@artilingo/artiframe-cli 2.0.4 → 2.0.5

package/src/Commands/MakeApiCommand.php

@@ -45,7 +45,12 @@ class MakeApiCommand
             return;
         }
 
-        $stubName = 'api-' . $type . '.stub';
+                $stubName = 'api-' . $type . '.stub';
+        
+        if (str_starts_with($target, 'auth') || str_starts_with($target, 'auth/')) {
+            $stubName = 'auth-' . $stubName;
+        }
+
         $stubPath = \ARTIFRAME_CLI_ROOT . '/stubs/make/' . $stubName;
 
         if (!file_exists($stubPath)) {

package/src/Commands/MakeViewCommand.php

@@ -53,7 +53,11 @@ class MakeViewCommand
         $jsPath  = $projectRoot . '/public' . $jsRelative;
 
         // Stub path
-        $stubPath = \ARTIFRAME_CLI_ROOT . '/stubs/make/view.stub';
+        if (str_starts_with($subDir, 'auth') || str_starts_with($subDir, 'auth/')) {
+            $stubPath = \ARTIFRAME_CLI_ROOT . '/stubs/make/auth-view.stub';
+        } else {
+            $stubPath = \ARTIFRAME_CLI_ROOT . '/stubs/make/view.stub';
+        }
         if (!file_exists($stubPath)) {
             echo "❌ " . $this->translator->get('ERROR_STUB_NOT_FOUND', ['path' => $stubPath]) . PHP_EOL;
             echo $this->translator->get('ERROR_RUN_FROM_ROOT') . PHP_EOL;
@@ -79,7 +83,26 @@ class MakeViewCommand
 
         file_put_contents($viewPath, $content);
         file_put_contents($cssPath, "/* CSS for {$title} */\n");
-        file_put_contents($jsPath, "/* JS for {$title} */\n");
+        $jsContent = <<<EOT
+/* JS for {$title} */
+
+// CSRF Token (API istekleri için zorunludur)
+const csrfToken = document.querySelector('meta[name="csrf-token"]')?.getAttribute('content');
+
+/*
+ * Fetch API Örnek Kullanımı:
+ * 
+ * fetch('/api/standart/endpoint', {
+ *     method: 'POST',
+ *     headers: {
+ *         'Content-Type': 'application/json',
+ *         'X-CSRF-TOKEN': csrfToken
+ *     },
+ *     body: JSON.stringify({ key: 'value' })
+ * });
+ */
+EOT;
+        file_put_contents($jsPath, $jsContent . "\n");
 
         echo $this->translator->get('SUCCESS_VIEW', ['path' => $target]) . PHP_EOL;
         echo $this->translator->get('SUCCESS_CSS', ['path' => $cssRelative]) . PHP_EOL;

package/src/Commands/NewProjectCommand.php

@@ -88,7 +88,7 @@ class NewProjectCommand
         // Toplam adım sayısını hesapla
         $coreStubs    = \ARTIFRAME_CLI_ROOT . '/core-stubs';
         $stubCount    = $this->countFiles($coreStubs);
-        $dynamicCount = 14; // createDynamicFiles içindeki dosya sayısı
+        $dynamicCount = 12; // createDynamicFiles içindeki dosya sayısı
         $dirCount     = 10;  // oluşturulacak dinamik dizin sayısı
         $this->totalSteps = $stubCount + $dynamicCount + $dirCount;
 
@@ -428,7 +428,8 @@ class NewProjectCommand
     },
     "files": [
       "bin/ViewMethod.php",
-      "bin/SystemMethod.php"
+      "bin/SystemMethod.php",
+      "bin/SQLMethod.php"
     ]
   },
   "authors": [
@@ -450,17 +451,11 @@ JSON;
         // config/app-version.php
         file_put_contents(
             $targetDir . '/config/app-version.php',
-            $licenseHeader . "\n// APP_ENV: 0 = Canlı (Prod), 1 = Geliştirici (Debug)\ndefine('APP_ENV', 1);\ndefine('APP_VERSION', '1.0.0');\n"
+            $licenseHeader . "\n// APP_ENV: 0 = Canlı (Prod), 1 = Geliştirici (Debug)\ndefine('APP_ENV', 1);\ndefine('APP_VERSION', '1.0.0');\ndefine('APP_MAINTENANCE', false); // true yaparsanız sistem 503 Bakım Moduna geçer\n"
         );
         $this->tick('config/app-version.php');
 
