@abtnode/core 1.17.10 → 1.17.11-beta-20260225-043848-68611a07

package/lib/blocklet/manager/disk/env-config-manager.js

@@ -184,6 +184,11 @@ async function config(manager, { did, configs: newConfigs, skipHook, skipDidDocu
     manager.emit(BlockletEvents.spaceConnected, blocklet);
   }
 
+  // Reload nginx when APP_NO_INDEX changes to update X-Robots-Tag header
+  if (finalConfigs.find((x) => x.key === 'APP_NO_INDEX')) {
+    manager.emit(BlockletEvents.gatewayConfigChanged, blocklet);
+  }
+
   // update blocklet meta
   if (blocklet.structVersion && !childDid) {
     const changedTitle = finalConfigs.find((x) => x.key === BLOCKLET_CONFIGURABLE_KEY.BLOCKLET_APP_NAME)?.value;

package/lib/blocklet/manager/disk/install-core-manager.js

@@ -98,14 +98,16 @@ async function _installBlocklet(manager, { did, oldBlocklet, componentDids, cont
     // Add initialize authentication settings
     await manager.migrateBlockletAuthentication({ did });
 
-    // pre install
-    await manager._runUserHook('preInstall', blocklet, context);
+    if (!context.skipHooks) {
+      // pre install
+      await manager._runUserHook('preInstall', blocklet, context);
 
-    // post install
-    await manager._runUserHook('postInstall', blocklet, context);
+      // post install
+      await manager._runUserHook('postInstall', blocklet, context);
 
-    // pre flight
-    await manager._runUserHook('preFlight', blocklet, context);
+      // pre flight
+      await manager._runUserHook('preFlight', blocklet, context);
+    }
 
     await states.blocklet.setInstalledAt(did);
 

package/lib/blocklet/manager/disk.js

@@ -38,6 +38,7 @@ const states = require('../../states');
 const BaseBlockletManager = require('./base');
 const { BlockletRuntimeMonitor } = require('../../monitor/blocklet-runtime-monitor');
 const { SpacesBackup } = require('../storage/backup/spaces');
+const { BlockletImporter } = require('../storage/import/importer');
 const { installApplicationFromDev } = require('./helper/install-application-from-dev');
 const { installComponentFromDev } = require('./helper/install-component-from-dev');
 const { diff } = require('./helper/install-component-from-upload');
@@ -449,6 +450,29 @@ class DiskBlockletManager extends BaseBlockletManager {
     throw new Error('Can only restore from spaces or disk');
   }
 
+  /**
+   * Import a blocklet from an export directory
+   * @param {{ inputDir: string, overwrite?: boolean }} input
+   * @param {Record<string, any>} context
+   */
+  async importBlocklet(input, context = {}) {
+    if (input.overwrite && input.blockletDid) {
+      const existing = await this.getBlocklet(input.blockletDid);
+      if (existing) {
+        await this.delete({ did: input.blockletDid, keepData: false, keepLogsDir: false, keepConfigs: false }, context);
+      }
+    }
+
+    const importer = new BlockletImporter({
+      inputDir: input.inputDir,
+      manager: this,
+      states,
+      context,
+      progressCallback: input.progressCallback,
+    });
+    return importer.import();
+  }
+
   /**
    *
    * @param {import('@blocklet/server-js').RequestBlockletInput} param0

package/lib/blocklet/manager/helper/install-application-from-backup.js

@@ -47,7 +47,9 @@ const installApplicationFromBackup = async ({
     throw new Error(`dir(${dir}) does not exist`);
   }
 
-  context.startImmediately = true;
+  if (context.startImmediately === undefined) {
+    context.startImmediately = true;
+  }
 
