treste 2.4.3 → 2.4.5

package/README.md

@@ -1,9 +1,16 @@
 # Trest - Linguagem de Programação com Suporte a Cirílico
 
+[![npm version](https://img.shields.io/npm/v/treste.svg)](https://www.npmjs.com/package/treste)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Node.js Version](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen.svg)](https://nodejs.org/)
+[![Active Maintenance](https://img.shields.io/badge/maintenance-active-green.svg)](https://github.com/trest-language/trest)
+
 Linguagem de programação moderna e profissional, estruturalmente organizada e compilável para **Web** e **Desktop (.exe)** com suporte completo a cirílico (alfabeto russo).
 
 > **🎯 Característica Única:** Trest permite programar usando palavras-chave em cirílico ou latino, mantendo a mesma sintaxe e funcionalidades.
 
+> **🔒 Segurança:** Versão 2.4.4 inclui correções de segurança da cadeia de suprimentos. Veja [SECURITY.md](./SECURITY.md) para detalhes.
+
 ## 🚀 Principais Funcionalidades
 
 - ✅ **Execução Inline** - Execute código direto na linha de comando com `-e`
@@ -461,6 +468,18 @@ Veja a pasta `exemplos/` para programas completos demonstrando:
 - `exemplos/filesystem_demo.trest` - Operações de arquivo
 - `exemplos/todas_funcionalidades.trest` - Exemplo completo
 
+## 🔒 Segurança
+
+**Versão 2.4.4** inclui correções de segurança da cadeia de suprimentos:
+- ✅ Scripts de instalação removidos
+- ✅ Sem acesso ao shell durante instalação
+- ✅ Acesso à rede controlado e documentado
+
+**Documentação de Segurança:**
+- **[SECURITY.md](./SECURITY.md)** - Política de segurança completa
+- **[SOCKET_ALERTS.md](./SOCKET_ALERTS.md)** - Resposta aos alertas do Socket
+- **[CHANGELOG_SECURITY.md](./CHANGELOG_SECURITY.md)** - Changelog de segurança
+
 ## 📚 Documentação Completa
 
 Para mais informações, consulte a documentação completa em `docs/`:
@@ -470,6 +489,7 @@ Para mais informações, consulte a documentação completa em `docs/`:
 - **[API.md](docs/api.md)** - Referência da API
 - **[ARCHITECTURE.md](docs/ARCHITECTURE.md)** - Arquitetura técnica
 - **[WHY_TREST.md](docs/WHY_TREST.md)** - Por que usar Trest
+- **[DOCUMENTACAO_COMPLETA.md](./DOCUMENTACAO_COMPLETA.md)** - Documentação completa unificada
 
 Ou visite o site oficial: [https://trest-site.vercel.app](https://trest-site.vercel.app)
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "treste",
-  "version": "2.4.3",
-  "description": "Trest - Linguagem de programação moderna e profissional para Web e Desktop com suporte a Cirílico",
+  "version": "2.4.5",
+  "description": "Trest - Linguagem de programação moderna e profissional para Web e Desktop com suporte a Cirílico. Inclui módulo HTTP opcional para requisições de rede (acesso controlado pelo usuário, documentado em SECURITY.md).",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
@@ -19,8 +19,6 @@
     "compile:exe": "ts-node src/compiler/exe.ts",
     "test": "ts-node src/tests/runner.ts",
     "bundle": "tsc && pkg dist/cli.js --targets node18-win-x64,node18-win-x86,node18-linux-x64,node18-macos-x64 --out-path dist/bin",
-    "preinstall": "node scripts/preinstall.js",
-    "postinstall": "node scripts/postinstall.js",
     "prepare": "npm run build",
     "prepublishOnly": "npm run build",
     "version": "node scripts/version.js && git add -A",
@@ -37,7 +35,11 @@
     "interpreter",
     "cyrillic",
     "russian",
-    "trest"
+    "trest",
+    "http",
+    "network",
+    "active-maintenance",
+    "production-ready"
   ],
   "author": {
     "name": "PoktWeb",
@@ -57,7 +59,6 @@
   "files": [
     "dist/",
     "src/std/",
-    "scripts/",
     "README.md",
     "LICENSE",
     "INSTALL.md"
@@ -70,6 +71,13 @@
     "url": "https://github.com/trest-language/trest/issues"
   },
   "homepage": "https://trest-site.vercel.app",
+  "funding": {
+    "type": "individual",
+    "url": "https://github.com/sponsors/poktweb"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
   "os": [
     "darwin",
     "linux",

