xypriss 9.10.19 → 9.10.21

package/dist/src/plugins/core/manager/PluginManagement.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PluginManagement.js","sourceRoot":"","sources":["../../../../../src/plugins/core/manager/PluginManagement.ts"],"names":[],"mappings":"AAAA;;;;;;;iFAOiF;AAMjF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAMzB,YACI,QAAwB,EACxB,iBAAoC,EACpC,MAAW,EACX,MAAc;QAEd,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED;;OAEG;IACI,cAAc;QACjB,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAEvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAEjE,0BAA0B;YAC1B,IAAI,YAAY,GAAmB,UAAU,EAAE,YAAY,IAAI,GAAG,CAAC;YAEnE,gFAAgF;YAChF,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAa,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,UAAU,EAAE,WAAW,IAAI,EAAE,CAAC;gBAC7C,KAAK,MAAM,YAAY,IAAI,WAAW,EAAE,CAAC;oBACrC,IAAI,OAAQ,MAAc,CAAC,YAAY,CAAC,KAAK,UAAU,EAAE,CAAC;wBACtD,MAAM,EAAE,GACJ,WAAW,CACP,YAAwC,CAC3C,CAAC;wBACN,IACI,EAAE,KAAK,WAAW,CAAC,aAAa;4BAChC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EACtB,CAAC;4BACC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACzB,CAAC;oBACL,CAAC;gBACL,CAAC;gBACD,YAAY,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9D,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,UAAU,EAAE,WAAW,IAAI,EAAE,CAAC;gBAC7C,YAAY,GAAG,YAAY,CAAC,MAAM,CAC9B,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CACrC,CAAC;YACN,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;gBACrC,OAAO,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC;gBAC9D,WAAW,EAAE;oBACT,YAAY;oBACZ,WAAW,EAAE,UAAU,EAAE,WAAW,IAAI,EAAE;oBAC1C,MAAM,EAAE,UAAU,EAAE,MAAM,IAAI,OAAO;iBACxC;gBACD,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;aAC1C,CAAC,CAAC;QACP,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACI,mBAAmB,CACtB,UAAkB,EAClB,MAAc,EACd,OAAgB,EAChB,KAAa,QAAQ;QAErB,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,SAAS,EACT,eAAe,MAAM,iBAAiB,UAAU,KAC5C,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAC1B,OAAO,EAAE,EAAE,CACd,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,GAAG,EAAE,CAAC;QACnD,CAAC;QAED,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAC3D,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CACpC,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,UAAU,GAAG;gBACT,IAAI,EAAE,UAAU;gBAChB,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;gBACrC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpC,MAAM,EAAE,OAAO;aAClB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3D,OAAO;QACX,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBACzB,UAAU,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAClD,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAC9B,CAAC;YACN,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,CAAC;YACL,CAAC;iBAAM,IAAI,UAAU,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;gBACzC,kBAAkB;YACtB,CAAC;iBAAM,CAAC;gBACJ,UAAU,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,UAAU,CAAC,WAAW;gBAAE,UAAU,CAAC,WAAW,GAAG,EAAE,CAAC;YACzD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzC,UAAU,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,MAAM,CACpD,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAC9B,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED;;OAEG;IACI,YAAY,CACf,UAAkB,EAClB,OAAgB,EAChB,WAAoB;QAEpB,MAAM,MAAM,GAAG,WAAW,IAAI,QAAQ,CAAC;QACvC,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,SAAS,EACT,WAAW,UAAU,iBAAiB,MAAM,GAAG,CAClD,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,SAAS,EACT,WAAW,UAAU,kBAAkB,MAAM,GAAG,CACnD,CAAC;QACN,CAAC;IACL,CAAC;CACJ"}

package/dist/src/plugins/core/manager/PluginRegistry.d.ts

@@ -1,47 +0,0 @@
-/***************************************************************************
- * XyPrissJS - Fast And Secure
- *
- * @author Nehonix
- * @license Nehonix OSL (NOSL)
- *
- * Copyright (c) 2025 Nehonix. All rights reserved.