   // parse data from source dir
   const srcBundleDirs = await getAppDirs(path.join(dir, 'blocklets'));

package/lib/blocklet/migration-dist/migration.cjs

@@ -39100,7 +39100,7 @@ exports.isSystemRole = isSystemRole;
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.17.9","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.17.9","@abtnode/auth":"1.17.9","@abtnode/certificate-manager":"1.17.9","@abtnode/constant":"1.17.9","@abtnode/cron":"1.17.9","@abtnode/db-cache":"1.17.9","@abtnode/docker-utils":"1.17.9","@abtnode/logger":"1.17.9","@abtnode/models":"1.17.9","@abtnode/queue":"1.17.9","@abtnode/rbac":"1.17.9","@abtnode/router-provider":"1.17.9","@abtnode/util":"1.17.9","@arcblock/did":"1.29.8","@arcblock/did-connect-js":"1.29.8","@arcblock/did-ext":"1.29.8","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.29.8","@arcblock/event-hub":"1.29.8","@arcblock/jwt":"1.29.8","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.29.8","@arcblock/vc":"1.29.8","@blocklet/constant":"1.17.9","@blocklet/did-space-js":"^1.2.16","@blocklet/env":"1.17.9","@blocklet/error":"^0.3.5","@blocklet/meta":"1.17.9","@blocklet/resolver":"1.17.9","@blocklet/sdk":"1.17.9","@blocklet/server-js":"1.17.9","@blocklet/store":"1.17.9","@blocklet/theme":"^3.5.2","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.29.8","@ocap/util":"1.29.8","@ocap/wallet":"1.29.8","@slack/webhook":"^7.0.6","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"axios-mock-adapter":"^2.1.0","expand-tilde":"^2.0.2","express":"^4.18.2","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.17.10","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.17.10","@abtnode/auth":"1.17.10","@abtnode/certificate-manager":"1.17.10","@abtnode/constant":"1.17.10","@abtnode/cron":"1.17.10","@abtnode/db-cache":"1.17.10","@abtnode/docker-utils":"1.17.10","@abtnode/logger":"1.17.10","@abtnode/models":"1.17.10","@abtnode/queue":"1.17.10","@abtnode/rbac":"1.17.10","@abtnode/router-provider":"1.17.10","@abtnode/util":"1.17.10","@arcblock/did":"1.29.8","@arcblock/did-connect-js":"1.29.8","@arcblock/did-ext":"1.29.8","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"1.29.8","@arcblock/event-hub":"1.29.8","@arcblock/jwt":"1.29.8","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"1.29.8","@arcblock/vc":"1.29.8","@blocklet/constant":"1.17.10","@blocklet/did-space-js":"^1.2.16","@blocklet/env":"1.17.10","@blocklet/error":"^0.3.5","@blocklet/meta":"1.17.10","@blocklet/resolver":"1.17.10","@blocklet/sdk":"1.17.10","@blocklet/server-js":"1.17.10","@blocklet/store":"1.17.10","@blocklet/theme":"^3.5.2","@fidm/x509":"^1.2.1","@ocap/mcrypto":"1.29.8","@ocap/util":"1.29.8","@ocap/wallet":"1.29.8","@slack/webhook":"^7.0.6","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"axios-mock-adapter":"^2.1.0","expand-tilde":"^2.0.2","express":"^4.18.2","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
 
 /***/ }),
 

package/lib/blocklet/storage/export/blocklet-export.js

@@ -0,0 +1,29 @@
+const { BlockletBackup } = require('../backup/blocklet');
+
+class BlockletExport extends BlockletBackup {
+  ensureParams(backup) {
+    super.ensureParams(backup);
+    // Capture the wallet-derived appDid from the exporter
+    this.exportAppDid = backup.appDid;
+  }
+
+  cleanData() {
+    const clone = super.cleanData();
+    // Update appDid/appPid to match wallet address derived from appSk
+    // Without this, blocklet.json would have appDid = meta.did, which differs
+    // from the wallet address that installApplicationFromBackup expects
+    if (this.exportAppDid) {
+      clone.appDid = this.exportAppDid;
+      clone.appPid = this.exportAppDid;
+    }
+    return clone;
+  }
+
+  // No-op: keep migratedFrom.appSk as plaintext for cross-server export
+  // eslint-disable-next-line class-methods-use-this
+  encrypt(info) {
+    return info;
+  }
+}
+
+module.exports = { BlockletExport };

