@abtnode/core 1.17.7-beta-20251227-001958-ea2ba3f5 → 1.17.7-beta-20251229-223813-e1e6c5e3

package/lib/blocklet/manager/disk.js

@@ -103,6 +103,7 @@ const {
   APP_CONFIG_DIR,
   COMPONENT_ENV_FILE_NAME,
   BLOCKLET_PREFERENCE_PREFIX,
+  STATIC_SERVER_ENGINE_DID,
   LOGIN_PROVIDER,
 } = require('@blocklet/constant');
 
@@ -132,7 +133,7 @@ const { updateComponentDid, removeUploadFile } = require('@abtnode/util/lib/uplo
 const groupBy = require('lodash/groupBy');
 const { isDidDomain, isCustomDomain, getOriginUrl } = require('@abtnode/util/lib/url-evaluation');
 const { DBCache, getAbtNodeRedisAndSQLiteUrl } = require('@abtnode/db-cache');
-const { isInstanceWorker } = require('@abtnode/util/lib/pm2/is-instance-worker.js');
+const { isWorkerInstance } = require('@abtnode/util/lib/pm2/is-instance-worker.js');
 const launcher = require('../../util/launcher');
 const util = require('../../util');
 const {
@@ -190,7 +191,7 @@ const BaseBlockletManager = require('./base');
 const { get: getEngine } = require('./engine');
 const runBlockletMigrationScripts = require('../migration');
 const hooks = require('../hooks');
-const { BlockletRuntimeMonitor } = require('../../monitor/blocklet-runtime-monitor');
+const { BlockletRuntimeMonitor, isRuntimeMonitorDisabled } = require('../../monitor/blocklet-runtime-monitor');
 const getHistoryList = require('../../monitor/get-history-list');
 const { SpacesBackup } = require('../storage/backup/spaces');
 const { DiskBackup } = require('../storage/backup/disk');
@@ -422,7 +423,7 @@ class DiskBlockletManager extends BaseBlockletManager {
   }
 
   ensureBlockletRunning = () => {
-    if (isInstanceWorker()) {
+    if (isWorkerInstance()) {
       return;
     }
     ensureBlockletRunning.initialize({
@@ -547,9 +548,8 @@ class DiskBlockletManager extends BaseBlockletManager {
    * @memberof BlockletManager
    */
   async install(params, context = {}) {
-    logger.debug('install blocklet', { params, context });
-
     const type = getTypeFromInstallParams(params);
+    logger.info('install blocklet', { type, params: omit(params, ['appSk']), user: context.user });
 
     const { appSk } = params;
     if (!appSk) {
@@ -831,12 +831,12 @@ class DiskBlockletManager extends BaseBlockletManager {
         if (!baseComponentDids.includes(b.meta.did)) {
           continue;
         }
-        const engine = getBlockletEngine(b.meta);
-        if (engine.interpreter === 'blocklet') {
+        if (!hasStartEngine(b.meta)) {
           nonEntryComponentIds.push(b.meta.did);
           continue;
         }
-        if (!hasStartEngine(b.meta)) {
+        const engine = getBlockletEngine(b.meta);
+        if (engine.interpreter === 'blocklet') {
           nonEntryComponentIds.push(b.meta.did);
           continue;
         }
@@ -878,7 +878,7 @@ class DiskBlockletManager extends BaseBlockletManager {
 
         // 根据情况更新 route table
         if (!['true', '1'].includes(process.env.ABT_NODE_DISABLE_BLUE_GREEN)) {
-          this.emit(BlockletEvents.blurOrGreenStarted, {
+          this.emit(BlockletEvents.blueOrGreenStarted, {
             blocklet: finalBlocklet,
             componentDids: inputComponentDids,
             context,
@@ -1053,7 +1053,7 @@ class DiskBlockletManager extends BaseBlockletManager {
 
       // 根据情况更新 route table， 会判断只有包含多 interfaces 的 DID 才会更新 route table
       if (!['true', '1'].includes(process.env.ABT_NODE_DISABLE_BLUE_GREEN)) {
-        this.emit(BlockletEvents.blurOrGreenStarted, {
+        this.emit(BlockletEvents.blueOrGreenStarted, {
           blocklet: resultBlocklet,
           componentDids: inputComponentDids,
           context,
@@ -1968,14 +1968,37 @@ class DiskBlockletManager extends BaseBlockletManager {
     }
   }
 
