@zintrust/core 0.1.0 → 0.1.2

package/src/cli/commands/MigrateCommand.js

@@ -19,7 +19,7 @@ export const MigrateCommand = Object.freeze({
                 .option('--reset', 'Rollback all migrations')
                 .option('--step <number>', 'Number of batches to rollback', '0');
         };
-        const execute = async (options, cmd) => {
+        const execute = (options, cmd) => {
             cmd.debug(`Migrate command executed with options: ${JSON.stringify(options)}`);
             try {
                 cmd.info('Loading configuration...');
@@ -42,14 +42,14 @@ export const MigrateCommand = Object.freeze({
                 }
             }
             catch (error) {
-                throw ErrorFactory.createTryCatchError(`Migration failed: ${error.message}`, error);
+                ErrorFactory.createTryCatchError(`Migration failed: ${error.message}`, error);
             }
         };
         const cmd = BaseCommand.create({
             name: 'migrate',
             description: 'Run database migrations',
             addOptions,
-            execute: async (options) => execute(options, cmd),
+            execute: (options) => execute(options, cmd),
         });
         return cmd;
     },

package/src/cli/commands/NewCommand.d.ts

@@ -1,3 +1,7 @@
+/**
+ * New Command - Project scaffolding CLI command
+ * Handles creation of new Zintrust projects
+ */
 import { CommandOptions, IBaseCommand } from '../BaseCommand';
 type TemplateType = 'basic' | 'api' | 'microservice';
 type DatabaseType = 'sqlite' | 'mysql' | 'postgresql' | 'mongodb';

package/src/cli/commands/NewCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NewCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/NewCommand.ts"],"names":[],"mappings":"AAOA,OAAO,EAAe,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAS7E,KAAK,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,cAAc,CAAC;AACrD,KAAK,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,CAAC;AAYlE,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAwLhD,UAAU,WAAY,SAAQ,YAAY;IACxC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxF,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG,gBAAgB,EAAE,CAAC;IACjF,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;IAChC,YAAY,IAAI,MAAM,CAAC;IACvB,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,sBAAsB,EAC9B,SAAS,CAAC,EAAE,OAAO,GAClB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAsHD;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,WAAW;EAGrB,CAAC"}
+{"version":3,"file":"NewCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/NewCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAY7E,KAAK,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,cAAc,CAAC;AACrD,KAAK,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,CAAC;AAYlE,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAiMhD,UAAU,WAAY,SAAQ,YAAY;IACxC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxF,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG,gBAAgB,EAAE,CAAC;IACjF,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;IAChC,YAAY,IAAI,MAAM,CAAC;IACvB,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,sBAAsB,EAC9B,SAAS,CAAC,EAAE,OAAO,GAClB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAwID;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,WAAW;EAGrB,CAAC"}

