@nocobase/plugin-flow-engine 2.4.0-alpha.4 → 2.4.0-alpha.6

package/dist/externalVersion.js

@@ -8,16 +8,16 @@
  */
 
 module.exports = {
-  "@nocobase/client": "2.4.0-alpha.4",
+  "@nocobase/client": "2.4.0-alpha.6",
   "lodash": "4.18.1",
-  "@nocobase/database": "2.4.0-alpha.4",
-  "@nocobase/data-source-manager": "2.4.0-alpha.4",
-  "@nocobase/resourcer": "2.4.0-alpha.4",
-  "@nocobase/server": "2.4.0-alpha.4",
-  "@nocobase/utils": "2.4.0-alpha.4",
-  "@nocobase/cache": "2.4.0-alpha.4",
-  "@nocobase/actions": "2.4.0-alpha.4",
+  "@nocobase/database": "2.4.0-alpha.6",
+  "@nocobase/data-source-manager": "2.4.0-alpha.6",
+  "@nocobase/resourcer": "2.4.0-alpha.6",
+  "@nocobase/server": "2.4.0-alpha.6",
+  "@nocobase/utils": "2.4.0-alpha.6",
+  "@nocobase/cache": "2.4.0-alpha.6",
+  "@nocobase/actions": "2.4.0-alpha.6",
   "sequelize": "6.35.2",
   "@formily/json-schema": "2.3.7",
-  "@nocobase/ai": "2.4.0-alpha.4"
+  "@nocobase/ai": "2.4.0-alpha.6"
 };

package/dist/node_modules/@ant-design/icons-svg/package.json

@@ -1 +1 @@
-{"name":"@ant-design/icons-svg","version":"4.3.1","sideEffects":false,"description":"Abstract nodes for ant design icons.","contributors":["HeskeyBaozi <hezhiyu233@foxmail.com>"],"homepage":"https://github.com/ant-design/ant-design-icons/","license":"MIT","main":"lib/index.js","module":"es/index.js","files":["lib","es","inline-svg","inline-namespaced-svg"],"repository":{"type":"git","url":"git+https://github.com/ant-design/ant-design-icons.git"},"scripts":{"g":"npm run generate","generate":"cross-env NODE_ENV=production gulp --require ts-node/register/transpile-only","type-check":"tsc --noEmit","build:es":"tsc --project tsconfig.build.json --module esnext --outDir es","build:lib":"tsc --project tsconfig.build.json --module commonjs --outDir lib","build":"cross-env NODE_ENV=production && npm run build:es && npm run build:lib","test":"cross-env NODE_ENV=test && npm run test:unit","test:unit":"jest","prepublishOnly":"npm run test && npm run g && npm run build && npm run type-check && npm run digest","digest":"node scripts/digest.js"},"bugs":{"url":"https://github.com/ant-design/ant-design-icons/issues"},"devDependencies":{"@babel/core":"^7.8.6","@babel/preset-env":"^7.8.6","@babel/preset-typescript":"^7.8.3","@rgrove/parse-xml":"^2.0.2","@types/gulp":"^4.0.6","@types/gulp-concat":"^0.0.32","@types/gulp-rename":"^0.0.33","@types/jest":"^25.1.3","@types/lodash.camelcase":"^4.3.6","@types/lodash.template":"^4.4.6","@types/lodash.upperfirst":"^4.3.6","@types/node":"^13.9.3","@types/ramda":"^0.26.43","@types/rgrove__parse-xml":"^1.1.0","@types/svgo":"^1.3.1","@types/through2":"^2.0.34","@typescript-eslint/eslint-plugin":"^2.21.0","@typescript-eslint/parser":"^2.21.0","babel-jest":"^25.1.0","cross-env":"^7.0.0","del":"^5.1.0","eslint":"^7.16.0","globby":"^11.0.0","gulp":"^4.0.2","gulp-clone":"^2.0.1","gulp-concat":"^2.6.1","gulp-header":"^2.0.9","gulp-rename":"^2.0.0","jest":"^25.1.0","lodash.camelcase":"^4.3.0","lodash.template":"^4.5.0","lodash.upperfirst":"^4.3.1","ramda":"^0.27.0","svgo":"^1.3.2","through2":"^3.0.1","ts-node":"^8.6.2","typescript":"^4.0.0","vinyl":"^2.2.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_lastModified":"2026-09-06T13:12:45.053Z"}
+{"name":"@ant-design/icons-svg","version":"4.3.1","sideEffects":false,"description":"Abstract nodes for ant design icons.","contributors":["HeskeyBaozi <hezhiyu233@foxmail.com>"],"homepage":"https://github.com/ant-design/ant-design-icons/","license":"MIT","main":"lib/index.js","module":"es/index.js","files":["lib","es","inline-svg","inline-namespaced-svg"],"repository":{"type":"git","url":"git+https://github.com/ant-design/ant-design-icons.git"},"scripts":{"g":"npm run generate","generate":"cross-env NODE_ENV=production gulp --require ts-node/register/transpile-only","type-check":"tsc --noEmit","build:es":"tsc --project tsconfig.build.json --module esnext --outDir es","build:lib":"tsc --project tsconfig.build.json --module commonjs --outDir lib","build":"cross-env NODE_ENV=production && npm run build:es && npm run build:lib","test":"cross-env NODE_ENV=test && npm run test:unit","test:unit":"jest","prepublishOnly":"npm run test && npm run g && npm run build && npm run type-check && npm run digest","digest":"node scripts/digest.js"},"bugs":{"url":"https://github.com/ant-design/ant-design-icons/issues"},"devDependencies":{"@babel/core":"^7.8.6","@babel/preset-env":"^7.8.6","@babel/preset-typescript":"^7.8.3","@rgrove/parse-xml":"^2.0.2","@types/gulp":"^4.0.6","@types/gulp-concat":"^0.0.32","@types/gulp-rename":"^0.0.33","@types/jest":"^25.1.3","@types/lodash.camelcase":"^4.3.6","@types/lodash.template":"^4.4.6","@types/lodash.upperfirst":"^4.3.6","@types/node":"^13.9.3","@types/ramda":"^0.26.43","@types/rgrove__parse-xml":"^1.1.0","@types/svgo":"^1.3.1","@types/through2":"^2.0.34","@typescript-eslint/eslint-plugin":"^2.21.0","@typescript-eslint/parser":"^2.21.0","babel-jest":"^25.1.0","cross-env":"^7.0.0","del":"^5.1.0","eslint":"^7.16.0","globby":"^11.0.0","gulp":"^4.0.2","gulp-clone":"^2.0.1","gulp-concat":"^2.6.1","gulp-header":"^2.0.9","gulp-rename":"^2.0.0","jest":"^25.1.0","lodash.camelcase":"^4.3.0","lodash.template":"^4.5.0","lodash.upperfirst":"^4.3.1","ramda":"^0.27.0","svgo":"^1.3.2","through2":"^3.0.1","ts-node":"^8.6.2","typescript":"^4.0.0","vinyl":"^2.2.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_lastModified":"2026-09-15T13:17:50.495Z"}

package/dist/node_modules/acorn/package.json

@@ -1 +1 @@
-{"name":"acorn","description":"ECMAScript parser","homepage":"https://github.com/acornjs/acorn","main":"dist/acorn.js","types":"dist/acorn.d.ts","module":"dist/acorn.mjs","exports":{".":[{"import":"./dist/acorn.mjs","require":"./dist/acorn.js","default":"./dist/acorn.js"},"./dist/acorn.js"],"./package.json":"./package.json"},"version":"8.11.2","engines":{"node":">=0.4.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"license":"MIT","scripts":{"prepare":"cd ..; npm run build:main"},"bin":{"acorn":"./bin/acorn"},"_lastModified":"2026-09-06T13:12:46.232Z"}
+{"name":"acorn","description":"ECMAScript parser","homepage":"https://github.com/acornjs/acorn","main":"dist/acorn.js","types":"dist/acorn.d.ts","module":"dist/acorn.mjs","exports":{".":[{"import":"./dist/acorn.mjs","require":"./dist/acorn.js","default":"./dist/acorn.js"},"./dist/acorn.js"],"./package.json":"./package.json"},"version":"8.11.2","engines":{"node":">=0.4.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"license":"MIT","scripts":{"prepare":"cd ..; npm run build:main"},"bin":{"acorn":"./bin/acorn"},"_lastModified":"2026-09-15T13:17:51.227Z"}

package/dist/node_modules/acorn-jsx/package.json

@@ -1 +1 @@
-{"name":"acorn-jsx","description":"Modern, fast React.js JSX parser","homepage":"https://github.com/acornjs/acorn-jsx","version":"5.3.2","maintainers":[{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"http://rreverser.com/"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn-jsx"},"license":"MIT","scripts":{"test":"node test/run.js"},"peerDependencies":{"acorn":"^6.0.0 || ^7.0.0 || ^8.0.0"},"devDependencies":{"acorn":"^8.0.1"},"_lastModified":"2026-09-06T13:12:46.700Z"}
+{"name":"acorn-jsx","description":"Modern, fast React.js JSX parser","homepage":"https://github.com/acornjs/acorn-jsx","version":"5.3.2","maintainers":[{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"http://rreverser.com/"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn-jsx"},"license":"MIT","scripts":{"test":"node test/run.js"},"peerDependencies":{"acorn":"^6.0.0 || ^7.0.0 || ^8.0.0"},"devDependencies":{"acorn":"^8.0.1"},"_lastModified":"2026-09-15T13:17:51.566Z"}

