@abtnode/core 1.16.54-beta-20251016-050817-2fc632b8 → 1.16.54-beta-20251021-070951-25e3083c

package/lib/api/team.js

@@ -39,7 +39,7 @@ const {
   getUserAvatarUrl: getFederatedUserAvatarUrl,
 } = require('@abtnode/auth/lib/util/federated');
 const { hasActiveOwnerPassport } = require('@abtnode/util/lib/passport');
-const getBlockletInfo = require('@blocklet/meta/lib/info');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
 const { getUserAvatarUrl, getAppAvatarUrl, extractUserAvatar, getAvatarByUrl } = require('@abtnode/util/lib/user');
 const { getChainClient } = require('@abtnode/util/lib/get-chain-client');
 const { getWalletDid } = require('@blocklet/meta/lib/did-utils');

package/lib/blocklet/manager/disk.js

@@ -20,7 +20,7 @@ const isUndefined = require('lodash/isUndefined');
 const { sign } = require('@arcblock/jwt');
 const { isInServerlessMode } = require('@abtnode/util/lib/serverless');
 const sleep = require('@abtnode/util/lib/sleep');
-const getBlockletInfo = require('@blocklet/meta/lib/info');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
 const { joinURL } = require('ufo');
 const { sendToUser } = require('@blocklet/sdk/lib/util/send-notification');
 const { getDidDomainForBlocklet } = require('@abtnode/util/lib/get-domain-for-blocklet');
@@ -122,7 +122,7 @@ const {
   shouldSyncFederated,
   getUserAvatarUrl,
 } = require('@abtnode/auth/lib/util/federated');
-const toBlockletDid = require('@blocklet/meta/lib/did');
+const { toBlockletDid } = require('@blocklet/meta/lib/did');
 const { updateComponentDid, removeUploadFile } = require('@abtnode/util/lib/upload-component');
 
 const groupBy = require('lodash/groupBy');
@@ -3514,6 +3514,7 @@ class DiskBlockletManager extends BaseBlockletManager {
 
     const nodeInfo = await states.node.read();
     const successBlockletIds = new Set();
+
     try {
       if (!skipRunningCheck) {
         await checkBlockletProcessHealthy(blocklet, {

package/lib/blocklet/manager/helper/install-application-from-backup.js

@@ -4,7 +4,7 @@ const omit = require('lodash/omit');
 const toLower = require('lodash/toLower');
 
 const { forEachBlockletSync, getBlockletAppIdList } = require('@blocklet/meta/lib/util');
-const getBlockletInfo = require('@blocklet/meta/lib/info');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
 
 const { BLOCKLET_CONFIGURABLE_KEY, BlockletEvents, BlockletStatus } = require('@blocklet/constant');
 const { INSTALL_ACTIONS } = require('@abtnode/constant');

package/lib/blocklet/manager/helper/install-application-from-general.js

@@ -3,7 +3,7 @@ const { BLOCKLET_INSTALL_TYPE, INSTALL_ACTIONS } = require('@abtnode/constant');
 const { BlockletStatus, BlockletEvents, BLOCKLET_CONFIGURABLE_KEY } = require('@blocklet/constant');
 
 const logger = require('@abtnode/logger')('@abtnode/core:install-app-general');
-const getApplicationWallet = require('@blocklet/meta/lib/wallet');
+const { getApplicationWallet } = require('@blocklet/meta/lib/wallet');
 const { installBlockletTitleSchema, installBlockletDescriptionSchema } = require('@blocklet/meta/lib/schema');
 
 const StoreUtil = require('../../../util/store');

package/lib/blocklet/manager/helper/install-component-from-upload.js

@@ -2,7 +2,7 @@ const path = require('path');
 
 const logger = require('@abtnode/logger')('@abtnode/core:install-component-upload');
 const uniq = require('lodash/uniq');
-const getComponentProcessId = require('@blocklet/meta/lib/get-component-process-id');
+const { getComponentProcessId } = require('@blocklet/meta/lib/get-component-process-id');
 const { isInProgress, hasStartEngine } = require('@blocklet/meta/lib/util');
 
