xtra-cli 0.1.10 → 0.2.1

package/dist/commands/access.js

@@ -29,7 +29,7 @@ exports.accessCommand = new commander_1.Command("access")
     .action(async (options) => {
     let { project, secret, duration, reason } = options;
     if (!project) {
-        project = (0, config_1.getConfigValue)("project");
+        project = (0, config_1.getRcConfig)().project;
     }
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
@@ -97,7 +97,7 @@ exports.accessCommand = new commander_1.Command("access")
         if (result.expiresAt) {
             console.log(chalk_1.default.blue(`Access granted until: ${new Date(result.expiresAt).toLocaleString()}`));
         }
-        // Audit log — privileged action
+        // Audit log — privileged action
         logAuditSafe(options.decision === "approved" ? "ACCESS_APPROVED" : "ACCESS_REJECTED", null, { requestId, decision: options.decision, expiresAt: result.expiresAt });
     }
     catch (error) {

package/dist/commands/branch.js

@@ -22,9 +22,8 @@ exports.branchCommand
     // Access parent options (project ID)
     const parentOpts = exports.branchCommand.opts();
     let { project } = parentOpts;
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or checkout a branch."));
         process.exit(1);
@@ -78,9 +77,8 @@ exports.branchCommand
     const parentOpts = exports.branchCommand.opts();
     let { project } = parentOpts;
     const { description } = options;
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
         process.exit(1);
@@ -110,9 +108,8 @@ exports.branchCommand
     const parentOpts = exports.branchCommand.opts();
     let { project } = parentOpts;
     const { yes } = options;
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
         process.exit(1);
@@ -176,9 +173,8 @@ exports.branchCommand
     const parentOpts = exports.branchCommand.opts();
     let { project } = parentOpts;
     const { newName, description } = options;
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or checkout a branch."));
         process.exit(1);

package/dist/commands/checkout.js

@@ -17,9 +17,8 @@ exports.checkoutCommand = new commander_1.Command("checkout")
     .action(async (branchName, options) => {
     let { project } = options;
     // Try to get project from config if not provided
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
         process.exit(1);
@@ -60,7 +59,7 @@ exports.checkoutCommand = new commander_1.Command("checkout")
         // Save to config
         (0, config_1.setConfig)("branch", selectedBranch);
         (0, config_1.setConfig)("project", project);
-        console.log(chalk_1.default.green(`✔ Switched to branch '${selectedBranch}'`));
+        console.log(chalk_1.default.green(`✔ Switched to branch '${selectedBranch}'`));
     }
     catch (error) {
         spinner.fail("Failed to fetch branches");

package/dist/commands/diff.js

@@ -55,11 +55,10 @@ exports.diffCommand = new commander_1.Command("diff")
     .action(async (env1, env2, options) => {
     let { project, env, branch, show } = options;
     // Use config fallback
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!branch) {
-        branch = (0, config_1.getConfigValue)("branch") || "main";
+        branch = (0, config_1.getRcConfig)().branch || "main";
     }
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
@@ -155,7 +154,7 @@ function compareSecrets(source, target, show) {
         }
     });
     if (!hasDiff) {
-        console.log(chalk_1.default.green("✔ No differences found."));
+        console.log(chalk_1.default.green("✔ No differences found."));
     }
     else if (!show) {
         console.log(chalk_1.default.gray("\n(Use --show to reveal secret values)"));