package/src/cli/commands/NewCommand.js

@@ -1,21 +1,17 @@
-import { appConfig } from '../../config/app';
 /**
  * New Command - Project scaffolding CLI command
  * Handles creation of new Zintrust projects
  */
-import { resolveNpmPath } from '../../common';
 import { BaseCommand } from '../BaseCommand';
 import { PromptHelper } from '../PromptHelper';
 import { ProjectScaffolder } from '../scaffolding/ProjectScaffolder';
+import { SpawnUtil } from '../utils/spawn';
+import { extractErrorMessage, resolvePackageManager } from '../../common/index';
+import { appConfig } from '../../config/app';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { execFileSync } from '../../node-singletons/child-process';
 import * as path from '../../node-singletons/path';
 import chalk from 'chalk';
-const errorToMessage = (error) => {
-    if (error instanceof Error)
-        return error.message;
-    return 'Unknown error';
-};
 const getGitBinary = () => 'git';
 const checkGitInstalled = () => {
     try {
@@ -154,20 +150,27 @@ const isFailureResult = (result) => {
     const maybe = result;
     return maybe.success === false;
 };
-const installDependencies = (projectPath, log) => {
+const installDependencies = async (projectPath, log, packageManager, force = false) => {
+    // Respect CI by default — avoid network installs in CI unless explicitly allowed
+    const isCi = Boolean(process.env['CI']);
+    const allowAuto = process.env['ZINTRUST_ALLOW_AUTO_INSTALL'] === '1' || force;
+    if (isCi && !allowAuto) {
+        log.info('Skipping automatic dependency installation in CI environment.');
+        return;
+    }
     log.info('📦 Installing dependencies (this may take a minute)...');
+    const pm = packageManager ?? resolvePackageManager();
+    const args = ['install'];
     try {
-        const npmPath = resolveNpmPath();
-        execFileSync(npmPath, ['install'], {
-            cwd: projectPath,
-            stdio: 'inherit',
-            env: appConfig.getSafeEnv(),
-        });
+        const exitCode = await SpawnUtil.spawnAndWait({ command: pm, args, cwd: projectPath });
+        if (exitCode !== 0) {
+            throw ErrorFactory.createCliError(`'${pm} install' failed with exit code ${exitCode}`);
+        }
         log.info('✅ Dependencies installed successfully');
     }
     catch (error) {
         ErrorFactory.createCliError('Dependency installation failed', error);
-        log.warn('Please run "npm install" manually in the project directory');
+        log.warn(`Please run "${pm} install" manually in the project directory`);
     }
 };
 const addOptions = (command) => {
@@ -181,6 +184,8 @@ const addOptions = (command) => {
     command.option('--no-interactive', 'Disable interactive mode');
     command.option('--no-git', 'Skip git initialization');
     command.option('--no-install', 'Skip dependency installation');
+    command.option('--install', 'Force dependency installation (useful to override CI defaults)');
+    command.option('--package-manager <manager>', 'Package manager to use (npm, yarn, pnpm)');
     command.option('--force', 'Overwrite existing directory');
     command.option('--overwrite', 'Overwrite existing directory');
 };
@@ -202,22 +207,31 @@ const executeNewCommand = async (options, command) => {
         }
         if (options['install'] !== false) {
             const projectPath = path.resolve(process.cwd(), projectName);
-            installDependencies(projectPath, command);
+            const pm = options['packageManager'] ??
+                options['package-manager'];
+            const force = options['install'] === true;
+            await installDependencies(projectPath, command, pm, force);
         }
         command.success(`\n✨ Project ${projectName} created successfully!`);
         command.info(`\nNext steps:\n  cd ${projectName}\n  npm run dev\n`);
     }
     catch (error) {
-        throw ErrorFactory.createCliError(`Project creation failed: ${errorToMessage(error)}`, error);
+        throw ErrorFactory.createCliError(`Project creation failed: ${extractErrorMessage(error)}`, error);
     }
 };
 const createNewCommandInstance = () => {
+    // BaseCommand.getCommand() closes over the execute callback passed at creation time.
+    // NewCommand needs its final implementation (which depends on the constructed instance),
+    // so we use a mutable indirection.
+    let executeImpl = async () => {
+        // replaced below with NewCommand-aware execute implementation
+    };
     const base = BaseCommand.create({
         name: 'new',
         description: 'Create a new Zintrust project',
         addOptions,
-        execute: async (_options) => {
-            // replaced below with NewCommand-aware execute implementation
+        execute: async (options) => {
+            await executeImpl(options);
         },
     });
     const commandInstance = {
@@ -264,6 +278,7 @@ const createNewCommandInstance = () => {
             await executeNewCommand(options, commandInstance);
         },
     };
+    executeImpl = commandInstance.execute;
     return commandInstance;
 };
 /**

package/src/cli/commands/PluginCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PluginCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PluginCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAK7E,eAAO,MAAM,aAAa;cACd,YAAY;EAsDtB,CAAC"}
+{"version":3,"file":"PluginCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PluginCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAK7E,eAAO,MAAM,aAAa;cACd,YAAY;EAuDtB,CAAC"}

