@zintrust/core 0.1.1 → 0.1.3

package/src/cli/commands/D1MigrateCommand.js

@@ -2,12 +2,13 @@
  * D1 Migrate Command
  * Run Cloudflare D1 migrations using Wrangler
  */
-import { resolveNpmPath } from '../../common';
-import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { BaseCommand } from '../BaseCommand';
+import { resolveNpmPath } from '../../common/index';
 import { appConfig } from '../../config/app';
 import { Logger } from '../../config/logger';
+import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { execFileSync } from '../../node-singletons/child-process';
+// eslint-disable-next-line @typescript-eslint/require-await
 const runWrangler = async (cmd, args) => {
     const npmPath = resolveNpmPath();
     cmd.debug(`Executing: npm exec --yes -- wrangler ${args.join(' ')}`);
@@ -16,7 +17,7 @@ const runWrangler = async (cmd, args) => {
         encoding: 'utf8',
         env: appConfig.getSafeEnv(),
     });
-    return Promise.resolve(result);
+    return result;
 };
 const executeD1Migrate = async (cmd, options) => {
     const isLocal = options['local'] === true || options['remote'] !== true;

package/src/cli/commands/FixCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FixCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/FixCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAuE7E;;GAEG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,YAAY;EAkBtB,CAAC"}
+{"version":3,"file":"FixCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/FixCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAmD7E;;GAEG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,YAAY;EAkBtB,CAAC"}

package/src/cli/commands/FixCommand.js

@@ -4,21 +4,9 @@
  */
 import { appConfig } from '../../config';
 import { BaseCommand } from '../BaseCommand';
+import { resolveNpmPath } from '../../common/index';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { execFileSync } from '../../node-singletons/child-process';
-import fs from '../../node-singletons/fs';
-import * as path from '../../node-singletons/path';
-const resolveNpmPath = () => {
-    const nodeBinDir = path.dirname(process.execPath);
-    const candidates = process.platform === 'win32'
-        ? [path.join(nodeBinDir, 'npm.cmd'), path.join(nodeBinDir, 'npm.exe')]
-        : [path.join(nodeBinDir, 'npm')];
-    for (const candidate of candidates) {
-        if (fs.existsSync(candidate))
-            return candidate;
-    }
-    throw ErrorFactory.createCliError('Unable to locate npm executable. Ensure Node.js (with npm) is installed in the standard location.');
-};
 const runNpmScript = (cmd, args) => {
     const npmPath = resolveNpmPath();
     cmd.debug(`Executing: npm run ${args.join(' ')}`);
@@ -28,7 +16,7 @@ const runNpmScript = (cmd, args) => {
         env: appConfig.getSafeEnv(),
     });
 };
-const executeFix = async (cmd, options) => {
+const executeFix = (cmd, options) => {
     cmd.info('Starting automated code fixes...');
     try {
         const isDryRun = options['dryRun'] === true;
@@ -54,7 +42,6 @@ const executeFix = async (cmd, options) => {
         ErrorFactory.createCliError('Fix command failed', error);
         cmd.warn('Some fixes could not be applied automatically.');
     }
-    return Promise.resolve();
 };
 /**
  * Fix Command Factory
@@ -71,7 +58,7 @@ export const FixCommand = Object.freeze({
             name: 'fix',
             description: 'Run automated code fixes',
             addOptions,
-            execute: async (options) => executeFix(cmd, options),
+            execute: (options) => executeFix(cmd, options),
         });
         cmd.resolveNpmPath = () => resolveNpmPath();
         cmd.getSafeEnv = () => appConfig.getSafeEnv();

package/src/cli/commands/LogsCleanupCommand.d.ts

@@ -0,0 +1,6 @@
+import { type IBaseCommand } from '../BaseCommand';
+export declare const LogsCleanupCommand: Readonly<{
+    create(): IBaseCommand;
+}>;
+export default LogsCleanupCommand;
+//# sourceMappingURL=LogsCleanupCommand.d.ts.map

package/src/cli/commands/LogsCleanupCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LogsCleanupCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/LogsCleanupCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGlE,eAAO,MAAM,kBAAkB;cACnB,YAAY;EAiBtB,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/src/cli/commands/LogsCleanupCommand.js

