@abtnode/core 1.6.12 → 1.6.16

package/lib/blocklet/manager/disk.js

@@ -12,7 +12,7 @@ const LRU = require('lru-cache');
 
 const { isValid: isValidDid } = require('@arcblock/did');
 const { verifyPresentation } = require('@arcblock/vc');
-const { toBase58 } = require('@ocap/util');
+const { toBase58, isHex } = require('@ocap/util');
 const { fromSecretKey } = require('@ocap/wallet');
 
 const logger = require('@abtnode/logger')('@abtnode/core:blocklet:manager');
@@ -189,9 +189,9 @@ class BlockletManager extends BaseBlockletManager {
       }
     }
 
-    meta.isFree = isFree;
+    const blocklet = await states.blocklet.getBlocklet(meta.did);
 
-    return meta;
+    return { meta, isFree, isInstalled: !!blocklet };
   }
 
   async installBlockletFromVc({ vcPresentation, challenge }, context) {
@@ -549,6 +549,14 @@ class BlockletManager extends BaseBlockletManager {
         }
       }
 
+      if (x.key === 'BLOCKLET_PASSPORT_COLOR') {
+        if (x.value && x.value !== 'auto') {
+          if (x.value.length !== 7 || !isHex(x.value.slice(-6))) {
+            throw new Error('BLOCKLET_PASSPORT_COLOR must be a hex encoded color, eg. #ffeeaa');
+          }
+        }
+      }
+
       blocklet.configObj[x.key] = x.value;
     }
 
@@ -558,7 +566,6 @@ class BlockletManager extends BaseBlockletManager {
       hooks: Object.assign(blocklet.meta.hooks || {}, blocklet.meta.scripts || {}),
       exitOnError: true,
       env: { ...getRuntimeEnvironments(blocklet, nodeEnvironments), ...blocklet.configObj },
-      notification: states.notification,
       did,
       context,
       progress: blocklet.mode === BLOCKLET_MODES.DEVELOPMENT,
@@ -2332,7 +2339,7 @@ class BlockletManager extends BaseBlockletManager {
   async _rollback(action, did, oldBlocklet) {
     if (action === 'install') {
       // remove blocklet
-      return this._deleteBlocklet({ did, keepData: false });
+      return this._deleteBlocklet({ did, keepData: true });
     }
 
     if (['upgrade', 'downgrade'].includes(action)) {
@@ -2374,7 +2381,18 @@ class BlockletManager extends BaseBlockletManager {
     const result = await states.blocklet.deleteBlocklet(did);
     logger.info('blocklet removed successfully', { did });
 
-    this.emit(BlockletEvents.removed, { blocklet: result, context });
+    let keepRouting = true;
+    if (keepData === false || keepConfigs === false) {
+      keepRouting = false;
+    }
+
+    this.emit(BlockletEvents.removed, {
+      blocklet: result,
+      context: {
+        ...context,
+        keepRouting,
+      },
+    });
     return blocklet;
   }
 

package/lib/event.js

@@ -182,7 +182,7 @@ module.exports = ({
       .catch((error) => logger.error('refresh blocklets failed on initialize the registry', { error }));
 
     // We need update router on some fields change
-    const fields = ['enableWelcomePage', 'webWalletUrl'];
+    const fields = ['enableWelcomePage', 'webWalletUrl', 'registerUrl'];
     const shouldUpdateRouter = fields.some((x) => nodeInfo[x] !== oldInfo[x]);
     if (shouldUpdateRouter) {
       handleRouting(nodeInfo).catch((err) => {