package/dist/node_modules/acorn-walk/package.json

@@ -1 +1 @@
-{"name":"acorn-walk","description":"ECMAScript (ESTree) AST walker","homepage":"https://github.com/acornjs/acorn","main":"dist/walk.js","types":"dist/walk.d.ts","module":"dist/walk.mjs","exports":{".":[{"import":"./dist/walk.mjs","require":"./dist/walk.js","default":"./dist/walk.js"},"./dist/walk.js"],"./package.json":"./package.json"},"version":"8.3.4","engines":{"node":">=0.4.0"},"dependencies":{"acorn":"^8.11.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"scripts":{"prepare":"cd ..; npm run build:walk"},"license":"MIT","_lastModified":"2026-09-06T13:12:46.818Z"}
+{"name":"acorn-walk","description":"ECMAScript (ESTree) AST walker","homepage":"https://github.com/acornjs/acorn","main":"dist/walk.js","types":"dist/walk.d.ts","module":"dist/walk.mjs","exports":{".":[{"import":"./dist/walk.mjs","require":"./dist/walk.js","default":"./dist/walk.js"},"./dist/walk.js"],"./package.json":"./package.json"},"version":"8.3.4","engines":{"node":">=0.4.0"},"dependencies":{"acorn":"^8.11.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"scripts":{"prepare":"cd ..; npm run build:walk"},"license":"MIT","_lastModified":"2026-09-15T13:17:51.659Z"}

package/dist/node_modules/ses/package.json

@@ -1 +1 @@
-{"name":"ses","version":"1.14.0","description":"Hardened JavaScript for Fearless Cooperation","keywords":["lockdown","harden","Compartment","assert","security","confinement","isolation","object capabilities","ocaps","secure execution","third-party code","prototype pollution","supply-chain attack","plugin"],"author":"Agoric","license":"Apache-2.0","homepage":"https://github.com/Agoric/SES-shim/tree/master/packages/ses#readme","repository":{"type":"git","url":"git+https://github.com/endojs/endo.git","directory":"packages/ses"},"bugs":{"url":"https://github.com/endojs/endo/issues"},"type":"module","main":"./dist/ses.cjs","module":"./index.js","unpkg":"./dist/ses.umd.js","types":"./types.d.ts","exports":{".":{"import":{"types":"./types.d.ts","xs":"./src-xs/index.js","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./lockdown":{"import":{"types":"./types.d.ts","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./hermes":{"require":{"types":"./dist/types.d.cts","default":"./dist/ses-hermes.cjs"}},"./tools.js":"./tools.js","./assert-shim.js":"./assert-shim.js","./lockdown-shim.js":{"xs":"./src-xs/lockdown-shim.js","default":"./lockdown-shim.js"},"./compartment-shim.js":{"xs":"./src-xs/compartment-shim.js","default":"./compartment-shim.js"},"./console-shim.js":"./console-shim.js","./package.json":"./package.json"},"scripts":{"build:vanilla":"node scripts/bundle.js","build:hermes":"node scripts/bundle.js hermes","build":"yarn build:vanilla && yarn build:hermes","clean":"rm -rf dist","cover":"c8 ava","demo":"python3 -m http.server","lint":"yarn lint:types && yarn lint:eslint","lint-fix":"eslint --fix .","lint:eslint":"eslint .","lint:types":"tsc","prepare":"npm run clean && npm run build","qt":"ava","test":"tsd && ava","test:hermes":"./scripts/hermes-test.sh","test:xs":"xst dist/ses.umd.js test/_lockdown-safe.js && node scripts/generate-test-xs.js && xst tmp/test-xs.js && rm -rf tmp","postpack":"git clean -fX \"*.d.ts*\" \"*.d.cts*\" \"*.d.mts*\" \"*.tsbuildinfo\""},"dependencies":{"@endo/cache-map":"^1.1.0","@endo/env-options":"^1.1.11","@endo/immutable-arraybuffer":"^1.1.2"},"devDependencies":{"@babel/generator":"^7.26.3","@babel/parser":"~7.26.2","@babel/traverse":"~7.25.9","@babel/types":"~7.26.0","@endo/compartment-mapper":"^1.6.3","@endo/module-source":"^1.3.3","@endo/test262-runner":"^0.1.48","@types/babel__traverse":"^7.20.5","ava":"^6.1.3","babel-eslint":"^10.1.0","c8":"^7.14.0","core-js":"^3.31.0","eslint":"^8.57.1","eslint-config-airbnb-base":"^15.0.0","eslint-config-prettier":"^9.1.0","eslint-plugin-eslint-comments":"^3.2.0","eslint-plugin-import":"^2.31.0","hermes-engine-cli":"^0.12.0","prettier":"^3.5.3","terser":"^5.16.6","tsd":"^0.31.2","typescript":"~5.8.3"},"files":["./*.d.ts","./*.js","./*.map","LICENSE*","SECURITY*","dist","lib","src","tools"],"publishConfig":{"access":"public"},"eslintConfig":{"extends":["plugin:@endo/ses"]},"ava":{"files":["test/**/*.test.*"],"timeout":"2m"},"typeCoverage":{"atLeast":81.17},"gitHead":"9815aea9541f241389d2135c6097a7442bdffa17","_lastModified":"2026-09-06T13:12:45.767Z"}
+{"name":"ses","version":"1.14.0","description":"Hardened JavaScript for Fearless Cooperation","keywords":["lockdown","harden","Compartment","assert","security","confinement","isolation","object capabilities","ocaps","secure execution","third-party code","prototype pollution","supply-chain attack","plugin"],"author":"Agoric","license":"Apache-2.0","homepage":"https://github.com/Agoric/SES-shim/tree/master/packages/ses#readme","repository":{"type":"git","url":"git+https://github.com/endojs/endo.git","directory":"packages/ses"},"bugs":{"url":"https://github.com/endojs/endo/issues"},"type":"module","main":"./dist/ses.cjs","module":"./index.js","unpkg":"./dist/ses.umd.js","types":"./types.d.ts","exports":{".":{"import":{"types":"./types.d.ts","xs":"./src-xs/index.js","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./lockdown":{"import":{"types":"./types.d.ts","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./hermes":{"require":{"types":"./dist/types.d.cts","default":"./dist/ses-hermes.cjs"}},"./tools.js":"./tools.js","./assert-shim.js":"./assert-shim.js","./lockdown-shim.js":{"xs":"./src-xs/lockdown-shim.js","default":"./lockdown-shim.js"},"./compartment-shim.js":{"xs":"./src-xs/compartment-shim.js","default":"./compartment-shim.js"},"./console-shim.js":"./console-shim.js","./package.json":"./package.json"},"scripts":{"build:vanilla":"node scripts/bundle.js","build:hermes":"node scripts/bundle.js hermes","build":"yarn build:vanilla && yarn build:hermes","clean":"rm -rf dist","cover":"c8 ava","demo":"python3 -m http.server","lint":"yarn lint:types && yarn lint:eslint","lint-fix":"eslint --fix .","lint:eslint":"eslint .","lint:types":"tsc","prepare":"npm run clean && npm run build","qt":"ava","test":"tsd && ava","test:hermes":"./scripts/hermes-test.sh","test:xs":"xst dist/ses.umd.js test/_lockdown-safe.js && node scripts/generate-test-xs.js && xst tmp/test-xs.js && rm -rf tmp","postpack":"git clean -fX \"*.d.ts*\" \"*.d.cts*\" \"*.d.mts*\" \"*.tsbuildinfo\""},"dependencies":{"@endo/cache-map":"^1.1.0","@endo/env-options":"^1.1.11","@endo/immutable-arraybuffer":"^1.1.2"},"devDependencies":{"@babel/generator":"^7.26.3","@babel/parser":"~7.26.2","@babel/traverse":"~7.25.9","@babel/types":"~7.26.0","@endo/compartment-mapper":"^1.6.3","@endo/module-source":"^1.3.3","@endo/test262-runner":"^0.1.48","@types/babel__traverse":"^7.20.5","ava":"^6.1.3","babel-eslint":"^10.1.0","c8":"^7.14.0","core-js":"^3.31.0","eslint":"^8.57.1","eslint-config-airbnb-base":"^15.0.0","eslint-config-prettier":"^9.1.0","eslint-plugin-eslint-comments":"^3.2.0","eslint-plugin-import":"^2.31.0","hermes-engine-cli":"^0.12.0","prettier":"^3.5.3","terser":"^5.16.6","tsd":"^0.31.2","typescript":"~5.8.3"},"files":["./*.d.ts","./*.js","./*.map","LICENSE*","SECURITY*","dist","lib","src","tools"],"publishConfig":{"access":"public"},"eslintConfig":{"extends":["plugin:@endo/ses"]},"ava":{"files":["test/**/*.test.*"],"timeout":"2m"},"typeCoverage":{"atLeast":81.17},"gitHead":"9815aea9541f241389d2135c6097a7442bdffa17","_lastModified":"2026-09-15T13:17:50.914Z"}