package/lib/blocklet/storage/export/blocklet-extras-export.js

@@ -0,0 +1,27 @@
+const { readFileSync } = require('fs-extra');
+const isEmpty = require('lodash/isEmpty');
+const { join } = require('path');
+const security = require('@abtnode/util/lib/security');
+
+const { BlockletExtrasBackup } = require('../backup/blocklet-extras');
+
+class BlockletExtrasExport extends BlockletExtrasBackup {
+  /**
+   * Decrypt secure configs to plaintext using .sock key.
+   * Keep config.secure = true so that import-side encryptSecurityData() re-encrypts correctly.
+   */
+  encrypt(configs) {
+    if (isEmpty(configs)) {
+      return;
+    }
+
+    const dk = readFileSync(join(this.serverDir, '.sock'));
+    for (const config of configs) {
+      if (config.secure) {
+        config.value = security.decrypt(config.value, this.blocklet.meta.did, dk);
+      }
+    }
+  }
+}
+
+module.exports = { BlockletExtrasExport };

package/lib/blocklet/storage/export/blocklets-export.js

@@ -0,0 +1,50 @@
+const fs = require('fs-extra');
+const { join } = require('path');
+const { BlockletsBackup } = require('../backup/blocklets');
+const { getBundleDir } = require('../../../util/blocklet');
+
+/**
+ * Export ALL component bundles (including registry children).
+ * Unlike BlockletsBackup which filters out HTTP-URL bundles,
+ * this exports everything so the import doesn't depend on the store.
+ */
+class BlockletsExport extends BlockletsBackup {
+  async export() {
+    const metas = this._getAllComponentMetas(this.blocklet);
+    const serverBlockletsDir = join(this.serverDir, 'blocklets');
+
+    /** @type {import('../backup/blocklets').DirToZipMeta[]} */
+    const dirs = [];
+    for (const meta of metas) {
+      const sourceDir = getBundleDir(serverBlockletsDir, meta);
+      if (!fs.existsSync(sourceDir)) {
+        continue;
+      }
+      const zipPath = join(this.backupDir, 'blocklets', meta.bundleName || meta.name, `${meta.version}.zip`);
+      dirs.push({ sourceDir, zipPath });
+    }
+    await this.dirsToZip(dirs);
+
+    return { dirs };
+  }
+
+  /**
+   * Collect full meta objects for all components (parent + children, recursive).
+   * Returns the meta object directly so getBundleDir can compute the correct path.
+   */
+  _getAllComponentMetas(blocklet) {
+    if (!blocklet?.meta?.bundleName || !blocklet?.meta?.version) {
+      return [];
+    }
+
+    const metas = [blocklet.meta];
+
+    for (const child of blocklet.children || []) {
+      metas.push(...this._getAllComponentMetas(child));
+    }
+
+    return metas;
+  }
+}
+
+module.exports = { BlockletsExport };

package/lib/blocklet/storage/export/export-meta.js

@@ -0,0 +1,34 @@
+const { outputJson } = require('fs-extra');
+const { join } = require('path');
+
+const EXPORT_META_VERSION = 1;
+const EXPORT_META_FILENAME = 'export-meta.json';
+
+/**
+ * @param {object} params
+ * @param {string} params.outDir - export output directory
+ * @param {object} params.blocklet - blocklet state
+ * @param {string} params.serverDid - source server DID
+ * @param {string} params.appSk - plaintext application secret key
+ * @param {string} params.appDid - application DID
+ * @returns {Promise<object>} the written meta object
+ */
+async function writeExportMeta({ outDir, blocklet, serverDid, appSk, appDid }) {
+  const meta = {
+    version: EXPORT_META_VERSION,
+    exportedAt: new Date().toISOString(),
+    sourceServerDid: serverDid,
+    blockletDid: blocklet.meta.did,
+    blockletName: blocklet.meta.name,
+    blockletTitle: blocklet.meta.title,
+    blockletVersion: blocklet.meta.version,
+    structVersion: blocklet.structVersion,
+    appSk,
+    appDid,
+  };
+
+  await outputJson(join(outDir, EXPORT_META_FILENAME), meta, { spaces: 2 });
+  return meta;
+}
+
+module.exports = { writeExportMeta, EXPORT_META_VERSION, EXPORT_META_FILENAME };

