i18ntk 2.4.0 → 2.5.1

package/main/manage/managers/DebugMenu.js

@@ -3,10 +3,11 @@
  * @module managers/DebugMenu
  */
 
-const path = require('path');
-const fs = require('fs');
-const { t } = require('../../../utils/i18n-helper');
-const cliHelper = require('../../../utils/cli-helper');
+const path = require('path');
+const fs = require('fs');
+const { t } = require('../../../utils/i18n-helper');
+const cliHelper = require('../../../utils/cli-helper');
+const SecurityUtils = require('../../../utils/security');
 
 module.exports = class DebugMenu {
   constructor(manager) {
@@ -22,7 +23,7 @@ module.exports = class DebugMenu {
     const authRequired = await this.adminAuth.isAuthRequiredForScript('debugMenu');
     if (authRequired) {
       console.log(`\n${t('adminPin.protectedAccess')}`);
-      const pin = await cliHelper.promptPin(t('adminPin.enterPin') + ': ');
+      const pin = await cliHelper.promptPin(t('adminPin.enterPin') + ': ');
       const isValid = await this.adminAuth.verifyPin(pin);
 
       if (!isValid) {
@@ -66,7 +67,7 @@ module.exports = class DebugMenu {
     console.log(t('debug.runningDebugTool', { displayName }));
     try {
       const toolPath = path.join(__dirname, '..', '..', 'scripts', 'debug', toolName);
-      if (fs.existsSync(toolPath)) {
+      if (SecurityUtils.safeExistsSync(toolPath, path.dirname(toolPath))) {
         console.log(`Debug tool available: ${toolName}`);
         console.log(`To run this tool manually: node "${toolPath}"`);
         console.log(`Working directory: ${path.join(__dirname, '..', '..')}`);
@@ -90,7 +91,7 @@ module.exports = class DebugMenu {
 
     try {
       const logsDir = path.join(__dirname, '..', '..', 'scripts', 'debug', 'logs');
-      if (fs.existsSync(logsDir)) {
+      if (SecurityUtils.safeExistsSync(logsDir, path.dirname(logsDir))) {
         const files = fs.readdirSync(logsDir)
           .filter(file => file.endsWith('.log') || file.endsWith('.txt'))
           .sort((a, b) => {
@@ -111,7 +112,7 @@ module.exports = class DebugMenu {
           const fileIndex = parseInt(choice) - 1;
 