-        // config/central-control.php
-        file_put_contents($targetDir . '/config/central-control.php', $licenseHeader . "\n// Central Control Configurations\n");
-        $this->tick('config/central-control.php');
 
-        // config/api-security.php
-        file_put_contents($targetDir . '/config/api-security.php', $licenseHeader . "\n// API Security Rules\n");
-        $this->tick('config/api-security.php');
 
         // .env & .env.example
         $envStub = implode("\n", [
@@ -473,8 +468,7 @@ JSON;
             "# Uygulama",
             "APP_NAME=ArtiFrame",
             "APP_URL=http://localhost",
-            "APP_MAINTENANCE=false",
-            "",
+                        "",
             "# Veritabanı (MySQL / MariaDB)",
             "DB_HOST=localhost",
             "DB_USER=root",
@@ -487,6 +481,17 @@ JSON;
             "REDIS_PORT=6379",
             "REDIS_PASSWORD=",
             "REDIS_DB=0",
+            "",
+            "# ── mail (phpmailer) ──────────────────────",
+            "# Mailpit varsayilan ayarlari: SMTP 1025, Web UI 8025",
+            "MAIL_MAILER=smtp",
+            "MAIL_HOST=127.0.0.1",
+            "MAIL_PORT=1025",
+            "MAIL_USERNAME=",
+            "MAIL_PASSWORD=",
+            "MAIL_ENCRYPTION=",
+            "MAIL_FROM_ADDRESS=\"hello@example.com\"",
+            "MAIL_FROM_NAME=\"ArtiFrame\"",
         ]) . "\n";
         file_put_contents($targetDir . '/.env', $envStub);
         $this->tick('.env');

package/src/Commands/OptimizeCommand.php

@@ -0,0 +1,61 @@
+<?php
+namespace ArtiFrame\Cli\Commands;
+
+use ArtiFrame\Cli\Services\Translator;
+use ArtiFrame\Cli\Services\Safeguard;
+
+class OptimizeCommand
+{
+    private Translator $translator;
+    private Safeguard  $safeguard;
+
+    public function __construct(Translator $translator)
+    {
+        $this->translator = $translator;
+        $this->safeguard  = new Safeguard($translator);
+    }
+
+    public function execute(array $args): void
+    {
+        $projectRoot = $this->safeguard->getProjectRoot();
+        $envPath = $projectRoot . '/.env';
+        $cacheDir = $projectRoot . '/config';
+        $cachePath = $cacheDir . '/env-cache.php';
+
+        if (!file_exists($envPath)) {
+            echo "❌ .env file not found at: {$envPath}\n";
+            return;
+        }
+
+        if (!is_dir($cacheDir)) {
+            mkdir($cacheDir, 0755, true);
+        }
+
+        $lines = file($envPath, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
+        $config = [];
+
+        foreach ($lines as $line) {
+            $line = trim($line);
+            if (str_starts_with($line, '#')) continue;
+            if (!str_contains($line, '=')) continue;
+
+            list($name, $value) = explode('=', $line, 2);
+            $name = trim($name);
+            $value = trim(trim($value), '"\'');
+            
+            // Handle booleans
+            if (strtolower($value) === 'true') $value = true;
+            elseif (strtolower($value) === 'false') $value = false;
+            
+            $config[$name] = $value;
+        }
+
+        $export = var_export($config, true);
+        $phpCode = "<?php\n// Auto-generated by artiframe optimize\n// DO NOT EDIT MANUALLY\nreturn {$export};\n";
+
+        file_put_contents($cachePath, $phpCode);
+
+        echo "✅ Environment variables cached successfully at config/env-cache.php\n";
+        echo "⚠️  IMPORTANT: Add env-cache.php to your .gitignore if running locally.\n";
+    }
+}