 const { BlockletSource, BlockletGroup, fromBlockletStatus } = require('@blocklet/constant');

package/lib/blocklet/manager/helper/install-component-from-url.js

@@ -4,7 +4,7 @@ const logger = require('@abtnode/logger')('@abtnode/core:install-component-url')
 const uniq = require('lodash/uniq');
 const { isFreeBlocklet, hasStartEngine } = require('@blocklet/meta/lib/util');
 const { titleSchema, updateMountPointSchema } = require('@blocklet/meta/lib/schema');
-const hasReservedKey = require('@blocklet/meta/lib/has-reserved-key');
+const { hasReservedKey } = require('@blocklet/meta/lib/has-reserved-key');
 const formatName = require('@abtnode/util/lib/format-name');
 
 const { BlockletStatus, BlockletEvents, BlockletGroup } = require('@blocklet/constant');

package/lib/blocklet/manager/helper/migrate-application-to-struct-v2.js

@@ -32,7 +32,7 @@ const {
   CHAIN_PROP_MAP,
 } = require('@blocklet/constant');
 const { update: updateMetaFile } = require('@blocklet/meta/lib/file');
-const getBlockletWallet = require('@blocklet/meta/lib/wallet');
+const { getApplicationWallet: getBlockletWallet } = require('@blocklet/meta/lib/wallet');
 const cloneDeep = require('@abtnode/util/lib/deep-clone');
 
 const { getBlockletDomainGroupName } = require('../../../util/router');

package/lib/blocklet/migration-dist/migration.cjs

@@ -38963,7 +38963,7 @@ module.exports = require("zlib");
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.16.53","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib","test":"node tools/jest.js","test:disk":"CI=true npm run test tests/blocklet/manager/disk.spec.js","test:blue":"CI=true npm run test tests/blocklet/manager/disk-blue-green.spec.js","coverage":"npm run test -- --coverage"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.16.53","@abtnode/auth":"1.16.53","@abtnode/certificate-manager":"1.16.53","@abtnode/constant":"1.16.53","@abtnode/cron":"1.16.53","@abtnode/db-cache":"1.16.53","@abtnode/docker-utils":"1.16.53","@abtnode/logger":"1.16.53","@abtnode/models":"1.16.53","@abtnode/queue":"1.16.53","@abtnode/rbac":"1.16.53","@abtnode/router-provider":"1.16.53","@abtnode/static-server":"1.16.53","@abtnode/timemachine":"1.16.53","@abtnode/util":"1.16.53","@aigne/aigne-hub":"^0.10.1","@arcblock/did":"1.25.6","@arcblock/did-connect-js":"1.25.6","@arcblock/did-ext":"1.25.6","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.25.6","@arcblock/event-hub":"1.25.6","@arcblock/jwt":"1.25.6","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.25.6","@arcblock/vc":"1.25.6","@blocklet/constant":"1.16.53","@blocklet/did-space-js":"^1.1.33","@blocklet/env":"1.16.53","@blocklet/error":"^0.2.5","@blocklet/meta":"1.16.53","@blocklet/resolver":"1.16.53","@blocklet/sdk":"1.16.53","@blocklet/server-js":"1.16.53","@blocklet/store":"1.16.53","@blocklet/theme":"^3.1.49","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.25.6","@ocap/util":"1.25.6","@ocap/wallet":"1.25.6","@slack/webhook":"^5.0.4","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"^2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"expand-tilde":"^2.0.2","express":"^4.18.2","jest":"^29.7.0","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.16.53","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib","test":"bun test","coverage":"bun test --coverage"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.16.53","@abtnode/auth":"1.16.53","@abtnode/certificate-manager":"1.16.53","@abtnode/constant":"1.16.53","@abtnode/cron":"1.16.53","@abtnode/db-cache":"1.16.53","@abtnode/docker-utils":"1.16.53","@abtnode/logger":"1.16.53","@abtnode/models":"1.16.53","@abtnode/queue":"1.16.53","@abtnode/rbac":"1.16.53","@abtnode/router-provider":"1.16.53","@abtnode/static-server":"1.16.53","@abtnode/timemachine":"1.16.53","@abtnode/util":"1.16.53","@aigne/aigne-hub":"^0.10.1","@arcblock/did":"^1.26.2","@arcblock/did-connect-js":"^1.26.2","@arcblock/did-ext":"^1.26.2","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"^1.26.2","@arcblock/event-hub":"^1.26.2","@arcblock/jwt":"^1.26.2","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"^1.26.2","@arcblock/vc":"^1.26.2","@blocklet/constant":"1.16.53","@blocklet/did-space-js":"^1.1.34","@blocklet/env":"1.16.53","@blocklet/error":"^0.2.5","@blocklet/meta":"1.16.53","@blocklet/resolver":"1.16.53","@blocklet/sdk":"1.16.53","@blocklet/server-js":"1.16.53","@blocklet/store":"1.16.53","@blocklet/theme":"^3.1.51","@fidm/x509":"^1.2.1","@ocap/mcrypto":"^1.26.2","@ocap/util":"^1.26.2","@ocap/wallet":"^1.26.2","@slack/webhook":"^5.0.4","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"^2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"axios-mock-adapter":"^2.1.0","expand-tilde":"^2.0.2","express":"^4.18.2","jest":"^29.7.0","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
 
