@anonympins/fingerprint 0.7.0 → 0.7.2

package/src/php/WordPress/package.php

@@ -0,0 +1,218 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * Script d'empaquetage automatique du plugin WordPress.
+ * Copie les classes du moteur PHP, les assets JS et génère un ZIP prêt à être installé.
+ *
+ * Usage:
+ *   php src/php/WordPress/package.php
+ */
+
+if (!extension_loaded('zip')) {
+    fwrite(STDERR, "Erreur : L'extension PHP 'zip' est requise pour créer l'archive.\n");
+    exit(1);
+}
+
+$rootDir = dirname(__DIR__, 3);
+$phpSrcDir = $rootDir . '/src/php';
+$jsSrcDir = $rootDir . '/src/js';
+$wpDir = $phpSrcDir . '/WordPress';
+$distDir = $rootDir . '/public';
+$pluginSlug = 'fingerprint-wordpress';
+$buildDir = $distDir . '/' . $pluginSlug;
+$zipFile = $distDir . '/' . $pluginSlug . '.zip';
+
+echo "==> Début du packaging du plugin WordPress...\n";
+
+// 1. Nettoyage du répertoire de build précédent
+if (is_dir($buildDir)) {
+    $iterator = new RecursiveIteratorIterator(
+        new RecursiveDirectoryIterator($buildDir, FilesystemIterator::SKIP_DOTS),
+        RecursiveIteratorIterator::CHILD_FIRST
+    );
+    foreach ($iterator as $item) {
+        $item->isDir() ? rmdir($item->getPathname()) : unlink($item->getPathname());
+    }
+    rmdir($buildDir);
+}
+if (file_exists($zipFile)) {
+    unlink($zipFile);
+}
+
+@mkdir($buildDir . '/src', 0777, true);
+@mkdir($buildDir . '/assets', 0777, true);
+@mkdir($buildDir . '/languages', 0777, true);
+
+/**
+ * Compile un fichier .po gettext en binaire .mo compatible WordPress.
+ */
+function compilePoToMo(string $poFile, string $moFile): bool {
+    if (!file_exists($poFile)) return false;
+    $content = file_get_contents($poFile);
+    if ($content === false) return false;
+
+    $entries = [];
+    $currentMsgId = null;
+    $currentMsgStr = null;
+    $lines = explode("\n", str_replace(["\r\n", "\r"], "\n", $content));
+    $state = '';
+
+    foreach ($lines as $line) {
+        $line = trim($line);
+        if ($line === '' || str_starts_with($line, '#')) continue;
+        if (preg_match('/^msgid\s+"(.*)"$/', $line, $m)) {
+            if ($currentMsgId !== null && $currentMsgStr !== null) {
+                $entries[$currentMsgId] = $currentMsgStr;
+            }
+            $currentMsgId = stripcslashes($m[1]);
+            $currentMsgStr = null;
+            $state = 'msgid';
+        } elseif (preg_match('/^msgstr\s+"(.*)"$/', $line, $m)) {
+            $currentMsgStr = stripcslashes($m[1]);
+            $state = 'msgstr';
+        } elseif (preg_match('/^"(.*)"$/', $line, $m)) {
+            if ($state === 'msgid') {
+                $currentMsgId .= stripcslashes($m[1]);
+            } elseif ($state === 'msgstr') {
+                $currentMsgStr .= stripcslashes($m[1]);
+            }
+        }
+    }
+    if ($currentMsgId !== null && $currentMsgStr !== null) {
+        $entries[$currentMsgId] = $currentMsgStr;
+    }
+
+    ksort($entries);
+    $count = count($entries);
+    $originals = '';
+    $translations = '';
+    $origTable = [];
+    $transTable = [];
+
+    $headerSize = 28;
+    $tablesSize = $count * 8 * 2;
+    $curOffset = $headerSize + $tablesSize;
+
+    foreach ($entries as $orig => $trans) {
+        $origLen = strlen($orig);
+        $origTable[] = ['len' => $origLen, 'off' => $curOffset + strlen($originals)];
+        $originals .= $orig . "\0";
+    }
+
+    $transOffset = $curOffset + strlen($originals);
+    foreach ($entries as $orig => $trans) {
+        $transLen = strlen($trans);
+        $transTable[] = ['len' => $transLen, 'off' => $transOffset + strlen($translations)];
+        $translations .= $trans . "\0";
+    }
+
+    $mo = pack('V*',
+        0x950412de, // Magic Number
+        0,          // Revision
+        $count,     // Number of strings
+        28,         // Offset of table with original string lengths and offsets
+        28 + ($count * 8), // Offset of table with translation string lengths and offsets
+        0, 0        // Hash table size and offset
