i18ntk 3.0.0 → 3.1.0

package/CHANGELOG.md

@@ -5,6 +5,33 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.1.0] - 2026-05-07
+
+### Added
+- **Placeholder-preserve translation mode**: Translates text segments around dynamic placeholders and reinserts the original tokens exactly.
+- **Auto Translate beta settings**: Added settings for placeholder mode, concurrency, batch size, progress interval, retry count, retry delay, timeout, dry-run preview, report output, and BOM output.
+- **Large-file tuning flags**: Added `--batch-size` and `--progress-interval` to `i18ntk-translate`.
+- **Short-lived placeholder manifest**: Mirrors placeholder maps to an OS temp file during processing and removes it after each file completes.
+- **Validation content-risk helper**: Added structured detection for URLs, email addresses, secret-like values, and likely untranslated English content.
+- **Sizing file-set analysis**: Added per-language file counts, per-file sizing statistics, and missing/extra file comparison across locale folders.
+
+### Changed
+- Automated and manager Auto Translate flows now default to placeholder `preserve` mode instead of skipping placeholder-bearing strings.
+- `i18ntk-translate` can now be imported and run in-process by other package modules.
+- Source JSON reads tolerate UTF-8 BOM-prefixed files.
+- Validation warnings now report specific issue types and reasons instead of the vague `Risky content` message.
+- English-content validation now reports an English percentage and only warns above a 10% threshold with at least three detected English words.
+- Sizing reports now include folder-level file counts and per-file key/character breakdowns for each language.
+
+### Fixed
+- Fixed false-positive validation warnings for normal product copy terms.
+- Fixed validator handling so ordinary explanatory uses of words like `token` or `secret` are not treated as leaked credentials.
+- Fixed distorted `i18ntk-sizing` table output by rendering aligned columns from measured values instead of fixed localized spacing.
+- Fixed sizing language comparison output so it uses analyzed languages and the configured source language baseline.
+
+### Security
+- Removed production `child_process` usage from `main/manage/commands/TranslateCommand.js` by replacing the spawned CLI process with an in-process translator call.
+
 ## [3.0.0] - 2026-05-05
 
 ### Added
@@ -63,22 +90,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Scripts
 - Fixed `scripts/build-public-package.js` and `scripts/reset-release-state.js` `npm_execpath` fallback for missing env var.
-- Fixed `scripts/lint-locales.js` BOM handling and try-catch for `fs.readdirSync`.
-
-## [2.5.1] - 2026-04-29
-
-### Security
-- Fixed `AdminAuth.verifyPin()` to fail closed when admin config is missing, disabled, or malformed instead of returning success.
-- Fixed auth-required checks to fail closed when settings require admin PIN protection but the admin config is unusable.
-- Normalized admin session expiry handling by storing both `expires` and `expiresAt` and cleaning up both formats consistently.
-
-### Added
-- Added regression tests for admin PIN fail-closed behavior and session expiry cleanup.
-
-### Changed
-- Documented the public npm package staging flow introduced after `2.5.0`.
-
-## [2.5.0] - 2026-04-29
+- Fixed `scripts/lint-locales.js` BOM handling and try-catch for `fs.readdirSync`.
+
+## [2.5.1] - 2026-04-29
+
+### Security
+- Fixed `AdminAuth.verifyPin()` to fail closed when admin config is missing, disabled, or malformed instead of returning success.
+- Fixed auth-required checks to fail closed when settings require admin PIN protection but the admin config is unusable.
+- Normalized admin session expiry handling by storing both `expires` and `expiresAt` and cleaning up both formats consistently.
+
+### Added
+- Added regression tests for admin PIN fail-closed behavior and session expiry cleanup.
+
+### Changed
+- Documented the public npm package staging flow introduced after `2.5.0`.
+
+## [2.5.0] - 2026-04-29
 
 ### Security
 - Centralized environment-variable access behind the `utils/env-manager.js` allowlist.

package/README.md

@@ -1,4 +1,4 @@
-# i18ntk v3.0.0
+# i18ntk v3.1.0
 
 Zero-dependency internationalization toolkit for setup, scanning, analysis, validation, usage tracking, translation completion, automatic locale translation, and runtime translation loading.
 
@@ -9,25 +9,18 @@ Zero-dependency internationalization toolkit for setup, scanning, analysis, vali
 [![node](https://img.shields.io/badge/node-%3E%3D16-339933)](https://nodejs.org)
 [![dependencies](https://img.shields.io/badge/dependencies-0-success)](https://www.npmjs.com/package/i18ntk)
 [![license](https://img.shields.io/badge/license-MIT-yellow.svg)](LICENSE)
-[![socket](https://socket.dev/api/badge/npm/package/i18ntk/3.0.0)](https://socket.dev/npm/package/i18ntk/overview/3.0.0)
+[![socket](https://socket.dev/api/badge/npm/package/i18ntk/3.1.0)](https://socket.dev/npm/package/i18ntk/overview/3.1.0)
 
 ## Upgrade Notice
 
-Versions earlier than `3.0.0` may contain known stability and security issues.
-They are considered unsupported for production use. Upgrade to `3.0.0` or newer.
+Versions earlier than `3.1.0` may contain known stability and security issues.
+They are considered unsupported for production use. Upgrade to `3.1.0` or newer.
 