package/dist/commands/doctor.js

@@ -38,7 +38,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.doctorCommand = void 0;
 /**
- * doctor.ts — Diagnose common xtra-cli setup issues
+ * doctor.ts — Diagnose common xtra-cli setup issues
  *
  * Runs a series of self-diagnostic checks and reports
  * pass / warn / fail for each one.
@@ -49,65 +49,65 @@ const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const axios_1 = __importDefault(require("axios"));
 const config_1 = require("../lib/config");
-const PASS = chalk_1.default.green("  ✔");
-const FAIL = chalk_1.default.red("  ✗");
-const WARN = chalk_1.default.yellow("  ⚠");
+const PASS = chalk_1.default.green("  ✔");
+const FAIL = chalk_1.default.red("  ✗");
+const WARN = chalk_1.default.yellow("  âš ");
 async function runChecks() {
     const checks = [];
     const config = (0, config_1.getConfig)();
-    // ── 1. Node Version ─────────────────────────────────────────────────────────
+    // ── 1. Node Version ─────────────────────────────────────────────────────────
     const nodeMajor = parseInt(process.versions.node.split(".")[0]);
     checks.push({
         name: "Node.js Version",
         status: nodeMajor >= 18 ? "pass" : "fail",
         message: `v${process.versions.node} ${nodeMajor >= 18 ? "(OK)" : "(requires >=18)"}`,
     });
-    // ── 2. Auth Token ────────────────────────────────────────────────────────────
+    // ── 2. Auth Token ────────────────────────────────────────────────────────────
     const token = (0, config_1.getAuthToken)();
     checks.push({
         name: "Auth Token",
         status: token ? "pass" : "fail",
-        message: token ? `Set (${token.substring(0, 8)}...)` : "Not set — run 'xtra login'",
+        message: token ? `Set (${token.substring(0, 8)}...)` : "Not set — run 'xtra login'",
     });
-    // ── 3. API URL Configured ────────────────────────────────────────────────────
+    // ── 3. API URL Configured ────────────────────────────────────────────────────
     const apiUrl = config.apiUrl || process.env.XTRA_API_URL;
     checks.push({
         name: "API URL",
         status: apiUrl ? "pass" : "warn",
         message: apiUrl || "Using default (https://xtra-security.vercel.app/api)",
     });
-    // ── 4. API Reachability ──────────────────────────────────────────────────────
+    // ── 4. API Reachability ──────────────────────────────────────────────────────
     try {
         const res = await axios_1.default.get(`${config.apiUrl}/health`, { timeout: 4000 });
         checks.push({
             name: "API Connectivity",
             status: res.status === 200 ? "pass" : "warn",
-            message: `${config.apiUrl} → ${res.status} ${res.statusText}`,
+            message: `${config.apiUrl} → ${res.status} ${res.statusText}`,
         });
     }
     catch (e) {
         const msg = e.code === "ECONNREFUSED"
-            ? "Connection refused — is the server running?"
+            ? "Connection refused — is the server running?"
             : e.code === "ETIMEDOUT"
-                ? "Timed out — server may be slow or unreachable"
+                ? "Timed out — server may be slow or unreachable"
                 : e.message;
         checks.push({ name: "API Connectivity", status: "fail", message: msg });
     }
-    // ── 5. Active Project ────────────────────────────────────────────────────────
-    const project = (0, config_1.getConfigValue)("project");
+    // ── 5. Active Project ────────────────────────────────────────────────────────
+    const project = (0, config_1.getRcConfig)().project;
     checks.push({
         name: "Active Project",
         status: project ? "pass" : "warn",
-        message: project ? project : "Not set — run 'xtra project set <id>'",
+        message: project ? project : "Not set — run 'xtra project set <id>'",
     });
-    // ── 6. Active Branch ─────────────────────────────────────────────────────────
-    const branch = (0, config_1.getConfigValue)("branch");
+    // ── 6. Active Branch ─────────────────────────────────────────────────────────
+    const branch = (0, config_1.getRcConfig)().branch;
     checks.push({
         name: "Active Branch",
         status: "pass",
         message: branch || "main (default)",
     });
-    // ── 7. .xtrarc / xtra.json ─────────────────────────────────────────────────
+    // ── 7. .xtrarc / xtra.json ─────────────────────────────────────────────────
     const rcPath = path.join(process.cwd(), ".xtrarc");
     const jsonPath = path.join(process.cwd(), "xtra.json");
     const hasProjectConfig = fs.existsSync(rcPath) || fs.existsSync(jsonPath);
@@ -116,21 +116,21 @@ async function runChecks() {
         status: hasProjectConfig ? "pass" : "warn",
         message: hasProjectConfig
             ? fs.existsSync(rcPath) ? ".xtrarc found" : "xtra.json found"
-            : "Not found — run 'xtra init' to create one",
+            : "Not found — run 'xtra init' to create one",
     });
-    // ── 8. .env file present ────────────────────────────────────────────────────
+    // ── 8. .env file present ────────────────────────────────────────────────────
     const envPath = path.join(process.cwd(), ".env");
     checks.push({
         name: ".env File",
         status: "pass",
         message: fs.existsSync(envPath) ? ".env found" : "No .env (not required if using xtra run)",
     });
-    // ── 9. XTRA_MACHINE_TOKEN (for CI) ─────────────────────────────────────────
+    // ── 9. XTRA_MACHINE_TOKEN (for CI) ─────────────────────────────────────────
     const machineToken = process.env.XTRA_MACHINE_TOKEN;
     checks.push({
         name: "CI Machine Token",
-        status: "pass", // Always pass — optional
-        message: machineToken ? "XTRA_MACHINE_TOKEN is set ✔" : "Not set (only needed for CI/CD pipelines)",
+        status: "pass", // Always pass — optional
+        message: machineToken ? "XTRA_MACHINE_TOKEN is set ✔" : "Not set (only needed for CI/CD pipelines)",
     });
     return checks;
 }
@@ -139,7 +139,7 @@ exports.doctorCommand = new commander_1.Command("doctor")
     .option("--json", "Output results as JSON", false)
     .action(async (options) => {
     if (!options.json) {
-        console.log(chalk_1.default.bold("\n🩺 xtra doctor — running diagnostics...\n"));
+        console.log(chalk_1.default.bold("\n🩺 xtra doctor — running diagnostics...\n"));
     }
     const checks = await runChecks();
     if (options.json) {
@@ -164,7 +164,7 @@ exports.doctorCommand = new commander_1.Command("doctor")
     }
     console.log();
     if (failures === 0 && warnings === 0) {
-        console.log(chalk_1.default.green.bold("  ✅ All checks passed! Your CLI is ready to use."));
+        console.log(chalk_1.default.green.bold("  ✅ All checks passed! Your CLI is ready to use."));
     }
     else {
         if (failures > 0)

package/dist/commands/env.js

@@ -21,9 +21,9 @@ exports.envCommand
     .action(async (options) => {
     try {
         let projectId = options.project;
-        const branch = options.branch || (0, config_1.getConfigValue)("branch") || "main";
+        const branch = options.branch || (0, config_1.getRcConfig)().branch || "main";
         if (!projectId) {
-            projectId = (0, config_1.getConfigValue)("project");
+            projectId = (0, config_1.getRcConfig)().project;
             if (!projectId) {
                 console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
                 process.exit(1);

package/dist/commands/export.js

@@ -21,11 +21,10 @@ exports.exportCommand = new commander_1.Command("export")
     .action(async (options) => {
     let { project, env, branch, format, output } = options;
     // Use config fallback
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!branch) {
-        branch = (0, config_1.getConfigValue)("branch") || "main";
+        branch = (0, config_1.getRcConfig)().branch || "main";
     }
     // Normalize Env
     const envMap = { dev: "development", stg: "staging", prod: "production" };
@@ -63,7 +62,7 @@ exports.exportCommand = new commander_1.Command("export")
         if (output) {
             const outputPath = path_1.default.resolve(process.cwd(), output);
             fs_1.default.writeFileSync(outputPath, content, "utf-8");
-            console.log(chalk_1.default.green(`✔ Secrets exported to ${outputPath}`));
+            console.log(chalk_1.default.green(`✔ Secrets exported to ${outputPath}`));
         }
         else {
             console.log(content);

package/dist/commands/generate.js

@@ -80,11 +80,10 @@ exports.generateCommand = new commander_1.Command("generate")
     .action(async (options) => {
     let { project, env, branch, output, format, force } = options;
     // Use config fallback
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!branch) {
-        branch = (0, config_1.getConfigValue)("branch") || "main";
+        branch = (0, config_1.getRcConfig)().branch || "main";
     }
     // Normalize Env
     const envMap = { dev: "development", stg: "staging", prod: "production" };

package/dist/commands/history.js

@@ -18,7 +18,7 @@ exports.historyCommand
     try {
         let projectId = options.project;
         if (!projectId) {
-            projectId = (0, config_1.getConfigValue)("project");
+            projectId = (0, config_1.getRcConfig)().project;
             if (!projectId) {
                 console.error(chalk_1.default.red("Error: Project ID not found. Use -p <id> or run 'xtra project set' first."));
                 process.exit(1);
@@ -56,7 +56,7 @@ exports.rollbackCommand
     try {
         let projectId = options.project;
         if (!projectId) {
-            projectId = (0, config_1.getConfigValue)("project");
+            projectId = (0, config_1.getRcConfig)().project;
             if (!projectId) {
                 console.error(chalk_1.default.red("Error: Project ID not found. Use -p <id> or run 'xtra project set' first."));
                 process.exit(1);