+    );
+
+    foreach ($origTable as $t) {
+        $mo .= pack('VV', $t['len'], $t['off']);
+    }
+    foreach ($transTable as $t) {
+        $mo .= pack('VV', $t['len'], $t['off']);
+    }
+    $mo .= $originals . $translations;
+    return file_put_contents($moFile, $mo) !== false;
+}
+
+// 2. Copie des fichiers principaux du plugin WordPress
+copy($wpDir . '/fingerprint-wordpress.php', $buildDir . '/fingerprint-wordpress.php');
+copy($wpDir . '/WpDbStore.php', $buildDir . '/WpDbStore.php');
+
+// 3. Copie des assets clients nécessaires (solveur PoW)
+$solverSource = $jsSrcDir . '/pow.solver.inline.js';
+if (file_exists($solverSource)) {
+    copy($solverSource, $buildDir . '/assets/pow.solver.inline.js');
+}
+
+// 4. Copie et compilation des fichiers de traduction i18n (FR / DE / EN)
+$langSourceDir = $wpDir . '/languages';
+if (is_dir($langSourceDir)) {
+    foreach (glob($langSourceDir . '/*.po') as $poFile) {
+        $baseName = basename($poFile);
+        copy($poFile, $buildDir . '/languages/' . $baseName);
+        $moTarget = $buildDir . '/languages/' . preg_replace('/\.po$/', '.mo', $baseName);
+        compilePoToMo($poFile, $moTarget);
+        compilePoToMo($poFile, $langSourceDir . '/' . preg_replace('/\.po$/', '.mo', $baseName));
+    }
+}
+
+// 5. Copie récursive de la bibliothèque PHP (src/php -> build/src), en excluant les dossiers de dev
+$excludeDirs = ['WordPress', 'Tests', 'bin'];
+$phpIterator = new RecursiveIteratorIterator(
+    new RecursiveDirectoryIterator($phpSrcDir, FilesystemIterator::SKIP_DOTS),
+    RecursiveIteratorIterator::SELF_FIRST
+);
+
+foreach ($phpIterator as $item) {
+    $relativePath = substr($item->getPathname(), strlen($phpSrcDir) + 1);
+    $topDir = explode(DIRECTORY_SEPARATOR, str_replace('/', DIRECTORY_SEPARATOR, $relativePath))[0];
+
+    if (in_array($topDir, $excludeDirs, true)) {
+        continue;
+    }
+
+    $destPath = $buildDir . '/src/' . $relativePath;
+    if ($item->isDir()) {
+        if (!is_dir($destPath)) {
+            mkdir($destPath, 0777, true);
+        }
+    } else {
+        copy($item->getPathname(), $destPath);
+    }
+}
+
+echo "==> Fichiers copiés dans {$buildDir}\n";
+
+// 5. Création de l'archive ZIP
+$zip = new ZipArchive();
+if ($zip->open($zipFile, ZipArchive::CREATE | ZipArchive::OVERWRITE) !== true) {
+    fwrite(STDERR, "Erreur : Impossible de créer le fichier {$zipFile}\n");
+    exit(1);
+}
+
+$distIterator = new RecursiveIteratorIterator(
+    new RecursiveDirectoryIterator($buildDir, FilesystemIterator::SKIP_DOTS),
+    RecursiveIteratorIterator::LEAVES_ONLY
+);
+
+foreach ($distIterator as $file) {
+    if (!$file->isDir()) {
+        $filePath = $file->getPathname();
+        // Préserve le préfixe du dossier racine dans le ZIP : fingerprint-wordpress/...
+        $relativePath = $pluginSlug . '/' . substr($filePath, strlen($buildDir) + 1);
+        $zip->addFile($filePath, str_replace('\\', '/', $relativePath));
+    }
+}
+function removeDirectory(string $dir): void
+{
+    if (!is_dir($dir)) {
+        return;
+    }
+    $iterator = new RecursiveIteratorIterator(
+        new RecursiveDirectoryIterator($dir, FilesystemIterator::SKIP_DOTS),
+        RecursiveIteratorIterator::CHILD_FIRST
+    );
+    foreach ($iterator as $item) {
+        $item->isDir() ? rmdir($item->getPathname()) : unlink($item->getPathname());
+    }
+    rmdir($dir);
+}
+$zip->close();
+removeDirectory($buildDir);
+$sizeKb = round(filesize($zipFile) / 1024, 2);
+echo "==> Archive ZIP générée avec succès :\n";
+echo "    Fichier : {$zipFile} ({$sizeKb} Ko)\n";
+echo "    Prêt à être installé via wp-admin ou déployé en production !\n";

package/src/php/bin/auto-tune.php

@@ -1,118 +1,118 @@
-<?php
-
-declare(strict_types=1);
-
-/**
- * CLI Script d'auto-tuning périodique des configurations de sécurité.
- * Ce script lit la configuration courante, récupère les logs, les assainit,
- * exécute l'optimiseur génétique, et écrase le fichier JSON d'origine.