package/scripts/postbuild.js

@@ -1,90 +0,0 @@
-#!/usr/bin/env node
-/**
- * Post-build script
- * Configurações após a compilação
- */
-
-const fs = require('fs');
-const path = require('path');
-
-console.log('\n🔨 Post-build configuration...\n');
-
-// Adicionar shebang aos binários
-function addShebang() {
-  const bins = [
-    path.join(__dirname, '..', 'dist', 'cli.js'),
-    path.join(__dirname, '..', 'dist', 'compiler.js')
-  ];
-  
-  bins.forEach(bin => {
-    if (fs.existsSync(bin)) {
-      let content = fs.readFileSync(bin, 'utf-8');
-      
-      // Adicionar shebang se não existir
-      if (!content.startsWith('#!/usr/bin/env node')) {
-        content = '#!/usr/bin/env node\n' + content;
-        fs.writeFileSync(bin, content);
-      }
-      
-      console.log(`✅ Configured ${path.basename(bin)}`);
-    }
-  });
-}
-
-// Verificar arquivos gerados
-function verifyBuild() {
-  const requiredFiles = [
-    'dist/index.js',
-    'dist/cli.js',
-    'dist/compiler.js',
-    'dist/lexer.js',
-    'dist/parser.js',
-    'dist/interpreter.js'
-  ];
-  
-  let allOk = true;
-  
-  requiredFiles.forEach(file => {
-    const filePath = path.join(__dirname, '..', file);
-    if (!fs.existsSync(filePath)) {
-      console.error(`❌ Missing: ${file}`);
-      allOk = false;
-    }
-  });
-  
-  if (allOk) {
-    console.log('✅ All build artifacts present');
-  }
-}
-
-// Copiar módulos std para dist se necessário
-function copyStdModules() {
-  const srcStd = path.join(__dirname, '..', 'src', 'std');
-  const distStd = path.join(__dirname, '..', 'dist', 'std');
-  
-  if (fs.existsSync(srcStd) && !fs.existsSync(distStd)) {
-    fs.mkdirSync(distStd, { recursive: true });
-    
-    const files = fs.readdirSync(srcStd);
-    files.forEach(file => {
-      if (file.endsWith('.trest')) {
-        const srcPath = path.join(srcStd, file);
-        const distPath = path.join(distStd, file);
-        fs.copyFileSync(srcPath, distPath);
-        console.log(`✅ Copied ${file}`);
-      }
-    });
-  }
-}
-
-// Executar configurações
-try {
-  addShebang();
-  verifyBuild();
-  copyStdModules();
-  console.log('\n✅ Post-build complete!\n');
-} catch (error) {
-  console.error('❌ Post-build error:', error.message);
-  process.exit(1);
-}
-

