@objectstack/core 0.8.2 → 0.9.1

package/dist/index.d.ts

@@ -10,5 +10,9 @@ export * from './types.js';
 export * from './logger.js';
 export * from './plugin-loader.js';
 export * from './enhanced-kernel.js';
+export * from './api-registry.js';
+export * from './api-registry-plugin.js';
+export * as QA from './qa/index.js';
+export * from './security/index.js';
 export type { Logger, IHttpServer, IHttpRequest, IHttpResponse, RouteHandler, Middleware, IDataEngine, DriverInterface } from '@objectstack/spec/contracts';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AAGrC,YAAY,EACR,MAAM,EACN,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,UAAU,EACV,WAAW,EACX,eAAe,EAClB,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,eAAe,CAAC;AAGpC,cAAc,qBAAqB,CAAC;AAGpC,YAAY,EACR,MAAM,EACN,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,UAAU,EACV,WAAW,EACX,eAAe,EAClB,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -10,3 +10,8 @@ export * from './types.js';
 export * from './logger.js';
 export * from './plugin-loader.js';
 export * from './enhanced-kernel.js';
+export * from './api-registry.js';
+export * from './api-registry-plugin.js';
+export * as QA from './qa/index.js';
+// Export security utilities
+export * from './security/index.js';

package/dist/logger.d.ts

@@ -20,6 +20,7 @@ export declare class ObjectLogger implements Logger {
     private isNode;
     private pinoLogger?;
     private pinoInstance?;
+    private require?;
     constructor(config?: Partial<LoggerConfig>);
     /**
      * Initialize Pino logger for Node.js

package/dist/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAY,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAE1D;;;;;;;;;;;;;;GAcG;AACH,qBAAa,YAAa,YAAW,MAAM;IACvC,OAAO,CAAC,MAAM,CAAkJ;IAChK,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,UAAU,CAAC,CAAM;IACzB,OAAO,CAAC,YAAY,CAAC,CAAM;gBAEf,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM;IAwB9C;;OAEG;IACH,OAAO,CAAC,cAAc;IA+EtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAqBvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAsCxB;;OAEG;IACH,OAAO,CAAC,UAAU;IAelB;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAQxD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAQvD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAQvD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IASvE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IASvE;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,YAAY;IAYjD;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY;IAIzD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ9B;;OAEG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;CAG7C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAEzE"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAY,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAE1D;;;;;;;;;;;;;;GAcG;AACH,qBAAa,YAAa,YAAW,MAAM;IACvC,OAAO,CAAC,MAAM,CAAkJ;IAChK,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,UAAU,CAAC,CAAM;IACzB,OAAO,CAAC,YAAY,CAAC,CAAM;IAC3B,OAAO,CAAC,OAAO,CAAC,CAAM;gBAEV,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM;IAwB9C;;OAEG;IACH,OAAO,CAAC,cAAc;IAuGtB;;OAEG;IACH,OAAO,CAAC,eAAe;IAqBvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAsCxB;;OAEG;IACH,OAAO,CAAC,UAAU;IAelB;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAQxD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAQvD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAQvD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IASvE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IASvE;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,YAAY;IAYjD;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY;IAIzD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ9B;;OAEG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;CAG7C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAEzE"}