 /***/ }),
 

package/lib/blocklet/project/publish-to-endpoint.js

@@ -3,17 +3,17 @@ const path = require('path');
 const { PROJECT } = require('@blocklet/constant');
 
 const fs = require('fs/promises');
-const getBlockletMeta = require('@blocklet/meta/lib/parse');
-const hasReservedKey = require('@blocklet/meta/lib/has-reserved-key');
+const { parse: getBlockletMeta } = require('@blocklet/meta/lib/parse');
+const { hasReservedKey } = require('@blocklet/meta/lib/has-reserved-key');
 const logger = require('@abtnode/logger')('@abtnode/core:publish-to-endpoint');
 const slugify = require('slugify');
 const tar = require('tar');
 
 const { default: axios } = require('axios');
 const hashFiles = require('@abtnode/util/lib/hash-files');
-const validateBlockletEntry = require('@blocklet/meta/lib/entry');
+const { validateBlockletEntry } = require('@blocklet/meta/lib/entry');
 const { hasMountPoint } = require('@blocklet/meta/lib/engine');
-const urlPathFriendly = require('@blocklet/meta/lib/url-path-friendly').default;
+const { urlPathFriendly } = require('@blocklet/meta/lib/url-path-friendly');
 const makeFormData = require('@abtnode/util/lib/make-from-data');
 const { fileFilter } = require('@abtnode/util/lib/check-file');
 const { formatError } = require('@blocklet/error');
@@ -196,7 +196,7 @@ const publishToEndpoint = async ({ did, projectId, endpointId, releaseId, manage
         'user-agent': 'PublishToEndpoint',
         'x-access-key-id': accessKeyId,
         'x-access-stamp': timestamp,
-        'x-access-signature': signWithAccessKey({
+        'x-access-signature': await signWithAccessKey({
           accessKeyId,
           accessKeySecret,
           message: `${timestamp}-${accessKeyId}`,

package/lib/blocklet/storage/backup/base.js

@@ -18,7 +18,7 @@
 
 const { Hasher } = require('@ocap/mcrypto');
 const { toBuffer } = require('@ocap/util');
-const getBlockletInfo = require('@blocklet/meta/lib/info');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
 const security = require('@abtnode/util/lib/security');
 
 class BaseBackup {

package/lib/blocklet/storage/backup/spaces.js

@@ -226,6 +226,7 @@ class SpacesBackup extends BaseBackup {
     this.throwErrorIfAborted();
 
     this.blocklet = await states.blocklet.getBlocklet(this.input.appDid);
+
     if (isEmpty(this.blocklet)) {
       throw new Error('blocklet cannot be empty');
     }