- ***************************************************************************** */
-import { Logger } from "../../../shared/logger";
-import type { XyPrissPlugin } from "../../types/PluginTypes";
-/**
- * Plugin Registry
- * Handles plugin storage, retrieval, and dependency resolution
- */
-export declare class PluginRegistry {
-    private plugins;
-    private pluginOrder;
-    private logger;
-    constructor(logger: Logger);
-    register(plugin: XyPrissPlugin): void;
-    /**
-     * Unregister a plugin from the registry
-     */
-    unregister(name: string): void;
-    /**
-     * Check if a plugin is registered (by UID or name)
-     */
-    has(id: string): boolean;
-    /**
-     * Get a plugin by UID or name
-     */
-    get(id: string): XyPrissPlugin | undefined;
-    getAll(): XyPrissPlugin[];
-    /**
-     * Get plugins by type
-     */
-    getByType(type: string): XyPrissPlugin[];
-    /**
-     * Get the resolved execution order of plugins
-     */
-    getOrder(): string[];
-    /**
-     * Resolve dependencies and determine execution order
-     */
-    resolveDependencies(): void;
-}
-//# sourceMappingURL=PluginRegistry.d.ts.map

package/dist/src/plugins/core/manager/PluginRegistry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PluginRegistry.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/core/manager/PluginRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;iFAOiF;AAEjF,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;GAGG;AACH,qBAAa,cAAc;IACvB,OAAO,CAAC,OAAO,CAAyC;IACxD,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM;IAInB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAK5C;;OAEG;IACI,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAKrC;;OAEG;IACI,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAM/B;;OAEG;IACI,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAM1C,MAAM,IAAI,aAAa,EAAE;IAIhC;;OAEG;IACI,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE;IAI/C;;OAEG;IACI,QAAQ,IAAI,MAAM,EAAE;IAI3B;;OAEG;IACI,mBAAmB,IAAI,IAAI;CAmCrC"}

package/dist/src/plugins/core/manager/PluginRegistry.js

@@ -1,96 +0,0 @@
-/***************************************************************************
- * XyPrissJS - Fast And Secure
- *
- * @author Nehonix
- * @license Nehonix OSL (NOSL)
- *
- * Copyright (c) 2025 Nehonix. All rights reserved.
- ***************************************************************************** */
-/**
- * Plugin Registry
- * Handles plugin storage, retrieval, and dependency resolution
- */
-export class PluginRegistry {
-    constructor(logger) {
-        this.plugins = new Map();
-        this.pluginOrder = [];
-        this.logger = logger;
-    }
-    register(plugin) {
-        const id = plugin.uid || plugin.name;
-        this.plugins.set(id, plugin);
-    }
-    /**
-     * Unregister a plugin from the registry
-     */
-    unregister(name) {
-        this.plugins.delete(name);
-        this.pluginOrder = this.pluginOrder.filter((n) => n !== name);
-    }
-    /**
-     * Check if a plugin is registered (by UID or name)
-     */
-    has(id) {
-        if (this.plugins.has(id))
-            return true;
-        // Fallback to name search if id is not found (for legacy/dependency resolution)
-        return Array.from(this.plugins.values()).some((p) => p.name === id);
-    }
-    /**
-     * Get a plugin by UID or name
-     */
-    get(id) {
-        if (this.plugins.get(id))
-            return this.plugins.get(id);
-        // Fallback: strictly return the first one that matches the name
-        return Array.from(this.plugins.values()).find((p) => p.name === id);
-    }
-    getAll() {
-        return Array.from(this.plugins.values());
-    }
-    /**
-     * Get plugins by type
-     */
-    getByType(type) {
-        return Array.from(this.plugins.values()).filter((p) => p.type === type);
-    }
-    /**
-     * Get the resolved execution order of plugins
-     */
-    getOrder() {
-        return this.pluginOrder;
-    }
-    /**
-     * Resolve dependencies and determine execution order
-     */
-    resolveDependencies() {
-        const visited = new Set();
-        const temp = new Set();
-        const order = [];
