@abtnode/core 1.16.53-beta-20251013-075536-64fcb94b → 1.16.53-beta-20251014-110009-8220e324

package/lib/blocklet/downloader/blocklet-downloader.js

@@ -4,6 +4,7 @@ const path = require('path');
 const get = require('lodash/get');
 const pick = require('lodash/pick');
 const { toBase58 } = require('@ocap/util');
+const pAll = require('p-all');
 
 const defaultLogger = require('@abtnode/logger')('@abtnode/core:blocklet-downloader');
 
@@ -153,16 +154,19 @@ class BlockletDownloader extends EventEmitter {
         bundles: downloadList.map((x) => get(x, 'dist.tarball')),
       });
 
-      await Promise.all(
+      await pAll(
         downloadList.map((meta) => {
-          const url = meta.dist.tarball;
-          return this.bundleDownloader.download(meta, did, url, {
-            ...options,
-            onProgress: (data) => {
-              onProgress({ ...data, component: pick(meta, ['title', 'name', 'did', 'version']) });
-            },
-          });
-        })
+          return () => {
+            const url = meta.dist.tarball;
+            return this.bundleDownloader.download(meta, did, url, {
+              ...options,
+              onProgress: (data) => {
+                onProgress({ ...data, component: pick(meta, ['title', 'name', 'did', 'version']) });
+              },
+            });
+          };
+        }),
+        4
       );
 
       const isCancelled = await this.bundleDownloader.isCanceled(did);

package/lib/blocklet/manager/helper/blue-green-start-blocklet.js

@@ -189,7 +189,6 @@ const blueGreenStartBlocklet = async (
         isGreen: item.changeToGreen,
       });
 
-      nextBlocklet.greenStatus = BlockletStatus.starting;
       manager.emit(BlockletEvents.statusChange, doc1);
 
       const nodeInfo = await states.node.read();

package/lib/blocklet/migration-dist/migration.cjs

@@ -38954,7 +38954,7 @@ module.exports = require("zlib");
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.16.52","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib","test":"node tools/jest.js","test:disk":"CI=true npm run test tests/blocklet/manager/disk.spec.js","test:blue":"CI=true npm run test tests/blocklet/manager/disk-blue-green.spec.js","coverage":"npm run test -- --coverage"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.16.52","@abtnode/auth":"1.16.52","@abtnode/certificate-manager":"1.16.52","@abtnode/constant":"1.16.52","@abtnode/cron":"1.16.52","@abtnode/db-cache":"1.16.52","@abtnode/docker-utils":"1.16.52","@abtnode/logger":"1.16.52","@abtnode/models":"1.16.52","@abtnode/queue":"1.16.52","@abtnode/rbac":"1.16.52","@abtnode/router-provider":"1.16.52","@abtnode/static-server":"1.16.52","@abtnode/timemachine":"1.16.52","@abtnode/util":"1.16.52","@aigne/aigne-hub":"^0.10.0","@arcblock/did":"1.25.6","@arcblock/did-connect-js":"1.25.6","@arcblock/did-ext":"1.25.6","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.25.6","@arcblock/event-hub":"1.25.6","@arcblock/jwt":"1.25.6","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.25.6","@arcblock/vc":"1.25.6","@blocklet/constant":"1.16.52","@blocklet/did-space-js":"^1.1.29","@blocklet/env":"1.16.52","@blocklet/error":"^0.2.5","@blocklet/meta":"1.16.52","@blocklet/resolver":"1.16.52","@blocklet/sdk":"1.16.52","@blocklet/server-js":"1.16.52","@blocklet/store":"1.16.52","@blocklet/theme":"^3.1.45","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.25.6","@ocap/util":"1.25.6","@ocap/wallet":"1.25.6","@slack/webhook":"^5.0.4","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"^2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"expand-tilde":"^2.0.2","express":"^4.18.2","jest":"^29.7.0","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.16.52","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib","test":"node tools/jest.js","test:disk":"CI=true npm run test tests/blocklet/manager/disk.spec.js","test:blue":"CI=true npm run test tests/blocklet/manager/disk-blue-green.spec.js","coverage":"npm run test -- --coverage"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.16.52","@abtnode/auth":"1.16.52","@abtnode/certificate-manager":"1.16.52","@abtnode/constant":"1.16.52","@abtnode/cron":"1.16.52","@abtnode/db-cache":"1.16.52","@abtnode/docker-utils":"1.16.52","@abtnode/logger":"1.16.52","@abtnode/models":"1.16.52","@abtnode/queue":"1.16.52","@abtnode/rbac":"1.16.52","@abtnode/router-provider":"1.16.52","@abtnode/static-server":"1.16.52","@abtnode/timemachine":"1.16.52","@abtnode/util":"1.16.52","@aigne/aigne-hub":"^0.10.1","@arcblock/did":"1.25.6","@arcblock/did-connect-js":"1.25.6","@arcblock/did-ext":"1.25.6","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.25.6","@arcblock/event-hub":"1.25.6","@arcblock/jwt":"1.25.6","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.25.6","@arcblock/vc":"1.25.6","@blocklet/constant":"1.16.52","@blocklet/did-space-js":"^1.1.33","@blocklet/env":"1.16.52","@blocklet/error":"^0.2.5","@blocklet/meta":"1.16.52","@blocklet/resolver":"1.16.52","@blocklet/sdk":"1.16.52","@blocklet/server-js":"1.16.52","@blocklet/store":"1.16.52","@blocklet/theme":"^3.1.49","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.25.6","@ocap/util":"1.25.6","@ocap/wallet":"1.25.6","@slack/webhook":"^5.0.4","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"^2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"expand-tilde":"^2.0.2","express":"^4.18.2","jest":"^29.7.0","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
 
