@nocobase/plugin-flow-engine 2.1.36 → 2.1.38

package/dist/externalVersion.js

@@ -8,16 +8,16 @@
  */
 
 module.exports = {
-  "@nocobase/client": "2.1.36",
+  "@nocobase/client": "2.1.38",
   "lodash": "4.18.1",
-  "@nocobase/database": "2.1.36",
-  "@nocobase/data-source-manager": "2.1.36",
-  "@nocobase/resourcer": "2.1.36",
-  "@nocobase/utils": "2.1.36",
-  "@nocobase/cache": "2.1.36",
-  "@nocobase/server": "2.1.36",
-  "@nocobase/actions": "2.1.36",
+  "@nocobase/database": "2.1.38",
+  "@nocobase/data-source-manager": "2.1.38",
+  "@nocobase/resourcer": "2.1.38",
+  "@nocobase/server": "2.1.38",
+  "@nocobase/utils": "2.1.38",
+  "@nocobase/cache": "2.1.38",
+  "@nocobase/actions": "2.1.38",
   "sequelize": "6.35.2",
   "@formily/json-schema": "2.3.7",
-  "@nocobase/ai": "2.1.36"
+  "@nocobase/ai": "2.1.38"
 };

package/dist/node_modules/@ant-design/icons-svg/package.json

@@ -1 +1 @@
-{"name":"@ant-design/icons-svg","version":"4.3.1","sideEffects":false,"description":"Abstract nodes for ant design icons.","contributors":["HeskeyBaozi <hezhiyu233@foxmail.com>"],"homepage":"https://github.com/ant-design/ant-design-icons/","license":"MIT","main":"lib/index.js","module":"es/index.js","files":["lib","es","inline-svg","inline-namespaced-svg"],"repository":{"type":"git","url":"git+https://github.com/ant-design/ant-design-icons.git"},"scripts":{"g":"npm run generate","generate":"cross-env NODE_ENV=production gulp --require ts-node/register/transpile-only","type-check":"tsc --noEmit","build:es":"tsc --project tsconfig.build.json --module esnext --outDir es","build:lib":"tsc --project tsconfig.build.json --module commonjs --outDir lib","build":"cross-env NODE_ENV=production && npm run build:es && npm run build:lib","test":"cross-env NODE_ENV=test && npm run test:unit","test:unit":"jest","prepublishOnly":"npm run test && npm run g && npm run build && npm run type-check && npm run digest","digest":"node scripts/digest.js"},"bugs":{"url":"https://github.com/ant-design/ant-design-icons/issues"},"devDependencies":{"@babel/core":"^7.8.6","@babel/preset-env":"^7.8.6","@babel/preset-typescript":"^7.8.3","@rgrove/parse-xml":"^2.0.2","@types/gulp":"^4.0.6","@types/gulp-concat":"^0.0.32","@types/gulp-rename":"^0.0.33","@types/jest":"^25.1.3","@types/lodash.camelcase":"^4.3.6","@types/lodash.template":"^4.4.6","@types/lodash.upperfirst":"^4.3.6","@types/node":"^13.9.3","@types/ramda":"^0.26.43","@types/rgrove__parse-xml":"^1.1.0","@types/svgo":"^1.3.1","@types/through2":"^2.0.34","@typescript-eslint/eslint-plugin":"^2.21.0","@typescript-eslint/parser":"^2.21.0","babel-jest":"^25.1.0","cross-env":"^7.0.0","del":"^5.1.0","eslint":"^7.16.0","globby":"^11.0.0","gulp":"^4.0.2","gulp-clone":"^2.0.1","gulp-concat":"^2.6.1","gulp-header":"^2.0.9","gulp-rename":"^2.0.0","jest":"^25.1.0","lodash.camelcase":"^4.3.0","lodash.template":"^4.5.0","lodash.upperfirst":"^4.3.1","ramda":"^0.27.0","svgo":"^1.3.2","through2":"^3.0.1","ts-node":"^8.6.2","typescript":"^4.0.0","vinyl":"^2.2.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_lastModified":"2026-08-05T10:24:14.513Z"}
+{"name":"@ant-design/icons-svg","version":"4.3.1","sideEffects":false,"description":"Abstract nodes for ant design icons.","contributors":["HeskeyBaozi <hezhiyu233@foxmail.com>"],"homepage":"https://github.com/ant-design/ant-design-icons/","license":"MIT","main":"lib/index.js","module":"es/index.js","files":["lib","es","inline-svg","inline-namespaced-svg"],"repository":{"type":"git","url":"git+https://github.com/ant-design/ant-design-icons.git"},"scripts":{"g":"npm run generate","generate":"cross-env NODE_ENV=production gulp --require ts-node/register/transpile-only","type-check":"tsc --noEmit","build:es":"tsc --project tsconfig.build.json --module esnext --outDir es","build:lib":"tsc --project tsconfig.build.json --module commonjs --outDir lib","build":"cross-env NODE_ENV=production && npm run build:es && npm run build:lib","test":"cross-env NODE_ENV=test && npm run test:unit","test:unit":"jest","prepublishOnly":"npm run test && npm run g && npm run build && npm run type-check && npm run digest","digest":"node scripts/digest.js"},"bugs":{"url":"https://github.com/ant-design/ant-design-icons/issues"},"devDependencies":{"@babel/core":"^7.8.6","@babel/preset-env":"^7.8.6","@babel/preset-typescript":"^7.8.3","@rgrove/parse-xml":"^2.0.2","@types/gulp":"^4.0.6","@types/gulp-concat":"^0.0.32","@types/gulp-rename":"^0.0.33","@types/jest":"^25.1.3","@types/lodash.camelcase":"^4.3.6","@types/lodash.template":"^4.4.6","@types/lodash.upperfirst":"^4.3.6","@types/node":"^13.9.3","@types/ramda":"^0.26.43","@types/rgrove__parse-xml":"^1.1.0","@types/svgo":"^1.3.1","@types/through2":"^2.0.34","@typescript-eslint/eslint-plugin":"^2.21.0","@typescript-eslint/parser":"^2.21.0","babel-jest":"^25.1.0","cross-env":"^7.0.0","del":"^5.1.0","eslint":"^7.16.0","globby":"^11.0.0","gulp":"^4.0.2","gulp-clone":"^2.0.1","gulp-concat":"^2.6.1","gulp-header":"^2.0.9","gulp-rename":"^2.0.0","jest":"^25.1.0","lodash.camelcase":"^4.3.0","lodash.template":"^4.5.0","lodash.upperfirst":"^4.3.1","ramda":"^0.27.0","svgo":"^1.3.2","through2":"^3.0.1","ts-node":"^8.6.2","typescript":"^4.0.0","vinyl":"^2.2.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_lastModified":"2026-08-10T05:10:28.974Z"}