-  async list({ includeRuntimeInfo = true, query } = {}, context) {
+  async list({ includeRuntimeInfo = true, query, paging, search, external, sort } = {}, context) {
+    // Validate sort param structure (if provided)
+    if (sort && typeof sort !== 'object') {
+      throw new Error('sort must be an object with field and direction properties');
+    }
+
+    // If pagination requested, use paginated query
+    if (!isEmpty(paging)) {
+      const result = await states.blocklet.findPaginated({ search, external, paging, sort });
+
+      if (includeRuntimeInfo) {
+        result.list = await this._attachBlockletListRuntimeInfo({ blocklets: result.list }, context);
+      }
+
+      return {
+        blocklets: result.list,
+        paging: result.paging,
+      };
+    }
+
+    // Legacy: return all blocklets (backward compatible)
     const condition = { ...flat(query || {}) };
     const blocklets = await states.blocklet.getBlocklets(condition);
     if (includeRuntimeInfo) {
-      return this._attachBlockletListRuntimeInfo({ blocklets }, context);
+      return {
+        blocklets: await this._attachBlockletListRuntimeInfo({ blocklets }, context),
+        paging: { total: blocklets.length },
+      };
     }
 
-    return blocklets;
+    return { blocklets, paging: { total: blocklets.length } };
   }
 
   listBackups() {
@@ -2740,9 +2763,24 @@ class DiskBlockletManager extends BaseBlockletManager {
     );
   }
 
+  /**
+   * Update certificates for all blocklets in batches
+   * Memory-efficient: processes 100 blocklets at a time
+   */
   async updateAllBlockletCertificate() {
-    const blocklets = await states.blocklet.getBlocklets();
-    await Promise.all(blocklets.map((blocklet) => this._updateBlockletCertificate(blocklet.meta.did)));
+    await states.blocklet.forEachBatch({
+      projection: { appPid: 1 },
+      batchSize: 100,
+      onBatch: async (blocklets) => {
+        try {
+          await Promise.all(
+            blocklets.filter(({ appPid }) => appPid).map(({ appPid }) => this._updateBlockletCertificate(appPid))
+          );
+        } catch (error) {
+          logger.error('Failed to update certificate for blocklet', { error: error.message });
+        }
+      },
+    });
   }
 
   /**
@@ -2808,11 +2846,6 @@ class DiskBlockletManager extends BaseBlockletManager {
           refreshAccessibleExternalNodeIp(nodeInfo);
         },
       },
-      {
-        name: 'record-blocklet-runtime-history',
-        time: `*/${MONITOR_RECORD_INTERVAL_SEC} * * * * *`, // 10s
-        fn: () => this.runtimeMonitor.monitAll(),
-      },
       {
         name: 'update-blocklet-certificate',
         time: '*/10 * * * *',
@@ -2824,6 +2857,14 @@ class DiskBlockletManager extends BaseBlockletManager {
       },
     ];
 
+    if (!isRuntimeMonitorDisabled()) {
+      crons.push({
+        name: 'record-blocklet-runtime-history',
+        time: `*/${MONITOR_RECORD_INTERVAL_SEC} * * * * *`, // 10s
+        fn: () => this.runtimeMonitor.monitAll(),
+      });
+    }
+
     if (isInServerlessMode(info)) {
       const serverlessJobs = [
         {
@@ -4255,6 +4296,7 @@ class DiskBlockletManager extends BaseBlockletManager {
   }
 
   async _attachBlockletListRuntimeInfo({ blocklets }, context) {
+    const nodeInfo = await states.node.read();
     return (
       await Promise.all(
         blocklets.map((x) => {
@@ -4264,6 +4306,7 @@ class DiskBlockletManager extends BaseBlockletManager {
 
           return this._attachRuntimeInfo({
             did: x.meta.did,
+            nodeInfo,
             diskInfo: false,
             context,
           });
@@ -4275,15 +4318,7 @@ class DiskBlockletManager extends BaseBlockletManager {
   // 处理 domainAliases#value SLOT_FOR_IP_DNS_SITE
   async getDomainAliases({ blocklet, nodeInfo }, context = {}) {
     if (blocklet?.site?.domainAliases?.length) {
-      let info = nodeInfo;
-      try {
-        if (!info && this.nodeAPI) {
-          info = await this.nodeAPI.getInfo();
-        }
-      } catch (error) {
-        logger.error('Failed to get node info', { error });
-      }
-      const nodeIp = await getAccessibleExternalNodeIp(info);
+      const nodeIp = await getAccessibleExternalNodeIp(nodeInfo || (await states.node.read()));
       return blocklet.site.domainAliases.map((x) => ({
         ...x,
         value: util.replaceDomainSlot({ domain: x.value, context, nodeIp }),
@@ -4293,7 +4328,7 @@ class DiskBlockletManager extends BaseBlockletManager {
     return [];
   }
 