- */
-
-$autoloaderPaths = [
-    __DIR__ . '/../../vendor/autoload.php',
-    __DIR__ . '/../vendor/autoload.php',
-    __DIR__ . '/../../../autoload.php',
-];
-
-$autoloaded = false;
-foreach ($autoloaderPaths as $path) {
-    if (file_exists($path)) {
-        require_once $path;
-        $autoloaded = true;
-        break;
-    }
-}
-
-if (!$autoloaded) {
-    fwrite(STDERR, "Erreur : Impossible de charger l'autoloader. Exécutez 'composer install'.\n");
-    exit(1);
-}
-
-use Anonympins\Fingerprint\Optimization\Optimization;
-use Anonympins\Fingerprint\Store\StoreManager;
-use Anonympins\Fingerprint\Utils\RequestUtils;
-
-// 1. Récupération des arguments CLI
-$configPath = $argv[1] ?? null;
-if (!$configPath) {
-    echo "Usage: php auto-tune.php [chemin_vers_security-config.json]\n";
-    exit(1);
-}
-
-if (!file_exists($configPath)) {
-    fwrite(STDERR, "Erreur : Fichier de configuration introuvable : {$configPath}\n");
-    exit(1);
-}
-
-$config = json_decode(file_get_contents($configPath), true);
-if (json_last_error() !== JSON_ERROR_NONE) {
-    fwrite(STDERR, "Erreur : Fichier de configuration JSON invalide.\n");
-    exit(1);
-}
-
-// 2. Connexion au store pour récupérer les logs accumulés
-$store = StoreManager::getStore();
-if (!$store) {
-    fwrite(STDERR, "Erreur : Aucun store de persistance actif.\n");
-    exit(1);
-}
-
-$rawTrafficLogs = $store->get('traffic_logs') ?? [];
-if (empty($rawTrafficLogs)) {
-    echo "[AutoTuning] Aucun log de trafic disponible pour l'optimisation.\n";
-    exit(0);
-}
-
-// 3. Nettoyage des données pour prévenir l'empoisonnement (Sybil attacks)
-$sanitizedLogs = RequestUtils::sanitizeTrafficData($rawTrafficLogs);
-
-$minDataPoints = $config['autotuning']['minDataPoints'] ?? 200;
-if (count($sanitizedLogs) < $minDataPoints) {
-    echo "[AutoTuning] Reporté : Pas assez de données assainies (" . count($sanitizedLogs) . "/{$minDataPoints}).\n";
-    exit(0);
-}
-
-echo "[AutoTuning] Lancement de l'optimisation sur " . count($sanitizedLogs) . " données de trafic...\n";
-
-// 4. Résolution du Front de Pareto
-$paretoFront = Optimization::solveFullSecurityTuning(['trafficData' => $sanitizedLogs]);
-if (empty($paretoFront)) {
-    fwrite(STDERR, "[AutoTuning] L'optimisation n'a retourné aucun résultat.\n");
-    exit(1);
-}
-
-// 5. Sélection de la solution la plus équilibrée
-$bestSolution = $paretoFront[0];
-$minDistance = sqrt(pow($bestSolution['objectives'][0], 2) + pow($bestSolution['objectives'][1], 2));
-foreach ($paretoFront as $candidate) {
-    $distance = sqrt(pow($candidate['objectives'][0], 2) + pow($candidate['objectives'][1], 2));
-    if ($distance < $minDistance) {
-        $minDistance = $distance;
-        $bestSolution = $candidate;
-    }
-}
-
-$newConfig = $bestSolution['solution'];
-$maxChangeVelocity = 0.15; // Inertie de 15% maximum par cycle
-
-$applyInertialUpdate = function (array &$current, array $target) use ($maxChangeVelocity) {
-    $sumCurrent = array_sum($current);
-    if ($sumCurrent === 0) return;
-    $sumTarget = 0;
-    foreach ($current as $k => $v) {
-        if (isset($target[$k])) $sumTarget += $target[$k];
-    }
-    $ratio = ($sumTarget - $sumCurrent) / $sumCurrent;
-    $factor = 1 + max(-$maxChangeVelocity, min($maxChangeVelocity, $ratio));
-    foreach ($current as $k => &$v) {
-        if (isset($target[$k])) $v *= $factor;
-    }
-};
-
-$applyInertialUpdate($config['thresholds'], $newConfig['thresholds']);
-$applyInertialUpdate($config['weights'], $newConfig['weights']);
-$applyInertialUpdate($config['patterns'], $newConfig['patterns']);
-
-// 6. Écrasement propre du fichier de configuration original
-file_put_contents($configPath, json_encode($config, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES));
-echo "[AutoTuning] Succès : Fichier {$configPath} mis à jour avec les paramètres optimisés.\n";
+<?php
+
+declare(strict_types=1);
+
+/**
+ * Periodic security configuration auto-tuning CLI script.
