npm - xypriss - Versions diffs - 9.1.2 → 9.3.0 - Mend

xypriss 9.1.2 → 9.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1146) hide show

package/.private/server2.ts CHANGED Viewed

@@ -6,7 +6,106 @@ import { logger } from "./testPlugin_Logger";
 // Créez d'abord la configuration
 // Gelez toute la configuration avant de la passer
-const app = createServer({});
+const app = createServer({
+    server: {
+        xems: {
+            persistence: {
+                enabled: true,
+                path: ".vault.xems",
+                secret: "8f2d6c1b9a5e4f0d3c7b2a1e6d9f8c0b",
+                resources: {
+                    cacheSize: 64,
+                },
+            },
+        },
+    },
+});
+// ── Test: res.html() ─────────────────────────────────────────────────────
+app.get("/test/html", (req, res) => {
+    res.html(`
+        <!DOCTYPE html>
+        <html>
+        <head><title>XyPriss HTML Test</title></head>
+        <body style="font-family: sans-serif; padding: 2rem; background: #1a1a2e; color: #eee;">
+            <h1 style="color: #e94560;">🔥 res.html() works!</h1>
+            <p>This page was served using <code>res.html()</code></p>
+            <p>Request path: <strong>${req.path}</strong></p>
+        </body>
+        </html>
+    `);
+});
+// ── Test: app.redirect() ─────────────────────────────────────────────────
+app.redirect("/old-page", "/test/html");
+app.redirect("/temp-redirect", "/test/html", 302);
+// ── Test: req.redirect() ─────────────────────────────────────────────────
+app.get("/test/req-redirect", (req, res) => {
+    // Redirect using req.redirect instead of res.redirect
+    req.redirect("/test/html");
+});
+app.get("/test/req-redirect-301", (req, res) => {
+    req.redirect(301, "/test/html");
+});
+// ── Test: req.forward() ──────────────────────────────────────────────────
+app.get("/test/forward", async (req, res) => {
+    try {
+        const data = await req.forward("/test/json");
+        res.json({
+            status: "Forwarded successfully",
+            receivedData: data,
+        });
+    } catch (err: any) {
+        res.status(500).json({ error: err.message });
+    }
+});
+app.post("/test/forward-post", async (req, res) => {
+    // Si on fait un POST sur ici, on forward sur /test/post-echo
+    try {
+        const data = await req.forward("/test/post-echo");
+        res.json({
+            status: "Forwarded POST successfully",
+            echo: data,
+        });
+    } catch (err: any) {
+        res.status(500).json({ error: err.message });
+    }
+});
+app.post("/test/post-echo", (req, res) => {
+    res.json({
+        bodyReceived: req.body,
+        method: req.method,
+    });
+});
+// ── Test: res.json() (sanity check) ──────────────────────────────────────
+app.get("/test/json", (req, res) => {
+    res.json({
+        message: "JSON response works",
+        features: ["res.html()", "app.redirect()", "req.redirect()"],
+        timestamp: new Date().toISOString(),
+    });
+});
+// ── Test: __sys__.$write with ensureFile ──────────────────────────────────
+app.get("/test/write", (req, res) => {
+    try {
+        const testPath = ".private/test-output/deep/nested/test.txt";
+        __sys__.$write(testPath, `Written at ${new Date().toISOString()}\n`);
+        res.json({
+            success: true,
+            path: testPath,
+            message: "File written with auto directory creation",
+        });
+    } catch (err: any) {
+        res.status(500).json({ success: false, error: err.message });
+    }
+});
+app.start();
-app.start();