package/dist/commands/import.js

@@ -24,11 +24,10 @@ exports.importCommand = new commander_1.Command("import")
     .action(async (file, options) => {
     let { project, env, branch, format, prefix } = options;
     // Use config fallback
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!branch) {
-        branch = (0, config_1.getConfigValue)("branch") || "main";
+        branch = (0, config_1.getRcConfig)().branch || "main";
     }
     // Normalize Env
     const envMap = { dev: "development", stg: "staging", prod: "production" };

package/dist/commands/integration.js

@@ -23,7 +23,7 @@ exports.integrationCommand
     try {
         let projectId = options.project;
         if (!projectId) {
-            projectId = (0, config_1.getConfigValue)("project");
+            projectId = (0, config_1.getRcConfig)().project;
             if (!projectId) {
                 console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
                 process.exit(1);
@@ -48,7 +48,7 @@ exports.integrationCommand
                     name: "repo",
                     message: "Select a repository to sync to:",
                     choices: repos.map((r) => ({
-                        name: `${r.fullName} ${r.private ? "(🔒)" : ""}`,
+                        name: `${r.fullName} ${r.private ? "(🔒)" : ""}`,
                         value: r.id.toString(),
                         short: r.fullName
                     }))
@@ -84,10 +84,10 @@ exports.integrationCommand
         // Show details
         result.results.forEach((r) => {
             if (r.success) {
-                console.log(chalk_1.default.green(`✓ ${r.key}`));
+                console.log(chalk_1.default.green(`✓ ${r.key}`));
             }
             else {
-                console.log(chalk_1.default.red(`✗ ${r.key}: ${r.error}`));
+                console.log(chalk_1.default.red(`✗ ${r.key}: ${r.error}`));
             }
         });
     }
@@ -109,7 +109,7 @@ exports.kubernetesCommand
     try {
         let projectId = options.project;
         if (!projectId) {
-            projectId = (0, config_1.getConfigValue)("project");
+            projectId = (0, config_1.getRcConfig)().project;
             if (!projectId) {
                 console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
                 process.exit(1);
@@ -153,7 +153,7 @@ exports.kubernetesCommand
         }
         let projectId = options.project;
         if (!projectId) {
-            projectId = (0, config_1.getConfigValue)("project");
+            projectId = (0, config_1.getRcConfig)().project;
             if (!projectId) {
                 console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
                 process.exit(1);

package/dist/commands/local.js

@@ -38,12 +38,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.localCommand = void 0;
 /**
- * local.ts — Toggle between cloud/local-only mode for offline development
+ * local.ts — Toggle between cloud/local-only mode for offline development
  *
  * In "local" mode:
  *  - xtra run reads from .env.local instead of calling the API
  *  - A flag XTRA_LOCAL_MODE=true is written to the CLI config
- *  - All API calls are bypassed — completely offline capable
+ *  - All API calls are bypassed — completely offline capable
  *
  * Usage:
  *   xtra local on              # Enable local mode (reads from .env.local)
@@ -73,11 +73,11 @@ This allows fully offline development without any API calls.
 Examples:
   $ xtra local status           # Check current mode
   $ xtra local on               # Enable offline (local) mode
-  $ xtra local off              # Disable — back to cloud mode
-  $ xtra local sync             # Pull cloud secrets → .env.local
+  $ xtra local off              # Disable — back to cloud mode
+  $ xtra local sync             # Pull cloud secrets → .env.local
   $ xtra local sync -p proj -e production  # Pull production to .env.local
 `);
-// ── status ────────────────────────────────────────────────────────────────────
+// ── status ────────────────────────────────────────────────────────────────────
 exports.localCommand
     .command("status")
     .description("Show current cloud/local mode")
@@ -86,7 +86,7 @@ exports.localCommand
     const envFilePath = path.join(process.cwd(), LOCAL_ENV_FILE);
     const hasLocalFile = fs.existsSync(envFilePath);
     console.log(chalk_1.default.bold("\nMode Status:\n"));
-    console.log(`  Mode        : ${mode ? chalk_1.default.yellow("🔌 LOCAL (offline)") : chalk_1.default.green("☁  CLOUD")}`);
+    console.log(`  Mode        : ${mode ? chalk_1.default.yellow("🔌 LOCAL (offline)") : chalk_1.default.green("☁  CLOUD")}`);
     console.log(`  .env.local  : ${hasLocalFile ? chalk_1.default.green("Found") : chalk_1.default.gray("Not found")}`);
     console.log(`  Config flag : ${chalk_1.default.gray((0, config_1.getConfigValue)("localMode") ? "true" : "false")}`);
     console.log(`  Env var     : ${chalk_1.default.gray(process.env.XTRA_LOCAL_MODE || "(not set)")}`);
@@ -97,34 +97,34 @@ exports.localCommand
     else {
         console.log(chalk_1.default.gray("  Run 'xtra local off' to switch back to cloud mode."));
         if (!hasLocalFile) {
-            console.log(chalk_1.default.yellow("  ⚠ No .env.local file found. Run 'xtra local sync' to pull secrets."));
+            console.log(chalk_1.default.yellow("  âš  No .env.local file found. Run 'xtra local sync' to pull secrets."));
         }
     }
     console.log();
 });
-// ── on ────────────────────────────────────────────────────────────────────────
+// ── on ────────────────────────────────────────────────────────────────────────
 exports.localCommand
     .command("on")
-    .description("Enable local mode — secrets read from .env.local")
+    .description("Enable local mode — secrets read from .env.local")
     .action(() => {
     (0, config_1.setConfig)("localMode", true);
-    console.log(chalk_1.default.yellow("🔌 Local mode ENABLED."));
+    console.log(chalk_1.default.yellow("🔌 Local mode ENABLED."));
     console.log(chalk_1.default.gray("   'xtra run' will now read from .env.local instead of the cloud."));
     const localFilePath = path.join(process.cwd(), LOCAL_ENV_FILE);
     if (!fs.existsSync(localFilePath)) {
-        console.log(chalk_1.default.yellow(`   ⚠ No .env.local file found. Run 'xtra local sync' to populate it.`));
+        console.log(chalk_1.default.yellow(`   âš  No .env.local file found. Run 'xtra local sync' to populate it.`));
     }
 });
-// ── off ───────────────────────────────────────────────────────────────────────
+// ── off ───────────────────────────────────────────────────────────────────────
 exports.localCommand
     .command("off")
-    .description("Disable local mode — secrets fetched from cloud again")
+    .description("Disable local mode — secrets fetched from cloud again")
     .action(() => {
     (0, config_1.setConfig)("localMode", false);
-    console.log(chalk_1.default.green("☁  Cloud mode ENABLED."));
+    console.log(chalk_1.default.green("☁  Cloud mode ENABLED."));
     console.log(chalk_1.default.gray("   'xtra run' will now fetch secrets from XtraSecurity Cloud."));
 });
-// ── sync ─────────────────────────────────────────────────────────────────────
+// ── sync ─────────────────────────────────────────────────────────────────────
 exports.localCommand
     .command("sync")
     .description("Pull cloud secrets to .env.local for offline use")
@@ -138,7 +138,7 @@ exports.localCommand
     const envMap = { dev: "development", stg: "staging", prod: "production" };
     env = envMap[env] || env;
     if (!project)
-        project = (0, config_1.getConfigValue)("project");
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID required. Use -p <id>."));
         process.exit(1);
@@ -146,7 +146,7 @@ exports.localCommand
     const outputPath = path.resolve(process.cwd(), output);
     // Warn if production
     if (env === "production" && !overwrite) {
-        console.log(chalk_1.default.red(`⚠  You are syncing PRODUCTION secrets to ${output}.`));
+        console.log(chalk_1.default.red(`âš   You are syncing PRODUCTION secrets to ${output}.`));
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         const confirmed = await new Promise(resolve => {
             rl.question(chalk_1.default.yellow("Type 'yes' to confirm: "), (ans) => {
@@ -170,14 +170,14 @@ exports.localCommand
         }
         // Write dotenv format
         const lines = [
-            `# xtra local sync — ${env}/${branch}`,
+            `# xtra local sync — ${env}/${branch}`,
             `# Generated: ${new Date().toISOString()}`,
             `# DO NOT COMMIT THIS FILE`,
             "",
             ...Object.entries(secrets).map(([k, v]) => `${k}=${v}`)
         ];
         fs.writeFileSync(outputPath, lines.join("\n") + "\n", "utf8");
-        console.log(chalk_1.default.green(`✅ Synced ${count} secrets to ${output}`));
+        console.log(chalk_1.default.green(`✅ Synced ${count} secrets to ${output}`));
         console.log(chalk_1.default.gray("   Run 'xtra local on' to switch to local mode."));
         // Remind about .gitignore
         const gitignorePath = path.join(process.cwd(), ".gitignore");
@@ -187,7 +187,7 @@ exports.localCommand
         }
         catch (_) { }
         if (!gitignore.includes(output)) {
-            console.log(chalk_1.default.yellow(`\n  ⚠ Remember to add '${output}' to your .gitignore!`));
+            console.log(chalk_1.default.yellow(`\n  âš  Remember to add '${output}' to your .gitignore!`));
         }
     }
     catch (e) {