-        const visit = (name) => {
-            if (temp.has(name)) {
-                throw new Error(`Circular dependency detected: ${name}`);
-            }
-            if (visited.has(name))
-                return;
-            temp.add(name);
-            const plugin = this.plugins.get(name);
-            if (plugin?.dependencies) {
-                for (const dep of plugin.dependencies) {
-                    if (!this.plugins.has(dep)) {
-                        throw new Error(`Plugin '${name}' depends on '${dep}' which is not registered`);
-                    }
-                    visit(dep);
-                }
-            }
-            temp.delete(name);
-            visited.add(name);
-            order.push(name);
-        };
-        for (const id of this.plugins.keys())
-            visit(id);
-        this.pluginOrder = order;
-        this.logger.debug("plugins", "Plugin execution order:", order);
-    }
-}
-//# sourceMappingURL=PluginRegistry.js.map

package/dist/src/plugins/core/manager/PluginRegistry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PluginRegistry.js","sourceRoot":"","sources":["../../../../../src/plugins/core/manager/PluginRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;iFAOiF;AAKjF;;;GAGG;AACH,MAAM,OAAO,cAAc;IAKvB,YAAY,MAAc;QAJlB,YAAO,GAA+B,IAAI,GAAG,EAAE,CAAC;QAChD,gBAAW,GAAa,EAAE,CAAC;QAI/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAEM,QAAQ,CAAC,MAAqB;QACjC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACI,UAAU,CAAC,IAAY;QAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACI,GAAG,CAAC,EAAU;QACjB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,gFAAgF;QAChF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACI,GAAG,CAAC,EAAU;QACjB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,gEAAgE;QAChE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAEM,MAAM;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,IAAY;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACI,QAAQ;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED;;OAEG;IACI,mBAAmB;QACtB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YAE9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEtC,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;gBACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzB,MAAM,IAAI,KAAK,CACX,WAAW,IAAI,iBAAiB,GAAG,2BAA2B,CACjE,CAAC;oBACN,CAAC;oBACD,KAAK,CAAC,GAAG,CAAC,CAAC;gBACf,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC;QAEF,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;CACJ"}

package/dist/src/plugins/core/manager/PluginSecurity.d.ts

@@ -1,63 +0,0 @@
-/***************************************************************************
- * XyPrissJS - Fast And Secure
- *
- * @author Nehonix
- * @license Nehonix OSL (NOSL)
- *
- * Copyright (c) 2025 Nehonix. All rights reserved.
- ***************************************************************************** */
-import type { XyPrissPlugin, PluginServer } from "../../types/PluginTypes";
-import type { PermissionManager } from "../PermissionManager";
-/**
- * PluginSecurity
- *
- * Provides core security enforcement for the XyPriss G3 Zero-Trust architecture.
- * This class handles:
- * - Security contract verification (identity and path validation).
- * - Content integrity auditing via recursive SHA-256 fingerprinting.
- * - Ed25519 cryptographic signature verification.
- * - Generation of restricted server proxies to enforce sandbox isolation.
- */
-export declare class PluginSecurity {
-    /**
-     * Verifies the security contract for a given plugin.
-     *
-     * This method ensures the plugin is registered from an authorized path and
-     * contains the mandatory security metadata required for the G3 protocol.
-     * It also initiates root discovery if not already provided.
-     *
-     * @param plugin - The plugin instance to verify.
-     * @param callerStack - The call stack at the time of registration for traceability.
-     * @param isExecutionPhase - Whether the verification is happening during startup or at runtime.
-     * @returns The discovered or verified plugin root path.
-     * @throws {Error} If the security contract is violated or mandatory metadata is missing.