package/src/cli/commands/PluginCommand.js

@@ -27,8 +27,9 @@ export const PluginCommand = Object.freeze({
                     .command('install <pluginId>')
                     .alias('i')
                     .description('Install a plugin')
-                    .action(async (pluginId) => {
-                    await installPlugin(pluginId);
+                    .option('--package-manager <pm>', 'Specify package manager to use (npm|yarn|pnpm)')
+                    .action(async (pluginId, options) => {
+                    await installPlugin(pluginId, options);
                 });
                 command
                     .command('uninstall <pluginId>')
@@ -74,9 +75,12 @@ async function listPlugins() {
         Logger.info(`  ${id.padEnd(20)} ${status.padEnd(15)} ${plugin.description} ${aliases}`);
     }
 }
-async function installPlugin(pluginId) {
+async function installPlugin(pluginId, options) {
     try {
-        await PluginManager.install(pluginId);
+        const pm = typeof options?.['packageManager'] === 'string'
+            ? String(options?.['packageManager'])
+            : undefined;
+        await PluginManager.install(pluginId, { packageManager: pm });
     }
     catch (error) {
         Logger.error(`Failed to install plugin ${pluginId}`, error);

package/src/cli/commands/PrepareCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PrepareCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PrepareCommand.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAchD,eAAO,MAAM,cAAc,EA2CtB,YAAY,CAAC"}
+{"version":3,"file":"PrepareCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PrepareCommand.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAehD,eAAO,MAAM,cAAc,EA2CtB,YAAY,CAAC"}

package/src/cli/commands/PrepareCommand.js

@@ -3,9 +3,9 @@
  * Makes the local dist/ folder installable via `file:/.../dist`.
  * Usage: zintrust prepare
  */
-import { resolveNpmPath } from '../../common';
 import { DistPackager } from '../utils/DistPackager';
 import { SpawnUtil } from '../utils/spawn';
+import { resolveNpmPath } from '../../common/index';
 import { Logger } from '../../config/logger';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import * as path from '../../node-singletons/path';

package/src/cli/commands/QACommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QACommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/QACommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAe,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAM7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;GAEG;AACH,UAAU,QAAQ;IAChB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,QAAQ,CAAC;IACpB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,QAAQ,CAAC;CACjB;AAsaD,UAAU,UAAW,SAAQ,YAAY;IACvC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,OAAO,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,YAAY,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC1D,cAAc,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AA0ED;;GAEG;AACH,eAAO,MAAM,SAAS,QAAO,UA0B5B,CAAC"}
+{"version":3,"file":"QACommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/QACommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAe,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAO7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;GAEG;AACH,UAAU,QAAQ;IAChB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,QAAQ,CAAC;IACpB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,QAAQ,CAAC;CACjB;AAiaD,UAAU,UAAW,SAAQ,YAAY;IACvC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,OAAO,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,YAAY,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC1D,cAAc,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAgFD;;GAEG;AACH,eAAO,MAAM,SAAS,QAAO,UAe5B,CAAC"}