package/dist/commands/rollback.js

@@ -19,9 +19,8 @@ exports.rollbackCommand = new commander_1.Command("rollback")
     .action(async (key, options) => {
     let { project, env } = options;
     // Use config fallback
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
         process.exit(1);

package/dist/commands/rotate.js

@@ -20,9 +20,8 @@ exports.rotateCommand = new commander_1.Command("rotate")
     .action(async (key, options) => {
     let { project, env, strategy, promote, value } = options;
     // Use config fallback
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     // Normalize Env
     const envMap = { dev: "development", stg: "staging", prod: "production" };
     env = envMap[env] || env;
@@ -36,7 +35,7 @@ exports.rotateCommand = new commander_1.Command("rotate")
         const { confirmProd } = await inquirer.prompt([{
                 type: "confirm",
                 name: "confirmProd",
-                message: chalk_1.default.red(`⚠ You are about to rotate a secret in PRODUCTION (${key}). Proceed?`),
+                message: chalk_1.default.red(`âš  You are about to rotate a secret in PRODUCTION (${key}). Proceed?`),
                 default: false,
             }]);
         if (!confirmProd) {

package/dist/commands/run.js

@@ -65,26 +65,16 @@ Examples:
     .action(async (command, args, options) => {
     // console.log("Run Options:", options);
     let { project, env, branch, shell: useShell } = options;
-    // ── Load .xtrarc from current directory (project-local config) ─────────
-    const rcPath = path.resolve(process.cwd(), ".xtrarc");
-    let rcConfig = {};
-    if (fs.existsSync(rcPath)) {
-        try {
-            rcConfig = JSON.parse(fs.readFileSync(rcPath, "utf8"));
-        }
-        catch (_) { }
-    }
+    // Load .xtrarc from CWD first (project-local config), then fall back to global conf store
+    const rc = (0, config_1.getRcConfig)();
     // Use active branch from config if not specified
-    if (!branch) {
-        branch = rcConfig.branch || (0, config_1.getConfigValue)("branch") || "main";
-    }
+    if (!branch)
+        branch = rc.branch;
     // Normalize Env
     const envMap = { dev: "development", stg: "staging", prod: "production" };
-    env = envMap[env] || env || rcConfig.env || (0, config_1.getConfigValue)("env") || "development";
-    // We might want to support default project in config later
-    if (!project) {
-        project = rcConfig.project || (0, config_1.getConfigValue)("project");
-    }
+    env = envMap[env] || env || rc.env;
+    if (!project)
+        project = rc.project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or checkout a branch."));
         process.exit(1);