package/.private/test-output/deep/nested/test.txt ADDED Viewed

	@@ -0,0 +1 @@
1	+ Written at 2026-03-04T18:53:11.733Z

package/docs/features/ENHANCED_CORE_APIS.md ADDED Viewed

@@ -0,0 +1,104 @@
+# Enhanced Core APIs & Utilities (Update 2026-03-04)
+This update introduces several key enhancements to the XyPriss HTTP Server, Security Module, and System APIs to improve Developer Experience (DX), robustness, and flexibility.
+## 1. HTTP Server Enhancements
+### `res.html(htmlString)`
+A convenience method for sending HTML responses. It automatically sets the `Content-Type` header to `text/html; charset=utf-8`.
+```typescript
+app.get("/welcome", (req, res) => {
+    res.html("<h1>Welcome to XyPriss</h1>");
+});
+```
+### Route-Level Redirection: `app.redirect()`
+You can now register dedicated redirect routes directly on the application instance. This is more efficient than manual route handlers.
+```typescript
+// Permanent redirect (301)
+app.redirect("/old-path", "/new-path");
+// Temporary redirect (302)
+app.redirect("/promo", "https://external.com", 302);
+```
+### Request-Level Redirection: `req.redirect()`
+An alias for `res.redirect()` available on the request object. Useful for semantic consistency or when passing the `req` object to utility functions.
+**Note:** Always use `return` to stop handler execution.
+```typescript
+app.get("/secure", (req, res) => {
+    if (!req.session.user) return req.redirect("/login");
+    // ... logic
+});
+```
+### Server-Side Forwarding: `req.forward()`
+Asynchronously forwards the current request to another endpoint (internal or external).
+- **Inheritance**: Uses the same method, body, and headers by default.
+- **Internal Resolution**: Automatically resolves relative paths (e.g., `/test`) to the current server's port.
+- **Auto-Parsing**: Automatically parses JSON responses.
+```typescript
+app.post("/submit", async (req, res) => {
+    // Delegate validation to another service
+    const validation = await req.forward("/internal/validate");
+    if (!validation.valid) return res.status(400).json(validation);
+    res.success({ message: "Data accepted" });
+});
+```
+---
+## 2. Security Module Updates
+### Deterministic `hash()` Function
+A simple, standalone `hash()` function is now exported from `xypriss-security` for non-password use cases like integrity checks or cache keys.
+```typescript
+import { hash } from "xypriss-security";
+const key = hash("data-to-fingerprint");
+// Always returns consistent SHA-256 hex string
+```
+---
+## 3. System & File Operations
+### Robust `$write` Operations
+The `__sys__.$write` method (and the underlying `FSApi`) now ensures that parent directories exist before writing.
+```typescript
+// Will automatically create "deep/nested/folders" if they don't exist
+__sys__.$write("deep/nested/folders/config.json", JSON.stringify(data));
+```
+### XEMS Persistence Safety
+When XEMS persistence is enabled, XyPriss now verifies and creates the directory path for the vault file automatically, preventing initialization crashes.
+---
+## 4. CLI Tools (XFPM)
+### Visual Feedback
+The `xfpm` package manager now uses professional colored logging:
+- **Red**: Errors and critical failures.
+- **Yellow**: Warnings and deprecations.
+- **Green**: Success messages.
+- **Blue**: Informational updates.

package/mods/security/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
     "name": "xypriss-security",
-    "version": "1.1.16",
+    "version": "1.1.17",
     "description": "XyPriss Security is an advanced JavaScript security library designed for enterprise applications. It provides military-grade encryption, secure data structures, quantum-resistant cryptography, and comprehensive security utilities for modern web applications.",
     "main": "./dist/cjs/index.js",
     "module": "./dist/esm/index.js",

