xtra-cli 1.0.3 → 1.0.5

package/dist/commands/history.js

@@ -1,77 +1,4 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.rollbackCommand = exports.historyCommand = void 0;
-const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
-const api_1 = require("../lib/api");
-const config_1 = require("../lib/config");
-exports.historyCommand = new commander_1.Command("history");
-exports.historyCommand
-    .argument("<key>", "Secret key")
-    .option("-p, --project <id>", "Project ID")
-    .option("-e, --env <environment>", "Environment", "development")
-    .description("View version history of a secret")
-    .action(async (key, options) => {
-    try {
-        let projectId = options.project;
-        if (!projectId) {
-            projectId = (0, config_1.getRcConfig)().project;
-            if (!projectId) {
-                console.error(chalk_1.default.red("Error: Project ID not found. Use -p <id> or run 'xtra project set' first."));
-                process.exit(1);
-            }
-        }
-        const data = await api_1.api.getSecretHistory(projectId, options.env, key);
-        console.log(chalk_1.default.bold(`\nHistory for ${key} (${options.env})`));
-        console.log(chalk_1.default.gray(`Current Version: ${data.currentVersion}\n`));
-        const history = data.history || [];
-        if (history.length === 0) {
-            console.log("No history found.");
-        }
-        else {
-            history.forEach((h) => {
-                const dateStr = new Date(h.updatedAt).toLocaleString();
-                console.log(chalk_1.default.blue(`v${h.version}`) + ` - ${dateStr} by ${h.updatedBy}`);
-                if (h.description)
-                    console.log(chalk_1.default.gray(`  ${h.description}`));
-                console.log("");
-            });
-        }
-    }
-    catch (error) {
-        console.error(chalk_1.default.red("Error fetching history:"), error.message || error);
-    }
-});
-exports.rollbackCommand = new commander_1.Command("rollback");
-exports.rollbackCommand
-    .argument("<key>", "Secret key")
-    .argument("<version>", "Version to rollback to")
-    .option("-p, --project <id>", "Project ID")
-    .option("-e, --env <environment>", "Environment", "development")
-    .description("Rollback a secret to a previous version")
-    .action(async (key, version, options) => {
-    try {
-        let projectId = options.project;
-        if (!projectId) {
-            projectId = (0, config_1.getRcConfig)().project;
-            if (!projectId) {
-                console.error(chalk_1.default.red("Error: Project ID not found. Use -p <id> or run 'xtra project set' first."));
-                process.exit(1);
-            }
-        }
-        console.log(chalk_1.default.yellow(`Rolling back ${key} to v${version}...`));
-        const result = await api_1.api.rollbackSecret(projectId, options.env, key, version);
-        if (result.success) {
-            console.log(chalk_1.default.green(`\nSuccessfully rolled back to v${version} (New current version: v${result.version})`));
-        }
-        else {
-            console.log(chalk_1.default.red("Rollback failed."));
-        }
-    }
-    catch (error) {
-        console.error(chalk_1.default.red("Error rolling back:"), error.message || error);
-    }
-});
+var R=Object.create;var g=Object.defineProperty;var U=Object.getOwnPropertyDescriptor;var A=Object.getOwnPropertyNames;var P=Object.getPrototypeOf,L=Object.prototype.hasOwnProperty;var _=(e,t)=>{for(var s in t)g(e,s,{get:t[s],enumerable:!0})},h=(e,t,s,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of A(t))!L.call(e,o)&&o!==s&&g(e,o,{get:()=>t[o],enumerable:!(r=U(t,o))||r.enumerable});return e};var p=(e,t,s)=>(s=e!=null?R(P(e)):{},h(t||!e||!e.__esModule?g(s,"default",{value:e,enumerable:!0}):s,e)),D=e=>h(g({},"__esModule",{value:!0}),e);var B={};_(B,{historyCommand:()=>I,rollbackCommand:()=>C});module.exports=D(B);var w=require("commander"),a=p(require("chalk"));var S=p(require("axios"));var v=p(require("conf")),u=p(require("fs")),b=p(require("path")),y="https://www.xtrasecurity.in/api",c=new v.default({projectName:"xtra-cli",defaults:{apiUrl:y}}),d=c.get("apiUrl");d&&!process.env.XTRA_API_URL&&(d.includes("localhost")||d.includes("xtra-security.vercel.app"))&&c.set("apiUrl",y);var l=()=>({...c.store,apiUrl:process.env.XTRA_API_URL||c.get("apiUrl")||y});var j=()=>c.get("token");var m=()=>{let e={};try{let t=b.default.join(process.cwd(),".xtrarc");u.default.existsSync(t)&&(e=JSON.parse(u.default.readFileSync(t,"utf-8")))}catch{}return{project:e.project||c.get("project")||"",env:e.env||c.get("env")||"development",branch:e.branch||c.get("branch")||"main"}};var k=p(require("fs")),x=p(require("path")),V=JSON.parse(k.readFileSync(x.join(__dirname,"../../package.json"),"utf-8")),n=()=>{let{apiUrl:e}=l(),t=j();return S.default.create({baseURL:e,headers:{"Content-Type":"application/json","X-CLI-Version":V.version,...t?