i18ntk 4.7.1 → 4.7.3

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
+## [4.7.3] - 2026-07-07
+
+### Fixed
+
+- **PUBLISH INTEGRITY:** `utils/language-menu.js` and `utils/promptPin.js` were missing from the `files` array in `package.json`, causing `MODULE_NOT_FOUND` on install. Both added to `files` array in `package.json` and `package.public.json`.
+- **4.7.2 deprecated** — published with the missing-module bug. All users should upgrade to 4.7.3.
+- **Publish integrity test:** New `tests/publish-integrity.test.js` validates every production `require()` resolves to a file listed in the `files` array. Prevents future missing-module regressions.
+
+## [4.7.2] - 2026-07-07
+
+### FIXED
+
+- **Dynamic CLI language selector** — Option 12 now derives available languages and native display names from `SettingsManager.getAvailableLanguages()` instead of stale hardcoded 7-language lists.
+- **Future-proof prompt range** — Language selection prompts now render the numeric upper bound from the current available language count, so future UI locale expansion does not leave stale `0-8` prompt text behind.
+- **Fallback manager parity** — `main/manage/index.js` now instantiates `SettingsManager`, shows the real current UI language, persists `language` and `uiLanguage`, and uses the same 23-language registry as the rest of the CLI.
+
 ## [4.7.1] - 2026-07-07
 
 ### Added
@@ -58,7 +74,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - **supportedExtensions silently overridden:** `i18ntk-init.js` no longer unconditionally overrides `supportedExtensions` from config with the format adapter's single extension.
 - **allowedEnglishTerms in two places:** `validation-risk.js` now exports `resolveAllowedEnglishTerms()` which accepts both per-call options and project-level config terms as fallback sources.
 
-## [4.6.0] - 2026-07-04
+## [4.6.0] - 2026-07-04
 
 ### Added
 
@@ -92,35 +108,35 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - **Hardcoded extension lists eliminated:** `SOURCE_EXTENSIONS` (report model), `SCANNER_EXTENSIONS` (scanner commands), `EXCLUDE_DIRS` (walk functions), and `SOURCE_DIRS` (usage resolver) are now defined once and imported everywhere.
 - **Framework-specific registration:** Adding a new framework now requires changes in only ONE file (`framework-detector.js`) instead of 6+ scattered locations.
 
-## [4.5.4] - 2026-06-19
-
-### Fixed
-
-- **Analyze:** Fixed `this.provideSetupGuidance is not a function` when no target locales are available. Analyze now prints setup guidance instead of crashing.
-- **Manager Route:** Manager-routed commands now propagate subcommand failures and no longer print `Operation completed successfully!` after a runtime failure.
-- **Complete:** Fixed `i18ntk-complete --help` by wiring the shared help renderer and keeping help output side-effect free.
-- **Validate:** Removed mixed failure/success output. Validation only prints successful completion when the validation result succeeds.
-- **Summary:** Guarded empty locale roots so `Average keys per language` prints `0` instead of `NaN`, and missing locale roots exit as invalid setup/argument failures.
-- **Analyze Reports:** Report write failures now fail analyze with a non-zero exit code instead of continuing with success wording.
-
-### Changed
-
-- **CLI Flags:** Added canonical aliases: `--code-dir` / `--source-code-dir` for application source files, `--locales-dir` / `--i18n-dir` for locale files, and `--source-locale` for source language. Legacy `--source-dir`, `--i18n-dir`, and `--source-language` remain supported.
-- **Exit Codes:** Standardized automation behavior: `0` for success, `1` for validation/report/runtime failures, and `2` for invalid arguments or missing setup in non-interactive mode.
-- **CI Behavior:** Commands skip prompts when `--no-prompt` is passed, `CI=true`, stdin is not a TTY, or stdout is not a TTY.
-- **Complete Summary:** Completion output now distinguishes locales scanned, target locales changed, unique source keys added, total key insertions, files modified, files skipped, and dry-run status.
-
-### Documentation
-
-- Updated README, API, configuration, scanner, and environment-variable docs with canonical CLI flags, legacy alias notes, and CI exit-code behavior.
-
-### Tests
-
-- Added CLI reliability regression coverage for the analyze crash, manager failure propagation, complete help output, directory/source-locale aliases, summary `NaN`, non-interactive prompt suppression, validation wording, and completion summary labels.
-
-## [4.5.3] - 2026-06-19
-
-### Fixed
+## [4.5.4] - 2026-06-19
+
+### Fixed
+
+- **Analyze:** Fixed `this.provideSetupGuidance is not a function` when no target locales are available. Analyze now prints setup guidance instead of crashing.
+- **Manager Route:** Manager-routed commands now propagate subcommand failures and no longer print `Operation completed successfully!` after a runtime failure.
+- **Complete:** Fixed `i18ntk-complete --help` by wiring the shared help renderer and keeping help output side-effect free.
+- **Validate:** Removed mixed failure/success output. Validation only prints successful completion when the validation result succeeds.
+- **Summary:** Guarded empty locale roots so `Average keys per language` prints `0` instead of `NaN`, and missing locale roots exit as invalid setup/argument failures.
+- **Analyze Reports:** Report write failures now fail analyze with a non-zero exit code instead of continuing with success wording.
+
+### Changed
+
+- **CLI Flags:** Added canonical aliases: `--code-dir` / `--source-code-dir` for application source files, `--locales-dir` / `--i18n-dir` for locale files, and `--source-locale` for source language. Legacy `--source-dir`, `--i18n-dir`, and `--source-language` remain supported.
+- **Exit Codes:** Standardized automation behavior: `0` for success, `1` for validation/report/runtime failures, and `2` for invalid arguments or missing setup in non-interactive mode.
+- **CI Behavior:** Commands skip prompts when `--no-prompt` is passed, `CI=true`, stdin is not a TTY, or stdout is not a TTY.
+- **Complete Summary:** Completion output now distinguishes locales scanned, target locales changed, unique source keys added, total key insertions, files modified, files skipped, and dry-run status.
+
+### Documentation
+
+- Updated README, API, configuration, scanner, and environment-variable docs with canonical CLI flags, legacy alias notes, and CI exit-code behavior.
+
+### Tests
+
+- Added CLI reliability regression coverage for the analyze crash, manager failure propagation, complete help output, directory/source-locale aliases, summary `NaN`, non-interactive prompt suppression, validation wording, and completion summary labels.