package/lib/index.js

@@ -50,6 +50,7 @@ const { toStatus, fromStatus, ensureDataDirs, getQueueConcurrencyByMem } = requi
  *   version
  *   runtimeConfig: {}
  *   autoUpgrade
+ *   registerUrl
  *   webWalletUrl
  */
 function ABTNode(options) {
@@ -400,16 +401,6 @@ function ABTNode(options) {
     } else {
       // We should only respond to pm2 events when node is alive
       events.on('node.started', async () => {
-        const info = await states.node.read();
-        certManager
-          .issue({ domain: `${info.did.toLowerCase()}.${info.didDomain}` })
-          .then(() => {
-            logger.info('add issue daemon certificate job');
-          })
-          .catch((error) => {
-            logger.error('issue daemon certificate job failed', { error });
-          });
-
         pm2Events.resume();
         initCron();
       });

package/lib/router/helper.js

@@ -5,6 +5,7 @@ const path = require('path');
 const tar = require('tar');
 const get = require('lodash/get');
 const cloneDeep = require('lodash/cloneDeep');
+const isEqual = require('lodash/isEqual');
 const joinUrl = require('url-join');
 const { getProvider } = require('@abtnode/router-provider');
 const normalizePathPrefix = require('@abtnode/util/lib/normalize-path-prefix');
@@ -28,6 +29,7 @@ const {
   SLOT_FOR_IP_DNS_SITE,
   BLOCKLET_SITE_GROUP_SUFFIX,
   WELLKNOWN_ACME_CHALLENGE_PREFIX,
+  WELLKNOWN_DID_RESOLVER_PREFIX,
 } = require('@abtnode/constant');
 const {
   BLOCKLET_DYNAMIC_PATH_PREFIX,
@@ -53,6 +55,7 @@ const { getFromCache: getAccessibleExternalNodeIp } = require('../util/get-acces
 
 const Router = require('./index');
 const states = require('../states');
+const { getBlockletDomainGroupName, getDidFromDomainGroupName } = require('../util/router');
 
 /**
  * replace 888-888-888-888 with accessible ip for domain
@@ -241,6 +244,9 @@ const ensureLatestNodeInfo = async (sites = [], { withDefaultCors = true } = {})
       site.domain = DOMAIN_FOR_IP_SITE_REGEXP;
 
       if (withDefaultCors) {
+        // Allow CORS from "Install on ABT Node"
+        addCorsToSite(site, info.registerUrl);
+
         // Allow CORS from "Web Wallet"
         addCorsToSite(site, info.webWalletUrl);
       }
@@ -351,6 +357,18 @@ const ensureCorsForWebWallet = async (sites) => {
   return sites;
 };
 
+const filterSitesForRemovedBlocklets = async (sites = []) => {
+  const blocklets = await states.blocklet.getBlocklets();
+  return sites.filter((site) => {
+    if (!site.domain.endsWith(BLOCKLET_SITE_GROUP_SUFFIX)) {
+      return true;
+    }
+
+    const did = getDidFromDomainGroupName(site.domain);
+    return blocklets.some((x) => x.meta.did === did);
+  });
+};
+
 const ensureLatestInfo = async (sites = [], { withDefaultCors = true } = {}) => {
   let result = await ensureLatestNodeInfo(sites, { withDefaultCors });
   result = await ensureWellknownRule(result);
@@ -419,7 +437,8 @@ module.exports = function getRouterHelpers({ dataDirs, routingSnapshot, routerMa
 
     const https = get(info, 'routing.https', true);
     const dashboardDomain = get(info, 'routing.dashboardDomain', '');
-    const certDownloadAddress = get(info, 'routing.dashboardCertDownloadAddress', '');
+    const certDownloadAddress =
+      process.env.ABT_NODE_DASHBOARD_CERT_DOWN_URL || get(info, 'routing.dashboardCertDownloadAddress', '');
     if (!https || !dashboardDomain || !certDownloadAddress) {
       return;
     }
@@ -493,12 +512,36 @@ module.exports = function getRouterHelpers({ dataDirs, routingSnapshot, routerMa
       return { status: 'existed' };
     }
 