{Authorization:`Bearer ${t}`}:{}}})},f={login:async(e,t,s)=>(await n().post("/auth/cli-login",{email:e,password:t,apiKey:s})).data,getSecrets:async(e,t,s="main")=>(await n().get(`/projects/${e}/envs/${t}/secrets?branch=${s}`)).data,getSecretVersions:async(e,t,s="main")=>(await n().get(`/projects/${e}/envs/${t}/secrets?includeVersions=true&branch=${s}`)).data,setSecrets:async(e,t,s,r,o="main")=>(await n().post(`/projects/${e}/envs/${t}/secrets`,{secrets:s,expectedVersions:r,branch:o})).data,getSecretDetails:async(e,t,s,r="main")=>(await n().get(`/projects/${e}/envs/${t}/secrets/${s}?branch=${r}`)).data,syncLogs:async e=>(await n().post("/audit/cli-logs",{logs:e})).data,linkSecret:async(e,t,s,r,o,i)=>(await n().post(`/projects/${e}/envs/${t}/secrets/link`,{key:s,sourceProjectId:r,sourceEnv:o,sourceKey:i})).data,rotateSecret:async(e,t,s,r,o)=>(await n().post(`/projects/${e}/envs/${t}/secrets/${s}/rotate`,{strategy:r,parsedNewValue:o})).data,promoteSecret:async(e,t,s)=>(await n().post(`/projects/${e}/envs/${t}/secrets/${s}/promote`,{})).data,verifyAuditLogs:async()=>(await n().get("/audit/verify")).data,exportAuditLogs:async(e,t,s,r)=>{let o={format:e};return t&&(o.startDate=t),s&&(o.endDate=s),r&&(o.projectId=r),(await n().post("/audit/export",o,{responseType:e==="csv"?"text":"json"})).data},requestAccess:async(e,t,s,r)=>(await n().post("/access/request",{projectId:e,secretId:r,reason:t,duration:s})).data,approveAccess:async(e,t)=>(await n().post("/access/approve",{requestId:e,decision:t})).data,listAccessRequests:async e=>{let{workspace:t}=l(),s=t?`&workspaceId=${t}`:"";return(await n().get(`/access/list?mode=${e}${s}`)).data},getAccessRequestStatus:async e=>(await n().get(`/access/request?id=${e}`)).data,getProjects:async()=>{let{workspace:e}=l(),t=e?`/project?workspaceId=${e}`:"/project";return(await n().get(t)).data},getBranches:async e=>(await n().get(`/branch?projectId=${e}`)).data,createBranch:async(e,t,s)=>(await n().post("/branch",{projectId:e,name:t,description:s})).data,deleteBranch:async e=>(await n().delete(`/branch/${e}`)).data,updateBranch:async(e,t)=>(await n().put("/branch",{id:e,...t})).data,getRoles:async()=>(await n().get("/admin/roles")).data,getUsers:async e=>{let t=e?`?teamId=${e}`:"";return(await n().get(`/admin/users${t}`)).data},setUserRole:async(e,t,s)=>(await n().put("/admin/users/role",{email:e,role:t,teamId:s})).data,getIntegrationStatus:async e=>(await n().get(`/integrations/${e}`)).data,getIntegrationRepos:async e=>(await n().get(`/integrations/${e}/sync`)).data.repos,syncSecretsToGithub:async e=>(await n().post("/integrations/github/sync",e)).data,exportKubernetesSecret:async(e,t)=>{let s=new URLSearchParams(t).toString();return(await n().get(`/projects/${e}/kubernetes?${s}`)).data},getSecretHistory:async(e,t,s)=>(await n().get(`/projects/${e}/envs/${t}/secrets/${s}/history`)).data,rollbackSecret:async(e,t,s,r)=>(await n().post(`/projects/${e}/envs/${t}/secrets/${s}/history`,{version:r})).data,cloneEnvironment:async(e,t,s,r,o)=>(await n().post(`/projects/${e}/envs/clone`,{fromEnv:t,toEnv:s,overwrite:r,branch:o})).data,generateJitLink:async e=>(await n().post("/jit/generate",e)).data,claimJitLink:async e=>(await n().post("/jit/claim",{token:e})).data,getJitInfo:async e=>(await n().get(`/jit/${e}`)).data,post:async(e,t)=>(await n().post(e,t)).data};var I=new w.Command("history");I.argument("<key>","Secret key").option("-p, --project <id>","Project ID").option("-e, --env <environment>","Environment","development").description("View version history of a secret").action(async(e,t)=>{try{let s=t.project;s||(s=m().project,s||(console.error(a.default.red("Error: Project ID not found. Use -p <id> or run 'xtra project set' first.")),process.exit(1)));let r=await f.getSecretHistory(s,t.env,e);console.log(a.default.bold(`
+History for ${e} (${t.env})`)),console.log(a.default.gray(`Current Version: ${r.currentVersion}
+`));let o=r.history||[];o.length===0?console.log("No history found."):o.forEach(i=>{let $=new Date(i.updatedAt).toLocaleString();console.log(a.default.blue(`v${i.version}`)+` - ${$} by ${i.updatedBy}`),i.description&&console.log(a.default.gray(`  ${i.description}`)),console.log("")})}catch(s){console.error(a.default.red("Error fetching history:"),s.message||s)}});var C=new w.Command("rollback");C.argument("<key>","Secret key").argument("<version>","Version to rollback to").option("-p, --project <id>","Project ID").option("-e, --env <environment>","Environment","development").description("Rollback a secret to a previous version").action(async(e,t,s)=>{try{let r=s.project;r||(r=m().project,r||(console.error(a.default.red("Error: Project ID not found. Use -p <id> or run 'xtra project set' first.")),process.exit(1))),console.log(a.default.yellow(`Rolling back ${e} to v${t}...`));let o=await f.rollbackSecret(r,s.env,e,t);o.success?console.log(a.default.green(`
+Successfully rolled back to v${t} (New current version: v${o.version})`)):console.log(a.default.red("Rollback failed."))}catch(r){console.error(a.default.red("Error rolling back:"),r.message||r)}});0&&(module.exports={historyCommand,rollbackCommand});

package/dist/commands/import.js

@@ -1,121 +1 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.importCommand = void 0;
-const commander_1 = require("commander");
-const api_1 = require("../lib/api");
-const chalk_1 = __importDefault(require("chalk"));
-const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
-const dotenv_1 = __importDefault(require("dotenv"));
-const sync_1 = require("csv-parse/sync");
-const config_1 = require("../lib/config");
-exports.importCommand = new commander_1.Command("import")
-    .description("Import secrets from a file (JSON, Dotenv, CSV)")
-    .argument("<file>", "Path to the file to import")
-    .option("-p, --project <projectId>", "Project ID")
-    .option("-e, --env <environment>", "Environment (development, staging, production)", "development")
-    .option("-b, --branch <branchName>", "Branch Name")
-    .option("-f, --format <format>", "Input format (json, dotenv, csv). Auto-detected if omitted.")