package/dist/logger.js

@@ -42,8 +42,12 @@ export class ObjectLogger {
         if (!this.isNode)
             return;
         try {
-            // Dynamic import for Pino (Node.js only)
-            const pino = require('pino');
+            // Create require function dynamically for Node.js (avoids bundling issues in browser)
+            // @ts-ignore - dynamic import of Node.js module
+            const { createRequire } = eval('require("module")');
+            this.require = createRequire(import.meta.url);
+            // Synchronous import for Pino using createRequire (works in ESM)
+            const pino = this.require('pino');
             // Build Pino options
             const pinoOptions = {
                 level: this.config.level,
@@ -60,15 +64,35 @@ export class ObjectLogger {
             const targets = [];
             // Console transport
             if (this.config.format === 'pretty') {
-                targets.push({
-                    target: 'pino-pretty',
-                    options: {
-                        colorize: true,
-                        translateTime: 'SYS:standard',
-                        ignore: 'pid,hostname'
-                    },
-                    level: this.config.level
-                });
+                // Check if pino-pretty is available
+                let hasPretty = false;
+                try {
+                    this.require.resolve('pino-pretty');
+                    hasPretty = true;
+                }
+                catch (e) {
+                    // ignore
+                }
+                if (hasPretty) {
+                    targets.push({
+                        target: 'pino-pretty',
+                        options: {
+                            colorize: true,
+                            translateTime: 'SYS:standard',
+                            ignore: 'pid,hostname'
+                        },
+                        level: this.config.level
+                    });
+                }
+                else {
+                    console.warn('[Logger] pino-pretty not found. Install it for pretty logging: pnpm add -D pino-pretty');
+                    // Fallback to text/simple
+                    targets.push({
+                        target: 'pino/file',
+                        options: { destination: 1 },
+                        level: this.config.level
+                    });
+                }
             }
             else if (this.config.format === 'json') {
                 // JSON to stdout

package/dist/plugin-loader.d.ts

@@ -28,10 +28,11 @@ export interface ServiceRegistration {
     dependencies?: string[];
 }
 /**
- * Plugin Configuration Validator
+ * Plugin Configuration Validator Interface
  * Uses Zod for runtime validation of plugin configurations
+ * @deprecated Use the PluginConfigValidator class from security module instead
  */
-export interface PluginConfigValidator {
+export interface IPluginConfigValidator {
     schema: z.ZodSchema;
     validate(config: any): any;
 }

package/dist/plugin-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../src/plugin-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,oBAAY,gBAAgB;IACxB,iDAAiD;IACjD,SAAS,cAAc;IACvB,4CAA4C;IAC5C,SAAS,cAAc;IACvB,sDAAsD;IACtD,MAAM,WAAW;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IAClC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,MAAM;IAC1C,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAEhB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IAE3B,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,mCAAmC;IACnC,WAAW,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE5C,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,IAAI,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,YAAY;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,gBAAgB,CAA+C;IACvE,OAAO,CAAC,gBAAgB,CAA+B;IACvD,OAAO,CAAC,cAAc,CAA4C;gBAEtD,MAAM,EAAE,MAAM;IAI1B;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiD3D;;OAEG;IACH,sBAAsB,CAAC,YAAY,EAAE,mBAAmB,GAAG,IAAI;IAS/D;;OAEG;IACG,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IA8B/D;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI;IAOjD;;;;OAIG;IACH,0BAA0B,IAAI,MAAM,EAAE;IAoCtC;;OAEG;IACG,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkCxE;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKjC;;OAEG;IACH,gBAAgB,IAAI,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC;IAM/C,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,uBAAuB;IAc/B,OAAO,CAAC,yBAAyB;IAmBjC,OAAO,CAAC,sBAAsB;IAK9B,OAAO,CAAC,oBAAoB;YAWd,qBAAqB;YAarB,mBAAmB;YAanB,sBAAsB;YAMtB,gBAAgB;YAiBhB,qBAAqB;CAMtC"}
+{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../src/plugin-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,oBAAY,gBAAgB;IACxB,iDAAiD;IACjD,SAAS,cAAc;IACvB,4CAA4C;IAC5C,SAAS,cAAc;IACvB,sDAAsD;IACtD,MAAM,WAAW;CACpB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,MAAM;IAC1C,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAEhB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IAE3B,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,mCAAmC;IACnC,WAAW,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE5C,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,IAAI,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,YAAY;IACrB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,gBAAgB,CAA+C;IACvE,OAAO,CAAC,gBAAgB,CAA+B;IACvD,OAAO,CAAC,cAAc,CAA4C;gBAEtD,MAAM,EAAE,MAAM;IAI1B;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiD3D;;OAEG;IACH,sBAAsB,CAAC,YAAY,EAAE,mBAAmB,GAAG,IAAI;IAS/D;;OAEG;IACG,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IA8B/D;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI;IAOjD;;;;OAIG;IACH,0BAA0B,IAAI,MAAM,EAAE;IAoCtC;;OAEG;IACG,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkCxE;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKjC;;OAEG;IACH,gBAAgB,IAAI,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC;IAM/C,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,uBAAuB;IAc/B,OAAO,CAAC,yBAAyB;IAmBjC,OAAO,CAAC,sBAAsB;IAK9B,OAAO,CAAC,oBAAoB;YAgBd,qBAAqB;YAWrB,mBAAmB;YAanB,sBAAsB;YAMtB,gBAAgB;YAiBhB,qBAAqB;CAMtC"}