package/lib/event/index.js

@@ -92,6 +92,11 @@ module.exports = ({
       return;
     }
     eventHub.on(name, (data) => {
+      if (process.env.TEST_LOG === 'true') {
+        // eslint-disable-next-line no-console
+        console.log('eventHub.on', name);
+      }
+
       if (name === BlockletEvents.removed) {
         // Cleanup cache in teamManager for every node instance
         teamManager.deleteTeam(data?.meta?.did).catch((error) => {

package/lib/monitor/blocklet-runtime-monitor.js

@@ -4,7 +4,7 @@ const cloneDeep = require('@abtnode/util/lib/deep-clone');
 const pLimit = require('p-limit');
 const dayjs = require('@abtnode/util/lib/dayjs');
 const { forEachBlocklet, isGatewayBlocklet, hasStartEngine } = require('@blocklet/meta/lib/util');
-const getComponentProcessId = require('@blocklet/meta/lib/get-component-process-id');
+const { getComponentProcessId } = require('@blocklet/meta/lib/get-component-process-id');
 const { EVENTS } = require('@abtnode/constant');
 const { BlockletStatus } = require('@blocklet/constant');
 const defaultLogger = require('@abtnode/logger')('blocklet-runtime-monitor');

package/lib/states/audit-log.js

@@ -551,6 +551,16 @@ const getLogContent = async (action, args, context, result, info, node) => {
     case 'deleteAccessKey':
       return `deleted access key ${args.accessKeyId}`; // prettier-ignore
 
+    // remote signing
+    case 'remoteSign':
+      return `component \`${args.componentId}\` signed payload remotely (type: ${args.payloadType}):\n\`\`\`\n${args.payloadContent || '(no content)'}\n\`\`\``;
+    case 'remoteSignJWT':
+      return `component \`${args.componentId}\` signed JWT remotely${args.jwtVersion ? ` (version: ${args.jwtVersion})` : ''}:\n\`\`\`\n${args.payloadContent || '(no content)'}\n\`\`\``;
+    case 'remoteSignETH':
+      return `component \`${args.componentId}\` signed Ethereum data remotely${args.hashBeforeSign ? ' (pre-hashed)' : ''}:\n\`\`\`\n${args.dataContent || '(no content)'}\n\`\`\``;
+    case 'remoteDeriveWallet':
+      return `component \`${args.componentId}\` derived wallet from sub: \`${args.sub}\`${args.index !== undefined ? `, index: ${args.index}` : ''}`;
+
     // integrations
     case 'createWebHook':
       return `added integration ${result.id}: \n- type: ${args.type}\n${args.params.map(x => `- ${x.name}: ${x.value}`).join('\n')}`; // prettier-ignore
@@ -865,6 +875,10 @@ const getLogCategory = (action) => {
     case 'addBlockletResponseHeaderPolicy': // response-header-policy
     case 'updateBlockletResponseHeaderPolicy':
     case 'deleteBlockletResponseHeaderPolicy':
+    case 'remoteSign': // remote signing
+    case 'remoteSignJWT':
+    case 'remoteSignETH':
+    case 'remoteDeriveWallet':
       return 'security';
 
     // integrations

package/lib/team/manager.js

@@ -28,7 +28,7 @@ const { joinURL, withHttps } = require('ufo');
 const { isCustomDomain } = require('@abtnode/util/lib/url-evaluation');
 const dayjs = require('@abtnode/util/lib/dayjs');
 const { getDidDomainForBlocklet } = require('@abtnode/util/lib/get-domain-for-blocklet');
-const getBlockletInfo = require('@blocklet/meta/lib/info');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
 const { getDomainsByDid } = require('../router/helper');
 const { isCLI, getDbFilePath } = require('../util');
 const { transformNotification } = require('../util/notification');

package/lib/util/blocklet.js

@@ -13,6 +13,7 @@ const cloneDeep = require('lodash/cloneDeep');
 const mergeWith = require('lodash/mergeWith');
 const toLower = require('lodash/toLower');
 const isEmpty = require('lodash/isEmpty');
+const omit = require('lodash/omit');
 const streamToPromise = require('stream-to-promise');
 const { Throttle } = require('stream-throttle');
 const { slugify } = require('transliteration');
@@ -23,7 +24,7 @@ const isUrl = require('is-url');
 const semver = require('semver');
 const { chainInfo: chainInfoSchema } = require('@arcblock/did-connect-js/lib/schema');
 