package/dist/node_modules/acorn/package.json

@@ -1 +1 @@
-{"name":"acorn","description":"ECMAScript parser","homepage":"https://github.com/acornjs/acorn","main":"dist/acorn.js","types":"dist/acorn.d.ts","module":"dist/acorn.mjs","exports":{".":[{"import":"./dist/acorn.mjs","require":"./dist/acorn.js","default":"./dist/acorn.js"},"./dist/acorn.js"],"./package.json":"./package.json"},"version":"8.11.2","engines":{"node":">=0.4.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"license":"MIT","scripts":{"prepare":"cd ..; npm run build:main"},"bin":{"acorn":"./bin/acorn"},"_lastModified":"2026-08-05T10:24:15.404Z"}
+{"name":"acorn","description":"ECMAScript parser","homepage":"https://github.com/acornjs/acorn","main":"dist/acorn.js","types":"dist/acorn.d.ts","module":"dist/acorn.mjs","exports":{".":[{"import":"./dist/acorn.mjs","require":"./dist/acorn.js","default":"./dist/acorn.js"},"./dist/acorn.js"],"./package.json":"./package.json"},"version":"8.11.2","engines":{"node":">=0.4.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"license":"MIT","scripts":{"prepare":"cd ..; npm run build:main"},"bin":{"acorn":"./bin/acorn"},"_lastModified":"2026-08-10T05:10:30.106Z"}

package/dist/node_modules/acorn-jsx/package.json

@@ -1 +1 @@
-{"name":"acorn-jsx","description":"Modern, fast React.js JSX parser","homepage":"https://github.com/acornjs/acorn-jsx","version":"5.3.2","maintainers":[{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"http://rreverser.com/"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn-jsx"},"license":"MIT","scripts":{"test":"node test/run.js"},"peerDependencies":{"acorn":"^6.0.0 || ^7.0.0 || ^8.0.0"},"devDependencies":{"acorn":"^8.0.1"},"_lastModified":"2026-08-05T10:24:15.831Z"}
+{"name":"acorn-jsx","description":"Modern, fast React.js JSX parser","homepage":"https://github.com/acornjs/acorn-jsx","version":"5.3.2","maintainers":[{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"http://rreverser.com/"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn-jsx"},"license":"MIT","scripts":{"test":"node test/run.js"},"peerDependencies":{"acorn":"^6.0.0 || ^7.0.0 || ^8.0.0"},"devDependencies":{"acorn":"^8.0.1"},"_lastModified":"2026-08-10T05:10:30.541Z"}

package/dist/node_modules/acorn-walk/package.json

@@ -1 +1 @@
-{"name":"acorn-walk","description":"ECMAScript (ESTree) AST walker","homepage":"https://github.com/acornjs/acorn","main":"dist/walk.js","types":"dist/walk.d.ts","module":"dist/walk.mjs","exports":{".":[{"import":"./dist/walk.mjs","require":"./dist/walk.js","default":"./dist/walk.js"},"./dist/walk.js"],"./package.json":"./package.json"},"version":"8.3.4","engines":{"node":">=0.4.0"},"dependencies":{"acorn":"^8.11.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"scripts":{"prepare":"cd ..; npm run build:walk"},"license":"MIT","_lastModified":"2026-08-05T10:24:15.942Z"}
+{"name":"acorn-walk","description":"ECMAScript (ESTree) AST walker","homepage":"https://github.com/acornjs/acorn","main":"dist/walk.js","types":"dist/walk.d.ts","module":"dist/walk.mjs","exports":{".":[{"import":"./dist/walk.mjs","require":"./dist/walk.js","default":"./dist/walk.js"},"./dist/walk.js"],"./package.json":"./package.json"},"version":"8.3.4","engines":{"node":">=0.4.0"},"dependencies":{"acorn":"^8.11.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"scripts":{"prepare":"cd ..; npm run build:walk"},"license":"MIT","_lastModified":"2026-08-10T05:10:30.653Z"}