-  async _attachRuntimeInfo({ did, diskInfo = false, context, getOptionalComponents }) {
+  async _attachRuntimeInfo({ did, nodeInfo, diskInfo = false, context, getOptionalComponents }) {
     if (!did) {
       throw new Error('did should not be empty');
     }
@@ -4306,7 +4341,10 @@ class DiskBlockletManager extends BaseBlockletManager {
       }
 
       if (blocklet.site) {
-        blocklet.site.domainAliases = await this.getDomainAliases({ blocklet }, context);
+        blocklet.site.domainAliases = await this.getDomainAliases(
+          { blocklet, nodeInfo: nodeInfo || (await states.node.read()) },
+          context
+        );
       }
 
       // app runtime info, app status
@@ -4344,7 +4382,7 @@ class DiskBlockletManager extends BaseBlockletManager {
               // FIXME: @wangshijun this should be dynamic
               logo: '',
             };
-          } else {
+          } else if (engineId !== STATIC_SERVER_ENGINE_DID) {
             // Note: the component maybe in dev mode or removed
             logger.warn(`engine component ${engineId} not found for ${did}`);
           }
@@ -4400,6 +4438,7 @@ class DiskBlockletManager extends BaseBlockletManager {
     folder,
     onlyRequired,
     requirements,
+    context,
   }) {
     const environments = component?.meta?.environments || [];
 
@@ -4501,6 +4540,8 @@ class DiskBlockletManager extends BaseBlockletManager {
     await states.blockletExtras.setConfigs(blocklet.meta.did, [chainTypeEnv]);
     await states.blockletExtras.setSettings(blocklet.meta.did, { session: { salt: generateRandomString(16) } });
 
+    this.emit(BlockletEvents.added, { blocklet, context });
+
     return blocklet;
   }
 
@@ -5772,6 +5813,7 @@ class DiskBlockletManager extends BaseBlockletManager {
         .map((key) => ({
           ...omit(blocklet.settings?.oauth[key], 'order'),
           type: 'oauth',
+          provider: key,
         }))
         .filter((x) => x.enabled === true);
       authenticationList.push(...oauthList);

package/lib/blocklet/manager/ensure-blocklet-running.js

@@ -50,7 +50,7 @@ class EnsureBlockletRunning {
 
   waitingTimeout = +process.env.ABT_NODE_ENSURE_RUNNING_WAITING_TIMEOUT || 60 * 1000;
 
-  downloadingTimeout = +process.env.ABT_NODE_ENSURE_RUNNING_DOWNLOADING_TIMEOUT || 3 * 60 * 1000;
+  downloadingTimeout = +process.env.ABT_NODE_ENSURE_RUNNING_DOWNLOADING_TIMEOUT || 10 * 60 * 1000;
 
   startingTimeout = +process.env.ABT_NODE_ENSURE_RUNNING_STARTING_TIMEOUT || 6 * 60 * 1000;
 

package/lib/blocklet/manager/helper/blue-green-start-blocklet.js

@@ -448,7 +448,7 @@ const blueGreenStartBlocklet = async (
   // 如果是蓝绿更新发起的，则不更新 route table，因为蓝绿更新会自动更新 route table
   if (!['true', '1'].includes(process.env.ABT_NODE_DISABLE_BLUE_GREEN) && !ignoreBlockletStartedEvent) {
     const latestBlocklet = await manager.getBlocklet(did, { e2eMode });
-    manager.emit(BlockletEvents.blurOrGreenStarted, {
+    manager.emit(BlockletEvents.blueOrGreenStarted, {
       blocklet: latestBlocklet,
       componentDids,
       context,

package/lib/blocklet/manager/helper/install-application-from-general.js

@@ -1,6 +1,6 @@
 const { isInServerlessMode } = require('@abtnode/util/lib/serverless');
 const { BLOCKLET_INSTALL_TYPE, INSTALL_ACTIONS } = require('@abtnode/constant');
-const { BlockletStatus, BlockletEvents, BLOCKLET_CONFIGURABLE_KEY } = require('@blocklet/constant');
+const { BlockletStatus, BLOCKLET_CONFIGURABLE_KEY } = require('@blocklet/constant');
 
 const logger = require('@abtnode/logger')('@abtnode/core:install-app-general');
 const { getApplicationWallet } = require('@blocklet/meta/lib/wallet');
@@ -124,6 +124,7 @@ const installApplicationFromGeneral = async ({
     skSource,
     onlyRequired,
     requirements,
+    context,
   });
   logger.info('blocklet added to database', { did: blocklet.meta.did });
 