-const urlPathFriendly = require('@blocklet/meta/lib/url-path-friendly').default;
+const { urlPathFriendly } = require('@blocklet/meta/lib/url-path-friendly');
 const { fromSecretKey, fromPublicKey } = require('@ocap/wallet');
 const { toHex, isHex, toDid, toAddress, toBuffer } = require('@ocap/util');
 const { isValid: isValidDid, isEthereumDid } = require('@arcblock/did');
@@ -83,10 +84,10 @@ const {
   PROJECT,
   BLOCKLET_INTERFACE_TYPE_DOCKER,
 } = require('@blocklet/constant');
-const validateBlockletEntry = require('@blocklet/meta/lib/entry');
+const { validateBlockletEntry } = require('@blocklet/meta/lib/entry');
 const { getBlockletEngine } = require('@blocklet/meta/lib/engine');
-const getBlockletInfo = require('@blocklet/meta/lib/info');
-const getBlockletWallet = require('@blocklet/meta/lib/wallet');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
+const { getApplicationWallet: getBlockletWallet } = require('@blocklet/meta/lib/wallet');
 const {
   forEachBlocklet,
   getDisplayName,
@@ -108,7 +109,7 @@ const {
 const { getComponentsInternalInfo } = require('@blocklet/meta/lib/blocklet');
 const { titleSchema, descriptionSchema, logoSchema } = require('@blocklet/meta/lib/schema');
 const { getBlockletMetaFromUrl } = require('@blocklet/meta/lib/util-meta');
-const getComponentProcessId = require('@blocklet/meta/lib/get-component-process-id');
+const { getComponentProcessId } = require('@blocklet/meta/lib/get-component-process-id');
 const { isInServerlessMode } = require('@abtnode/util/lib/serverless');
 const { getDidDomainForBlocklet } = require('@abtnode/util/lib/get-domain-for-blocklet');
 const md5 = require('@abtnode/util/lib/md5');
@@ -522,6 +523,12 @@ const getRuntimeEnvironments = (blocklet, nodeEnvironments, ancestors, isGreen =
     ? getBlockletWallet(blocklet.meta.did, nodeEnvironments.ABT_NODE_SK, undefined, 1)
     : null;
 
+  // For Access Key authentication, components should use root app's wallet
+  // This ensures consistent accessKeyId across parent and child components
+  const accessKeyWallet = get(nodeEnvironments, 'ABT_NODE_SK')
+    ? getBlockletWallet(root.meta.did, nodeEnvironments.ABT_NODE_SK, undefined, 1)
+    : null;
+
   const BLOCKLET_APP_IDS = getBlockletAppIdList(root).join(',');
 
   const componentApiKey = getComponentApiKey({
@@ -530,6 +537,11 @@ const getRuntimeEnvironments = (blocklet, nodeEnvironments, ancestors, isGreen =
     component: blocklet,
   });
 
+  const blockletInfo = getBlockletInfo(blocklet, nodeEnvironments.ABT_NODE_SK, { returnWallet: true });
+
+  const rootBlockletInfo =
+    blocklet === root ? blockletInfo : getBlockletInfo(root, nodeEnvironments.ABT_NODE_SK, { returnWallet: true });
+
   const env = {
     ...blocklet.configObj,
     ...getSharedConfigObj((ancestors || [])[0], blocklet, true),
@@ -538,11 +550,15 @@ const getRuntimeEnvironments = (blocklet, nodeEnvironments, ancestors, isGreen =
     BLOCKLET_MOUNT_POINTS: JSON.stringify(componentsInternalInfo),
     BLOCKLET_MODE: blocklet.mode || BLOCKLET_MODES.PRODUCTION,
     BLOCKLET_APP_EK: tmp?.secretKey,
+    // for login token authentication
+    BLOCKLET_SESSION_SECRET: rootBlockletInfo.secret,
     BLOCKLET_APP_VERSION: root.meta.version,
     BLOCKLET_APP_IDS,
     BLOCKLET_COMPONENT_API_KEY: componentApiKey,
     ...nodeEnvironments,
     ...safeNodeEnvironments,
+    // compatible with previous version
+    ...(process.env.WITH_SK ? {} : { BLOCKLET_APP_ASK: accessKeyWallet?.secretKey }),
   };
 