package/lib/blocklet/storage/export/exporter.js

@@ -0,0 +1,140 @@
+const path = require('path');
+const { isValid } = require('@arcblock/did');
+const { ensureDirSync } = require('fs-extra');
+const isEmpty = require('lodash/isEmpty');
+const { getBlockletInfo } = require('@blocklet/meta/lib/info');
+const logger = require('@abtnode/logger')('@abtnode/core:storage:export');
+
+const states = require('../../../states');
+const { BlockletExport } = require('./blocklet-export');
+const { BlockletExtrasExport } = require('./blocklet-extras-export');
+const { BlockletsExport } = require('./blocklets-export');
+const { DataBackup } = require('../backup/data');
+const { RoutingRuleBackup } = require('../backup/routing-rule');
+const { LogsBackup } = require('../backup/logs');
+const { writeExportMeta } = require('./export-meta');
+const { dockerExecChown } = require('../../../util/docker/docker-exec-chown');
+const checkDockerRunHistory = require('../../../util/docker/check-docker-run-history');
+const { dockerBackupPgBlockletDb } = require('../../../util/docker/docker-backup-pg-blocklet-db');
+
+class BlockletExporter {
+  constructor({ appDid, outDir, serverDir, options = {}, progressCallback } = {}) {
+    if (isEmpty(appDid) || !isValid(appDid)) {
+      throw new Error(`appDid(${appDid}) is not a valid did`);
+    }
+    if (isEmpty(outDir)) {
+      throw new Error('outDir is required');
+    }
+
+    this.appDid = appDid;
+    this.outDir = outDir;
+    this._serverDir = serverDir;
+    this.includeLogs = options.includeLogs || false;
+    this.progressCallback = progressCallback || (() => {});
+  }
+
+  async initialize() {
+    this.blocklet = await states.blocklet.getBlocklet(this.appDid);
+    if (isEmpty(this.blocklet)) {
+      throw new Error(`Blocklet ${this.appDid} not found`);
+    }
+
+    this.serverDir = this._serverDir || process.env.ABT_NODE_DATA_DIR;
+    this.backupDir = this.outDir;
+    ensureDirSync(this.backupDir);
+
+    // Extract appSk from blocklet wallet
+    const nodeInfo = await states.node.read();
+    const { wallet } = getBlockletInfo(this.blocklet, nodeInfo.sk);
+    this.appSk = wallet.secretKey;
+    this.appDid = wallet.address;
+    this.serverDid = nodeInfo.did;
+
+    logger.info('export initialized', { appDid: this.appDid, outDir: this.outDir });
+  }
+
+  async prepareDocker() {
+    const nodeInfo = await states.node.read();
+
+    if (checkDockerRunHistory(nodeInfo)) {
+      let paths = [];
+      if (this.blocklet) {
+        paths = this.blocklet.children.map((child) => {
+          if (!child.meta?.docker?.image) {
+            return null;
+          }
+          return path.join(this.serverDir, 'blocklets', child.meta.name, child.meta.version);
+        });
+      }
+      await dockerExecChown({
+        name: `${this.blocklet.meta.did}-export`,
+        dirs: [path.join(this.serverDir, 'data', this.blocklet.meta.did), ...paths.filter(Boolean)],
+      });
+    }
+  }
+
+  async backupPostgres() {
+    if (!this.blocklet) {
+      return;
+    }
+    const dataDir =
+      this.blocklet.environments?.find((v) => v.key === 'BLOCKLET_APP_DATA_DIR')?.value ||
+      path.join(this.serverDir, 'data', this.blocklet.appPid || this.blocklet.appDid);
+    const dbPath = path.join(dataDir, 'blocklet.db');
+    await dockerBackupPgBlockletDb(dbPath);
+  }
+
+  async export() {
+    await this.initialize();
+    this.progressCallback('Preparing Docker environment...');
+
+    await this.prepareDocker();
+    await this.backupPostgres();
+
+    const input = { appDid: this.appDid };
+
+    // Data must be exported first
+    this.progressCallback('Exporting data directory...');
+    const dataBackup = new DataBackup(input);
+    dataBackup.ensureParams(this);
+    await dataBackup.export();
+
+    // Export blocklet state, extras, bundles, and routing rules in parallel
+    this.progressCallback('Exporting blocklet state and bundles...');
+    const storages = [
+      new BlockletExport(input),
+      new BlockletsExport(input),
+      new BlockletExtrasExport(input),
+      new RoutingRuleBackup(input),
+    ];
+    await Promise.all(
+      storages.map((storage) => {
+        storage.ensureParams(this);
+        return storage.export();
+      })
+    );
+
+    // Optional: export logs
+    if (this.includeLogs) {
+      this.progressCallback('Exporting logs...');
+      const logsBackup = new LogsBackup(input);
+      logsBackup.ensureParams(this);
+      await logsBackup.export();
+    }
+
+    // Write export metadata
+    this.progressCallback('Writing export metadata...');
+    const meta = await writeExportMeta({
+      outDir: this.backupDir,
+      blocklet: this.blocklet,
+      serverDid: this.serverDid,
+      appSk: this.appSk,
+      appDid: this.appDid,
+    });
+
+    logger.info('export completed', { appDid: this.appDid, outDir: this.outDir });
+    return meta;
+  }
+}
+
+module.exports = { BlockletExporter };

