Add install-local command for portable CI/CD installation (#8)

Author: Copilot

.gitignore

@@ -69,5 +69,10 @@ enc_keys/
 test_dec_keys/
 secureflow.yaml
 
+# Local installation (optional - can be committed for portable CI/CD)
+# Uncomment these lines if you don't want to commit the local installation:
+# .secureflow/
+# secureflow.sh
+
 # End of file
 

README.md

@@ -120,6 +120,68 @@ go build -o secureflow
 sudo mv secureflow /usr/local/bin/
 ```
 
+### Local Installation for CI/CD
+
+SecureFlow provides a convenient `install-local` command that sets up a portable installation without requiring system-wide installation. This is perfect for CI/CD pipelines where you can't or don't want to install binaries globally.
+
+```bash
+# Run this once to set up local installation
+secureflow install-local
+```
+
+This command will:
+- Download platform-specific executables (Linux, macOS, Windows) to `.secureflow/` directory
+- Create a `secureflow.sh` launcher script in the current directory
+- The launcher automatically detects your platform and runs the correct executable
+
+**Usage in CI/CD:**
+
+```bash
+# In your CI/CD pipeline
+./secureflow.sh decrypt --password "$SECUREFLOW_PASSWORD" --non-interactive
+./secureflow.sh encrypt --password "$SECUREFLOW_PASSWORD" --non-interactive
+```
+
+**Benefits:**
+- ✅ No system installation required
+- ✅ Works across different platforms automatically
+- ✅ Portable - commit `.secureflow/` and `secureflow.sh` to your repo
+- ✅ Perfect for CI/CD environments with restricted permissions
+
+**Example: Using in GitHub Actions**
+
+**Option A: Install during CI/CD run**
+```yaml
+steps:
+  - uses: actions/checkout@v3
+  
+  - name: Setup SecureFlow locally
+    run: |
+      wget https://github.com/MayR-Labs/secureflow-go/releases/latest/download/secureflow-linux-amd64
+      chmod +x secureflow-linux-amd64
+      ./secureflow-linux-amd64 install-local
+  
+  - name: Decrypt secrets
+    run: ./secureflow.sh decrypt --password "${{ secrets.SECUREFLOW_PASSWORD }}" --non-interactive
+```
+
+**Option B: Commit installation to repo (no CI/CD setup needed)**
+```bash
+# Run locally once
+secureflow install-local
+git add .secureflow/ secureflow.sh
+git commit -m "Add portable SecureFlow"
+```
+
+Then your CI/CD workflow is simply:
+```yaml
+steps:
+  - uses: actions/checkout@v3
+  
+  - name: Decrypt secrets
+    run: ./secureflow.sh decrypt --password "${{ secrets.SECUREFLOW_PASSWORD }}" --non-interactive
+```
+
 ### Verify Installation
 
 ```bash
@@ -241,9 +303,11 @@ secureflow test --password "your_password" --non-interactive
 
 ```bash
 secureflow --help
+secureflow init --help
 secureflow encrypt --help
 secureflow decrypt --help
 secureflow test --help
+secureflow install-local --help
 ```
 
 ---
@@ -314,7 +378,86 @@ See the [Configuration Guide](./docs/configuration.md) for detailed examples inc
 
 SecureFlow is designed to work seamlessly in CI/CD pipelines with its non-interactive mode.
 
-### Quick CI/CD Example (GitHub Actions)
+### Method 1: Local Installation (Recommended)
+
+The easiest approach for CI/CD is to use `install-local` which creates a portable installation.
+
+**Approach A: Download and install during each CI/CD run**
+
+```yaml
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    
+    steps:
+      - uses: actions/checkout@v3
+      
+      # Download and setup SecureFlow (no sudo required)
+      - name: Setup SecureFlow
+        run: |
+          wget https://github.com/MayR-Labs/secureflow-go/releases/latest/download/secureflow-linux-amd64
+          chmod +x secureflow-linux-amd64
+          ./secureflow-linux-amd64 install-local
+      
+      # Use the launcher script
+      - name: Decrypt secrets
+        run: |
+          ./secureflow.sh decrypt --password "${{ secrets.SECUREFLOW_PASSWORD }}" --non-interactive
+      
+      # Build and deploy
+      - name: Build & Deploy
+        run: |
+          npm run build
+          ./deploy.sh
+```
+
+**Approach B: Commit the local installation to your repo (Recommended for simplicity)**
+
+Run `secureflow install-local` once locally, then commit the files:
+
+```bash
+# Run locally (one-time setup)
+secureflow install-local
+git add .secureflow/ secureflow.sh
+git commit -m "Add portable SecureFlow installation"
+git push
+```
+
+Your CI/CD workflow becomes very simple (no installation step needed):
+
+```yaml
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    
+    steps:
+      - uses: actions/checkout@v3
+      
+      # No installation needed - files are already in the repo!
+      - name: Decrypt secrets
+        run: |
+          ./secureflow.sh decrypt --password "${{ secrets.SECUREFLOW_PASSWORD }}" --non-interactive
+      
+      # Build and deploy
+      - name: Build & Deploy
+        run: |
+          npm run build
+          ./deploy.sh
+```
+
+### Method 2: Global Installation
 
 ```yaml
 name: Deploy
@@ -330,7 +473,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       
-      # Install SecureFlow
+      # Install SecureFlow globally
       - name: Install SecureFlow
         run: |
           wget https://github.com/MayR-Labs/secureflow-go/releases/latest/download/secureflow-linux-amd64
@@ -479,13 +622,44 @@ secureflow decrypt
 
 ### CI/CD Deployment
 
-Add to your CI/CD pipeline (example: GitHub Actions):
+**Option 1: Using install-local (recommended)**
+
+```bash
+# One-time setup
+secureflow install-local
+
+# In your CI/CD pipeline
+./secureflow.sh decrypt --password ${{ secrets.SECUREFLOW_PASSWORD }} --non-interactive
+```
+
+**Option 2: Global installation**
 
 ```yaml
 - name: Decrypt secrets
   run: secureflow decrypt --password ${{ secrets.SECUREFLOW_PASSWORD }} --non-interactive
 ```
 
+### Portable CI/CD Setup
+
+For teams that want a fully portable solution, commit the local installation to your repo:
+
+```bash
+# One-time setup in your repository
+secureflow install-local
+git add .secureflow/ secureflow.sh
+git commit -m "Add portable SecureFlow installation"
+
+# Your CI/CD config becomes very simple:
+# - name: Decrypt secrets
+#   run: ./secureflow.sh decrypt --password "$PASSWORD" --non-interactive
+```
+
+This approach:
+- ✅ No installation step needed in CI/CD
+- ✅ Works across all platforms automatically
+- ✅ Consistent versions across all environments
+- ✅ Faster CI/CD runs (no download/install time)
+
 ### Team Onboarding
 
 New team member joining:
@@ -523,7 +697,9 @@ secureflow-go/
 │   ├── encrypt.go         # Encryption command
 │   ├── decrypt.go         # Decryption command
 │   ├── test.go            # Test decryption command
-│   └── init.go            # Initialize config command
+│   ├── init.go            # Initialize config command
+│   ├── install_local.go   # Local installation command
+│   └── secureflow.sh      # Launcher script template
 │
 ├── internal/              # Internal packages
 │   ├── crypto/           # Encryption/decryption logic