@@ -0,0 +1,20 @@
+import { BaseCommand } from '../BaseCommand';
+import { cleanLogsOnce } from '../../config/logger';
+export const LogsCleanupCommand = Object.freeze({
+    create() {
+        // Create the command first, then assign the execute implementation so we can
+        // safely reference the instance (`cmd`) from inside the handler.
+        const cmd = BaseCommand.create({
+            name: 'logs:cleanup',
+            description: 'Run a one-off log cleanup based on configured retention',
+            execute: async () => { },
+        });
+        cmd.execute = async (_options) => {
+            cmd.info('Running log cleanup...');
+            const deleted = await cleanLogsOnce();
+            cmd.info(`Deleted ${deleted.length} log files`);
+        };
+        return cmd;
+    },
+});
+export default LogsCleanupCommand;

package/src/cli/commands/LogsCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LogsCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/LogsCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAM7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4KpC,eAAO,MAAM,WAAW;IACtB;;OAEG;cACO,YAAY;IAwBtB;;;OAGG;sBACe,OAAO,GAAG,IAAI;EAchC,CAAC;AAEH,eAAe,WAAW,CAAC"}
+{"version":3,"file":"LogsCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/LogsCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAO7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2KpC,eAAO,MAAM,WAAW;IACtB;;OAEG;cACO,YAAY;IAwBtB;;;OAGG;sBACe,OAAO,GAAG,IAAI;EAchC,CAAC;AAEH,eAAe,WAAW,CAAC"}

package/src/cli/commands/LogsCommand.js

@@ -7,8 +7,8 @@ import { Logger as FileLogger } from '../logger/Logger';
 import { Logger } from '../../config/logger';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import fs from '../../node-singletons/fs';
+import * as path from '../../node-singletons/path';
 import chalk from 'chalk';
-import * as path from 'node:path';
 const normalizeLogsOptions = (options) => {
     const level = typeof options['level'] === 'string' ? options['level'] : 'info';
     const clear = options['clear'] === true;

package/src/cli/commands/MakeMailTemplateCommand.d.ts

@@ -0,0 +1,10 @@
+/**
+ * make:mail-template
+ * Scaffolds a mail markdown template into the project.
+ */
+import { IBaseCommand } from '../BaseCommand';
+export declare const MakeMailTemplateCommand: Readonly<{
+    create(): IBaseCommand;
+}>;
+export default MakeMailTemplateCommand;
+//# sourceMappingURL=MakeMailTemplateCommand.d.ts.map

package/src/cli/commands/MakeMailTemplateCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MakeMailTemplateCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/MakeMailTemplateCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAgC7E,eAAO,MAAM,uBAAuB;cACxB,YAAY;EA4EtB,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/src/cli/commands/MakeMailTemplateCommand.js