   const aigne = get(root, 'settings.aigne', {});
@@ -757,13 +773,17 @@ const startBlockletProcess = async (
       max_restarts: b.mode === BLOCKLET_MODES.DEVELOPMENT ? 0 : 3,
       min_uptime: 60 * 1000,
       exp_backoff_restart_delay: 300,
-      env: {
-        ...environmentObj,
-        ...env,
-        NODE_ENV: 'production',
-        BLOCKLET_START_AT: now,
-        NODE_OPTIONS: await getSecurityNodeOptions(b, nodeInfo.enableFileSystemIsolation),
-      },
+      env: omit(
+        {
+          ...environmentObj,
+          ...env,
+          NODE_ENV: 'production',
+          BLOCKLET_START_AT: now,
+          NODE_OPTIONS: await getSecurityNodeOptions(b, nodeInfo.enableFileSystemIsolation),
+        },
+        // should not inject appSk and appPsk to the blocklet environment
+        process.env.WITH_SK ? [] : ['BLOCKLET_APP_SK', 'BLOCKLET_APP_PSK']
+      ),
       script,
       args,
       interpreter,
@@ -1144,6 +1164,7 @@ const checkBlockletProcessHealthy = async (
       const startedAt = Date.now();
 
       await _checkProcessHealthy(b, { minConsecutiveTime, timeout, logToTerminal, isGreen });
+
       logger.info('done check component healthy', { processId: b.env.processId, time: Date.now() - startedAt });
 
       if (setBlockletRunning) {

package/lib/util/index.js

@@ -17,7 +17,7 @@ const StreamZip = require('node-stream-zip');
 const normalizePathPrefix = require('@abtnode/util/lib/normalize-path-prefix');
 const axios = require('@abtnode/util/lib/axios');
 const { encode: encodeBase32 } = require('@abtnode/util/lib/base32');
-const parseBlockletMeta = require('@blocklet/meta/lib/parse');
+const { parse: parseBlockletMeta } = require('@blocklet/meta/lib/parse');
 const { BlockletStatus } = require('@blocklet/constant');
 const { replaceSlotToIp, isInProgress } = require('@blocklet/meta/lib/util');
 const {

package/lib/util/launcher.js

@@ -20,7 +20,7 @@ const { createLaunchBlockletHandler, createServerlessInstallGuard } = require('@
 const { getDisplayName } = require('@blocklet/meta/lib/util');
 const { fromAppDid } = require('@arcblock/did-ext');
 const { fromRandom } = require('@ocap/wallet');
-const getBlockletInfo = require('@blocklet/meta/lib/info');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
 const { getBlockletLogos } = require('@abtnode/util/lib/blocklet');
 const { PASSPORT_SOURCE, PASSPORT_LOG_ACTION, PASSPORT_ISSUE_ACTION } = require('@abtnode/constant');
 

package/lib/util/router.js

@@ -1,7 +1,7 @@
 const path = require('path');
 const { BLOCKLET_SITE_GROUP_SUFFIX, DEFAULT_HTTP_PORT, DEFAULT_HTTPS_PORT } = require('@abtnode/constant');
 const axios = require('@abtnode/util/lib/axios');
-const getBlockletInfo = require('@blocklet/meta/lib/info');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
 const { stableStringify } = require('@arcblock/vc');
 const { toBase58 } = require('@ocap/util');
 const { getDidDomainServiceURL } = require('@abtnode/util/lib/did-domain');
@@ -25,8 +25,8 @@ const getDidFromDomainGroupName = (name) => {
   return did;
 };
 