-     */
-    verifyContract(plugin: XyPrissPlugin, callerStack: string, isExecutionPhase?: boolean): string;
-    /**
-     * Throw a security contract violation error
-     */
-    private throwViolation;
-    /**
-     * Walk directory to collect files matching Go's filepath.Walk order
-     */
-    private walkDir;
-    /**
-     * Collect all files recursively into a Set
-     */
-    private collectFilesRecursive;
-    /**
-     * Checks the Content Integrity by computing the SHA256 file hashes
-     * and verifying Ed25519 signature of xypriss.plugin.xsig
-     */
-    verifyContentIntegrity(pluginRoot: string, pluginName: string): void;
-    /**
-     * Validate plugin basic metadata
-     */
-    validateMetadata(plugin: XyPrissPlugin): void;
-    /**
-     * Create a restricted proxy of the server for plugins.
-     * This limits access to only allowed methods on the app instance.
-     */
-    createRestrictedServer(server: any, pluginName: string, permissionManager: PermissionManager): PluginServer;
-}
-//# sourceMappingURL=PluginSecurity.d.ts.map

package/dist/src/plugins/core/manager/PluginSecurity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PluginSecurity.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/core/manager/PluginSecurity.ts"],"names":[],"mappings":"AAAA;;;;;;;iFAOiF;AAcjF,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;;;;;;;GASG;AACH,qBAAa,cAAc;IACvB;;;;;;;;;;;;OAYG;IAEI,cAAc,CACjB,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,gBAAgB,GAAE,OAAe,GAClC,MAAM;IAuDT;;OAEG;IACH,OAAO,CAAC,cAAc;IActB;;OAEG;IACH,OAAO,CAAC,OAAO;IAwBf;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;OAGG;IACI,sBAAsB,CACzB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACnB,IAAI;IAmKP;;OAEG;IACI,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAepD;;;OAGG;IACI,sBAAsB,CACzB,MAAM,EAAE,GAAG,EACX,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,iBAAiB,GACrC,YAAY;CAoNlB"}

package/dist/src/plugins/core/manager/PluginSecurity.js

@@ -1,417 +0,0 @@
-/***************************************************************************
- * XyPrissJS - Fast And Secure
- *
- * @author Nehonix
- * @license Nehonix OSL (NOSL)
- *
- * Copyright (c) 2025 Nehonix. All rights reserved.
- ***************************************************************************** */
-import fs from "fs";
-import path from "path";
-import { Cipher } from "xypriss-security";
-import { verifyPluginContract, isCoreFrameworkPath, getCallerProjectRoot, } from "../../../utils/ProjectDiscovery";
-import { validatePlgInput } from "../../../schemas/plugingSchema";
-import { OFFICIAL_PLUGINS } from "../../const/OFFICIAL_PLUGINS";
-/**
- * PluginSecurity
- *
- * Provides core security enforcement for the XyPriss G3 Zero-Trust architecture.
- * This class handles:
- * - Security contract verification (identity and path validation).
- * - Content integrity auditing via recursive SHA-256 fingerprinting.
- * - Ed25519 cryptographic signature verification.
- * - Generation of restricted server proxies to enforce sandbox isolation.
- */
-export class PluginSecurity {
-    /**
-     * Verifies the security contract for a given plugin.
-     *
-     * This method ensures the plugin is registered from an authorized path and
-     * contains the mandatory security metadata required for the G3 protocol.
-     * It also initiates root discovery if not already provided.
-     *
-     * @param plugin - The plugin instance to verify.
-     * @param callerStack - The call stack at the time of registration for traceability.
-     * @param isExecutionPhase - Whether the verification is happening during startup or at runtime.
-     * @returns The discovered or verified plugin root path.
-     * @throws {Error} If the security contract is violated or mandatory metadata is missing.