@@ -0,0 +1,74 @@
+/**
+ * make:mail-template
+ * Scaffolds a mail markdown template into the project.
+ */
+import { BaseCommand } from '../BaseCommand';
+import { ErrorHandler } from '../ErrorHandler';
+import { PromptHelper } from '../PromptHelper';
+import { FileGenerator } from '../scaffolding/FileGenerator';
+import { TemplateGenerator } from '../scaffolding/TemplateGenerator';
+import { ErrorFactory } from '../../exceptions/ZintrustError';
+import * as path from '../../node-singletons/path';
+const addOptions = (command) => {
+    command.argument('[name]', 'Template name (alphanumeric + hyphens only)');
+    command.option('--category <category>', 'auth|transactional|notifications');
+    command.option('--vars <csv>', 'Comma-separated variables (e.g., name,confirmLink,expiryMinutes)');
+    command.option('--overwrite', 'Overwrite existing file');
+    command.option('--no-interactive', 'Disable prompts (requires args/options)');
+};
+const defaultCopyright = () => process.env['TEMPLATE_COPYRIGHT'] ?? '© 2025 Zintrust Framework. All rights reserved.';
+export const MakeMailTemplateCommand = Object.freeze({
+    create() {
+        return BaseCommand.create({
+            name: 'make:mail-template',
+            description: 'Scaffold a mail markdown template into src/mail/markdown',
+            addOptions,
+            execute: async (options) => {
+                const interactive = options.noInteractive !== true;
+                const argName = options.args?.[0];
+                const name = argName ??
+                    (interactive ? await PromptHelper.textInput('Template name:', 'welcome', true) : '');
+                if (name.trim() === '') {
+                    throw ErrorFactory.createValidationError('Template name required');
+                }
+                const categoryInput = options.category ??
+                    (interactive
+                        ? await PromptHelper.chooseFrom('Category:', ['auth', 'transactional', 'notifications'], 'auth', true)
+                        : 'auth');
+                const category = categoryInput;
+                const varsCsv = options.vars ??
+                    (interactive
+                        ? await PromptHelper.textInput('Variables (comma-separated):', 'name,confirmLink,expiryMinutes', true)
+                        : '');
+                const variables = TemplateGenerator.parseVariablesCsv(varsCsv);
+                TemplateGenerator.ensureDirectories(process.cwd());
+                // If file exists and overwrite not specified, ask.
+                const desired = {
+                    name,
+                    category,
+                    variables,
+                    copyright: defaultCopyright(),
+                    projectRoot: process.cwd(),
+                    overwrite: options.overwrite === true,
+                };
+                if (options.overwrite !== true && interactive) {
+                    const relPath = path.join('src', 'mail', 'markdown', category, `${name}.md`);
+                    const fullPath = path.join(process.cwd(), relPath);
+                    if (FileGenerator.fileExists(fullPath)) {
+                        const confirm = await PromptHelper.confirm('File exists. Overwrite?', false, true);
+                        if (confirm) {
+                            desired.overwrite = true;
+                        }
+                    }
+                }
+                const result = TemplateGenerator.scaffoldMailMarkdownTemplate(desired);
+                if (result.success) {
+                    ErrorHandler.success(result.message);
+                    return;
+                }
+                ErrorHandler.warn(result.message);
+            },
+        });
+    },
+});
+export default MakeMailTemplateCommand;

package/src/cli/commands/MakeNotificationTemplateCommand.d.ts

@@ -0,0 +1,10 @@
+/**
+ * make:notification-template
+ * Scaffolds a notification markdown template into the project.
+ */
+import { IBaseCommand } from '../BaseCommand';
+export declare const MakeNotificationTemplateCommand: Readonly<{
+    create(): IBaseCommand;
+}>;
+export default MakeNotificationTemplateCommand;
+//# sourceMappingURL=MakeNotificationTemplateCommand.d.ts.map

package/src/cli/commands/MakeNotificationTemplateCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MakeNotificationTemplateCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/MakeNotificationTemplateCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAoH7E,eAAO,MAAM,+BAA+B;cAChC,YAAY;EAqCtB,CAAC;AAEH,eAAe,+BAA+B,CAAC"}