-    .option("--prefix <prefix>", "Add prefix to all imported keys")
-    .option("--overwrite", "Overwrite existing secrets (default: merged, but API usually upserts)", true)
-    .action(async (file, options) => {
-    let { project, env, branch, format, prefix } = options;
-    // Use config fallback
-    if (!project)
-        project = (0, config_1.getRcConfig)().project;
-    if (!branch) {
-        branch = (0, config_1.getRcConfig)().branch || "main";
-    }
-    // Normalize Env
-    const envMap = { dev: "development", stg: "staging", prod: "production" };
-    env = envMap[env] || env;
-    if (!project) {
-        console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
-        process.exit(1);
-    }
-    const filePath = path_1.default.resolve(process.cwd(), file);
-    if (!fs_1.default.existsSync(filePath)) {
-        console.error(chalk_1.default.red(`Error: File not found: ${filePath}`));
-        process.exit(1);
-    }
-    let detectedFormat = format;
-    if (!detectedFormat) {
-        const ext = path_1.default.extname(filePath).toLowerCase();
-        if (ext === ".json")
-            detectedFormat = "json";
-        else if (ext === ".env")
-            detectedFormat = "dotenv";
-        else if (ext === ".csv")
-            detectedFormat = "csv";
-        else {
-            console.error(chalk_1.default.red("Error: Could not detect format. Please specify -f <format>"));
-            process.exit(1);
-        }
-    }
-    const spinner = require("ora")(`Reading ${detectedFormat} file...`).start();
-    const fileContent = fs_1.default.readFileSync(filePath, "utf-8");
-    let secrets = {};
-    try {
-        switch (detectedFormat.toLowerCase()) {
-            case "json":
-                secrets = JSON.parse(fileContent);
-                break;
-            case "dotenv":
-                secrets = dotenv_1.default.parse(fileContent);
-                break;
-            case "csv":
-                const records = (0, sync_1.parse)(fileContent, {
-                    columns: true,
-                    skip_empty_lines: true
-                });
-                // Expect header: key, value or Key, Value
-                records.forEach((record) => {
-                    // Try case-insensitive key lookup
-                    const key = record.key || record.Key || record.KEY;
-                    const value = record.value || record.Value || record.VALUE;
-                    if (key) {
-                        secrets[key] = value || "";
-                    }
-                });
-                break;
-            default:
-                spinner.fail(`Unsupported format: ${detectedFormat}`);
-                process.exit(1);
-        }
-        if (Object.keys(secrets).length === 0) {
-            spinner.fail("No valid secrets found in file.");
-            return;
-        }
-        // Apply prefix
-        if (prefix) {
-            const prefixedSecrets = {};
-            Object.entries(secrets).forEach(([key, value]) => {
-                prefixedSecrets[`${prefix}${key}`] = value;
-            });
-            secrets = prefixedSecrets;
-        }
-        // Upload
-        spinner.text = `Importing ${Object.keys(secrets).length} secrets to ${env} (branch: ${branch})...`;
-        await api_1.api.setSecrets(project, env, secrets, undefined, branch);
-        spinner.succeed(`Successfully imported ${Object.keys(secrets).length} secrets.`);
-        // Log Audit
-        try {
-            const { logAudit } = require("../lib/audit");
-            logAudit("SECRET_IMPORT", project, env, {
-                file: path_1.default.basename(filePath),
-                format: detectedFormat,
-                count: Object.keys(secrets).length,
-                branch: branch
-            });
-        }
-        catch (e) { }
-    }
-    catch (error) {
-        spinner.fail("Import failed.");
-        console.error(chalk_1.default.red(error.message));
-        process.exit(1);
-    }
-});
+var gt=Object.create;var S=Object.defineProperty;var dt=Object.getOwnPropertyDescriptor;var ut=Object.getOwnPropertyNames;var ft=Object.getPrototypeOf,lt=Object.prototype.hasOwnProperty;var b=(t,e)=>()=>(t&&(e=t(t=0)),e);var D=(t,e)=>{for(var s in e)S(t,s,{get:e[s],enumerable:!0})},J=(t,e,s,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of ut(e))!lt.call(t,n)&&n!==s&&S(t,n,{get:()=>e[n],enumerable:!(r=dt(e,n))||r.enumerable});return t};var a=(t,e,s)=>(s=t!=null?gt(ft(t)):{},J(e||!t||!t.__esModule?S(s,"default",{value:t,enumerable:!0}):s,t)),F=t=>J(S({},"__esModule",{value:!0}),t);var q,U,G,E,f,O,l,V,L,$=b(()=>{q=a(require("conf")),U=a(require("fs")),G=a(require("path")),E="https://www.xtrasecurity.in/api",f=new q.default({projectName:"xtra-cli",defaults:{apiUrl:E}}),O=f.get("apiUrl");O&&!process.env.XTRA_API_URL&&(O.includes("localhost")||O.includes("xtra-security.vercel.app"))&&f.set("apiUrl",E);l=()=>({...f.store,apiUrl:process.env.XTRA_API_URL||f.get("apiUrl")||E}),V=()=>f.get("token"),L=()=>{let t={};try{let e=G.default.join(process.cwd(),".xtrarc");U.default.existsSync(e)&&(t=JSON.parse(U.default.readFileSync(e,"utf-8")))}catch{}return{project:t.project||f.get("project")||"",env:t.env||f.get("env")||"development",branch:t.branch||f.get("branch")||"main"}}});var K,M,z,mt,o,k,P=b(()=>{K=a(require("axios"));$();M=a(require("fs")),z=a(require("path")),mt=JSON.parse(M.readFileSync(z.join(__dirname,"../../package.json"),"utf-8")),o=()=>{let{apiUrl:t}=l(),e=V();return K.default.create({baseURL:t,headers:{"Content-Type":"application/json","X-CLI-Version":mt.version,...e?