@abtnode/core 1.17.8-beta-20260119-034126-467341b7 → 1.17.8-beta-20260121-102603-f9d0176f

package/lib/event/index.js

@@ -159,6 +159,13 @@ module.exports = ({
       safeData.blocklet = wipeSensitiveData(safeData.blocklet);
     }
 
+    if (name === BlockletInternalEvents.appSettingChanged) {
+      handleBlockletRouting({
+        did: data.appDid,
+        message: 'App setting changed',
+      });
+    }
+
     logger.debug('proxy event to event hub', { name });
     eventHub.broadcast(name, safeData); // 广播到所有节点
     if (!disabledNodeListener) {

package/lib/router/helper.js

@@ -749,6 +749,75 @@ const ensureBlockletStaticServing = async (sites = [], blocklets = [], teamManag
   return result.filter(Boolean);
 };
 
+/**
+ * Generate sub-service sites for blocklets with subService configuration
+ * @param {Array} sites - Existing routing sites
+ * @param {Array} blocklets - All blocklets
+ * @returns {Promise<Array>} Sites with sub-service sites added
+ */
+const ensureSubServiceSites = async (sites = [], blocklets = []) => {
+  const settingsPromises = blocklets.map((blocklet) => {
+    return states.blockletExtras.getSettings(blocklet.meta.did).then((settings) => ({
+      did: blocklet.meta.did,
+      dataDir: blocklet.environments?.find((e) => e.key === 'BLOCKLET_DATA_DIR')?.value ?? '',
+      config: settings?.subService,
+    }));
+  });
+
+  const settingsResults = await Promise.all(settingsPromises);
+
+  // Generate sub-service sites
+  const subServiceSites = settingsResults
+    .filter(({ config }) => {
+      const domain = config?.domain;
+      // Validate configuration is complete and enabled
+      return config?.enabled && domain && config.staticRoot;
+    })
+    .map(({ did, dataDir, config }) => {
+      const domain = config.domain;
+
+      // Security: Normalize and validate path to prevent directory traversal
+      const normalizedDataDir = path.resolve(dataDir);
+      const absoluteStaticRoot = path.resolve(dataDir, config.staticRoot);
+
+      // Ensure the resolved path is still within dataDir
+      if (!absoluteStaticRoot.startsWith(normalizedDataDir + path.sep)) {
+        logger.error('ensureSubServiceSites.pathTraversalAttempt', {
+          did,
+          dataDir: normalizedDataDir,
+          staticRoot: config.staticRoot,
+          resolved: absoluteStaticRoot,
+        });
+        throw new Error(`Invalid staticRoot path: ${config.staticRoot} - path traversal detected`);
+      }
+
+      logger.info('ensureSubServiceSites.created', {
+        did,
+        domain,
+        staticRoot: config.staticRoot,
+        absoluteStaticRoot,
+      });
+
+      return {
+        domain,
+        type: ROUTING_RULE_TYPES.SUB_SERVICE,
+        blockletDid: did,
+        serviceType: 'blocklet',
+        rules: [
+          {
+            from: { pathPrefix: '/' },
+            to: {
+              type: ROUTING_RULE_TYPES.SUB_SERVICE,
+              staticRoot: absoluteStaticRoot,
+            },
+          },
+        ],
+      };
+    });
+
+  return [...sites, ...subServiceSites];
+};
+
 const ensureLatestInfo = async (sites = [], blocklets = [], teamManager = null, { nodeInfo = null } = {}) => {
   const info = nodeInfo ?? (await states.node.read());
   // CAUTION: following steps are very important, please do not change the order
@@ -762,6 +831,7 @@ const ensureLatestInfo = async (sites = [], blocklets = [], teamManager = null,
   result = ensureBlockletWellknownRules(result, blocklets);
   result = expandComponentRules(result, blocklets);
   result = await ensureBlockletStaticServing(result, blocklets, teamManager);
+  result = await ensureSubServiceSites(result, blocklets);
 
   return result;
 };
@@ -2150,6 +2220,7 @@ module.exports = function getRouterHelpers({
   const getSitesFromState = async (scope = 'all') => {
     const sites = scope === 'all' ? await siteState.getSites() : await siteState.getSystemSites();
     const blocklets = scope === 'all' ? await states.blocklet.getBlocklets() : [];
+
     return ensureLatestInfo(sites, blocklets, teamManager);
   };
 