package/scripts/postinstall.js

@@ -1,89 +0,0 @@
-#!/usr/bin/env node
-/**
- * Post-install script
- * Configura o ambiente após a instalação
- */
-
-const fs = require('fs');
-const path = require('path');
-
-const VERSION = require('../package.json').version;
-
-console.log(`\n🎉 Trest Language v${VERSION} installed successfully!\n`);
-
-// Criar arquivo de configuração se não existir
-function createConfigFile() {
-  const configPath = path.join(process.cwd(), '.trestrc');
-  
-  if (!fs.existsSync(configPath)) {
-    const config = {
-      version: VERSION,
-      compiler: {
-        web: {
-          minify: false,
-          bundle: true
-        },
-        exe: {
-          minify: false,
-          standalone: true
-        }
-      },
-      runtime: {
-        strictMode: false,
-        debugMode: false
-      }
-    };
-    
-    fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
-    console.log('✅ Created .trestrc configuration file');
-  }
-}
-
-// Verificar permissões dos binários
-function checkBinPermissions() {
-  const distPath = path.join(process.cwd(), 'dist');
-  
-  if (fs.existsSync(distPath)) {
-    console.log('✅ Build artifacts found');
-  } else {
-    console.log('⚠️  Build artifacts not found, run: npm run build');
-  }
-}
-
-// Verificar módulos std
-function checkStdModules() {
-  const stdPath = path.join(process.cwd(), 'src', 'std');
-  
-  if (fs.existsSync(stdPath)) {
-    const modules = fs.readdirSync(stdPath).filter(f => f.endsWith('.trest'));
-    console.log(`✅ Standard library: ${modules.length} modules found`);
-  } else {
-    console.error('❌ Standard library not found');
-  }
-}
-
-// Mensagens de instrução
-function showInstructions() {
-  console.log('\n📚 Getting started:\n');
-  console.log('  Run a Trest file:');
-  console.log('    npx trest yourfile.trest\n');
-  console.log('  Compile for web:');
-  console.log('    npx trestc yourfile.trest --mode web\n');
-  console.log('  Compile to executable:');
-  console.log('    npx trestc yourfile.trest --mode exe\n');
-  console.log('  For more information:');
-  console.log('    npx trest --help\n');
-  console.log('📖 Documentation: https://github.com/trest-language/trest\n');
-}
-
-// Executar configurações
-try {
-  createConfigFile();
-  checkBinPermissions();
-  checkStdModules();
-  showInstructions();
-} catch (error) {
-  console.error('⚠️  Post-install setup had some issues:', error.message);
-  console.log('You can manually configure later.\n');
-}
-

package/scripts/preinstall.js

@@ -1,92 +0,0 @@
-#!/usr/bin/env node
-/**
- * Pre-install script
- * Valida o ambiente antes da instalação
- */
-
-const { execSync } = require('child_process');
-const os = require('os');
-const fs = require('fs');
-const path = require('path');
-
-const VERSION = require('../package.json').version;
-const MIN_NODE_VERSION = 18;
-const MIN_NPM_VERSION = 9;
-
-console.log(`\n🚀 Trest Language v${VERSION} - Pre-installation check\n`);
-
-// Verificar Node.js
-function checkNodeVersion() {
-  const nodeVersion = process.version;
-  const majorVersion = parseInt(nodeVersion.slice(1).split('.')[0]);
-  
-  if (majorVersion < MIN_NODE_VERSION) {
-    console.error(`❌ Node.js ${MIN_NODE_VERSION}+ required. Current: ${nodeVersion}`);
-    console.error('Please update Node.js from https://nodejs.org/');
-    process.exit(1);
-  }
-  
-  console.log(`✅ Node.js version: ${nodeVersion}`);
-}
-
-// Verificar npm
-function checkNpmVersion() {
-  try {
-    const npmVersion = execSync('npm --version', { encoding: 'utf-8' }).trim();
-    const majorVersion = parseInt(npmVersion.split('.')[0]);
-    
-    if (majorVersion < MIN_NPM_VERSION) {
-      console.error(`❌ npm ${MIN_NPM_VERSION}+ required. Current: ${npmVersion}`);
-      console.error('Please update npm: npm install -g npm@latest');
-      process.exit(1);
-    }
-    
-    console.log(`✅ npm version: ${npmVersion}`);
-  } catch (error) {
-    console.error('❌ Failed to check npm version');
-    process.exit(1);
-  }
-}
-
-// Verificar sistema operacional
-function checkOS() {
-  const platform = os.platform();
-  const supported = ['darwin', 'linux', 'win32'];
-  
-  if (!supported.includes(platform)) {
-    console.warn(`⚠️  Platform ${platform} may not be fully supported`);
-  } else {
-    console.log(`✅ Platform: ${platform}`);
-  }
-}
-
-// Verificar TypeScript
-function checkTypeScript() {
-  try {
-    const tsVersion = execSync('tsc --version', { encoding: 'utf-8' }).trim();
-    console.log(`✅ ${tsVersion}`);
-  } catch (error) {
-    console.warn('⚠️  TypeScript not found globally (will be installed locally)');
-  }
-}
-
-// Verificar espaço em disco
-function checkDiskSpace() {
-  try {
-    const stats = fs.statSync(process.cwd());
-    console.log(`✅ Sufficient disk space`);
-  } catch (error) {
-    console.warn('⚠️  Could not verify disk space');
-  }
-}
-
-// Executar todas as verificações
-console.log('Checking environment...\n');
-checkNodeVersion();
-checkNpmVersion();
-checkOS();
-checkTypeScript();
-checkDiskSpace();
-
-console.log('\n✅ Pre-installation checks passed!\n');
-