package/dist/plugin-loader.js

@@ -230,25 +230,27 @@ export class PluginLoader {
         const semverRegex = /^\d+\.\d+\.\d+(-[a-zA-Z0-9.-]+)?(\+[a-zA-Z0-9.-]+)?$/;
         return semverRegex.test(version);
     }
-    validatePluginConfig(plugin) {
+    validatePluginConfig(plugin, config) {
         if (!plugin.configSchema) {
             return;
         }
-        // TODO: Configuration validation implementation
-        // This requires plugin config to be passed during loading
-        // For now, just validate that the schema exists
-        this.logger.debug(`Plugin ${plugin.name} has configuration schema (validation not yet implemented)`);
+        if (!config) {
+            this.logger.debug(`Plugin ${plugin.name} has configuration schema but no config provided`);
+            return;
+        }
+        // Configuration validation is now implemented in PluginConfigValidator
+        // This is a placeholder that logs the validation would happen
+        // The actual validation should be done by the caller when config is available
+        this.logger.debug(`Plugin ${plugin.name} has configuration schema (use PluginConfigValidator for validation)`);
     }
     async verifyPluginSignature(plugin) {
         if (!plugin.signature) {
             return;
         }
-        // TODO: Plugin signature verification implementation
-        // In a real implementation:
-        // 1. Extract public key from trusted source
-        // 2. Verify signature against plugin code hash
-        // 3. Throw error if verification fails
-        this.logger.debug(`Plugin ${plugin.name} signature verification (not yet implemented)`);
+        // Plugin signature verification is now implemented in PluginSignatureVerifier
+        // This is a placeholder that logs the verification would happen
+        // The actual verification should be done by the caller with proper security config
+        this.logger.debug(`Plugin ${plugin.name} has signature (use PluginSignatureVerifier for verification)`);
     }
     async getSingletonService(registration) {
         let instance = this.serviceInstances.get(registration.name);

package/dist/qa/adapter.d.ts

@@ -0,0 +1,14 @@
+import { QA } from '@objectstack/spec';
+/**
+ * Interface for executing test actions against a target system.
+ * The target could be a local Kernel instance or a remote API.
+ */
+export interface TestExecutionAdapter {
+    /**
+     * Execute a single test action.
+     * @param action The action to perform (create_record, api_call, etc.)
+     * @returns The result of the action (e.g. created record, API response)
+     */
+    execute(action: QA.TestAction, context: Record<string, unknown>): Promise<unknown>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/qa/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/qa/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAEvC;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpF"}

package/dist/qa/adapter.js

@@ -0,0 +1 @@
+export {};

package/dist/qa/http-adapter.d.ts

@@ -0,0 +1,16 @@
+import { QA } from '@objectstack/spec';
+import { TestExecutionAdapter } from './adapter.js';
+export declare class HttpTestAdapter implements TestExecutionAdapter {
+    private baseUrl;
+    private authToken?;
+    constructor(baseUrl: string, authToken?: string | undefined);
+    execute(action: QA.TestAction, _context: Record<string, unknown>): Promise<unknown>;
+    private createRecord;
+    private updateRecord;
+    private deleteRecord;
+    private readRecord;
+    private queryRecords;
+    private rawApiCall;
+    private handleResponse;
+}
+//# sourceMappingURL=http-adapter.d.ts.map