           if (fileIndex >= 0 && fileIndex < files.length) {
-            const logContent = fs.readFileSync(path.join(logsDir, files[fileIndex]), 'utf8');
+            const logContent = SecurityUtils.safeReadFileSync(path.join(logsDir, files[fileIndex]), logsDir, 'utf8');
             console.log(`\n${t('debug.contentOf', { filename: files[fileIndex] })}:`);
             console.log('============================================================');
             console.log(logContent.slice(-2000)); // Show last 2000 characters
@@ -137,4 +138,4 @@ module.exports = class DebugMenu {
   async show() {
     return this.showDebugMenu();
   }
-};
+};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "i18ntk",
-  "version": "2.4.0",
-  "description": "🚀 The fastest internationalization toolkit with 97% performance boost! Zero-dependency, enterprise-grade internationalization for React, Vue, Angular, Python, Java, PHP & more. Features PIN protection, auto framework detection, 7+ UI languages, and comprehensive translation management. Perfect for startups to enterprises.",
+  "version": "2.5.1",
+  "description": "Zero-dependency internationalization toolkit for setup, scanning, analysis, validation, usage tracking, fixing, reporting, and runtime translation loading.",
   "keywords": [
     "i18n",
     "internationalization",
@@ -9,94 +9,22 @@
     "translation",
     "l10n",
     "multilingual",
-    "globalization",
     "i18next",
     "react-i18next",
     "vue-i18n",
     "angular-i18n",
     "next-i18next",
-    "nuxt-i18n",
-    "svelte-i18n",
-    "django",
-    "flask",
-    "fastapi",
-    "laravel",
-    "spring-boot",
     "nodejs",
     "javascript",
     "typescript",
     "cli",
     "command-line",
-    "automation",
     "developer-tools",
-    "productivity",
     "translation-management",
-    "language-support",
     "framework-detection",
     "zero-dependency",
-    "lightweight",
-    "fast",
-    "performance",
     "security",
-    "enterprise",
-    "devops",
-    "ci-cd",
-    "json",
-    "yaml",
-    "csv",
-    "po",
-    "xliff",
-    "android",
-    "ios",
-    "react-native",
-    "flutter",
-    "expo",
-    "electron",
-    "desktop",
-    "mobile",
-    "web",
-    "full-stack",
-    "backend",
-    "frontend",
-    "api",
-    "microservices",
-    "serverless",
-    "docker",
-    "kubernetes",
-    "cloud",
-    "aws",
-    "azure",
-    "gcp",
-    "saas",
-    "paas",
-    "open-source",
-    "free",
-    "npm",
-    "package",
-    "tool",
-    "utility",
-    "workflow",
-    "efficiency",
-    "best-practices",
-    "standards",
-    "compliance",
-    "accessibility",
-    "a11y",
-    "seo",
-    "marketing",
-    "growth",
-    "scale",
-    "startup",
-    "business",
-    "professional",
-    "expert",
-    "advanced",
-    "comprehensive",
-    "complete",
-    "all-in-one",
-    "suite",
-    "platform",
-    "solution"
+    "json"
   ],
   "homepage": "https://github.com/vladnoskv/i18ntk#readme",
   "bugs": {
@@ -107,8 +35,8 @@
     "url": "git+https://github.com/vladnoskv/i18ntk.git"
   },
   "funding": {
-    "type": "github",
-    "url": "https://github.com/sponsors/vladnoskv"
+    "type": "individual",
+    "url": "https://www.charitynavigator.org/"
   },
   "license": "MIT",
   "author": {
@@ -131,9 +59,6 @@
       "default": "./runtime/enhanced.js"
     },
     "./runtime/*": "./runtime/*",
-    "./main/*": "./main/*",
-    "./utils/*": "./utils/*",
-    "./settings/*": "./settings/*",
     "./ui-locales/*": "./ui-locales/*",
     "./package.json": "./package.json"
   },
@@ -153,68 +78,66 @@
     "i18ntk-scanner": "main/i18ntk-scanner.js",
     "i18ntk-backup": "main/i18ntk-backup.js"
   },
-  "directories": {
-    "doc": "docs",
-    "test": "tests"
-  },
   "files": [
-    "main/",
+    "main/i18ntk-analyze.js",
+    "main/i18ntk-backup-class.js",
+    "main/i18ntk-backup.js",
+    "main/i18ntk-complete.js",
+    "main/i18ntk-doctor.js",
+    "main/i18ntk-fixer.js",
+    "main/i18ntk-init.js",
+    "main/i18ntk-scanner.js",
+    "main/i18ntk-setup.js",
+    "main/i18ntk-sizing.js",
+    "main/i18ntk-summary.js",
+    "main/i18ntk-ui.js",
+    "main/i18ntk-usage.js",
+    "main/i18ntk-validate.js",
+    "main/manage/",
     "runtime/",
-    "utils/",
-    "settings/",
+    "settings/language-config.json",
+    "settings/settings-cli.js",
+    "settings/settings-manager.js",
     "ui-locales/",
     "!main/manage/index-fixed.js",
-    "!main/i18ntk-manage.js",
-    "!main/i18ntk-py.js",
-    "!main/i18ntk-js.js",
-    "!main/i18ntk-java.js",
-    "!main/i18ntk-php.js",
-    "!main/i18ntk-go.js",
-    "!main/i18ntk-settings.js",
-    "!utils/security-fixed.js",
+    "utils/admin-auth.js",
+    "utils/admin-cli.js",
+    "utils/cli-helper.js",
+    "utils/cli.js",
+    "utils/colors-new.js",
+    "utils/config-helper.js",
+    "utils/config-manager.js",
+    "utils/config.js",
+    "utils/env-manager.js",
+    "utils/exit-codes.js",
+    "utils/extractor-manager.js",
+    "utils/extractors/regex.js",
+    "utils/format-manager.js",
+    "utils/formats/json.js",
+    "utils/framework-detector.js",
+    "utils/i18n-helper.js",
+    "utils/init-helper.js",
+    "utils/json-output.js",
+    "utils/locale-optimizer.js",
+    "utils/logger.js",