-    logger.debug('downloading certificate', { url: downloadUrl, dashboardDomain });
+    logger.debug('downloading dashboard ip-domain certificate', { url: downloadUrl, dashboardDomain });
     await updateDashboardCertificate({ checkExpire: false });
-    logger.debug('downloading certificate', { url: downloadUrl, dashboardDomain });
+    logger.debug('downloaded dashboard ip-domain certificate', { url: downloadUrl, dashboardDomain });
     return { status: 'downloaded' };
   };
 
+  const upsertSiteRule = async ({ site, rule }, context) => {
+    const findExistingRule = (prefix) => site.rules.find((r) => r.from.pathPrefix === normalizePathPrefix(prefix));
+
+    const newSiteRule = {
+      id: site.id,
+      rule,
+    };
+
+    const existingRule = findExistingRule(get(rule, 'from.pathPrefix'));
+    if (!existingRule) {
+      await routerManager.addRoutingRule(newSiteRule, context);
+      return true;
+    }
+
+    if (!isEqual(existingRule.to, rule.to)) {
+      newSiteRule.rule.id = existingRule.id;
+      newSiteRule.skipProtectedRuleChecking = true;
+      await routerManager.updateRoutingRule(newSiteRule, context);
+      return true;
+    }
+
+    return false;
+  };
+
   const addWellknownSite = async (sites, context) => {
     const site = (sites || []).find((x) => x.name === NAME_FOR_WELLKNOWN_SITE);
 
@@ -511,42 +554,35 @@ module.exports = function getRouterHelpers({ dataDirs, routingSnapshot, routerMa
       };
 
       const didResolverWellknownRule = {
-        from: { pathPrefix: joinUrl(WELLKNOWN_PATH_PREFIX, '/did.json') },
+        isProtected: true,
+        from: { pathPrefix: WELLKNOWN_DID_RESOLVER_PREFIX },
         to: proxyTarget,
       };
 
       const acmeChallengeWellknownRule = {
+        isProtected: true,
         from: { pathPrefix: WELLKNOWN_ACME_CHALLENGE_PREFIX },
         to: proxyTarget,
       };
 
       if (site) {
-        let changed = false;
-        const exists = (prefix) => !!site.rules.find((r) => r.from.pathPrefix === normalizePathPrefix(prefix));
-
-        if (!exists(didResolverWellknownRule.from.pathPrefix)) {
-          await routerManager.addRoutingRule(
-            {
-              id: site.id,
-              rule: didResolverWellknownRule,
-            },
-            context
-          );
-          changed = true;
-        }
+        const didResolverRuleUpdateRes = await upsertSiteRule(
+          {
+            site,
+            rule: didResolverWellknownRule,
+          },
+          context
+        );
 
-        if (!exists(acmeChallengeWellknownRule.from.pathPrefix)) {
-          await routerManager.addRoutingRule(
-            {
-              id: site.id,
-              rule: acmeChallengeWellknownRule,
-            },
-            context
-          );
-          changed = true;
-        }
+        const acmeRuleUpdateRes = await upsertSiteRule(
+          {
+            site,
+            rule: acmeChallengeWellknownRule,
+          },
+          context
+        );
 
-        return changed;
+        return didResolverRuleUpdateRes || acmeRuleUpdateRes;
       }
 
       await routerManager.addRoutingSite(
@@ -694,7 +730,7 @@ module.exports = function getRouterHelpers({ dataDirs, routingSnapshot, routerMa
       return `/${str}`.replace(/^\/+/, '/');
     };
 