package/dist/node_modules/zod/package.json

@@ -1 +1 @@
-{"name":"zod","version":"4.3.5","type":"module","license":"MIT","author":"Colin McDonnell <zod@colinhacks.com>","description":"TypeScript-first schema declaration and validation library with static type inference","homepage":"https://zod.dev","llms":"https://zod.dev/llms.txt","llmsFull":"https://zod.dev/llms-full.txt","mcpServer":"https://mcp.inkeep.com/zod/mcp","funding":"https://github.com/sponsors/colinhacks","sideEffects":false,"files":["src","**/*.js","**/*.mjs","**/*.cjs","**/*.d.ts","**/*.d.mts","**/*.d.cts","**/package.json"],"keywords":["typescript","schema","validation","type","inference"],"main":"./index.cjs","types":"./index.d.cts","module":"./index.js","zshy":{"exports":{"./package.json":"./package.json",".":"./src/index.ts","./mini":"./src/mini/index.ts","./locales":"./src/locales/index.ts","./v3":"./src/v3/index.ts","./v4":"./src/v4/index.ts","./v4-mini":"./src/v4-mini/index.ts","./v4/mini":"./src/v4/mini/index.ts","./v4/core":"./src/v4/core/index.ts","./v4/locales":"./src/v4/locales/index.ts","./v4/locales/*":"./src/v4/locales/*"},"conditions":{"@zod/source":"src"}},"exports":{"./package.json":"./package.json",".":{"@zod/source":"./src/index.ts","types":"./index.d.cts","import":"./index.js","require":"./index.cjs"},"./mini":{"@zod/source":"./src/mini/index.ts","types":"./mini/index.d.cts","import":"./mini/index.js","require":"./mini/index.cjs"},"./locales":{"@zod/source":"./src/locales/index.ts","types":"./locales/index.d.cts","import":"./locales/index.js","require":"./locales/index.cjs"},"./v3":{"@zod/source":"./src/v3/index.ts","types":"./v3/index.d.cts","import":"./v3/index.js","require":"./v3/index.cjs"},"./v4":{"@zod/source":"./src/v4/index.ts","types":"./v4/index.d.cts","import":"./v4/index.js","require":"./v4/index.cjs"},"./v4-mini":{"@zod/source":"./src/v4-mini/index.ts","types":"./v4-mini/index.d.cts","import":"./v4-mini/index.js","require":"./v4-mini/index.cjs"},"./v4/mini":{"@zod/source":"./src/v4/mini/index.ts","types":"./v4/mini/index.d.cts","import":"./v4/mini/index.js","require":"./v4/mini/index.cjs"},"./v4/core":{"@zod/source":"./src/v4/core/index.ts","types":"./v4/core/index.d.cts","import":"./v4/core/index.js","require":"./v4/core/index.cjs"},"./v4/locales":{"@zod/source":"./src/v4/locales/index.ts","types":"./v4/locales/index.d.cts","import":"./v4/locales/index.js","require":"./v4/locales/index.cjs"},"./v4/locales/*":{"@zod/source":"./src/v4/locales/*","types":"./v4/locales/*","import":"./v4/locales/*","require":"./v4/locales/*"}},"repository":{"type":"git","url":"git+https://github.com/colinhacks/zod.git"},"bugs":{"url":"https://github.com/colinhacks/zod/issues"},"support":{"backing":{"npm-funding":true}},"scripts":{"clean":"git clean -xdf . -e node_modules","build":"zshy --project tsconfig.build.json","postbuild":"tsx ../../scripts/write-stub-package-jsons.ts && pnpm biome check --write .","test:watch":"pnpm vitest","test":"pnpm vitest run","prepublishOnly":"tsx ../../scripts/check-versions.ts"},"_lastModified":"2026-09-06T13:12:48.000Z"}
+{"name":"zod","version":"4.3.5","type":"module","license":"MIT","author":"Colin McDonnell <zod@colinhacks.com>","description":"TypeScript-first schema declaration and validation library with static type inference","homepage":"https://zod.dev","llms":"https://zod.dev/llms.txt","llmsFull":"https://zod.dev/llms-full.txt","mcpServer":"https://mcp.inkeep.com/zod/mcp","funding":"https://github.com/sponsors/colinhacks","sideEffects":false,"files":["src","**/*.js","**/*.mjs","**/*.cjs","**/*.d.ts","**/*.d.mts","**/*.d.cts","**/package.json"],"keywords":["typescript","schema","validation","type","inference"],"main":"./index.cjs","types":"./index.d.cts","module":"./index.js","zshy":{"exports":{"./package.json":"./package.json",".":"./src/index.ts","./mini":"./src/mini/index.ts","./locales":"./src/locales/index.ts","./v3":"./src/v3/index.ts","./v4":"./src/v4/index.ts","./v4-mini":"./src/v4-mini/index.ts","./v4/mini":"./src/v4/mini/index.ts","./v4/core":"./src/v4/core/index.ts","./v4/locales":"./src/v4/locales/index.ts","./v4/locales/*":"./src/v4/locales/*"},"conditions":{"@zod/source":"src"}},"exports":{"./package.json":"./package.json",".":{"@zod/source":"./src/index.ts","types":"./index.d.cts","import":"./index.js","require":"./index.cjs"},"./mini":{"@zod/source":"./src/mini/index.ts","types":"./mini/index.d.cts","import":"./mini/index.js","require":"./mini/index.cjs"},"./locales":{"@zod/source":"./src/locales/index.ts","types":"./locales/index.d.cts","import":"./locales/index.js","require":"./locales/index.cjs"},"./v3":{"@zod/source":"./src/v3/index.ts","types":"./v3/index.d.cts","import":"./v3/index.js","require":"./v3/index.cjs"},"./v4":{"@zod/source":"./src/v4/index.ts","types":"./v4/index.d.cts","import":"./v4/index.js","require":"./v4/index.cjs"},"./v4-mini":{"@zod/source":"./src/v4-mini/index.ts","types":"./v4-mini/index.d.cts","import":"./v4-mini/index.js","require":"./v4-mini/index.cjs"},"./v4/mini":{"@zod/source":"./src/v4/mini/index.ts","types":"./v4/mini/index.d.cts","import":"./v4/mini/index.js","require":"./v4/mini/index.cjs"},"./v4/core":{"@zod/source":"./src/v4/core/index.ts","types":"./v4/core/index.d.cts","import":"./v4/core/index.js","require":"./v4/core/index.cjs"},"./v4/locales":{"@zod/source":"./src/v4/locales/index.ts","types":"./v4/locales/index.d.cts","import":"./v4/locales/index.js","require":"./v4/locales/index.cjs"},"./v4/locales/*":{"@zod/source":"./src/v4/locales/*","types":"./v4/locales/*","import":"./v4/locales/*","require":"./v4/locales/*"}},"repository":{"type":"git","url":"git+https://github.com/colinhacks/zod.git"},"bugs":{"url":"https://github.com/colinhacks/zod/issues"},"support":{"backing":{"npm-funding":true}},"scripts":{"clean":"git clean -xdf . -e node_modules","build":"zshy --project tsconfig.build.json","postbuild":"tsx ../../scripts/write-stub-package-jsons.ts && pnpm biome check --write .","test:watch":"pnpm vitest","test":"pnpm vitest run","prepublishOnly":"tsx ../../scripts/check-versions.ts"},"_lastModified":"2026-09-15T13:17:52.488Z"}

package/dist/server/flow-surfaces/runjs-authoring/ast/parser.d.ts

@@ -6,11 +6,18 @@
  * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
-export declare const ACORN_WALK_BASE: any;
-export declare function parseRunJsAuthoringAst(source: string): {
-    ast?: any;
+import * as acorn from 'acorn';
+import type { SourceRange } from '../internal-types';
+export declare const AcornParserWithJsx: typeof acorn.Parser;
+export type RunJsParseResult = {
+    ast?: acorn.Node;
+    comments?: readonly SourceRange[];
     error?: {
         index: number;
         message: string;
     };
 };
+export declare const ACORN_WALK_BASE: any;
+export declare function parseRunJsAuthoringAst(source: string, options?: {
+    allowLegacyTemplates?: boolean;
+}): RunJsParseResult;

package/dist/server/flow-surfaces/runjs-authoring/ast/parser.js

@@ -37,6 +37,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var parser_exports = {};
 __export(parser_exports, {
   ACORN_WALK_BASE: () => ACORN_WALK_BASE,
+  AcornParserWithJsx: () => AcornParserWithJsx,
   parseRunJsAuthoringAst: () => parseRunJsAuthoringAst
 });
 module.exports = __toCommonJS(parser_exports);
@@ -44,6 +45,74 @@ var acorn = __toESM(require("acorn"));
 var import_acorn_jsx = __toESM(require("acorn-jsx"));
 var acornWalk = __toESM(require("acorn-walk"));
 const AcornParserWithJsx = acorn.Parser.extend((0, import_acorn_jsx.default)());
+const AcornParserWithLegacyTemplates = AcornParserWithJsx.extend((Parser) => {
+  const Base = Parser;
+  const { jsxText } = Parser.acornJsx.tokTypes;
+  return class extends Base {
+    get allowNewDotTarget() {
+      return true;
+    }
+    readLegacyTemplate() {
+      var _a;
+      if (this.input.startsWith("{{", this.pos)) {
+        const start = this.pos;
+        if (/^\s*ctx(?:\.|\?\.|\[)/.test(this.input.slice(start + 2))) {
+          let end;
+          const comments = [];
+          try {
+            const expression = acorn.parseExpressionAt(this.input, start + 2, {
+              ecmaVersion: "latest",
+              onComment: comments
+            });
+            const expressionEnd = Math.max(expression.end, ((_a = comments.at(-1)) == null ? void 0 : _a.end) || 0);
+            const closing = /^\s*}}/.exec(this.input.slice(expressionEnd));
+            if (closing) end = expressionEnd + closing[0].length;
+          } catch {
+          }
+          if (end !== void 0) {
+            const onComment = this.options.onComment;
+            if (typeof onComment === "function") {
+              for (const comment of comments) {
+                onComment(comment.type === "Block", comment.value, comment.start, comment.end);
+              }
+            }
+            for (const newline of this.input.slice(start, end).matchAll(/\r\n?|\n|\u2028|\u2029/g)) {
+              this.curLine += 1;
+              this.lineStart = start + newline.index + newline[0].length;
+            }
+            this.pos = end;
+            return true;
+          }
+        }
+      }
+      return false;
+    }
+    readToken(code) {
+      if (code === 123 && !this.curContext().token.startsWith("<") && this.readLegacyTemplate()) {
+        return this.finishToken(acorn.tokTypes._null);
+      }
+      return super.readToken(code);
+    }
+    jsx_readToken() {
+      const start = this.pos;
+      if (!this.readLegacyTemplate()) {
+        while (this.pos < this.input.length && !/[<{]/.test(this.input[this.pos])) {
+          if (/[\r\n\u2028\u2029]/.test(this.input[this.pos])) this.jsx_readNewLine(true);
+          else this.pos += 1;
+        }
+      }
+      if (this.pos > start) return this.finishToken(jsxText, this.input.slice(start, this.pos));
+      return super.jsx_readToken();
+    }
+    parseExpression(...args) {
+      var _a;
+      if (this.type === acorn.tokTypes.ellipsis && ((_a = this.context.at(-2)) == null ? void 0 : _a.token) === "<tag>...</tag>") {
+        this.next();
+      }
+      return super.parseExpression(...args);
+    }
+  };
+});
 const ACORN_WALK_BASE = {
   ...acornWalk.base,
   JSXElement(node, state, callback) {
@@ -102,18 +171,30 @@ const ACORN_WALK_BASE = {
   JSXClosingFragment() {
   }
 };
-function parseRunJsAuthoringAst(source) {
+function parseRunJsAuthoringAst(source, options = {}) {
+  const comments = [];
+  const parserOptions = {
+    allowAwaitOutsideFunction: true,
+    allowReturnOutsideFunction: true,
+    ecmaVersion: "latest",
+    locations: true,
+    sourceType: "script",
+    onComment: (_block, _text, start, end) => comments.push({ start, end })
+  };
   try {
     return {
-      ast: AcornParserWithJsx.parse(source, {
-        allowAwaitOutsideFunction: true,
-        allowReturnOutsideFunction: true,
-        ecmaVersion: "latest",
-        locations: true,
-        sourceType: "script"
-      })
+      ast: AcornParserWithJsx.parse(source, parserOptions),
+      comments
     };
   } catch (error) {
+    if (options.allowLegacyTemplates && source.includes("{{")) {
+      try {
+        comments.length = 0;
+        AcornParserWithLegacyTemplates.parse(source, parserOptions);
+        return { comments };
+      } catch {
+      }
+    }
     const acornError = error;
     return {
       error: {
@@ -126,5 +207,6 @@ function parseRunJsAuthoringAst(source) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ACORN_WALK_BASE,
+  AcornParserWithJsx,
   parseRunJsAuthoringAst
 });

