }
+
+          return [
+            userDid,
+            {
+              followers: followersMap.get(userDid) || 0,
+              following: followingMap.get(userDid) || 0,
+            },
+          ];
+        })
       );
 
       return result;

package/lib/team/manager.js

@@ -226,10 +226,14 @@ class TeamManager extends EventEmitter {
           userDids.map((did) => userState.getUser(did, { includePassports: true, enableConnectedAccount: true }))
         );
 
-        const validUsers = queryUsers.filter((user) => {
+        const validUsers = queryUsers.filter((user, index) => {
+          if (!user) {
+            logger.warn('receiver is not exist: ', { userDid: userDids[index] });
+            return false;
+          }
           const { passports = [] } = user;
           // 如果用户没有 passport，或者 有一个 passport 没有过期，则返回 true
-          if (!passports.length || passports.some((x) => !this.isPassportExpired(x))) {
+          if (!passports?.length || passports.some((x) => !this.isPassportExpired(x))) {
             return true;
           }
           logger.warn(`user's passports are all expired: ${user.did}`);
@@ -480,7 +484,7 @@ class TeamManager extends EventEmitter {
         ...(actorInfo ? { actorInfo } : {}),
         options: typeof payload.options === 'object' && payload.options !== null ? payload.options : {},
       });
-      logger.info('notification has been added to the push queue', { notificationId: doc.id });
+      logger.info('notification has been added to the push queue', { teamDid, notificationId: doc.id });
     } catch (error) {
       logger.error('Failed to emit notification events', { error });
       throw new Error(`Failed to emit notification events: ${error.message}`);
@@ -538,14 +542,14 @@ class TeamManager extends EventEmitter {
 
       const doc = await this._createNotificationDoc(notificationState, payload, receivers, source, isServices, teamDid);
 
-      logger.info('notification created successfully', { notificationId: doc.id });
+      logger.info('notification created successfully', { teamDid, notificationId: doc.id });
 
       const defaultChannel = this._getDefaultChannels(isServices, source);
       await this._emitNotificationEvents(doc, payload, receivers, teamDid, isServices, defaultChannel, actorInfo);
 
       return doc;
     } catch (error) {
-      logger.error('notification create failed', { error });
+      logger.error('notification create failed', { teamDid, error });
       throw error;
     }
   }

package/lib/util/validate-user-role-passport.js

@@ -0,0 +1,27 @@
+const { CustomError } = require('@blocklet/error');
+
+const validateUserRolePassport = ({ role, passports }) => {
+  if (!Array.isArray(passports)) {
+    throw new CustomError(400, 'Invalid passports: must be an array');
+  }
+
+  if (!role || typeof role !== 'string') {
+    throw new CustomError(400, 'Invalid role: must be a non-empty string');
+  }
+
+  const filterPassports = passports.filter((x) => x.status === 'valid' && x.role === role);
+
+  if (filterPassports.length === 0) {
+    throw new CustomError(400, `No valid passport found: you don't have the required role "${role}".`);
+  }
+
+  const isValid = filterPassports.every((x) => x.expirationDate);
+  if (isValid) {
+    throw new CustomError(
+      400,
+      `The passport for role "${role}" is only temporary and cannot be used to invite new members.`
+    );
+  }
+};
+
+module.exports = { validateUserRolePassport };

package/lib/util/verify-access-key-user.js

@@ -6,10 +6,12 @@ const {
   WELLKNOWN_BLOCKLET_USER_PATH,
 } = require('@abtnode/constant');
 
-const { parseURL } = require('ufo');
+const { parseURL, joinURL } = require('ufo');
 
 const isAdminPath = (pathname) => pathname.startsWith(WELLKNOWN_BLOCKLET_ADMIN_PATH);
 const isUserCenterPath = (pathname) => pathname.startsWith(WELLKNOWN_BLOCKLET_USER_PATH);
+const isServerDashboardPath = (pathname, prefix, teamDid) =>
+  !teamDid ? false : pathname.startsWith(joinURL(prefix, 'blocklets', teamDid));
 
 const getEndpoint = (context) => {
   const { pathname } = parseURL(context.referrer);
@@ -54,4 +56,4 @@ const validateOperator = (context, operatorDid) => {
   }
 };
 