package/src/cli/commands/MakeNotificationTemplateCommand.js

@@ -0,0 +1,113 @@
+/**
+ * make:notification-template
+ * Scaffolds a notification markdown template into the project.
+ */
+import { BaseCommand } from '../BaseCommand';
+import { ErrorHandler } from '../ErrorHandler';
+import { PromptHelper } from '../PromptHelper';
+import { FileGenerator } from '../scaffolding/FileGenerator';
+import { TemplateGenerator } from '../scaffolding/TemplateGenerator';
+import { ErrorFactory } from '../../exceptions/ZintrustError';
+import * as path from '../../node-singletons/path';
+import inquirer from 'inquirer';
+const addOptions = (command) => {
+    command.argument('[name]', 'Template name (alphanumeric + hyphens only)');
+    command.option('--channels <csv>', 'Comma-separated channels: mail,sms,slack,discord');
+    command.option('--vars <csv>', 'Comma-separated variables');
+    command.option('--sms-variant <mode>', 'short|none', 'none');
+    command.option('--overwrite', 'Overwrite existing file');
+    command.option('--no-interactive', 'Disable prompts (requires args/options)');
+};
+const defaultCopyright = () => process.env['TEMPLATE_COPYRIGHT'] ?? '© 2025 Zintrust Framework. All rights reserved.';
+const parseChannelsCsv = (csv) => {
+    if (csv === undefined || csv.trim() === '')
+        return [];
+    const parts = csv
+        .split(',')
+        .map((p) => p.trim())
+        .filter((p) => p !== '');
+    const out = [];
+    for (const p of parts) {
+        const lower = p.toLowerCase();
+        if (lower === 'mail' || lower === 'sms' || lower === 'slack' || lower === 'discord') {
+            if (!out.includes(lower))
+                out.push(lower);
+        }
+    }
+    return out;
+};
+const resolveName = async (options, interactive) => {
+    const argName = options.args?.[0];
+    const name = argName ??
+        (interactive ? await PromptHelper.textInput('Template name:', 'security-alert', true) : '');
+    if (name.trim() === '') {
+        throw ErrorFactory.createValidationError('Template name required');
+    }
+    return name;
+};
+const resolveChannels = async (options, interactive) => {
+    let channels = parseChannelsCsv(options.channels);
+    if (channels.length > 0)
+        return channels;
+    if (!interactive)
+        return [];
+    const answer = await inquirer.prompt([
+        {
+            type: 'checkbox',
+            name: 'channels',
+            message: 'Channels:',
+            choices: ['mail', 'sms', 'slack', 'discord'],
+            default: ['mail'],
+        },
+    ]);
+    channels = answer.channels ?? ['mail'];
+    return channels;
+};
+const resolveVariables = async (options, interactive) => {
+    const varsCsv = options.vars ??
+        (interactive
+            ? await PromptHelper.textInput('Variables (comma-separated):', 'ipAddress,location,deviceName,reviewLink', true)
+            : '');
+    return TemplateGenerator.parseVariablesCsv(varsCsv);
+};
+const maybeEnableOverwrite = async (interactive, overwriteFlag, relPath) => {
+    if (!interactive || overwriteFlag)
+        return overwriteFlag;
+    const fullPath = path.join(process.cwd(), relPath);
+    if (!FileGenerator.fileExists(fullPath))
+        return false;
+    return PromptHelper.confirm('File exists. Overwrite?', false, true);
+};
+export const MakeNotificationTemplateCommand = Object.freeze({
+    create() {
+        return BaseCommand.create({
+            name: 'make:notification-template',
+            description: 'Scaffold a notification markdown template into src/notification/markdown',
+            addOptions,
+            execute: async (options) => {
+                const interactive = options.noInteractive !== true;
+                const name = await resolveName(options, interactive);
+                const channels = await resolveChannels(options, interactive);
+                const variables = await resolveVariables(options, interactive);
+                const smsVariant = (options.smsVariant ?? 'none');
+                TemplateGenerator.ensureDirectories(process.cwd());
+                const relPath = path.join('src', 'notification', 'markdown', `${name}.md`);
+                const overwrite = await maybeEnableOverwrite(interactive, options.overwrite === true, relPath);
+                const result = TemplateGenerator.scaffoldNotificationMarkdownTemplate({
+                    name,
+                    channels,
+                    variables,
+                    smsVariant,
+                    copyright: defaultCopyright(),
+                    projectRoot: process.cwd(),
+                    overwrite,
+                });
+                if (result.success)
+                    ErrorHandler.success(result.message);
+                else
+                    ErrorHandler.warn(result.message);
+            },
+        });
+    },
+});
+export default MakeNotificationTemplateCommand;

package/src/cli/commands/NewCommand.d.ts

@@ -1,3 +1,7 @@
+/**
+ * New Command - Project scaffolding CLI command
+ * Handles creation of new Zintrust projects
+ */
 import { CommandOptions, IBaseCommand } from '../BaseCommand';
 type TemplateType = 'basic' | 'api' | 'microservice';
 type DatabaseType = 'sqlite' | 'mysql' | 'postgresql' | 'mongodb';