-const getNFTDomainHeaders = ({ wallet, payload }) => ({
-  'x-blocklet-sig': toBase58(wallet.sign(stableStringify(payload))),
+const getNFTDomainHeaders = async ({ wallet, payload }) => ({
+  'x-blocklet-sig': toBase58(await wallet.sign(stableStringify(payload))),
 });
 
 const updateNFTDomainRecord = async ({ name, value, blocklet, nodeInfo, bindCap }) => {
@@ -44,7 +44,7 @@ const updateNFTDomainRecord = async ({ name, value, blocklet, nodeInfo, bindCap
 
   let proof;
   if (bindCap) {
-    proof = wallet.sign(stableStringify(`${bindCap.cap.sessionId}|${bindCap.cap.domain}`));
+    proof = await wallet.sign(stableStringify(`${bindCap.cap.sessionId}|${bindCap.cap.domain}`));
 
     payload.bindCap = bindCap;
     payload.proof = proof;
@@ -58,7 +58,7 @@ const updateNFTDomainRecord = async ({ name, value, blocklet, nodeInfo, bindCap
       method: 'POST',
       url: nftDomainServiceUrl.domain,
       data: payload,
-      headers: getNFTDomainHeaders({ wallet, payload }),
+      headers: await getNFTDomainHeaders({ wallet, payload }),
     });
 
     return data;
@@ -92,7 +92,7 @@ const revokeAndDeleteNFTDomainRecord = async ({ name, blocklet, nodeInfo }) => {
       method: 'DELETE',
       url: nftDomainServiceUrl.domain,
       data: payload,
-      headers: getNFTDomainHeaders({ wallet, payload }),
+      headers: await getNFTDomainHeaders({ wallet, payload }),
     });
 
     return data;

package/lib/util/store.js

@@ -4,7 +4,7 @@ const isBase64 = require('is-base64');
 const semver = require('semver');
 const { BLOCKLET_STORE_API_PREFIX, BLOCKLET_STORE_META_PATH, BLOCKLET_STORE_DID } = require('@abtnode/constant');
 const { validateMeta, fixAndValidateService } = require('@blocklet/meta/lib/validate');
-const verifyMultiSig = require('@blocklet/meta/lib/verify-multi-sig');
+const { verifyMultiSig } = require('@blocklet/meta/lib/verify-multi-sig');
 const isRequirementsSatisfied = require('./requirement');
 
 const { name } = require('../../package.json');

package/lib/validators/router.js

@@ -1,7 +1,7 @@
 /* eslint-disable newline-per-chained-call */
 const Joi = require('joi');
 const { DOMAIN_FOR_DEFAULT_SITE, ROUTING_RULE_TYPES, ROUTER_CACHE_GROUPS } = require('@abtnode/constant');
-const urlPathFriendly = require('@blocklet/meta/lib/url-path-friendly').default;
+const { urlPathFriendly } = require('@blocklet/meta/lib/url-path-friendly');
 const { getMultipleLangParams } = require('./util');
 
 const WILDCARD_DOMAIN_REGEX = /^\*.(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9][a-z0-9-]{0,61}[a-z0-9]/;