{Authorization:`Bearer ${e}`}:{}}})},k={login:async(t,e,s)=>(await o().post("/auth/cli-login",{email:t,password:e,apiKey:s})).data,getSecrets:async(t,e,s="main")=>(await o().get(`/projects/${t}/envs/${e}/secrets?branch=${s}`)).data,getSecretVersions:async(t,e,s="main")=>(await o().get(`/projects/${t}/envs/${e}/secrets?includeVersions=true&branch=${s}`)).data,setSecrets:async(t,e,s,r,n="main")=>(await o().post(`/projects/${t}/envs/${e}/secrets`,{secrets:s,expectedVersions:r,branch:n})).data,getSecretDetails:async(t,e,s,r="main")=>(await o().get(`/projects/${t}/envs/${e}/secrets/${s}?branch=${r}`)).data,syncLogs:async t=>(await o().post("/audit/cli-logs",{logs:t})).data,linkSecret:async(t,e,s,r,n,i)=>(await o().post(`/projects/${t}/envs/${e}/secrets/link`,{key:s,sourceProjectId:r,sourceEnv:n,sourceKey:i})).data,rotateSecret:async(t,e,s,r,n)=>(await o().post(`/projects/${t}/envs/${e}/secrets/${s}/rotate`,{strategy:r,parsedNewValue:n})).data,promoteSecret:async(t,e,s)=>(await o().post(`/projects/${t}/envs/${e}/secrets/${s}/promote`,{})).data,verifyAuditLogs:async()=>(await o().get("/audit/verify")).data,exportAuditLogs:async(t,e,s,r)=>{let n={format:t};return e&&(n.startDate=e),s&&(n.endDate=s),r&&(n.projectId=r),(await o().post("/audit/export",n,{responseType:t==="csv"?"text":"json"})).data},requestAccess:async(t,e,s,r)=>(await o().post("/access/request",{projectId:t,secretId:r,reason:e,duration:s})).data,approveAccess:async(t,e)=>(await o().post("/access/approve",{requestId:t,decision:e})).data,listAccessRequests:async t=>{let{workspace:e}=l(),s=e?`&workspaceId=${e}`:"";return(await o().get(`/access/list?mode=${t}${s}`)).data},getAccessRequestStatus:async t=>(await o().get(`/access/request?id=${t}`)).data,getProjects:async()=>{let{workspace:t}=l(),e=t?`/project?workspaceId=${t}`:"/project";return(await o().get(e)).data},getBranches:async t=>(await o().get(`/branch?projectId=${t}`)).data,createBranch:async(t,e,s)=>(await o().post("/branch",{projectId:t,name:e,description:s})).data,deleteBranch:async t=>(await o().delete(`/branch/${t}`)).data,updateBranch:async(t,e)=>(await o().put("/branch",{id:t,...e})).data,getRoles:async()=>(await o().get("/admin/roles")).data,getUsers:async t=>{let e=t?`?teamId=${t}`:"";return(await o().get(`/admin/users${e}`)).data},setUserRole:async(t,e,s)=>(await o().put("/admin/users/role",{email:t,role:e,teamId:s})).data,getIntegrationStatus:async t=>(await o().get(`/integrations/${t}`)).data,getIntegrationRepos:async t=>(await o().get(`/integrations/${t}/sync`)).data.repos,syncSecretsToGithub:async t=>(await o().post("/integrations/github/sync",t)).data,exportKubernetesSecret:async(t,e)=>{let s=new URLSearchParams(e).toString();return(await o().get(`/projects/${t}/kubernetes?${s}`)).data},getSecretHistory:async(t,e,s)=>(await o().get(`/projects/${t}/envs/${e}/secrets/${s}/history`)).data,rollbackSecret:async(t,e,s,r)=>(await o().post(`/projects/${t}/envs/${e}/secrets/${s}/history`,{version:r})).data,cloneEnvironment:async(t,e,s,r,n)=>(await o().post(`/projects/${t}/envs/clone`,{fromEnv:e,toEnv:s,overwrite:r,branch:n})).data,generateJitLink:async t=>(await o().post("/jit/generate",t)).data,claimJitLink:async t=>(await o().post("/jit/claim",{token:t})).data,getJitInfo:async t=>(await o().get(`/jit/${t}`)).data,post:async(t,e)=>(await o().post(t,e)).data}});function W(){let t=H.get("masterKey");t||(t=m.default.randomBytes(32).toString("hex"),H.set("masterKey",t));let e=(0,Y.machineIdSync)();return m.default.createHash("sha256").update(t+e).digest()}var m,X,Y,Q,H,Z,tt,et=b(()=>{m=a(require("crypto")),X=a(require("conf")),Y=require("node-machine-id"),Q="aes-256-gcm",H=new X.default({projectName:"xtra-cli-crypto"});Z=t=>{let e=m.default.randomBytes(16),s=W(),r=m.default.createCipheriv(Q,s,e),n=r.update(t,"utf8","hex");n+=r.final("hex");let i=r.getAuthTag();return{iv:e.toString("hex"),content:n,tag:i.toString("hex")}},tt=t=>{let e=W(),s=Buffer.from(t.iv,"hex"),r=Buffer.from(t.tag,"hex"),n=m.default.createDecipheriv(Q,e,s);n.setAuthTag(r);let i=n.update(t.content,"hex","utf8");return i+=n.final("utf8"),i}});var nt={};D(nt,{loadAuditLogs:()=>I,logAudit:()=>ht,saveAuditLogs:()=>A,syncAuditLogs:()=>vt});function yt(t){if(!t||typeof t!