package/dist/server/flow-surfaces/runjs-authoring/ast/source.d.ts

@@ -7,9 +7,9 @@
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
 import type { CallArgumentSource, SourceRange } from '../internal-types';
+import type { RunJsParseResult } from './parser';
 export declare function maskJavaScriptSource(source: string): string;
-export declare function maskJavaScriptComments(source: string): string;
-export declare function maskTemplateLiteralComments(source: string, chars: string[], start: number): number;
+export declare function maskJavaScriptComments(source: string, parsed?: RunJsParseResult): string;
 export declare function maskTemplateLiteral(source: string, chars: string[], start: number): number;
 export declare function findTemplateExpressionEnd(source: string, start: number): number;
 export declare function skipRegexLiteral(source: string, start: number): number;

package/dist/server/flow-surfaces/runjs-authoring/ast/source.js

@@ -55,7 +55,6 @@ __export(source_exports, {
   maskJavaScriptComments: () => maskJavaScriptComments,
   maskJavaScriptSource: () => maskJavaScriptSource,
   maskTemplateLiteral: () => maskTemplateLiteral,
-  maskTemplateLiteralComments: () => maskTemplateLiteralComments,
   mergeRanges: () => mergeRanges,
   readCompleteStringLiteral: () => readCompleteStringLiteral,
   readLeadingStringLiteral: () => readLeadingStringLiteral,
@@ -70,6 +69,7 @@ __export(source_exports, {
 });
 module.exports = __toCommonJS(source_exports);
 var import_constants = require("../runtime/constants");
+var import_parser = require("./parser");
 var import_walk = require("./walk");
 function maskJavaScriptSource(source) {
   const chars = source.split("");
@@ -135,78 +135,17 @@ function maskJavaScriptSource(source) {
   }
   return chars.join("");
 }
-function maskJavaScriptComments(source) {
+function maskJavaScriptComments(source, parsed = (0, import_parser.parseRunJsAuthoringAst)(source, { allowLegacyTemplates: true })) {
+  if (!parsed.comments) return "";
+  if (!parsed.comments.length) return source;
   const chars = source.split("");
-  const maskRange = (start, end) => {
-    for (let index2 = start; index2 < end; index2 += 1) {
-      if (chars[index2] !== "\n" && chars[index2] !== "\r") {
-        chars[index2] = " ";
-      }
-    }
-  };
-  let index = 0;
-  while (index < source.length) {
-    const char = source[index];
-    const next = source[index + 1];
-    if (char === "/" && next === "/") {
-      const start = index;
-      index += 2;
-      while (index < source.length && source[index] !== "\n") {
-        index += 1;
-      }
-      maskRange(start, index);
-      continue;
-    }
-    if (char === "/" && next === "*") {
-      const start = index;
-      index += 2;
-      while (index < source.length && !(source[index] === "*" && source[index + 1] === "/")) {
-        index += 1;
-      }
-      index = Math.min(source.length, index + 2);
-      maskRange(start, index);
-      continue;
-    }
-    if (char === "`") {
-      index = maskTemplateLiteralComments(source, chars, index);
-      continue;
+  for (const { start, end } of parsed.comments) {
+    for (let index = start; index < end; index += 1) {
+      if (!/[\r\n\u2028\u2029]/.test(chars[index])) chars[index] = " ";
     }
-    if (char === "/" && isRegexLiteralStart(chars, index)) {
-      index = skipRegexLiteral(source, index);
-      continue;
-    }
-    if (char === '"' || char === "'") {
-      index = skipQuotedLiteral(source, index, char);
-      continue;
-    }
-    index += 1;
   }
   return chars.join("");
 }
-function maskTemplateLiteralComments(source, chars, start) {
-  let index = start + 1;
-  while (index < source.length) {
-    if (source[index] === "\\") {
-      index += 2;
-      continue;
-    }
-    if (source[index] === "`") {
-      return index + 1;
-    }
-    if (source[index] === "$" && source[index + 1] === "{") {
-      const expressionStart = index + 2;
-      const expressionEnd = findTemplateExpressionEnd(source, expressionStart);
-      const expressionMasked = maskJavaScriptComments(source.slice(expressionStart, expressionEnd));
-      for (let offset = 0; offset < expressionMasked.length; offset += 1) {
-        chars[expressionStart + offset] = expressionMasked[offset];
-      }
-      index = Math.min(source.length, expressionEnd + 1);
-      continue;
-    }
-    index += 1;
-  }
-  return source.length;
-}
 function maskTemplateLiteral(source, chars, start) {
   const maskRange = (from, to) => {
     for (let index2 = from; index2 < to; index2 += 1) {
@@ -900,7 +839,6 @@ function getAstSource(node, source) {
   maskJavaScriptComments,
   maskJavaScriptSource,
   maskTemplateLiteral,
-  maskTemplateLiteralComments,
   mergeRanges,
   readCompleteStringLiteral,
   readLeadingStringLiteral,

package/dist/server/flow-surfaces/runjs-authoring/ast/static-bindings.d.ts

@@ -9,15 +9,15 @@
 import type { AstFunctionBinding, AstIdentifierBinding, AstIdentifierWrite, AstStaticObjectAliasCopy, StaticFilterValueBinding, StaticStringBinding } from '../internal-types';
 export declare function collectAstIdentifierBindingsFromAst(ast: any, source: string): AstIdentifierBinding[];
 export declare function collectAstFunctionBindingsFromAst(ast: any, source: string): AstFunctionBinding[];
-export declare function collectStaticStringBindingsFromAst(ast: any, source: string, seedStringBindings?: StaticStringBinding[], identifierBindings?: AstIdentifierBinding[]): StaticStringBinding[];
+export declare function collectStaticStringBindingsFromAst(ast: any, source: string, seedStringBindings?: StaticStringBinding[], identifierBindings?: AstIdentifierBinding[], consumeWork?: (work: number) => void, bindingNames?: ReadonlySet<string>): StaticStringBinding[];
 export declare function isStaticStringBindingActiveAtIndex(binding: StaticStringBinding, index: number, writes: AstIdentifierWrite[], identifierBindings: AstIdentifierBinding[]): boolean;
 export declare function trimStaticStringBindingsAfterWrites(bindings: StaticStringBinding[], writes: AstIdentifierWrite[], identifierBindings: AstIdentifierBinding[]): StaticStringBinding[];
-export declare function collectStaticFilterValueBindingsFromAst(ast: any, source: string, identifierBindings: AstIdentifierBinding[]): StaticFilterValueBinding[];
+export declare function collectStaticFilterValueBindingsFromAst(ast: any, source: string, identifierBindings: AstIdentifierBinding[], consumeWork?: (work: number) => void, bindingNames?: ReadonlySet<string>): StaticFilterValueBinding[];
 export declare function trimStaticFilterValueBindingsAfterWrites(bindings: StaticFilterValueBinding[], writes: AstIdentifierWrite[], identifierBindings: AstIdentifierBinding[]): StaticFilterValueBinding[];
-export declare function collectAstStaticBindingWritesFromAst(ast: any, source: string, identifierBindings: AstIdentifierBinding[]): AstIdentifierWrite[];
-export declare function collectAstStaticObjectAliasCopiesFromAst(ast: any, source: string, identifierBindings: AstIdentifierBinding[]): AstStaticObjectAliasCopy[];
+export declare function collectAstStaticBindingWritesFromAst(ast: any, source: string, identifierBindings: AstIdentifierBinding[], consumeWork?: (work: number) => void, bindingNames?: ReadonlySet<string>): AstIdentifierWrite[];
+export declare function collectAstStaticObjectAliasCopiesFromAst(ast: any, source: string, identifierBindings: AstIdentifierBinding[], consumeWork?: (work: number) => void, bindingNames?: ReadonlySet<string>): AstStaticObjectAliasCopy[];
 export declare function resolveAstStaticAliasCopySourceName(node: any, aliases: AstStaticObjectAliasCopy[], identifierBindings: AstIdentifierBinding[]): string | undefined;
-export declare function collectAstStaticAliasCopyWrites(writes: AstIdentifierWrite[], aliases: AstStaticObjectAliasCopy[], identifierBindings: AstIdentifierBinding[]): AstIdentifierWrite[];
+export declare function collectAstStaticAliasCopyWrites(writes: AstIdentifierWrite[], aliases: AstStaticObjectAliasCopy[], identifierBindings: AstIdentifierBinding[], consumeWork?: (work: number) => void): AstIdentifierWrite[];
 export declare function getAstIdentifierWriteKey(write: AstIdentifierWrite): string;
 export declare function isAstStaticObjectAliasCopyActiveAtIndex(alias: AstStaticObjectAliasCopy, index: number, identifierBindings: AstIdentifierBinding[]): boolean;
 export declare function isAstStaticObjectAliasCopySourceActiveAtIndex(alias: AstStaticObjectAliasCopy, index: number, identifierBindings: AstIdentifierBinding[]): boolean;