package/dist/qa/http-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-adapter.d.ts","sourceRoot":"","sources":["../../src/qa/http-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,qBAAa,eAAgB,YAAW,oBAAoB;IAC9C,OAAO,CAAC,OAAO;IAAU,OAAO,CAAC,SAAS,CAAC;gBAAnC,OAAO,EAAE,MAAM,EAAU,SAAS,CAAC,EAAE,MAAM,YAAA;IAEzD,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;YAiC3E,YAAY;YASZ,YAAY;YAWZ,YAAY;YAUZ,UAAU;YAUV,YAAY;YAUZ,UAAU;YAaV,cAAc;CAW7B"}

package/dist/qa/http-adapter.js

@@ -0,0 +1,107 @@
+export class HttpTestAdapter {
+    constructor(baseUrl, authToken) {
+        this.baseUrl = baseUrl;
+        this.authToken = authToken;
+    }
+    async execute(action, _context) {
+        const headers = {
+            'Content-Type': 'application/json',
+        };
+        if (this.authToken) {
+            headers['Authorization'] = `Bearer ${this.authToken}`;
+        }
+        // If action.user is specified, maybe add a specific header for impersonation if supported?
+        if (action.user) {
+            headers['X-Run-As'] = action.user;
+        }
+        switch (action.type) {
+            case 'create_record':
+                return this.createRecord(action.target, action.payload || {}, headers);
+            case 'update_record':
+                return this.updateRecord(action.target, action.payload || {}, headers);
+            case 'delete_record':
+                return this.deleteRecord(action.target, action.payload || {}, headers);
+            case 'read_record':
+                return this.readRecord(action.target, action.payload || {}, headers);
+            case 'query_records':
+                return this.queryRecords(action.target, action.payload || {}, headers);
+            case 'api_call':
+                return this.rawApiCall(action.target, action.payload || {}, headers);
+            case 'wait':
+                const ms = Number(action.payload?.duration || 1000);
+                return new Promise(resolve => setTimeout(() => resolve({ waited: ms }), ms));
+            default:
+                throw new Error(`Unsupported action type in HttpAdapter: ${action.type}`);
+        }
+    }
+    async createRecord(objectName, data, headers) {
+        const response = await fetch(`${this.baseUrl}/api/data/${objectName}`, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(data)
+        });
+        return this.handleResponse(response);
+    }
+    async updateRecord(objectName, data, headers) {
+        const id = data._id || data.id;
+        if (!id)
+            throw new Error('Update record requires _id or id in payload');
+        const response = await fetch(`${this.baseUrl}/api/data/${objectName}/${id}`, {
+            method: 'PUT',
+            headers,
+            body: JSON.stringify(data)
+        });
+        return this.handleResponse(response);
+    }
+    async deleteRecord(objectName, data, headers) {
+        const id = data._id || data.id;
+        if (!id)
+            throw new Error('Delete record requires _id or id in payload');
+        const response = await fetch(`${this.baseUrl}/api/data/${objectName}/${id}`, {
+            method: 'DELETE',
+            headers
+        });
+        return this.handleResponse(response);
+    }
+    async readRecord(objectName, data, headers) {
+        const id = data._id || data.id;
+        if (!id)
+            throw new Error('Read record requires _id or id in payload');
+        const response = await fetch(`${this.baseUrl}/api/data/${objectName}/${id}`, {
+            method: 'GET',
+            headers
+        });
+        return this.handleResponse(response);
+    }
+    async queryRecords(objectName, data, headers) {
+        // Assuming query via POST or GraphQL-like endpoint
+        const response = await fetch(`${this.baseUrl}/api/data/${objectName}/query`, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(data)
+        });
+        return this.handleResponse(response);
+    }
+    async rawApiCall(endpoint, data, headers) {
+        const method = data.method || 'GET';
+        const body = data.body ? JSON.stringify(data.body) : undefined;
+        const url = endpoint.startsWith('http') ? endpoint : `${this.baseUrl}${endpoint}`;
+        const response = await fetch(url, {
+            method,
+            headers,
+            body
+        });
+        return this.handleResponse(response);
+    }
+    async handleResponse(response) {
+        if (!response.ok) {
+            const text = await response.text();
+            throw new Error(`HTTP Error ${response.status}: ${text}`);
+        }
+        const contentType = response.headers.get('content-type');
+        if (contentType && contentType.includes('application/json')) {
+            return response.json();
+        }
+        return response.text();
+    }
+}