package/dist/node_modules/ses/package.json

@@ -1 +1 @@
-{"name":"ses","version":"1.14.0","description":"Hardened JavaScript for Fearless Cooperation","keywords":["lockdown","harden","Compartment","assert","security","confinement","isolation","object capabilities","ocaps","secure execution","third-party code","prototype pollution","supply-chain attack","plugin"],"author":"Agoric","license":"Apache-2.0","homepage":"https://github.com/Agoric/SES-shim/tree/master/packages/ses#readme","repository":{"type":"git","url":"git+https://github.com/endojs/endo.git","directory":"packages/ses"},"bugs":{"url":"https://github.com/endojs/endo/issues"},"type":"module","main":"./dist/ses.cjs","module":"./index.js","unpkg":"./dist/ses.umd.js","types":"./types.d.ts","exports":{".":{"import":{"types":"./types.d.ts","xs":"./src-xs/index.js","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./lockdown":{"import":{"types":"./types.d.ts","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./hermes":{"require":{"types":"./dist/types.d.cts","default":"./dist/ses-hermes.cjs"}},"./tools.js":"./tools.js","./assert-shim.js":"./assert-shim.js","./lockdown-shim.js":{"xs":"./src-xs/lockdown-shim.js","default":"./lockdown-shim.js"},"./compartment-shim.js":{"xs":"./src-xs/compartment-shim.js","default":"./compartment-shim.js"},"./console-shim.js":"./console-shim.js","./package.json":"./package.json"},"scripts":{"build:vanilla":"node scripts/bundle.js","build:hermes":"node scripts/bundle.js hermes","build":"yarn build:vanilla && yarn build:hermes","clean":"rm -rf dist","cover":"c8 ava","demo":"python3 -m http.server","lint":"yarn lint:types && yarn lint:eslint","lint-fix":"eslint --fix .","lint:eslint":"eslint .","lint:types":"tsc","prepare":"npm run clean && npm run build","qt":"ava","test":"tsd && ava","test:hermes":"./scripts/hermes-test.sh","test:xs":"xst dist/ses.umd.js test/_lockdown-safe.js && node scripts/generate-test-xs.js && xst tmp/test-xs.js && rm -rf tmp","postpack":"git clean -fX \"*.d.ts*\" \"*.d.cts*\" \"*.d.mts*\" \"*.tsbuildinfo\""},"dependencies":{"@endo/cache-map":"^1.1.0","@endo/env-options":"^1.1.11","@endo/immutable-arraybuffer":"^1.1.2"},"devDependencies":{"@babel/generator":"^7.26.3","@babel/parser":"~7.26.2","@babel/traverse":"~7.25.9","@babel/types":"~7.26.0","@endo/compartment-mapper":"^1.6.3","@endo/module-source":"^1.3.3","@endo/test262-runner":"^0.1.48","@types/babel__traverse":"^7.20.5","ava":"^6.1.3","babel-eslint":"^10.1.0","c8":"^7.14.0","core-js":"^3.31.0","eslint":"^8.57.1","eslint-config-airbnb-base":"^15.0.0","eslint-config-prettier":"^9.1.0","eslint-plugin-eslint-comments":"^3.2.0","eslint-plugin-import":"^2.31.0","hermes-engine-cli":"^0.12.0","prettier":"^3.5.3","terser":"^5.16.6","tsd":"^0.31.2","typescript":"~5.8.3"},"files":["./*.d.ts","./*.js","./*.map","LICENSE*","SECURITY*","dist","lib","src","tools"],"publishConfig":{"access":"public"},"eslintConfig":{"extends":["plugin:@endo/ses"]},"ava":{"files":["test/**/*.test.*"],"timeout":"2m"},"typeCoverage":{"atLeast":81.17},"gitHead":"9815aea9541f241389d2135c6097a7442bdffa17","_lastModified":"2026-08-05T10:24:15.013Z"}
+{"name":"ses","version":"1.14.0","description":"Hardened JavaScript for Fearless Cooperation","keywords":["lockdown","harden","Compartment","assert","security","confinement","isolation","object capabilities","ocaps","secure execution","third-party code","prototype pollution","supply-chain attack","plugin"],"author":"Agoric","license":"Apache-2.0","homepage":"https://github.com/Agoric/SES-shim/tree/master/packages/ses#readme","repository":{"type":"git","url":"git+https://github.com/endojs/endo.git","directory":"packages/ses"},"bugs":{"url":"https://github.com/endojs/endo/issues"},"type":"module","main":"./dist/ses.cjs","module":"./index.js","unpkg":"./dist/ses.umd.js","types":"./types.d.ts","exports":{".":{"import":{"types":"./types.d.ts","xs":"./src-xs/index.js","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./lockdown":{"import":{"types":"./types.d.ts","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./hermes":{"require":{"types":"./dist/types.d.cts","default":"./dist/ses-hermes.cjs"}},"./tools.js":"./tools.js","./assert-shim.js":"./assert-shim.js","./lockdown-shim.js":{"xs":"./src-xs/lockdown-shim.js","default":"./lockdown-shim.js"},"./compartment-shim.js":{"xs":"./src-xs/compartment-shim.js","default":"./compartment-shim.js"},"./console-shim.js":"./console-shim.js","./package.json":"./package.json"},"scripts":{"build:vanilla":"node scripts/bundle.js","build:hermes":"node scripts/bundle.js hermes","build":"yarn build:vanilla && yarn build:hermes","clean":"rm -rf dist","cover":"c8 ava","demo":"python3 -m http.server","lint":"yarn lint:types && yarn lint:eslint","lint-fix":"eslint --fix .","lint:eslint":"eslint .","lint:types":"tsc","prepare":"npm run clean && npm run build","qt":"ava","test":"tsd && ava","test:hermes":"./scripts/hermes-test.sh","test:xs":"xst dist/ses.umd.js test/_lockdown-safe.js && node scripts/generate-test-xs.js && xst tmp/test-xs.js && rm -rf tmp","postpack":"git clean -fX \"*.d.ts*\" \"*.d.cts*\" \"*.d.mts*\" \"*.tsbuildinfo\""},"dependencies":{"@endo/cache-map":"^1.1.0","@endo/env-options":"^1.1.11","@endo/immutable-arraybuffer":"^1.1.2"},"devDependencies":{"@babel/generator":"^7.26.3","@babel/parser":"~7.26.2","@babel/traverse":"~7.25.9","@babel/types":"~7.26.0","@endo/compartment-mapper":"^1.6.3","@endo/module-source":"^1.3.3","@endo/test262-runner":"^0.1.48","@types/babel__traverse":"^7.20.5","ava":"^6.1.3","babel-eslint":"^10.1.0","c8":"^7.14.0","core-js":"^3.31.0","eslint":"^8.57.1","eslint-config-airbnb-base":"^15.0.0","eslint-config-prettier":"^9.1.0","eslint-plugin-eslint-comments":"^3.2.0","eslint-plugin-import":"^2.31.0","hermes-engine-cli":"^0.12.0","prettier":"^3.5.3","terser":"^5.16.6","tsd":"^0.31.2","typescript":"~5.8.3"},"files":["./*.d.ts","./*.js","./*.map","LICENSE*","SECURITY*","dist","lib","src","tools"],"publishConfig":{"access":"public"},"eslintConfig":{"extends":["plugin:@endo/ses"]},"ava":{"files":["test/**/*.test.*"],"timeout":"2m"},"typeCoverage":{"atLeast":81.17},"gitHead":"9815aea9541f241389d2135c6097a7442bdffa17","_lastModified":"2026-08-10T05:10:29.646Z"}