package/dist/server/flow-surfaces/runjs-authoring/ast/static-bindings.js

@@ -258,12 +258,19 @@ function collectAstFunctionBindingsFromAst(ast, source) {
   });
   return bindings;
 }
-function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = [], identifierBindings = []) {
+function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = [], identifierBindings = [], consumeWork, bindingNames) {
   const bindings = [];
   const availableBindings = [...seedStringBindings];
-  const writes = collectAstStaticBindingWritesFromAst(ast, source, identifierBindings);
-  const aliasCopies = collectAstStaticObjectAliasCopiesFromAst(ast, source, identifierBindings);
+  const writes = collectAstStaticBindingWritesFromAst(ast, source, identifierBindings, consumeWork, bindingNames);
+  const aliasCopies = collectAstStaticObjectAliasCopiesFromAst(
+    ast,
+    source,
+    identifierBindings,
+    consumeWork,
+    bindingNames
+  );
   const addBinding = (name, value, node, scope, declarationStart, executionScope) => {
+    consumeWork == null ? void 0 : consumeWork(1);
     const binding = {
       declarationStart,
       executionScope,
@@ -276,6 +283,7 @@ function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = []
     availableBindings.push(binding);
   };
   const copyMemberBindings = (sourceName, targetName, node, scope, declarationStart, executionScope) => {
+    consumeWork == null ? void 0 : consumeWork(availableBindings.length * (writes.length + 1) * (identifierBindings.length + 1));
     const exactBinding = availableBindings.find(
       (binding) => binding.name === sourceName && isStaticStringBindingActiveAtIndex(binding, declarationStart, writes, identifierBindings)
     );
@@ -287,6 +295,7 @@ function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = []
       (binding) => binding.name.startsWith(prefix) && isStaticStringBindingActiveAtIndex(binding, declarationStart, writes, identifierBindings)
     );
     for (const sourceBinding of sourceBindings) {
+      consumeWork == null ? void 0 : consumeWork(availableBindings.length + 1);
       const name = `${targetName}${sourceBinding.name.slice(sourceName.length)}`;
       if (availableBindings.some((binding) => binding.name === name && binding.start >= declarationStart)) {
         continue;
@@ -301,6 +310,7 @@ function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = []
     }
     const seenMembers = /* @__PURE__ */ new Set();
     for (let index = (unwrapped.properties || []).length - 1; index >= 0; index -= 1) {
+      consumeWork == null ? void 0 : consumeWork((availableBindings.length + 1) * (identifierBindings.length + 1));
       const property = unwrapped.properties[index];
       if (!property) {
         continue;
@@ -330,7 +340,9 @@ function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = []
   };
   (0, import_walk.walkAstAncestor)(ast, {
     VariableDeclarator(node, ancestors) {
-      var _a, _b;
+      var _a, _b, _c;
+      if (bindingNames && ((_a = node.id) == null ? void 0 : _a.type) === "Identifier" && !bindingNames.has(node.id.name)) return;
+      consumeWork == null ? void 0 : consumeWork((availableBindings.length + aliasCopies.length + 1) * (identifierBindings.length + 1));
       const declaration = (0, import_bindings.findAstAncestor)(ancestors, "VariableDeclaration");
       if ((declaration == null ? void 0 : declaration.kind) !== "const") {
         return;
@@ -338,12 +350,13 @@ function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = []
       const scope = (0, import_bindings.getAstBindingScopeRange)(ancestors, source.length, (declaration == null ? void 0 : declaration.kind) === "var");
       const executionScope = (0, import_bindings.getAstExecutionScopeRange)(ancestors, source.length);
       const declarationStart = typeof node.start === "number" ? node.start : scope.start;
-      if (((_a = node.id) == null ? void 0 : _a.type) === "ObjectPattern") {
+      if (((_b = node.id) == null ? void 0 : _b.type) === "ObjectPattern") {
         const sourceName2 = resolveAstStaticAliasCopySourceName(node.init, aliasCopies, identifierBindings);
         if (!sourceName2) {
           return;
         }
         (0, import_static_values.collectAstObjectPatternPathAliases)(node.id, (name, members, aliasNode) => {
+          if (bindingNames && !bindingNames.has(name)) return;
           const aliasDeclarationStart = typeof (aliasNode == null ? void 0 : aliasNode.start) === "number" ? aliasNode.start : declarationStart;
           copyMemberBindings(
             `${sourceName2}.${members.join(".")}`,
@@ -356,7 +369,7 @@ function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = []
         });
         return;
       }
-      if (((_b = node.id) == null ? void 0 : _b.type) !== "Identifier") {
+      if (((_c = node.id) == null ? void 0 : _c.type) !== "Identifier") {
         return;
       }
       const resolved = (0, import_static_values.resolveRunJsStaticString)(node.init, source, availableBindings, identifierBindings);
@@ -370,6 +383,7 @@ function collectStaticStringBindingsFromAst(ast, source, seedStringBindings = []
       }
     }
   });
+  consumeWork == null ? void 0 : consumeWork(bindings.length * (writes.length + 1) * (identifierBindings.length + 1));
   return trimStaticStringBindingsAfterWrites(bindings, writes, identifierBindings);
 }
 function isStaticStringBindingActiveAtIndex(binding, index, writes, identifierBindings) {
@@ -400,13 +414,16 @@ function trimStaticStringBindingsAfterWrites(bindings, writes, identifierBinding
     return nextWrite ? { ...binding, end: nextWrite.index } : binding;
   });
 }
-function collectStaticFilterValueBindingsFromAst(ast, source, identifierBindings) {
+function collectStaticFilterValueBindingsFromAst(ast, source, identifierBindings, consumeWork, bindingNames) {
   const bindings = [];
   const availableBindings = [];
-  const writes = collectAstStaticBindingWritesFromAst(ast, source, identifierBindings);
-  const getActiveBindings = (index) => trimStaticFilterValueBindingsAfterWrites(availableBindings, writes, identifierBindings).filter(
-    (binding) => index >= binding.start && index < binding.end
-  );
+  const writes = collectAstStaticBindingWritesFromAst(ast, source, identifierBindings, consumeWork, bindingNames);
+  const getActiveBindings = (index) => {
+    consumeWork == null ? void 0 : consumeWork(availableBindings.length * (writes.length + 1) * (identifierBindings.length + 1));
+    return trimStaticFilterValueBindingsAfterWrites(availableBindings, writes, identifierBindings).filter(
+      (binding) => index >= binding.start && index < binding.end
+    );
+  };
   const addBinding = (name, valueNode, node, scope, declarationStart, executionScope) => {
     const binding = {
       declarationStart,
@@ -421,7 +438,9 @@ function collectStaticFilterValueBindingsFromAst(ast, source, identifierBindings
   };
   (0, import_walk.walkAstAncestor)(ast, {
     VariableDeclarator(node, ancestors) {
-      var _a, _b;
+      var _a, _b, _c;
+      if (bindingNames && ((_a = node.id) == null ? void 0 : _a.type) === "Identifier" && !bindingNames.has(node.id.name)) return;
+      consumeWork == null ? void 0 : consumeWork(1);
       if (!node.init) {
         return;
       }
@@ -432,7 +451,7 @@ function collectStaticFilterValueBindingsFromAst(ast, source, identifierBindings
       const scope = (0, import_bindings.getAstBindingScopeRange)(ancestors, source.length);
       const executionScope = (0, import_bindings.getAstExecutionScopeRange)(ancestors, source.length);
       const declarationStart = typeof node.start === "number" ? node.start : scope.start;
-      if (((_a = node.id) == null ? void 0 : _a.type) === "ObjectPattern") {
+      if (((_b = node.id) == null ? void 0 : _b.type) === "ObjectPattern") {
         const sourceObject = (0, import_static_values.resolveRunJsStaticObjectExpression)(
           node.init,
           identifierBindings,
@@ -442,6 +461,7 @@ function collectStaticFilterValueBindingsFromAst(ast, source, identifierBindings
           return;
         }
         (0, import_static_values.collectAstObjectPatternPathAliases)(node.id, (name, members, aliasNode) => {
+          if (bindingNames && !bindingNames.has(name)) return;
           const property = (0, import_static_values.getRunJsObjectPropertyByPath)(
             sourceObject,
             members,
@@ -461,12 +481,13 @@ function collectStaticFilterValueBindingsFromAst(ast, source, identifierBindings
         });
         return;
       }
-      if (((_b = node.id) == null ? void 0 : _b.type) !== "Identifier") {
+      if (((_c = node.id) == null ? void 0 : _c.type) !== "Identifier") {
         return;
       }
       addBinding(node.id.name, node.init, node, scope, declarationStart, executionScope);
     }
   });
+  consumeWork == null ? void 0 : consumeWork(bindings.length * (writes.length + 1) * (identifierBindings.length + 1));
   return trimStaticFilterValueBindingsAfterWrites(bindings, writes, identifierBindings);
 }
 function trimStaticFilterValueBindingsAfterWrites(bindings, writes, identifierBindings) {
@@ -477,17 +498,27 @@ function trimStaticFilterValueBindingsAfterWrites(bindings, writes, identifierBi
     return nextWrite ? { ...binding, end: nextWrite.index } : binding;
   });
 }
-function collectAstStaticBindingWritesFromAst(ast, source, identifierBindings) {
-  const writes = (0, import_execution.collectAstIdentifierWritesFromAst)(ast, source);
-  const aliasCopies = collectAstStaticObjectAliasCopiesFromAst(ast, source, identifierBindings);
-  return [...writes, ...collectAstStaticAliasCopyWrites(writes, aliasCopies, identifierBindings)];
+function collectAstStaticBindingWritesFromAst(ast, source, identifierBindings, consumeWork, bindingNames) {
+  const writes = (0, import_execution.collectAstIdentifierWritesFromAst)(ast, source).filter(
+    (write) => !bindingNames || bindingNames.has((0, import_static_values.getAstAliasRootName)(write.name))
+  );
+  const aliasCopies = collectAstStaticObjectAliasCopiesFromAst(
+    ast,
+    source,
+    identifierBindings,
+    consumeWork,
+    bindingNames
+  );
+  return [...writes, ...collectAstStaticAliasCopyWrites(writes, aliasCopies, identifierBindings, consumeWork)];
 }
-function collectAstStaticObjectAliasCopiesFromAst(ast, source, identifierBindings) {
+function collectAstStaticObjectAliasCopiesFromAst(ast, source, identifierBindings, consumeWork, bindingNames) {
   const aliases = [];
   const resolveSourceName = (node) => resolveAstStaticAliasCopySourceName(node, aliases, identifierBindings);
   (0, import_walk.walkAstAncestor)(ast, {
     VariableDeclarator(node, ancestors) {
-      var _a, _b;
+      var _a, _b, _c;
+      if (bindingNames && ((_a = node.id) == null ? void 0 : _a.type) === "Identifier" && !bindingNames.has(node.id.name)) return;
+      consumeWork == null ? void 0 : consumeWork((aliases.length + 1) * (identifierBindings.length + 1));
       if (!node.init) {
         return;
       }
@@ -498,6 +529,7 @@ function collectAstStaticObjectAliasCopiesFromAst(ast, source, identifierBinding
       const scope = (0, import_bindings.getAstBindingScopeRange)(ancestors, source.length);
       const executionScope = (0, import_bindings.getAstExecutionScopeRange)(ancestors, source.length);
       const addAlias = (name, sourceName2, aliasNode) => {
+        if (bindingNames && !bindingNames.has(name)) return;
         if (!sourceName2 || sourceName2 === name || sourceName2.startsWith(`${name}.`)) {
           return;
         }
@@ -510,11 +542,11 @@ function collectAstStaticObjectAliasCopiesFromAst(ast, source, identifierBinding
           end: scope.end
         });
       };
-      if (((_a = node.id) == null ? void 0 : _a.type) === "Identifier") {
+      if (((_b = node.id) == null ? void 0 : _b.type) === "Identifier") {
         addAlias(node.id.name, resolveSourceName(node.init), node);
         return;
       }
-      if (((_b = node.id) == null ? void 0 : _b.type) !== "ObjectPattern") {
+      if (((_c = node.id) == null ? void 0 : _c.type) !== "ObjectPattern") {
         return;
       }
       const sourceName = resolveSourceName(node.init);
@@ -551,7 +583,7 @@ function resolveAstStaticAliasCopySourceName(node, aliases, identifierBindings)
   const suffix = lookup.aliasName.slice(lookup.rootName.length);
   return `${rootAlias.sourceName}${suffix}`;
 }
-function collectAstStaticAliasCopyWrites(writes, aliases, identifierBindings) {
+function collectAstStaticAliasCopyWrites(writes, aliases, identifierBindings, consumeWork) {
   const mirroredWrites = [];
   const seen = new Set(writes.map((write) => getAstIdentifierWriteKey(write)));
   const queue = [...writes];
@@ -571,6 +603,7 @@ function collectAstStaticAliasCopyWrites(writes, aliases, identifierBindings) {
   for (let index = 0; index < queue.length; index += 1) {
     const write = queue[index];
     for (const alias of aliases) {
+      consumeWork == null ? void 0 : consumeWork(2 * (identifierBindings.length + 1));
       if (!isAstStaticObjectAliasCopyActiveAtIndex(alias, write.index, identifierBindings)) {
         continue;
       }