+    "utils/npm-version-warning.js",
+    "utils/plugin-loader.js",
+    "utils/prompt-helper.js",
+    "utils/prompt.js",
+    "utils/secure-errors.js",
+    "utils/security.js",
+    "utils/setup-enforcer.js",
+    "utils/terminal-icons.js",
+    "utils/version-utils.js",
+    "utils/watch-locales.js",
     "LICENSE",
-    "package.json",
-    "README.md"
+    "README.md",
+    "CODE_OF_CONDUCT.md",
+    "CONTRIBUTING.md",
+    "FUNDING.md",
+    "SECURITY.md"
   ],
   "sideEffects": false,
-  "scripts": {
-    "i18ntk": "node main/manage/index.js",
-    "i18ntk-setup": "node main/i18ntk-setup.js",
-    "i18ntk-manage": "node main/manage/index.js",
-    "i18ntk-init": "node main/i18ntk-init.js",
-    "i18ntk-analyze": "node main/i18ntk-analyze.js",
-    "i18ntk-validate": "node main/i18ntk-validate.js",
-    "i18ntk-usage": "node main/i18ntk-usage.js",
-    "i18ntk-complete": "node main/i18ntk-complete.js",
-    "i18ntk-sizing": "node main/i18ntk-sizing.js",
-    "i18ntk-summary": "node main/i18ntk-summary.js",
-    "i18ntk-doctor": "node main/i18ntk-doctor.js",
-    "i18ntk-fixer": "node main/i18ntk-fixer.js",
-    "i18ntk-scanner": "node main/i18ntk-scanner.js",
-    "i18ntk-backup": "node main/i18ntk-backup.js",
-    "i18ntk-py": "node main/i18ntk-py.js",
-    "i18ntk-js": "node main/i18ntk-js.js",
-    "i18ntk-java": "node main/i18ntk-java.js",
-    "i18ntk-php": "node main/i18ntk-php.js",
-    "i18ntk-go": "node main/i18ntk-go.js",
-    "start": "node main/manage/index.js",
-    "security:check": "node utils/security-check-improved.js",
-    "security:test": "node --test tests/security.test.js",
-    "security:audit": "npm run security:check && npm run security:test",
-    "test": "npm run security:test",
-    "test:all": "npm run security:audit",
-    "prepublishOnly": "npm run security:audit",
-    "prepare": "npm run security:check",
-    "backup:create": "node main/i18ntk-backup.js create",
-    "backup:restore": "node main/i18ntk-backup.js restore",
-    "backup:list": "node main/i18ntk-backup.js list",
-    "backup:verify": "node main/i18ntk-backup.js verify",
-    "backup:cleanup": "node main/i18ntk-backup.js cleanup",
-    "languages:select": "node settings/settings-cli.js",
-    "languages:list": "node settings/settings-cli.js --list-languages",
-    "languages:status": "node settings/settings-cli.js --language-status",
-    "lint:locales": "node scripts/lint-locales.js"
-  },
   "engines": {
     "node": ">=16.0.0",
     "npm": ">=8.0.0"
@@ -222,53 +145,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "preferGlobal": true,
-  "versionInfo": {
-    "version": "2.4.0",
-    "releaseDate": "16/04/2026",
-    "lastUpdated": "16/04/2026",
-    "maintainer": "Vlad Noskov",
-    "changelog": "./CHANGELOG.md",
-    "documentation": "./README.md",
-    "apiReference": "./docs/api/API_REFERENCE.md",
-    "majorChanges": [
-      "LOGGING: Introduced centralized structured logger with silent-by-default production behavior and DEBUG_MODE/JSON_LOG toggles.",
-      "SECURITY: Added internal path whitelist detection to prevent false-positive traversal warnings for package/project internals.",
-      "I18N: Added missing-key warning TTL cache to eliminate repeated translation-key spam during builds.",
-      "HOTFIX: Removed deprecated package-path fallback that caused production build warnings for non-exported subpaths.",
-      "CRITICAL FIX: Resolved sizing and usage-analysis regressions in v2 command flow.",
-      "PACKAGING: Reduced publish footprint by removing internal development scripts and legacy fixed-file artifacts.",
-      "SECURITY: Hardened release checks and added explicit support guidance to update from pre-2.3.5 versions.",
-      "CONFIG: Added cross-process file locking for .i18ntk-config writes to prevent production rename races.",
-      "CONFIG: Made autosave runtime-safe with non-throwing save failures and I18NTK_DISABLE_AUTOSAVE support.",
-      "SECURITY: Hardened reset/backup path handling and disabled manager backup-route execution in current builds.",
-      "CLI: Removed npm registry startup update checks to eliminate outbound network calls in scanner-restricted environments.",
-      "I18N: Completed internal UI locale parity and actionable untranslated-key cleanup across supported languages."
-    ],
-    "breakingChanges": [],
-    "nextVersion": "2.4.1",
-    "supportedNodeVersions": ">=16.0.0",
-    "supportedFrameworks": {
-      "react-i18next": ">=11.0.0",
-      "vue-i18n": ">=9.0.0",
-      "angular-i18n": ">=12.0.0",
-      "next-i18next": ">=13.0.0",
-      "nuxt-i18n": ">=8.0.0",
-      "svelte-i18n": ">=3.0.0",
-      "sveltekit-i18n": ">=2.0.0",
-      "react-native-localize": ">=2.0.0",
-      "expo-localization": ">=14.0.0",
-      "ionic-angular": ">=6.0.0",
-      "ember-intl": ">=5.0.0",
-      "formatjs": ">=2.0.0",
-      "i18next": ">=21.0.0",
-      "django": ">=3.0.0",
-      "flask-babel": ">=2.0.0",
-      "fastapi": ">=0.70.0",
-      "spring-boot": ">=2.5.0",
-      "laravel": ">=8.0.0"
-    },
-    "supportPolicy": "Versions earlier than 2.4.0 may be unstable or insecure. Upgrade to 2.4.0 or newer."
-  },
-  "_comment": "This package is zero-dependency and uses only native Node.js modules"
+  "preferGlobal": true
 }