@@ -178,8 +179,6 @@ const installApplicationFromGeneral = async ({
 
   try {
     const blocklet1 = await states.blocklet.setBlockletStatus(did, BlockletStatus.waiting);
-    manager.emit(BlockletEvents.added, blocklet1);
-
     const action = INSTALL_ACTIONS.INSTALL;
     const downloadParams = {
       blocklet: { ...blocklet1 },

package/lib/blocklet/manager/helper/install-component-from-url.js

@@ -2,7 +2,8 @@ const { sign } = require('@arcblock/jwt');
 
 const logger = require('@abtnode/logger')('@abtnode/core:install-component-url');
 const uniq = require('lodash/uniq');
-const { isFreeBlocklet, hasStartEngine } = require('@blocklet/meta/lib/util');
+const { isFreeBlocklet } = require('@blocklet/meta/lib/util');
+const { hasMountPoint, hasStartEngine } = require('@blocklet/meta/lib/engine');
 const { titleSchema, updateMountPointSchema } = require('@blocklet/meta/lib/schema');
 const { hasReservedKey } = require('@blocklet/meta/lib/has-reserved-key');
 const formatName = require('@abtnode/util/lib/format-name');
@@ -89,9 +90,11 @@ const installComponentFromUrl = async ({
       : { url },
   };
 
-  if (hasStartEngine(newChildMeta)) {
-    const mountPoint = await updateMountPointSchema.validateAsync(tmpMountPoint);
-    newChild.mountPoint = mountPoint || formatName(newChildMeta.title) || formatName(newChildMeta.name);
+  if (hasStartEngine(newChildMeta) || hasMountPoint(newChildMeta)) {
+    const mountPoint = tmpMountPoint
+      ? await updateMountPointSchema.validateAsync(tmpMountPoint)
+      : formatName(newChildMeta.title) || formatName(newChildMeta.name);
+    newChild.mountPoint = mountPoint;
   }
 
   const { dynamicComponents } = await parseComponents(newChild);

package/lib/blocklet/migration-dist/migration.cjs

@@ -555,6 +555,8 @@ module.exports = Object.freeze({
   CONFIG_FOLDER_NAME_OLD: '.abtnode',
   EXPORTED_FOLDER_NAME: 'exported_blocklet_server',
 
+  DEFAULT_WELLKNOWN_PORT: 8088,
+
   StatusCode: Object.freeze({
     ok: 0,
 
@@ -591,7 +593,6 @@ module.exports = Object.freeze({
 
   DEFAULT_ADMIN_PATH: '/admin',
   WELLKNOWN_SERVER_ADMIN_PATH: '/.well-known/server/admin',
-  DEFAULT_SERVICE_PATH: '/.abtnode/service',
   DEFAULT_HTTP_PORT: 80,
   DEFAULT_HTTPS_PORT: 443,
   MAX_UPLOAD_FILE_SIZE: 100, // unit: MB
@@ -680,8 +681,8 @@ module.exports = Object.freeze({
   // @link https://www.nginx.com/blog/nginx-caching-guide/
   ROUTER_CACHE_GROUPS: {
     blockletProxy: {
-      minSize: '1m',
-      maxSize: '2g',
+      minSize: '10m',
+      maxSize: '10g',
       period: '30d',
     },
     // TODO: disabled because we can not bust nginx cache effectively for now
@@ -39044,7 +39045,7 @@ module.exports = require("zlib");
 /***/ ((module) => {
 