-    const domainGroup = `${blocklet.meta.did}${BLOCKLET_SITE_GROUP_SUFFIX}`;
+    const domainGroup = getBlockletDomainGroupName(blocklet.meta.did);
 
     const pathPrefix = getPrefix(webInterface.prefix);
     const rule = {
@@ -736,13 +772,6 @@ module.exports = function getRouterHelpers({ dataDirs, routingSnapshot, routerMa
         context
       );
       logger.info('add routing site', { site: domainGroup });
-      if (
-        process.env.NODE_ENV !== 'development' &&
-        process.env.NODE_ENV !== 'test' &&
-        blocklet.mode !== 'development'
-      ) {
-        await certManager.issue({ domain: didDomain });
-      }
 
       return true;
     }
@@ -1061,7 +1090,10 @@ module.exports = function getRouterHelpers({ dataDirs, routingSnapshot, routerMa
     const nodeInfo = await nodeState.read();
 
     const ruleChanged = await routerManager.deleteRoutingRulesItemByDid({ did: blocklet.meta.did }, context);
-    const siteChanged = await _removeBlockletSites(blocklet, nodeInfo, context);
+    let siteChanged;
+    if (!context.keepRouting) {
+      siteChanged = await _removeBlockletSites(blocklet, nodeInfo, context);
+    }
 
     return ruleChanged || siteChanged;
   };
@@ -1121,6 +1153,7 @@ module.exports = function getRouterHelpers({ dataDirs, routingSnapshot, routerMa
           try {
             const info = await nodeState.read();
             let { sites } = await readRoutingSites();
+            sites = await filterSitesForRemovedBlocklets(sites);
             sites = await ensureLatestInfo(sites);
             sites = await ensureAuthService(sites, blockletManager);
             sites = await ensureServiceRule(sites);
@@ -1354,6 +1387,8 @@ module.exports = function getRouterHelpers({ dataDirs, routingSnapshot, routerMa
     getCertificates,
     checkDomain,
     ensureDashboardCertificate,
+    addWellknownSite,
+    upsertSiteRule,
 
     getRoutingCrons: () => [
       {

package/lib/router/manager.js

@@ -186,19 +186,37 @@ class RouterManager extends EventEmitter {
     return dbSite;
   }
 
-  async addDomainAlias({ id, domainAlias }, context = {}) {
+  async addDomainAlias({ id, domainAlias, force }, context = {}) {
     await validateAddDomainAlias(domainAlias, context);
     const dbSite = await states.site.findOne({ _id: id });
     if (!dbSite) {
       throw new Error(`site ${id} does not exist`);
     }
 
-    const siteCount = await states.site.count({
-      $or: [{ domain: domainAlias }, { domainAliases: domainAlias }, { 'domainAliases.value': domainAlias }],
+    // check domain exists in site domain
+    const mainDomainSiteCount = await states.site.count({
+      domain: domainAlias,
     });
 
-    if (siteCount > 0) {
-      throw new Error(`domain alias ${domainAlias} already exists`);
+    if (mainDomainSiteCount > 0) {
+      if (!force) {
+        throw new Error(`${domainAlias} already exists`);
+      } else {
+        throw new Error(`${domainAlias} cannot be forced-added`);
+      }
+    }
+
+    // check domain exists in site alias domain
+    const aliasDomainSite = await states.site.findOne({
+      $or: [{ domainAliases: domainAlias }, { 'domainAliases.value': domainAlias }],
+    });
+
+    if (aliasDomainSite) {
+      if (!force) {
+        throw new Error(`${domainAlias} already exists`);
+      } else {
+        await this.deleteDomainAlias({ id: aliasDomainSite.id, domainAlias });
+      }
     }
 
     const updateResult = await states.site.update(
@@ -302,7 +320,7 @@ class RouterManager extends EventEmitter {
 
