zexus 1.8.2 → 1.8.3

package/src/zexus/zexus_ast.py

@@ -196,10 +196,13 @@ class PrintStatement(Statement):
         return f"PrintStatement(values={self.values})"
 
 class ForEachStatement(Statement):
-    def __init__(self, item, iterable, body):
+    def __init__(self, item, iterable, body, index=None):
         self.item = item; self.iterable = iterable; self.body = body
+        self.index = index  # R-006/R-007: optional index/key variable for indexed iteration
 
     def __repr__(self):
+        if self.index:
+            return f"ForEachStatement(index={self.index}, item={self.item}, iterable={self.iterable})"
         return f"ForEachStatement(item={self.item}, iterable={self.iterable})"
 
 class EmbeddedCodeStatement(Statement):

package/src/zexus/zpm/package_manager.py

@@ -23,7 +23,7 @@ class PackageManager:
         self.installer = PackageInstaller(self.zpm_dir)
         self.publisher = PackagePublisher(self.registry)
         
-    def init(self, name: str = None, version: str = "1.8.2") -> Dict:
+    def init(self, name: str = None, version: str = "1.8.3") -> Dict:
         """Initialize a new Zexus project with package.json"""
         if self.config_file.exists():
             print(f"⚠️  {self.config_file} already exists")

package/src/zexus.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: zexus
-Version: 1.8.2
+Version: 1.8.3
 Summary: A modern, security-first programming language with blockchain support
 Home-page: https://github.com/Zaidux/zexus-interpreter
 Author: Zaidux
@@ -69,14 +69,14 @@ Dynamic: requires-python
 
 <div align="center">
 
-![Zexus Logo](https://img.shields.io/badge/Zexus-v1.8.1-FF6B35?style=for-the-badge)
+![Zexus Logo](https://img.shields.io/badge/Zexus-v1.8.3-FF6B35?style=for-the-badge)
 [![License](https://img.shields.io/badge/License-MIT-blue.svg?style=for-the-badge)](LICENSE)
 [![Python](https://img.shields.io/badge/Python-3.8+-3776AB?style=for-the-badge&logo=python)](https://python.org)
 [![GitHub](https://img.shields.io/badge/GitHub-Zaidux/zexus--interpreter-181717?style=for-the-badge&logo=github)](https://github.com/Zaidux/zexus-interpreter)
 
 **A modern, security-first programming language with built-in blockchain support, VM-accelerated execution, advanced memory management, and policy-as-code**
 
-[What's New](#-whats-new-in-v171) • [Features](#-key-features) • [Installation](#-installation) • [Quick Start](#-quick-start) • [Keywords](#-complete-keyword-reference) • [Documentation](#-documentation) • [Examples](#-examples) • [Troubleshooting](#-getting-help--troubleshooting)
+[What's New](#-whats-new-in-v183) • [Features](#-key-features) • [Installation](#-installation) • [Quick Start](#-quick-start) • [Keywords](#-complete-keyword-reference) • [Documentation](#-documentation) • [Examples](#-examples) • [Troubleshooting](#-getting-help--troubleshooting)
 
 </div>
 
@@ -85,7 +85,7 @@ Dynamic: requires-python
 ## 📋 Table of Contents
 
 - [What is Zexus?](#-what-is-zexus)
-- [What's New](#-whats-new-in-v171)
+- [What's New](#-whats-new-in-v183)
 - [Key Features](#-key-features)
   - [VM-Accelerated Performance](#-vm-accelerated-performance-new)
   - [Security & Policy-as-Code](#-security--policy-as-code--verify-enhanced)
@@ -134,71 +134,96 @@ Zexus is a next-generation, general-purpose programming language designed for se
 