="object")return t;let e={...t},s=["password","token","secret","value","apiKey","secretValue"];for(let r of Object.keys(e))s.some(n=>r.toLowerCase().includes(n))&&(e[r]="[REDACTED]");return e}async function rt(t){try{if(!l().token)return!1;let s={action:t.action,entity:"cli-project",entityId:t.projectId||"global",details:yt(t.details),timestamp:t.timestamp,projectId:t.projectId};return await k.post("/audit/cli-logs",{logs:[s]}),!0}catch(e){return process.env.DEBUG&&console.error("Failed to send audit log to backend:",e),!1}}function ht(t,e,s,r){let n={id:(0,st.v4)(),timestamp:new Date().toISOString(),action:t,projectId:e,environment:s,details:r,synced:!1},i=I();i.push(n),A(i),rt(n).then(h=>{if(h){n.synced=!0;let w=I(),d=w.findIndex(p=>p.id===n.id);d!==-1&&(w[d].synced=!0,A(w))}}).catch(()=>{})}function I(){if(!y.default.existsSync(B))return[];try{let t=y.default.readFileSync(B,"utf-8"),e=JSON.parse(t),s=tt(e);return JSON.parse(s)}catch{return[]}}function A(t){y.default.existsSync(N)||y.default.mkdirSync(N,{recursive:!0});let e=JSON.stringify(t),s=Z(e);y.default.writeFileSync(B,JSON.stringify(s),"utf-8")}async function vt(){let t=I(),e=t.filter(r=>!r.synced);if(e.length===0)return 0;let s=0;for(let r of e)await rt(r)&&(r.synced=!0,s++);return s>0&&A(t),s}var y,T,st,N,B,ot=b(()=>{y=a(require("fs")),T=a(require("path")),st=require("uuid");et();$();P();N=T.default.join(process.cwd(),".xtra"),B=T.default.join(N,"audit.enc")});var wt={};D(wt,{importCommand:()=>xt});module.exports=F(wt);var it=require("commander");P();var x=a(require("chalk")),_=a(require("fs")),C=a(require("path")),at=a(require("dotenv")),ct=require("csv-parse/sync");$();var xt=new it.Command("import").description("Import secrets from a file (JSON, Dotenv, CSV)").argument("<file>","Path to the file to import").option("-p, --project <projectId>","Project ID").option("-e, --env <environment>","Environment (development, staging, production)","development").option("-b, --branch <branchName>","Branch Name").option("-f, --format <format>","Input format (json, dotenv, csv). Auto-detected if omitted.").option("--prefix <prefix>","Add prefix to all imported keys").option("--overwrite","Overwrite existing secrets (default: merged, but API usually upserts)",!0).action(async(t,e)=>{let{project:s,env:r,branch:n,format:i,prefix:h}=e;s||(s=L().project),n||(n=L().branch||"main"),r={dev:"development",stg:"staging",prod:"production"}[r]||r,s||(console.error(x.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first.")),process.exit(1));let d=C.default.resolve(process.cwd(),t);_.default.existsSync(d)||(console.error(x.default.red(`Error: File not found: ${d}`)),process.exit(1));let p=i;if(!p){let c=C.default.extname(d).toLowerCase();c===".json"?p="json":c===".env"?p="dotenv":c===".csv"?p="csv":(console.error(x.default.red("Error: Could not detect format. Please specify -f <format>")),process.exit(1))}let v=require("ora")(`Reading ${p} file...`).start(),R=_.default.readFileSync(d,"utf-8"),g={};try{switch(p.toLowerCase()){case"json":g=JSON.parse(R);break;case"dotenv":g=at.default.parse(R);break;case"csv":(0,ct.parse)(R,{columns:!0,skip_empty_lines:!0}).forEach(u=>{let j=u.key||u.Key||u.KEY,pt=u.value||u.Value||u.VALUE;j&&(g[j]=pt||"")});break;default:v.fail(`Unsupported format: ${p}`),process.exit(1)}if(Object.keys(g).length===0){v.fail("No valid secrets found in file.");return}if(h){let c={};Object.entries(g).forEach(([u,j])=>{c[`${h}${u}`]=j}),g=c}v.text=`Importing ${Object.keys(g).length} secrets to ${r} (branch: ${n})...`,await k.setSecrets(s,r,g,void 0,n),v.succeed(`Successfully imported ${Object.keys(g).length} secrets.`);try{let{logAudit:c}=(ot(),F(nt));c("SECRET_IMPORT",s,r,{file:C.default.basename(d),format:p,count:Object.keys(g).length,branch:n})}catch{}}catch(c){v.fail("Import failed."),console.error(x.default.red(c.message)),process.exit(1)}});0&&(module.exports={importCommand});

package/dist/commands/init.js

@@ -1,205 +1,7 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.initCommand = void 0;
-/**
- * init.ts — Bootstrap a new project with .xtrarc and recommended structure
- */
-const commander_1 = require("commander");
-const chalk_1 = __importDefault(require("chalk"));
-const inquirer_1 = __importDefault(require("inquirer"));
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const config_1 = require("../lib/config");
-const RC_FILE = ".xtrarc";
-exports.initCommand = new commander_1.Command("init")
-    .description("Bootstrap a new project — creates .xtrarc and recommended structure")
-    .option("--project <id>", "Project ID (skip prompt)")
-    .option("--env <env>", "Default environment", "development")
-    .option("--branch <branch>", "Default branch", "main")
-    .option("-y, --yes", "Accept all defaults without prompting", false)
-    .action(async (options) => {
-    const cwd = process.cwd();
-    const rcPath = path.join(cwd, RC_FILE);
-    console.log(chalk_1.default.bold("\n🚀 xtra init — setting up your project\n"));
-    // Warn if already initialized
-    if (fs.existsSync(rcPath)) {
-        const { overwrite } = await inquirer_1.default.prompt([{
-                type: "confirm",
-                name: "overwrite",
-                message: chalk_1.default.yellow(`.xtrarc already exists. Overwrite it?`),
-                default: false,
-            }]);
-        if (!overwrite) {
-            console.log(chalk_1.default.gray("Aborted."));
-            return;
-        }