     // update rules
     const newRules = [
-      ...dbSite.rules.filter((x) => x.groupId !== rule.id || x.id !== rule.id), // 有些路由没有 rule.groupId
+      ...dbSite.rules.filter((x) => (x.groupId && x.groupId !== rule.id) || x.id !== rule.id), // 有些路由没有 rule.groupId
       ...(await this.getRules(rule)),
     ];
 

package/lib/states/blocklet.js

@@ -4,6 +4,7 @@
 /* eslint-disable no-underscore-dangle */
 const omit = require('lodash/omit');
 const uniq = require('lodash/uniq');
+const cloneDeep = require('lodash/cloneDeep');
 const detectPort = require('detect-port');
 const Lock = require('@abtnode/util/lib/lock');
 const security = require('@abtnode/util/lib/security');
@@ -119,7 +120,7 @@ class BlockletState extends BaseState {
             }
 
             this.emit('remove', doc);
-            return resolve(doc);
+            return resolve(formatBlocklet(doc, 'onRead', this.options.dek));
           });
         })
     );
@@ -196,7 +197,7 @@ class BlockletState extends BaseState {
           }
 
           try {
-            const formatted = formatBlocklet(updates, 'onUpdate', this.options.dek);
+            const formatted = formatBlocklet(cloneDeep(updates), 'onUpdate', this.options.dek);
             const newDoc = await this.updateById(doc._id, { $set: formatted });
             resolve(newDoc);
           } catch (err) {
@@ -247,8 +248,10 @@ class BlockletState extends BaseState {
               },
             });
             lock.release();
-            this.emit('upgrade', newDoc);
-            resolve(newDoc);
+
+            const formatted = formatBlocklet(newDoc, 'onRead', this.options.dek);
+            this.emit('upgrade', formatted);
+            resolve(formatted);
           } catch (err) {
             lock.release();
             reject(err);
@@ -392,11 +395,12 @@ class BlockletState extends BaseState {
     if (typeof status === 'undefined') {
       throw new Error('Unsupported blocklet status');
     }
-    const record = await this.getBlocklet(did);
-    // when status change update record
-    if (record.status === status) {
-      return record;
+
+    const doc = await this.getBlocklet(did);
+    if (doc.status === status) {
+      return formatBlocklet(doc, 'onRead', this.options.dek);
     }
+
     const updates = { status, startedAt: undefined, stoppedAt: undefined };
     if (status === BlockletStatus.running) {
       updates.startedAt = new Date();
@@ -408,10 +412,8 @@ class BlockletState extends BaseState {
       updates.stoppedAt = new Date();
     }
 
-    const res = await this.update(record._id, {
-      $set: updates,
-    });
-    return res;
+    await this.update(doc._id, { $set: updates });
+    return formatBlocklet({ ...doc, ...updates }, 'onRead', this.options.dek);
   }
 
   getChildrenFromMetas(childrenMeta) {

package/lib/states/node.js

@@ -255,6 +255,7 @@ class NodeState extends BaseState {
       ABT_NODE_PK: info.pk,
       ABT_NODE_PORT: info.port,
       ABT_NODE_SERVICE_PORT: process.env.ABT_NODE_SERVICE_PORT,
+      ABT_NODE_MODE: info.mode,
     }));
   }
 

package/lib/util/blocklet.js

@@ -41,6 +41,7 @@ const { forEachBlocklet } = require('@blocklet/meta/lib/util');
 const { validate: validateEngine, get: getEngine } = require('../blocklet/manager/engine');
 
 const isRequirementsSatisfied = require('./requirement');
+const { getDidDomainForBlocklet } = require('./get-domain-for-blocklet');
 const { getServices } = require('./service');
 const {
   isBeforeInstalled,
@@ -74,7 +75,6 @@ const PRIVATE_NODE_ENVS = [
   // 'NEDB_MULTI_PORT', // FIXME: 排查 abtnode 对外提供的 SDK(比如 @abtnode/queue), SDK 中不要自动使用 NEDB_MULTI_PORT 环境变量
   'ABT_NODE_UPDATER_PORT',
   'ABT_NODE_SESSION_TTL',
-  'ABT_NODE_MODE',
   'ABT_NODE_ROUTER_PROVIDER',
   'ABT_NODE_DATA_DIR',
   'ABT_NODE_TOKEN_SECRET',
@@ -85,6 +85,11 @@ const PRIVATE_NODE_ENVS = [
   'ABT_NODE_BASE_URL',
   'ABT_NODE_LOG_LEVEL',
   'ABT_NODE_LOG_DIR',
+  // in /core/cli/bin/blocklet.js
+  'CLI_MODE',
+  'ABT_NODE_HOME',
+  'PM2_HOME',
+  'ABT_NODE_CONFIG_FILE',
 ];
 