 /***/ }),
 

package/lib/blocklet/project/create-pack-release.js

@@ -38,6 +38,7 @@ const createPackRelease = async ({
   blockletRepository,
   blockletVideos,
   blockletDocker,
+  blockletSingleton,
   contentType,
   manager,
   status,
@@ -66,6 +67,7 @@ const createPackRelease = async ({
     blockletVideos,
     blockletDocker,
     contentType,
+    blockletSingleton,
   };
 
   const releaseSchema = createReleaseSchema(status);
@@ -260,6 +262,9 @@ const createPackRelease = async ({
       files: project.blockletScreenshots?.length ? ['screenshots'] : [],
       screenshots: project.blockletScreenshots || [],
       videos: blockletVideos || [],
+      capabilities: {
+        singleton: !!blockletSingleton,
+      },
     };
 
     if (blockletDocker?.dockerImage && dockerYml) {

package/lib/blocklet/project/index.js

@@ -195,6 +195,7 @@ const createRelease = async ({
   blockletComponents,
   blockletResourceType,
   blockletDocker,
+  blockletSingleton,
   contentType,
   note,
   manager,
@@ -227,6 +228,7 @@ const createRelease = async ({
     uploadedResource,
     blockletResourceType,
     blockletDocker,
+    blockletSingleton,
     contentType,
     note,
   };
@@ -263,6 +265,7 @@ const createRelease = async ({
       blockletComponents,
       blockletResourceType,
       blockletDocker,
+      blockletSingleton,
       contentType,
       note,
       manager,
@@ -412,6 +415,9 @@ const createRelease = async ({
       files: project.blockletScreenshots?.length ? ['screenshots'] : [],
       screenshots: project.blockletScreenshots || [],
       videos: blockletVideos || [],
+      capabilities: {
+        singleton: !!blockletSingleton,
+      },
     };
 
     // create resource

package/lib/blocklet/webhook/index.js

@@ -3,6 +3,7 @@ const pickBy = require('lodash/pickBy');
 const get = require('lodash/get');
 const { EventEmitter } = require('events');
 const { EVENTS } = require('@abtnode/constant');
+const { isAllowedReferer, isAllowedURL } = require('@abtnode/util/lib/ssrf-protector');
 const { API_VERSION, STATUS } = require('./util');
 const endpointQueueInit = require('./queues');
 
@@ -72,6 +73,17 @@ class WebhooksAPI extends EventEmitter {
       throw new Error('Missing required parameters');
     }
 
+    if (context?.referer) {
+      const { host = '' } = context || {};
+      if (!isAllowedReferer(context.referer, host)) {
+        throw new Error('Invalid request');
+      }
+    }
+
+    if (!(await isAllowedURL(input.url))) {
+      throw new Error('Invalid parameter: internal');
+    }
+
     const { webhookEndpointState } = await this.teamManager.getWebhookState(teamDid);
     const raw = pick(input, ALLOWED_UPDATE_FIELDS);
 
@@ -117,6 +129,19 @@ class WebhooksAPI extends EventEmitter {
     const updates = pick(data, ALLOWED_UPDATE_FIELDS);
     updates.updatedBy = getUserDid(context);
 