package/lib/blocklet/storage/import/importer.js

@@ -0,0 +1,110 @@
+const fs = require('fs-extra');
+const { join } = require('path');
+const fg = require('fast-glob');
+const logger = require('@abtnode/logger')('@abtnode/core:storage:import');
+
+const { EXPORT_META_FILENAME } = require('../export/export-meta');
+const { installApplicationFromBackup } = require('../../manager/helper/install-application-from-backup');
+const { zipToDir } = require('../utils/zip');
+
+class BlockletImporter {
+  constructor({ inputDir, manager, states, context = {}, progressCallback } = {}) {
+    if (!inputDir || !fs.existsSync(inputDir)) {
+      throw new Error(`Input directory does not exist: ${inputDir}`);
+    }
+    this.inputDir = inputDir;
+    this.manager = manager;
+    this.states = states;
+    this.context = context;
+    this.progressCallback = progressCallback || (() => {});
+  }
+
+  readExportMeta() {
+    const metaPath = join(this.inputDir, EXPORT_META_FILENAME);
+    if (!fs.existsSync(metaPath)) {
+      throw new Error(`Export metadata not found: ${metaPath}`);
+    }
+    return fs.readJSONSync(metaPath);
+  }
+
+  validate(meta) {
+    if (!meta.version) {
+      throw new Error('Invalid export metadata: missing version');
+    }
+    if (!meta.appSk) {
+      throw new Error('Invalid export metadata: missing appSk');
+    }
+    if (!meta.appDid) {
+      throw new Error('Invalid export metadata: missing appDid');
+    }
+
+    // Check required files exist
+    const requiredFiles = ['blocklet.json', 'blocklet-extras.json', 'routing_rule.json'];
+    for (const file of requiredFiles) {
+      if (!fs.existsSync(join(this.inputDir, file))) {
+        throw new Error(`Required file missing in export directory: ${file}`);
+      }
+    }
+  }
+
+  /**
+   * Extract bundle zip files so installApplicationFromBackup can find them.
+   * Similar to BlockletsRestore.import() but keeps the zip files intact.
+   */
+  async extractBundleZips() {
+    const blockletsDir = join(this.inputDir, 'blocklets');
+    if (!fs.existsSync(blockletsDir)) {
+      return;
+    }
+
+    // Only match bundle zips at depth 1 (<name>/<version>.zip),
+    // not nested zips inside already-extracted bundle directories
+    const paths = await fg('*/*.zip', {
+      cwd: blockletsDir,
+      onlyFiles: true,
+      absolute: true,
+    });
+
+    await Promise.all(
+      paths.map(async (zipPath) => {
+        const target = zipPath.replace(/.zip$/, '');
+        if (!fs.existsSync(target)) {
+          fs.ensureDirSync(target);
+        }
+        await zipToDir(zipPath, target);
+        logger.info('extracted bundle zip', { zipPath, target });
+      })
+    );
+  }
+
+  async import() {
+    this.progressCallback('Reading export metadata...');
+    const meta = this.readExportMeta();
+    this.validate(meta);
+
+    logger.info('import started', {
+      appDid: meta.appDid,
+      blockletName: meta.blockletName,
+      sourceServer: meta.sourceServerDid,
+    });
+
+    this.progressCallback('Extracting bundle archives...');
+    await this.extractBundleZips();
+
+    this.progressCallback('Installing blocklet from export...');
+    const result = await installApplicationFromBackup({
+      url: `file://${this.inputDir}`,
+      appSk: meta.appSk,
+      moveDir: false,
+      manager: this.manager,
+      states: this.states,
+      sync: true,
+      context: { startImmediately: false, skipHooks: true, ...this.context },
+    });
+
+    logger.info('import completed', { appDid: meta.appDid });
+    return { meta, blocklet: result };
+  }
+}
+
+module.exports = { BlockletImporter };