+ * Reads current configuration, prunes and sanitizes traffic logs,
+ * executes the genetic optimizer, and writes back the optimized profile.
+ */
+
+$autoloaderPaths = [
+    __DIR__ . '/../../vendor/autoload.php',
+    __DIR__ . '/../vendor/autoload.php',
+    __DIR__ . '/../../../autoload.php',
+];
+
+$autoloaded = false;
+foreach ($autoloaderPaths as $path) {
+    if (file_exists($path)) {
+        require_once $path;
+        $autoloaded = true;
+        break;
+    }
+}
+
+if (!$autoloaded) {
+    fwrite(STDERR, "Error: Unable to load autoloader. Run 'composer install'.\n");
+    exit(1);
+}
+
+use Anonympins\Fingerprint\Optimization\Optimization;
+use Anonympins\Fingerprint\Store\StoreManager;
+use Anonympins\Fingerprint\Utils\RequestUtils;
+
+// 1. Récupération des arguments CLI
+$configPath = $argv[1] ?? null;
+if (!$configPath) {
+    echo "Usage: php auto-tune.php [path_to_security-config.json]\n";
+    exit(1);
+}
+
+if (!file_exists($configPath)) {
+    fwrite(STDERR, "Error: Configuration file not found: {$configPath}\n");
+    exit(1);
+}
+
+$config = json_decode(file_get_contents($configPath), true);
+if (json_last_error() !== JSON_ERROR_NONE) {
+    fwrite(STDERR, "Error: Invalid JSON configuration file.\n");
+    exit(1);
+}
+
+// 2. Connect to datastore to retrieve accumulated traffic logs
+$store = StoreManager::getStore();
+if (!$store) {
+    fwrite(STDERR, "Error: No active persistent datastore available.\n");
+    exit(1);
+}
+
+$rawTrafficLogs = $store->get('traffic_logs') ?? [];
+if (empty($rawTrafficLogs)) {
+    echo "[AutoTuning] No traffic logs available for optimization.\n";
+    exit(0);
+}
+
+// 3. Sanitize data to prevent poisoning / Sybil attacks
+$sanitizedLogs = RequestUtils::sanitizeTrafficData($rawTrafficLogs);
+
+$minDataPoints = $config['autotuning']['minDataPoints'] ?? 200;
+if (count($sanitizedLogs) < $minDataPoints) {
+    echo "[AutoTuning] Postponed: Insufficient sanitized logs (" . count($sanitizedLogs) . "/{$minDataPoints}).\n";
+    exit(0);
+}
+
+echo "[AutoTuning] Starting optimization pass on " . count($sanitizedLogs) . " traffic data points...\n";
+
+// 4. Compute Pareto front
+$paretoFront = Optimization::solveFullSecurityTuning(['trafficData' => $sanitizedLogs]);
+if (empty($paretoFront)) {
+    fwrite(STDERR, "[AutoTuning] Optimization returned no solutions.\n");
+    exit(1);
+}
+
+// 5. Select the most balanced solution (closest to origin)
+$bestSolution = $paretoFront[0];
+$minDistance = sqrt(pow($bestSolution['objectives'][0], 2) + pow($bestSolution['objectives'][1], 2));
+foreach ($paretoFront as $candidate) {
+    $distance = sqrt(pow($candidate['objectives'][0], 2) + pow($candidate['objectives'][1], 2));
+    if ($distance < $minDistance) {
+        $minDistance = $distance;
+        $bestSolution = $candidate;
+    }
+}
+
+$newConfig = $bestSolution['solution'];
+$maxChangeVelocity = 0.15; // Max 15% inertial step per cycle
+
+$applyInertialUpdate = function (array &$current, array $target) use ($maxChangeVelocity) {
+    $sumCurrent = array_sum($current);
+    if ($sumCurrent === 0) return;
+    $sumTarget = 0;
+    foreach ($current as $k => $v) {
+        if (isset($target[$k])) $sumTarget += $target[$k];
+    }
+    $ratio = ($sumTarget - $sumCurrent) / $sumCurrent;
+    $factor = 1 + max(-$maxChangeVelocity, min($maxChangeVelocity, $ratio));
+    foreach ($current as $k => &$v) {
+        if (isset($target[$k])) $v *= $factor;
+    }
+};
+
+$applyInertialUpdate($config['thresholds'], $newConfig['thresholds']);
+$applyInertialUpdate($config['weights'], $newConfig['weights']);
+$applyInertialUpdate($config['patterns'], $newConfig['patterns']);
+
+// 6. Write back optimized parameters to configuration file
+file_put_contents($configPath, json_encode($config, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES));
+echo "[AutoTuning] Success: File {$configPath} updated with optimized parameters.\n";