 ---
 
-## 🎉 What's New in v1.8.1
-
-### Latest Features (v1.8.1)
-
-✅ **FIND Keyword** - Declarative project search that resolves exact module paths with scope filtering and smart suggestions  
-✅ **LOAD Keyword & Manager** - Provider-aware configuration loader with built-in ENV, JSON, and YAML support plus caching  
-✅ **VM + Bytecode Support** - FIND/LOAD now compile to bytecode with helper bridges so scripts run identically in the VM and interpreter  
-✅ **Targeted Test Coverage** - Added regression tests that exercise both interpreter and VM paths for FIND/LOAD workflows  
-
-### Previous Features (v1.6.3)
-
-✅ **Complete Database Ecosystem** - Production-ready database drivers  
-✅ **4 Database Drivers** - SQLite, PostgreSQL, MySQL, MongoDB fully tested  
-✅ **HTTP Server** - Build web servers with routing (GET, POST, PUT, DELETE)  
-✅ **Socket/TCP Primitives** - Low-level network programming  
-✅ **Testing Framework** - Write and run tests with assertions  
-✅ **ZPM Package Manager** - Fully functional package management system  
-✅ **Comprehensive Documentation** - 900+ lines of ecosystem guides  
-
-### Previous Features (v1.5.0)
-
-✅ **World-Class Error Reporting** - Production-grade error messages rivaling Rust  
-✅ **Advanced DATA System** - Generic types, pattern matching, operator overloading  
-✅ **Stack Trace Formatter** - Beautiful, readable stack traces with source context  
-✅ **Smart Error Suggestions** - Actionable hints for fixing common errors  
-✅ **Pattern Matching** - Complete pattern matching with exhaustiveness checking  
-✅ **CONTINUE Keyword** - Error recovery mode for graceful degradation and batch processing  
-
-### Recent Enhancements (v0.1.3)
-
-✅ **130+ Keywords Fully Operational** - All core language features tested and verified  
-✅ **Dual-Mode DEBUG** - Function mode (`debug(x)`) and statement mode (`debug x;`)  
-✅ **Conditional Print** - `print(condition, message)` for dynamic output control  
-✅ **Multiple Syntax Styles** - `let x = 5`, `let x : 5`, `let x : int = 5` all supported  
-✅ **Enterprise Keywords** - MIDDLEWARE, AUTH, THROTTLE, CACHE, INJECT fully functional  
-✅ **Async/Await Runtime** - Complete Promise-based async system with context propagation  
-✅ **Main Entry Point** - 15+ builtins for program lifecycle management  
-✅ **UI Renderer** - SCREEN, COMPONENT, THEME keywords with 120+ tests  
-✅ **Enhanced VERIFY** - Email, URL, phone validation, pattern matching, database checks  
-✅ **Blockchain Keywords** - implements, pure, view, payable, modifier, this, emit  
-✅ **Loop Control** - BREAK keyword for early loop exit  
-✅ **Error Handling** - THROW keyword for explicit error raising, THIS for instance reference  
-✅ **100+ Built-in Functions** - Comprehensive standard library  
-✅ **LOG Keyword Enhancements** - `read_file()` and `eval_file()` for dynamic code generation  
-✅ **REQUIRE Tolerance Blocks** - Conditional bypasses for VIP/admin/emergency scenarios  
-✅ **Function-Level Scoping** - LET/CONST documented with scope behavior and shadowing rules  
-✅ **Advanced Error Patterns** - Retry, circuit breaker, error aggregation patterns
-
-### Bug Fixes & Improvements
-
-✅ Fixed array literal parsing (no more duplicate elements)  
-✅ Fixed ENUM value accessibility  
-✅ Fixed WHILE condition parsing without parentheses  
-✅ Fixed loop execution and variable reassignment  
-✅ Fixed DEFER cleanup execution  
-✅ Fixed SANDBOX return values  
-✅ Fixed dependency injection container creation  
-✅ Added tolerance blocks for REQUIRE  
-✅ Improved error messages and debugging output
+## 🎉 What's New in v1.8.3
+
+### v1.8.3 — Phase 0 Audit Fixes, Closure Scoping Overhaul & VM Hardening (2026-03-01)
+
+19 issues from the [Ziver-Chain Phase 0 rewrite audit](issues/ISSUE8.md) resolved — including 3 VM-specific critical fixes. Key changes:
+
+**VM Fixes & Hardening:**
+- **R-001:** Entity field access on VM now works — proper `EntityDefinition`/`EntityInstance` construction from bytecode
+- **R-002:** Contract `state` declarations now compile correctly (`_compile_StateStatement`)
+- **R-010:** Complex programs no longer silently fail — added `_vm_warn()` diagnostics, replaced 15 silent error handlers
+- Native fast-path (`_vm_native_call`) for `push`/`append`/`length`/`str`/`range` operations on VM-native types
+- `VMRuntimeError(Exception)` replaces non-raisable `ZEvaluationError(Object)` in 15 raise sites
+- Stack overflow protection, execution timeout (30s), opcode limit (100M), configurable VM pool sizing
+- **Rust VM status indicator** — CLI/runner show "Rust VM: active", "available but disabled", or "not compiled"
+
+**Closure & Scoping Fixes:**
+- Entity/`let` declarations before a contract no longer break contract visibility — declaration order is now flexible