package/src/Commands/RemoveCommand.php

@@ -40,13 +40,24 @@ class RemoveCommand
              return;
         }
 
-        echo "\n⚠️  " . $this->translator->get('REMOVE_CONFIRM_FILE', ['path' => $targetPath]) . " [y/N]: ";
-        $ans = trim(fgets(STDIN));
-        if (strtolower($ans) !== 'y') {
-            echo "Abort.\n";
+        // ─── Path Traversal Ön Kontrolü ──────────────────────────
+        $resolvedEarly = realpath($targetPath);
+        $realProjectRoot = realpath($projectRoot);
+        if ($resolvedEarly && $realProjectRoot && !str_starts_with($resolvedEarly, $realProjectRoot . '/')) {
+            echo "❌ Güvenlik ihlali: Hedef dosya proje dizini dışında!\n";
             return;
         }
 
+        $force = in_array('--force', $args) || in_array('-y', $args);
+        if (!$force) {
+            echo "\n⚠️  " . $this->translator->get('REMOVE_CONFIRM_FILE', ['path' => $targetPath]) . " [y/N]: ";
+            $ans = trim(fgets(STDIN));
+            if (strtolower($ans) !== 'y') {
+                echo "Abort.\n";
+                return;
+            }
+        }
+
         $targetPath = realpath($targetPath);
         $normalizedPath = str_replace('\\', '/', $targetPath);
         $isView = strpos($normalizedPath, '/public/') !== false && strpos($normalizedPath, '/public/api/') === false && strpos($normalizedPath, '/public/assets/') === false;
@@ -75,8 +86,15 @@ class RemoveCommand
             }
 
             if (!empty($assetsFound)) {
-                echo "\n⚠️  " . $this->translator->get('REMOVE_CONFIRM_ASSETS') . " [y/N]: ";
-                $ansAssets = trim(fgets(STDIN));
+                if (in_array('--no-assets', $args)) {
+                    $ansAssets = 'n';
+                } elseif (!$force) {
+                    echo "\n⚠️  " . $this->translator->get('REMOVE_CONFIRM_ASSETS') . " [y/N]: ";
+                    $ansAssets = trim(fgets(STDIN));
+                } else {
+                    $ansAssets = 'y';
+                }
+                
                 if (strtolower($ansAssets) === 'y') {
                     foreach ($assetsFound as $a) {
                         unlink($a);
@@ -97,6 +115,16 @@ class RemoveCommand
                         echo "   -> " . $usage['file'] . " (Lines: " . implode(', ', $usage['lines']) . ")\n";
                     }
                     echo "\n📌 " . $this->translator->get('REMOVE_API_WARNING') . "\n";
+                    
+                    // --force olsa bile kullanım tespit edilirse --force-class olmadan iptal et
+                    if (!in_array('--force-class', $args)) {
+                        echo "\n❓ Yine de silmek istiyor musunuz? [y/N]: ";
+                        $ansClass = trim(fgets(STDIN));
+                        if (strtolower($ansClass) !== 'y') {
+                            echo "Abort.\n";
+                            return;
+                        }
+                    }
                 }
             }
         }
@@ -130,4 +158,4 @@ class RemoveCommand
         }
         return $usages;
     }
-}
+}