package/src/cli/commands/QACommand.js

@@ -2,8 +2,8 @@
  * QA Command - Unified Quality Assurance
  * Runs linting, type-checking, tests, and SonarQube
  */
-import { resolveNpmPath } from '../../common';
 import { BaseCommand } from '../BaseCommand';
+import { extractErrorMessageStrict, resolveNpmPath } from '../../common/index';
 import { Logger } from '../../config/logger';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { execFileSync } from '../../node-singletons/child-process';
@@ -225,11 +225,6 @@ const createResults = () => ({
     tests: createEmptyResult(),
     sonar: createEmptyResult(),
 });
-const errorToMessage = (error) => {
-    if (error instanceof Error)
-        return error.message;
-    return 'Unknown error';
-};
 const runNpmScript = (name, script, result) => {
     try {
         Logger.info(`Running npm run ${script}...`);
@@ -241,7 +236,7 @@ const runNpmScript = (name, script, result) => {
     }
     catch (error) {
         result.status = 'failed';
-        result.output = errorToMessage(error);
+        result.output = extractErrorMessageStrict(error);
         ErrorFactory.createTryCatchError(`${name} failed`, error);
         Logger.warn(`${name} failed`);
         return false;
@@ -419,15 +414,20 @@ const generateReport = async (results) => {
     const reportPath = 'coverage/qa-report.html';
     const reportCssPath = 'coverage/qa-report.css';
     try {
-        const fs = await import('node:fs/promises');
-        await fs.writeFile(reportPath, htmlContent);
-        await fs.writeFile(reportCssPath, QA_REPORT_CSS);
+        const { fsPromises } = await import('../../node-singletons/fs');
+        await fsPromises.writeFile(reportPath, htmlContent);
+        await fsPromises.writeFile(reportCssPath, QA_REPORT_CSS);
         Logger.info(`QA report generated: ${reportPath}`);
     }
     catch (error) {
         ErrorFactory.createTryCatchError('Failed to generate QA report', error);
     }
 };
+const addOptions = (command) => {
+    command.option('--no-sonar', 'Skip SonarQube analysis');
+    command.option('--report', 'Generate QA report (with coverage)');
+    command.option('--no-open', 'Do not open coverage report in browser');
+};
 const executeQA = async (qa, options) => {
     try {
         qa.info('Starting Zintrust QA Suite...');
@@ -465,26 +465,16 @@ const executeQA = async (qa, options) => {
  * QA Command Factory - Create a new QA command instance
  */
 export const QACommand = () => {
-    const addOptions = (command) => {
-        command.option('--no-sonar', 'Skip SonarQube analysis');
-        command.option('--report', 'Generate QA report (with coverage)');
-        command.option('--no-open', 'Do not open coverage report in browser');
-    };
-    const cmd = BaseCommand.create({
+    const qa = BaseCommand.create({
         name: 'qa',
         description: 'Run full Quality Assurance suite',
         addOptions,
         execute: async (options) => executeQA(qa, options),
     });
-    const qa = {
-        ...cmd,
-        addOptions,
-        runLint,
-        runTypeCheck,
-        runTests,
-        runSonar,
-        generateReport,
-        execute: async (options) => executeQA(qa, options), // NOSONAR
-    };
+    qa.runLint = runLint;
+    qa.runTypeCheck = runTypeCheck;
+    qa.runTests = runTests;
+    qa.runSonar = runSonar;
+    qa.generateReport = generateReport;
     return qa;
 };

package/src/cli/commands/SecretsCommand.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Secrets Command
+ *
+ * CLI-first secrets sync using the core internal toolkit.
+ *
+ * Usage:
+ *   zin secrets pull   --provider aws|cloudflare [--manifest secrets.manifest.json] [--out .env.pull] [--dry-run]
+ *   zin secrets push   --provider aws|cloudflare [--manifest secrets.manifest.json] [--in .env] [--dry-run]
+ *   zin secrets doctor --provider aws|cloudflare
+ */
+import { type IBaseCommand } from '../BaseCommand';
+export declare const SecretsCommand: Readonly<{
+    create(): IBaseCommand;
+}>;
+export default SecretsCommand;
+//# sourceMappingURL=SecretsCommand.d.ts.map

package/src/cli/commands/SecretsCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretsCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/SecretsCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAsHvF,eAAO,MAAM,cAAc;cACf,YAAY;EAWtB,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/src/cli/commands/SecretsCommand.js