+- Module-level helper functions called from contract methods now correctly propagate side-effects (`list.push()`, `map[k]=v`)
+- `action protect` now works at module level (policy enforcement added to function call path)
+- Storage sync-back in contract methods improved — `list.push()` after `map[key]=val` no longer silently ignored
+- Exported entities can now be used as constructors in importing files
+
+**Contract & Language Fixes:**
+- `self` keyword works as alias for `this` inside contracts
+- `init()` auto-called on `Contract()` construction
+- `state { field1: val, field2: val }` multi-field blocks work correctly
+- `for each i, item in list` (indexed) and `for each key, val in map` now supported
+- `INTEGER * FLOAT` implicit coercion and `%` modulo on floats now work
+- Added `range()`, `typeof()`, `abs()`, `str()`, `length()` builtins; 8 parser edge-case fixes
+
+**Stats:** 1852 tests pass, 0 regressions. 5 new extreme test suites (83 tests across speed, stability, security, features, VM). See [CHANGELOG](CHANGELOG.md) for full details.
+
+### v1.8.2 — Concurrency & Channel Support (2026-02-25)
+
+- `watch =>` arrow-lambda fallback no longer hijacks the strategy parser
+- Channel support in VM compiler (`_compile_ChannelStatement`, `_compile_SendStatement`, `_compile_ReceiveStatement`)
+- SPAWN/AWAIT opcodes in sync path using `threading.Thread(daemon=True)`
+- Strategy parser channel/async handlers added
+- Fixed 10+ missing VM node types; zero VM fallbacks achieved
+- All versions bumped to 1.8.2; Rust VM builds with `maturin develop --release`
+
+### v1.8.1 — ISSUE7 Audit & Security Remediation (2026-02-23)
+
+All 21 issues from the Phase 0 audit resolved:
+- `emit`, `protocol`, `implements` keywords fully operational in all parsers
+- Entity compilation crash in VM fixed; imported functions no longer return raw Action objects
+- `map.has()` / `map.get()` key normalization fixed
+- ExportStatement supported in VM; entity constructor arity validation relaxed
+- `persistent storage` now wires to SQLite backend with `set_persistent`/`get_persistent`
+- 5 new builtins: `track_memory()`, `cache()`, `throttle()`, `audit()`, `verify()`
+- Complete security remediation Phases 0–5 (sandboxing, ReDoS, import sandboxing, compiler parity, dead-code removal, bounded logs)
+- 1852 tests pass
+
+### v1.8.0 — Rust VM Pipeline & Major Features (2026-02-23)
+
+**Language Features:** Compound assignment (`+=`, `-=`, etc.), string interpolation (`"Hello ${name}"`), block comments (`/* */`), multiline strings, single-quoted strings, exponentiation (`**`), `finally` clause, destructuring assignment.
+
+**Developer Tooling:** Circular import detection, LSP go-to-definition, remote ZPM registry, static type checker.
+
+**Major Capabilities:** Debug Adapter Protocol (DAP) server, GUI backend (Tk + Web), true concurrent EventLoop, WASM compilation target.
+
+**Rust-First Execution (Phases 0–6):** Complete migration achieving **102,000+ TPS** with zero Python fallbacks. Includes binary `.zxc` format, Rust bytecode interpreter (22 MIPS, 20.7x speedup), adaptive VM routing, `RustContractVM` orchestration, GIL-free batch execution (221,593 TPS peak), and 40+ Rust builtins.
+
+### v1.7.x — FIND/LOAD Keywords & Performance (2026-01)
+
+- **v1.7.2:** Major interpreter speed improvements, smart storage for lists, optimized stack traces, blockchain perf fix
+- **v1.7.1:** FIND keyword (declarative module search), LOAD keyword (provider-aware config loader), VM bytecode support for both, regression tests
+
+### v1.6.x — Database Ecosystem & Security (2025-12 – 2026-01)
+
+- **v1.6.8:** Parser fix for indexed assignments on new lines; contract DATA member declarations
+- **v1.6.7:** Semicolon handling fix, context-aware keyword recognition, standalone block statements
+- **v1.6.6:** Repeated contract action calls, multiple indexed assignments
+- **v1.6.5:** Entity property access, keyword restrictions (`from`/`to` as params), multiple map assignments
+- **v1.6.3:** Comprehensive security remediation (10 OWASP categories), RBAC, bcrypt, input sanitization, resource limits, path traversal prevention
+- **v1.6.2:** 4 database drivers (SQLite, PostgreSQL, MySQL, MongoDB), HTTP server, socket/TCP, testing framework, ZPM
+
+### v1.5.0 — Error Reporting & Type System (2025-12)
+
+World-class error messages (rivaling Rust), generic types, pattern matching, operator overloading, stack trace formatter, smart suggestions, CONTINUE keyword.
+
+### v0.1.3 — Foundation (2025-11)
+
+130+ keywords, dual-mode DEBUG, conditional print, multiple syntax styles, enterprise keywords, async/await, UI renderer, enhanced VERIFY, blockchain keywords, 100+ builtins.
 