package/dist/node_modules/zod/package.json

@@ -1 +1 @@
-{"name":"zod","version":"4.3.5","type":"module","license":"MIT","author":"Colin McDonnell <zod@colinhacks.com>","description":"TypeScript-first schema declaration and validation library with static type inference","homepage":"https://zod.dev","llms":"https://zod.dev/llms.txt","llmsFull":"https://zod.dev/llms-full.txt","mcpServer":"https://mcp.inkeep.com/zod/mcp","funding":"https://github.com/sponsors/colinhacks","sideEffects":false,"files":["src","**/*.js","**/*.mjs","**/*.cjs","**/*.d.ts","**/*.d.mts","**/*.d.cts","**/package.json"],"keywords":["typescript","schema","validation","type","inference"],"main":"./index.cjs","types":"./index.d.cts","module":"./index.js","zshy":{"exports":{"./package.json":"./package.json",".":"./src/index.ts","./mini":"./src/mini/index.ts","./locales":"./src/locales/index.ts","./v3":"./src/v3/index.ts","./v4":"./src/v4/index.ts","./v4-mini":"./src/v4-mini/index.ts","./v4/mini":"./src/v4/mini/index.ts","./v4/core":"./src/v4/core/index.ts","./v4/locales":"./src/v4/locales/index.ts","./v4/locales/*":"./src/v4/locales/*"},"conditions":{"@zod/source":"src"}},"exports":{"./package.json":"./package.json",".":{"@zod/source":"./src/index.ts","types":"./index.d.cts","import":"./index.js","require":"./index.cjs"},"./mini":{"@zod/source":"./src/mini/index.ts","types":"./mini/index.d.cts","import":"./mini/index.js","require":"./mini/index.cjs"},"./locales":{"@zod/source":"./src/locales/index.ts","types":"./locales/index.d.cts","import":"./locales/index.js","require":"./locales/index.cjs"},"./v3":{"@zod/source":"./src/v3/index.ts","types":"./v3/index.d.cts","import":"./v3/index.js","require":"./v3/index.cjs"},"./v4":{"@zod/source":"./src/v4/index.ts","types":"./v4/index.d.cts","import":"./v4/index.js","require":"./v4/index.cjs"},"./v4-mini":{"@zod/source":"./src/v4-mini/index.ts","types":"./v4-mini/index.d.cts","import":"./v4-mini/index.js","require":"./v4-mini/index.cjs"},"./v4/mini":{"@zod/source":"./src/v4/mini/index.ts","types":"./v4/mini/index.d.cts","import":"./v4/mini/index.js","require":"./v4/mini/index.cjs"},"./v4/core":{"@zod/source":"./src/v4/core/index.ts","types":"./v4/core/index.d.cts","import":"./v4/core/index.js","require":"./v4/core/index.cjs"},"./v4/locales":{"@zod/source":"./src/v4/locales/index.ts","types":"./v4/locales/index.d.cts","import":"./v4/locales/index.js","require":"./v4/locales/index.cjs"},"./v4/locales/*":{"@zod/source":"./src/v4/locales/*","types":"./v4/locales/*","import":"./v4/locales/*","require":"./v4/locales/*"}},"repository":{"type":"git","url":"git+https://github.com/colinhacks/zod.git"},"bugs":{"url":"https://github.com/colinhacks/zod/issues"},"support":{"backing":{"npm-funding":true}},"scripts":{"clean":"git clean -xdf . -e node_modules","build":"zshy --project tsconfig.build.json","postbuild":"tsx ../../scripts/write-stub-package-jsons.ts && pnpm biome check --write .","test:watch":"pnpm vitest","test":"pnpm vitest run","prepublishOnly":"tsx ../../scripts/check-versions.ts"},"_lastModified":"2026-08-05T10:24:17.033Z"}
+{"name":"zod","version":"4.3.5","type":"module","license":"MIT","author":"Colin McDonnell <zod@colinhacks.com>","description":"TypeScript-first schema declaration and validation library with static type inference","homepage":"https://zod.dev","llms":"https://zod.dev/llms.txt","llmsFull":"https://zod.dev/llms-full.txt","mcpServer":"https://mcp.inkeep.com/zod/mcp","funding":"https://github.com/sponsors/colinhacks","sideEffects":false,"files":["src","**/*.js","**/*.mjs","**/*.cjs","**/*.d.ts","**/*.d.mts","**/*.d.cts","**/package.json"],"keywords":["typescript","schema","validation","type","inference"],"main":"./index.cjs","types":"./index.d.cts","module":"./index.js","zshy":{"exports":{"./package.json":"./package.json",".":"./src/index.ts","./mini":"./src/mini/index.ts","./locales":"./src/locales/index.ts","./v3":"./src/v3/index.ts","./v4":"./src/v4/index.ts","./v4-mini":"./src/v4-mini/index.ts","./v4/mini":"./src/v4/mini/index.ts","./v4/core":"./src/v4/core/index.ts","./v4/locales":"./src/v4/locales/index.ts","./v4/locales/*":"./src/v4/locales/*"},"conditions":{"@zod/source":"src"}},"exports":{"./package.json":"./package.json",".":{"@zod/source":"./src/index.ts","types":"./index.d.cts","import":"./index.js","require":"./index.cjs"},"./mini":{"@zod/source":"./src/mini/index.ts","types":"./mini/index.d.cts","import":"./mini/index.js","require":"./mini/index.cjs"},"./locales":{"@zod/source":"./src/locales/index.ts","types":"./locales/index.d.cts","import":"./locales/index.js","require":"./locales/index.cjs"},"./v3":{"@zod/source":"./src/v3/index.ts","types":"./v3/index.d.cts","import":"./v3/index.js","require":"./v3/index.cjs"},"./v4":{"@zod/source":"./src/v4/index.ts","types":"./v4/index.d.cts","import":"./v4/index.js","require":"./v4/index.cjs"},"./v4-mini":{"@zod/source":"./src/v4-mini/index.ts","types":"./v4-mini/index.d.cts","import":"./v4-mini/index.js","require":"./v4-mini/index.cjs"},"./v4/mini":{"@zod/source":"./src/v4/mini/index.ts","types":"./v4/mini/index.d.cts","import":"./v4/mini/index.js","require":"./v4/mini/index.cjs"},"./v4/core":{"@zod/source":"./src/v4/core/index.ts","types":"./v4/core/index.d.cts","import":"./v4/core/index.js","require":"./v4/core/index.cjs"},"./v4/locales":{"@zod/source":"./src/v4/locales/index.ts","types":"./v4/locales/index.d.cts","import":"./v4/locales/index.js","require":"./v4/locales/index.cjs"},"./v4/locales/*":{"@zod/source":"./src/v4/locales/*","types":"./v4/locales/*","import":"./v4/locales/*","require":"./v4/locales/*"}},"repository":{"type":"git","url":"git+https://github.com/colinhacks/zod.git"},"bugs":{"url":"https://github.com/colinhacks/zod/issues"},"support":{"backing":{"npm-funding":true}},"scripts":{"clean":"git clean -xdf . -e node_modules","build":"zshy --project tsconfig.build.json","postbuild":"tsx ../../scripts/write-stub-package-jsons.ts && pnpm biome check --write .","test:watch":"pnpm vitest","test":"pnpm vitest run","prepublishOnly":"tsx ../../scripts/check-versions.ts"},"_lastModified":"2026-08-10T05:10:31.847Z"}