package/mods/security/src/index.ts CHANGED Viewed

@@ -778,6 +778,28 @@ export const createSecureHMAC = Hash.createSecureHMAC;
 /** Verify hash with constant-time comparison */
 export const verifyHash = Hash.verifyHash;
+/**
+ * ### Deterministic Hash Function
+ *
+ * A simple, deterministic hash function that produces consistent SHA-256 hashes
+ * for the same input. Unlike `createSecureHash` (which auto-generates a random salt
+ * for password-grade security), this function is designed for use cases requiring
+ * repeatable output such as integrity checks, fingerprinting, and cache keys.
+ *
+ * @param input - The string or Uint8Array to hash.
+ * @param options - Optional hashing configuration (algorithm, outputFormat, etc.).
+ * @returns The hexadecimal hash string.
+ *
+ * @example
+ * ```typescript
+ * import { hash } from "xypriss-security";
+ *
+ * const fingerprint = hash("my data");
+ * // Always returns the same hash for the same input
+ * ```
+ */
+export const hash = Hash.create;
 /**
  * ## Core Security Classes
  *
@@ -1246,7 +1268,7 @@ export function fObject<T extends Record<string, any>>(
  * @see {@link https://csrc.nist.gov/publications/detail/sp/800-38a/final} NIST SP 800-38A
  */
 export function fArray<
-    T extends fArrayUtils.SecureArrayValue = fArrayUtils.SecureArrayValue
+    T extends fArrayUtils.SecureArrayValue = fArrayUtils.SecureArrayValue,
 >(...args: Parameters<typeof fArrayUtils.createSecureArray<T>>) {
     return fArrayUtils.createSecureArray<T>(...args);
 }
@@ -1415,11 +1437,11 @@ export { func } from "./components/fortified-function";
 export async function encryptSecurePass(
     password: string,
     PEPPER: string,
-    options: PasswordHashOptions = {}
+    options: PasswordHashOptions = {},
 ): Promise<string> {
     if (!PEPPER) {
         throw new Error(
-            "PEPPER must be defined when running password master. Store it securely in environment variables."
+            "PEPPER must be defined when running password master. Store it securely in environment variables.",
         );
     }
@@ -1588,11 +1610,11 @@ export async function encryptSecurePass(
 export async function verifyEncryptedPassword(
     password: string,
     hashedPassword: string,
-    PEPPER: string
+    PEPPER: string,
 ): Promise<boolean> {
     if (!PEPPER) {
         throw new Error(
-            "PEPPER must be defined when running password master. Use the same pepper as encryptSecurePass()."
+            "PEPPER must be defined when running password master. Use the same pepper as encryptSecurePass().",
         );
     }
@@ -1679,23 +1701,22 @@ export * from "./components/cache";
 export * from "./core/crypt";
-    /**
-     * Securely encrypts data using the CryptoUtils class.
-     *
-     * @public
-     * @param {string} text - The plaintext string to encrypt
-     * @param {...ConstructorParameters<typeof CryptoUtils>} args - Arguments to pass to the CryptoUtils constructor
-     *
-     * @returns {string} The encrypted string in format "IV:ENCRYPTED_DATA"
-     *
-     * @throws {Error} If validation fails or encryption operation encounters an error
-     *
-     * @example
-     * ```typescript
-     * const encrypted = encrypt('my-plaintext-data', 'my-32-character-key-here!!!!');
-     * ```
-     */
+/**
+ * Securely encrypts data using the CryptoUtils class.
+ *
+ * @public
+ * @param {string} text - The plaintext string to encrypt
+ * @param {...ConstructorParameters<typeof CryptoUtils>} args - Arguments to pass to the CryptoUtils constructor
+ *
+ * @returns {string} The encrypted string in format "IV:ENCRYPTED_DATA"
+ *
+ * @throws {Error} If validation fails or encryption operation encounters an error
+ *
+ * @example
+ * ```typescript
+ * const encrypted = encrypt('my-plaintext-data', 'my-32-character-key-here!!!!');
+ * ```
+ */
 export const encrypt = XyPrissSecurity.encrypt;
 /**
@@ -1716,4 +1737,3 @@ export const encrypt = XyPrissSecurity.encrypt;
  */
 export const decrypt = XyPrissSecurity.decrypt;