package/lib/event/index.js

@@ -134,6 +134,28 @@ module.exports = ({
         });
       }
 
+      // When receiving installed event from CLI (e.g. blocklet import), set up routing
+      // in the daemon. The router deduplicates queued changes, so this is safe even if
+      // handleBlockletEvent already processed routing for this blocklet.
+      if (name === BlockletEvents.installed) {
+        const blocklet = data?.blocklet || data;
+        if (blocklet?.meta?.did) {
+          ensureBlockletRouting(blocklet, data?.context || {})
+            .then((changed) => {
+              if (changed) {
+                return handleBlockletRouting({
+                  did: blocklet.meta.did,
+                  message: 'Install blocklet (eventHub)',
+                });
+              }
+              return null;
+            })
+            .catch((error) => {
+              logger.error('routing setup from eventHub failed', { event: name, did: blocklet?.meta?.did, error });
+            });
+        }
+      }
+
       if (typeof eventHandler === 'function') {
         eventHandler({ name, data });
       }
@@ -467,6 +489,11 @@ module.exports = ({
         did: blocklet.meta.did,
         message: 'Connect blocklet to DID Spaces',
       });
+    } else if (BlockletEvents.gatewayConfigChanged === eventName) {
+      await handleBlockletRouting({
+        did: blocklet.meta.did,
+        message: 'Update blocklet gateway config',
+      });
     } else if (BlockletEvents.backupProgress === eventName && payload?.completed) {
       try {
         const backupEndpoint = getBackupEndpoint(blocklet?.environments);
@@ -700,6 +727,7 @@ module.exports = ({
     BlockletEvents.downloadBundleProgress,
 
     BlockletEvents.spaceConnected,
+    BlockletEvents.gatewayConfigChanged,
     BlockletEvents.nftConsumed,
 
     BlockletEvents.configTheme,

package/lib/index.js

@@ -413,6 +413,7 @@ function ABTNode(options) {
     backupBlocklet: blockletManager.backupBlocklet.bind(blockletManager),
     abortBlockletBackup: blockletManager.abortBlockletBackup.bind(blockletManager),
     restoreBlocklet: blockletManager.restoreBlocklet.bind(blockletManager),
+    importBlocklet: blockletManager.importBlocklet.bind(blockletManager),
     migrateApplicationToStructV2: blockletManager.migrateApplicationToStructV2.bind(blockletManager),
     syncAppConfig: blockletManager.syncAppConfig.bind(blockletManager),
     setBlockletBlurhash: blockletManager.setBlockletBlurhash.bind(blockletManager),

package/lib/router/helper.js

@@ -1897,12 +1897,13 @@ module.exports = function getRouterHelpers({
         getAllRoutingParams: async () => {
           try {
             // Parallelize all independent async operations
-            const [info, { sites }, services, certificates, wafDisabledList] = await Promise.all([
+            const [info, { sites }, services, certificates, wafDisabledList, noIndexOverrides] = await Promise.all([
               nodeState._read(),
               readAllRoutingSites(),
               blockletState.getServices(),
               httpsEnabled ? certManager.getAllNormal() : Promise.resolve([]),
               states.blockletExtras.getWafDisabledBlocklets(),
+              states.blockletExtras.getNoIndexOverrides(),
             ]);
 