package/dist/commands/secrets.js

@@ -28,19 +28,20 @@ Examples:
     .action(async (options) => {
     const parentOpts = exports.secretsCommand.opts();
     let { project, env, branch } = parentOpts;
-    // Use active branch from config if not specified
-    if (!branch) {
-        branch = (0, config_1.getConfigValue)("branch") || "main";
-    }
+    // Load .xtrarc from CWD (local project config has priority over global conf store)
+    const rc = (0, config_1.getRcConfig)();
+    if (!project)
+        project = rc.project;
+    if (!branch)
+        branch = rc.branch;
+    if (!env || env === "development")
+        env = rc.env; // only override if still at default
     // Normalize Env
     const envMap = { dev: "development", stg: "staging", prod: "production" };
     env = envMap[env] || env;
     const { show } = options;
     if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
-    if (!project) {
-        console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or checkout a branch."));
+        console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run `xtra init` first."));
         process.exit(1);
     }
     const spinner = (0, ora_1.default)(`Fetching secrets for ${env} (branch: ${branch})...`).start();

package/dist/commands/simulate.js

@@ -5,10 +5,10 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.simulateCommand = void 0;
 /**
- * simulate.ts — Dry-run mode for xtra run
+ * simulate.ts — Dry-run mode for xtra run
  *
  * Fetches secrets and shows exactly what `xtra run` would inject into
- * the process environment — without actually executing the command.
+ * the process environment — without actually executing the command.
  * Safe to use in any environment.
  */
 const commander_1 = require("commander");
@@ -30,7 +30,7 @@ exports.simulateCommand = new commander_1.Command("simulate")
     const envMap = { dev: "development", stg: "staging", prod: "production" };
     env = envMap[env] || env;
     if (!project)
-        project = (0, config_1.getConfigValue)("project");
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID required. Use -p <id> or run 'xtra project set'."));
         process.exit(1);
@@ -47,7 +47,7 @@ exports.simulateCommand = new commander_1.Command("simulate")
         process.exit(1);
     }
     const count = Object.keys(secrets).length;
-    console.log(chalk_1.default.bold(`\n🔬 Simulation — xtra run ${command ? chalk_1.default.cyan(command) : "(no command specified)"}\n`));
+    console.log(chalk_1.default.bold(`\n🔬 Simulation — xtra run ${command ? chalk_1.default.cyan(command) : "(no command specified)"}\n`));
     console.log(chalk_1.default.gray(`   Project : ${project}`));
     console.log(chalk_1.default.gray(`   Env     : ${env}`));
     console.log(chalk_1.default.gray(`   Branch  : ${branch}`));
@@ -61,16 +61,16 @@ exports.simulateCommand = new commander_1.Command("simulate")
     ];
     for (const [key, value] of Object.entries(secrets)) {
         const localVal = process.env[key];
-        const displayVal = showValues ? chalk_1.default.cyan(value) : chalk_1.default.gray("••••••••");
+        const displayVal = showValues ? chalk_1.default.cyan(value) : chalk_1.default.gray("••••••••");
         let status = chalk_1.default.green("Injected");
         let localDisplay = "-";
         if (showDiff && localVal !== undefined) {
-            localDisplay = showValues ? chalk_1.default.yellow(localVal) : chalk_1.default.gray("••••••••");
+            localDisplay = showValues ? chalk_1.default.yellow(localVal) : chalk_1.default.gray("••••••••");
             if (localVal === value) {
                 status = chalk_1.default.gray("Same");
             }
             else {
-                status = chalk_1.default.yellow("⚡ Override");
+                status = chalk_1.default.yellow("âš¡ Override");
             }
         }
         else if (showDiff) {
@@ -87,6 +87,6 @@ exports.simulateCommand = new commander_1.Command("simulate")
     if (!showDiff) {
         console.log(chalk_1.default.gray("  Tip: use --diff to compare against your local process.env"));
     }
-    console.log(chalk_1.default.bold(`\n  ✅ Simulation complete. ${count} secret(s) would be injected.`));
+    console.log(chalk_1.default.bold(`\n  ✅ Simulation complete. ${count} secret(s) would be injected.`));
     console.log(chalk_1.default.gray("  Run without 'simulate' to actually execute the command.\n"));
 });

package/dist/commands/status.js

@@ -20,11 +20,10 @@ exports.statusCommand = new commander_1.Command("status")
     .action(async (options) => {
     let { project, env, branch } = options;
     // Use config fallback
-    if (!project) {
-        project = (0, config_1.getConfigValue)("project");
-    }
+    if (!project)
+        project = (0, config_1.getRcConfig)().project;
     if (!branch) {
-        branch = (0, config_1.getConfigValue)("branch") || "main";
+        branch = (0, config_1.getRcConfig)().branch || "main";
     }
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
@@ -76,15 +75,15 @@ exports.statusCommand = new commander_1.Command("status")
         console.log("");
         console.log((0, table_1.table)(rows));
         if (diffCount === 0) {
-            console.log(chalk_1.default.green("✔ Everything is in sync."));
+            console.log(chalk_1.default.green("✔ Everything is in sync."));
         }
         else {
-            console.log(chalk_1.default.yellow(`⚠ Found ${diffCount} difference(s).\n`));
+            console.log(chalk_1.default.yellow(`âš  Found ${diffCount} difference(s).\n`));
             console.log(chalk_1.default.bold("  Next steps:"));
-            console.log(chalk_1.default.gray("    xtra generate              ") + chalk_1.default.white("# pull cloud secrets → .env (merge)"));
-            console.log(chalk_1.default.gray("    xtra generate -f json      ") + chalk_1.default.white("# pull cloud secrets → secrets.json"));
+            console.log(chalk_1.default.gray("    xtra generate              ") + chalk_1.default.white("# pull cloud secrets → .env (merge)"));
+            console.log(chalk_1.default.gray("    xtra generate -f json      ") + chalk_1.default.white("# pull cloud secrets → secrets.json"));
             console.log(chalk_1.default.gray("    xtra run node app.js       ") + chalk_1.default.white("# inject secrets at runtime (no file)"));
-            console.log(chalk_1.default.gray("    xtra local sync            ") + chalk_1.default.white("# pull cloud secrets → .env.local (offline mode)"));
+            console.log(chalk_1.default.gray("    xtra local sync            ") + chalk_1.default.white("# pull cloud secrets → .env.local (offline mode)"));
         }
     }
     catch (error) {