package/package.json CHANGED Viewed

@@ -1,148 +1,125 @@
 {
-    "name": "xypriss",
-    "version": "9.1.2",
-    "description": "XyPriss is a lightweight, TypeScript-first, open-source Node.js web framework crafted for developers seeking a familiar Express-like API without Express dependencies. It features built-in security middleware, a robust routing system, and performance optimizations to build scalable, secure web applications effortlessly. Join our community and contribute on GitHub!",
-    "main": "dist/cjs/index.js",
-    "module": "dist/esm/index.js",
-    "types": "dist/index.d.ts",
-    "type": "module",
-    "exports": {
-        ".": {
-            "types": "./dist/index.d.ts",
-            "import": {
-                "types": "./dist/index.d.ts",
-                "default": "./dist/esm/index.js"
-            },
-            "require": {
-                "types": "./dist/index.d.ts",
-                "default": "./dist/cjs/index.js"
-            },
-            "node": {
-                "import": "./dist/esm/index.js",
-                "require": "./dist/cjs/index.js"
-            },
-            "default": "./dist/cjs/index.js"
-        },
-        "./package.json": "./package.json"
-    },
-    "author": {
-        "name": "Nehonix",
-        "url": "https://nehonix.com",
-        "whatsapp": "https://s.nehonix.com/QBo0KpCl"
-    },
-    "scripts": {
-        "benchmark": "node benchmarks/index.js",
-        "build": "NODE_OPTIONS='--max-old-space-size=4096' npx rollup -c rollup.config.js",
-        "build:memory": "NODE_OPTIONS='--max-old-space-size=6144' npx rollup -c rollup.config.js",
-        "install-memory-cli": "node scripts/install-memory-cli.js",
-        "install-xsys": "node scripts/postinstall-xsys.js",
-        "postinstall": "node scripts/postinstall.js",
-        "prepublishOnly": "npm run build",
-        "test": "jest",
-        "test:coverage": "jest --coverage",
-        "test:watch": "jest --watch"
-    },
-    "dependencies": {
-        "@noble/ciphers": "^1.3.0",
-        "@noble/curves": "^1.9.7",
-        "@noble/hashes": "^1.8.0",
-        "@noble/secp256k1": "^2.3.0",
-        "@types/cookie-parser": "^1.4.10",
-        "@types/fast-json-stable-stringify": "^2.1.2",
-        "@types/ioredis": "^4.28.10",
-        "@types/msgpack-lite": "^0.1.12",
-        "@types/node-os-utils": "^1.3.4",
-        "@types/pako": "^2.0.4",
-        "@types/pidusage": "^2.0.5",
-        "@types/redis": "^4.0.11",
-        "@types/systeminformation": "^3.54.1",
-        "aes-js": "^3.1.2",
-        "argon2": "^0.43.1",
-        "argon2-browser": "^1.18.0",
-        "bcrypt": "^6.0.0",
-        "bcryptjs": "^2.4.3",
-        "bun": "^1.3.10",
-        "check-disk-space": "^3.4.0",
-        "compression": "^1.8.1",
-        "concurrently": "^8.2.2",
-        "cookie-parser": "^1.4.7",
-        "cors": "^2.8.6",
-        "crypto-js": "^4.2.0",
-        "crystals-kyber": "^5.1.0",
-        "csrf-csrf": "^4.0.3",
-        "elliptic": "^6.6.1",
-        "entropy-string": "^4.2.0",
-        "express-brute": "^1.0.1",
-        "express-mongo-sanitize": "^2.2.0",
-        "express-slow-down": "^3.0.1",
-        "fast-json-stable-stringify": "^2.1.0",
-        "fast-json-stringify": "^6.3.0",
-        "helmet": "^8.1.0",
-        "hpp": "^0.2.3",
-        "http-proxy-middleware": "^3.0.5",
-        "ioredis": "^5.10.0",
-        "kyber-crystals": "^1.0.7",
-        "libsodium-wrappers": "^0.7.16",
-        "mime-types": "^2.1.35",
-        "morgan": "^1.10.1",
-        "msgpack-lite": "^0.1.26",
-        "multer": "^2.1.0",