package/src/cli/commands/NewCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NewCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/NewCommand.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAU7E,KAAK,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,cAAc,CAAC;AACrD,KAAK,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,CAAC;AAYlE,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAyLhD,UAAU,WAAY,SAAQ,YAAY;IACxC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxF,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG,gBAAgB,EAAE,CAAC;IACjF,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;IAChC,YAAY,IAAI,MAAM,CAAC;IACvB,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,sBAAsB,EAC9B,SAAS,CAAC,EAAE,OAAO,GAClB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAsHD;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,WAAW;EAGrB,CAAC"}
+{"version":3,"file":"NewCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/NewCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAY7E,KAAK,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,cAAc,CAAC;AACrD,KAAK,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,CAAC;AAYlE,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAiMhD,UAAU,WAAY,SAAQ,YAAY;IACxC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxF,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG,gBAAgB,EAAE,CAAC;IACjF,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;IAChC,YAAY,IAAI,MAAM,CAAC;IACvB,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,sBAAsB,EAC9B,SAAS,CAAC,EAAE,OAAO,GAClB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAwID;;;GAGG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;cACO,WAAW;EAGrB,CAAC"}

package/src/cli/commands/NewCommand.js

@@ -2,22 +2,16 @@
  * New Command - Project scaffolding CLI command
  * Handles creation of new Zintrust projects
  */
-import { resolveNpmPath } from '../../common';
 import { BaseCommand } from '../BaseCommand';
 import { PromptHelper } from '../PromptHelper';
 import { ProjectScaffolder } from '../scaffolding/ProjectScaffolder';
+import { SpawnUtil } from '../utils/spawn';
+import { extractErrorMessage, resolvePackageManager } from '../../common/index';
 import { appConfig } from '../../config/app';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { execFileSync } from '../../node-singletons/child-process';
 import * as path from '../../node-singletons/path';
 import chalk from 'chalk';
-const errorToMessage = (error) => {
-    if (error instanceof Error)
-        return error.message;
-    if (typeof error === 'string')
-        return error;
-    return 'Unknown error';
-};
 const getGitBinary = () => 'git';
 const checkGitInstalled = () => {
     try {
@@ -156,20 +150,27 @@ const isFailureResult = (result) => {
     const maybe = result;
     return maybe.success === false;
 };
-const installDependencies = (projectPath, log) => {
+const installDependencies = async (projectPath, log, packageManager, force = false) => {
+    // Respect CI by default — avoid network installs in CI unless explicitly allowed
+    const isCi = Boolean(process.env['CI']);
+    const allowAuto = process.env['ZINTRUST_ALLOW_AUTO_INSTALL'] === '1' || force;
+    if (isCi && !allowAuto) {
+        log.info('Skipping automatic dependency installation in CI environment.');
+        return;
+    }
     log.info('📦 Installing dependencies (this may take a minute)...');
+    const pm = packageManager ?? resolvePackageManager();
+    const args = ['install'];
     try {
-        const npmPath = resolveNpmPath();
-        execFileSync(npmPath, ['install'], {
-            cwd: projectPath,
-            stdio: 'inherit',
-            env: appConfig.getSafeEnv(),
-        });
+        const exitCode = await SpawnUtil.spawnAndWait({ command: pm, args, cwd: projectPath });
+        if (exitCode !== 0) {
+            throw ErrorFactory.createCliError(`'${pm} install' failed with exit code ${exitCode}`);
+        }
         log.info('✅ Dependencies installed successfully');
     }
     catch (error) {
         ErrorFactory.createCliError('Dependency installation failed', error);
-        log.warn('Please run "npm install" manually in the project directory');
+        log.warn(`Please run "${pm} install" manually in the project directory`);
     }
 };
 const addOptions = (command) => {
@@ -183,6 +184,8 @@ const addOptions = (command) => {
     command.option('--no-interactive', 'Disable interactive mode');
     command.option('--no-git', 'Skip git initialization');
     command.option('--no-install', 'Skip dependency installation');
+    command.option('--install', 'Force dependency installation (useful to override CI defaults)');
+    command.option('--package-manager <manager>', 'Package manager to use (npm, yarn, pnpm)');
     command.option('--force', 'Overwrite existing directory');
     command.option('--overwrite', 'Overwrite existing directory');
 };
@@ -204,22 +207,31 @@ const executeNewCommand = async (options, command) => {
         }
         if (options['install'] !== false) {
             const projectPath = path.resolve(process.cwd(), projectName);
-            installDependencies(projectPath, command);
+            const pm = options['packageManager'] ??
+                options['package-manager'];
+            const force = options['install'] === true;
+            await installDependencies(projectPath, command, pm, force);
         }
         command.success(`\n✨ Project ${projectName} created successfully!`);
         command.info(`\nNext steps:\n  cd ${projectName}\n  npm run dev\n`);
     }
     catch (error) {
-        throw ErrorFactory.createCliError(`Project creation failed: ${errorToMessage(error)}`, error);
+        throw ErrorFactory.createCliError(`Project creation failed: ${extractErrorMessage(error)}`, error);
     }
 };
 const createNewCommandInstance = () => {
+    // BaseCommand.getCommand() closes over the execute callback passed at creation time.
+    // NewCommand needs its final implementation (which depends on the constructed instance),
+    // so we use a mutable indirection.
+    let executeImpl = async () => {
+        // replaced below with NewCommand-aware execute implementation
+    };
     const base = BaseCommand.create({
         name: 'new',
         description: 'Create a new Zintrust project',
         addOptions,
-        execute: async (_options) => {
-            // replaced below with NewCommand-aware execute implementation
+        execute: async (options) => {
+            await executeImpl(options);
         },
     });
     const commandInstance = {
@@ -266,6 +278,7 @@ const createNewCommandInstance = () => {
             await executeNewCommand(options, commandInstance);
         },
     };
+    executeImpl = commandInstance.execute;
     return commandInstance;
 };
 /**