@@ -2353,6 +2424,7 @@ module.exports.ensureWellknownRule = ensureWellknownRule;
 module.exports.ensureBlockletWellknownRules = ensureBlockletWellknownRules;
 module.exports.ensureBlockletProxyBehavior = ensureBlockletProxyBehavior;
 module.exports.ensureBlockletStaticServing = ensureBlockletStaticServing;
+module.exports.ensureSubServiceSites = ensureSubServiceSites;
 module.exports.expandComponentRules = expandComponentRules;
 module.exports.getDomainsByDid = getDomainsByDid;
 module.exports.ensureBlockletHasMultipleInterfaces = ensureBlockletHasMultipleInterfaces;

package/lib/router/index.js

@@ -35,7 +35,9 @@ const expandSites = (sites = []) => {
       const domain = typeof domainAlias === 'object' ? domainAlias.value : domainAlias;
       const tmpSite = cloneDeep(site);
       delete tmpSite.domainAliases;
+
       tmpSite.serviceType = isBlockletSite(site.domain) ? 'blocklet' : 'daemon';
+
       tmpSite.domain = domain;
       result.push(tmpSite);
     });
@@ -44,7 +46,10 @@ const expandSites = (sites = []) => {
 
     // skip site if domain is BLOCKLET_SITE_GROUP
     if (!site.domain.endsWith(BLOCKLET_SITE_GROUP_SUFFIX)) {
-      site.serviceType = 'daemon';
+      if (!site.serviceType) {
+        site.serviceType = 'daemon';
+      }
+
       result.push(site);
     }
   });

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.17.8-beta-20260119-034126-467341b7",
+  "version": "1.17.8-beta-20260121-102603-f9d0176f",
   "description": "",
   "main": "lib/index.js",
   "files": [
@@ -17,19 +17,19 @@
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/analytics": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/auth": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/certificate-manager": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/constant": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/cron": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/db-cache": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/docker-utils": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/logger": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/models": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/queue": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/rbac": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/router-provider": "1.17.8-beta-20260119-034126-467341b7",
-    "@abtnode/util": "1.17.8-beta-20260119-034126-467341b7",
+    "@abtnode/analytics": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/auth": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/certificate-manager": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/constant": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/cron": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/db-cache": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/docker-utils": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/logger": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/models": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/queue": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/rbac": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/router-provider": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@abtnode/util": "1.17.8-beta-20260121-102603-f9d0176f",
     "@arcblock/did": "^1.28.5",
     "@arcblock/did-connect-js": "^1.28.5",
     "@arcblock/did-ext": "^1.28.5",
@@ -40,15 +40,15 @@
     "@arcblock/pm2-events": "^0.0.5",
     "@arcblock/validator": "^1.28.5",
     "@arcblock/vc": "^1.28.5",
-    "@blocklet/constant": "1.17.8-beta-20260119-034126-467341b7",
+    "@blocklet/constant": "1.17.8-beta-20260121-102603-f9d0176f",
     "@blocklet/did-space-js": "^1.2.15",
-    "@blocklet/env": "1.17.8-beta-20260119-034126-467341b7",
+    "@blocklet/env": "1.17.8-beta-20260121-102603-f9d0176f",
     "@blocklet/error": "^0.3.5",
-    "@blocklet/meta": "1.17.8-beta-20260119-034126-467341b7",
-    "@blocklet/resolver": "1.17.8-beta-20260119-034126-467341b7",
-    "@blocklet/sdk": "1.17.8-beta-20260119-034126-467341b7",
-    "@blocklet/server-js": "1.17.8-beta-20260119-034126-467341b7",
-    "@blocklet/store": "1.17.8-beta-20260119-034126-467341b7",
+    "@blocklet/meta": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@blocklet/resolver": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@blocklet/sdk": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@blocklet/server-js": "1.17.8-beta-20260121-102603-f9d0176f",
+    "@blocklet/store": "1.17.8-beta-20260121-102603-f9d0176f",
     "@blocklet/theme": "^3.4.8",
     "@fidm/x509": "^1.2.1",
     "@ocap/mcrypto": "^1.28.5",
@@ -113,5 +113,5 @@
     "express": "^4.18.2",
     "unzipper": "^0.10.11"
   },
-  "gitHead": "418e1399fa4b6cd1b7acc6bbe30f38cc72d4572e"
+  "gitHead": "7ae816f51ed511037e5b7ac0008012ebf4afc987"
 }