-     */
-    verifyContract(plugin, callerStack, isExecutionPhase = false) {
-        // --- ROOT DISCOVERY ---
-        // We now prioritize the root provided explicitly via Plugin.create(..., __sys__)
-        let pluginRoot = plugin.__root__ || "";
-        if (!pluginRoot && !isExecutionPhase) {
-            // Fallback for registration if not provided via Plugin.create
-            pluginRoot = getCallerProjectRoot() || "";
-        }
-        // --- SECURITY VALIDATION ---
-        if (!pluginRoot) {
-            // If we still have no root, we cannot verify the contract.
-            // During registration, this is a FATAL error if we're not inside the core.
-            if (!isExecutionPhase) {
-                const isOfficial = OFFICIAL_PLUGINS.includes(plugin.name);
-                if (isOfficial) {
-                    // Safe fallback for official built-in plugins if discovery failed
-                    return "";
-                }
-                this.throwViolation(plugin.name, "Unknown (Mandatory __sys__ instance missing in Plugin.create)");
-            }
-            return "";
-        }
-        // Always verify if it's NOT a core framework path
-        const isOfficial = OFFICIAL_PLUGINS.includes(plugin.name);
-        if (!isCoreFrameworkPath(pluginRoot)) {
-            if (!isOfficial) {
-                const contractOk = verifyPluginContract(pluginRoot, plugin.name);
-                if (!contractOk) {
-                    this.throwViolation(plugin.name, pluginRoot);
-                }
-            }
-            // Perform static source code analysis to catch ESM namespace imports
-            // which bypass the execution-level NativeApiBlocker.
-            // Even official plugins must adhere to the zero-trust policy.
-            // scanPluginSourceForNativeApis(pluginRoot, plugin.name); // COMMENTER POUR DES TESTS INTERNES MAIS DEVRAIT PAS L'ETRE EN PRODUCTION
-        }
-        // Cache it for future calls
-        plugin.__root__ = pluginRoot;
-        return pluginRoot;
-    }
-    /**
-     * Throw a security contract violation error
-     */
-    throwViolation(pluginName, pluginRoot) {
-        const errorMsg = `\x1b[41m\x1b[37m [XyPriss Security] FATAL ERROR::NODE \x1b[0m\n` +
-            `\x1b[31mPlugin '${pluginName}' refused registration!\x1b[0m\n` +
-            `\x1b[33mReason:\x1b[0m Mandatory '$internal' entry for '${pluginName}' or 'type: \"plugin\"' is missing in xypriss.config.json(c).\n` +
-            `\x1b[34mPlugin Path:\x1b[0m ${pluginRoot || "Unknown"}\n` +
-            `\x1b[32mAction Required:\x1b[0m Ensure 'type': 'plugin' is set and declare the plugin namespace inside the '$internal' block of the plugin's configuration file.`;
-        console.error(errorMsg);
-        throw new Error(`Security Contract Violation: Plugin ${pluginName} is missing valid configuration contract`);
-    }
-    /**
-     * Walk directory to collect files matching Go's filepath.Walk order
-     */
-    walkDir(dir, fileList = []) {
-        const entries = fs.readdirSync(dir, { withFileTypes: true });
-        for (const entry of entries) {
-            const fullPath = path.join(dir, entry.name);
-            if (entry.isDirectory()) {
-                if (entry.name === "node_modules" ||
-                    entry.name === ".git" ||
-                    entry.name === ".idea") {
-                    continue;
-                }
-                this.walkDir(fullPath, fileList);
-            }
-            else {
-                if (entry.name === "xypriss.plugin.xsig") {
-                    continue;
-                }
-                fileList.push(fullPath);
-            }
-        }
-        return fileList;
-    }
-    /**
-     * Collect all files recursively into a Set
-     */
-    collectFilesRecursive(dir, fileSet) {
-        const entries = fs.readdirSync(dir, { withFileTypes: true });
-        for (const entry of entries) {
-            const fullPath = path.join(dir, entry.name);
-            if (entry.isDirectory()) {
-                if (entry.name === "node_modules" ||
-                    entry.name === ".git" ||
-                    entry.name === ".idea") {
-                    continue;
-                }
-                this.collectFilesRecursive(fullPath, fileSet);
-            }
-            else {
-                if (entry.name === "xypriss.plugin.xsig") {
-                    continue;
-                }
-                fileSet.add(fullPath);
-            }
-        }
-    }
-    /**
-     * Checks the Content Integrity by computing the SHA256 file hashes
-     * and verifying Ed25519 signature of xypriss.plugin.xsig
-     */
-    verifyContentIntegrity(pluginRoot, pluginName) {