 "use strict";
-module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.17.6","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.17.6","@abtnode/auth":"1.17.6","@abtnode/certificate-manager":"1.17.6","@abtnode/constant":"1.17.6","@abtnode/cron":"1.17.6","@abtnode/db-cache":"1.17.6","@abtnode/docker-utils":"1.17.6","@abtnode/logger":"1.17.6","@abtnode/models":"1.17.6","@abtnode/queue":"1.17.6","@abtnode/rbac":"1.17.6","@abtnode/router-provider":"1.17.6","@abtnode/static-server":"1.17.6","@abtnode/timemachine":"1.17.6","@abtnode/util":"1.17.6","@aigne/aigne-hub":"^0.10.15","@arcblock/did":"^1.27.16","@arcblock/did-connect-js":"^1.27.16","@arcblock/did-ext":"^1.27.16","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"^1.27.16","@arcblock/event-hub":"^1.27.16","@arcblock/jwt":"^1.27.16","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"^1.27.16","@arcblock/vc":"^1.27.16","@blocklet/constant":"1.17.6","@blocklet/did-space-js":"^1.2.12","@blocklet/env":"1.17.6","@blocklet/error":"^0.3.5","@blocklet/meta":"1.17.6","@blocklet/resolver":"1.17.6","@blocklet/sdk":"1.17.6","@blocklet/server-js":"1.17.6","@blocklet/store":"1.17.6","@blocklet/theme":"^3.3.0","@fidm/x509":"^1.2.1","@ocap/mcrypto":"^1.27.16","@ocap/util":"^1.27.16","@ocap/wallet":"^1.27.16","@slack/webhook":"^7.0.6","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"axios-mock-adapter":"^2.1.0","expand-tilde":"^2.0.2","express":"^4.18.2","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
+module.exports = /*#__PURE__*/JSON.parse('{"name":"@abtnode/core","publishConfig":{"access":"public"},"version":"1.17.6","description":"","main":"lib/index.js","files":["lib"],"scripts":{"lint":"eslint tests lib --ignore-pattern \'tests/assets/*\'","lint:fix":"eslint --fix tests lib"},"keywords":[],"author":"wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)","license":"Apache-2.0","dependencies":{"@abtnode/analytics":"1.17.6","@abtnode/auth":"1.17.6","@abtnode/certificate-manager":"1.17.6","@abtnode/constant":"1.17.6","@abtnode/cron":"1.17.6","@abtnode/db-cache":"1.17.6","@abtnode/docker-utils":"1.17.6","@abtnode/logger":"1.17.6","@abtnode/models":"1.17.6","@abtnode/queue":"1.17.6","@abtnode/rbac":"1.17.6","@abtnode/router-provider":"1.17.6","@abtnode/util":"1.17.6","@aigne/aigne-hub":"^0.10.15","@arcblock/did":"^1.27.16","@arcblock/did-connect-js":"^1.27.16","@arcblock/did-ext":"^1.27.16","@arcblock/did-motif":"^1.1.14","@arcblock/did-util":"^1.27.16","@arcblock/event-hub":"^1.27.16","@arcblock/jwt":"^1.27.16","@arcblock/pm2-events":"^0.0.5","@arcblock/validator":"^1.27.16","@arcblock/vc":"^1.27.16","@blocklet/constant":"1.17.6","@blocklet/did-space-js":"^1.2.12","@blocklet/env":"1.17.6","@blocklet/error":"^0.3.5","@blocklet/meta":"1.17.6","@blocklet/resolver":"1.17.6","@blocklet/sdk":"1.17.6","@blocklet/server-js":"1.17.6","@blocklet/store":"1.17.6","@blocklet/theme":"^3.3.3","@fidm/x509":"^1.2.1","@ocap/mcrypto":"^1.27.16","@ocap/util":"^1.27.16","@ocap/wallet":"^1.27.16","@slack/webhook":"^7.0.6","archiver":"^7.0.1","axios":"^1.7.9","axon":"^2.0.3","chalk":"^4.1.2","cross-spawn":"^7.0.3","dayjs":"^1.11.13","deep-diff":"^1.0.2","detect-port":"^1.5.1","envfile":"^7.1.0","escape-string-regexp":"^4.0.0","fast-glob":"^3.3.2","filesize":"^10.1.1","flat":"^5.0.2","fs-extra":"^11.2.0","get-port":"^5.1.1","hasha":"^5.2.2","is-base64":"^1.1.0","is-cidr":"4","is-ip":"3","is-url":"^1.2.4","joi":"17.12.2","joi-extension-semver":"^5.0.0","js-yaml":"^4.1.0","kill-port":"^2.0.1","lodash":"^4.17.21","node-stream-zip":"^1.15.0","p-all":"^3.0.0","p-limit":"^3.1.0","p-map":"^4.0.0","p-retry":"^4.6.2","p-wait-for":"^3.2.0","private-ip":"^2.3.4","rate-limiter-flexible":"^5.0.5","read-last-lines":"^1.8.0","semver":"^7.6.3","sequelize":"^6.35.0","shelljs":"^0.8.5","slugify":"^1.6.6","ssri":"^8.0.1","stream-throttle":"^0.1.3","stream-to-promise":"^3.0.0","systeminformation":"^5.23.3","tail":"^2.2.4","tar":"^6.1.11","transliteration":"2.3.5","ua-parser-js":"^1.0.2","ufo":"^1.5.3","uuid":"^11.1.0","valid-url":"^1.0.9","which":"^2.0.2","xbytes":"^1.8.0"},"devDependencies":{"axios-mock-adapter":"^2.1.0","expand-tilde":"^2.0.2","express":"^4.18.2","unzipper":"^0.10.11"},"gitHead":"e5764f753181ed6a7c615cd4fc6682aacf0cb7cd"}');
 