-## v3.0.0 - Auto Translate Release
+## v3.1.0 - Auto Translate Hardening and Validation Warning Tuning
 
-v3.0.0 adds automatic JSON locale translation through the management menu and the standalone `i18ntk-translate` command. Highlights:
+v3.1.0 improves automatic JSON locale translation through the management menu and the standalone `i18ntk-translate` command. It also reduces noisy validation warnings and added a dedicated settings module for the auto translator.
 
-- **Auto Translate (Beta)**: Translate one or more source JSON files into one or more target languages from menu option 14.
-- **Standalone CLI**: Use `i18ntk-translate <source-file> <target-lang>` for direct automation and batch translation.
-- **Dry-run preview**: Review translated/skipped counts before writing target files.
-- **Placeholder protection**: Detect and preserve placeholders such as `{name}`, `{{count}}`, `%s`, `%d`, `:id`, `%{name}`, and `${value}`.
-- **Post-translation report**: Print or write translated and skipped key counts.
-- **Zero dependencies**: Translation support uses built-in Node.js modules and the free Google Translate endpoint.
-
-For the full detailed changelog, see [CHANGELOG.md](./CHANGELOG.md). For migration notes, see [docs/migration-guide-v3.0.0.md](./docs/migration-guide-v3.0.0.md).
+For the full detailed changelog, see [CHANGELOG.md](./CHANGELOG.md). For migration notes, see [docs/migration-guide-v3.1.0.md](./docs/migration-guide-v3.1.0.md).
 
 ## What i18ntk Does
 
@@ -139,8 +132,11 @@ Auto Translate also supports:
 
 - `--source-lang <code>`
 - `--files <pattern>`
+- `--preserve-placeholders`
 - `--skip-placeholders`
 - `--send-placeholders`
+- `--batch-size <n>`
+- `--progress-interval <n>`
 - `--report-file <path>`
 - `--report-stdout`
 
@@ -164,10 +160,10 @@ Direct CLI examples:
 ```bash
 i18ntk-translate locales/en/common.json de
 i18ntk-translate locales/en/common.json fr --dry-run --report-stdout
-i18ntk-translate locales/en es --files "*.json" --no-confirm --skip-placeholders
+i18ntk-translate locales/en es --files "*.json" --no-confirm --preserve-placeholders
 ```
 
-The manager flow accepts comma- or space-separated target language codes, previews the first target language with a dry run, asks for confirmation, then writes translated files under matching target-language directories such as `locales/de/common.json`.
+The manager flow accepts comma- or space-separated target language codes, or `all` for every configured target language. It previews the first target language with a dry run when enabled, asks for confirmation, then writes translated files under matching target-language directories such as `locales/de/common.json`. By default it preserves placeholders while translating the surrounding text.
 
 See [docs/auto-translate.md](docs/auto-translate.md) for full usage details.
 
@@ -201,12 +197,18 @@ Example `.i18ntk-config`:
 
 ```json
 {
-  "version": "3.0.0",
+  "version": "3.1.0",
   "sourceDir": "./locales",
   "i18nDir": "./locales",
   "outputDir": "./i18ntk-reports",
   "sourceLanguage": "en",
   "defaultLanguages": ["de", "es", "fr", "ru"],
+  "englishContentThresholdPercent": 10,
+  "allowedEnglishTerms": ["BrandName", "PRODUCT_CODE"],
+  "autoTranslate": {
+    "protectionEnabled": true,
+    "protectionFile": "./i18ntk-auto-translate.json"
+  },
   "setup": {
     "completed": true
   }
@@ -225,6 +227,7 @@ See [docs/api/CONFIGURATION.md](docs/api/CONFIGURATION.md) for the full configur
 - [Auto Translate Guide](https://github.com/vladnoskv/i18ntk/blob/main/docs/auto-translate.md)
 - [Scanner Guide](https://github.com/vladnoskv/i18ntk/blob/main/docs/scanner-guide.md)
 - [Environment Variables](https://github.com/vladnoskv/i18ntk/blob/main/docs/environment-variables.md)
+- [Migration Guide v3.1.0](https://github.com/vladnoskv/i18ntk/blob/main/docs/migration-guide-v3.1.0.md)
 - [Migration Guide v3.0.0](https://github.com/vladnoskv/i18ntk/blob/main/docs/migration-guide-v3.0.0.md)
 - [Migration Guide v2.6.0](https://github.com/vladnoskv/i18ntk/blob/main/docs/migration-guide-v2.6.0.md)
 - [Migration Guide v2.5.1](https://github.com/vladnoskv/i18ntk/blob/main/docs/migration-guide-v2.5.1.md)