package/dist/commands/template.js

@@ -1,15 +1,15 @@
 "use strict";
 /**
- * template.ts — Secret Templating Engine for xtra-cli
+ * template.ts — Secret Templating Engine for xtra-cli
  *
  * Reads a template file containing {{ secrets.KEY }} placeholders,
  * fetches secrets from XtraSecurity Cloud, substitutes all placeholders,
  * and writes the rendered output to the specified file (or stdout).
  *
  * Supported placeholder syntaxes:
- *   {{ secrets.DATABASE_URL }}      → fetches DATABASE_URL from secrets
- *   {{ secrets.PORT | 3000 }}       → with fallback default value "3000"
- *   {{ env.NODE_ENV }}              → reads from local process environment
+ *   {{ secrets.DATABASE_URL }}      → fetches DATABASE_URL from secrets
+ *   {{ secrets.PORT | 3000 }}       → with fallback default value "3000"
+ *   {{ env.NODE_ENV }}              → reads from local process environment
  *
  * Example:
  *   # config.yaml.tpl
@@ -70,7 +70,7 @@ const chalk_1 = __importDefault(require("chalk"));
 const ora_1 = __importDefault(require("ora"));
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
-// ─── Placeholder Regex ────────────────────────────────────────────────────────
+// ─── Placeholder Regex ────────────────────────────────────────────────────────
 // Matches: {{ secrets.KEY }}, {{ secrets.KEY | default }}, {{ env.KEY | default }}
 const PLACEHOLDER_RE = /\{\{\s*(secrets|env)\.([A-Z0-9_a-z]+)(?:\s*\|\s*([^}]*?))?\s*\}\}/g;
 function renderTemplate(template, secrets, processEnv) {
@@ -91,18 +91,18 @@ function renderTemplate(template, secrets, processEnv) {
         }
         if (defaultVal !== undefined) {
             const trimmedDefault = defaultVal.trim();
-            usedDefaults.push(`${source}.${key} → "${trimmedDefault}"`);
+            usedDefaults.push(`${source}.${key} → "${trimmedDefault}"`);
             replacedCount++;
             return trimmedDefault;
         }
         missingKeys.push(`${source}.${key}`);
-        return `{{ ${source}.${key} }}`; // Leave unreplaced — user will see it clearly
+        return `{{ ${source}.${key} }}`; // Leave unreplaced — user will see it clearly
     });
     return { output, replacedCount, missingKeys, usedDefaults };
 }
-// ─── Command ──────────────────────────────────────────────────────────────────
+// ─── Command ──────────────────────────────────────────────────────────────────
 exports.templateCommand = new commander_1.Command("template")
-    .description("Secret templating engine — inject secrets into config file templates")
+    .description("Secret templating engine — inject secrets into config file templates")
     .addHelpText("after", `
 Template Syntax:
   {{ secrets.KEY }}           Replace with secret value
@@ -116,7 +116,7 @@ Examples:
   $ xtra template check config.yaml.tpl -p proj123 -e production
   $ xtra template list config.yaml.tpl
 `);
-// ── render ────────────────────────────────────────────────────────────────────
+// ── render ────────────────────────────────────────────────────────────────────
 exports.templateCommand
     .command("render <templateFile>")
     .description("Render a template file by injecting secrets and environment variables")
@@ -131,7 +131,7 @@ exports.templateCommand
     const envMap = { dev: "development", stg: "staging", prod: "production" };
     env = envMap[env] || env;
     if (!project)
-        project = (0, config_1.getConfigValue)("project");
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID required. Use -p <id> or run 'xtra project set'."));
         process.exit(1);
@@ -163,12 +163,12 @@ exports.templateCommand
     // Render
     const { output: rendered, replacedCount, missingKeys, usedDefaults } = renderTemplate(template, secrets, process.env);
     // Report
-    console.log(chalk_1.default.green(`✅ Replaced ${replacedCount} placeholder(s).`));
+    console.log(chalk_1.default.green(`✅ Replaced ${replacedCount} placeholder(s).`));
     if (usedDefaults.length > 0) {
-        console.log(chalk_1.default.yellow(`⚠  Used defaults for: ${usedDefaults.join(", ")}`));
+        console.log(chalk_1.default.yellow(`âš   Used defaults for: ${usedDefaults.join(", ")}`));
     }
     if (missingKeys.length > 0) {
-        console.log(chalk_1.default.red(`✗  Unresolved placeholders: ${missingKeys.join(", ")}`));
+        console.log(chalk_1.default.red(`✗  Unresolved placeholders: ${missingKeys.join(", ")}`));
         if (strict) {
             console.error(chalk_1.default.red("Aborting due to --strict mode."));
             process.exit(1);
@@ -178,7 +178,7 @@ exports.templateCommand
     if (output) {
         const outPath = path.resolve(process.cwd(), output);
         fs.writeFileSync(outPath, rendered, "utf8");
-        console.log(chalk_1.default.blue(`→ Written to: ${outPath}`));
+        console.log(chalk_1.default.blue(`→ Written to: ${outPath}`));
     }
     else {
         // Print to stdout (so user can pipe it)
@@ -196,7 +196,7 @@ exports.templateCommand
     }
     catch (e) { }
 });
-// ── check ─────────────────────────────────────────────────────────────────────
+// ── check ─────────────────────────────────────────────────────────────────────
 exports.templateCommand
     .command("check <templateFile>")
     .description("Validate that all template placeholders have matching secrets (dry-run)")
@@ -208,7 +208,7 @@ exports.templateCommand
     const envMap = { dev: "development", stg: "staging", prod: "production" };
     env = envMap[env] || env;
     if (!project)
-        project = (0, config_1.getConfigValue)("project");
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID required."));
         process.exit(1);
@@ -242,14 +242,14 @@ exports.templateCommand
     }
     if (missingKeys.length > 0) {
         console.log(chalk_1.default.red(`\n  Missing secrets (no default):`));
-        missingKeys.forEach(k => console.log(chalk_1.default.red(`    ✗ ${k}`)));
+        missingKeys.forEach(k => console.log(chalk_1.default.red(`    ✗ ${k}`)));
         process.exit(1);
     }
     else {
-        console.log(chalk_1.default.green("\n  ✅ All placeholders are resolvable!"));
+        console.log(chalk_1.default.green("\n  ✅ All placeholders are resolvable!"));
     }
 });
-// ── list ──────────────────────────────────────────────────────────────────────
+// ── list ──────────────────────────────────────────────────────────────────────
 exports.templateCommand
     .command("list <templateFile>")
     .description("List all placeholders found in a template file (no API call needed)")
@@ -269,7 +269,7 @@ exports.templateCommand
     matches.forEach(m => {
         const [, source, key, def] = m;
         const defaultHint = def ? chalk_1.default.gray(` (default: "${def.trim()}")`) : "";
-        const icon = source === "secrets" ? "🔒" : "📦";
+        const icon = source === "secrets" ? "🔒" : "📦";
         console.log(`  ${icon} ${chalk_1.default.cyan(`{{ ${source}.${key} }}`)}${defaultHint}`);
     });
     console.log(`\n  Total: ${chalk_1.default.bold(matches.length)} placeholder(s)\n`);