package/runtime/index.js

@@ -6,6 +6,7 @@
 const fs = require('fs');
 const path = require('path');
 const SecurityUtils = require('../utils/security');
+const { envManager } = require('../utils/env-manager');
 
 let configManager = null;
 try { configManager = require('../utils/config-manager'); } catch (_) { /* optional */ }
@@ -54,15 +55,18 @@ function resolveBaseDir(explicitBaseDir) {
   // 1) Highest priority: explicit option
   if (explicitBaseDir) return path.resolve(explicitBaseDir);
   // 2) Environment override for CI/explicit control
-  if (process.env.I18NTK_RUNTIME_DIR) {
-    return path.resolve(process.env.I18NTK_RUNTIME_DIR);
+  const runtimeDir = envManager.get('I18NTK_RUNTIME_DIR');
+  if (runtimeDir) {
+    return path.resolve(runtimeDir);
   }
   // 2b) Respect config-style env overrides, even without config-manager
-  if (process.env.I18NTK_I18N_DIR) {
-    return path.resolve(process.env.I18NTK_I18N_DIR);
+  const envI18nDir = envManager.get('I18NTK_I18N_DIR');
+  if (envI18nDir) {
+    return path.resolve(envI18nDir);
   }
-  if (process.env.I18NTK_SOURCE_DIR) {
-    return path.resolve(process.env.I18NTK_SOURCE_DIR);
+  const envSourceDir = envManager.get('I18NTK_SOURCE_DIR');
+  if (envSourceDir) {
+    return path.resolve(envSourceDir);
   }
   // 3) Use config-manager if available (single source of truth: i18ntk-config.json)
   try {
@@ -72,11 +76,13 @@ function resolveBaseDir(explicitBaseDir) {
     // If config-manager resolved absolute paths, use as-is; otherwise resolve from project cwd
     const isAbs = typeof base === 'string' && path.isAbsolute(base);
     if (isAbs) return base;
-    const root = process.env.I18NTK_PROJECT_ROOT ? path.resolve(process.env.I18NTK_PROJECT_ROOT) : process.cwd();
+    const envProjectRoot = envManager.get('I18NTK_PROJECT_ROOT');
+    const root = envProjectRoot ? path.resolve(envProjectRoot) : process.cwd();
     return path.resolve(root, base);
   } catch (_) {
     // 4) Fallback to conventional './locales' from project CWD
-    const root = process.env.I18NTK_PROJECT_ROOT ? path.resolve(process.env.I18NTK_PROJECT_ROOT) : process.cwd();
+    const envProjectRoot = envManager.get('I18NTK_PROJECT_ROOT');
+    const root = envProjectRoot ? path.resolve(envProjectRoot) : process.cwd();
     return path.resolve(root, './locales');
   }
 }