+
+## [4.5.3] - 2026-06-19
+
+### Fixed
 
 - **Usage Scanner (Critical):** Fixed `supportedExtensions` default fallback in `config-helper.js` that excluded `.tsx` and `.jsx` files from source scanning. The default was `['.json', '.js', '.ts']` — missing `.jsx` and `.tsx`. In a Next.js project with 2704 keys across 1087 files, this caused the scanner to find only 57 keys (2.1%) instead of 2702 (99.9%) because all `.tsx` component files were silently ignored. The fix adds `.jsx` and `.tsx` to the default fallback: `['.json', '.js', '.jsx', '.ts', '.tsx']`.
 - **Usage Dead Code:** Cleaned up unreachable initializer in `i18ntk-usage.js` that was supposed to set default `includeExtensions` but never ran because `supportedExtensions` was always set by `config-helper.js`. Added `.vue` and `.svelte` to the fallback for completeness.

package/README.md

@@ -1,4 +1,4 @@
-# i18ntk v4.7.1
+# i18ntk v4.7.3
 
 A zero-dependency internationalization toolkit for setup, scanning, analysis, validation, usage tracking, translation completion, automatic JSON locale translation, reporting, and runtime translation loading.
 
@@ -9,7 +9,7 @@ A zero-dependency internationalization toolkit for setup, scanning, analysis, va
 [![node](https://img.shields.io/badge/node-%3E%3D16-339933)](https://nodejs.org)
 [![dependencies](https://img.shields.io/badge/dependencies-0-success)](https://www.npmjs.com/package/i18ntk)
 [![license](https://img.shields.io/badge/license-MIT-yellow.svg)](LICENSE)
-[![socket](https://socket.dev/api/badge/npm/package/i18ntk/4.7.1)](https://socket.dev/npm/package/i18ntk/overview/4.7.1)
+[![socket](https://socket.dev/api/badge/npm/package/i18ntk/4.7.3)](https://socket.dev/npm/package/i18ntk/overview/4.7.3)
 
 [![i18ntk Workbench](https://img.shields.io/badge/VS_Code-Workbench-007ACC?logo=visualstudiocode&logoColor=white)](https://marketplace.visualstudio.com/items?itemName=VladNoskov.i18ntk-workbench)
 [![i18ntk Lens](https://img.shields.io/badge/VS_Code-Lens-007ACC?logo=visualstudiocode&logoColor=white)](https://marketplace.visualstudio.com/items?itemName=VladNoskov.i18ntk-lens)
@@ -27,6 +27,10 @@ npm install -g i18ntk
 npx i18ntk --help
 ```
 
+## What's New in 4.7.3
+
+- **Publish integrity fix** — `language-menu.js` and `promptPin.js` now included in npm package. Fixes `MODULE_NOT_FOUND` crash on install. **4.7.2 is deprecated.**
+
 ## What's New in 4.7.1
 
 - **23 UI Languages** — Expanded from 7 to 23: Italian, Portuguese, Dutch, Polish, Swedish, Ukrainian, Czech, Turkish, Korean, Arabic, Hindi, Thai, Vietnamese, Hebrew, Greek, Hungarian. All 2,211 keys auto-translated and verified.

package/main/i18ntk-ui.js

@@ -5,11 +5,25 @@
 
 const fs = require('fs');
 const path = require('path');
-const SettingsManager = require('../settings/settings-manager');
-const SecurityUtils = require('../utils/security');
-const legacyConfigManager = require('../utils/config-manager');
-const { getIcon, isUnicodeSupported } = require('../utils/terminal-icons');
-const configManager = new SettingsManager();
+const SettingsManager = require('../settings/settings-manager');
+const SecurityUtils = require('../utils/security');
+const legacyConfigManager = require('../utils/config-manager');
+const { getIcon, isUnicodeSupported } = require('../utils/terminal-icons');
+const { formatLanguagePrompt } = require('../utils/language-menu');
+const configManager = new SettingsManager();
+
+function getSupportedUiLanguages() {
+    return configManager.getAvailableLanguages();
+}
+
+function getSupportedUiLanguageCodes() {
+    return getSupportedUiLanguages().map(language => language.code);
+}
+
+function getSupportedUiLanguageName(langCode) {
+    const language = getSupportedUiLanguages().find(item => item.code === langCode);
+    return language ? language.name : langCode;
+}
 
 class UIi18n {
     constructor() {
@@ -99,12 +113,12 @@ this.translations = {};
      * Detect which UI locales are currently installed
      * @returns {string[]} Array of available language codes
      */
-    detectAvailableLanguages() {
-        const all = ['en', 'de', 'es', 'fr', 'it', 'pt', 'nl', 'pl', 'sv', 'uk', 'cs', 'tr', 'ru', 'ja', 'ko', 'zh', 'ar', 'hi', 'th', 'vi', 'he', 'el', 'hu'];
-        return all.filter(lang => {
-            const filePath = path.join(this.uiLocalesDir, `${lang}.json`);
-            return SecurityUtils.safeExistsSync(filePath, this.getValidationBase(filePath));
-        });
+    detectAvailableLanguages() {
+        const all = getSupportedUiLanguageCodes();
+        return all.filter(lang => {
+            const filePath = path.join(this.uiLocalesDir, `${lang}.json`);
+            return SecurityUtils.safeExistsSync(filePath, this.getValidationBase(filePath));
+        });
     }
 
     /**
@@ -481,27 +495,17 @@ this.translations = {};
      * @param {string} langCode - Language code
      * @returns {string} Display name of the language
      */
-    getLanguageDisplayName(langCode) {
-        const displayNames = {
-            'en': 'English',
-            'de': 'Deutsch (German)',
-            'es': 'Español (Spanish)',
-            'fr': 'Français (French)',
-            'ru': 'Русский (Russian)',
-            'ja': '日本語 (Japanese)',
-            'zh': '中文 (Chinese)'
-         };
-
-        // Hardcoded texts that are not part of the i18n system but need to be displayed
-        this.hardcodedTexts = {
-            autoDetectedI18nDirectory: this.t('ui.autoDetectedI18nDirectory'),
+    getLanguageDisplayName(langCode) {
+        // Hardcoded texts that are not part of the i18n system but need to be displayed
+        this.hardcodedTexts = {
+            autoDetectedI18nDirectory: this.t('ui.autoDetectedI18nDirectory'),
             executingCommand: this.t('ui.executingCommand'),
             unknownCommand: this.t('ui.unknownCommand'),
             errorExecutingCommand: this.t('ui.errorExecutingCommand')
-        
-        };
-        return displayNames[langCode] || langCode;
-    }
+
+        };
