@ampless/backend 1.0.0-alpha.33 → 1.0.0-alpha.35

package/dist/events/processor-trusted.d.ts

@@ -25,7 +25,7 @@ interface CreateProcessorTrustedHandlerOpts {
  * SQS-driven trusted plugin executor. Trusted plugins get a runtime
  * context with `listPublishedPosts` (one Query against the byStatus
  * GSI) and `writePublicAsset` (S3 PutObject under
- * `public/plugins/{name}/{key}`).
+ * `public/plugins/{instanceId ?? name}/{key}`).
  *
  * Built-in: rebuilds the site-settings JSON cache at
  * `public/site-settings.json` whenever a `site.settings.updated`

package/dist/events/processor-trusted.js

@@ -8,7 +8,9 @@ import {
   QueryCommand
 } from "@aws-sdk/lib-dynamodb";
 import {
-  formatPublicAssetUrl
+  formatPublicAssetUrl,
+  isValidPluginKey,
+  validatePublicAssetKey
 } from "ampless";
 
 // src/events/posttag-sync.ts
@@ -56,7 +58,27 @@ function safeParse(s) {
 function createProcessorTrustedHandler(opts) {
   const trustedPlugins = (opts.plugins ?? []).filter(
     (p) => typeof p === "object" && p.trust_level === "trusted"
-  );
+  ).filter((p) => {
+    const ns = p.instanceId ?? p.name;
+    if (!isValidPluginKey(ns)) {
+      console.warn(
+        `[trusted-processor] plugin "${p.name}" (instanceId="${p.instanceId ?? "(none)"}") has invalid namespace "${ns}". Must match /^[a-zA-Z0-9_-]+$/. Plugin skipped \u2014 no hooks will run for it.`
+      );
+      return false;
+    }
+    return true;
+  });
+  const seenNamespaces = /* @__PURE__ */ new Set();
+  for (const plugin of trustedPlugins) {
+    const ns = plugin.instanceId ?? plugin.name;
+    if (seenNamespaces.has(ns)) {
+      console.warn(
+        `[trusted-processor] duplicate plugin namespace "${ns}" detected in trusted plugins. Set distinct \`instanceId\` on each instance to disambiguate writePublicAsset output.`
+      );
+    }
+    seenNamespaces.add(ns);
+  }
+  const warnedWritePublicAssetCapability = /* @__PURE__ */ new Set();
   const s3 = new S3Client({});
   const ddb = DynamoDBDocumentClient.from(new DynamoDBClient({}));
   const BUCKET = requireEnv("AMPLESS_BUCKET_NAME");
@@ -97,11 +119,23 @@ function createProcessorTrustedHandler(opts) {
     return items;
   }
   function makeContext(plugin) {
+    const namespace = plugin.instanceId ?? plugin.name;
+    const label = plugin.instanceId ? `${plugin.name}#${plugin.instanceId}` : plugin.name;
     return {
       site: opts.site,
       listPublishedPosts: () => listPublished(),
       async writePublicAsset(key, body, contentType) {
-        const objectKey = `public/plugins/${plugin.name}/${key}`;
+        const keyError = validatePublicAssetKey(key);
+        if (keyError) {
+          throw new Error(`[${plugin.name}] writePublicAsset: ${keyError}`);
+        }
+        if (plugin.capabilities && !plugin.capabilities.includes("writePublicAsset") && !warnedWritePublicAssetCapability.has(label)) {
+          console.warn(
+            `[trusted-processor] ${label}: called ctx.writePublicAsset() but "writePublicAsset" is not in declared capabilities. Add it so admin UI / capability gates see the surface.`
+          );
+          warnedWritePublicAssetCapability.add(label);
+        }
+        const objectKey = `public/plugins/${namespace}/${key}`;
         await s3.send(
           new PutObjectCommand({
             Bucket: BUCKET,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ampless/backend",
-  "version": "1.0.0-alpha.33",
+  "version": "1.0.0-alpha.35",
   "description": "Amplify Gen 2 backend factories for ampless: auth, data, storage, event processors, API key renewer",
   "license": "MIT",
   "type": "module",
@@ -65,8 +65,8 @@
     "@smithy/protocol-http": "^5.4.4",
     "@smithy/signature-v4": "^5.4.4",
     "fflate": "^0.8.3",
-    "ampless": "1.0.0-alpha.18",
-    "@ampless/mcp-server": "1.0.0-alpha.22"
+    "ampless": "1.0.0-alpha.20",
+    "@ampless/mcp-server": "1.0.0-alpha.24"
   },
   "peerDependencies": {
     "@aws-amplify/backend": "^1",