 ---
 
-## 🔒 Latest Security Patches & Features (v1.6.3)
+## 🔒 Security Features
 
-Zexus v1.6.3 introduces **comprehensive security enhancements** and developer-friendly safety features. These improvements make Zexus one of the most secure interpreted languages available, with enterprise-grade protection built into the language itself.
+Zexus includes **comprehensive security enhancements** and developer-friendly safety features, making it one of the most secure interpreted languages available with enterprise-grade protection built into the language itself.
 
 ### 🛡️ Security Features Added
 

package/src/zexus.egg-info/SOURCES.txt

@@ -8,6 +8,7 @@ COMPLETE_FIXES_DOCUMENTATION.md
 CURRENT_ZEXUS.md
 DEMO_ALL_FIXES.zx
 FIX_SUMMARY.md
+IMPROVEMENT_PLAN.md
 LICENSE
 NEXT_STEPS.md
 PARSER_SEMICOLON_FIX.md
@@ -484,6 +485,7 @@ issues/ISSUE4.md
 issues/ISSUE5.md
 issues/ISSUE6.md
 issues/ISSUE7.md
+issues/ISSUE8.md
 issues/ISSUSE1.md
 issues/tests/test_issue5.zx
 linguist-submission/SUBMISSION_INSTRUCTIONS.md
@@ -645,6 +647,10 @@ src/zexus/evaluator/resource_limiter.py
 src/zexus/evaluator/statements.py
 src/zexus/evaluator/unified_execution.py
 src/zexus/evaluator/utils.py
+src/zexus/kernel/__init__.py
+src/zexus/kernel/hooks.py
+src/zexus/kernel/registry.py
+src/zexus/kernel/zir/__init__.py
 src/zexus/lsp/__init__.py
 src/zexus/lsp/completion_provider.py
 src/zexus/lsp/definition_provider.py
@@ -751,11 +757,18 @@ tests/conftest.py
 tests/debug_print_parse.py
 tests/debug_tokens.py
 tests/example.test.zx
+tests/extreme_features_test.zx
+tests/extreme_security_test.zx
+tests/extreme_speed_test.zx
+tests/extreme_stability_test.zx
+tests/extreme_vm_test.zx
 tests/final_integration_test.zx
 tests/test_async_system_integration.py
 tests/test_full_integration.py
 tests/test_global.zx
 tests/test_integration.py
+tests/test_issue8_advanced.zx
+tests/test_issue8_fixes.zx
 tests/test_memory_safety.py
 tests/test_module_system.py
 tests/test_simple_if.zx
@@ -951,6 +964,7 @@ tests/integration/keywords/test_let_function_call.zx
 tests/integration/keywords/test_let_in_if.zx
 tests/integration/keywords/test_loops.zx
 tests/integration/keywords/test_while_simple.zx
+tests/kernel/test_kernel.py
 tests/keyword_tests/README.md
 tests/keyword_tests/run_keyword_test.sh
 tests/keyword_tests/test_module_helper.zx
@@ -1056,6 +1070,13 @@ tests/security/test_string_debug.zx
 tests/security/test_taint_tracking.zx
 tests/security/test_type_safety.zx
 tests/security/test_var_debug.zx
+tests/stdlib/__init__.py
+tests/stdlib/test_crypto_module.py
+tests/stdlib/test_datetime_module.py
+tests/stdlib/test_encoding_module.py
+tests/stdlib/test_fs_module.py
+tests/stdlib/test_json_module.py
+tests/stdlib/test_math_module.py
 tests/unit/simple_test.py
 tests/unit/test_advanced_types.py