package/src/Commands/ServeCommand.php

@@ -1,91 +1,46 @@
-<?php
-namespace ArtiFrame\Cli\Commands;
-
-use ArtiFrame\Cli\Services\Translator;
-
-class ServeCommand
-{
-    private Translator $translator;
-
-    public function __construct(Translator $translator)
-    {
-        $this->translator = $translator;
-    }
-
-    public function execute(array $args): void
-    {
-        $safeguard = new \ArtiFrame\Cli\Services\Safeguard($this->translator);
-        $projectRoot = $safeguard->getProjectRoot();
-        $publicDir   = $projectRoot . '/public';
-
-        if (!is_dir($publicDir) || !file_exists($publicDir . '/index.php')) {
-            echo "
-  ❌  " . $this->translator->get('SERVE_NOT_PROJECT') . "
-
-";
-            return;
-        }
-
-        $host = 'localhost';
-        $port = '8000';
-
-        if (isset($args[0]) && is_numeric($args[0])) {
-            $port = $args[0];
-        }
-
-        // Detect Local IP
-        $localIp = 'Unknown';
-        $sock = @socket_create(AF_INET, SOCK_DGRAM, SOL_UDP);
-        if ($sock) {
-            @socket_connect($sock, "8.8.8.8", 53);
-            @socket_getsockname($sock, $localIp);
-            @socket_close($sock);
-        }
-        if ($localIp === 'Unknown' || $localIp === '127.0.0.1' || $localIp === '::1' || empty($localIp)) {
-            $localIp = getHostByName(getHostName());
-        }
-
-        $localUrl = "http://localhost:{$port}";
-        $networkUrl = "http://{$localIp}:{$port}";
-        
-        echo "
-  🚀  " . $this->translator->get('SERVE_STARTING', ['url' => "0.0.0.0:{$port}"]) . "
-";
-        echo "      " . $this->translator->get('SERVE_STOP_INFO') . "
-
-      Local:   {$localUrl}";
-        
-        if ($localIp && $localIp !== '127.0.0.1' && $localIp !== 'Unknown') {
-            echo "
-      Network: {$networkUrl}";
-        }
-        echo "\n\n";
-
-        $os = PHP_OS_FAMILY;
-        
-        // Command to start PHP built-in server on all interfaces (0.0.0.0)
-        $phpCmd = sprintf('php -S 0.0.0.0:%s -t %s', $port, escapeshellarg($publicDir));
-
-        if ($os === 'Windows') {
-            // Open Browser
-            pclose(popen("start {$localUrl}", "r"));
-            // Start Server in new visible CMD window
-            pclose(popen("start \"ArtiFrame Server\" cmd /k \"{$phpCmd}\"", "r"));
-        } elseif ($os === 'Darwin') {
-            // Open Browser
-            exec("open {$localUrl} > /dev/null 2>&1 &");
-            // Start Server in new Terminal window
-            $appleScript = 'tell app "Terminal" to do script "' . escapeshellcmd($phpCmd) . '"';
-            exec("osascript -e " . escapeshellarg($appleScript));
-        } else {
-            // Open Browser
-            exec("xdg-open {$localUrl} > /dev/null 2>&1 &");
-            // Linux: Try common terminals, fallback to background process
-            $linuxCmd = sprintf(
-                'gnome-terminal -- bash -c "%s" || xterm -e "%s" || konsole -e "%s" || %s > /dev/null 2>&1 &',
-                $phpCmd, $phpCmd, $phpCmd, $phpCmd
-            );
-            exec($linuxCmd);
-        }
-    }
-}
+<?php
+namespace ArtiFrame\Cli\Commands;
+
+use ArtiFrame\Cli\Services\Translator;
+
+class ServeCommand
+{
+    private Translator $translator;
+
+    public function __construct(Translator $translator)
+    {
+        $this->translator = $translator;
+    }
+
+    public function execute(array $args): void
+    {
+        $safeguard = new \ArtiFrame\Cli\Services\Safeguard($this->translator);
+        $projectRoot = $safeguard->getProjectRoot();
+        $publicDir   = $projectRoot . '/public';
+
+        if (!is_dir($publicDir) || !file_exists($publicDir . '/index.php')) {
+            echo "\n  ❌  " . $this->translator->get('SERVE_NOT_PROJECT') . "\n\n";
+            return;
+        }
+
+        $port = '9002';
+        if (isset($args[0]) && is_numeric($args[0])) {
+            $port = $args[0];
+        }
+
+        echo "\n  🚀  ArtiFrame Server Studio başlatılıyor...\n";
+        
+        $serverStudioPath = dirname(__DIR__, 2) . '/server-studio';
+        $os = PHP_OS_FAMILY;
+        
+        $cmd = sprintf('npm run start --prefix %s -- %s %s', escapeshellarg($serverStudioPath), escapeshellarg($projectRoot), escapeshellarg($port));
+        
+        if ($os === 'Windows') {
+            pclose(popen("start \"ArtiFrame Server Studio\" cmd /c \"{$cmd}\"", "r"));
+        } else {
+            exec("{$cmd} > /dev/null 2>&1 &");
+        }
+        
+        echo "  ✅ Server Studio arka planda açıldı. Gelişmiş arayüzü kontrol edin.\n\n";
+    }
+}