-module.exports = { validateOperator, getEndpoint, isUserCenterPath, isAdminPath };
+module.exports = { validateOperator, getEndpoint, isUserCenterPath, isAdminPath, isServerDashboardPath };

package/lib/util/verify-user-private.js

@@ -0,0 +1,42 @@
+const { ROLES, SERVER_ROLES, WELLKNOWN_BLOCKLET_USER_PATH } = require('@abtnode/constant');
+const get = require('lodash/get');
+const { joinURL } = require('ufo');
+const logger = require('@abtnode/logger')('@abtnode/core:util:verify-user-private');
+
+const { getEndpoint, isServerDashboardPath, isAdminPath } = require('./verify-access-key-user');
+
+const USER_FOLLOWERS_PATH = joinURL(WELLKNOWN_BLOCKLET_USER_PATH, 'user-followers');
+
+const isAdminUser = (context) => {
+  const { user = {} } = context || {};
+  const role = user.userInfo?.role || user.role;
+  return [ROLES.ADMIN, ROLES.OWNER, SERVER_ROLES.BLOCKLET_ADMIN, SERVER_ROLES.BLOCKLET_OWNER].includes(role);
+};
+
+const isUserPrivacyEnabled = (userInfo) => {
+  // 在 server 的dashboard 和 service 的 dashboard 中，不需要判断
+  const privacyInfo = get(userInfo, 'extra.privacy', {});
+  return get(privacyInfo, USER_FOLLOWERS_PATH, false);
+};
+
+const isInDashboard = (teamDid, prefix, context = {}) => {
+  const { user = {}, hostname, referrer } = context || {};
+  if (user.role === SERVER_ROLES.BLOCKLET_SDK || !teamDid) {
+    return false;
+  }
+
+  if (!hostname || !referrer) {
+    logger.warn('Missing hostname or referrer context');
+    return false;
+  }
+
+  try {
+    const pathname = getEndpoint(context);
+    return isAdminPath(pathname) || isServerDashboardPath(pathname, prefix, teamDid);
+  } catch (error) {
+    logger.warn('Failed to check if in dashboard', { error });
+    return false;
+  }
+};
+
+module.exports = { isInDashboard, isUserPrivacyEnabled, isAdminUser };

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.16.51-beta-20250904-031834-c611f059",
+  "version": "1.16.51-beta-20250905-023351-70af144b",
   "description": "",
   "main": "lib/index.js",
   "files": [
@@ -19,21 +19,21 @@
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/analytics": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/auth": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/certificate-manager": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/constant": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/cron": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/db-cache": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/docker-utils": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/logger": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/models": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/queue": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/rbac": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/router-provider": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/static-server": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/timemachine": "1.16.51-beta-20250904-031834-c611f059",
-    "@abtnode/util": "1.16.51-beta-20250904-031834-c611f059",
+    "@abtnode/analytics": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/auth": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/certificate-manager": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/constant": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/cron": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/db-cache": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/docker-utils": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/logger": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/models": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/queue": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/rbac": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/router-provider": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/static-server": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/timemachine": "1.16.51-beta-20250905-023351-70af144b",
+    "@abtnode/util": "1.16.51-beta-20250905-023351-70af144b",
     "@aigne/aigne-hub": "^0.8.6",
     "@arcblock/did": "1.24.0",
     "@arcblock/did-connect-js": "1.24.0",
@@ -45,16 +45,16 @@
     "@arcblock/pm2-events": "^0.0.5",
     "@arcblock/validator": "1.24.0",
     "@arcblock/vc": "1.24.0",
-    "@blocklet/constant": "1.16.51-beta-20250904-031834-c611f059",
-    "@blocklet/did-space-js": "^1.1.19",
-    "@blocklet/env": "1.16.51-beta-20250904-031834-c611f059",
+    "@blocklet/constant": "1.16.51-beta-20250905-023351-70af144b",
+    "@blocklet/did-space-js": "^1.1.22",
+    "@blocklet/env": "1.16.51-beta-20250905-023351-70af144b",
     "@blocklet/error": "^0.2.5",
-    "@blocklet/meta": "1.16.51-beta-20250904-031834-c611f059",
-    "@blocklet/resolver": "1.16.51-beta-20250904-031834-c611f059",
-    "@blocklet/sdk": "1.16.51-beta-20250904-031834-c611f059",
-    "@blocklet/server-js": "1.16.51-beta-20250904-031834-c611f059",
-    "@blocklet/store": "1.16.51-beta-20250904-031834-c611f059",
-    "@blocklet/theme": "^3.1.33",
+    "@blocklet/meta": "1.16.51-beta-20250905-023351-70af144b",
+    "@blocklet/resolver": "1.16.51-beta-20250905-023351-70af144b",
+    "@blocklet/sdk": "1.16.51-beta-20250905-023351-70af144b",
+    "@blocklet/server-js": "1.16.51-beta-20250905-023351-70af144b",
+    "@blocklet/store": "1.16.51-beta-20250905-023351-70af144b",
+    "@blocklet/theme": "^3.1.34",
     "@fidm/x509": "^1.2.1",
     "@ocap/mcrypto": "1.24.0",
     "@ocap/util": "1.24.0",
@@ -118,5 +118,5 @@
     "jest": "^29.7.0",
     "unzipper": "^0.10.11"
   },
-  "gitHead": "c5cedc16ca7239ec7dcadd8e046b2f8684df335c"
+  "gitHead": "d19892df7ce4f08a4a7a3ce96dff3bc6b01925ad"
 }