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.16.54-beta-20251016-050817-2fc632b8",
+  "version": "1.16.54-beta-20251021-070951-25e3083c",
   "description": "",
   "main": "lib/index.js",
   "files": [
@@ -12,55 +12,53 @@
   "scripts": {
     "lint": "eslint tests lib --ignore-pattern 'tests/assets/*'",
     "lint:fix": "eslint --fix tests lib",
-    "test": "node tools/jest.js",
-    "test:disk": "CI=true npm run test tests/blocklet/manager/disk.spec.js",
-    "test:blue": "CI=true npm run test tests/blocklet/manager/disk-blue-green.spec.js",
-    "coverage": "npm run test -- --coverage"
+    "test": "bun test",
+    "coverage": "bun test --coverage"
   },
   "keywords": [],
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/analytics": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/auth": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/certificate-manager": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/constant": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/cron": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/db-cache": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/docker-utils": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/logger": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/models": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/queue": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/rbac": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/router-provider": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/static-server": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/timemachine": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@abtnode/util": "1.16.54-beta-20251016-050817-2fc632b8",
+    "@abtnode/analytics": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/auth": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/certificate-manager": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/constant": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/cron": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/db-cache": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/docker-utils": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/logger": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/models": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/queue": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/rbac": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/router-provider": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/static-server": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/timemachine": "1.16.54-beta-20251021-070951-25e3083c",
+    "@abtnode/util": "1.16.54-beta-20251021-070951-25e3083c",
     "@aigne/aigne-hub": "^0.10.1",
-    "@arcblock/did": "1.25.6",
-    "@arcblock/did-connect-js": "1.25.6",
-    "@arcblock/did-ext": "1.25.6",
+    "@arcblock/did": "^1.26.2",
+    "@arcblock/did-connect-js": "^1.26.2",
+    "@arcblock/did-ext": "^1.26.2",
     "@arcblock/did-motif": "^1.1.14",
-    "@arcblock/did-util": "1.25.6",
-    "@arcblock/event-hub": "1.25.6",
-    "@arcblock/jwt": "1.25.6",
+    "@arcblock/did-util": "^1.26.2",
+    "@arcblock/event-hub": "^1.26.2",
+    "@arcblock/jwt": "^1.26.2",
     "@arcblock/pm2-events": "^0.0.5",
-    "@arcblock/validator": "1.25.6",
-    "@arcblock/vc": "1.25.6",
-    "@blocklet/constant": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@blocklet/did-space-js": "^1.1.33",
-    "@blocklet/env": "1.16.54-beta-20251016-050817-2fc632b8",
+    "@arcblock/validator": "^1.26.2",
+    "@arcblock/vc": "^1.26.2",
+    "@blocklet/constant": "1.16.54-beta-20251021-070951-25e3083c",
+    "@blocklet/did-space-js": "^1.1.34",
+    "@blocklet/env": "1.16.54-beta-20251021-070951-25e3083c",
     "@blocklet/error": "^0.2.5",
-    "@blocklet/meta": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@blocklet/resolver": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@blocklet/sdk": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@blocklet/server-js": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@blocklet/store": "1.16.54-beta-20251016-050817-2fc632b8",
-    "@blocklet/theme": "^3.1.49",
+    "@blocklet/meta": "1.16.54-beta-20251021-070951-25e3083c",
+    "@blocklet/resolver": "1.16.54-beta-20251021-070951-25e3083c",
+    "@blocklet/sdk": "1.16.54-beta-20251021-070951-25e3083c",
+    "@blocklet/server-js": "1.16.54-beta-20251021-070951-25e3083c",
+    "@blocklet/store": "1.16.54-beta-20251021-070951-25e3083c",
+    "@blocklet/theme": "^3.1.51",
     "@fidm/x509": "^1.2.1",
-    "@ocap/mcrypto": "1.25.6",
-    "@ocap/util": "1.25.6",
-    "@ocap/wallet": "1.25.6",
+    "@ocap/mcrypto": "^1.26.2",
+    "@ocap/util": "^1.26.2",
+    "@ocap/wallet": "^1.26.2",
     "@slack/webhook": "^5.0.4",
     "archiver": "^7.0.1",
     "axios": "^1.7.9",
@@ -115,10 +113,11 @@
     "xbytes": "^1.8.0"
   },
   "devDependencies": {
+    "axios-mock-adapter": "^2.1.0",
     "expand-tilde": "^2.0.2",
     "express": "^4.18.2",
     "jest": "^29.7.0",
     "unzipper": "^0.10.11"
   },
-  "gitHead": "6b624f4b7eba2ecee164a57112adda1a93aff513"
+  "gitHead": "db517e9013dbad744e38883f56e4eba1fa1615c1"
 }