package/dist/server/index.d.ts

@@ -9,3 +9,5 @@
 export { default } from './plugin';
 export { FlowModelRepository } from './repository';
 export { resolveVariablesBatch, resolveVariablesTemplate } from './variables/resolve';
+export { createNestedRecordSlotResolver, getRecordSlotResolverRegistry, RecordSlotResolverRegistry, } from './variables/record-slot-resolvers';
+export type { RecordSlotResolved, RecordSlotResolverInput, RecordSlotResolverRegistration, RecordSlotResolverResult, } from './variables/record-slot-resolvers';

package/dist/server/index.js

@@ -37,7 +37,10 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var server_exports = {};
 __export(server_exports, {
   FlowModelRepository: () => import_repository.FlowModelRepository,
+  RecordSlotResolverRegistry: () => import_record_slot_resolvers.RecordSlotResolverRegistry,
+  createNestedRecordSlotResolver: () => import_record_slot_resolvers.createNestedRecordSlotResolver,
   default: () => import_plugin.default,
+  getRecordSlotResolverRegistry: () => import_record_slot_resolvers.getRecordSlotResolverRegistry,
   resolveVariablesBatch: () => import_resolve.resolveVariablesBatch,
   resolveVariablesTemplate: () => import_resolve.resolveVariablesTemplate
 });
@@ -45,9 +48,13 @@ module.exports = __toCommonJS(server_exports);
 var import_plugin = __toESM(require("./plugin"));
 var import_repository = require("./repository");
 var import_resolve = require("./variables/resolve");
+var import_record_slot_resolvers = require("./variables/record-slot-resolvers");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   FlowModelRepository,
+  RecordSlotResolverRegistry,
+  createNestedRecordSlotResolver,
+  getRecordSlotResolverRegistry,
   resolveVariablesBatch,
   resolveVariablesTemplate
 });

package/dist/server/plugin.d.ts

@@ -6,16 +6,29 @@
  * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
+import type { ResourcerContext } from '@nocobase/resourcer';
 import PluginUISchemaStorageServer from './server';
+import { JSONValue } from './template/resolver';
 export declare class PluginFlowEngineServer extends PluginUISchemaStorageServer {
+    private recordSlotResolverDisposers;
     afterAdd(): Promise<void>;
     beforeLoad(): Promise<void>;
     getDatabaseByDataSourceKey(dataSourceKey?: string): import("@nocobase/database").default;
     runSQLByDataSourceKey(dataSourceKey: string | undefined, sql: string, options?: Record<string, unknown>): Promise<any>;
+    resolveFlowModelVariablesTemplate(ctx: ResourcerContext, options: {
+        contractRd?: string | number;
+        contextParams?: Record<string, unknown>;
+        rd?: string | number;
+        template: JSONValue;
+    }): Promise<any>;
+    isLegacyVariableTemplateSafe(template: JSONValue): boolean;
     load(): Promise<void>;
     install(): Promise<void>;
     afterEnable(): Promise<void>;
     afterDisable(): Promise<void>;
     remove(): Promise<void>;
+    private disposeRecordSlotResolvers;
+    private registerRecordSlotResolvers;
+    private ensureRecordSlotResolvers;
 }
 export default PluginFlowEngineServer;