+        return getSupportedUiLanguageName(langCode);
+    }
 
     /**
      * Interactive language selection menu
@@ -528,7 +532,8 @@ this.translations = {};
                console.log(this.t('language.languageOption', { index: index + 1, displayName, current }));
             });
             
-            rl.question('\n' + this.t('language.prompt'), async (answer) => {
+            const languagePrompt = formatLanguagePrompt(this.t('language.prompt'), this.availableLanguages.length);
+            rl.question('\n' + languagePrompt, async (answer) => {
                 const choice = parseInt(answer);
 
                 if (choice === 0) {

package/main/manage/index.js

@@ -17,12 +17,13 @@ const path = require('path');
 const fs = require('fs');
 const AdminAuth = require('../../utils/admin-auth');
 const SecurityUtils = require('../../utils/security');
-const configManager = require('../../settings/settings-manager');
+const SettingsManager = require('../../settings/settings-manager');
 const { validateSourceDir } = require('../../utils/config-helper');
 const { checkInitialized } = require('../../utils/init-helper');
 const { showFrameworkWarningOnce } = require('../../utils/cli-helper');
 const { createPrompt, isInteractive } = require('../../utils/prompt-helper');
 const { loadTranslations, t, refreshLanguageFromSettings} = require('../../utils/i18n-helper');
+const { formatLanguagePrompt } = require('../../utils/language-menu');
 const cliHelper = require('../../utils/cli-helper');
 const { printUpgradeWarningIfOutdated } = require('../../utils/npm-version-warning');
 const { blue } = require('../../utils/colors-new');
@@ -33,6 +34,8 @@ const pkg = require('../../package.json');
 const SetupEnforcer = require('../../utils/setup-enforcer');
 const CommandRouter = require('./commands/CommandRouter');
 const { detectProjectFramework } = require('../../utils/framework-detector');
+
+const configManager = new SettingsManager();
 
 // Import services to replace circular dependencies
 const ConfigurationService = require('./services/ConfigurationService');
@@ -1004,40 +1007,46 @@ class I18nManager {
 
     // ... existing code for showLanguageMenu, showDebugMenu, deleteReports, showSettingsMenu, etc. ...
 
-    async showLanguageMenu() {
-        console.log(`\n${t('language.title')}`);
-        console.log(t('language.separator'));
-        console.log(t('language.current', { language: 'English' })); // Simplified since we don't have UIi18n
-        console.log('\n' + t('language.available'));
-
-        const languages = [
-            { code: 'en', name: 'English' },
-            { code: 'de', name: 'Deutsch' },
-            { code: 'es', name: 'Español' },
-            { code: 'fr', name: 'Français' },
-            { code: 'ru', name: 'Русский' },
-            { code: 'ja', name: '日本語' },
-            { code: 'zh', name: '中文' }
-        ];
-
-        languages.forEach((lang, index) => {
-            const current = 'en' === 'en' ? ' ✓' : '';
-            console.log(t('language.languageOption', { index: index + 1, displayName: lang.name, current }));
-        });
+    async showLanguageMenu() {
+        const settings = configManager.loadSettings ? configManager.loadSettings() : (configManager.getConfig ? configManager.getConfig() : {});
+        const currentLanguage = settings.uiLanguage || settings.language || this.config.uiLanguage || this.config.language || 'en';
+        const languages = configManager.getAvailableLanguages ? configManager.getAvailableLanguages() : [
+            { code: 'en', name: 'English' }
+        ];
+        const currentLanguageName = languages.find(lang => lang.code === currentLanguage)?.name || currentLanguage;
+
+        console.log(`\n${t('language.title')}`);
+        console.log(t('language.separator'));
+        console.log(t('language.current', { language: currentLanguageName }));
+        console.log('\n' + t('language.available'));
+
+        languages.forEach((lang, index) => {
+            const current = lang.code === currentLanguage ? ' ✓' : '';
+            console.log(t('language.languageOption', { index: index + 1, displayName: lang.name, current }));
+        });
 
         console.log(`0. ${t('language.backToMainMenu')}`);
 
-        const choice = await this.prompt('\n' + t('language.prompt'));
+        const languagePrompt = formatLanguagePrompt(t('language.prompt'), languages.length);
+        const choice = await this.prompt('\n' + languagePrompt);
         const choiceNum = parseInt(choice);
 
         if (choiceNum === 0) {
             await this.showInteractiveMenu();
             return;
-        } else if (choiceNum >= 1 && choiceNum <= languages.length) {
-            const selectedLang = languages[choiceNum - 1];
-            console.log(t('language.changed', { language: selectedLang.name }));
-
-            // Force reload translations for the entire system
+        } else if (choiceNum >= 1 && choiceNum <= languages.length) {
+            const selectedLang = languages[choiceNum - 1];
+            settings.language = selectedLang.code;
+            settings.uiLanguage = selectedLang.code;
+            if (configManager.saveSettings) {
+                await configManager.saveSettings(settings);
+            } else if (configManager.saveConfig) {
+                await configManager.saveConfig(settings);
+            }
+
+            console.log(t('language.changed', { language: selectedLang.name }));
+
+            // Force reload translations for the entire system
             loadTranslations(selectedLang.code);
 
             // Return to main menu with new language

package/main/manage/managers/LanguageMenu.js

@@ -6,6 +6,7 @@
 const { t } = require('../../../utils/i18n-helper');
 const { loadTranslations } = require('../../../utils/i18n-helper');
 const SecurityUtils = require('../../../utils/security');
+const { formatLanguagePrompt } = require('../../../utils/language-menu');
 
 module.exports = class LanguageMenu {