-        const sigPath = path.join(pluginRoot, "xypriss.plugin.xsig");
-        if (!fs.existsSync(sigPath)) {
-            this.throwViolation(pluginName, "Missing xypriss.plugin.xsig");
-        }
-        const sigRaw = fs.readFileSync(sigPath, "utf-8");
-        const lines = sigRaw.split("\n");
-        const sigContentLines = [];
-        let signatureBase64 = "";
-        let inProof = false;
-        const metadata = {};
-        for (const line of lines) {
-            const trimmedLine = line.trim();
-            if (!trimmedLine)
-                continue;
-            const proofMatch = trimmedLine.match(/^--- (BEGIN CRYPTOGRAPHIC PROOF|END XYPRISS SIGNATURE) ---$/);
-            if (proofMatch) {
-                if (proofMatch[1] === "BEGIN CRYPTOGRAPHIC PROOF") {
-                    inProof = true;
-                }
-                else {
-                    break;
-                }
-                continue;
-            }
-            if (inProof) {
-                const b64Match = trimmedLine.match(/^base64:\s*(.+)$/);
-                if (b64Match) {
-                    signatureBase64 = b64Match[1].trim();
-                }
-                continue;
-            }
-            // Collect metadata lines (including header) for verification
-            sigContentLines.push(line);
-            const metaMatch = trimmedLine.match(/^([a-zA-Z0-9-]+):\s*(.+)$/);
-            if (metaMatch) {
-                const [, key, value] = metaMatch;
-                const v = value.trim();
-                switch (key) {
-                    case "Manifest":
-                        const parts = v.split("@");
-                        metadata.name = parts[0];
-                        metadata.version = parts[1];
-                        break;
-                    case "Min-Engine":
-                        metadata.min_version = v;
-                        break;
-                    case "Fingerprint":
-                        metadata.content_hash = v;
-                        break;
-                    case "Identity":
-                        metadata.author_key = v;
-                        break;
-                    case "Expires":
-                        metadata.expires_at = v;
-                        break;
-                    case "Revision":
-                        metadata.prev_sig_hash = v;
-                        break;
-                }
-            }
-        }
-        const sigContent = sigContentLines.join("\n") + "\n";
-        // Selective Hashing: Load package.json to get the "files" array
-        const pkgPath = path.join(pluginRoot, "package.json");
-        let filesToHash = [];
-        if (fs.existsSync(pkgPath)) {
-            try {
-                const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
-                const patterns = pkg.files || [];
-                if (patterns.length > 0) {
-                    // Match XFPM logic: collect all files matching the patterns
-                    const allFilesMap = new Set();
-                    for (const pattern of patterns) {
-                        const fullPattern = path.join(pluginRoot, pattern);
-                        if (fs.existsSync(fullPattern)) {
-                            const stats = fs.statSync(fullPattern);
-                            if (stats.isDirectory()) {
-                                // Recursive walk
-                                this.collectFilesRecursive(fullPattern, allFilesMap);
-                            }
-                            else {
-                                allFilesMap.add(fullPattern);
-                            }
-                        }
-                    }
-                    filesToHash = Array.from(allFilesMap);
-                }
-            }
-            catch (e) {
-                // Fallback or handle error
-            }
-        }
-        // If 'files' is missing or empty, we fallback to our previous wide-walk
-        // (Though xfpm now enforces 'files', so this is for safety/legacy)
-        if (filesToHash.length === 0) {
-            filesToHash = this.walkDir(pluginRoot);
-        }
-        // Filter out the signature file itself
-        filesToHash = filesToHash.filter((f) => !/\.xsig$/.test(f));
-        // Match Go's sort by relative path for deterministic cross-machine hashing
-        const fileRelList = filesToHash.map((f) => ({
-            abs: f,
-            rel: path.relative(pluginRoot, f),
-        }));
-        fileRelList.sort((a, b) => a.rel < b.rel ? -1 : a.rel > b.rel ? 1 : 0);
-        const fileBuffers = fileRelList.map((file) => fs.readFileSync(file.abs));