             // Fetch site info for WAF disabled blocklets in parallel
@@ -1921,6 +1922,7 @@ module.exports = function getRouterHelpers({
               services,
               nodeInfo: info,
               wafDisabledBlocklets,
+              noIndexOverrides,
             };
           } catch (err) {
             logger.error('Read routing rules failed', { error: err });
@@ -1939,10 +1941,11 @@ module.exports = function getRouterHelpers({
         getBlockletRoutingParams: async (blockletDid) => {
           try {
             // Parallelize all independent async operations
-            const [info, sites, certificates] = await Promise.all([
+            const [info, sites, certificates, noIndexOverrides] = await Promise.all([
               nodeState._read(),
               readBlockletRoutingSite(blockletDid),
               httpsEnabled ? certManager.getAllNormal() : Promise.resolve([]),
+              states.blockletExtras.getNoIndexOverrides(),
             ]);
 
             if (!sites || sites.length === 0) {
@@ -1958,6 +1961,7 @@ module.exports = function getRouterHelpers({
               headers: get(info, 'routing.headers', {}),
               nodeInfo: info,
               wafDisabledBlocklets: [],
+              noIndexOverrides,
             };
           } catch (err) {
             logger.error('router: getBlockletRoutingParams failed', { blockletDid, error: err });
@@ -1997,6 +2001,7 @@ module.exports = function getRouterHelpers({
               headers: get(info, 'routing.headers', {}),
               nodeInfo: info,
               wafDisabledBlocklets,
+              noIndexOverrides: {},
             };
           } catch (err) {
             logger.error('router: getSystemRoutingParams failed', { error: err });

package/lib/router/index.js

@@ -262,6 +262,7 @@ class Router {
       services = [],
       nodeInfo = {},
       wafDisabledBlocklets = [],
+      noIndexOverrides = {},
     } = (await this[fn]()) || {};
 
     if (!Array.isArray(sites)) {
@@ -332,6 +333,7 @@ class Router {
       wafPolicy,
       cacheEnabled: isGatewayCacheEnabled(nodeInfo),
       wafDisabledBlocklets,
+      noIndexOverrides,
       enableDefaultServer: nodeInfo.routing.enableDefaultServer ?? false,
       enableIpServer: nodeInfo.routing.enableIpServer ?? false,
     };
@@ -434,13 +436,21 @@ class Router {
             // eslint-disable-next-line no-await-in-loop
             const rawParams = await this.getBlockletRoutingParams(did);
             if (rawParams && rawParams.sites && rawParams.sites.length > 0) {
-              const { sites, certificates, headers = {}, nodeInfo = {}, wafDisabledBlocklets = [] } = rawParams;
+              const {
+                sites,
+                certificates,
+                headers = {},
+                nodeInfo = {},
+                wafDisabledBlocklets = [],
+                noIndexOverrides = {},
+              } = rawParams;
               const blockletParams = {
                 routingTable: getRoutingTable({ sites, nodeInfo }),
                 certificates,
                 commonHeaders: headers,
                 nodeInfo: pick(nodeInfo, ['did', 'name', 'version', 'port', 'mode', 'enableWelcomePage', 'routing']),
                 wafDisabledBlocklets,
+                noIndexOverrides,
               };
 
               if (typeof this.provider.updateSingleBlocklet === 'function') {

package/lib/router/security/limiter.js

@@ -7,6 +7,21 @@ const logger = require('@abtnode/logger')('@abtnode/core:router:security:limiter
 
 const states = require('../../states');
 
+/**
+ * Check if an IP is a loopback or private address that should never be blocked.
+ * Blocking these IPs can cause the server to lock itself out.
+ */
+function isSkippedIP(ip) {
+  return (
+    ip === '127.0.0.1' ||
+    ip === '::1' ||
+    ip === '0.0.0.0' ||
+    ip.startsWith('10.') ||
+    ip.startsWith('192.168.') ||
+    /^172\.(1[6-9]|2\d|3[01])\./.test(ip)
+  );
+}
+
 /**
  * Create a rate limiter for suspicious requests.
  * https://github.com/animir/node-rate-limiter-flexible/wiki/Options
@@ -29,6 +44,11 @@ function createLimiter(options, onBlocked = () => {}) {
   logger.info('Rate limiter created', { options });
 
