@bsb/base 9.3.0 → 9.4.0

package/lib/schemas/service-default0.json

@@ -7,7 +7,7 @@
       "description": "Test event with string parameters",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -39,7 +39,7 @@
       "description": "Handle system startup notification",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -72,7 +72,7 @@
       "description": "Calculate with two numbers",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -100,7 +100,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "number"
         },
@@ -118,7 +118,7 @@
       "description": "Validate data against a schema",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -144,7 +144,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -178,7 +178,7 @@
       "description": "System-wide alert broadcast",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -225,7 +225,7 @@
       "description": "Listen for system shutdown broadcasts",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -256,7 +256,7 @@
   "pluginType": "service",
   "configSchema": {
     "anyvaliVersion": "1.0",
-    "schemaVersion": "1",
+    "schemaVersion": "1.1",
     "root": {
       "kind": "object",
       "properties": {

package/lib/schemas/service-default1.json

@@ -7,7 +7,7 @@
       "description": "Emitted when data processing is complete",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -43,7 +43,7 @@
       "description": "Handle incoming data for processing",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -79,7 +79,7 @@
       "description": "Request calculation from external service",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -115,7 +115,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "number"
         },
@@ -133,7 +133,7 @@
       "description": "Transform text according to specified operation",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -165,7 +165,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "string"
         },
@@ -183,7 +183,7 @@
       "description": "Calculate with two numbers",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -209,7 +209,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "number"
         },
@@ -227,7 +227,7 @@
       "description": "Broadcast service status updates",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -272,7 +272,7 @@
       "description": "Listen for configuration update broadcasts",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -310,7 +310,7 @@
   "pluginType": "service",
   "configSchema": {
     "anyvaliVersion": "1.0",
-    "schemaVersion": "1",
+    "schemaVersion": "1.1",
     "root": {
       "kind": "optional",
       "inner": {

package/lib/schemas/service-default2.json

@@ -7,7 +7,7 @@
       "description": "Emitted when a task is completed",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -43,7 +43,7 @@
       "description": "Handle new task assignments",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -85,7 +85,7 @@
       "description": "Request resource allocation",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -117,7 +117,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -156,7 +156,7 @@
       "description": "Calculate with two numbers",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -182,7 +182,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "number"
         },
@@ -200,7 +200,7 @@
       "description": "Perform health check",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -222,7 +222,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -267,7 +267,7 @@
       "description": "Broadcast performance metrics",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -307,7 +307,7 @@
       "description": "Listen for emergency stop broadcasts",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -338,7 +338,7 @@
   "pluginType": "service",
   "configSchema": {
     "anyvaliVersion": "1.0",
-    "schemaVersion": "1",
+    "schemaVersion": "1.1",
     "root": {
       "kind": "optional",
       "inner": {

package/lib/schemas/service-default3.json

@@ -7,7 +7,7 @@
       "description": "Calculate with two numbers",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -33,7 +33,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "number"
         },
@@ -51,7 +51,7 @@
       "description": "Reverse a string",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -73,7 +73,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "string"
         },
@@ -90,7 +90,7 @@
   "pluginType": "service",
   "configSchema": {
     "anyvaliVersion": "1.0",
-    "schemaVersion": "1",
+    "schemaVersion": "1.1",
     "root": {
       "kind": "optional",
       "inner": {

package/lib/schemas/service-default4.json

@@ -7,7 +7,7 @@
       "description": "Reverse text string",
       "inputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "object",
           "properties": {
@@ -29,7 +29,7 @@
       },
       "outputSchema": {
         "anyvaliVersion": "1.0",
-        "schemaVersion": "1",
+        "schemaVersion": "1.1",
         "root": {
           "kind": "string"
         },
@@ -46,7 +46,7 @@
   "pluginType": "service",
   "configSchema": {
     "anyvaliVersion": "1.0",
-    "schemaVersion": "1",
+    "schemaVersion": "1.1",
     "root": {
       "kind": "optional",
       "inner": {

package/lib/scripts/bsb-plugin-cli.js

@@ -117,7 +117,9 @@ function collectFilesRecursive(dirPath, predicate) {
         for (const entry of entries) {
             const fullPath = path.join(current, entry.name);
             if (entry.isDirectory()) {
-                stack.push(fullPath);
+                if (!entry.name.startsWith('.')) {
+                    stack.push(fullPath);
+                }
             }
             else if (entry.isFile() && predicate(fullPath)) {
                 files.push(fullPath);
@@ -289,6 +291,94 @@ function resolveBsbBasePath() {
         return null;
     }
 }
+const RESTRICTED_PATTERNS = [
+    { pattern: /\bprocess\.env\b/, name: 'process.env', message: 'Use BSB config system instead', skipForPluginType: 'config' },
+    { pattern: /\bprocess\.exit\b/, name: 'process.exit', message: 'Throw an error instead — BSB manages the process lifecycle' },
+    { pattern: /\bprocess\.cwd\b/, name: 'process.cwd', message: 'Use the cwd provided by BSB constructor args' },
+    { pattern: /\bprocess\.argv\b/, name: 'process.argv', message: 'CLI arguments are managed by BSB' },
+    { pattern: /\b__dirname\b/, name: '__dirname', message: 'Use BSB-provided paths from constructor args' },
+    { pattern: /\b__filename\b/, name: '__filename', message: 'Use BSB-provided paths from constructor args' },
+    { pattern: /\bconsole\.\w+/, name: 'console', message: 'Use this.log (BSB observable) instead', skipForPluginType: 'observable' },
+    { pattern: /['"](?:node:)?child_process['"]/, name: 'child_process', message: 'Spawning child processes is not allowed in BSB plugins' },
+    { pattern: /['"](?:node:)?cluster['"]/, name: 'cluster', message: 'Cluster management is handled by BSB' },
+    { pattern: /\beval\s*\(/, name: 'eval()', message: 'eval() is not allowed in BSB plugins' },
+    { pattern: /\bnew\s+Function\s*\(/, name: 'new Function()', message: 'Dynamic function construction is not allowed in BSB plugins' },
+    { pattern: /\bglobal\.\w/, name: 'global', message: 'Global state mutation is not allowed in BSB plugins' },
+    { pattern: /\bglobalThis\.\w/, name: 'globalThis', message: 'Global state mutation is not allowed in BSB plugins' },
+    { pattern: /\brequire\s*\(/, name: 'require()', message: 'Use ESM imports instead', allowKey: 'require' },
+    { pattern: /['"](?:node:)?worker_threads['"]/, name: 'worker_threads', message: 'Worker threads are managed by BSB', allowKey: 'worker_threads' },
+];
+function validateRestrictedAPIs(plugins) {
+    const packageJson = readPackageJson();
+    const allowList = Array.isArray(packageJson.bsb?.allow) ? packageJson.bsb.allow : [];
+    const allowedKeys = new Set(allowList.filter((k) => k === 'require' || k === 'worker_threads'));
+    const activePatterns = RESTRICTED_PATTERNS.filter((p) => !p.allowKey || !allowedKeys.has(p.allowKey));
+    if (activePatterns.length === 0) {
+        return;
+    }
+    const violations = [];
+    for (const plugin of plugins) {
+        const pluginType = plugin.name.startsWith('observable-') ? 'observable' :
+            plugin.name.startsWith('config-') ? 'config' : 'other';
+        const pluginPatterns = activePatterns.filter((p) => !p.skipForPluginType || p.skipForPluginType !== pluginType);
+        const tsFiles = collectFilesRecursive(plugin.srcDir, (filePath) => {
+            const ext = path.extname(filePath).toLowerCase();
+            return ext === '.ts' || ext === '.tsx';
+        });
+        for (const filePath of tsFiles) {
+            const content = fs.readFileSync(filePath, 'utf-8');
+            const lines = content.split('\n');
+            let inBlockComment = false;
+            for (let i = 0; i < lines.length; i++) {
+                let line = lines[i];
+                if (inBlockComment) {
+                    const endIdx = line.indexOf('*/');
+                    if (endIdx === -1)
+                        continue;
+                    line = line.slice(endIdx + 2);
+                    inBlockComment = false;
+                }
+                const blockStart = line.indexOf('/*');
+                if (blockStart !== -1) {
+                    const blockEnd = line.indexOf('*/', blockStart + 2);
+                    if (blockEnd !== -1) {
+                        line = line.slice(0, blockStart) + line.slice(blockEnd + 2);
+                    }
+                    else {
+                        line = line.slice(0, blockStart);
+                        inBlockComment = true;
+                    }
+                }
+                const trimmed = line.trim();
+                if (trimmed.startsWith('//'))
+                    continue;
+                if (trimmed.startsWith('import type '))
+                    continue;
+                const relPath = normalizePath(path.relative(CWD, filePath));
+                for (const restricted of pluginPatterns) {
+                    if (restricted.pattern.test(line)) {
+                        violations.push({
+                            file: relPath,
+                            line: i + 1,
+                            name: restricted.name,
+                            message: restricted.message,
+                        });
+                    }
+                }
+            }
+        }
+    }
+    if (violations.length > 0) {
+        log('\n=== Restricted API Usage Detected ===\n', 'red');
+        for (const v of violations) {
+            log(`  ${v.file}:${v.line} — ${v.name}`, 'red');
+            log(`    ${v.message}`, 'yellow');
+        }
+        log(`\n${violations.length} violation(s) found. BSB plugins cannot use these APIs.\n`, 'red');
+        process.exit(1);
+    }
+    success('Source validation passed (no restricted API usage)');
+}
 // Detect plugin structure
 function detectPluginStructure() {
     const srcDir = path.join(CWD, 'src');
@@ -812,9 +902,11 @@ async function build(options = {}) {
     else {
         info('Skipping clean for incremental rebuild');
     }
+    // Step 5: Validate restricted API usage in plugin source
+    validateRestrictedAPIs(plugins);
     // Hook: beforeCompile
     runHook('beforeCompile');
-    // Step 5: Compile TypeScript (virtual clients in src/.bsb/clients/ compile with the project)
+    // Step 6: Compile TypeScript (virtual clients in src/.bsb/clients/ compile with the project)
     if (options.incremental) {
         exec(`npx tsc --incremental --tsBuildInfoFile "${normalizePath(TSC_BUILD_INFO_PATH)}"`, 'Compiling TypeScript incrementally');
     }
@@ -823,7 +915,7 @@ async function build(options = {}) {
     }
     // Hook: afterCompile
     runHook('afterCompile');
-    // Step 6: Copy non-TypeScript assets for each plugin
+    // Step 7: Copy non-TypeScript assets for each plugin
     const shouldCopyAllAssets = !options.changedPaths || changedPaths.length === 0 || assetChanged || !fs.existsSync(path.join(CWD, 'lib'));
     if (shouldCopyAllAssets) {
         for (const plugin of plugins) {
@@ -833,7 +925,7 @@ async function build(options = {}) {
     else {
         info('Skipping asset copy (unchanged)');
     }
-    // Step 7: Copy extracted schemas to lib/schemas/
+    // Step 8: Copy extracted schemas to lib/schemas/
     const shouldCopySchemas = runSchemaPipeline || !hasLibSchemas();
     if (shouldCopySchemas) {
         copySchemasToLib();
@@ -841,7 +933,7 @@ async function build(options = {}) {
     else {
         info('Skipping schema copy (unchanged)');
     }
-    // Step 8: Generate per-plugin metadata JSON (needs compiled JS for Config.metadata)
+    // Step 9: Generate per-plugin metadata JSON (needs compiled JS for Config.metadata)
     const shouldGenerateMetadata = runSchemaPipeline ||
         packageChanged ||
         cache.metadataInputsHash !== metadataInputsHash ||
@@ -854,14 +946,14 @@ async function build(options = {}) {
     else {
         info('Skipping plugin metadata generation (unchanged)');
     }
-    // Step 9: Generate root bsb-plugin.json (aggregates all per-plugin metadata)
+    // Step 10: Generate root bsb-plugin.json (aggregates all per-plugin metadata)
     if (shouldGenerateMetadata || !fs.existsSync(path.join(CWD, 'bsb-plugin.json'))) {
         generateRootPluginJson();
     }
     else {
         info('Skipping bsb-plugin.json generation (unchanged)');
     }
-    // Step 10: Generate root bsb-tests.json (default ignore entries)
+    // Step 11: Generate root bsb-tests.json (default ignore entries)
     if (shouldGenerateMetadata || !fs.existsSync(path.join(CWD, 'bsb-tests.json'))) {
         generateRootTestsJson(plugins.map(p => ({ id: p.name })));
     }