i18ntk 2.3.8 → 2.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "i18ntk",
-  "version": "2.3.8",
+  "version": "2.5.0",
   "description": "🚀 The fastest internationalization toolkit with 97% performance boost! Zero-dependency, enterprise-grade internationalization for React, Vue, Angular, Python, Java, PHP & more. Features PIN protection, auto framework detection, 7+ UI languages, and comprehensive translation management. Perfect for startups to enterprises.",
   "keywords": [
     "i18n",
@@ -131,9 +131,6 @@
       "default": "./runtime/enhanced.js"
     },
     "./runtime/*": "./runtime/*",
-    "./main/*": "./main/*",
-    "./utils/*": "./utils/*",
-    "./settings/*": "./settings/*",
     "./ui-locales/*": "./ui-locales/*",
     "./package.json": "./package.json"
   },
@@ -158,20 +155,57 @@
     "test": "tests"
   },
   "files": [
-    "main/",
+    "main/i18ntk-analyze.js",
+    "main/i18ntk-backup-class.js",
+    "main/i18ntk-backup.js",
+    "main/i18ntk-complete.js",
+    "main/i18ntk-doctor.js",
+    "main/i18ntk-fixer.js",
+    "main/i18ntk-init.js",
+    "main/i18ntk-scanner.js",
+    "main/i18ntk-setup.js",
+    "main/i18ntk-sizing.js",
+    "main/i18ntk-summary.js",
+    "main/i18ntk-ui.js",
+    "main/i18ntk-usage.js",
+    "main/i18ntk-validate.js",
+    "main/manage/",
     "runtime/",
-    "utils/",
-    "settings/",
+    "settings/language-config.json",
+    "settings/settings-cli.js",
+    "settings/settings-manager.js",
     "ui-locales/",
     "!main/manage/index-fixed.js",
-    "!main/i18ntk-manage.js",
-    "!main/i18ntk-py.js",
-    "!main/i18ntk-js.js",
-    "!main/i18ntk-java.js",
-    "!main/i18ntk-php.js",
-    "!main/i18ntk-go.js",
-    "!main/i18ntk-settings.js",
-    "!utils/security-fixed.js",
+    "utils/admin-auth.js",
+    "utils/admin-cli.js",
+    "utils/cli-helper.js",
+    "utils/cli.js",
+    "utils/colors-new.js",
+    "utils/config-helper.js",
+    "utils/config-manager.js",
+    "utils/config.js",
+    "utils/env-manager.js",
+    "utils/exit-codes.js",
+    "utils/extractor-manager.js",
+    "utils/extractors/regex.js",
+    "utils/format-manager.js",
+    "utils/formats/json.js",
+    "utils/framework-detector.js",
+    "utils/i18n-helper.js",
+    "utils/init-helper.js",
+    "utils/json-output.js",
+    "utils/locale-optimizer.js",
+    "utils/logger.js",
+    "utils/npm-version-warning.js",
+    "utils/plugin-loader.js",
+    "utils/prompt-helper.js",
+    "utils/prompt.js",
+    "utils/secure-errors.js",
+    "utils/security.js",
+    "utils/setup-enforcer.js",
+    "utils/terminal-icons.js",
+    "utils/version-utils.js",
+    "utils/watch-locales.js",
     "LICENSE",
     "package.json",
     "README.md"
@@ -203,6 +237,7 @@
     "security:audit": "npm run security:check && npm run security:test",
     "test": "npm run security:test",
     "test:all": "npm run security:audit",
+    "release:reset": "node scripts/reset-release-state.js",
     "prepublishOnly": "npm run security:audit",
     "prepare": "npm run security:check",
     "backup:create": "node main/i18ntk-backup.js create",
@@ -224,29 +259,23 @@
   },
   "preferGlobal": true,
   "versionInfo": {
-    "version": "2.3.8",
-    "releaseDate": "13/04/2026",
-    "lastUpdated": "13/04/2026",
+    "version": "2.5.0",
+    "releaseDate": "29/04/2026",
+    "lastUpdated": "29/04/2026",
     "maintainer": "Vlad Noskov",
     "changelog": "./CHANGELOG.md",
     "documentation": "./README.md",
     "apiReference": "./docs/api/API_REFERENCE.md",
     "majorChanges": [
-      "LOGGING: Introduced centralized structured logger with silent-by-default production behavior and DEBUG_MODE/JSON_LOG toggles.",
-      "SECURITY: Added internal path whitelist detection to prevent false-positive traversal warnings for package/project internals.",
-      "I18N: Added missing-key warning TTL cache to eliminate repeated translation-key spam during builds.",
-      "HOTFIX: Removed deprecated package-path fallback that caused production build warnings for non-exported subpaths.",
-      "CRITICAL FIX: Resolved sizing and usage-analysis regressions in v2 command flow.",
-      "PACKAGING: Reduced publish footprint by removing internal development scripts and legacy fixed-file artifacts.",
-      "SECURITY: Hardened release checks and added explicit support guidance to update from pre-2.3.5 versions.",
-      "CONFIG: Added cross-process file locking for .i18ntk-config writes to prevent production rename races.",
-      "CONFIG: Made autosave runtime-safe with non-throwing save failures and I18NTK_DISABLE_AUTOSAVE support.",
-      "SECURITY: Hardened reset/backup path handling and made npm update checks explicit opt-in.",
-      "CLI: Added npm registry version check with upgrade warning for out-of-date installs.",
-      "I18N: Completed internal UI locale parity and actionable untranslated-key cleanup across supported languages."
+      "SECURITY: Centralized environment-variable access behind an explicit allowlist.",
+      "SECURITY: Hardened path containment checks to reject sibling-prefix traversal cases.",
+      "SECURITY: Added timing-safe admin PIN hash comparison and fixed expired-session cleanup.",
+      "SECURITY: Expanded release security scanning to nested production source files.",
+      "FIXER: Fixed translation fixer writes for absolute source directories and confirmed applied fixes persist.",
+      "PACKAGING: Updated package and documentation metadata for the 2.5.0 release."
     ],
     "breakingChanges": [],
-    "nextVersion": "2.4.0",
+    "nextVersion": "2.5.1",
     "supportedNodeVersions": ">=16.0.0",
     "supportedFrameworks": {
       "react-i18next": ">=11.0.0",
@@ -268,7 +297,7 @@
       "spring-boot": ">=2.5.0",
       "laravel": ">=8.0.0"
     },
-    "supportPolicy": "Versions earlier than 2.3.8 may be unstable or insecure. Upgrade to 2.3.8 or newer."
+    "supportPolicy": "Versions earlier than 2.5.0 may be unstable or insecure. Upgrade to 2.5.0 or newer."
   },
   "_comment": "This package is zero-dependency and uses only native Node.js modules"
 }