@@ -0,0 +1,91 @@
+/**
+ * Secrets Command
+ *
+ * CLI-first secrets sync using the core internal toolkit.
+ *
+ * Usage:
+ *   zin secrets pull   --provider aws|cloudflare [--manifest secrets.manifest.json] [--out .env.pull] [--dry-run]
+ *   zin secrets push   --provider aws|cloudflare [--manifest secrets.manifest.json] [--in .env] [--dry-run]
+ *   zin secrets doctor --provider aws|cloudflare
+ */
+import { BaseCommand } from '../BaseCommand';
+import { ErrorFactory } from '../../exceptions/ZintrustError';
+import { SecretsToolkit } from '../../toolkit/Secrets';
+const isUnknownArray = (value) => Array.isArray(value);
+const getArg = (args, index) => {
+    if (!isUnknownArray(args))
+        return undefined;
+    const v = args[index];
+    return typeof v === 'string' ? v : undefined;
+};
+const coerceProvider = (provider) => provider === 'aws' || provider === 'cloudflare' ? provider : undefined;
+const parseOptions = (options) => {
+    const cwd = process.cwd();
+    const action = getArg(options.args, 0) ?? 'pull';
+    const provider = typeof options.provider === 'string' ? coerceProvider(options.provider) : undefined;
+    const manifestPath = typeof options.manifest === 'string' ? options.manifest : undefined;
+    const outFile = typeof options.out === 'string' ? options.out : undefined;
+    const inFile = typeof options.in === 'string' ? options.in : undefined;
+    const dryRun = options.dryRun === true;
+    return { cwd, action, provider, manifestPath, outFile, inFile, dryRun };
+};
+const addOptions = (command) => {
+    command
+        .argument('[action]', 'pull | push | doctor', 'pull')
+        .option('--provider <provider>', 'aws | cloudflare')
+        .option('--manifest <path>', 'Manifest path (default: secrets.manifest.json)', 'secrets.manifest.json')
+        .option('--out <path>', 'Output env file for pull (default: .env.pull)', '.env.pull')
+        .option('--in <path>', 'Input env file for push (default: .env)', '.env')
+        .option('--dry-run', 'Do not write/upload, just show what would change');
+};
+const execute = async (cmd, options) => {
+    const parsed = parseOptions(options);
+    switch (parsed.action) {
+        case 'pull': {
+            const result = await SecretsToolkit.pull({
+                cwd: parsed.cwd,
+                provider: parsed.provider,
+                manifestPath: parsed.manifestPath,
+                outFile: parsed.outFile,
+                dryRun: parsed.dryRun,
+            });
+            cmd.success(`Pulled ${result.keys.length} keys to ${result.outFile}${parsed.dryRun ? ' (dry-run)' : ''}`);
+            return;
+        }
+        case 'push': {
+            const result = await SecretsToolkit.push({
+                cwd: parsed.cwd,
+                provider: parsed.provider,
+                manifestPath: parsed.manifestPath,
+                inFile: parsed.inFile,
+                dryRun: parsed.dryRun,
+            });
+            cmd.success(`Pushed ${result.keys.length} keys from ${result.inFile}${parsed.dryRun ? ' (dry-run)' : ''}`);
+            return;
+        }
+        case 'doctor': {
+            const result = SecretsToolkit.doctor({ provider: parsed.provider });
+            if (result.ok) {
+                cmd.success(`Secrets doctor OK (${result.provider})`);
+            }
+            else {
+                cmd.warn(`Secrets doctor failed (${result.provider}). Missing: ${result.missing.join(', ')}`);
+            }
+            return;
+        }
+        default:
+            throw ErrorFactory.createCliError(`Unknown secrets action: ${parsed.action}`);
+    }
+};
+export const SecretsCommand = Object.freeze({
+    create() {
+        const cmd = BaseCommand.create({
+            name: 'secrets',
+            description: 'Pull/push secrets to local .env.pull via core toolkit',
+            addOptions,
+            execute: async (options) => execute(cmd, options),
+        });
+        return cmd;
+    },
+});
+export default SecretsCommand;

package/src/cli/commands/StartCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/StartCommand.ts"],"names":[],"mappings":"AACA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAkSvF,eAAO,MAAM,YAAY;cACb,YAAY;EAsBtB,CAAC"}
+{"version":3,"file":"StartCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/StartCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAmSvF,eAAO,MAAM,YAAY;cACb,YAAY;EAsBtB,CAAC"}