+    if (updates.url) {
+      if (context?.referer) {
+        const { host = '' } = context || {};
+        if (!isAllowedReferer(context.referer, host)) {
+          throw new Error('Invalid request');
+        }
+      }
+
+      if (!(await isAllowedURL(data.url))) {
+        throw new Error('Invalid parameter: internal');
+      }
+    }
+
     const result = await webhookEndpointState.updateWebhook(id, updates);
     return result;
   }

package/lib/locales/en.js

@@ -7,12 +7,10 @@ module.exports = {
     space: {
       error: {
         title: 'Backup to DID Spaces Failed',
-        forbidden:
-          'You don\'t have permission to back up. Try restoring the license on DID Spaces or reconnect.',
+        forbidden: "You don't have permission to back up. Try restoring the license on DID Spaces or reconnect.",
       },
       isFull: 'Your DID Spaces storage is full. Expand storage and try again.',
-      lackOfSpace:
-        'Not enough storage space. Expand storage and try again.',
+      lackOfSpace: 'Not enough storage space. Expand storage and try again.',
       unableEnableAutoBackup: 'Connect to DID Spaces before enabling auto backup.',
     },
   },

package/lib/locales/i18n.json

@@ -0,0 +1,122 @@
+{
+  "backup.space.error.title": {
+    "en": "Backup to DID Spaces Failed",
+    "value": {
+      "en": "Backup to DID Spaces Failed",
+      "es": "Copia de seguridad a DID Spaces falló",
+      "zh": "备份到 DID Spaces 失败",
+      "zh-TW": "備份到 DID Spaces 失敗",
+      "ja": "DID Spaces へのバックアップに失敗しました",
+      "ko": "DID Spaces 백업에 실패했습니다",
+      "de": "Backup nach DID Spaces fehlgeschlagen",
+      "hi": "DID Spaces पर बैकअप असफल",
+      "fr": "La sauvegarde vers DID Spaces a échoué",
+      "ar": "فشل النسخ الاحتياطي إلى DID Spaces",
+      "ru": "Резервное копирование в DID Spaces не выполнено",
+      "pt": "Backup para DID Spaces falhou",
+      "id": "Backup ke DID Spaces gagal",
+      "vi": "Sao lưu đến DID Spaces thất bại",
+      "th": "สำรองข้อมูลไปยัง DID Spaces ล้มเหลว"
+    }
+  },
+  "backup.space.error.forbidden": {
+    "en": "You don't have permission to back up. Try restoring the license on DID Spaces or reconnect.",
+    "value": {
+      "en": "You don't have permission to back up. Try restoring the license on DID Spaces or reconnect.",
+      "es": "No tienes permiso para hacer una copia de seguridad. Intenta restaurar la licencia en DID Spaces o volver a conectarte.",
+      "zh": "你没有权限备份。请在 DID Spaces 上尝试恢复授权或重新连接。",
+      "zh-TW": "你沒有權限備份。請在 DID Spaces 上嘗試恢復授權或重新連接。",
+      "ja": "バックアップする権限がありません。DID Spaces で ライセンスを復元するか、再接続してください。",
+      "ko": "백업 권한이 없습니다. DID Spaces 에서 라이선스를 복원하거나 다시 연결해 보십시오.",
+      "de": "Sie haben keine Berechtigung, eine Sicherung durchzuführen. Versuchen Sie, die Lizenz auf DID Spaces wiederherzustellen oder sich erneut zu verbinden.",
+      "hi": "आपके पास बैकअप बनाने की अनुमति नहीं है। DID Spaces पर लाइसेंस को पुनर्स्थापित करने की कोशिश करें या फिर से कनेक्ट करें।",
+      "fr": "Vous n'avez pas l'autorisation d'effectuer une sauvegarde. Essayez de restaurer la licence sur DID Spaces ou de vous reconnecter.",
+      "ar": "ليس لديك إذن لإجراء النسخ الاحتياطي. حاول استعادة الترخيص على DID Spaces أو أعد الاتصال.",
+      "ru": "У вас нет разрешения на создание резервной копии. Попробуйте восстановить лицензию на DID Spaces или переподключиться.",
+      "pt": "Você não tem permissão para fazer backup. Tente restaurar a licença em DID Spaces ou reconectar.",
+      "id": "Anda tidak memiliki izin untuk mencadangkan. Coba pulihkan lisensi di DID Spaces atau sambungkan kembali.",
+      "vi": "Bạn không có quyền sao lưu. Hãy thử khôi phục giấy phép trên DID Spaces hoặc kết nối lại.",
+      "th": "คุณไม่มีสิทธิ์ในการสำรองข้อมูล ลองกู้ใบอนุญาตบน DID Spaces หรือเชื่อมต่อใหม่อีกครั้ง."
+    }
+  },
+  "registry.getListError": {
+    "en": "Failed to get blocklet list from registry \"{registryUrl}\"",
+    "value": {
+      "en": "Failed to get blocklet list from registry \"{registryUrl}\"",
+      "es": "No se pudo obtener la lista de blocklet desde el registro “{registryUrl}”",
+      "zh": "无法从注册表获取 blocklet 列表“{registryUrl}”",
+      "zh-TW": "無法從註冊表取得 blocklet 列表“{registryUrl}”",
+      "ja": "レジストリから blocklet リストの取得に失敗しました「{registryUrl}」",
+      "ko": "레지스트리에서 blocklet 목록을 가져오지 못했습니다“{registryUrl}”",
+      "de": "Fehler beim Abrufen der blocklet-Liste aus dem Registry \"{registryUrl}\"",
