xynginc 1.0.92 → 1.0.93

package/dist/index.js

@@ -17,6 +17,19 @@ import { startXNCPlugin } from "./startPlugin";
 export default function XNCP(options) {
     const { domains, autoReload = true, autoFixFirewall = false, binaryPath, autoDownload = true, version = "latest", installRequirements = true, sudoPassword, } = options;
     const pkg = Plugin.manifest(__sys__);
+    const hostRoot = (typeof __sys__ !== "undefined" && __sys__.__env__?.get("__root__")) ||
+        process.cwd();
+    const effectiveSudoPassword = sudoPassword ||
+        (typeof __sys__ !== "undefined" &&
+            typeof __sys__.__env__?.getForRoot === "function" &&
+            hostRoot
+            ? __sys__.__env__.getForRoot("SUDO_PASSWORD", hostRoot)
+            : undefined) ||
+        (typeof __sys__ !== "undefined"
+            ? __sys__.__env__?.get("SUDO_PASSWORD")
+            : undefined) ||
+        "";
+    console.log("effectiveSudoPassword: ", effectiveSudoPassword);
     return Plugin.create({
         name: pkg.name,
         version: pkg.version,
@@ -35,7 +48,7 @@ export default function XNCP(options) {
                 version,
                 domains,
                 installRequirements,
-                sudoPassword: sudoPassword || "",
+                sudoPassword: effectiveSudoPassword,
             });
         },
         onServerStop: async () => {

package/dist/startPlugin.js

@@ -2,34 +2,27 @@ import { ensureBinary } from "./mods/ensureBinary";
 import { Logger } from "./mods/logger";
 import { addDomain, applyConfig, checkRequirements, getStatus, installRequirementsHandler, listDomains, reloadNginx, removeDomain, testNginx, } from "./mods/requirements";
 const getSudo = (sudoPassword) => {
-    let pwd = sudoPassword;
-    // Attempt multiple ways to get the password from the host project's environment
-    if (!pwd && typeof __sys__ !== "undefined" && __sys__.__env__) {
-        const projectRoot = globalThis.__sys__?._primaryRoot ||
-            globalThis.__sys__?._internalRoot ||
-            process.cwd();
-        if (typeof __sys__.__env__.getForRoot === "function") {
-            pwd = __sys__.__env__.getForRoot("SUDO_PASSWORD", projectRoot);
-        }
-        if (!pwd) {
-            pwd = __sys__.__env__.get("SUDO_PASSWORD");
-        }
-    }
-    // Strip wrapping quotes if present in .env (e.g., SUDO_PASSWORD="Test")
-    if (pwd) {
-        if ((pwd.startsWith('"') && pwd.endsWith('"')) ||
-            (pwd.startsWith("'") && pwd.endsWith("'"))) {
-            pwd = pwd.slice(1, -1);
-        }
+    // 1. Direct option passed by the user
+    if (sudoPassword) {
+        Logger.info(`[XyNginC] Using sudo password provided via plugin options(${sudoPassword.slice(0, 2)}***).`);
+        return `echo '${sudoPassword}' | sudo -S`;
     }
-    if (pwd) {
-        if (sudoPassword) {
-            Logger.info(`[XyNginC] Using sudo password provided via plugin options(${pwd.slice(0, 2)}***).`);
-        }
-        else {
-            Logger.info("[XyNginC] Using sudo password injected from environment variables.");
-        }
-        return `echo '${pwd}' | sudo -S`;
+    // 2. Read from host project .env via XyPriss getForRoot
+    // In XyPriss Zero-Trust sandboxing, __sys__.__env__.get() scopes to the caller module root.
+    // We use the host application root (__root__ or process.cwd()) to retrieve project-level secrets.
+    const hostRoot = (typeof __sys__ !== "undefined" && __sys__.__env__?.get("__root__")) ||
+        process.cwd();
+    const envPwd = (typeof __sys__ !== "undefined" &&
+        typeof __sys__.__env__?.getForRoot === "function" &&
+        hostRoot
+        ? __sys__.__env__.getForRoot("SUDO_PASSWORD", hostRoot)
+        : undefined) ||
+        (typeof __sys__ !== "undefined"
+            ? __sys__.__env__?.get("SUDO_PASSWORD")
+            : undefined);
+    if (envPwd) {
+        Logger.info("[XyNginC] Using sudo password injected from environment variables.");
+        return `echo '${envPwd}' | sudo -S`;
     }
     Logger.warn("[XyNginC] ⚠️ No sudo password provided. Falling back to non-interactive mode (sudo -n).");
     Logger.warn("[XyNginC] ⚠️ If the command requires a password, it will fail immediately instead of hanging.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xynginc",
-  "version": "1.0.92",
+  "version": "1.0.93",
   "description": "XyPriss Nginx Controller - Automatic Nginx & SSL management for XyPriss servers",
   "author": "Seth Eleazar - iDevo",
   "license": "NOSL",

package/xypriss.plugin.xsig

@@ -1,11 +1,11 @@
 --- XYPRISS SIGNATURE (G3) ---
-Manifest: xynginc@1.0.92
+Manifest: xynginc@1.0.93
 Min-Engine: 1.0.81
-Fingerprint: sha256:528683a10d34bbd3202d63026467c67783d03a68242cdca43cd0c3e775a07dd1
+Fingerprint: sha256:03604e0d879653568e2b805ed55cce558bd4de72f7787e784ebdd0bc3c85e128
 Identity: ed25519:0e2e1accdbba45480979305256d50d368ae6cc2c0d7ee378c5f1999ae834cf58
 Privileges: XHS.HOOK.LIFECYCLE.REGISTER,XHS.HOOK.LIFECYCLE.SERVER_START,XHS.HOOK.LIFECYCLE.SERVER_STOP,XHS.HOOK.LIFECYCLE.SERVER_READY
-Expires: 2027-09-12T17:06:51Z
+Expires: 2027-09-12T18:00:07Z
 Revision: sha256:none
 --- BEGIN CRYPTOGRAPHIC PROOF ---
-base64:XT/1zHk9NXaE6pBH4Qm3jkE0wWNTIVoMCBty3LJrm6+dln8Dq+yqnMY2kssQcBJUPDYGOZGdxh3n/g7kvIwHAA==
+base64:pPdQIlTA2rrp+vWXh9st+1bemSKN28DAMl3MtxyDwnVipcGP/k6ftC2+m/Xzt68WrAsaum2aM3Uwpqs7vw3+CQ==
 --- END XYPRISS SIGNATURE ---