package/dist/server/flow-surfaces/runjs-authoring/ast/static-values.d.ts

@@ -41,7 +41,7 @@ export declare function resolveAstResourceTypeExpression(node: any, source: stri
     expression: string;
 };
 export declare function resolveAstStaticStringValue(node: any, source: string): string | undefined;
-export declare function resolveAstStaticTemplateLiteralValue(node: any, source: string, stringBindings: StaticStringBinding[], identifierBindings: AstIdentifierBinding[]): string | undefined;
+export declare function resolveAstStaticTemplateLiteralValue(node: unknown, source: string, stringBindings: StaticStringBinding[], identifierBindings: AstIdentifierBinding[]): string | undefined;
 export declare function resolveAstAliasBinding<T extends SourceRange & {
     name: string;
 }>(name: string, index: number, aliases: T[], identifierBindings: AstIdentifierBinding[]): T | undefined;

package/dist/server/flow-surfaces/runjs-authoring/ast/static-values.js

@@ -321,12 +321,14 @@ function resolveAstStaticTemplateLiteralValue(node, source, stringBindings, iden
   let value = "";
   for (let index = 0; index < quasis.length; index += 1) {
     const quasi = quasis[index];
-    value += ((_a = quasi == null ? void 0 : quasi.value) == null ? void 0 : _a.cooked) ?? ((_b = quasi == null ? void 0 : quasi.value) == null ? void 0 : _b.raw) ?? "";
+    const text = ((_a = quasi == null ? void 0 : quasi.value) == null ? void 0 : _a.cooked) ?? ((_b = quasi == null ? void 0 : quasi.value) == null ? void 0 : _b.raw) ?? "";
+    if (value.length + text.length > import_constants.MAX_RUNJS_SOURCE_LENGTH) return void 0;
+    value += text;
     if (index >= expressions.length) {
       continue;
     }
     const expression = resolveAstResourceTypeExpression(expressions[index], source, stringBindings, identifierBindings);
-    if (expression.status !== "resolved") {
+    if (expression.status !== "resolved" || value.length + expression.value.length > import_constants.MAX_RUNJS_SOURCE_LENGTH) {
       return void 0;
     }
     value += expression.value;

package/dist/server/variables/allow-list.js

@@ -200,6 +200,24 @@ async function resolveFormAssignRulesVariableSource(ctx, contractNode) {
   const formNode = await getFlowModelNode(ctx, contractNode.parentId);
   return formNode && isFormAssignRulesContractPair(formNode, contractNode) ? readFormAssignRulesVariableSource(formNode) : void 0;
 }
+function readFormLinkageRulesSource(node) {
+  const steps = isObject(node.options.stepParams) ? node.options.stepParams : null;
+  const events = steps && isObject(steps.eventSettings) ? steps.eventSettings : null;
+  return { stepParams: { eventSettings: { linkageRules: events == null ? void 0 : events.linkageRules } } };
+}
+async function collectFormLinkageRuleSources(ctx, form) {
+  const grid = await getFlowModelChildNode(ctx, form.uid, "grid");
+  if (!grid || !isFormAssignRulesContractPair(form, grid)) return [];
+  if (!isReferenceFormGridNode(grid)) return [readFormLinkageRulesSource(grid)];
+  const targetUid = getReferenceFormGridTargetUid(grid);
+  const target = targetUid ? await getFlowModelNode(ctx, targetUid) : null;
+  if (!target || !isFormAssignRulesOwnerNode(target)) return [];
+  const targetGrid = await getFlowModelChildNode(ctx, target.uid, "grid");
+  if (!targetGrid || !isFormAssignRulesContractPair(target, targetGrid) || isReferenceFormGridNode(targetGrid)) {
+    return [];
+  }
+  return [readFormLinkageRulesSource(target), readFormLinkageRulesSource(targetGrid)];
+}
 function createRecordSlotCompilerOptions(ctx, currentNode) {
   let ancestors;
   return {
@@ -230,14 +248,30 @@ async function getFlowModelVariableContract(ctx, contractNode, runtimeNode, sour
   return contract;
 }
 async function createFlowModelVariableContractFromNode(ctx, contractNode, runtimeNode, source) {
-  const variableSource = source === "formAssignRules" ? await resolveFormAssignRulesVariableSource(ctx, contractNode) ?? {} : contractNode.options;
-  const prepared = (0, import_runjs_variable_dependencies.prepareFlowModelVariableSource)(
-    variableSource,
-    source === "formAssignRules" ? { isRunJsValuePath: isFormAssignRulesRunJsValuePath } : void 0
-  );
-  const contractSource = prepared.ok ? prepared.runJsTemplates.length ? [prepared.templateSource, ...prepared.runJsTemplates] : prepared.templateSource : {};
-  const result = analyzeVariableTemplateSafely(contractSource, { mode: "flow-model" });
-  const analysis = result.ok ? result.analysis : (0, import_variable_expression.analyzeVariableTemplate)({}, { mode: "flow-model" });
+  const sources = [];
+  if (source === "formAssignRules") {
+    sources.push(await resolveFormAssignRulesVariableSource(ctx, contractNode) ?? {});
+  } else {
+    const nodes = contractNode.uid === runtimeNode.uid ? [contractNode] : [contractNode, runtimeNode];
+    for (const node of nodes) {
+      sources.push(node.options);
+      if (isFormAssignRulesOwnerNode(node)) {
+        sources.push(...await collectFormLinkageRuleSources(ctx, node));
+      }
+    }
+  }
+  const paths = [];
+  for (const variableSource of sources) {
+    const item = (0, import_runjs_variable_dependencies.prepareFlowModelVariableSource)(
+      variableSource,
+      source === "formAssignRules" ? { isRunJsValuePath: isFormAssignRulesRunJsValuePath } : void 0
+    );
+    if (!item.ok) continue;
+    const contractSource = item.runJsTemplates.length ? [item.templateSource, ...item.runJsTemplates] : item.templateSource;
+    const result = analyzeVariableTemplateSafely(contractSource, { mode: "flow-model" });
+    if (result.ok) paths.push(...result.analysis.paths);
+  }
+  const analysis = { ...(0, import_variable_expression.analyzeVariableTemplate)({}, { mode: "flow-model" }), paths };
   return await (0, import_record_slot_policy.createFlowModelVariableContract)(analysis, createRecordSlotCompilerOptions(ctx, runtimeNode));
 }
 function getCurrentRoleNames(ctx) {
@@ -344,6 +378,25 @@ async function resolveFormAssignRulesContractNode(ctx, runtimeNode, contractMode
   const ancestorUids = await loadFlowModelAncestorUids(ctx, runtimeNode);
   return (ancestorUids == null ? void 0 : ancestorUids.has(contractNode.uid)) === true ? contractNode : null;
 }
+async function resolveReferenceBlockContractNode(ctx, runtimeNode, contractModelUid) {
+  const reference = await getFlowModelNode(ctx, contractModelUid);
+  if ((reference == null ? void 0 : reference.options.use) !== "ReferenceBlockModel") return null;
+  let current = reference;
+  const seen = /* @__PURE__ */ new Set([reference.uid]);
+  for (let depth = 0; depth < 20; depth++) {
+    const steps = isObject(current.options.stepParams) ? current.options.stepParams : null;
+    const settings = steps && isObject(steps.referenceSettings) ? steps.referenceSettings : null;
+    const target = settings && isObject(settings.target) ? settings.target : null;
+    const targetUid = typeof (target == null ? void 0 : target.targetUid) === "string" ? target.targetUid.trim() : "";
+    if (!targetUid || seen.has(targetUid)) return null;
+    seen.add(targetUid);
+    const node = await getFlowModelNode(ctx, targetUid);
+    if (!node) return null;
+    if (node.options.use !== "ReferenceBlockModel") return node.uid === runtimeNode.uid ? reference : null;
+    current = node;
+  }
+  return null;
+}
 function createPolicy(allowAll = false, allowedPaths = /* @__PURE__ */ new Set(), unrestrictedVariables = /* @__PURE__ */ new Set()) {
   return { allowAll, allowedPaths, unrestrictedVariables };
 }
@@ -438,8 +491,9 @@ async function authorizeVariablesResolve(ctx, options) {
   let contractNode = currentNode;
   let contractSource = "node";
   if (hasContractRd) {
-    contractNode = currentNode && contractModelUid ? await resolveFormAssignRulesContractNode(ctx, currentNode, contractModelUid) : null;
-    contractSource = "formAssignRules";
+    const reference = currentNode && contractModelUid ? await resolveReferenceBlockContractNode(ctx, currentNode, contractModelUid) : null;
+    contractNode = reference || (currentNode && contractModelUid ? await resolveFormAssignRulesContractNode(ctx, currentNode, contractModelUid) : null);
+    contractSource = reference ? "node" : "formAssignRules";
     if (!contractNode) {
       return denied(analysis, bindingPlan.contextParams, policy, recordSlotPolicies, flowModelUid || void 0);
     }