package/dist/qa/index.d.ts

@@ -0,0 +1,4 @@
+export * from './adapter.js';
+export * from './runner.js';
+export * from './http-adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/qa/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/qa/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC"}

package/dist/qa/index.js

@@ -0,0 +1,3 @@
+export * from './adapter.js';
+export * from './runner.js';
+export * from './http-adapter.js';

package/dist/qa/runner.d.ts

@@ -0,0 +1,27 @@
+import { QA } from '@objectstack/spec';
+import { TestExecutionAdapter } from './adapter.js';
+export interface TestResult {
+    scenarioId: string;
+    passed: boolean;
+    steps: StepResult[];
+    error?: unknown;
+    duration: number;
+}
+export interface StepResult {
+    stepName: string;
+    passed: boolean;
+    error?: unknown;
+    output?: unknown;
+    duration: number;
+}
+export declare class TestRunner {
+    private adapter;
+    constructor(adapter: TestExecutionAdapter);
+    runSuite(suite: QA.TestSuite): Promise<TestResult[]>;
+    runScenario(scenario: QA.TestScenario): Promise<TestResult>;
+    private runStep;
+    private resolveVariables;
+    private getValueByPath;
+    private assert;
+}
+//# sourceMappingURL=runner.d.ts.map

package/dist/qa/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/qa/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,UAAU;IACT,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,oBAAoB;IAE3C,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAQpD,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;YA4EnD,OAAO;IAyBrB,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,MAAM;CA8Bf"}