 /**
@@ -243,12 +248,16 @@ const getRootSystemEnvironments = (blocklet, nodeInfo) => {
   const appName = title || name || result.name;
   const appDescription = description || result.description;
 
+  // FIXME: we should use https here when possible, eg, when did-gateway is available
+  const appUrl = `http://${getDidDomainForBlocklet({ appId, didDomain: nodeInfo.didDomain })}`;
+
   return {
     BLOCKLET_DID: did,
     BLOCKLET_APP_SK: appSk,
     BLOCKLET_APP_ID: appId,
     BLOCKLET_APP_NAME: appName,
     BLOCKLET_APP_DESCRIPTION: appDescription,
+    BLOCKLET_APP_URL: appUrl,
   };
 };
 

package/lib/util/default-node-config.js

@@ -35,7 +35,7 @@ const defaultNodeConfigs = {
       },
     ],
   },
-  registerUrl: { getDefaultValue: () => NODE_REGISTER_URL }, // removed in 1.5.1
+  registerUrl: { getDefaultValue: () => NODE_REGISTER_URL },
   webWalletUrl: { getDefaultValue: () => WEB_WALLET_URL },
 };
 

package/lib/util/router.js

@@ -0,0 +1,13 @@
+const { BLOCKLET_SITE_GROUP_SUFFIX } = require('@abtnode/constant');
+
+const getBlockletDomainGroupName = (did) => `${did}${BLOCKLET_SITE_GROUP_SUFFIX}`;
+
+const getDidFromDomainGroupName = (name) => {
+  const did = name.replace(BLOCKLET_SITE_GROUP_SUFFIX, '');
+  return did;
+};
+
+module.exports = {
+  getBlockletDomainGroupName,
+  getDidFromDomainGroupName,
+};

package/lib/validators/node.js

@@ -9,14 +9,23 @@ const nodeInfoSchema = Joi.object({
   description: Joi.string()
     .required()
     .messages({ zh: { 'string.empty': '描述不能为空' }, en: { 'string.empty': 'Description cannot be empty' } }),
+  registerUrl: Joi.string()
+    .uri({ scheme: [/https?/] })
+    .label('register url')
+    .allow('')
+    .optional()
+    .messages({
+      zh: { 'string.uriCustomScheme': '应用启动器必须是合法的 URL' },
+      en: { 'string.uriCustomScheme': 'Blocklet Launcher must be a valid URL' },
+    }),
   webWalletUrl: Joi.string()
     .uri({ scheme: [/https?/] })
     .label('web wallet url')
     .allow('')
     .optional()
     .messages({
-      zh: { 'string.uriCustomScheme': 'Web DID Wallet 必须是合法的 URL' },
-      en: { 'string.uriCustomScheme': 'Web DID Wallet must be a valid URL' },
+      zh: { 'string.uriCustomScheme': 'Web Wallet 必须是合法的 URL' },
+      en: { 'string.uriCustomScheme': 'Web Wallet must be a valid URL' },
     }),
   autoUpgrade: Joi.boolean(),
   enableWelcomePage: Joi.boolean(),
@@ -31,16 +40,6 @@ const nodeInfoSchema = Joi.object({
         'number.max': 'Disk usage alert threshold cannot be higher than 99%',
       },
     }),
-  // removed in 1.5.1
-  registerUrl: Joi.string()
-    .uri({ scheme: [/https?/] })
-    .label('register url')
-    .allow('')
-    .optional()
-    .messages({
-      zh: { 'string.uriCustomScheme': '注册地址必须是合法的 URL' },
-      en: { 'string.uriCustomScheme': 'Registry URL must be a valid URL' },
-    }),
 }).options({ stripUnknown: true });
 
 module.exports = {

package/lib/validators/permission.js

@@ -2,7 +2,22 @@
 const JOI = require('joi');
 const { getMultipleLangParams } = require('./util');
 