   const check = async (ip, points = 1) => {
+    if (isSkippedIP(ip)) {
+      logger.debug('Skipping private/loopback IP from rate limiting', { ip });
+      return 0;
+    }
+
     try {
       const result = await limiter.consume(ip, points);
       logger.debug('Rate limit not exceeded', { ip, result });

package/lib/states/blocklet-extras.js

@@ -351,6 +351,18 @@ class BlockletExtrasState extends BaseState {
   getWafDisabledBlocklets() {
     return super.find({ where: { 'settings.gateway.wafPolicy.enabled': false } }, { did: 1 });
   }
+
+  async getNoIndexOverrides() {
+    const docs = await super.find({}, { did: 1, configs: 1 });
+    const overrides = {};
+    for (const doc of docs) {
+      const config = (doc.configs || []).find((c) => c.key === 'APP_NO_INDEX');
+      if (config && config.value !== undefined && config.value !== '') {
+        overrides[doc.did] = !['false', '0'].includes(String(config.value).toLowerCase());
+      }
+    }
+    return overrides;
+  }
 }
 
 module.exports = BlockletExtrasState;

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.17.10",
+  "version": "1.17.11-beta-20260225-043848-68611a07",
   "description": "",
   "main": "lib/index.js",
   "files": [
@@ -17,19 +17,19 @@
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/analytics": "1.17.10",
-    "@abtnode/auth": "1.17.10",
-    "@abtnode/certificate-manager": "1.17.10",
-    "@abtnode/constant": "1.17.10",
-    "@abtnode/cron": "1.17.10",
-    "@abtnode/db-cache": "1.17.10",
-    "@abtnode/docker-utils": "1.17.10",
-    "@abtnode/logger": "1.17.10",
-    "@abtnode/models": "1.17.10",
-    "@abtnode/queue": "1.17.10",
-    "@abtnode/rbac": "1.17.10",
-    "@abtnode/router-provider": "1.17.10",
-    "@abtnode/util": "1.17.10",
+    "@abtnode/analytics": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/auth": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/certificate-manager": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/constant": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/cron": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/db-cache": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/docker-utils": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/logger": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/models": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/queue": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/rbac": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/router-provider": "1.17.11-beta-20260225-043848-68611a07",
+    "@abtnode/util": "1.17.11-beta-20260225-043848-68611a07",
     "@arcblock/did": "1.29.8",
     "@arcblock/did-connect-js": "1.29.8",
     "@arcblock/did-ext": "1.29.8",
@@ -40,15 +40,15 @@
     "@arcblock/pm2-events": "^0.0.5",
     "@arcblock/validator": "1.29.8",
     "@arcblock/vc": "1.29.8",
-    "@blocklet/constant": "1.17.10",
+    "@blocklet/constant": "1.17.11-beta-20260225-043848-68611a07",
     "@blocklet/did-space-js": "^1.2.16",
-    "@blocklet/env": "1.17.10",
+    "@blocklet/env": "1.17.11-beta-20260225-043848-68611a07",
     "@blocklet/error": "^0.3.5",
-    "@blocklet/meta": "1.17.10",
-    "@blocklet/resolver": "1.17.10",
-    "@blocklet/sdk": "1.17.10",
-    "@blocklet/server-js": "1.17.10",
-    "@blocklet/store": "1.17.10",
+    "@blocklet/meta": "1.17.11-beta-20260225-043848-68611a07",
+    "@blocklet/resolver": "1.17.11-beta-20260225-043848-68611a07",
+    "@blocklet/sdk": "1.17.11-beta-20260225-043848-68611a07",
+    "@blocklet/server-js": "1.17.11-beta-20260225-043848-68611a07",
+    "@blocklet/store": "1.17.11-beta-20260225-043848-68611a07",
     "@blocklet/theme": "^3.5.2",
     "@fidm/x509": "^1.2.1",
     "@ocap/mcrypto": "1.29.8",
@@ -113,5 +113,5 @@
     "express": "^4.18.2",
     "unzipper": "^0.10.11"
   },
-  "gitHead": "8a940042dc8376648117826d777254d99628a61b"
+  "gitHead": "984a5f485c38205d8240b667cca26ddad0bbf6ac"
 }