package/scripts/update.js

@@ -1,132 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Update script for Trest Language
- * Checks latest version from NPM and updates if needed
- */
-
-const https = require('https');
-const { execSync } = require('child_process');
-const packageJson = require('../package.json');
-
-const CURRENT_VERSION = packageJson.version;
-const PACKAGE_NAME = packageJson.name;
-const NPM_REGISTRY = `https://registry.npmjs.org/${PACKAGE_NAME}`;
-
-console.log('╔═══════════════════════════════════════════════════════════════╗');
-console.log('║   🔄 TREST LANGUAGE - CHECKING FOR UPDATES                  ║');
-console.log('╚═══════════════════════════════════════════════════════════════╝\n');
-
-console.log(`📦 Package: ${PACKAGE_NAME}`);
-console.log(`📌 Current version: ${CURRENT_VERSION}\n`);
-
-console.log('🔍 Checking NPM for latest version...\n');
-
-// Fetch latest version from NPM
-https.get(NPM_REGISTRY, (res) => {
-  let data = '';
-
-  res.on('data', (chunk) => {
-    data += chunk;
-  });
-
-  res.on('end', () => {
-    try {
-      const packageInfo = JSON.parse(data);
-      const latestVersion = packageInfo['dist-tags'].latest;
-      const versions = packageInfo.versions || {};
-      
-      console.log(`✅ Latest version available: ${latestVersion}\n`);
-
-      // Compare versions
-      if (latestVersion === CURRENT_VERSION) {
-        console.log('╔═══════════════════════════════════════════════════════════════╗');
-        console.log('║   ✅ YOU ARE UP TO DATE!                                    ║');
-        console.log('╚═══════════════════════════════════════════════════════════════╝\n');
-        console.log(`You are already running the latest version: ${CURRENT_VERSION}`);
-        process.exit(0);
-      }
-
-      // Check if current version is newer (unlikely but possible)
-      const versionCompare = compareVersions(latestVersion, CURRENT_VERSION);
-      if (versionCompare < 0) {
-        console.log('╔═══════════════════════════════════════════════════════════════╗');
-        console.log('║   ℹ️  YOU HAVE A NEWER VERSION                              ║');
-        console.log('╚═══════════════════════════════════════════════════════════════╝\n');
-        console.log(`Current: ${CURRENT_VERSION} (newer than NPM: ${latestVersion})`);
-        console.log('You are running a development or pre-release version.');
-        process.exit(0);
-      }
-
-      // Update available!
-      console.log('╔═══════════════════════════════════════════════════════════════╗');
-      console.log('║   🆕 UPDATE AVAILABLE!                                      ║');
-      console.log('╚═══════════════════════════════════════════════════════════════╝\n');
-      console.log(`📌 Current: ${CURRENT_VERSION}`);
-      console.log(`🚀 Latest:  ${latestVersion}`);
-      console.log('');
-      
-      // Show changelog if available
-      if (versions[latestVersion] && versions[latestVersion].changelog) {
-        console.log('📝 What\'s new in this version:');
-        console.log('   ' + versions[latestVersion].changelog);
-        console.log('');
-      }
-
-      console.log('🔄 Updating treste...\n');
-
-      try {
-        // Update globally if installed globally
-        execSync('npm list -g --depth=0', { stdio: 'ignore' });
-        
-        console.log('📦 Installing latest version globally...');
-        execSync(`npm install -g ${PACKAGE_NAME}@${latestVersion}`, { 
-          stdio: 'inherit',
-          cwd: process.cwd()
-        });
-        
-        console.log('\n╔═══════════════════════════════════════════════════════════════╗');
-        console.log('║   ✅ UPDATE COMPLETE!                                      ║');
-        console.log('╚═══════════════════════════════════════════════════════════════╝\n');
-        console.log(`🎉 Successfully updated to ${latestVersion}!`);
-        console.log('\n🔧 Verifying installation...');
-        execSync('trest --version', { stdio: 'inherit' });
-        
-      } catch (error) {
-        console.log('\n⚠️  Could not update automatically.');
-        console.log('\nPlease run manually:');
-        console.log(`  npm install -g ${PACKAGE_NAME}@${latestVersion}`);
-        process.exit(1);
-      }
-
-    } catch (error) {
-      console.error('❌ Error parsing NPM response:', error.message);
-      process.exit(1);
-    }
-  });
-}).on('error', (error) => {
-  console.error('❌ Error checking for updates:', error.message);
-  console.log('\nCould not connect to NPM registry.');
-  console.log('Please check your internet connection and try again.');
-  process.exit(1);
-});
-
-/**
- * Compare two semantic versions
- * Returns: 1 if v1 > v2, -1 if v1 < v2, 0 if equal
- */
-function compareVersions(v1, v2) {
-  const parts1 = v1.split('.').map(Number);
-  const parts2 = v2.split('.').map(Number);
-  
-  for (let i = 0; i < Math.max(parts1.length, parts2.length); i++) {
-    const part1 = parts1[i] || 0;
-    const part2 = parts2[i] || 0;
-    
-    if (part1 > part2) return 1;
-    if (part1 < part2) return -1;
-  }
-  
-  return 0;
-}
-

