@nocobase/utils 2.1.0-alpha.1 → 2.1.0-alpha.3

package/lib/client.d.ts

@@ -23,6 +23,7 @@ export * from './notification';
 export * from './number';
 export * from './parse-filter';
 export * from './registry';
+export * from './ses';
 export * from './i18n';
 export * from './isPortalInBody';
 export * from './parseHTML';

package/lib/client.js

@@ -60,6 +60,7 @@ __reExport(client_exports, require("./notification"), module.exports);
 __reExport(client_exports, require("./number"), module.exports);
 __reExport(client_exports, require("./parse-filter"), module.exports);
 __reExport(client_exports, require("./registry"), module.exports);
+__reExport(client_exports, require("./ses"), module.exports);
 __reExport(client_exports, require("./i18n"), module.exports);
 __reExport(client_exports, require("./isPortalInBody"), module.exports);
 __reExport(client_exports, require("./parseHTML"), module.exports);
@@ -90,6 +91,7 @@ __reExport(client_exports, require("./liquidjs"), module.exports);
   ...require("./number"),
   ...require("./parse-filter"),
   ...require("./registry"),
+  ...require("./ses"),
   ...require("./i18n"),
   ...require("./isPortalInBody"),
   ...require("./parseHTML"),

package/lib/index.d.ts

@@ -36,6 +36,7 @@ export * from './parsedValue';
 export * from './perf-hooks';
 export * from './registry';
 export * from './requireModule';
+export * from './ses';
 export * from './toposort';
 export * from './uid';
 export * from './url';

package/lib/index.js

@@ -72,6 +72,7 @@ __reExport(src_exports, require("./parsedValue"), module.exports);
 __reExport(src_exports, require("./perf-hooks"), module.exports);
 __reExport(src_exports, require("./registry"), module.exports);
 __reExport(src_exports, require("./requireModule"), module.exports);
+__reExport(src_exports, require("./ses"), module.exports);
 __reExport(src_exports, require("./toposort"), module.exports);
 __reExport(src_exports, require("./uid"), module.exports);
 __reExport(src_exports, require("./url"), module.exports);
@@ -111,6 +112,7 @@ __reExport(src_exports, require("./liquidjs"), module.exports);
   ...require("./perf-hooks"),
   ...require("./registry"),
   ...require("./requireModule"),
+  ...require("./ses"),
   ...require("./toposort"),
   ...require("./uid"),
   ...require("./url"),

package/lib/requireModule.js

@@ -79,7 +79,7 @@ async function importModule(m) {
     m = (0, import_url.pathToFileURL)(m).href;
   }
   const r = (await import(m)).default;
-  return r.__esModule ? r.default : r;
+  return (r == null ? void 0 : r.__esModule) ? r.default : r;
 }
 __name(importModule, "importModule");
 // Annotate the CommonJS export names for ESM import in node:

package/lib/ses.d.ts

@@ -0,0 +1,12 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+import type { LockdownOptions } from 'ses';
+import 'ses';
+export declare const BASE_BLOCKED_IDENTIFIERS: string[];
+export declare function lockdownSes(options?: LockdownOptions): void;