-    }
-    let { project, env, branch } = options;
-    // Interactive prompts if not --yes
-    if (!options.yes) {
-        // ── API Projects Fetch ─────────────────────────────────────────────
-        const { getAuthToken } = await Promise.resolve().then(() => __importStar(require("../lib/config")));
-        const token = getAuthToken();
-        const ora = (await Promise.resolve().then(() => __importStar(require("ora")))).default;
-        let remoteProjects = [];
-        if (!token) {
-            console.log(chalk_1.default.yellow("  ℹ  Not logged in — project list unavailable. Run `xtra login` first."));
-            console.log(chalk_1.default.yellow("     You can still enter a Project ID manually below.\n"));
-        }
-        else {
-            const apiSpinner = ora("Fetching your projects...").start();
-            try {
-                const { api } = await Promise.resolve().then(() => __importStar(require("../lib/api")));
-                const result = await api.getProjects();
-                // API might return { projects: [...] } or directly an array
-                remoteProjects = Array.isArray(result) ? result : result.projects ?? [];
-                if (remoteProjects.length === 0) {
-                    apiSpinner.warn(chalk_1.default.yellow("No projects found in your workspace. Create one at www.xtrasecurity.in first."));
-                }
-                else {
-                    apiSpinner.succeed(`Found ${remoteProjects.length} project${remoteProjects.length > 1 ? "s" : ""}`);
-                }
-            }
-            catch (err) {
-                const reason = err?.response?.status === 401
-                    ? "session expired — run `xtra login` again"
-                    : err?.response?.data?.error || err?.message || "network error";
-                apiSpinner.warn(chalk_1.default.yellow(`Could not fetch projects (${reason}). Enter the Project ID manually.`));
-            }
-        }
-        const fallbackProject = project || (0, config_1.getConfigValue)("project") || "";
-        const { project: selectedProject } = await inquirer_1.default.prompt([
-            {
-                type: remoteProjects.length > 0 ? "list" : "input",
-                name: "project",
-                message: remoteProjects.length > 0 ? "Select a project:" : "Project ID:",
-                choices: remoteProjects.length > 0
-                    ? remoteProjects.map(p => ({ name: `${p.name} (${p.id})`, value: p.id }))
-                    : undefined,
-                default: fallbackProject,
-                validate: (v) => v.trim() ? true : "Project ID is required",
-            }
-        ]);
-        project = selectedProject.trim();
-        // Fetch branches for selected project
-        let remoteBranches = [];
-        const branchSpinner = ora("Fetching branches...").start();
-        try {
-            const { api } = await Promise.resolve().then(() => __importStar(require("../lib/api")));
-            remoteBranches = await api.getBranches(project);
-            branchSpinner.stop();
-        }
-        catch (err) {
-            branchSpinner.warn(chalk_1.default.yellow("Could not fetch branches."));
-        }
-        const answers = await inquirer_1.default.prompt([
-            {
-                type: "list",
-                name: "env",
-                message: "Default environment:",
-                choices: ["development", "staging", "production"],
-                default: env || "development",
-            },
-            {
-                type: remoteBranches.length > 0 ? "list" : "input",
-                name: "branch",
-                message: remoteBranches.length > 0 ? "Default branch:" : "Default branch name:",
-                choices: remoteBranches.length > 0
-                    ? remoteBranches.map(b => ({ name: b.name, value: b.name }))
-                    : undefined,
-                default: branch || (remoteBranches.length > 0 ? remoteBranches[0].name : "main"),
-            },
-            {
-                type: "confirm",
-                name: "addGitignore",
-                message: "Add .xtrarc to .gitignore? (recommended)",
-                default: true,
-            },
-        ]);
-        env = answers.env;
-        branch = answers.branch;
-        // Add to .gitignore
-        if (answers.addGitignore) {
-            const gitignorePath = path.join(cwd, ".gitignore");
-            let existing = "";
-            try {
-                existing = fs.readFileSync(gitignorePath, "utf8");
-            }
-            catch (_) { }
-            if (!existing.includes(".xtrarc")) {
-                fs.appendFileSync(gitignorePath, "\n# XtraSecurity config\n.xtrarc\n");
-                console.log(chalk_1.default.gray("  ✔ Added .xtrarc to .gitignore"));
-            }
-        }
-    }
-    if (!project) {
-        console.error(chalk_1.default.red("Error: Project ID is required."));
-        process.exit(1);
-    }
-    // Write .xtrarc
-    const rc = {
-        project,
-        env,
-        branch,