package/dist/commands/ui.js

@@ -42,39 +42,39 @@ const chalk_1 = __importDefault(require("chalk"));
 const readline = __importStar(require("readline"));
 const api_1 = require("../lib/api");
 const ENVS = ["development", "staging", "production"];
-// ─── Rendering ────────────────────────────────────────────────────────────────
+// ─── Rendering ────────────────────────────────────────────────────────────────
 function clear() { process.stdout.write("\x1Bc"); }
 function renderHeader() {
-    console.log(chalk_1.default.cyan("╔═══════════════════════════════════════════════════════════╗"));
-    console.log(chalk_1.default.cyan("║") + chalk_1.default.bold.cyan("  🔒  XtraSecurity — Interactive Shell                     ") + chalk_1.default.cyan("║"));
-    console.log(chalk_1.default.cyan("╚═══════════════════════════════════════════════════════════╝"));
-    console.log(chalk_1.default.gray("  ↑↓ Navigate  •  Enter Select  •  Tab Switch Panel  •  Q Quit\n"));
+    console.log(chalk_1.default.cyan("╔═══════════════════════════════════════════════════════════╗"));
+    console.log(chalk_1.default.cyan("║") + chalk_1.default.bold.cyan("  🔒  XtraSecurity — Interactive Shell                     ") + chalk_1.default.cyan("║"));
+    console.log(chalk_1.default.cyan("╚═══════════════════════════════════════════════════════════╝"));
+    console.log(chalk_1.default.gray("  ↑↓ Navigate  •  Enter Select  •  Tab Switch Panel  •  Q Quit\n"));
 }
 function renderList(title, items, selectedIdx, active) {
     const border = active ? chalk_1.default.cyan : chalk_1.default.gray;
-    console.log(border(`┌─ ${title} ${"─".repeat(Math.max(0, 28 - title.length))}┐`));
+    console.log(border(`┌─ ${title} ${"─".repeat(Math.max(0, 28 - title.length))}┐`));
     items.forEach((item, i) => {
         const isSelected = i === selectedIdx;
-        const icon = isSelected ? (active ? chalk_1.default.cyan("▶ ") : chalk_1.default.gray("▶ ")) : "  ";
+        const icon = isSelected ? (active ? chalk_1.default.cyan("â–¶ ") : chalk_1.default.gray("â–¶ ")) : "  ";
         const text = isSelected && active ? chalk_1.default.bold.cyan(item) : isSelected ? chalk_1.default.cyan(item) : chalk_1.default.white(item);
-        console.log(border("│") + ` ${icon}${text}`.padEnd(30) + border("│"));
+        console.log(border("│") + ` ${icon}${text}`.padEnd(30) + border("│"));
     });
-    console.log(border(`└${"─".repeat(32)}┘`));
+    console.log(border(`└${"─".repeat(32)}┘`));
 }
 function renderSecrets(secrets, selectedIdx, active) {
     const border = active ? chalk_1.default.cyan : chalk_1.default.gray;
     const COLS = [36, 12, 20];
-    const sep = "─".repeat(COLS[0]) + "┬" + "─".repeat(COLS[1]) + "┬" + "─".repeat(COLS[2]);
-    console.log(border(`┌${sep}┐`));
+    const sep = "─".repeat(COLS[0]) + "┬" + "─".repeat(COLS[1]) + "┬" + "─".repeat(COLS[2]);
+    console.log(border(`┌${sep}┐`));
     const header = [
         chalk_1.default.bold.yellow("KEY".padEnd(COLS[0])),
         chalk_1.default.bold.yellow("VALUE".padEnd(COLS[1])),
         chalk_1.default.bold.yellow("UPDATED".padEnd(COLS[2]))
-    ].join(border("│"));
-    console.log(border("│") + header + border("│"));
-    console.log(border(`├${sep}┤`));
+    ].join(border("│"));
+    console.log(border("│") + header + border("│"));
+    console.log(border(`├${sep}┤`));
     if (secrets.length === 0) {
-        console.log(border("│") + chalk_1.default.gray("  No secrets found.".padEnd(COLS[0] + COLS[1] + COLS[2] + 2)) + border("│"));
+        console.log(border("│") + chalk_1.default.gray("  No secrets found.".padEnd(COLS[0] + COLS[1] + COLS[2] + 2)) + border("│"));
     }
     else {
         secrets.forEach((s, i) => {
@@ -87,16 +87,16 @@ function renderSecrets(secrets, selectedIdx, active) {
                 fmt(s.key, COLS[0]),
                 fmt("*".repeat(8), COLS[1]),
                 fmt(new Date(s.updatedAt).toLocaleDateString(), COLS[2]),
-            ].join(border("│"));
-            console.log(border("│") + row + border("│"));
+            ].join(border("│"));
+            console.log(border("│") + row + border("│"));
         });
     }
-    console.log(border(`└${"─".repeat(COLS[0])}┴${"─".repeat(COLS[1])}┴${"─".repeat(COLS[2])}┘`));
+    console.log(border(`└${"─".repeat(COLS[0])}┴${"─".repeat(COLS[1])}┴${"─".repeat(COLS[2])}┘`));
 }
 function renderStatus(msg) {
-    console.log("\n" + chalk_1.default.gray("  ● ") + chalk_1.default.white(msg));
+    console.log("\n" + chalk_1.default.gray("  ● ") + chalk_1.default.white(msg));
 }
-// ─── Main TUI Loop ────────────────────────────────────────────────────────────
+// ─── Main TUI Loop ────────────────────────────────────────────────────────────
 async function runUI() {
     let screen = "project";
     let projects = [];
@@ -110,7 +110,7 @@ async function runUI() {
         try {
             projects = await api_1.api.getProjects();
             status = projects.length > 0
-                ? `Loaded ${projects.length} projects. Use ↑↓ and Enter to navigate.`
+                ? `Loaded ${projects.length} projects. Use ↑↓ and Enter to navigate.`
                 : "No projects found. Try running `xtra login`.";
         }
         catch (e) {
@@ -145,7 +145,7 @@ async function runUI() {
         renderList("ENVIRONMENT", ENVS, envIdx, screen === "env");
         console.log();
         if (loading) {
-            console.log(chalk_1.default.cyan("  ⠋ Loading secrets..."));
+            console.log(chalk_1.default.cyan("  â ‹ Loading secrets..."));
         }
         else {
             renderSecrets(secrets, secretIdx, screen === "secrets");
@@ -164,7 +164,7 @@ async function runUI() {
             if (process.stdin.isTTY)
                 process.stdin.setRawMode(false);
             clear();
-            console.log(chalk_1.default.cyan("Goodbye! 👋"));
+            console.log(chalk_1.default.cyan("Goodbye! 👋"));
             process.exit(0);
         }
         // Tab to cycle panels
@@ -210,7 +210,7 @@ async function runUI() {
     else
         draw();
 }
-// ─── Commander Command ────────────────────────────────────────────────────────
+// ─── Commander Command ────────────────────────────────────────────────────────
 exports.uiCommand = new commander_1.Command("ui")
     .description("Launch interactive TUI secrets dashboard (arrow keys to navigate, Q to quit)")
     .action(async () => {