package/src/cli/commands/PluginCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PluginCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PluginCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAK7E,eAAO,MAAM,aAAa;cACd,YAAY;EAsDtB,CAAC"}
+{"version":3,"file":"PluginCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PluginCommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAA+B,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAK7E,eAAO,MAAM,aAAa;cACd,YAAY;EAuDtB,CAAC"}

package/src/cli/commands/PluginCommand.js

@@ -27,8 +27,9 @@ export const PluginCommand = Object.freeze({
                     .command('install <pluginId>')
                     .alias('i')
                     .description('Install a plugin')
-                    .action(async (pluginId) => {
-                    await installPlugin(pluginId);
+                    .option('--package-manager <pm>', 'Specify package manager to use (npm|yarn|pnpm)')
+                    .action(async (pluginId, options) => {
+                    await installPlugin(pluginId, options);
                 });
                 command
                     .command('uninstall <pluginId>')
@@ -74,9 +75,12 @@ async function listPlugins() {
         Logger.info(`  ${id.padEnd(20)} ${status.padEnd(15)} ${plugin.description} ${aliases}`);
     }
 }
-async function installPlugin(pluginId) {
+async function installPlugin(pluginId, options) {
     try {
-        await PluginManager.install(pluginId);
+        const pm = typeof options?.['packageManager'] === 'string'
+            ? String(options?.['packageManager'])
+            : undefined;
+        await PluginManager.install(pluginId, { packageManager: pm });
     }
     catch (error) {
         Logger.error(`Failed to install plugin ${pluginId}`, error);

package/src/cli/commands/PrepareCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PrepareCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PrepareCommand.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAchD,eAAO,MAAM,cAAc,EA2CtB,YAAY,CAAC"}
+{"version":3,"file":"PrepareCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/PrepareCommand.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAehD,eAAO,MAAM,cAAc,EA2CtB,YAAY,CAAC"}

package/src/cli/commands/PrepareCommand.js

@@ -3,9 +3,9 @@
  * Makes the local dist/ folder installable via `file:/.../dist`.
  * Usage: zintrust prepare
  */
-import { resolveNpmPath } from '../../common';
 import { DistPackager } from '../utils/DistPackager';
 import { SpawnUtil } from '../utils/spawn';
+import { resolveNpmPath } from '../../common/index';
 import { Logger } from '../../config/logger';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import * as path from '../../node-singletons/path';

package/src/cli/commands/QACommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QACommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/QACommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAe,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAM7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;GAEG;AACH,UAAU,QAAQ;IAChB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,QAAQ,CAAC;IACpB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,QAAQ,CAAC;CACjB;AAsaD,UAAU,UAAW,SAAQ,YAAY;IACvC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,OAAO,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,YAAY,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC1D,cAAc,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAgFD;;GAEG;AACH,eAAO,MAAM,SAAS,QAAO,UAmB5B,CAAC"}
+{"version":3,"file":"QACommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/QACommand.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAe,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAO7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;GAEG;AACH,UAAU,QAAQ;IAChB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,QAAQ,CAAC;IACpB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,QAAQ,CAAC;CACjB;AAiaD,UAAU,UAAW,SAAQ,YAAY;IACvC,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,OAAO,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,YAAY,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC1D,cAAc,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAgFD;;GAEG;AACH,eAAO,MAAM,SAAS,QAAO,UAe5B,CAAC"}