-        apiUrl: process.env.XTRA_API_URL || "https://www.xtrasecurity.in/api",
-        createdAt: new Date().toISOString(),
-    };
-    fs.writeFileSync(rcPath, JSON.stringify(rc, null, 2), "utf8");
-    // ── Sync global conf store so `xtra run` / `xtra secrets` pick up the new values ──
-    (0, config_1.setConfig)("project", project);
-    (0, config_1.setConfig)("env", env);
-    (0, config_1.setConfig)("branch", branch);
-    // Summary
-    console.log(chalk_1.default.gray(`     Branch   : ${chalk_1.default.white(branch)}`));
-    console.log();
-    // ── Audit Log (Local Chain) ─────────────────────────────────────────
-    try {
-        const { logAudit } = await Promise.resolve().then(() => __importStar(require("../lib/audit")));
-        logAudit("PROJECT_INIT", project, env, { branch, rcPath });
-    }
-    catch (e) {
-        // Non-fatal if audit fails
-    }
-    console.log(chalk_1.default.bold("  Next steps:"));
-    console.log(chalk_1.default.gray("    xtra login                   # authenticate"));
-    console.log(chalk_1.default.gray("    xtra secrets list            # view secrets"));
-    console.log(chalk_1.default.gray("    xtra run node app.js         # inject and run"));
-    console.log(chalk_1.default.gray("    xtra doctor                  # verify everything works"));
-    console.log();
-});
+var ut=Object.create;var I=Object.defineProperty;var yt=Object.getOwnPropertyDescriptor;var mt=Object.getOwnPropertyNames;var ft=Object.getPrototypeOf,ht=Object.prototype.hasOwnProperty;var A=(t,e)=>()=>(t&&(e=t(t=0)),e);var C=(t,e)=>{for(var n in e)I(t,n,{get:e[n],enumerable:!0})},X=(t,e,n,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of mt(e))!ht.call(t,s)&&s!==n&&I(t,s,{get:()=>e[s],enumerable:!(r=yt(e,s))||r.enumerable});return t};var g=(t,e,n)=>(n=t!=null?ut(ft(t)):{},X(e||!t||!t.__esModule?I(n,"default",{value:t,enumerable:!0}):n,t)),wt=t=>X(I({},"__esModule",{value:!0}),t);var H={};C(H,{clearConfig:()=>jt,deleteConfig:()=>xt,getAuthToken:()=>_,getBreakGlassSession:()=>vt,getConfig:()=>h,getConfigValue:()=>T,getProjectConfig:()=>bt,getRcConfig:()=>$t,setBreakGlassSession:()=>St,setConfig:()=>v});var z,f,N,O,p,L,h,T,v,jt,xt,_,vt,St,bt,$t,S=A(()=>{z=g(require("conf")),f=g(require("fs")),N=g(require("path")),O="https://www.xtrasecurity.in/api",p=new z.default({projectName:"xtra-cli",defaults:{apiUrl:O}}),L=p.get("apiUrl");L&&!process.env.XTRA_API_URL&&(L.includes("localhost")||L.includes("xtra-security.vercel.app"))&&p.set("apiUrl",O);h=()=>({...p.store,apiUrl:process.env.XTRA_API_URL||p.get("apiUrl")||O}),T=t=>p.get(t),v=(t,e)=>{if(p.set(t,e),t==="token"&&process.platform!=="win32"&&f.default.existsSync(p.path))try{f.default.chmodSync(p.path,384)}catch{}},jt=()=>p.clear(),xt=t=>p.delete(t),_=()=>p.get("token"),vt=()=>p.get("breakGlassSessionId"),St=t=>{t?p.set("breakGlassSessionId",t):p.delete("breakGlassSessionId")},bt=async()=>{try{let t=N.default.join(process.cwd(),"xtra.json");if(f.default.existsSync(t)){let e=f.default.readFileSync(t,"utf-8");return JSON.parse(e)}return null}catch{return null}},$t=()=>{let t={};try{let e=N.default.join(process.cwd(),".xtrarc");f.default.existsSync(e)&&(t=JSON.parse(f.default.readFileSync(e,"utf-8")))}catch{}return{project:t.project||p.get("project")||"",env:t.env||p.get("env")||"development",branch:t.branch||p.get("branch")||"main"}}});var F={};C(F,{api:()=>E});var M,Y,Q,kt,o,E,P=A(()=>{M=g(require("axios"));S();Y=g(require("fs")),Q=g(require("path")),kt=JSON.parse(Y.readFileSync(Q.join(__dirname,"../../package.json"),"utf-8")),o=()=>{let{apiUrl:t}=h(),e=_();return M.default.create({baseURL:t,headers:{"Content-Type":"application/json","X-CLI-Version":kt.version,...e?{Authorization:`Bearer ${e}`}:{}}})},E={login:async(t,e,n)=>(await o().post("/auth/cli-login",{email:t,password:e,apiKey:n})).data,getSecrets:async(t,e,n="main")=>(await o().get(`/projects/${t}/envs/${e}/secrets?branch=${n}`)).data,getSecretVersions:async(t,e,n="main")=>(await o().get(`/projects/${t}/envs/${e}/secrets?includeVersions=true&branch=${n}`)).data,setSecrets:async(t,e,n,r,s="main")=>(await o().post(`/projects/${t}/envs/${e}/secrets`,{secrets:n,expectedVersions:r,branch:s})).data,getSecretDetails:async(t,e,n,r="main")=>(await o().get(`/projects/${t}/envs/${e}/secrets/${n}?branch=${r}`)).data,syncLogs:async t=>(await o().post("/audit/cli-logs",{logs:t})).data,linkSecret:async(t,e,n,r,s,a)=>(await o().post(`/projects/${t}/envs/${e}/secrets/link`,{key:n,sourceProjectId:r,sourceEnv:s,sourceKey:a})).data,rotateSecret:async(t,e,n,r,s)=>(await o().post(`/projects/${t}/envs/${e}/secrets/${n}/rotate`,{strategy:r,parsedNewValue:s})).data,promoteSecret:async(t,e,n)=>(await o().post(`/projects/${t}/envs/${e}/secrets/${n}/promote`,{})).data,verifyAuditLogs:async()=>(await o().get("/audit/verify")).data,exportAuditLogs:async(t,e,n,r)=>{let s={format:t};return e&&(s.startDate=e),n&&(s.endDate=n),r&&(s.projectId=r),(await o().post("/audit/export",s,{responseType:t==="csv"?"text":"json"})).data},requestAccess:async(t,e,n,r)=>(await o().post("/access/request",{projectId:t,secretId:r,reason:e,duration:n})).data,approveAccess:async(t,e)=>(await o().post("/access/approve",{requestId:t,decision:e})).data,listAccessRequests:async t=>{let{workspace:e}=h(),n=e?