package/dist/qa/runner.js

@@ -0,0 +1,157 @@
+export class TestRunner {
+    constructor(adapter) {
+        this.adapter = adapter;
+    }
+    async runSuite(suite) {
+        const results = [];
+        for (const scenario of suite.scenarios) {
+            results.push(await this.runScenario(scenario));
+        }
+        return results;
+    }
+    async runScenario(scenario) {
+        const startTime = Date.now();
+        const context = {}; // Variable context
+        // Initialize context from initial payload if needed? Currently schema doesn't have initial context prop on Scenario
+        // But we defined TestContextSchema separately.
+        // Setup
+        if (scenario.setup) {
+            for (const step of scenario.setup) {
+                try {
+                    await this.runStep(step, context);
+                }
+                catch (e) {
+                    return {
+                        scenarioId: scenario.id,
+                        passed: false,
+                        steps: [],
+                        error: `Setup failed: ${e instanceof Error ? e.message : String(e)}`,
+                        duration: Date.now() - startTime
+                    };
+                }
+            }
+        }
+        const stepResults = [];
+        let scenarioPassed = true;
+        let scenarioError = undefined;
+        // Main Steps
+        for (const step of scenario.steps) {
+            const stepStartTime = Date.now();
+            try {
+                const output = await this.runStep(step, context);
+                stepResults.push({
+                    stepName: step.name,
+                    passed: true,
+                    output,
+                    duration: Date.now() - stepStartTime
+                });
+            }
+            catch (e) {
+                scenarioPassed = false;
+                scenarioError = e;
+                stepResults.push({
+                    stepName: step.name,
+                    passed: false,
+                    error: e,
+                    duration: Date.now() - stepStartTime
+                });
+                break; // Stop on first failure
+            }
+        }
+        // Teardown (run even if failed)
+        if (scenario.teardown) {
+            for (const step of scenario.teardown) {
+                try {
+                    await this.runStep(step, context);
+                }
+                catch (e) {
+                    // Log teardown failure but don't override main failure if it exists
+                    if (scenarioPassed) {
+                        scenarioPassed = false;
+                        scenarioError = `Teardown failed: ${e instanceof Error ? e.message : String(e)}`;
+                    }
+                }
+            }
+        }
+        return {
+            scenarioId: scenario.id,
+            passed: scenarioPassed,
+            steps: stepResults,
+            error: scenarioError,
+            duration: Date.now() - startTime
+        };
+    }
+    async runStep(step, context) {
+        // 1. Resolve Variables with Context (Simple interpolation or just pass context?)
+        // For now, assume adpater handles context resolution or we do basic replacement
+        const resolvedAction = this.resolveVariables(step.action, context);
+        // 2. Execute Action
+        const result = await this.adapter.execute(resolvedAction, context);
+        // 3. Capture Outputs
+        if (step.capture) {
+            for (const [varName, path] of Object.entries(step.capture)) {
+                context[varName] = this.getValueByPath(result, path);
+            }
+        }
+        // 4. Run Assertions
+        if (step.assertions) {
+            for (const assertion of step.assertions) {
+                this.assert(result, assertion, context);
+            }
+        }
+        return result;
+    }
+    resolveVariables(action, _context) {
+        // TODO: Implement JSON path variable substitution stringify/parse
+        // For now returning as is
+        return action;
+    }
+    getValueByPath(obj, path) {
+        if (!path)
+            return obj;
+        const parts = path.split('.');
+        let current = obj;
+        for (const part of parts) {
+            if (current === null || current === undefined)
+                return undefined;
+            current = current[part];
+        }
+        return current;
+    }
+    assert(result, assertion, _context) {
+        const actual = this.getValueByPath(result, assertion.field);
+        // Resolve expected value if it's a variable ref? 
+        const expected = assertion.expectedValue; // Simplify for now
+        switch (assertion.operator) {
+            case 'equals':
+                if (actual !== expected)
+                    throw new Error(`Assertion failed: ${assertion.field} expected ${expected}, got ${actual}`);
+                break;
+            case 'not_equals':
+                if (actual === expected)
+                    throw new Error(`Assertion failed: ${assertion.field} expected not ${expected}, got ${actual}`);
+                break;
+            case 'contains':
+                if (Array.isArray(actual)) {
+                    if (!actual.includes(expected))
+                        throw new Error(`Assertion failed: ${assertion.field} array does not contain ${expected}`);
+                }
+                else if (typeof actual === 'string') {
+                    if (!actual.includes(String(expected)))
+                        throw new Error(`Assertion failed: ${assertion.field} string does not contain ${expected}`);
+                }
+                break;
+            case 'not_null':
+                if (actual === null || actual === undefined)
+                    throw new Error(`Assertion failed: ${assertion.field} is null`);
+                break;
+            case 'is_null':
+                if (actual !== null && actual !== undefined)
+                    throw new Error(`Assertion failed: ${assertion.field} is not null`);
+                break;
+            // ... Add other operators
+            default:
+                throw new Error(`Unknown assertion operator: ${assertion.operator}`);
+        }
+    }
+}

package/dist/security/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Security Module
+ *
+ * Provides security features for the ObjectStack microkernel:
+ * - Plugin signature verification
+ * - Plugin configuration validation
+ * - Permission and capability enforcement
+ *
+ * @module @objectstack/core/security
+ */
+export { PluginSignatureVerifier, type PluginSignatureConfig, type SignatureVerificationResult, } from './plugin-signature-verifier.js';
+export { PluginConfigValidator, createPluginConfigValidator, } from './plugin-config-validator.js';
+export { PluginPermissionEnforcer, SecurePluginContext, createPluginPermissionEnforcer, type PluginPermissions, type PermissionCheckResult, } from './plugin-permission-enforcer.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,8BAA8B,EAC9B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,iCAAiC,CAAC"}