package/dist/server/variables/form-item-record-slot-resolvers.js

@@ -29,6 +29,7 @@ __export(form_item_record_slot_resolvers_exports, {
   createFormItemRecordSlotResolvers: () => createFormItemRecordSlotResolvers
 });
 module.exports = __toCommonJS(form_item_record_slot_resolvers_exports);
+const requestModelTrees = /* @__PURE__ */ new WeakMap();
 function isObject(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
@@ -153,8 +154,17 @@ async function loadModelTree(input, node) {
   if (options && getFormItems(options)) return options;
   const uid = isObject(node) && typeof node.uid === "string" ? node.uid : void 0;
   if (!uid || !input.ctx) return void 0;
+  let cache = requestModelTrees.get(input.ctx);
+  if (!cache) {
+    cache = /* @__PURE__ */ new Map();
+    requestModelTrees.set(input.ctx, cache);
+  }
+  const cached = cache.get(uid);
+  if (cached) return cached;
   const repository = input.ctx.db.getCollection("flowModels").repository;
-  return getModelOptions(await repository.findModelById(uid, { includeAsyncNode: true }));
+  const load = repository.findModelById(uid, { includeAsyncNode: true }).then(getModelOptions);
+  cache.set(uid, load);
+  return load;
 }
 async function findFormProvider(input, lineage) {
   for (const node of lineage) {
@@ -170,6 +180,7 @@ async function findFormProvider(input, lineage) {
 }
 function getConfiguredAssociationSlots(input, source, items) {
   var _a;
+  const exactAnchors = /* @__PURE__ */ new Map();
   const slots = /* @__PURE__ */ new Map();
   const fieldPaths = [];
   for (const item of items) {
@@ -184,8 +195,11 @@ function getConfiguredAssociationSlots(input, source, items) {
       slots.set(prefix.join("."), [...prefix]);
       current = edge.target;
     }
+    if (item.use === "FormAssociationItemModel" && prefix.length > 1 && prefix.length === fieldPath.length) {
+      exactAnchors.set(prefix.join("."), prefix.slice(0, -1));
+    }
   }
-  return { fieldPaths, slots: [...slots.values()] };
+  return { exactAnchors, fieldPaths, slots: [...slots.values()] };
 }
 async function resolveFormValues(input) {
   const lineage = await getLineage(input);
@@ -198,7 +212,10 @@ async function resolveFormValues(input) {
   for (const slot of configuredSlots.slots) {
     if (pathStartsWith(runtimePath, slot) && (!configured || slot.length > configured.length)) configured = slot;
   }
-  if (configured) return resolved(configured);
+  if (configured) {
+    const exactAnchor = configuredSlots.exactAnchors.get(runtimePath.join("."));
+    return resolved(exactAnchor || configured);
+  }
   const top = runtimePath[0];
   if (typeof top !== "string") return runtimePath.length ? { status: "deny" } : resolved([]);
   const field = callMethod(provider.collection.collection, "getField", top);