package/src/Commands/ShowCommand.php

@@ -1,24 +1,24 @@
-<?php
-namespace ArtiFrame\Cli\Commands;
-
-use ArtiFrame\Cli\Services\Translator;
-
-class ShowCommand
-{
-    private Translator $translator;
-
-    public function __construct(Translator $translator)
-    {
-        $this->translator = $translator;
-    }
-
-    public function execute(array $args): void
-    {
-        echo "
-  📍  " . $this->translator->get('SHOW_CURRENT_DIR') . "
-";
-        echo "      " . getcwd() . "
-
-";
-    }
-}
+<?php
+namespace ArtiFrame\Cli\Commands;
+
+use ArtiFrame\Cli\Services\Translator;
+
+class ShowCommand
+{
+    private Translator $translator;
+
+    public function __construct(Translator $translator)
+    {
+        $this->translator = $translator;
+    }
+
+    public function execute(array $args): void
+    {
+        echo "
+  📍  " . $this->translator->get('SHOW_CURRENT_DIR') . "
+";
+        echo "      " . getcwd() . "
+
+";
+    }
+}

package/src/Commands/UpgradeCommand.php

@@ -69,17 +69,14 @@ class UpgradeCommand
         // ── KURAL 3 & ANA İŞLEM: KOPYALAMA ──────────────────────────────
         $this->copyDirectory(\ARTIFRAME_CLI_ROOT . '/core-stubs/app', $targetDir . '/app');
         $this->copyDirectory(\ARTIFRAME_CLI_ROOT . '/core-stubs/bin', $targetDir . '/bin');
-
-        // Docs
-        $docsSource = \ARTIFRAME_CLI_ROOT . '/core-stubs/docs';
-        $docsTarget = $targetDir . '/public/docs';
-        if (is_dir($docsSource)) {
-            if (!is_dir($docsTarget)) {
-                mkdir($docsTarget, 0755, true);
-            }
-            $this->copyDirectory($docsSource, $docsTarget);
+        
+        // Public (Eksik layout/UI dosyalarini tamamla ama var olanlari ezme)
+        if (is_dir(\ARTIFRAME_CLI_ROOT . '/core-stubs/public')) {
+            $this->copyDirectorySafe(\ARTIFRAME_CLI_ROOT . '/core-stubs/public', $targetDir . '/public');
         }
 
+
+
         // ── KURAL 4: SERVICE STUB EZİLMESİ ──────────────────────────────
         $servicesDir = $targetDir . '/src/Service';
         $stubsServicesDir = \ARTIFRAME_CLI_ROOT . '/stubs/services';
@@ -206,4 +203,36 @@ class UpgradeCommand
         }
         return $functions;
     }
-}
+
+    private function copyDirectorySafe(string $source, string $target): void
+    {
+        if (!is_dir($target)) {
+            mkdir($target, 0755, true);
+        }
+
+        $dir = opendir($source);
+        while (($file = readdir($dir)) !== false) {
+            if ($file === '.' || $file === '..') {
+                continue;
+            }
+            $srcFile = $source . '/' . $file;
+            $tgtFile = $target . '/' . $file;
+
+            if (is_dir($srcFile)) {
+                $this->copyDirectorySafe($srcFile, $tgtFile);
+            } else {
+                if (!file_exists($tgtFile)) {
+                    copy($srcFile, $tgtFile);
+                    
+                    $normalizedTarget = str_replace('\\', '/', $tgtFile);
+                    $normalizedCwd = str_replace('\\', '/', getcwd()) . '/';
+                    $relativePath = str_replace($normalizedCwd, '', $normalizedTarget);
+                    
+                    $this->changes['added'][] = $relativePath;
+                }
+            }
+        }
+        closedir($dir);
+    }
+
+}

package/stubs/make/api-switch-case.stub

@@ -14,7 +14,7 @@ require_once $_SERVER['DOCUMENT_ROOT'] . '/../app/ApiControl.php';
 
 use Bin\SystemMethod;
 