-        const combinedBuffer = Buffer.concat(fileBuffers);
-        const hashResult = Cipher.hash.create(combinedBuffer);
-        const contentHash = `sha256:${hashResult}`;
-        if (contentHash !== metadata.content_hash) {
-            throw new Error(`FATAL(INTERNAL::NODE): Content integrity violation for ${pluginName}. Computed: ${contentHash.slice(0, 10)}..., Manifest: ${metadata.content_hash.slice(0, 10)}...`);
-        }
-        const authKey = metadata.author_key || "";
-        const pubKeyMatch = authKey.match(/^(?:ed25519:)?([a-fA-F0-9]{64})$/);
-        const pubKeyHex = pubKeyMatch ? pubKeyMatch[1] : "";
-        if (!pubKeyHex)
-            throw new Error(`FATAL(INTERNAL::NODE): Missing or invalid Identity (author_key) for ${pluginName}`);
-        const sigBuf = Buffer.from(signatureBase64, "base64");
-        const isVerified = Cipher.crypto.ed25519Verify(pubKeyHex, sigContent, sigBuf);
-        if (!isVerified) {
-            throw new Error(`FATAL(INTERNAL::NODE): Cryptographic signature verification failed for ${pluginName}`);
-        }
-    }
-    /**
-     * Validate plugin basic metadata
-     */
-    validateMetadata(plugin) {
-        if (!plugin.name || !plugin.version) {
-            throw new Error("Plugin must have name and version");
-        }
-        const vldt = validatePlgInput({
-            name: plugin.name,
-            version: plugin.version,
-        });
-        if (typeof vldt === "string") {
-            throw new Error(vldt);
-        }
-    }
-    /**
-     * Create a restricted proxy of the server for plugins.
-     * This limits access to only allowed methods on the app instance.
-     */
-    createRestrictedServer(server, pluginName, permissionManager) {
-        const allowedRoutingMethods = [
-            "get",
-            "post",
-            "put",
-            "delete",
-            "patch",
-            "options",
-            "head",
-            "connect",
-            "trace",
-            "all",
-        ];
-        const allowedMiddlewareMethods = ["use"];
-        const allowedAppMethods = [
-            ...allowedRoutingMethods,
-            ...allowedMiddlewareMethods,
-            "logger",
-            "configs",
-        ];
-        // Proxy for the app instance
-        const appProxy = new Proxy(server.app, {
-            get(target, prop) {
-                if (typeof prop === "string" &&
-                    allowedAppMethods.includes(prop)) {
-                    // --- SECURITY CHECK: Configuration Access ---
-                    if (prop === "configs") {
-                        // Exception: Official plugins can access configs
-                        if (OFFICIAL_PLUGINS.includes(pluginName)) {
-                            return target[prop];
-                        }
-                        const hasPermission = permissionManager.checkPermission(pluginName, "configs");
-                        if (!hasPermission) {
-                            return undefined;
-                        }
-                    }
-                    const originalMethod = target[prop];
-                    if (typeof originalMethod === "function") {
-                        if (allowedRoutingMethods.includes(prop) ||
-                            allowedMiddlewareMethods.includes(prop)) {
-                            // Check hook permissions
-                            const requiredHook = allowedRoutingMethods.includes(prop)
-                                ? "registerRoutes"
-                                : "middleware";
-                            const hasPermission = permissionManager.checkPermission(pluginName, requiredHook);
-                            if (!hasPermission) {
-                                // Return no-op for chainability
-                                return () => target;
-                            }
-                            // Intercept the method execution to wrap the actual route handlers/middlewares
-                            return function (...args) {
-                                const isOfficial = OFFICIAL_PLUGINS.includes(pluginName);
-                                // --- SECURITY ENFORCEMENT: Routing Boundaries ---
-                                if (allowedRoutingMethods.includes(prop) &&
-                                    args.length > 0 &&
-                                    !isOfficial) {
-                                    const pathArg = args[0];
-                                    if (typeof pathArg === "string") {
-                                        const method = prop.toUpperCase();
-                                        // 1. Namespace Check: Routes must start with /pluginId/