-const nameSchema = JOI.string().trim().max(64);
+const nameSchema = JOI.string()
+  .trim()
+  .max(64)
+  .custom((name) => {
+    const arr = name.split('_');
+    const formatTip = 'The format of permission name should be "{action}_{resource}", e.g. query_data';
+    if (arr.length > 2) {
+      throw new Error(`Too much "_". ${formatTip}`);
+    }
+
+    if (arr.length < 2) {
+      throw new Error(formatTip);
+    }
+
+    return name;
+  });
 const descriptionSchema = JOI.string().trim().max(600);
 
 const createPermissionSchema = JOI.object({

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.6.12",
+  "version": "1.6.16",
   "description": "",
   "main": "lib/index.js",
   "files": [
@@ -19,28 +19,28 @@
   "author": "wangshijun <wangshijun2010@gmail.com> (http://github.com/wangshijun)",
   "license": "MIT",
   "dependencies": {
-    "@abtnode/certificate-manager": "1.6.12",
-    "@abtnode/constant": "1.6.12",
-    "@abtnode/cron": "1.6.12",
-    "@abtnode/db": "1.6.12",
-    "@abtnode/logger": "1.6.12",
-    "@abtnode/queue": "1.6.12",
-    "@abtnode/rbac": "1.6.12",
-    "@abtnode/router-provider": "1.6.12",
-    "@abtnode/static-server": "1.6.12",
-    "@abtnode/timemachine": "1.6.12",
-    "@abtnode/util": "1.6.12",
-    "@arcblock/did": "^1.13.79",
-    "@arcblock/event-hub": "1.13.79",
+    "@abtnode/certificate-manager": "1.6.16",
+    "@abtnode/constant": "1.6.16",
+    "@abtnode/cron": "1.6.16",
+    "@abtnode/db": "1.6.16",
+    "@abtnode/logger": "1.6.16",
+    "@abtnode/queue": "1.6.16",
+    "@abtnode/rbac": "1.6.16",
+    "@abtnode/router-provider": "1.6.16",
+    "@abtnode/static-server": "1.6.16",
+    "@abtnode/timemachine": "1.6.16",
+    "@abtnode/util": "1.6.16",
+    "@arcblock/did": "^1.14.3",
+    "@arcblock/event-hub": "1.14.3",
     "@arcblock/pm2-events": "^0.0.5",
-    "@arcblock/vc": "^1.13.79",
-    "@blocklet/meta": "1.6.12",
+    "@arcblock/vc": "^1.14.3",
+    "@blocklet/meta": "1.6.16",
     "@fidm/x509": "^1.2.1",
     "@nedb/core": "^1.2.2",
     "@nedb/multi": "^1.2.2",
-    "@ocap/mcrypto": "^1.13.79",
-    "@ocap/util": "^1.13.79",
-    "@ocap/wallet": "^1.13.79",
+    "@ocap/mcrypto": "^1.14.3",
+    "@ocap/util": "^1.14.3",
+    "@ocap/wallet": "^1.14.3",
     "@slack/webhook": "^5.0.3",
     "axios": "^0.21.4",
     "axon": "^2.0.3",
@@ -75,5 +75,5 @@
     "express": "^4.17.1",
     "jest": "^27.4.5"
   },
-  "gitHead": "dd79037978dc12f72330227a553a80a504f03fa7"
+  "gitHead": "69b08db16aeb75ce23b0e6bb5b9fa396adba2d4b"
 }