package/dist/server/plugin.js

@@ -43,8 +43,13 @@ module.exports = __toCommonJS(plugin_exports);
 var import_utils = require("@nocobase/utils");
 var import_flow_surfaces = require("./flow-surfaces");
 var import_server = __toESM(require("./server"));
+var import_allow_list = require("./variables/allow-list");
+var import_form_item_record_slot_resolvers = require("./variables/form-item-record-slot-resolvers");
+var import_record_slot_policy = require("./variables/record-slot-policy");
+var import_record_slot_resolvers = require("./variables/record-slot-resolvers");
 var import_resolve = require("./variables/resolve");
 class PluginFlowEngineServer extends import_server.default {
+  recordSlotResolverDisposers = [];
   async afterAdd() {
   }
   async beforeLoad() {
@@ -71,8 +76,16 @@ class PluginFlowEngineServer extends import_server.default {
     }
     return await cm.db.runSQL(sql, options);
   }
+  async resolveFlowModelVariablesTemplate(ctx, options) {
+    this.ensureRecordSlotResolvers(ctx.app);
+    return await (0, import_resolve.resolveFlowModelVariablesTemplate)(ctx, options);
+  }
+  isLegacyVariableTemplateSafe(template) {
+    return (0, import_resolve.isLegacyVariableTemplateSafe)(template);
+  }
   async load() {
     await super.load();
+    this.registerRecordSlotResolvers();
     (0, import_flow_surfaces.registerFlowSurfacesResource)(this);
     this.app.auditManager.registerAction("flowSql:save");
     this.app.auditManager.registerAction("flowModels:save");
@@ -86,12 +99,56 @@ class PluginFlowEngineServer extends import_server.default {
       actions: {
         // 解析 JSON 模板中的 ctx 变量
         resolve: async (ctx, next) => {
-          var _a, _b;
+          var _a, _b, _c;
+          this.ensureRecordSlotResolvers(ctx.app);
           const raw = ((_b = (_a = ctx.action) == null ? void 0 : _a.params) == null ? void 0 : _b.values) ?? {};
           const values = typeof (raw == null ? void 0 : raw.values) !== "undefined" ? raw.values : raw;
           if (Array.isArray(values == null ? void 0 : values.batch)) {
             const batchItems = values.batch;
-            const results = await (0, import_resolve.resolveVariablesBatch)(ctx, batchItems);
+            const authorizedItems = [];
+            const passthroughResults = [];
+            for (const [index, item] of batchItems.entries()) {
+              const template2 = (item == null ? void 0 : item.template) ?? {};
+              const authorization2 = await (0, import_allow_list.authorizeVariablesResolve)(ctx, {
+                contractRd: item == null ? void 0 : item.contractRd,
+                contextParams: (item == null ? void 0 : item.contextParams) || {},
+                rd: item == null ? void 0 : item.rd,
+                template: template2
+              });
+              if (authorization2.allowed) {
+                const authorizedItem = {
+                  analysis: authorization2.analysis,
+                  bindingPlan: authorization2.bindingPlan,
+                  id: item == null ? void 0 : item.id,
+                  index,
+                  policy: authorization2.policy,
+                  template: template2
+                };
+                authorizedItems.push(authorizedItem);
+              } else {
+                passthroughResults[index] = { id: item == null ? void 0 : item.id, data: template2 };
+              }
+            }
+            const resolvedItems = await (0, import_resolve.resolveAnalyzedVariablesBatch)(
+              ctx,
+              authorizedItems.map((item) => ({
+                analysis: item.analysis,
+                bindingPlan: item.bindingPlan,
+                id: item.index,
+                template: item.template,
+                policy: item.policy
+              }))
+            );
+            for (const item of resolvedItems) {
+              const index = Number(item.id);
+              passthroughResults[index] = {
+                id: (_c = batchItems[index]) == null ? void 0 : _c.id,
+                data: item.data
+              };
+            }
+            const results = passthroughResults.filter(
+              (item) => !!item
+            );
             ctx.body = { results };
             await next();
             return;
@@ -104,7 +161,18 @@ class PluginFlowEngineServer extends import_server.default {
           }
           const template = values.template;
           const contextParams = (values == null ? void 0 : values.contextParams) || {};
-          ctx.body = await (0, import_resolve.resolveVariablesTemplate)(ctx, template, contextParams);
+          const authorization = await (0, import_allow_list.authorizeVariablesResolve)(ctx, {
+            contractRd: values == null ? void 0 : values.contractRd,
+            contextParams,
+            rd: values == null ? void 0 : values.rd,
+            template
+          });
+          ctx.body = authorization.allowed ? await (0, import_resolve.resolveAnalyzedVariablesTemplate)(
+            ctx,
+            authorization.analysis,
+            authorization.policy,
+            authorization.bindingPlan
+          ) : template;
           await next();
         }
       }
@@ -162,10 +230,29 @@ class PluginFlowEngineServer extends import_server.default {
   async install() {
   }
   async afterEnable() {
+    this.registerRecordSlotResolvers();
   }
   async afterDisable() {
+    this.disposeRecordSlotResolvers();
   }
   async remove() {
+    this.disposeRecordSlotResolvers();
+  }
+  disposeRecordSlotResolvers() {
+    this.recordSlotResolverDisposers.forEach((dispose) => dispose());
+    this.recordSlotResolverDisposers = [];
+  }
+  registerRecordSlotResolvers() {
+    this.disposeRecordSlotResolvers();
+    this.ensureRecordSlotResolvers(this.app);
+  }
+  ensureRecordSlotResolvers(app) {
+    const registry = (0, import_record_slot_resolvers.getRecordSlotResolverRegistry)(app);
+    for (const resolver of [...(0, import_record_slot_policy.createBuiltInRecordSlotResolvers)(), ...(0, import_form_item_record_slot_resolvers.createFormItemRecordSlotResolvers)()]) {
+      if (!registry.has(resolver.owner, resolver.id)) {
+        this.recordSlotResolverDisposers.push(registry.register(resolver));
+      }
+    }
   }
 }
 var plugin_default = PluginFlowEngineServer;