-                                        const expectedNamespace = `/${pluginName}`;
-                                        if (!pathArg.startsWith(expectedNamespace)) {
-                                            const hasBypass = permissionManager.checkPermission(pluginName, "bypassNamespace");
-                                            if (!hasBypass) {
-                                                console.error(`[XyPriss Security] PERMISSION DENIED: Plugin '${pluginName}' attempted to register route '${pathArg}' (${method}) outside its namespace. Requires XHS.PERM.ROUTING.BYPASS_NAMESPACE.`);
-                                                return target;
-                                            }
-                                        }
-                                        // 2. Overwrite Check: Prevent silent overwriting of existing routes
-                                        if (typeof target.getRouteRegistry ===
-                                            "function") {
-                                            const registry = target.getRouteRegistry();
-                                            const exists = registry.some((r) => r.path === pathArg &&
-                                                r.method === method);
-                                            if (exists) {
-                                                const hasOverwritePerm = permissionManager.checkPermission(pluginName, "overwriteProtected");
-                                                if (!hasOverwritePerm) {
-                                                    console.error(`[XyPriss Security] PERMISSION DENIED: Plugin '${pluginName}' attempted to overwrite existing route '${pathArg}' (${method}). Requires XHS.PERM.ROUTING.OVERWRITE_PROTECTED.`);
-                                                    return target;
-                                                }
-                                            }
-                                        }
-                                    }
-                                }
-                                // --- SECURITY ENFORCEMENT: Middleware ---
-                                if (prop === "use" && !isOfficial) {
-                                    // app.use(middleware) is global (first arg is function)
-                                    // app.use('/', middleware) is also global
-                                    const isGlobal = typeof args[0] === "function" ||
-                                        (typeof args[0] === "string" &&
-                                            args[0] === "/");
-                                    if (isGlobal) {
-                                        const hasGlobalMW = permissionManager.checkPermission(pluginName, "globalMiddleware");
-                                        if (!hasGlobalMW) {
-                                            console.error(`[XyPriss Security] PERMISSION DENIED: Plugin '${pluginName}' attempted to register global middleware. Requires XHS.PERM.HTTP.GLOBAL_MIDDLEWARE.`);
-                                            return target;
-                                        }
-                                    }
-                                }
-                                const wrappedArgs = args.map((arg) => {
-                                    // Normally handlers are functions passed after the path string
-                                    if (typeof arg === "function") {
-                                        // Wrapper function to mask request on execution
-                                        return function (req, res, next) {
-                                            const maskedReq = permissionManager.maskRequest(req, pluginName);
-                                            return arg(maskedReq, res, next);
-                                        };
-                                    }
-                                    return arg;
-                                });
-                                return originalMethod.apply(target, wrappedArgs);
-                            };
-                        }
-                        return originalMethod.bind(target);
-                    }
-                    return originalMethod;
-                }
-                // Block other properties
-                return undefined;
-            },
-        });
-        // Proxy for the server instance
-        return new Proxy(server, {
-            get(_target, prop) {
-                if (prop === "app") {
-                    return appProxy;
-                }
-                return undefined;
-            },
-        });
-    }
-}
-//# sourceMappingURL=PluginSecurity.js.map