+      "hi": "रेजिस्ट्री से blocklet सूची प्राप्त करने में विफल \"{registryUrl}\"",
+      "fr": "Échec de l'obtention de la liste de blocklet à partir du registre \"{registryUrl}\"",
+      "ar": "فشل في الحصول على قائمة blocklet من السجل \"{registryUrl}\"",
+      "ru": "Не удалось получить список blocklet из реестра \"{registryUrl}\"",
+      "pt": "Falhou ao obter a lista de blocklet do registro \"{registryUrl}\"",
+      "id": "Gagal mendapatkan daftar blocklet dari registry \"{registryUrl}\"",
+      "vi": "Không thể lấy danh sách blocklet từ registry \"{registryUrl}\"",
+      "th": "ไม่สามารถดึงรายการ blocklet จาก registry \"{registryUrl}\""
+    }
+  },
+  "backup.space.lackOfSpace": {
+    "en": "Not enough storage space. Expand storage and try again.",
+    "value": {
+      "en": "Not enough storage space. Expand storage and try again.",
+      "es": "No hay suficiente espacio de almacenamiento. Amplíe el almacenamiento y vuelva a intentarlo.",
+      "zh": "存储空间不足。请扩展存储后再试一次。",
+      "zh-TW": "儲存空間不足。請擴充儲存後再試一次。",
+      "ja": "ストレージの容量が不足しています。容量を拡張して、もう一度お試しください。",
+      "ko": "저장 공간이 부족합니다. 저장 공간을 확장하고 다시 시도하세요.",
+      "de": "Nicht genug Speicherplatz. Speicherplatz erweitern und erneut versuchen.",
+      "hi": "पर्याप्त स्टोरेज स्थान नहीं है. स्टोरेज बढ़ाएं और फिर से प्रयास करें.",
+      "fr": "Espace de stockage insuffisant. Élargissez le stockage et réessayez.",
+      "ar": "مساحة التخزين غير كافية. وسّع التخزين وحاول مرة أخرى.",
+      "ru": "Недостаточно свободного места. Расширьте место хранения и попробуйте снова.",
+      "pt": "Não há espaço de armazenamento suficiente. Expanda o armazenamento e tente novamente.",
+      "id": "Tidak cukup ruang penyimpanan. Perluas penyimpanan dan coba lagi.",
+      "vi": "Không còn đủ dung lượng lưu trữ. Mở rộng dung lượng và thử lại.",
+      "th": "ไม่มีพื้นที่เก็บข้อมูลเพียงพอ. ขยายพื้นที่จัดเก็บแล้วลองอีกครั้ง"
+    }
+  },
+  "backup.space.unableEnableAutoBackup": {
+    "en": "Connect to DID Spaces before enabling auto backup.",
+    "value": {
+      "en": "Connect to DID Spaces before enabling auto backup.",
+      "es": "Conéctese a DID Spaces antes de habilitar la copia de seguridad automática.",
+      "zh": "在启用自动备份之前 连接到 DID Spaces。",
+      "zh-TW": "在啟用自動備份之前 連接到 DID Spaces。",
+      "ja": "オートバックアップを有効にする前に DID Spaces に接続してください。",
+      "ko": "자동 백업을 활성화하기 전에 DID Spaces 에 연결하십시오.",
+      "de": "Verbinden Sie sich mit DID Spaces, bevor Sie die automatische Sicherung aktivieren",
+      "hi": "DID Spaces से कनेक्ट करें, ऑटो बैकअप सक्षम करने से पहले",
+      "fr": "Connectez-vous à DID Spaces avant d'activer la sauvegarde automatique",
+      "ar": "اتصل بـ DID Spaces قبل تمكين النسخ الاحتياطي التلقائي",
+      "ru": "Подключитесь к DID Spaces перед включением автоматического резервного копирования",
+      "pt": "Conecte-se a DID Spaces antes de ativar o backup automático.",
+      "id": "Hubungkan ke DID Spaces sebelum mengaktifkan backup otomatis.",
+      "vi": "Kết nối với DID Spaces trước khi kích hoạt sao lưu tự động.",
+      "th": "เชื่อมต่อกับ DID Spaces ก่อนเปิดใช้งานการสำรองข้อมูลอัตโนมัติ."
+    }
+  },
+  "backup.space.isFull": {
+    "en": "Your DID Spaces storage is full. Expand storage and try again.",
+    "value": {
+      "en": "Your DID Spaces storage is full. Expand storage and try again.",
+      "es": "El almacenamiento de DID Spaces está lleno. Expanda el almacenamiento y vuelva a intentarlo.",
+      "zh": "DID Spaces 存储已满。请扩展存储并重试。",
+      "zh-TW": "DID Spaces 存儲已滿。請擴充存儲空間並再試一次。",
+      "ja": "DID Spaces のストレージは満杯です。ストレージを拡張して、もう一度お試しください。",
+      "ko": "DID Spaces 저장 공간이 가득 찼습니다. 저장 공간을 확장하고 다시 시도하십시오.",
+      "de": "Ihr DID Spaces Speicherplatz ist voll. Speicherplatz erweitern und erneut versuchen.",
+      "hi": "आपका DID Spaces स्टोरेज भरा है। स्टोरेज बढ़ाएं और फिर से प्रयास करें।",
+      "fr": "Votre DID Spaces stockage est plein. Augmentez le stockage et réessayez.",
+      "ar": "سعة التخزين لـ DID Spaces ممتلئة. وسّع التخزين وحاول مرة أخرى.",
+      "ru": "Ваше хранилище DID Spaces заполнено. Расширьте хранилище и попробуйте снова.",
+      "pt": "O armazenamento do DID Spaces está cheio. Expanda o armazenamento e tente novamente.",
+      "id": "Penyimpanan DID Spaces Anda penuh. Perluas penyimpanan dan coba lagi.",
+      "vi": "Dung lượng DID Spaces của bạn đã đầy. Mở rộng dung lượng và thử lại.",
+      "th": "พื้นที่จัดเก็บ DID Spaces ของคุณเต็มแล้ว โปรดขยายพื้นที่และลองอีกครั้ง."
+    }
+  }
+}