package/dist/security/index.js

@@ -0,0 +1,13 @@
+/**
+ * Security Module
+ *
+ * Provides security features for the ObjectStack microkernel:
+ * - Plugin signature verification
+ * - Plugin configuration validation
+ * - Permission and capability enforcement
+ *
+ * @module @objectstack/core/security
+ */
+export { PluginSignatureVerifier, } from './plugin-signature-verifier.js';
+export { PluginConfigValidator, createPluginConfigValidator, } from './plugin-config-validator.js';
+export { PluginPermissionEnforcer, SecurePluginContext, createPluginPermissionEnforcer, } from './plugin-permission-enforcer.js';

package/dist/security/plugin-config-validator.d.ts

@@ -0,0 +1,79 @@
+import type { Logger } from '@objectstack/spec/contracts';
+import type { PluginMetadata } from '../plugin-loader.js';
+/**
+ * Plugin Configuration Validator
+ *
+ * Validates plugin configurations against Zod schemas to ensure:
+ * 1. Type safety - all config values have correct types
+ * 2. Business rules - values meet constraints (min/max, regex, etc.)
+ * 3. Required fields - all mandatory configuration is provided
+ * 4. Default values - missing optional fields get defaults
+ *
+ * Architecture:
+ * - Uses Zod for runtime validation
+ * - Provides detailed error messages with field paths
+ * - Supports nested configuration objects
+ * - Allows partial validation for incremental updates
+ *
+ * Usage:
+ * ```typescript
+ * const validator = new PluginConfigValidator(logger);
+ * const validConfig = validator.validatePluginConfig(plugin, userConfig);
+ * ```
+ */
+export declare class PluginConfigValidator {
+    private logger;
+    constructor(logger: Logger);
+    /**
+     * Validate plugin configuration against its Zod schema
+     *
+     * @param plugin - Plugin metadata with configSchema
+     * @param config - User-provided configuration
+     * @returns Validated and typed configuration
+     * @throws Error with detailed validation errors
+     */
+    validatePluginConfig<T = any>(plugin: PluginMetadata, config: any): T;
+    /**
+     * Validate partial configuration (for incremental updates)
+     *
+     * @param plugin - Plugin metadata
+     * @param partialConfig - Partial configuration to validate
+     * @returns Validated partial configuration
+     */
+    validatePartialConfig<T = any>(plugin: PluginMetadata, partialConfig: any): Partial<T>;
+    /**
+     * Get default configuration from schema
+     *
+     * @param plugin - Plugin metadata
+     * @returns Default configuration object
+     */
+    getDefaultConfig<T = any>(plugin: PluginMetadata): T | undefined;
+    /**
+     * Check if configuration is valid without throwing
+     *
+     * @param plugin - Plugin metadata
+     * @param config - Configuration to check
+     * @returns True if valid, false otherwise
+     */
+    isConfigValid(plugin: PluginMetadata, config: any): boolean;
+    /**
+     * Get configuration errors without throwing
+     *
+     * @param plugin - Plugin metadata
+     * @param config - Configuration to check
+     * @returns Array of validation errors, or empty array if valid
+     */
+    getConfigErrors(plugin: PluginMetadata, config: any): Array<{
+        path: string;
+        message: string;
+    }>;
+    private formatZodErrors;
+}
+/**
+ * Create a plugin config validator
+ *
+ * @param logger - Logger instance
+ * @returns Plugin config validator
+ */
+export declare function createPluginConfigValidator(logger: Logger): PluginConfigValidator;
+//# sourceMappingURL=plugin-config-validator.d.ts.map

package/dist/security/plugin-config-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-config-validator.d.ts","sourceRoot":"","sources":["../../src/security/plugin-config-validator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM;IAI1B;;;;;;;OAOG;IACH,oBAAoB,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAqCrE;;;;;;OAMG;IACH,qBAAqB,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC;IA4BtF;;;;;OAKG;IACH,gBAAgB,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,cAAc,GAAG,CAAC,GAAG,SAAS;IAiBhE;;;;;;OAMG;IACH,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO;IAS3D;;;;;;OAMG;IACH,eAAe,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC;IAgB5F,OAAO,CAAC,eAAe;CAMxB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,CAEjF"}