 /***/ }),
 

package/lib/blocklet/passport/index.js

@@ -129,8 +129,15 @@ class PassportAPI extends EventEmitter {
   async updatePassportExpire(nodeDid) {
     await this.updatePassport(nodeDid);
 
-    const blocklets = await this.states.blocklet.getBlocklets({});
-    await Promise.all(blocklets.map(({ meta: { did } }) => this.updatePassport(did)));
+    // Process blocklets in paginated batches to avoid loading all records at once
+    // Memory-efficient: only loads one batch at a time (100 records) instead of all 10K
+    await this.states.blocklet.forEachBatch({
+      projection: { appPid: 1 },
+      batchSize: 100,
+      onBatch: async (blocklets) => {
+        await Promise.all(blocklets.filter(({ appPid }) => appPid).map(({ appPid }) => this.updatePassport(appPid)));
+      },
+    });
   }
 
   getCron(nodeDid) {
@@ -138,7 +145,7 @@ class PassportAPI extends EventEmitter {
 
     return {
       name: 'check-passport-expire',
-      time: '0 */10 * * * *',
+      time: '0 0 * * * *',
       fn: async () => {
         logger.info('check passport expire', { nodeDid });
         await updatePassportExpire(nodeDid).catch((error) => {

package/lib/blocklet/project/index.js

@@ -2,7 +2,12 @@ const path = require('path');
 const fs = require('fs-extra');
 const createArchive = require('archiver');
 const pick = require('lodash/pick');
-const { BLOCKLET_META_FILE, PROJECT, BLOCKLET_INTERFACE_TYPE_WEB } = require('@blocklet/constant');
+const {
+  BLOCKLET_META_FILE,
+  PROJECT,
+  BLOCKLET_INTERFACE_TYPE_WEB,
+  STATIC_SERVER_ENGINE_DID,
+} = require('@blocklet/constant');
 const { update: updateMetaFile, read: readMetaFile } = require('@blocklet/meta/lib/file');
 const { createRelease: createBlockletRelease } = require('@abtnode/util/lib/create-blocklet-release');
 const { titleSchema } = require('@blocklet/meta/lib/schema');
@@ -434,7 +439,7 @@ const createRelease = async ({
         interpreter: 'blocklet',
         source: {
           store: 'https://store.blocklet.dev',
-          name: 'z2qa2dGC9EmsjB2WJtUcmuRWx43zTwPUZQF7g',
+          name: STATIC_SERVER_ENGINE_DID,
           version: 'latest',
         },
       };

package/lib/blocklet/security/index.js

@@ -197,7 +197,7 @@ class SecurityAPI extends EventEmitter {
       const upsertOrSkipSecurityRule = async (data) => {
         if (data.value === null) return;
 
-        const genrateAccessPolicyId = `migrate-${data.id}`;
+        const generateAccessPolicyId = `migrate-${data.id}`;
         const isDefaultRule = data.id === SECURITY_RULE_DEFAULT_ID;
 
         const { securityRules } = await getBlockletSecurityRules({ teamManager: this.teamManager }, { did });
@@ -218,7 +218,7 @@ class SecurityAPI extends EventEmitter {
             {
               did,
               data: {
-                id: genrateAccessPolicyId,
+                id: generateAccessPolicyId,
                 name: roles.join(','),
                 description: `Migrate from legacy whoCanAccess: ${data.rawValue}`,
                 roles,

package/lib/cert.js

@@ -131,9 +131,12 @@ class Cert extends EventEmitter {
   }
 
   async remove({ id }) {
-    await this.manager.remove(id);
-    logger.info('delete certificate', { id });
-    this.emit(EVENTS.CERT_REMOVED);
+    const cert = await this.manager.findById(id);
+    if (cert) {
+      await this.manager.remove(id);
+      logger.info('delete certificate', { id });
+      this.emit(EVENTS.CERT_REMOVED, cert);
+    }
 
     return {};
   }