Add plugin entry: xcode

[vburojevic]

What the plugin does

Tracks every Xcode build and test on the machine with zero per-project
configuration — the tracker learns DerivedData roots from the builds
themselves — and shows live progress, verdicts, errors and failed tests with
file:line, per-project history and trends. The same panel streams any booted
iOS simulator over hardware H.264 with full touch input (tap, drag, flick,
long-press, trackpad pinch, ⌘V paste, keyboard), a device picker ranked by
what your builds actually target, and SwiftUI preview rendering with diffs
against the last run (Stills).

Source

• https://github.com/vburojevic/bb-plugin-xcode.git, range ^0.2.0
• Released tag: v0.2.0 (annotated, on main), MIT licensed, public repo

Plugin checks

• npx tsc --noEmit clean; vitest run — 55 files, 728 passed / 3 skipped
• bb plugin build produces dist/server.js, dist/app.js, dist/app.css

Marketplace checks

• npm run build and npm run check (liveness) both pass — 64 entries
• Icon vendored at icons/xcode-52038a9f.svg (stroke glyph, alpha-mask safe)

Security facts for reviewers

• The simulator capture host (serve-sim, pinned 0.1.45) binds loopback only
  behind a route allowlist; the plugin has no public viewer, exposure
  command, or shared-port declaration.
• Model-facing simulator tools and their CLI equivalents are off by
  default behind an allowAgentCapture setting, re-checked per call.
• Tracked builds execute only /usr/bin/xcodebuild, path-confined to the
  invoking thread's checkout, with an environment allowlist.
• Full model: SECURITY.md

🤖 Generated with Claude Code