-$action = sanitizeString($_POST['action'] ?? '');
+$action = stripHtml($_POST['action'] ?? '');
 
 switch ($action) {
     case 'create':

package/stubs/make/auth-api-standart.stub

@@ -0,0 +1,20 @@
+<?php
+/**
+ * ArtiFrame Core Engine
+ *
+ * @package     ArtiFrame
+ * @author      Artilingo
+ * @license     AGPLv3 (Attribution-ShareAlike Required)
+ */
+
+// İzin verilen HTTP metodları (Örn: GET, POST, PUT, DELETE)
+$allowedMethods = ['POST'];
+
+require_once $_SERVER['DOCUMENT_ROOT'] . '/../app/ApiAuthControl.php';
+
+use Bin\SystemMethod;
+
+// API İş Mantığı (Business Logic) Başlangıcı
+// ...
+
+jsonResponse(['status' => 'success', 'message' => 'İşlem başarılı.'], 200);

package/stubs/make/auth-api-switch-case.stub

@@ -0,0 +1,38 @@
+<?php
+/**
+ * ArtiFrame Core Engine
+ *
+ * @package     ArtiFrame
+ * @author      Artilingo
+ * @license     AGPLv3 (Attribution-ShareAlike Required)
+ */
+
+// İzin verilen HTTP metodları (Örn: GET, POST, PUT, DELETE)
+$allowedMethods = ['POST'];
+
+require_once $_SERVER['DOCUMENT_ROOT'] . '/../app/ApiAuthControl.php';
+
+use Bin\SystemMethod;
+
+$action = stripHtml($_POST['action'] ?? '');
+
+switch ($action) {
+    case 'create':
+        // TODO: Oluşturma işlemleri
+        jsonResponse(['status' => 'success', 'message' => 'Başarıyla oluşturuldu.'], 200);
+        break;
+
+    case 'update':
+        // TODO: Güncelleme işlemleri
+        jsonResponse(['status' => 'success', 'message' => 'Başarıyla güncellendi.'], 200);
+        break;
+
+    case 'delete':
+        // TODO: Silme işlemleri
+        jsonResponse(['status' => 'success', 'message' => 'Başarıyla silindi.'], 200);
+        break;
+
+    default:
+        jsonResponse(['status' => 'error', 'message' => 'Geçersiz veya eksik action parametresi.'], 400);
+        break;
+}

package/stubs/make/auth-view.stub

@@ -0,0 +1,26 @@
+<?php
+// Auth kalkanı (Sadece giriş yapmamış kullanıcılar görebilir)
+require_once $_SERVER['DOCUMENT_ROOT'] . '/../app/AuthControl.php';
+use Bin\ViewMethod;
+?>
+<!DOCTYPE html>
+<html lang="{{LANG}}" data-theme="default" data-mode="light">
+<head>
+    <?php require_once $_SERVER['DOCUMENT_ROOT'] . '/includes/head-auth.php'; ?>
+
+    <title>{{VIEW_TITLE}}</title>
+
+    <!-- View-Specific Assets with Cache-Busting -->
+    <link rel="stylesheet" href="{{CSS_PATH}}?v=<?= APP_VERSION ?>">
+    <script src="{{JS_PATH}}?v=<?= APP_VERSION ?>" defer></script>
+</head>
+<body>
+    <main class="auth-wrapper">
+        <div class="auth-container">
+            <h1>{{VIEW_TITLE}}</h1>
+            <!-- Auth form content starts here -->
+
+        </div>
+    </main>
+</body>
+</html>

package/stubs/make/class.stub

@@ -15,11 +15,19 @@
 namespace {{NAMESPACE}};
 
 use Bin\SystemMethod;
+use App\Database;
+use PDO;
 
 class {{CLASS_NAME}}
 {
+    /**
+     * @var PDO $db Veritabanı bağlantısı (Singleton)
+     */
+    private PDO $db;
+
     public function __construct()
     {
-        // Constructor logic
+        // Singleton üzerinden hazır PDO bağlantısını değişkene ata
+        $this->db = Database::getInstance();
     }
-}
+}

package/stubs/make/view.stub

@@ -24,6 +24,9 @@ use Bin\ViewMethod;
 
     </main>
 
+    <!-- Mobile Navigation -->
+    <?php require_once $_SERVER['DOCUMENT_ROOT'] . '/includes/mobilenav.php'; ?>
+
     <!-- Footer -->
     <?php require_once $_SERVER['DOCUMENT_ROOT'] . '/includes/footer.php'; ?>
 </body>