package/scripts/version.js

@@ -1,52 +0,0 @@
-#!/usr/bin/env node
-/**
- * Version bump script
- * Atualiza a versão em todos os lugares necessários
- */
-
-const fs = require('fs');
-const path = require('path');
-const { execSync } = require('child_process');
-
-function updateVersion() {
-  const packageJsonPath = path.join(__dirname, '..', 'package.json');
-  const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
-  const newVersion = process.env.npm_config_version || packageJson.version;
-  
-  console.log(`\n📦 Updating version to ${newVersion}\n`);
-  
-  // Atualizar package.json
-  packageJson.version = newVersion;
-  fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2) + '\n');
-  console.log('✅ Updated package.json');
-  
-  // Atualizar README se necessário
-  updateReadme(newVersion);
-  
-  // Criar tag git
-  try {
-    execSync(`git tag -a v${newVersion} -m "Release v${newVersion}"`, { stdio: 'inherit' });
-    console.log(`✅ Created git tag v${newVersion}`);
-  } catch (error) {
-    console.warn('⚠️  Could not create git tag (may already exist)');
-  }
-  
-  console.log(`\n✅ Version update complete!\n`);
-}
-
-function updateReadme(version) {
-  const readmePath = path.join(__dirname, '..', 'README.md');
-  
-  if (fs.existsSync(readmePath)) {
-    let content = fs.readFileSync(readmePath, 'utf-8');
-    
-    // Substituir referências de versão
-    content = content.replace(/v\d+\.\d+\.\d+/g, `v${version}`);
-    
-    fs.writeFileSync(readmePath, content);
-    console.log('✅ Updated README.md');
-  }
-}
-
-updateVersion();
-