package/dist/commands/watch.js

@@ -5,7 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.watchCommand = void 0;
 /**
- * watch.ts — Live reload secrets in dev mode
+ * watch.ts — Live reload secrets in dev mode
  *
  * Polls XtraSecurity Cloud for secret changes at a configurable interval.
  * When a change is detected, restarts the child process with fresh secrets.
@@ -26,7 +26,7 @@ function hashSecrets(secrets) {
 }
 async function startProcess(command, args, secrets, useShell) {
     if (child) {
-        process.stdout.write(chalk_1.default.yellow("\n  [watch] Secret change detected — restarting...\n"));
+        process.stdout.write(chalk_1.default.yellow("\n  [watch] Secret change detected — restarting...\n"));
         child.kill("SIGTERM");
         // Give it 500ms to terminate gracefully
         await new Promise(r => setTimeout(r, 500));
@@ -50,7 +50,7 @@ async function startProcess(command, args, secrets, useShell) {
     });
 }
 exports.watchCommand = new commander_1.Command("watch")
-    .description("Live reload — auto-restart process when secrets change in cloud")
+    .description("Live reload — auto-restart process when secrets change in cloud")
     .option("-p, --project <id>", "Project ID")
     .option("-e, --env <environment>", "Environment", "development")
     .option("-b, --branch <branch>", "Branch", "main")
@@ -69,19 +69,19 @@ Examples:
     const envMap = { dev: "development", stg: "staging", prod: "production" };
     env = envMap[env] || env;
     if (!project)
-        project = (0, config_1.getConfigValue)("project");
+        project = (0, config_1.getRcConfig)().project;
     if (!project) {
         console.error(chalk_1.default.red("Error: Project ID required. Use -p <id> or run 'xtra project set'."));
         process.exit(1);
     }
-    // Block production watch — too dangerous
+    // Block production watch — too dangerous
     if (env === "production") {
-        console.error(chalk_1.default.red("⚠  xtra watch is not allowed in PRODUCTION for safety reasons."));
+        console.error(chalk_1.default.red("âš   xtra watch is not allowed in PRODUCTION for safety reasons."));
         console.error(chalk_1.default.gray("   Use xtra run for one-shot production injection."));
         process.exit(1);
     }
     const pollMs = Math.max(3, parseInt(interval)) * 1000;
-    console.log(chalk_1.default.bold(`\n👁  xtra watch — watching ${env}/${branch} (every ${interval}s)\n`));
+    console.log(chalk_1.default.bold(`\n👁  xtra watch — watching ${env}/${branch} (every ${interval}s)\n`));
     console.log(chalk_1.default.gray(`   Press Ctrl+C to stop.\n`));
     // Graceful shutdown
     process.on("SIGINT", () => {
@@ -110,12 +110,12 @@ Examples:
                 await startProcess(command, args, secrets, useShell);
             }
             else {
-                process.stdout.write(chalk_1.default.gray(`  [watch] ${new Date().toLocaleTimeString()} — no changes\r`));
+                process.stdout.write(chalk_1.default.gray(`  [watch] ${new Date().toLocaleTimeString()} — no changes\r`));
             }
         }
         catch (e) {
             process.stdout.write(chalk_1.default.yellow(`\n  [watch] Poll failed: ${e.message}\n`));
-            // Don't exit — keep trying
+            // Don't exit — keep trying
         }
     }, pollMs);
 });

package/dist/lib/config.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getProjectConfig = exports.getAuthToken = exports.clearConfig = exports.setConfig = exports.getConfigValue = exports.getConfig = void 0;
+exports.getRcConfig = exports.getProjectConfig = exports.getAuthToken = exports.clearConfig = exports.setConfig = exports.getConfigValue = exports.getConfig = void 0;
 const conf_1 = __importDefault(require("conf"));
 const PRODUCTION_API_URL = "https://xtra-security.vercel.app/api";
 const config = new conf_1.default({
@@ -47,3 +47,24 @@ const getProjectConfig = async () => {
     }
 };
 exports.getProjectConfig = getProjectConfig;
+/**
+ * Reads .xtrarc from the current working directory.
+ * Returns project/env/branch with fallback to the global conf store.
+ * All commands should use this instead of calling getConfigValue() directly.
+ */
+const getRcConfig = () => {
+    let rc = {};
+    try {
+        const rcPath = path_1.default.join(process.cwd(), ".xtrarc");
+        if (fs_1.default.existsSync(rcPath)) {
+            rc = JSON.parse(fs_1.default.readFileSync(rcPath, "utf-8"));
+        }
+    }
+    catch (_) { }
+    return {
+        project: rc.project || config.get("project") || "",
+        env: rc.env || config.get("env") || "development",
+        branch: rc.branch || config.get("branch") || "main",
+    };
+};
+exports.getRcConfig = getRcConfig;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "xtra-cli",
-    "version": "0.1.10",
+    "version": "0.2.1",
     "description": "CLI for XtraSecurity Platform",
     "main": "dist/index.js",
     "bin": {