`&workspaceId=${e}`:"";return(await o().get(`/access/list?mode=${t}${n}`)).data},getAccessRequestStatus:async t=>(await o().get(`/access/request?id=${t}`)).data,getProjects:async()=>{let{workspace:t}=h(),e=t?`/project?workspaceId=${t}`:"/project";return(await o().get(e)).data},getBranches:async t=>(await o().get(`/branch?projectId=${t}`)).data,createBranch:async(t,e,n)=>(await o().post("/branch",{projectId:t,name:e,description:n})).data,deleteBranch:async t=>(await o().delete(`/branch/${t}`)).data,updateBranch:async(t,e)=>(await o().put("/branch",{id:t,...e})).data,getRoles:async()=>(await o().get("/admin/roles")).data,getUsers:async t=>{let e=t?`?teamId=${t}`:"";return(await o().get(`/admin/users${e}`)).data},setUserRole:async(t,e,n)=>(await o().put("/admin/users/role",{email:t,role:e,teamId:n})).data,getIntegrationStatus:async t=>(await o().get(`/integrations/${t}`)).data,getIntegrationRepos:async t=>(await o().get(`/integrations/${t}/sync`)).data.repos,syncSecretsToGithub:async t=>(await o().post("/integrations/github/sync",t)).data,exportKubernetesSecret:async(t,e)=>{let n=new URLSearchParams(e).toString();return(await o().get(`/projects/${t}/kubernetes?${n}`)).data},getSecretHistory:async(t,e,n)=>(await o().get(`/projects/${t}/envs/${e}/secrets/${n}/history`)).data,rollbackSecret:async(t,e,n,r)=>(await o().post(`/projects/${t}/envs/${e}/secrets/${n}/history`,{version:r})).data,cloneEnvironment:async(t,e,n,r,s)=>(await o().post(`/projects/${t}/envs/clone`,{fromEnv:e,toEnv:n,overwrite:r,branch:s})).data,generateJitLink:async t=>(await o().post("/jit/generate",t)).data,claimJitLink:async t=>(await o().post("/jit/claim",{token:t})).data,getJitInfo:async t=>(await o().get(`/jit/${t}`)).data,post:async(t,e)=>(await o().post(t,e)).data}});function nt(){let t=W.get("masterKey");t||(t=j.default.randomBytes(32).toString("hex"),W.set("masterKey",t));let e=(0,tt.machineIdSync)();return j.default.createHash("sha256").update(t+e).digest()}var j,Z,tt,et,W,rt,st,ot=A(()=>{j=g(require("crypto")),Z=g(require("conf")),tt=require("node-machine-id"),et="aes-256-gcm",W=new Z.default({projectName:"xtra-cli-crypto"});rt=t=>{let e=j.default.randomBytes(16),n=nt(),r=j.default.createCipheriv(et,n,e),s=r.update(t,"utf8","hex");s+=r.final("hex");let a=r.getAuthTag();return{iv:e.toString("hex"),content:s,tag:a.toString("hex")}},st=t=>{let e=nt(),n=Buffer.from(t.iv,"hex"),r=Buffer.from(t.tag,"hex"),s=j.default.createDecipheriv(et,e,n);s.setAuthTag(r);let a=s.update(t.content,"hex","utf8");return a+=s.final("utf8"),a}});var ct={};C(ct,{loadAuditLogs:()=>D,logAudit:()=>At,saveAuditLogs:()=>R,syncAuditLogs:()=>Ct});function It(t){if(!t||typeof t!="object")return t;let e={...t},n=["password","token","secret","value","apiKey","secretValue"];for(let r of Object.keys(e))n.some(s=>r.toLowerCase().includes(s))&&(e[r]="[REDACTED]");return e}async function it(t){try{if(!h().token)return!1;let n={action:t.action,entity:"cli-project",entityId:t.projectId||"global",details:It(t.details),timestamp:t.timestamp,projectId:t.projectId};return await E.post("/audit/cli-logs",{logs:[n]}),!0}catch(e){return process.env.DEBUG&&console.error("Failed to send audit log to backend:",e),!1}}function At(t,e,n,r){let s={id:(0,at.v4)(),timestamp:new Date().toISOString(),action:t,projectId:e,environment:n,details:r,synced:!1},a=D();a.push(s),R(a),it(s).then(b=>{if(b){s.synced=!0;let l=D(),$=l.findIndex(k=>k.id===s.id);$!==-1&&(l[$].synced=!0,R(l))}}).catch(()=>{})}function D(){if(!x.default.existsSync(G))return[];try{let t=x.default.readFileSync(G,"utf-8"),e=JSON.parse(t),n=st(e);return JSON.parse(n)}catch{return[]}}function R(t){x.default.existsSync(J)||x.default.mkdirSync(J,{recursive:!0});let e=JSON.stringify(t),n=rt(e);x.default.writeFileSync(G,JSON.stringify(n),"utf-8")}async function Ct(){let t=D(),e=t.filter(r=>!r.synced);if(e.length===0)return 0;let n=0;for(let r of e)await it(r)&&(r.synced=!0,n++);return n>0&&R(t),n}var x,q,at,J,G,pt=A(()=>{x=g(require("fs")),q=g(require("path")),at=require("uuid");ot();S();P();J=q.default.join(process.cwd(),".xtra"),G=q.default.join(J,"audit.enc")});var Rt={};C(Rt,{initCommand:()=>Dt});module.exports=wt(Rt);var gt=require("commander"),c=g(require("chalk")),U=g(require("inquirer")),y=g(require("fs")),K=g(require("path"));S();var Pt=".xtrarc",Dt=new gt.Command("init").description("Bootstrap a new project \u2014 creates .xtrarc and recommended structure").option("--project <id>","Project ID (skip prompt)").option("--env <env>","Default environment","development").option("--branch <branch>","Default branch","main").option("-y, --yes","Accept all defaults without prompting",!1).action(async t=>{let e=process.cwd(),n=K.join(e,Pt);if(console.log(c.default.bold(`
+\u{1F680} xtra init \u2014 setting up your project
+`)),y.existsSync(n)){let{overwrite:l}=await U.default.prompt([{type:"confirm",name:"overwrite",message:c.default.yellow(".xtrarc already exists. