everything-dev 1.5.0 → 1.7.0

package/src/plugin.ts

@@ -1,4 +1,5 @@
-import { readFileSync, writeFileSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { Effect } from "effect";
 import { syncApiContractBridge } from "./api-contract";
@@ -46,9 +47,14 @@ import { type AppConfig, type AppOrchestrator, startApp } from "./dev-session";
 import {
   buildRegistryConfigUrlForNetwork,
   fetchBosConfigFromFastKv,
+  fetchPluginFromRegistry,
+  fetchRemotePluginManifest,
   getRegistryNamespaceForAccount,
   getRegistryNamespaceForNetwork,
+  type PluginManifest,
+  parsePluginBosUrl,
 } from "./fastkv";
+import { computeSriHashForUrl } from "./integrity";
 import { addFunctionCallAccessKey, ensureNearCli, executeTransaction } from "./near-cli";
 import { getNetworkIdForAccount } from "./network";
 import { createPlugin, z } from "./sdk";
@@ -56,6 +62,35 @@ import { syncAndGenerateSharedUi } from "./shared";
 import type { BosConfig, RuntimeConfig, SourceMode } from "./types";
 import { run } from "./utils/run";
 
+function ensureEnvFile(configDir: string): void {
+  const envPath = join(configDir, ".env");
+  const examplePath = join(configDir, ".env.example");
+
+  if (existsSync(envPath)) return;
+
+  if (!existsSync(examplePath)) return;
+
+  const content = readFileSync(examplePath, "utf-8");
+  const lines = content.split("\n");
+
+  const secret = randomBytes(32).toString("base64url");
+
+  const updated = lines
+    .map((line) => {
+      if (/^BETTER_AUTH_SECRET=/.test(line)) {
+        return `BETTER_AUTH_SECRET=${secret}`;
+      }
+      if (/^BETTER_AUTH_URL=/.test(line)) {
+        return `BETTER_AUTH_URL=http://localhost:3000`;
+      }
+      return line;
+    })
+    .join("\n");
+
+  writeFileSync(envPath, updated);
+  console.log(`[CLI] Created .env from .env.example with generated BETTER_AUTH_SECRET`);
+}
+
 const DEFAULT_DEV_CONFIG: AppConfig = {
   host: "local",
   ui: "local",
@@ -167,6 +202,9 @@ function determineProcesses(
   const processes: string[] = [];
   if (config.ssr && config.ui === "local") processes.push("ui-ssr");
   if (config.ui === "local") processes.push("ui");
+  if (localPackages.includes("auth") && runtimeConfig?.auth?.source === "local") {
+    processes.push("auth");
+  }
   if (config.api === "local" && !config.proxy) processes.push("api");
   for (const pkg of localPackages) {
     if (pkg.startsWith("plugin:")) {
@@ -256,6 +294,9 @@ function listPluginAttachments(config: BosConfig | null) {
       source: attachment.development?.startsWith("local:")
         ? ("local" as const)
         : ("remote" as const),
+      integrity: attachment.integrity,
+      version: attachment.version,
+      name: attachment.name,
     }))
     .sort((a, b) => a.key.localeCompare(b.key));
 }
@@ -522,7 +563,74 @@ export default createPlugin({
         };
       }
 
-      const key = sanitizePluginKey(input.as ?? defaultPluginKey(input.source));
+      const pluginRef = parsePluginBosUrl(input.source);
+      let production = input.production ?? input.source;
+      let integrity: string | undefined;
+      let version: string | undefined;
+      let name: string | undefined;
+
+      if (pluginRef) {
+        try {
+          const entry = await fetchPluginFromRegistry(pluginRef.accountId, pluginRef.pluginName);
+          if (!entry) {
+            return {
+              status: "error" as const,
+              key: "",
+              error: `Plugin not found in registry: bos://${pluginRef.accountId}/plugins/${pluginRef.pluginName}`,
+            };
+          }
+
+          const manifest = entry.manifest;
+          if (
+            manifest.schemaVersion !== 1 ||
+            manifest.kind !== "every-plugin/manifest" ||
+            !manifest.plugin?.name ||
+            !manifest.plugin?.version ||
+            !manifest.runtime?.remoteEntry
+          ) {
+            return {
+              status: "error" as const,
+              key: "",
+              error: `Invalid plugin manifest for bos://${pluginRef.accountId}/plugins/${pluginRef.pluginName}`,
+            };
+          }
+
+          production = entry.metadata.cdnUrl || input.production || input.source;
+          name = manifest.plugin.name;
+          version = manifest.plugin.version;
+        } catch (error) {
+          return {
+            status: "error" as const,
+            key: "",
+            error: `Failed to resolve plugin from registry: ${error instanceof Error ? error.message : error}`,
+          };
+        }
+      }
+
+      if (!input.source.startsWith("local:") && !pluginRef && production.startsWith("https://")) {
+        try {
+          const manifest = await fetchRemotePluginManifest(production);
+          if (manifest) {
+            name = manifest.plugin.name;
+            version = manifest.plugin.version;
+          }
+        } catch {
+          console.warn(`[plugin add] Could not fetch manifest from ${production}`);
+        }
+      }
+
+      if (!input.source.startsWith("local:") && production.startsWith("https://")) {
+        try {
+          const computed = await computeSriHashForUrl(production);
+          if (computed) integrity = computed;
+        } catch {
+          console.warn(`[plugin add] Could not compute integrity for ${production}`);
+        }
+      }
+
+      const key = sanitizePluginKey(
+        input.as ?? (pluginRef ? pluginRef.pluginName : defaultPluginKey(input.source)),
+      );
       const existing = deps.bosConfig.plugins?.[key];
       const nextPlugins = { ...(deps.bosConfig.plugins ?? {}) };
 
@@ -534,7 +642,10 @@ export default createPlugin({
           }
         : {
             ...(existing ?? {}),
-            production: input.production ?? input.source,
+            production,
+            ...(integrity ? { integrity } : {}),
+            ...(name ? { name } : {}),
+            ...(version ? { version } : {}),
           };
 
       deps.bosConfig = {
@@ -550,6 +661,8 @@ export default createPlugin({
         key,
         development: deps.bosConfig.plugins?.[key]?.development,
         production: deps.bosConfig.plugins?.[key]?.production,
+        integrity,
+        version,
       };
     }),
 
@@ -633,7 +746,11 @@ export default createPlugin({
           };
         }
 
-        const pkgJson = (await Bun.file(pkgPath).json()) as { scripts?: Record<string, string> };
+        const pkgJson = (await Bun.file(pkgPath).json()) as {
+          scripts?: Record<string, string>;
+          name?: string;
+          version?: string;
+        };
         const script = pkgJson.scripts?.deploy ? "deploy" : "build";
 
         const { stdout, stderr, exitCode } = (await run("bun", ["run", script], {
@@ -654,7 +771,21 @@ export default createPlugin({
         if (stdout.trim()) process.stdout.write(stdout);
         if (stderr.trim()) process.stderr.write(stderr);
 
-        const publishedUrl = extractPublishedUrl(`${stdout}\n${stderr}`);
+        let publishedUrl = extractPublishedUrl(`${stdout}\n${stderr}`);
+
+        let manifest: PluginManifest | null = null;
+        if (publishedUrl) {
+          manifest = await fetchRemotePluginManifest(publishedUrl);
+        } else if (attachment.production) {
+          manifest = await fetchRemotePluginManifest(attachment.production);
+          if (manifest) {
+            publishedUrl = attachment.production;
+          }
+        }
+
+        const integrity = publishedUrl ? await computeSriHashForUrl(publishedUrl) : null;
+        const version = manifest?.plugin.version ?? pkgJson.version;
+
         if (publishedUrl) {
           deps.bosConfig = {
             ...deps.bosConfig,
@@ -663,10 +794,65 @@ export default createPlugin({
               [input.key]: {
                 ...(deps.bosConfig.plugins?.[input.key] ?? {}),
                 production: publishedUrl,
+                ...(integrity ? { integrity } : {}),
+                ...(manifest?.plugin.name ? { name: manifest.plugin.name } : {}),
+                ...(version ? { version } : {}),
               },
             },
           };
           await saveBosConfig(deps.configDir, deps.bosConfig);
+
+          const account = deps.bosConfig.account;
+          const network = getNetworkIdForAccount(account);
+          if (manifest && version) {
+            try {
+              const registryEntries: Record<string, string> = {
+                [`plugins/${account}/${input.key}/manifest.json`]: JSON.stringify(manifest),
+                [`plugins/${account}/${input.key}/metadata`]: JSON.stringify({
+                  title: null,
+                  description: null,
+                  repoUrl: deps.bosConfig.repository ?? null,
+                  version,
+                  publishedAt: new Date().toISOString(),
+                  cdnUrl: publishedUrl,
+                  integrity,
+                }),
+                [`plugins/${account}/${input.key}/versions/${version}/manifest.json`]:
+                  JSON.stringify(manifest),
+              };
+              const payload = JSON.stringify(registryEntries);
+              const argsBase64 = Buffer.from(payload).toString("base64");
+              const privateKey = process.env.NEAR_PRIVATE_KEY || process.env.BOS_NEAR_PRIVATE_KEY;
+
+              await Effect.runPromise(ensureNearCli);
+              try {
+                await Effect.runPromise(
+                  executeTransaction({
+                    account,
+                    contract: getRegistryNamespaceForNetwork(network),
+                    method: "__fastdata_kv",
+                    argsBase64,
+                    network,
+                    privateKey,
+                    gas: "50Tgas",
+                    deposit: "0NEAR",
+                  }),
+                );
+              } catch (registryError) {
+                const txHash = extractTransactionHash(registryError);
+                if (!txHash) {
+                  console.warn(
+                    `[publish] Plugin registry write failed: ${registryError instanceof Error ? registryError.message : registryError}`,
+                  );
+                }
+              }
+            } catch (registryError) {
+              console.warn(
+                `[publish] Plugin registry write skipped: ${registryError instanceof Error ? registryError.message : registryError}`,
+              );
+            }
+          }
+
           await refreshApiContractBridge(deps.configDir);
         }
 
@@ -676,11 +862,15 @@ export default createPlugin({
           path: localPath,
           script,
           production: publishedUrl ?? attachment.production,
+          integrity: integrity ?? undefined,
+          version: version ?? undefined,
         };
       },
     ),
 
     dev: builder.dev.handler(async ({ input }: { input: DevOptions }) => {
+      ensureEnvFile(deps.configDir);
+
       const localPackages = detectLocalPackages(
         deps.bosConfig ?? undefined,
         deps.runtimeConfig ?? undefined,
@@ -741,6 +931,7 @@ export default createPlugin({
       const developmentRuntime = buildRuntimeConfig(deps.bosConfig, {
         uiSource: appConfig.ui,
         apiSource: appConfig.api,
+        authSource: refreshedLocalPackages.includes("auth") ? "local" : "remote",
         hostUrl: `http://localhost:${hostPort}`,
         proxy: env.API_PROXY,
         env: "development",
@@ -778,6 +969,8 @@ export default createPlugin({
     }),
 
     start: builder.start.handler(async ({ input }: { input: StartOptions }) => {
+      ensureEnvFile(deps.configDir);
+
       let remoteConfig: BosConfig | null = null;
 
       if (input.account && input.domain) {
@@ -808,6 +1001,7 @@ export default createPlugin({
       const runtimeConfig = buildRuntimeConfig(config, {
         uiSource: "remote",
         apiSource: "remote",
+        authSource: "remote",
         hostUrl: `http://localhost:${port}`,
         env: "production",
         plugins: runtimePlugins,
@@ -867,6 +1061,7 @@ export default createPlugin({
       const runtimeConfig = buildRuntimeConfig(deps.bosConfig, {
         uiSource: deps.bosConfig.app.ui?.development ? "local" : "remote",
         apiSource: deps.bosConfig.app.api?.development ? "local" : "remote",
+        authSource: deps.bosConfig.app.auth?.development ? "local" : "remote",
         hostUrl: resolveDevelopmentHostUrl(deps.bosConfig.app.host.development),
         env: "development",
         plugins: deps.runtimeConfig?.plugins,
@@ -1203,6 +1398,8 @@ export default createPlugin({
             await runBunInstall(directory);
           }
 
+          ensureEnvFile(directory);
+
           return {
             status: "initialized" as const,
             directory,

package/src/types.ts

@@ -1,5 +1,29 @@
 import { z } from "./sdk";
 
+export interface BosConfigInput extends Record<string, unknown> {
+  extends?: string;
+  account?: string;
+  domain?: string;
+  testnet?: string;
+  template?: string;
+  gateway?: {
+    development?: string;
+    production?: string;
+    account?: string;
+  };
+  development?: string;
+  production?: string;
+  integrity?: string;
+  name?: string;
+  version?: string;
+  proxy?: string;
+  variables?: Record<string, string>;
+  secrets?: string[];
+  app?: Record<string, Record<string, unknown>>;
+  shared?: Record<string, Record<string, Record<string, unknown>>>;
+  plugins?: Record<string, BosConfigInput>;
+}
+
 export const SourceModeSchema = z.enum(["local", "remote"]);
 export type SourceMode = z.infer<typeof SourceModeSchema>;
 
@@ -28,7 +52,7 @@ export const ApiPluginConfigSchema = z.object({
   name: z.string(),
   development: z.string().optional(),
   production: z.string().optional(),
-  productionIntegrity: z.string().optional(),
+  integrity: z.string().optional(),
   proxy: z.string().optional(),
   variables: z.record(z.string(), z.string()).optional(),
   secrets: z.array(z.string()).optional(),
@@ -39,7 +63,9 @@ export const BosPluginRefSchema = z.object({
   extends: z.string().optional(),
   development: z.string().optional(),
   production: z.string().optional(),
-  productionIntegrity: z.string().optional(),
+  integrity: z.string().optional(),
+  name: z.string().optional(),
+  version: z.string().optional(),
   proxy: z.string().optional(),
   variables: z.record(z.string(), z.string()).optional(),
   secrets: z.array(z.string()).optional(),
@@ -65,7 +91,7 @@ export const UiConfigSchema = z.object({
   name: z.string(),
   development: z.string().optional(),
   production: z.string().optional(),
-  productionIntegrity: z.string().optional(),
+  integrity: z.string().optional(),
   ssr: z.string().optional(),
   ssrIntegrity: z.string().optional(),
 });
@@ -74,7 +100,7 @@ export type UiConfig = z.infer<typeof UiConfigSchema>;
 export const HostConfigSchema = z.object({
   development: z.string(),
   production: z.string(),
-  productionIntegrity: z.string().optional(),
+  integrity: z.string().optional(),
   secrets: z.array(z.string()).optional(),
 });
 export type HostConfig = z.infer<typeof HostConfigSchema>;
@@ -106,6 +132,7 @@ export const BosConfigSchema = z.object({
     host: HostConfigSchema,
     ui: UiConfigSchema,
     api: ApiPluginConfigSchema,
+    auth: ApiPluginConfigSchema.optional(),
   }),
 });
 export type BosConfig = z.infer<typeof BosConfigSchema>;
@@ -136,6 +163,13 @@ export const RuntimeConfigSchema = z.object({
     variables: z.record(z.string(), z.string()).optional(),
     secrets: z.array(z.string()).optional(),
   }),
+  auth: FederationEntrySchema.extend({
+    localPath: z.string().optional(),
+    port: z.number().optional(),
+    proxy: z.string().optional(),
+    variables: z.record(z.string(), z.string()).optional(),
+    secrets: z.array(z.string()).optional(),
+  }).optional(),
   plugins: z.record(z.string(), RuntimePluginConfigSchema).optional(),
 });
 export type RuntimeConfig = z.infer<typeof RuntimeConfigSchema>;