-        "nehoid": "^2.1.4",
-        "noble": "^1.9.1",
-        "node-fetch": "^3.3.2",
-        "node-forge": "^1.3.3",
-        "node-os-utils": "^1.3.7",
-        "pako": "^2.1.0",
-        "pbkdf2": "^3.1.5",
-        "pidusage": "^4.0.1",
-        "pqc-kyber": "^0.7.0",
-        "randombytes": "^2.1.0",
-        "redis": "^5.11.0",
-        "reliant-type": "^2.1.5",
-        "scrypt-js": "^3.0.1",
-        "secure-random": "^1.1.2",
-        "strulink": "^1.1.0",
-        "systeminformation": "^5.31.1",
-        "tweetnacl": "^1.0.3",
-        "ws": "^8.19.0",
-        "xss": "^1.0.15",
-        "xypriss-compression-pluging": "^1.0.3",
-        "xypriss-security": "^1.1.16"
-    },
-    "devDependencies": {
-        "@rollup/plugin-commonjs": "^25.0.8",
-        "@rollup/plugin-json": "^6.1.0",
-        "@rollup/plugin-node-resolve": "^15.3.1",
-        "@rollup/plugin-terser": "^0.4.4",
-        "@rollup/plugin-typescript": "^11.1.6",
-        "@types/bcrypt": "^5.0.2",
-        "@types/compression": "^1.8.1",
-        "@types/cors": "^2.8.19",
-        "@types/helmet": "^0.0.48",
-        "@types/hpp": "^0.2.7",
-        "@types/jest": "^29.5.14",
-        "@types/libsodium-wrappers": "^0.7.14",
-        "@types/morgan": "^1.9.10",
-        "@types/multer": "^2.0.0",
-        "@types/noble": "^0.0.44",
-        "@types/node": "^25.3.3",
-        "@types/react": "^18.3.28",
-        "@types/ws": "^8.18.1",
-        "@typescript-eslint/eslint-plugin": "^5.62.0",
-        "@typescript-eslint/parser": "^5.62.0",
-        "axios": "^1.13.6",
-        "eslint": "^8.57.1",
-        "jest": "^29.7.0",
-        "rimraf": "^4.4.1",
-        "rollup": "^4.59.0",
-        "rollup-plugin-dts": "^6.3.0",
-        "rollup-plugin-typescript2": "^0.34.1",
-        "ts-jest": "^29.4.6",
-        "ts-node": "^10.9.2",
-        "typedoc": "^0.25.13"
-    },
-    "peerDependencies": {
-        "@types/react": ">=16.8.0",
-        "react": ">=16.8.0"
-    }
-}
+  "name": "xypriss",
+  "version": "9.3.0",
+  "description": "XyPriss is a lightweight, TypeScript-first, open-source Node.js web framework crafted for developers seeking a familiar Express-like API without Express dependencies. It features built-in security middleware, a robust routing system, and performance optimizations to build scalable, secure web applications effortlessly. Join our community and contribute on GitHub!",
+  "author": {
+    "name": "Nehonix",
+    "url": "https://nehonix.com",
+    "whatsapp": "https://s.nehonix.com/QBo0KpCl"
+  },
+  "scripts": {
+    "benchmark": "node benchmarks/index.js",
+    "build": "NODE_OPTIONS='--max-old-space-size=4096' npx rollup -c rollup.config.js",
+    "build:memory": "NODE_OPTIONS='--max-old-space-size=6144' npx rollup -c rollup.config.js",
+    "install-memory-cli": "node scripts/install-memory-cli.js",
+    "install-xsys": "node scripts/postinstall-xsys.js",
+    "postinstall": "node scripts/postinstall.js",
+    "prepublishOnly": "npm run build",
+    "test": "jest",
+    "test:coverage": "jest --coverage",
+    "test:watch": "jest --watch"
+  },
+  "dependencies": {
+    "@noble/ciphers": "^1.3.0",
+    "@noble/curves": "^1.9.7",
+    "@noble/hashes": "^1.8.0",
+    "@noble/secp256k1": "^2.3.0",
+    "@types/cookie-parser": "^1.4.10",
+    "@types/fast-json-stable-stringify": "^2.1.2",
+    "@types/ioredis": "^4.28.10",
+    "@types/msgpack-lite": "^0.1.12",
+    "@types/node-os-utils": "^1.3.4",
+    "@types/pako": "^2.0.4",
+    "@types/pidusage": "^2.0.5",
+    "@types/redis": "^4.0.11",
+    "@types/systeminformation": "^3.54.1",