package/src/cli/commands/StartCommand.js

@@ -1,10 +1,10 @@
-import { resolveNpmPath } from '../../common';
 import { BaseCommand } from '../BaseCommand';
 import { EnvFileLoader } from '../utils/EnvFileLoader';
 import { SpawnUtil } from '../utils/spawn';
+import { resolveNpmPath } from '../../common/index';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { existsSync, readFileSync } from '../../node-singletons/fs';
-import * as path from 'node:path';
+import * as path from '../../node-singletons/path';
 const isValidModeInput = (value) => value === 'development' ||
     value === 'dev' ||
     value === 'production' ||

package/src/cli/commands/TemplatesCommand.d.ts

@@ -0,0 +1,3 @@
+export declare const TemplatesCommand: import("../BaseCommand").IBaseCommand;
+export default TemplatesCommand;
+//# sourceMappingURL=TemplatesCommand.d.ts.map

package/src/cli/commands/TemplatesCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TemplatesCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/TemplatesCommand.ts"],"names":[],"mappings":"AAgCA,eAAO,MAAM,gBAAgB,yCAqC3B,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/src/cli/commands/TemplatesCommand.js

@@ -0,0 +1,65 @@
+import { BaseCommand } from '../BaseCommand';
+import { ErrorHandler } from '../ErrorHandler';
+import { ErrorFactory } from '../../exceptions/ZintrustError';
+import { listTemplates as listMail, renderTemplate as renderMail } from '../../tools/mail/templates/markdown';
+import { listTemplates as listNotification, renderTemplate as renderNotification, } from '../../tools/notification/templates/markdown';
+const listForScope = (scope) => {
+    let items = [];
+    if (scope === 'mail' || scope === 'all')
+        items = items.concat(listMail());
+    if (scope === 'notification' || scope === 'all')
+        items = items.concat(listNotification());
+    items.sort((a, b) => a.localeCompare(b));
+    return items;
+};
+const renderByScope = (name, scope) => {
+    if (scope === 'mail')
+        return renderMail(name);
+    if (scope === 'notification')
+        return renderNotification(name);
+    try {
+        return renderMail(name);
+    }
+    catch {
+        try {
+            return renderNotification(name);
+        }
+        catch (error_) {
+            throw ErrorFactory.createTryCatchError('Template render failed', error_);
+        }
+    }
+};
+export const TemplatesCommand = BaseCommand.create({
+    name: 'templates',
+    description: 'Manage and render markdown templates (mail & notification)',
+    addOptions: (command) => {
+        command.argument('<action>', 'Action: list|render');
+        command.argument('[scope]', 'Scope: mail|notification|all', 'all');
+        command.argument('[name]', 'Template name when action=render');
+    },
+    execute: (options) => {
+        const action = options.args?.[0];
+        const scope = options.args?.[1] ?? 'all';
+        const name = options.args?.[2];
+        const handleList = (sc) => {
+            const items = listForScope(sc);
+            items.forEach((it) => ErrorHandler.info(it));
+        };
+        const handleRender = (nm, sc) => {
+            if (nm === null || nm === undefined || nm === '')
+                throw ErrorFactory.createValidationError('Template name required');
+            const out = renderByScope(nm, sc);
+            ErrorHandler.info(out.html);
+        };
+        if (action === 'list') {
+            handleList(scope);
+            return;
+        }
+        if (action === 'render') {
+            handleRender(name, scope);
+            return;
+        }
+        throw ErrorFactory.createValidationError(`Unknown action: ${String(action)}`);
+    },
+});
+export default TemplatesCommand;

package/src/cli/commands/index.d.ts

@@ -4,8 +4,13 @@
 export { AddCommand } from '../commands/AddCommand';
 export { ConfigCommand } from '../commands/ConfigCommand';
 export { DebugCommand } from '../commands/DebugCommand';
+export { LogsCleanupCommand } from '../commands/LogsCleanupCommand';
+export { MakeMailTemplateCommand } from '../commands/MakeMailTemplateCommand';
+export { MakeNotificationTemplateCommand } from '../commands/MakeNotificationTemplateCommand';
 export { MigrateCommand } from '../commands/MigrateCommand';
 export { NewCommand } from '../commands/NewCommand';
 export { PrepareCommand } from '../commands/PrepareCommand';
+export { SecretsCommand } from '../commands/SecretsCommand';
 export { StartCommand } from '../commands/StartCommand';
+export { TemplatesCommand } from '../commands/TemplatesCommand';
 //# sourceMappingURL=index.d.ts.map