package/src/cli/commands/QACommand.js

@@ -2,8 +2,8 @@
  * QA Command - Unified Quality Assurance
  * Runs linting, type-checking, tests, and SonarQube
  */
-import { resolveNpmPath } from '../../common';
 import { BaseCommand } from '../BaseCommand';
+import { extractErrorMessageStrict, resolveNpmPath } from '../../common/index';
 import { Logger } from '../../config/logger';
 import { ErrorFactory } from '../../exceptions/ZintrustError';
 import { execFileSync } from '../../node-singletons/child-process';
@@ -225,11 +225,6 @@ const createResults = () => ({
     tests: createEmptyResult(),
     sonar: createEmptyResult(),
 });
-const errorToMessage = (error) => {
-    if (error instanceof Error)
-        return error.message;
-    return 'Unknown error';
-};
 const runNpmScript = (name, script, result) => {
     try {
         Logger.info(`Running npm run ${script}...`);
@@ -241,7 +236,7 @@ const runNpmScript = (name, script, result) => {
     }
     catch (error) {
         result.status = 'failed';
-        result.output = errorToMessage(error);
+        result.output = extractErrorMessageStrict(error);
         ErrorFactory.createTryCatchError(`${name} failed`, error);
         Logger.warn(`${name} failed`);
         return false;
@@ -419,9 +414,9 @@ const generateReport = async (results) => {
     const reportPath = 'coverage/qa-report.html';
     const reportCssPath = 'coverage/qa-report.css';
     try {
-        const fs = await import('node:fs/promises');
-        await fs.writeFile(reportPath, htmlContent);
-        await fs.writeFile(reportCssPath, QA_REPORT_CSS);
+        const { fsPromises } = await import('../../node-singletons/fs');
+        await fsPromises.writeFile(reportPath, htmlContent);
+        await fsPromises.writeFile(reportCssPath, QA_REPORT_CSS);
         Logger.info(`QA report generated: ${reportPath}`);
     }
     catch (error) {
@@ -470,20 +465,16 @@ const executeQA = async (qa, options) => {
  * QA Command Factory - Create a new QA command instance
  */
 export const QACommand = () => {
-    const cmd = BaseCommand.create({
+    const qa = BaseCommand.create({
         name: 'qa',
         description: 'Run full Quality Assurance suite',
         addOptions,
         execute: async (options) => executeQA(qa, options),
     });
-    const qa = {
-        ...cmd,
-        addOptions,
-        runLint,
-        runTypeCheck,
-        runTests,
-        runSonar,
-        generateReport,
-    };
+    qa.runLint = runLint;
+    qa.runTypeCheck = runTypeCheck;
+    qa.runTests = runTests;
+    qa.runSonar = runSonar;
+    qa.generateReport = generateReport;
     return qa;
 };

package/src/cli/commands/SecretsCommand.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Secrets Command
+ *
+ * CLI-first secrets sync using the core internal toolkit.
+ *
+ * Usage:
+ *   zin secrets pull   --provider aws|cloudflare [--manifest secrets.manifest.json] [--out .env.pull] [--dry-run]
+ *   zin secrets push   --provider aws|cloudflare [--manifest secrets.manifest.json] [--in .env] [--dry-run]
+ *   zin secrets doctor --provider aws|cloudflare
+ */
+import { type IBaseCommand } from '../BaseCommand';
+export declare const SecretsCommand: Readonly<{
+    create(): IBaseCommand;
+}>;
+export default SecretsCommand;
+//# sourceMappingURL=SecretsCommand.d.ts.map

package/src/cli/commands/SecretsCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretsCommand.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/SecretsCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAsHvF,eAAO,MAAM,cAAc;cACf,YAAY;EAWtB,CAAC;AAEH,eAAe,cAAc,CAAC"}