package/lib/states/release.js

@@ -36,6 +36,7 @@ class Release extends BaseState {
       'blockletCommunity',
       'blockletRepository',
       'blockletDocker',
+      'blockletSingleton',
       'contentType',
       'publishedStoreIds',
       'blockletComponents',

package/lib/util/blocklet.js

@@ -882,7 +882,7 @@ const startBlockletProcess = async (
         startLock.releaseLock(lockName);
       }
     },
-    { parallel: true, concurrencyLimit: 4 }
+    { parallel: true, concurrencyLimit: 3 }
   );
 };
 
@@ -2357,6 +2357,7 @@ const ensureAppPortsNotOccupied = async ({ blocklet, componentDids: inputDids, s
       if (shouldSkipComponent(b.meta.did, inputDids)) return;
 
       if (!b.greenPorts) {
+        occupiedDids.add(b.meta.did);
         b.greenPorts = {};
       }
       const { ports = {}, greenPorts } = b;

package/lib/util/docker/is-docker-only-single-instances.js

@@ -15,11 +15,11 @@ function isDockerOnlySingleInstance(meta = {}) {
   if (SINGLE_INSTANCE_COMPONENT_DIDS.has(meta.did)) {
     return true;
   }
-  if (!meta.docker) {
-    return false;
+  // 用于描述某个组件是否只能以单实例模式运行
+  if (meta.capabilities?.singleton) {
+    return true;
   }
-  // 保留字段, 用于描述 docker 镜像支持多实例运行
-  if (meta.docker.allowMultipleInstances) {
+  if (!meta.docker) {
     return false;
   }
   if (meta.docker.RunBaseScript && meta.docker.installNodeModules) {