 tests/unit/test_advanced_vs_traditional.py
@@ -1064,13 +1085,16 @@ tests/unit/test_audit_enhanced.py
 tests/unit/test_basic.py
 tests/unit/test_capability_system.py
 tests/unit/test_concurrent_execution.py
+tests/unit/test_config.py
 tests/unit/test_convenience_advanced_features.py
 tests/unit/test_ecosystem.py
 tests/unit/test_edge_cases.py
+tests/unit/test_environment.py
 tests/unit/test_evaluator_long_program_stress.py
 tests/unit/test_exact_phase10.py
 tests/unit/test_find_load_keywords.py
 tests/unit/test_hybrid.py
+tests/unit/test_lexer.py
 tests/unit/test_lexer_directly.py
 tests/unit/test_long_file_stability.py
 tests/unit/test_map_fix.py
@@ -1090,10 +1114,35 @@ tests/unit/test_renderer_keywords.py
 tests/unit/test_restrict_trail_sandbox.py
 tests/unit/test_runner.py
 tests/unit/test_seal_components.py
+tests/unit/test_security_classes.py
 tests/unit/test_type_system.py
 tests/unit/test_virtual_filesystem.py
 tests/unit/test_zexus_phases.py
 tests/unit/test_zexus_program.py
+tests/v183_fixes/test_advanced_contracts.zx
+tests/v183_fixes/test_edge_cases_basic.zx
+tests/v183_fixes/test_edge_cases_collections.zx
+tests/v183_fixes/test_edge_cases_contracts.zx
+tests/v183_fixes/test_edge_cases_control_flow.zx
+tests/v183_fixes/test_edge_cases_cross_method.zx
+tests/v183_fixes/test_edge_cases_functions.zx
+tests/v183_fixes/test_entities.zx
+tests/v183_fixes/test_error_handling.zx
+tests/v183_fixes/test_integration.zx
+tests/v183_fixes/test_q001_map_has.zx
+tests/v183_fixes/test_q002_list_is_empty.zx
+tests/v183_fixes/test_r003_self_keyword.zx
+tests/v183_fixes/test_r004_auto_init.zx
+tests/v183_fixes/test_r005_r013_multi_state.zx
+tests/v183_fixes/test_r006_indexed_foreach.zx
+tests/v183_fixes/test_r007_map_foreach.zx
+tests/v183_fixes/test_r009_nested_assign.zx
+tests/v183_fixes/test_r016_mixed_arithmetic.zx
+tests/v183_fixes/test_r017_float_modulo.zx
+tests/v183_fixes/test_real_world_tokens.zx
+tests/v183_fixes/test_scope_closures.zx
+tests/v183_fixes/test_string_arithmetic.zx
+tests/v183_fixes/test_vm_stability.zx
 tests/vm/benchmark_cache.py
 tests/vm/benchmark_memory.py
 tests/vm/benchmark_parallel_vm.py
@@ -1103,6 +1152,7 @@ tests/vm/test_async_optimizer.py
 tests/vm/test_async_verification.py
 tests/vm/test_binary_bytecode.py
 tests/vm/test_blockchain_opcodes.py
+tests/vm/test_bytecode_optimizer.py
 tests/vm/test_cache.py
 tests/vm/test_comprehensive_vm_verification.py
 tests/vm/test_integration_all_phases.py
@@ -1127,6 +1177,7 @@ tests/vm/test_vm_async_integration.py
 tests/vm/test_vm_memory_pool_integration.py
 tests/vm/test_vm_peephole_integration.py
 tests/vm/test_vm_ssa_integration.py
+tests/vm/test_vm_v183_functions.py
 tests/zx_features/harness.zx
 tests/zx_features/run_all.sh
 tests/zx_features/test_10_upgrade_verify_accel.zx