package/src/cli/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC"}

package/src/cli/commands/index.js

@@ -4,7 +4,12 @@
 export { AddCommand } from '../commands/AddCommand';
 export { ConfigCommand } from '../commands/ConfigCommand';
 export { DebugCommand } from '../commands/DebugCommand';
+export { LogsCleanupCommand } from '../commands/LogsCleanupCommand';
+export { MakeMailTemplateCommand } from '../commands/MakeMailTemplateCommand';
+export { MakeNotificationTemplateCommand } from '../commands/MakeNotificationTemplateCommand';
 export { MigrateCommand } from '../commands/MigrateCommand';
 export { NewCommand } from '../commands/NewCommand';
 export { PrepareCommand } from '../commands/PrepareCommand';
+export { SecretsCommand } from '../commands/SecretsCommand';
 export { StartCommand } from '../commands/StartCommand';
+export { TemplatesCommand } from '../commands/TemplatesCommand';

package/src/cli/config/ConfigManager.js

@@ -6,7 +6,7 @@ import { ConfigPaths, DEFAULT_CONFIG, getConfigValue, setConfigValue, } from '..
 import { Logger } from '../../config/logger';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { fsPromises as fs } from '../../node-singletons/fs';
-import * as path from 'node:path';
+import * as path from '../../node-singletons/path';
 /**
  * Deep merge helper
  */

package/src/cli/index.d.ts

@@ -4,11 +4,12 @@
  */
 export { BaseCommand, type CommandOptions } from './BaseCommand';
 export { CLI } from './CLI';
-export { EXIT_CODES, ErrorHandler } from './ErrorHandler';
+export { ErrorHandler, EXIT_CODES } from './ErrorHandler';
 export { PromptHelper, type PromptOptions } from './PromptHelper';
 export { AddCommand } from './commands/AddCommand';
 export { ConfigCommand } from './commands/ConfigCommand';
 export { DebugCommand } from './commands/DebugCommand';
 export { MigrateCommand } from './commands/MigrateCommand';
 export { NewCommand } from './commands/NewCommand';
+export { SecretsCommand } from './commands/SecretsCommand';
 //# sourceMappingURL=index.d.ts.map

package/src/cli/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGrE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGrE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC"}

package/src/cli/index.js

@@ -4,7 +4,7 @@
  */
 export { BaseCommand } from './BaseCommand';
 export { CLI } from './CLI';
-export { EXIT_CODES, ErrorHandler } from './ErrorHandler';
+export { ErrorHandler, EXIT_CODES } from './ErrorHandler';
 export { PromptHelper } from './PromptHelper';
 // Export commands
 export { AddCommand } from './commands/AddCommand';
@@ -12,3 +12,4 @@ export { ConfigCommand } from './commands/ConfigCommand';
 export { DebugCommand } from './commands/DebugCommand';
 export { MigrateCommand } from './commands/MigrateCommand';
 export { NewCommand } from './commands/NewCommand';
+export { SecretsCommand } from './commands/SecretsCommand';

package/src/cli/scaffolding/ControllerGenerator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ControllerGenerator.d.ts","sourceRoot":"","sources":["../../../../src/cli/scaffolding/ControllerGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE/F,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAcD;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAgChG;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,yBAAyB,CAAC,CA2CpC;AA6cD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,EAAE,CAEpD;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;EAI9B,CAAC"}
+{"version":3,"file":"ControllerGenerator.d.ts","sourceRoot":"","sources":["../../../../src/cli/scaffolding/ControllerGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE/F,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAcD;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAgChG;AAED;;GAEG;AAEH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA2CjG;AA6cD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,EAAE,CAEpD;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;EAI9B,CAAC"}