package/dist/server/variables/runjs-variable-dependencies.js

@@ -51,6 +51,8 @@ const MAX_FLOW_MODEL_VARIABLE_SOURCE_DEPTH = 128;
 const MAX_FLOW_MODEL_VARIABLE_SOURCE_NODES = 1e4;
 const MAX_FLOW_MODEL_VARIABLE_STRING_LENGTH = 256 * 1024;
 const MAX_FLOW_MODEL_VARIABLE_TOTAL_STRING_LENGTH = 1024 * 1024;
+const MAX_RUNJS_STATIC_BINDING_WORK = 1e5;
+const STATIC_BINDING_BUDGET_EXHAUSTED = Symbol("static binding budget exhausted");
 function getEnumerableDataEntries(value) {
   const descriptors = Object.getOwnPropertyDescriptors(value);
   const entries = [];
@@ -72,8 +74,23 @@ function readPersistedRunJsValue(entries) {
   if (typeof code !== "string" || version != null && typeof version !== "string") return;
   return { code, version };
 }
-function isPersistedRunJsPath(pathTail) {
-  return RUNJS_PATH_SUFFIXES.has(pathTail.slice(-3).join("."));
+function readDataProperty(value, key) {
+  var _a;
+  return value && typeof value === "object" ? (_a = Object.getOwnPropertyDescriptor(value, key)) == null ? void 0 : _a.value : void 0;
+}
+function isPersistedRunJsPath(pathTail, flowRegistry) {
+  const tail = pathTail.slice(-3);
+  if (RUNJS_PATH_SUFFIXES.has(tail.join("."))) return true;
+  if (tail[0] === "stepParams") {
+    const steps = readDataProperty(readDataProperty(flowRegistry, tail[1]), "steps");
+    if (readDataProperty(readDataProperty(steps, tail[2]), "use") === "runjs") return true;
+  }
+  const path = pathTail.join(".");
+  return /(?:^|\.)linkageRules\.value\.\d+\.actions\.\d+\.params\.value\.\d+\.value$/.test(path) || /(?:^|\.)formFilterBlockModelSettings\.defaultValues\.value\.\d+\.value$/.test(path);
+}
+function isPersistedRunJsStringPath(pathTail) {
+  const path = pathTail.join(".");
+  return /(?:^|\.)linkageRules\.value\.\d+\.actions\.\d+\.params\.value\.script$/.test(path) || /(?:^|\.)chartSettings\.configure\.chart\.(?:option|events)\.raw$/.test(path);
 }
 function createTraversalContainer(input, descriptors) {
   var _a;
@@ -292,18 +309,48 @@ function collectValidatedResolveJsonTemplates(value) {
   visit(value);
   return Array.from(templates);
 }
-function extractStaticVariableTemplates(code) {
-  const parsed = (0, import_parser.parseRunJsAuthoringAst)(code);
+function collectBindingDependencies(ast, consumeWork) {
+  const dependencies = /* @__PURE__ */ new Map();
+  (0, import_walk.walkAstSimple)(ast, {
+    VariableDeclarator(node) {
+      if (!node.init) return;
+      const names = [];
+      (0, import_static_values.collectAstPatternBindingIdentifiers)(node.id, (name) => names.push(name));
+      (0, import_walk.walkAstSimple)(node.init, {
+        Identifier(reference) {
+          const dependency = reference.name;
+          if (!dependency) return;
+          for (const name of names) {
+            consumeWork(1);
+            for (const [from, to] of [
+              [name, dependency],
+              [dependency, name]
+            ]) {
+              const related = dependencies.get(from) || /* @__PURE__ */ new Set();
+              related.add(to);
+              dependencies.set(from, related);
+            }
+          }
+        }
+      });
+    }
+  });
+  return dependencies;
+}
+function extractStaticVariableTemplates(code, parsed, consumeBindingWork) {
   if (!parsed.ast) return [];
   const identifierBindings = (0, import_static_bindings.collectAstIdentifierBindingsFromAst)(parsed.ast, code);
   if (hasUnsafeCtxUsage(parsed.ast, identifierBindings) || hasCtxMutation(parsed.ast, identifierBindings)) {
     return [];
   }
+  let bindingDependencies;
+  const bindingResults = /* @__PURE__ */ new Map();
+  let bindingBudgetExhausted = false;
   const functionCtxParameterCache = /* @__PURE__ */ new WeakMap();
   const templates = /* @__PURE__ */ new Set();
   (0, import_walk.walkAstAncestor)(parsed.ast, {
     CallExpression(node, ancestors) {
-      var _a, _b;
+      var _a, _b, _c, _d;
       const methodName = getDirectCtxMethodName(node.callee, identifierBindings);
       if (hasCtxParameterInFunctionAncestors(ancestors, functionCtxParameterCache)) return;
       if (methodName === "getVar") {
@@ -311,8 +358,61 @@ function extractStaticVariableTemplates(code) {
         if (template) templates.add(template);
         return;
       }
-      if (methodName !== "resolveJsonTemplate" || ((_b = node.arguments) == null ? void 0 : _b.length) !== 1) return;
-      const resolved = resolveStaticJsonValue(node.arguments[0], code);
+      if (methodName !== "resolveJsonTemplate" || !((_b = node.arguments) == null ? void 0 : _b.length) || node.arguments.length > 2) return;
+      if (node.arguments.length === 2) {
+        const options = (0, import_bindings.unwrapAstChainExpression)(node.arguments[1]);
+        if ((options == null ? void 0 : options.type) !== "ObjectExpression" || ((_c = options.properties) == null ? void 0 : _c.length) !== 0) return;
+      }
+      const argument = (0, import_bindings.unwrapAstChainExpression)(node.arguments[0]);
+      let resolved = resolveStaticJsonValue(argument, code);
+      if ((argument == null ? void 0 : argument.type) === "Identifier" && !bindingBudgetExhausted) {
+        try {
+          const name = argument.name || "";
+          let bindings = bindingResults.get(name);
+          if (!bindings) {
+            bindingDependencies ??= collectBindingDependencies(parsed.ast, consumeBindingWork);
+            const names = /* @__PURE__ */ new Set([name]);
+            for (const current of names) {
+              for (const dependency of bindingDependencies.get(current) || []) {
+                consumeBindingWork(1);
+                names.add(dependency);
+              }
+            }
+            bindings = {
+              names,
+              values: (0, import_static_bindings.collectStaticFilterValueBindingsFromAst)(
+                parsed.ast,
+                code,
+                identifierBindings,
+                consumeBindingWork,
+                names
+              )
+            };
+            bindingResults.set(name, bindings);
+          }
+          consumeBindingWork(bindings.values.length * (identifierBindings.length + 1));
+          resolved = resolveStaticJsonValue(
+            (_d = (0, import_static_values.resolveAstAliasBinding)(name, argument.start || 0, bindings.values, identifierBindings)) == null ? void 0 : _d.valueNode,
+            code
+          );
+          if (!resolved.ok) {
+            bindings.strings ??= (0, import_static_bindings.collectStaticStringBindingsFromAst)(
+              parsed.ast,
+              code,
+              [],
+              identifierBindings,
+              consumeBindingWork,
+              bindings.names
+            );
+            consumeBindingWork(bindings.strings.length * (identifierBindings.length + 1));
+            const staticString = (0, import_static_values.resolveRunJsStaticString)(argument, code, bindings.strings, identifierBindings);
+            if (typeof staticString === "string") resolved = { ok: true, value: staticString };
+          }
+        } catch (error) {
+          if (error !== STATIC_BINDING_BUDGET_EXHAUSTED) throw error;
+          bindingBudgetExhausted = true;
+        }
+      }
       if (!resolved.ok) return;
       collectValidatedResolveJsonTemplates(resolved.value).forEach((template) => templates.add(template));
     }
@@ -320,7 +420,7 @@ function extractStaticVariableTemplates(code) {
   return Array.from(templates);
 }
 function prepareFlowModelVariableSource(value, options = {}) {
-  var _a;
+  var _a, _b, _c;
   try {
     const templates = /* @__PURE__ */ new Set();
     const seen = /* @__PURE__ */ new WeakSet();
@@ -330,6 +430,36 @@ function prepareFlowModelVariableSource(value, options = {}) {
     let sourceCount = 0;
     let totalStringLength = 0;
     let totalSourceLength = 0;
+    let remainingBindingWork = MAX_RUNJS_STATIC_BINDING_WORK;
+    const consumeBindingWork = (work) => {
+      remainingBindingWork -= work;
+      if (remainingBindingWork < 0) throw STATIC_BINDING_BUDGET_EXHAUSTED;
+    };
+    const supplementalScripts = [];
+    const parsedSources = /* @__PURE__ */ new Map();
+    const getParsedSource = (code) => {
+      let parsed = parsedSources.get(code);
+      if (!parsed) {
+        parsed = (0, import_parser.parseRunJsAuthoringAst)(code, { allowLegacyTemplates: true });
+        parsedSources.set(code, parsed);
+      }
+      return parsed;
+    };
+    const extractRunJsDependencies = (code) => {
+      if (sourceCount < import_constants.MAX_RUNJS_SOURCES_PER_REQUEST && code.length <= import_constants.MAX_RUNJS_SOURCE_LENGTH && totalSourceLength + code.length <= import_constants.MAX_RUNJS_TOTAL_SOURCE_LENGTH) {
+        sourceCount += 1;
+        totalSourceLength += code.length;
+        extractStaticVariableTemplates(code, getParsedSource(code), consumeBindingWork).forEach(
+          (template) => templates.add(template)
+        );
+      }
+    };
+    const prepareRunJsCode = (code, version, preserveLegacyTemplates = false) => {
+      if (preserveLegacyTemplates) supplementalScripts.push(code);
+      else extractRunJsDependencies(code);
+      if (version === "v2" && !preserveLegacyTemplates || !code.includes("{{")) return "";
+      return (0, import_source.maskJavaScriptComments)(code, getParsedSource(code));
+    };
     while (stack.length) {
       const frame = stack.pop();
       if (!frame) break;
@@ -341,7 +471,8 @@ function prepareFlowModelVariableSource(value, options = {}) {
             return { ok: false };
           }
         }
-        defineTraversalValue(parent, key, input);
+        const prepared = typeof input === "string" && !options.isRunJsValuePath && isPersistedRunJsStringPath(pathTail) ? prepareRunJsCode(input, void 0, true) : input;
+        defineTraversalValue(parent, key, prepared);
         continue;
       }
       if (seen.has(input)) return { ok: false };
@@ -353,23 +484,24 @@ function prepareFlowModelVariableSource(value, options = {}) {
           return { ok: false };
         }
       }
-      const runJsPath = options.isRunJsValuePath ? options.isRunJsValuePath(pathTail) : isPersistedRunJsPath(pathTail);
+      const runJsPath = options.isRunJsValuePath ? options.isRunJsValuePath(pathTail) : frame.runJsValue || isPersistedRunJsPath(pathTail, frame.flowRegistry);
       const runJs = !Array.isArray(input) && runJsPath ? readPersistedRunJsValue(entries) : void 0;
       const output = createTraversalContainer(input, descriptors);
       defineTraversalValue(parent, key, output);
       if (runJs) {
         scheduledNodes += entries.length;
-        sourceCount += 1;
         totalStringLength += runJs.code.length + (((_a = runJs.version) == null ? void 0 : _a.length) || 0);
-        totalSourceLength += runJs.code.length;
-        if (scheduledNodes > MAX_FLOW_MODEL_VARIABLE_SOURCE_NODES || runJs.code.length > MAX_FLOW_MODEL_VARIABLE_STRING_LENGTH || runJs.version != null && runJs.version.length > MAX_FLOW_MODEL_VARIABLE_STRING_LENGTH || totalStringLength > MAX_FLOW_MODEL_VARIABLE_TOTAL_STRING_LENGTH || sourceCount > import_constants.MAX_RUNJS_SOURCES_PER_REQUEST || runJs.code.length > import_constants.MAX_RUNJS_SOURCE_LENGTH || totalSourceLength > import_constants.MAX_RUNJS_TOTAL_SOURCE_LENGTH) {
+        if (scheduledNodes > MAX_FLOW_MODEL_VARIABLE_SOURCE_NODES || runJs.code.length > MAX_FLOW_MODEL_VARIABLE_STRING_LENGTH || runJs.version != null && runJs.version.length > MAX_FLOW_MODEL_VARIABLE_STRING_LENGTH || totalStringLength > MAX_FLOW_MODEL_VARIABLE_TOTAL_STRING_LENGTH) {
           return { ok: false };
         }
+        const code = prepareRunJsCode(
+          runJs.code,
+          runJs.version,
+          !options.isRunJsValuePath && !RUNJS_PATH_SUFFIXES.has(pathTail.slice(-3).join("."))
+        );
         for (const [entryKey, entryValue] of entries) {
-          const preparedEntryValue = entryKey === "code" ? runJs.version === "v2" ? "" : (0, import_source.maskJavaScriptComments)(runJs.code) : entryValue;
-          defineTraversalValue(output, entryKey, preparedEntryValue);
+          defineTraversalValue(output, entryKey, entryKey === "code" ? code : entryValue);
         }
-        extractStaticVariableTemplates(runJs.code).forEach((template) => templates.add(template));
         continue;
       }
       if (entries.length && depth >= MAX_FLOW_MODEL_VARIABLE_SOURCE_DEPTH) return { ok: false };
@@ -383,10 +515,13 @@ function prepareFlowModelVariableSource(value, options = {}) {
           input: entryValue,
           key: entryKey,
           parent: output,
-          pathTail: options.isRunJsValuePath ? nextPath : nextPath.slice(-3)
+          pathTail: options.isRunJsValuePath ? nextPath : nextPath.slice(-12),
+          flowRegistry: entryKey === "stepParams" ? (_b = descriptors.flowRegistry) == null ? void 0 : _b.value : frame.flowRegistry,
+          runJsValue: entryKey === "defaultParams" && ((_c = descriptors.use) == null ? void 0 : _c.value) === "runjs"
         });
       }
     }
+    supplementalScripts.forEach(extractRunJsDependencies);
     return { ok: true, runJsTemplates: Array.from(templates), templateSource: root.value };
   } catch {
     return { ok: false };

package/package.json

@@ -4,7 +4,7 @@
   "displayName.zh-CN": "前端流引擎",
   "description": "",
   "description.zh-CN": "",
-  "version": "2.4.0-alpha.4",
+  "version": "2.4.0-alpha.6",
   "main": "./dist/server/index.js",
   "license": "Apache-2.0",
   "devDependencies": {
@@ -26,5 +26,5 @@
     "@nocobase/test": "2.x",
     "@nocobase/utils": "2.x"
   },
-  "gitHead": "527910882037ce1558ee6b0ef748208b8d6996bb"
+  "gitHead": "1fc4fcd17a0cd79912a642600bdc2103e2104bdb"
 }