   constructor(manager) {
@@ -30,7 +31,8 @@ module.exports = class LanguageMenu {
 
     console.log(`0. ${t('language.backToMainMenu')}`);
 
-    const choice = await this.manager.prompt('\n' + t('language.prompt'));
+    const languagePrompt = formatLanguagePrompt(t('language.prompt'), this.ui.availableLanguages.length);
+    const choice = await this.manager.prompt('\n' + languagePrompt);
     const choiceNum = parseInt(choice);
 
     if (choiceNum === 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "i18ntk",
-  "version": "4.7.1",
+  "version": "4.7.3",
   "description": "i18n Tool Kit - Zero-dependency internationalization toolkit for setup, scanning, analysis, validation, auto translation, fixing, reporting, and runtime translation loading.",
   "readmeFilename": "README.md",
   "keywords": [
@@ -144,12 +144,14 @@
     "utils/localized-confirm.js",
     "utils/mini-commander.js",
     "utils/locale-optimizer.js",
+    "utils/language-menu.js",
     "utils/logger.js",
     "utils/menu-layout.js",
     "utils/npm-version-warning.js",
     "utils/plugin-loader.js",
     "utils/prompt-helper.js",
     "utils/prompt.js",
+    "utils/promptPin.js",
     "utils/report-writer.js",
     "utils/report-model.js",
     "utils/secure-errors.js",
@@ -179,7 +181,7 @@
   },
   "preferGlobal": true,
   "versionInfo": {
-    "version": "4.7.1",
+    "version": "4.7.3",
     "releaseDate": "07/07/2026",
     "lastUpdated": "07/07/2026",
     "maintainer": "Vlad Noskov",
@@ -199,10 +201,12 @@
       "COMPREHENSIVE TESTING: All 384+ tests pass across CLI, Workbench, and Lens packages.",
       "FRAMEWORK DETECTION v2: Added 13 additional FRAMEWORK_PATTERNS (i18ntk-runtime, nuxt, formatjs, lingui, ngx-translate, next-intl, svelte-i18n, solid-i18n, fastapi, ruby-on-rails, react-native-localize, ionic). Expanded detectFramework() to check Python/Rust/Go/Ruby project files. Added 20+ WRAPPER_SKIP_PATTERNS. Added 8 missing FRAMEWORK_COMPATIBILITY versions. Now supports 30+ frameworks across 15+ languages.",
       "UI LOCALE EXPANSION: Expanded from 7 to 23 languages (Italian, Portuguese, Dutch, Polish, Swedish, Ukrainian, Czech, Turkish, Korean, Arabic, Hindi, Thai, Vietnamese, Hebrew, Greek, Hungarian). All 2,211 keys auto-translated with placeholder preservation. Native language names in all locale files. getAvailableLanguages(), settings schema enums, and UI language picker expanded to 23. 95-98% translated per language, 0 missing keys.",
-      "FRAMEWORK DETECTION CLEANUP: manage/index.js now uses centralized detectProjectFramework() instead of 6-framework inline check. Removed hardcoded framework.supported from config templates — only detected frameworks appear. checkI18nDependencies() unified across 4 modules (8→29 entries). 12 production files updated — hardcoded 7-language arrays expanded to 23."
+      "FRAMEWORK DETECTION CLEANUP: manage/index.js now uses centralized detectProjectFramework() instead of 6-framework inline check. Removed hardcoded framework.supported from config templates — only detected frameworks appear. checkI18nDependencies() unified across 4 modules (8→29 entries). 12 production files updated — hardcoded 7-language arrays expanded to 23.",
+      "PATCH: CLI language selector now derives display names and options from SettingsManager.getAvailableLanguages(), including the fallback manage/index.js entrypoint.",
+      "PATCH: Language selection prompts now render their numeric range dynamically from the installed UI locale count, preventing stale bounds during future locale expansion."
     ],
     "breakingChanges": [],
-    "nextVersion": "4.7.2",
+    "nextVersion": "4.7.4",
     "supportedNodeVersions": ">=16.0.0",
     "supportedFrameworks": {
       "react-i18next": ">=11.0.0",
@@ -231,18 +235,19 @@
       "fluent-rs": ">=0.16.0",
       "gettext-rs": ">=0.7.0"
     },
-    "supportPolicy": "Versions earlier than 4.7.0 may be unstable or insecure in CI automation. Upgrade to 4.7.1 or newer.",
+    "supportPolicy": "Versions earlier than 4.7.3 may be unstable or insecure in CI automation. Upgrade to 4.7.3 or newer.",
     "deprecations": [
       "4.3.0",
       "4.3.1",
       "4.3.2",
-      "4.3.3"
+      "4.3.3",
+      "4.7.2"
     ],
-    "deprecationMessage": "i18ntk 4.3.x and earlier have known security vulnerabilities (path traversal, JSON DoS). Upgrade to i18ntk@4.7.1 or newer: npm install -g i18ntk@latest",
+    "deprecationMessage": "i18ntk 4.3.x and earlier have known security vulnerabilities (path traversal, JSON DoS). i18ntk 4.7.2 has a missing-module bug. Upgrade to i18ntk@4.7.3 or newer: npm install -g i18ntk@latest",
     "securityAdvisories": [
       "GHSA-i18ntk-4.3.x-path-traversal: Backup command accepted arbitrary paths without validation (fixed in 4.4.1)",
       "GHSA-i18ntk-4.3.x-json-dos: Deeply nested JSON files could cause denial of service (fixed in 4.4.1)"
     ]
   },
-  "readme": "# i18ntk v4.7.1\n\nA zero-dependency internationalization toolkit for setup, scanning, analysis, validation, usage tracking, translation completion, automatic JSON locale translation, reporting, and runtime translation loading.\n\n![i18ntk Logo](https://raw.githubusercontent.com/vladnoskv/i18ntk/main/docs/screenshots/i18ntk-logo-public.PNG)\n\n[![npm version](https://img.shields.io/npm/v/i18ntk.svg?color=brightgreen)](https://www.npmjs.com/package/i18ntk)\n[![npm downloads](https://img.shields.io/npm/dt/i18ntk.svg)](https://www.npmjs.com/package/i18ntk)\n[![node](https://img.shields.io/badge/node-%3E%3D16-339933)](https://nodejs.org)\n[![dependencies](https://img.shields.io/badge/dependencies-0-success)](https://www.npmjs.com/package/i18ntk)\n[![license](https://img.shields.io/badge/license-MIT-yellow.svg)](LICENSE)\n[![socket](https://socket.dev/api/badge/npm/package/i18ntk/4.7.1)](https://socket.dev/npm/package/i18ntk/overview/4.7.1)\n\n[![i18ntk Workbench](https://img.shields.io/badge/VS_Code-Workbench-007ACC?logo=visualstudiocode&logoColor=white)](https://marketplace.visualstudio.com/items?itemName=VladNoskov.i18ntk-workbench)\n[![i18ntk Lens](https://img.shields.io/badge/VS_Code-Lens-007ACC?logo=visualstudiocode&logoColor=white)](https://marketplace.visualstudio.com/items?itemName=VladNoskov.i18ntk-lens)\n\n## Ecosystem\n\n- **i18ntk** — CLI toolkit and runtime (this package)\n- **i18ntk Workbench** — VS Code dashboard, reports, and key management\n- **i18ntk Lens** — inline hovers, CodeLens, and diagnostics\n\n## Install\n\n```bash\nnpm install -g i18ntk\nnpx i18ntk --help\n```\n\n## What's New in 4.7.1\n\n- **23 UI Languages** — Expanded from 7 to 23: Italian, Portuguese, Dutch, Polish, Swedish, Ukrainian, Czech, Turkish, Korean, Arabic, Hindi, Thai, Vietnamese, Hebrew, Greek, Hungarian. All 2,211 keys auto-translated and verified.