package/lib/validators/project.js

@@ -99,6 +99,7 @@ const createReleaseSchema = (status) =>
         .default([]),
     }).optional(),
     uploadedResource,
+    blockletSingleton: Joi.boolean().optional().default(false),
   });
 
 module.exports = {

package/lib/webhook/index.js

@@ -3,7 +3,7 @@ const { evaluateURLs } = require('@abtnode/util/lib/url-evaluation');
 const checkURLAccessible = require('@abtnode/util/lib/url-evaluation/check-accessible-node');
 const { EVENTS } = require('@abtnode/constant');
 const isEmpty = require('lodash/isEmpty');
-const { isAllowedReferer } = require('@abtnode/util/lib/ssrf-protector');
+const { isAllowedReferer, isAllowedURL } = require('@abtnode/util/lib/ssrf-protector');
 
 const { joinURL } = require('ufo');
 const isUrl = require('is-url');
@@ -215,6 +215,14 @@ module.exports = ({ events, dataDirs, instance, teamManager }) => {
     try {
       const mockCreateRes = await webhookState.create(webhook, { mock: true });
       await sentTextMessage(mockCreateRes, `A ${mockCreateRes.type} integration is now *successfully added*`);
+      const urls = webhook.params.map((item) => item.value);
+
+      for (const url of urls) {
+        // eslint-disable-next-line no-await-in-loop
+        if (!(await isAllowedURL(url))) {
+          throw new Error('Invalid parameter: internal');
+        }
+      }
 
       const createRes = await webhookState.create(webhook);
       return createRes;

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.16.53-beta-20251013-075536-64fcb94b",
+  "version": "1.16.53-beta-20251014-110009-8220e324",
   "description": "",
   "main": "lib/index.js",
   "files": [
@@ -21,22 +21,22 @@
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/analytics": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/auth": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/certificate-manager": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/constant": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/cron": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/db-cache": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/docker-utils": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/logger": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/models": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/queue": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/rbac": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/router-provider": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/static-server": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/timemachine": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@abtnode/util": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@aigne/aigne-hub": "^0.10.0",
+    "@abtnode/analytics": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/auth": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/certificate-manager": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/constant": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/cron": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/db-cache": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/docker-utils": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/logger": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/models": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/queue": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/rbac": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/router-provider": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/static-server": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/timemachine": "1.16.53-beta-20251014-110009-8220e324",
+    "@abtnode/util": "1.16.53-beta-20251014-110009-8220e324",
+    "@aigne/aigne-hub": "^0.10.1",
     "@arcblock/did": "1.25.6",
     "@arcblock/did-connect-js": "1.25.6",
     "@arcblock/did-ext": "1.25.6",
@@ -47,16 +47,16 @@
     "@arcblock/pm2-events": "^0.0.5",
     "@arcblock/validator": "1.25.6",
     "@arcblock/vc": "1.25.6",
-    "@blocklet/constant": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@blocklet/did-space-js": "^1.1.29",
-    "@blocklet/env": "1.16.53-beta-20251013-075536-64fcb94b",
+    "@blocklet/constant": "1.16.53-beta-20251014-110009-8220e324",
+    "@blocklet/did-space-js": "^1.1.33",
+    "@blocklet/env": "1.16.53-beta-20251014-110009-8220e324",
     "@blocklet/error": "^0.2.5",
-    "@blocklet/meta": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@blocklet/resolver": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@blocklet/sdk": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@blocklet/server-js": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@blocklet/store": "1.16.53-beta-20251013-075536-64fcb94b",
-    "@blocklet/theme": "^3.1.45",
+    "@blocklet/meta": "1.16.53-beta-20251014-110009-8220e324",
+    "@blocklet/resolver": "1.16.53-beta-20251014-110009-8220e324",
+    "@blocklet/sdk": "1.16.53-beta-20251014-110009-8220e324",
+    "@blocklet/server-js": "1.16.53-beta-20251014-110009-8220e324",
+    "@blocklet/store": "1.16.53-beta-20251014-110009-8220e324",
+    "@blocklet/theme": "^3.1.49",
     "@fidm/x509": "^1.2.1",
     "@ocap/mcrypto": "1.25.6",
     "@ocap/util": "1.25.6",
@@ -120,5 +120,5 @@
     "jest": "^29.7.0",
     "unzipper": "^0.10.11"
   },
-  "gitHead": "0c9fd57c3ffd075ed9f0ed365f76167f91f11f5a"
+  "gitHead": "e3cc422d4f1fb565f74d77e02d847d4461e94436"
 }