package/runtime/index.js

@@ -6,6 +6,7 @@
 const fs = require('fs');
 const path = require('path');
 const SecurityUtils = require('../utils/security');
+const { envManager } = require('../utils/env-manager');
 
 let configManager = null;
 try { configManager = require('../utils/config-manager'); } catch (_) { /* optional */ }
@@ -54,15 +55,18 @@ function resolveBaseDir(explicitBaseDir) {
   // 1) Highest priority: explicit option
   if (explicitBaseDir) return path.resolve(explicitBaseDir);
   // 2) Environment override for CI/explicit control
-  if (process.env.I18NTK_RUNTIME_DIR) {
-    return path.resolve(process.env.I18NTK_RUNTIME_DIR);
+  const runtimeDir = envManager.get('I18NTK_RUNTIME_DIR');
+  if (runtimeDir) {
+    return path.resolve(runtimeDir);
   }
   // 2b) Respect config-style env overrides, even without config-manager
-  if (process.env.I18NTK_I18N_DIR) {
-    return path.resolve(process.env.I18NTK_I18N_DIR);
+  const envI18nDir = envManager.get('I18NTK_I18N_DIR');
+  if (envI18nDir) {
+    return path.resolve(envI18nDir);
   }
-  if (process.env.I18NTK_SOURCE_DIR) {
-    return path.resolve(process.env.I18NTK_SOURCE_DIR);
+  const envSourceDir = envManager.get('I18NTK_SOURCE_DIR');
+  if (envSourceDir) {
+    return path.resolve(envSourceDir);
   }
   // 3) Use config-manager if available (single source of truth: i18ntk-config.json)
   try {
@@ -72,11 +76,13 @@ function resolveBaseDir(explicitBaseDir) {
     // If config-manager resolved absolute paths, use as-is; otherwise resolve from project cwd
     const isAbs = typeof base === 'string' && path.isAbsolute(base);
     if (isAbs) return base;
-    const root = process.env.I18NTK_PROJECT_ROOT ? path.resolve(process.env.I18NTK_PROJECT_ROOT) : process.cwd();
+    const envProjectRoot = envManager.get('I18NTK_PROJECT_ROOT');
+    const root = envProjectRoot ? path.resolve(envProjectRoot) : process.cwd();
     return path.resolve(root, base);
   } catch (_) {
     // 4) Fallback to conventional './locales' from project CWD
-    const root = process.env.I18NTK_PROJECT_ROOT ? path.resolve(process.env.I18NTK_PROJECT_ROOT) : process.cwd();
+    const envProjectRoot = envManager.get('I18NTK_PROJECT_ROOT');
+    const root = envProjectRoot ? path.resolve(envProjectRoot) : process.cwd();
     return path.resolve(root, './locales');
   }
 }