\n- **Framework Detection Cleanup** — Removed hardcoded `framework.supported` lists from config templates. `manage/index.js` now uses centralized `detectProjectFramework()` covering all 30+ frameworks. Only detected frameworks appear in setup — no more static catalog.\n- **Language Selector** — Settings UI, `getAvailableLanguages()`, and schema enums all expanded from 7 to 23 languages with native names.\n- **12 Production Files Updated** — Hardcoded 7-language arrays expanded to 23: validators, locale optimizers, env manager, usage tracking, UI, and config helpers.\n\n## What's New in 4.7.0\n\n- **30+ framework detection patterns** — 13 new FRAMEWORK_PATTERNS: `i18ntk-runtime`, `nuxt`, `lingui`, `formatjs`, `ngx-translate`, `next-intl`, `svelte-i18n`, `solid-i18n`, `fastapi`, `ruby-on-rails`, `react-native-localize`, `ionic`. Each with framework-specific scan regexes for translation calls, JSX components, template directives, and pipes.\n- **Non-Node project detection** — Python (`requirements.txt`, `pyproject.toml`, `setup.py`), Rust (`Cargo.toml`), Go (`go.mod`), Ruby (`Gemfile`) now detected when no `package.json` exists. Detects Django, Flask, FastAPI, Rails, and generic i18n.\n- **20+ new WRAPPER_SKIP_PATTERNS** — Covers I18n.t(), useTranslate(), translateService.instant(), formatMessage(), bundle.get_message(), fluent!, ts! and more.\n- **Framework-aware report generation** — `report-model.js` accepts optional framework parameter and uses framework-specific patterns for key extraction.\n- **Expanded namespace helpers** — `useTranslate` (Qwik), `useSpeak` (Qwik), `withTranslation` (react-i18next) added.\n- **Attribute key detection** — `i18nKey=`, `t-key=`, `data-i18n=` attributes detected in source scanning.\n- **All frame works now have FRAMEWORK_COMPATIBILITY entries and FRAMEWORK_SUGGESTIONS** for consistent tooling.\n  [Full changelog →](./CHANGELOG.md)\n\n## Quick Start\n\n```bash\ni18ntk                                    # interactive menu\ni18ntk --command=analyze                  # coverage report\ni18ntk --command=validate                 # quality checks\ni18ntk --command=usage                    # key usage tracking\ni18ntk report --json --out ./reports      # full report\ni18ntk --command=complete                 # fill missing keys\ni18ntk --command=translate                # auto-translate\ni18ntk --command=summary                  # status overview\n```\n\nSee [docs/getting-started.md](./docs/getting-started.md) for the full onboarding guide.\n\n## Command Reference\n\n| Command     | Purpose                                    | Output                        |\n| ----------- | ------------------------------------------ | ----------------------------- |\n| `i18ntk`    | Interactive management menu                | —                             |\n| `init`      | Setup locale folders and target files      | Locale JSON, `.i18ntk-config` |\n| `analyze`   | Translation coverage comparison            | Reports                       |\n| `validate`  | Structure, quality, and risk validation    | Summary report                |\n| `usage`     | Map keys to source, find dead/missing keys | Usage report                  |\n| `report`    | Stable schema report (JSON/MD/HTML)        | stdout or file output         |\n| `scanner`   | Detect hardcoded text in source files      | Scanner report                |\n| `complete`  | Fill missing keys in target files          | Target locale JSON            |\n| `translate` | Auto-translate via provider AI             | Target locale JSON            |\n| `sizing`    | Expansion risk and layout analysis         | Sizing report                 |\n| `summary`   | Project translation status overview        | Console output                |\n| `fixer`     | Fix placeholders and markers               | Locale JSON                   |\n| `backup`    | Create/verify/restore locale backups       | Backup archives               |\n\nEach is available as `i18ntk --command=<name>` or standalone `i18ntk-<name>`.\n\n## Common Options\n\n```\n--code-dir <path>       Source code directory\n--locales-dir <path>    Locale files directory\n--output-dir <path>     Report output directory\n--source-locale <code>  Source language code (e.g. en)\n--framework <name>      Override framework detection\n--no-prompt             Skip interactive prompts\n--help                  Show help\n```\n\n## Auto Translate\n\n```bash\ni18ntk-translate locales/en/common.json de\ni18ntk-translate locales/en/common.json fr --dry-run --preserve-placeholders\n```\n\n**Providers:** Google (default), DeepL, LibreTranslate\n\n```bash\nexport DEEPL_API_KEY=\"your-key\"\ni18ntk-translate locales/en/common.json de --provider deepl --no-confirm\n```\n\n**Placeholder-aware translation** detects `{name}`, `{{count}}`, `%s`, `:id`, `${value}`, `$t(key)`, and ICU pattern syntax. The default mode is `--only-missing` — existing translations are preserved.\n\nProtected terms and keys via `i18ntk-auto-translate.json`:\n\n```json\n{\n  \"version\": 1,\n  \"terms\": [\"BrandName\", \"PRODUCT_CODE\"],\n  \"keys\": [\"app.brandName\", \"product.