package/lib/ses.js

@@ -0,0 +1,127 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var ses_exports = {};
+__export(ses_exports, {
+  BASE_BLOCKED_IDENTIFIERS: () => BASE_BLOCKED_IDENTIFIERS,
+  lockdownSes: () => lockdownSes
+});
+module.exports = __toCommonJS(ses_exports);
+var import_ses = require("ses");
+const SES_LOCK_FLAG = Symbol.for("nocobase.utils.sesLockdown");
+const BUFFER_OVERRIDE_FLAG = Symbol.for("nocobase.utils.bufferOverrides");
+const BASE_BLOCKED_IDENTIFIERS = [
+  "globalThis",
+  "global",
+  "self",
+  "Function",
+  "AsyncFunction",
+  "GeneratorFunction",
+  "eval",
+  "Compartment",
+  "lockdown",
+  "harden",
+  "assert"
+];
+function isAlreadyLockedError(error) {
+  if (!error || typeof error !== "object") {
+    return false;
+  }
+  const message = error.message || "";
+  return message.includes("(SES_ALREADY_LOCKED_DOWN)");
+}
+__name(isAlreadyLockedError, "isAlreadyLockedError");
+function enableBufferPrototypeOverrides() {
+  const globalRef = globalThis;
+  if (globalRef[BUFFER_OVERRIDE_FLAG]) {
+    return;
+  }
+  const bufferCtor = globalRef.Buffer;
+  if (!bufferCtor || !bufferCtor.prototype) {
+    return;
+  }
+  const bufferPrototype = bufferCtor.prototype;
+  for (const key of Reflect.ownKeys(bufferPrototype)) {
+    const descriptor = Object.getOwnPropertyDescriptor(bufferPrototype, key);
+    if (!descriptor || typeof descriptor.value !== "function" || !descriptor.configurable) {
+      continue;
+    }
+    const original = descriptor.value;
+    const getter = /* @__PURE__ */ __name(function() {
+      return original;
+    }, "getter");
+    const setter = /* @__PURE__ */ __name(function(value) {
+      if (this === bufferPrototype) {
+        throw new TypeError(`Cannot assign to read only property '${String(key)}' of object 'Buffer.prototype'`);
+      }
+      Object.defineProperty(this, key, {
+        configurable: true,
+        enumerable: true,
+        writable: true,
+        value
+      });
+    }, "setter");
+    Object.defineProperty(getter, "originalValue", {
+      configurable: false,
+      enumerable: false,
+      writable: false,
+      value: original
+    });
+    Object.defineProperty(bufferPrototype, key, {
+      configurable: descriptor.configurable,
+      enumerable: descriptor.enumerable,
+      get: getter,
+      set: setter
+    });
+  }
+  globalRef[BUFFER_OVERRIDE_FLAG] = true;
+}
+__name(enableBufferPrototypeOverrides, "enableBufferPrototypeOverrides");
+function lockdownSes(options) {
+  enableBufferPrototypeOverrides();
+  const globalRef = globalThis;
+  if (globalRef[SES_LOCK_FLAG]) {
+    return;
+  }
+  if (typeof lockdown !== "function") {
+    throw new Error("SES lockdown is unavailable in the current runtime environment.");
+  }
+  try {
+    lockdown(options);
+  } catch (error) {
+    if (!isAlreadyLockedError(error)) {
+      throw error;
+    }
+  }
+  globalRef[SES_LOCK_FLAG] = true;
+}
+__name(lockdownSes, "lockdownSes");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  BASE_BLOCKED_IDENTIFIERS,
+  lockdownSes
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocobase/utils",
-  "version": "2.1.0-alpha.1",
+  "version": "2.1.0-alpha.3",
   "main": "lib/index.js",
   "types": "./lib/index.d.ts",
   "license": "AGPL-3.0",
@@ -16,7 +16,8 @@
     "handlebars": "^4.7.8",
     "liquidjs": "^10.23.0",
     "multer": "^1.4.5-lts.2",
-    "object-path": "^0.11.8"
+    "object-path": "^0.11.8",
+    "ses": "^1.14.0"
   },
-  "gitHead": "d27baf21569643d6fa83f882233f4e90eb5b89f1"
+  "gitHead": "b4d7448b938c1c3be8b2299ad32c6cbe012dd4ea"
 }

package/plugin-symlink.js

@@ -93,6 +93,14 @@ async function createPluginSymLink(pluginName, sourcePath, nodeModulesPath, plug
     return;
   }
 
+  const distClientIndexPath = resolve(sourcePath, pluginName, 'dist', 'client', 'index.js');
+
+  if (await fs.pathExists(distClientIndexPath)) {
+    // Update the mtime of distClientIndexPath
+    const now = new Date();
+    await fs.utimes(distClientIndexPath, now, now);
+  }
+
   try {
     const targetPath = resolve(sourcePath, pluginName);