+    "aes-js": "^3.1.2",
+    "argon2": "^0.43.1",
+    "argon2-browser": "^1.18.0",
+    "bcrypt": "^6.0.0",
+    "bcryptjs": "^2.4.3",
+    "bun": "^1.3.10",
+    "check-disk-space": "^3.4.0",
+    "compression": "^1.8.1",
+    "concurrently": "^8.2.2",
+    "cookie-parser": "^1.4.7",
+    "cors": "^2.8.6",
+    "crypto-js": "^4.2.0",
+    "crystals-kyber": "^5.1.0",
+    "csrf-csrf": "^4.0.3",
+    "elliptic": "^6.6.1",
+    "entropy-string": "^4.2.0",
+    "express-brute": "^1.0.1",
+    "express-mongo-sanitize": "^2.2.0",
+    "express-slow-down": "^3.0.1",
+    "fast-json-stable-stringify": "^2.1.0",
+    "fast-json-stringify": "^6.3.0",
+    "helmet": "^8.1.0",
+    "hpp": "^0.2.3",
+    "http-proxy-middleware": "^3.0.5",
+    "ioredis": "^5.10.0",
+    "kyber-crystals": "^1.0.7",
+    "libsodium-wrappers": "^0.7.16",
+    "mime-types": "^2.1.35",
+    "morgan": "^1.10.1",
+    "msgpack-lite": "^0.1.26",
+    "multer": "^2.1.0",
+    "nehoid": "^2.1.4",
+    "noble": "^1.9.1",
+    "node-fetch": "^3.3.2",
+    "node-forge": "^1.3.3",
+    "node-os-utils": "^1.3.7",
+    "pako": "^2.1.0",
+    "pbkdf2": "^3.1.5",
+    "pidusage": "^4.0.1",
+    "pqc-kyber": "^0.7.0",
+    "randombytes": "^2.1.0",
+    "redis": "^5.11.0",
+    "reliant-type": "^2.1.5",
+    "scrypt-js": "^3.0.1",
+    "secure-random": "^1.1.2",
+    "strulink": "^1.1.0",
+    "systeminformation": "^5.31.1",
+    "tweetnacl": "^1.0.3",
+    "ws": "^8.19.0",
+    "xss": "^1.0.15",
+    "xypriss-compression-pluging": "^1.0.3",
+    "xypriss-security": "^1.1.17"
+  },
+  "devDependencies": {
+    "@rollup/plugin-commonjs": "^25.0.8",
+    "@rollup/plugin-json": "^6.1.0",
+    "@rollup/plugin-node-resolve": "^15.3.1",
+    "@rollup/plugin-terser": "^0.4.4",
+    "@rollup/plugin-typescript": "^11.1.6",
+    "@types/bcrypt": "^5.0.2",
+    "@types/compression": "^1.8.1",
+    "@types/cors": "^2.8.19",
+    "@types/helmet": "^0.0.48",
+    "@types/hpp": "^0.2.7",
+    "@types/jest": "^29.5.14",
+    "@types/libsodium-wrappers": "^0.7.14",
+    "@types/morgan": "^1.9.10",
+    "@types/multer": "^2.0.0",
+    "@types/noble": "^0.0.44",
+    "@types/node": "^25.3.3",
+    "@types/react": "^18.3.28",
+    "@types/ws": "^8.18.1",
+    "@typescript-eslint/eslint-plugin": "^5.62.0",
+    "@typescript-eslint/parser": "^5.62.0",
+    "axios": "^1.13.6",
+    "eslint": "^8.57.1",
+    "jest": "^29.7.0",
+    "rimraf": "^4.4.1",
+    "rollup": "^4.59.0",
+    "rollup-plugin-dts": "^6.3.0",
+    "rollup-plugin-typescript2": "^0.34.1",
+    "ts-jest": "^29.4.6",
+    "ts-node": "^10.9.2",
+    "typedoc": "^0.25.13"
+  },
+  "peerDependencies": {
+    "@types/react": "\u003e=16.8.0",
+    "react": "\u003e=16.8.0"
+  }
+}

package/src/config.ts CHANGED Viewed

@@ -325,11 +325,11 @@ class ConfigurationManager {
                     `[XyPriss] XEMS Persistence path is required when persistence is enabled.`,
                 );
             }
-            if (xems.persistence.path.length > 20) {
-                throw new Error(
-                    `[XyPriss] XEMS Persistence path too long. Maximum 20 characters allowed.`,
-                );
-            }
+            // if (xems.persistence.path.length > 20) {
+            //     throw new Error(
+            //         `[XyPriss] XEMS Persistence path too long. Maximum 20 characters allowed.`,
+            //     );
+            // }
             if (!xems?.persistence?.path?.endsWith(".xems")) {
                 throw new Error(
                     `[XyPriss] XEMS Persistence path must end with ".xems". Got ${xems?.persistence?.path}`,