*.symbol\"],\n  \"values\": [\"BrandName Ltd\"],\n  \"patterns\": [\"[A-Z]{2,}-\\\\d+\"]\n}\n```\n\n[Auto Translate guide →](./docs/auto-translate.md)\n\n## Configuration\n\nExample `.i18ntk-config`:\n\n```json\n{\n  \"version\": \"4.6.1\",\n  \"sourceDir\": \"./locales\",\n  \"i18nDir\": \"./locales\",\n  \"sourceLanguage\": \"en\",\n  \"defaultLanguages\": [\"en\", \"de\", \"es\", \"fr\", \"ru\"],\n  \"keyStyle\": \"dot.notation\",\n  \"englishContentThresholdPercent\": 10,\n  \"allowedEnglishTerms\": [\"BrandName\"],\n  \"autoTranslate\": {\n    \"placeholderMode\": \"preserve\",\n    \"concurrency\": 12,\n    \"onlyMissingOrEnglish\": true\n  },\n  \"extensions\": {\n    \"workbench\": { \"localeDirectory\": \"./locales\", \"sourceLocale\": \"en\" },\n    \"lens\": { \"localeDirectory\": \"./locales\", \"sourceLocale\": \"en\", \"keyFormats\": [\"dot\", \"snake\"] }\n  }\n}\n```\n\n[Configuration reference →](./docs/api/CONFIGURATION.md)\n\n## Scanner\n\nDetects hardcoded text in 12+ languages with language-specific character ranges and stopword filtering. Framework-specific patterns for React, Vue, Angular, Svelte, Astro, Django, Flask, Python, Rust, Go, and more.\n\n```bash\ni18ntk-scanner --code-dir ./src --source-locale de\ni18ntk-scanner --code-dir ./src --source-locale ja --output-report\n```\n\n## Usage Analysis\n\nTracks key references, detects dead keys with confidence scores, resolves dynamic patterns (templates, arrays, object maps), and recommends namespace alignment.\n\n```bash\ni18ntk-usage --code-dir ./src --locales-dir ./locales --cleanup --dry-run-delete\n```\n\n## Runtime\n\n```js\nconst runtime = require('i18ntk/runtime');\nconst i18n = runtime.initRuntime({\n  baseDir: './locales',\n  language: 'en',\n  fallbackLanguage: 'en',\n});\n\nconsole.log(i18n.t('common.hello'));\ni18n.setLanguage('fr');\nconsole.log(i18n.getAvailableLanguages());\n```\n\n**Lazy loading** reduces memory on large locale folders:\n\n```js\nconst i18n = runtime.initRuntime({ baseDir: './locales', language: 'en', lazy: true });\n```\n\n**Per-call language overrides:**\n\n```js\ni18n.t('common.hello', {}, { language: 'de' });\n```\n\n**Batch translation:**\n\n```js\ni18n.translateBatch(['menu.home', 'menu.settings']);\n```\n\nProduction guidance:\n\n- Use the instance from `initRuntime()` — not module-level `runtime.t()` — in multi-tenant apps\n- Use `lazy: true` for large folders; `preload: true` for small sets\n- Call `refresh(language)` after deploying changed locale files\n- `i18ntk/runtime/enhanced` remains available for async/encryption compatibility\n\n[Runtime guide →](./docs/runtime.md)\n\n## Watch\n\n```js\nconst watchLocales = require('i18ntk/utils/watch-locales');\nconst watcher = watchLocales('./locales');\n\nwatcher.on('change', (filePath) => console.log('changed:', filePath));\nwatcher.on('add', (filePath) => console.log('added:', filePath));\nwatcher.stop();\n```\n\nFeatures: 300ms debounce, SHA-256 hash tracking, 50-directory cap. The callback form `watchLocales('./locales', onChange)` is still supported.\n\n## Documentation\n\n- [Getting Started](./docs/getting-started.md)\n- [Configuration](./docs/api/CONFIGURATION.md)\n- [API Reference](./docs/api/API_REFERENCE.md)\n- [Runtime API](./docs/runtime.md)\n- [Auto Translate](./docs/auto-translate.md)\n- [Scanner Guide](./docs/scanner-guide.md)\n- [Environment Variables](./docs/environment-variables.md)\n\n## Security\n\n- No API key required for default Auto Translate\n- Do not store secrets in locale files, `.i18ntk-config`, or protection files\n- Report issues via [SECURITY.md](./SECURITY.md)\n\n## Related\n\n| Tool             | Purpose                                     |\n| ---------------- | ------------------------------------------- |\n| i18ntk Workbench | VS Code localization health dashboard       |\n| i18ntk Lens      | Inline hovers, CodeLens, and diagnostics    |\n| PublishGuard     | Pre-publish safety scanner for npm packages |\n| ContextKit       | AI coding context manager                   |\n\n## License\n\nSee [LICENSE](./LICENSE).\n"
+  "readme": "# i18ntk v4.7.3\n\nA zero-dependency internationalization toolkit for setup, scanning, analysis, validation, usage tracking, translation completion, automatic JSON locale translation, reporting, and runtime translation loading.\n\n![i18ntk Logo](https://raw.githubusercontent.com/vladnoskv/i18ntk/main/docs/screenshots/i18ntk-logo-public.PNG)\n\n[![npm version](https://img.shields.io/npm/v/i18ntk.svg?color=brightgreen)](https://www.npmjs.com/package/i18ntk)\n[![npm downloads](https://img.shields.io/npm/dt/i18ntk.svg)](https://www.npmjs.com/package/i18ntk)\n[![node](https://img.shields.io/badge/node-%3E%3D16-339933)](https://nodejs.org)\n[![dependencies](https://img.shields.io/badge/dependencies-0-success)](https://www.npmjs.com/package/i18ntk)\n[![license](https://img.shields.io/badge/license-MIT-yellow.svg)](LICENSE)\n[![socket](https://socket.dev/api/badge/npm/package/i18ntk/4.7.3)](https://socket.dev/npm/package/i18ntk/overview/4.7.3)\n\n[![i18ntk Workbench](https://img.shields.io/badge/VS_Code-Workbench-007ACC?logo=visualstudiocode&logoColor=white)](https://marketplace.visualstudio.com/items?itemName=VladNoskov.i18ntk-workbench)\n[![i18ntk Lens](https://img.shields.io/badge/VS_Code-Lens-007ACC?logo=visualstudiocode&logoColor=white)](https://marketplace.visualstudio.com/items?itemName=VladNoskov.i18ntk-lens)\n\n## Ecosystem\n\n- **i18ntk** — CLI toolkit and runtime (this package)\n- **i18ntk Workbench** — VS Code dashboard, reports, and key management\n- **i18ntk Lens** — inline hovers, CodeLens, and diagnostics\n\n## Install\n\n```bash\nnpm install -g i18ntk\nnpx i18ntk --help\n```\n\n## What's New in 4.7.3\n\n- **Publish integrity fix** — `language-menu.js` and `promptPin.js` now included in npm package. Fixes `MODULE_NOT_FOUND` crash on install. **4.7.2 is deprecated.**\n\n## What's New in 4.7.1\n\n- **23 UI Languages** — Expanded from 7 to 23: Italian, Portuguese, Dutch, Polish, Swedish, Ukrainian, Czech, Turkish, Korean, Arabic, Hindi, Thai, Vietnamese, Hebrew, Greek, Hungarian. All 2,211 keys auto-translated and verified.