package/dist/server/repository.d.ts

@@ -18,6 +18,13 @@ export interface GetPropertiesOptions {
     readFromCache?: boolean;
     transaction?: Transaction;
 }
+export interface FlowModelNodeSnapshot {
+    uid: string;
+    options: Record<string, unknown>;
+    parentId: string | null;
+    subKey: string | null;
+    async: boolean;
+}
 export type FlowModelAttachPosition = 'first' | 'last' | TargetPosition;
 export interface FlowModelAttachOptions {
     parentId: string;
@@ -132,6 +139,11 @@ export declare class FlowModelRepository extends Repository {
     updateSingleNode(node: SchemaNode, options?: Transactionable): Promise<boolean>;
     upsertModel(model: any, options?: Transactionable): Promise<string>;
     findModelById(uid: string, options?: GetJsonSchemaOptions): Promise<any>;
+    findModelNodeSnapshotById(uid: string, options?: Transactionable): Promise<FlowModelNodeSnapshot | null>;
+    private findModelUidByParentId;
+    findModelNodeSnapshotByParentId(parentUid: string, options?: Transactionable & {
+        subKey?: string;
+    }): Promise<FlowModelNodeSnapshot | null>;
     findModelByParentId(parentUid: string, options?: GetJsonSchemaOptions & {
         subKey?: string;
     }): Promise<any>;

package/dist/server/repository.js

@@ -1411,7 +1411,36 @@ WHERE TreeTable.depth = 1 AND  TreeTable.ancestor = :ancestor and TreeTable.sort
     const nodes = await this.findNodesById(uid2, options);
     return _FlowModelRepository.nodesToModel(nodes, uid2);
   }
-  async findModelByParentId(parentUid, options) {
+  async findModelNodeSnapshotById(uid2, options) {
+    const transaction2 = options == null ? void 0 : options.transaction;
+    const model = await this.model.findByPk(uid2, { transaction: transaction2 });
+    if (!model) {
+      return null;
+    }
+    const paths = await this.database.getRepository("flowModelTreePath").find({
+      filter: {
+        descendant: uid2,
+        depth: { $in: [0, 1] }
+      },
+      transaction: transaction2
+    });
+    const nodePath = paths.find((path) => path.get("depth") === 0);
+    if (!nodePath) {
+      return null;
+    }
+    const parentPath = paths.find((path) => path.get("depth") === 1);
+    const nodeOptions = import_lodash.default.cloneDeep(
+      import_lodash.default.omit(_FlowModelRepository.optionsToJson(model.get("options") || {}), "subModels")
+    );
+    return {
+      uid: uid2,
+      options: nodeOptions,
+      parentId: parentPath ? parentPath.get("ancestor") : null,
+      subKey: nodePath.get("type") || null,
+      async: !!nodePath.get("async")
+    };
+  }
+  async findModelUidByParentId(parentUid, options) {
     const r = this.database.getRepository("flowModelTreePath");
     const treePaths = await r.model.findAll({
       where: {
@@ -1433,10 +1462,18 @@ WHERE TreeTable.depth = 1 AND  TreeTable.ancestor = :ancestor and TreeTable.sort
       transaction: options == null ? void 0 : options.transaction
     });
     if (treePath == null ? void 0 : treePath["descendant"]) {
-      return this.findModelById(treePath["descendant"], options);
+      return treePath["descendant"];
     }
     return null;
   }
+  async findModelNodeSnapshotByParentId(parentUid, options) {
+    const uid2 = await this.findModelUidByParentId(parentUid, options);
+    return uid2 ? this.findModelNodeSnapshotById(uid2, options) : null;
+  }
+  async findModelByParentId(parentUid, options) {
+    const uid2 = await this.findModelUidByParentId(parentUid, options);
+    return uid2 ? this.findModelById(uid2, options) : null;
+  }
   async attach(uid2, attachOptions, options) {
     const { transaction: transaction2 } = options || {};
     const modelUid = String(uid2 || "").trim();

package/dist/server/template/context-keys.d.ts

@@ -0,0 +1,14 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+export declare const GLOBAL_CONTEXT_KEYS: readonly ["now", "timestamp", "env"];
+export declare const HTTP_REQUEST_CONTEXT_KEYS: readonly ["user", "roleName", "locale", "ip", "headers", "query", "params"];
+export declare const SERVER_CONTEXT_PROTOTYPE_KEYS: readonly ["__proto__", "prototype", "constructor", "then", "__defineGetter__", "__defineSetter__", "__lookupGetter__", "__lookupSetter__", "hasOwnProperty", "isPrototypeOf", "propertyIsEnumerable", "toLocaleString", "toString", "valueOf"];
+export declare const SERVER_CONTEXT_INTERNAL_KEYS: readonly ["_props", "_cache", "_delegates", "_proxy", "_getOwn", "defineProperty", "delegate", "clearDelegates", "getSandboxKeys", "getSandboxValue", "createProxy"];
+export declare const PROTECTED_SERVER_CONTEXT_KEYS: readonly ["now", "timestamp", "env", "user", "roleName", "locale", "ip", "headers", "query", "params", "__proto__", "prototype", "constructor", "then", "__defineGetter__", "__defineSetter__", "__lookupGetter__", "__lookupSetter__", "hasOwnProperty", "isPrototypeOf", "propertyIsEnumerable", "toLocaleString", "toString", "valueOf", "_props", "_cache", "_delegates", "_proxy", "_getOwn", "defineProperty", "delegate", "clearDelegates", "getSandboxKeys", "getSandboxValue", "createProxy"];
+export declare function isProtectedServerContextKey(key: string): boolean;