\n- **Framework Detection Cleanup** — Removed hardcoded `framework.supported` lists from config templates. `manage/index.js` now uses centralized `detectProjectFramework()` covering all 30+ frameworks. Only detected frameworks appear in setup — no more static catalog.\n- **Language Selector** — Settings UI, `getAvailableLanguages()`, and schema enums all expanded from 7 to 23 languages with native names.\n- **12 Production Files Updated** — Hardcoded 7-language arrays expanded to 23: validators, locale optimizers, env manager, usage tracking, UI, and config helpers.\n\n## What's New in 4.7.0\n\n- **30+ framework detection patterns** — 13 new FRAMEWORK_PATTERNS: `i18ntk-runtime`, `nuxt`, `lingui`, `formatjs`, `ngx-translate`, `next-intl`, `svelte-i18n`, `solid-i18n`, `fastapi`, `ruby-on-rails`, `react-native-localize`, `ionic`. Each with framework-specific scan regexes for translation calls, JSX components, template directives, and pipes.\n- **Non-Node project detection** — Python (`requirements.txt`, `pyproject.toml`, `setup.py`), Rust (`Cargo.toml`), Go (`go.mod`), Ruby (`Gemfile`) now detected when no `package.json` exists. Detects Django, Flask, FastAPI, Rails, and generic i18n.\n- **20+ new WRAPPER_SKIP_PATTERNS** — Covers I18n.t(), useTranslate(), translateService.instant(), formatMessage(), bundle.get_message(), fluent!, ts! and more.\n- **Framework-aware report generation** — `report-model.js` accepts optional framework parameter and uses framework-specific patterns for key extraction.\n- **Expanded namespace helpers** — `useTranslate` (Qwik), `useSpeak` (Qwik), `withTranslation` (react-i18next) added.\n- **Attribute key detection** — `i18nKey=`, `t-key=`, `data-i18n=` attributes detected in source scanning.\n- **All frame works now have FRAMEWORK_COMPATIBILITY entries and FRAMEWORK_SUGGESTIONS** for consistent tooling.\n  [Full changelog →](./CHANGELOG.md)\n\n## Quick Start\n\n```bash\ni18ntk                                    # interactive menu\ni18ntk --command=analyze                  # coverage report\ni18ntk --command=validate                 # quality checks\ni18ntk --command=usage                    # key usage tracking\ni18ntk report --json --out ./reports      # full report\ni18ntk --command=complete                 # fill missing keys\ni18ntk --command=translate                # auto-translate\ni18ntk --command=summary                  # status overview\n```\n\nSee [docs/getting-started.md](./docs/getting-started.md) for the full onboarding guide.\n\n## Command Reference\n\n| Command     | Purpose                                    | Output                        |\n| ----------- | ------------------------------------------ | ----------------------------- |\n| `i18ntk`    | Interactive management menu                | —                             |\n| `init`      | Setup locale folders and target files      | Locale JSON, `.i18ntk-config` |\n| `analyze`   | Translation coverage comparison            | Reports                       |\n| `validate`  | Structure, quality, and risk validation    | Summary report                |\n| `usage`     | Map keys to source, find dead/missing keys | Usage report                  |\n| `report`    | Stable schema report (JSON/MD/HTML)        | stdout or file output         |\n| `scanner`   | Detect hardcoded text in source files      | Scanner report                |\n| `complete`  | Fill missing keys in target files          | Target locale JSON            |\n| `translate` | Auto-translate via provider AI             | Target locale JSON            |\n| `sizing`    | Expansion risk and layout analysis         | Sizing report                 |\n| `summary`   | Project translation status overview        | Console output                |\n| `fixer`     | Fix placeholders and markers               | Locale JSON                   |\n| `backup`    | Create/verify/restore locale backups       | Backup archives               |\n\nEach is available as `i18ntk --command=<name>` or standalone `i18ntk-<name>`.\n\n## Common Options\n\n```\n--code-dir <path>       Source code directory\n--locales-dir <path>    Locale files directory\n--output-dir <path>     Report output directory\n--source-locale <code>  Source language code (e.g. en)\n--framework <name>      Override framework detection\n--no-prompt             Skip interactive prompts\n--help                  Show help\n```\n\n## Auto Translate\n\n```bash\ni18ntk-translate locales/en/common.json de\ni18ntk-translate locales/en/common.json fr --dry-run --preserve-placeholders\n```\n\n**Providers:** Google (default), DeepL, LibreTranslate\n\n```bash\nexport DEEPL_API_KEY=\"your-key\"\ni18ntk-translate locales/en/common.json de --provider deepl --no-confirm\n```\n\n**Placeholder-aware translation** detects `{name}`, `{{count}}`, `%s`, `:id`, `${value}`, `$t(key)`, and ICU pattern syntax. The default mode is `--only-missing` — existing translations are preserved.\n\nProtected terms and keys via `i18ntk-auto-translate.json`:\n\n```json\n{\n  \"version\": 1,\n  \"terms\": [\"BrandName\", \"PRODUCT_CODE\"],\n  \"keys\": [\"app.brandName\", \"product.*.symbol\"],\n  \"values\": [\"BrandName Ltd\"],\n  \"patterns\": [\"[A-Z]{2,}-\\\\d+\"]\n}\n```\n\n[Auto Translate guide →](./docs/auto-translate.md)\n\n## Configuration\n\nExample `.i18ntk-config`:\n\n```json\n{\n  \"version\": \"4.6.1\",\n  \"sourceDir\": \"./locales\",\n  \"i18nDir\": \"./locales\",\n  \"sourceLanguage\": \"en\",\n  \"defaultLanguages\": [\"en\", \"de\", \"es\", \"fr\", \"ru\"],\n  \"keyStyle\": \"dot.notation\",\n  \"englishContentThresholdPercent\": 10,\n  \"allowedEnglishTerms\": [\"BrandName\"],\n  \"autoTranslate\": {\n    \"placeholderMode\": \"preserve\",\n    \"concurrency\": 12,\n    \"onlyMissingOrEnglish\": true\n  },\n  \"extensions\": {\n    \"workbench\": { \"localeDirectory\": \"./locales\", \"sourceLocale\": \"en\" },\n    \"lens\": { \"localeDirectory\": \"./locales\", \"sourceLocale\": \"en\", \"keyFormats\": [\"dot\", \"snake\"] }\n  }\n}\n```\n\n[Configuration reference →](./docs/api/CONFIGURATION.md)\n\n## Scanner\n\nDetects hardcoded text in 12+ languages with language-specific character ranges and stopword filtering. Framework-specific patterns for React, Vue, Angular, Svelte, Astro, Django, Flask, Python, Rust, Go, and more.\n\n```bash\ni18ntk-scanner --code-dir ./src --source-locale de\ni18ntk-scanner --code-dir ./src --source-locale ja --output-report\n```\n\n## Usage Analysis\n\nTracks key references, detects dead keys with confidence scores, resolves dynamic patterns (templates, arrays, object maps), and recommends namespace alignment.\n\n```bash\ni18ntk-usage --code-dir ./src --locales-dir ./locales --cleanup --dry-run-delete\n```\n\n## Runtime\n\n```js\nconst runtime = require('i18ntk/runtime');\nconst i18n = runtime.initRuntime({\n  baseDir: './locales',\n  language: 'en',\n  fallbackLanguage: 'en',\n});\n\nconsole.log(i18n.t('common.hello'));\ni18n.setLanguage('fr');\nconsole.log(i18n.getAvailableLanguages());\n```\n\n**Lazy loading** reduces memory on large locale folders:\n\n```js\nconst i18n = runtime.initRuntime({ baseDir: './locales', language: 'en', lazy: true });\n```\n\n**Per-call language overrides:**\n\n```js\ni18n.t('common.hello', {}, { language: 'de' });\n```\n\n**Batch translation:**\n\n```js\ni18n.translateBatch(['menu.home', 'menu.settings']);\n```\n\nProduction guidance:\n\n- Use the instance from `initRuntime()` — not module-level `runtime.t()` — in multi-tenant apps\n- Use `lazy: true` for large folders; `preload: true` for small sets\n- Call `refresh(language)` after deploying changed locale files\n- `i18ntk/runtime/enhanced` remains available for async/encryption compatibility\n\n[Runtime guide →](./docs/runtime.md)\n\n## Watch\n\n```js\nconst watchLocales = require('i18ntk/utils/watch-locales');\nconst watcher = watchLocales('./locales');\n\nwatcher.on('change', (filePath) => console.log('changed:', filePath));\nwatcher.on('add', (filePath) => console.log('added:', filePath));\nwatcher.stop();\n```\n\nFeatures: 300ms debounce, SHA-256 hash tracking, 50-directory cap. The callback form `watchLocales('./locales', onChange)` is still supported.\n\n## Documentation\n\n- [Getting Started](./docs/getting-started.md)\n- [Configuration](./docs/api/CONFIGURATION.md)\n- [API Reference](./docs/api/API_REFERENCE.md)\n- [Runtime API](./docs/runtime.md)\n- [Auto Translate](./docs/auto-translate.md)\n- [Scanner Guide](./docs/scanner-guide.md)\n- [Environment Variables](./docs/environment-variables.md)\n\n## Security\n\n- No API key required for default Auto Translate\n- Do not store secrets in locale files, `.i18ntk-config`, or protection files\n- Report issues via [SECURITY.md](./SECURITY.md)\n\n## Related\n\n| Tool             | Purpose                                     |\n| ---------------- | ------------------------------------------- |\n| i18ntk Workbench | VS Code localization health dashboard       |\n| i18ntk Lens      | Inline hovers, CodeLens, and diagnostics    |\n| PublishGuard     | Pre-publish safety scanner for npm packages |\n| ContextKit       | AI coding context manager                   |\n\n## License\n\nSee [LICENSE](./LICENSE).\n"
 }

package/utils/language-menu.js

@@ -0,0 +1,20 @@
+/**
+ * Helpers for language selection menus.
+ */
+
+function formatLanguagePrompt(prompt, maxOption) {
+  const max = String(maxOption);
+  const fallback = `Select a language (0-${max}):`;
+  const text = typeof prompt === 'string' && prompt.trim() ? prompt : fallback;
+
+  if (text.includes('{max}')) {
+    return text.replace(/\{max\}/g, max);
+  }
+
+  const updated = text.replace(/\(0\s*[-–—~～]\s*\d+\)/u, `(0-${max})`);
+  return updated === text ? `${text.replace(/\s*$/, '')} (0-${max}):` : updated;
+}
+
+module.exports = {
+  formatLanguagePrompt
+};

package/utils/promptPin.js

@@ -0,0 +1,76 @@
+const readline = require('readline');
+
+async function promptPin({ rl, label = 'Enter 4-digit Admin PIN: ', length = 4, digitsOnly = true } = {}) {
+  return rawMaskedPrompt(rl, label, { length, digitsOnly });
+}
+
+async function promptPinConfirm(rl, label1 = 'Enter new 4-digit Admin PIN: ', label2 = 'Confirm PIN: ') {
+  const pin1 = await promptPin({ rl, label: label1 });
+  const pin2 = await promptPin({ rl, label: label2 });
+  if (pin1 !== pin2) throw new Error('PINs do not match');
+  return pin1;
+}
+
+function rawMaskedPrompt(rl, promptText, { length = 4, digitsOnly = true } = {}) {
+  return new Promise((resolve) => {
+    const input = rl.input;
+    const output = rl.output;
+
+    const isRaw = input.isRaw;
+    if (!isRaw) input.setRawMode && input.setRawMode(true);
+
+    let buf = '';
+
+    const onData = (chunk) => {
+      const s = chunk.toString('utf8');
+
+      if (s === '\r' || s === '\n') {
+        if (buf.length === length) {
+          output.write('\n');
+          cleanup();
+          return resolve(buf);
+        }
+        return;
+      }
+
+      if (s === '\u0003') {
+        output.write('\n');
+        cleanup();
+        process.exit(130);
+      }
+
+      if (s === '\u0008' || s === '\u007f') {
+        if (buf.length > 0) buf = buf.slice(0, -1);
+        repaint();
+        return;
+      }
+
+      const ch = s;
+      if (digitsOnly) {
+        if (/^\d$/.test(ch) && buf.length < length) {
+          buf += ch;
+          repaint();
+        }
+      } else if (buf.length < length) {
+        buf += ch;
+        repaint();
+      }
+    };
+
+    const repaint = () => {
+      output.cursorTo && output.cursorTo(0);
+      output.clearLine && output.clearLine(1);
+      output.write(promptText + '*'.repeat(buf.length));
+    };
+
+    const cleanup = () => {
+      input.removeListener('data', onData);
+      if (!isRaw) input.setRawMode && input.setRawMode(false);
+    };
+
+    output.write(promptText);
+    input.on('data', onData);
+  });
+}
+
+module.exports = { promptPin, promptPinConfirm };