package/dist/server/template/context-keys.js

@@ -0,0 +1,86 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var context_keys_exports = {};
+__export(context_keys_exports, {
+  GLOBAL_CONTEXT_KEYS: () => GLOBAL_CONTEXT_KEYS,
+  HTTP_REQUEST_CONTEXT_KEYS: () => HTTP_REQUEST_CONTEXT_KEYS,
+  PROTECTED_SERVER_CONTEXT_KEYS: () => PROTECTED_SERVER_CONTEXT_KEYS,
+  SERVER_CONTEXT_INTERNAL_KEYS: () => SERVER_CONTEXT_INTERNAL_KEYS,
+  SERVER_CONTEXT_PROTOTYPE_KEYS: () => SERVER_CONTEXT_PROTOTYPE_KEYS,
+  isProtectedServerContextKey: () => isProtectedServerContextKey
+});
+module.exports = __toCommonJS(context_keys_exports);
+const GLOBAL_CONTEXT_KEYS = ["now", "timestamp", "env"];
+const HTTP_REQUEST_CONTEXT_KEYS = ["user", "roleName", "locale", "ip", "headers", "query", "params"];
+const SERVER_CONTEXT_PROTOTYPE_KEYS = [
+  "__proto__",
+  "prototype",
+  "constructor",
+  "then",
+  "__defineGetter__",
+  "__defineSetter__",
+  "__lookupGetter__",
+  "__lookupSetter__",
+  "hasOwnProperty",
+  "isPrototypeOf",
+  "propertyIsEnumerable",
+  "toLocaleString",
+  "toString",
+  "valueOf"
+];
+const SERVER_CONTEXT_INTERNAL_KEYS = [
+  "_props",
+  "_cache",
+  "_delegates",
+  "_proxy",
+  "_getOwn",
+  "defineProperty",
+  "delegate",
+  "clearDelegates",
+  "getSandboxKeys",
+  "getSandboxValue",
+  "createProxy"
+];
+const PROTECTED_SERVER_CONTEXT_KEYS = [
+  ...GLOBAL_CONTEXT_KEYS,
+  ...HTTP_REQUEST_CONTEXT_KEYS,
+  ...SERVER_CONTEXT_PROTOTYPE_KEYS,
+  ...SERVER_CONTEXT_INTERNAL_KEYS
+];
+const protectedServerContextKeys = new Set(PROTECTED_SERVER_CONTEXT_KEYS);
+function isProtectedServerContextKey(key) {
+  return protectedServerContextKeys.has(key);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  GLOBAL_CONTEXT_KEYS,
+  HTTP_REQUEST_CONTEXT_KEYS,
+  PROTECTED_SERVER_CONTEXT_KEYS,
+  SERVER_CONTEXT_INTERNAL_KEYS,
+  SERVER_CONTEXT_PROTOTYPE_KEYS,
+  isProtectedServerContextKey
+});

package/dist/server/template/contexts.d.ts

@@ -8,6 +8,7 @@
  */
 import { ResourcerContext } from '@nocobase/resourcer';
 type Getter<T = any> = (ctx: ServerBaseContext) => T | Promise<T>;
+export declare const SERVER_CONTEXT_PROVIDER_TOKEN: unique symbol;
 export interface PropertyOptions {
     /** 固定值，优先级高于 get */
     value?: any;
@@ -21,13 +22,11 @@ export interface PropertyOptions {
 /**
  * 服务器端上下文基础类。
  * - 支持以 defineProperty 定义惰性/常量属性，并可选择缓存
- * - 支持以 defineMethod 定义方法
- * - 支持 delegate 机制，属性与方法可回退到被委托的上游上下文
- * - 通过 Proxy 实现按需求值与 this 绑定
+ * - 支持 delegate 机制，属性可回退到被委托的上游上下文
+ * - 通过 Proxy 实现按需求值
  */
 export declare class ServerBaseContext {
     protected _props: Record<string, PropertyOptions>;
-    protected _methods: Record<string, (...args: any[]) => any>;
     protected _cache: Record<string, any>;
     protected _delegates: ServerBaseContext[];
     protected _proxy?: ServerBaseContext;
@@ -40,12 +39,10 @@ export declare class ServerBaseContext {
      * - get：惰性 getter（默认带缓存）
      * - once：已存在时忽略重复定义
      */
-    defineProperty(key: string, options: PropertyOptions): void;
-    /** 定义一个方法（不可枚举、不可写），访问时会自动绑定到对应实例 */
-    defineMethod(name: string, fn: (...args: any[]) => any): void;
+    defineProperty(key: string, options: PropertyOptions, providerToken?: typeof SERVER_CONTEXT_PROVIDER_TOKEN): void;
     /**
      * 委托到另一个 ServerBaseContext：
-     * - 访问属性/方法找不到时，会回退到被委托者进行解析
+     * - 访问属性找不到时，会回退到被委托者进行解析
      */
     delegate(ctx: ServerBaseContext): void;
     /** 清空所有委托 */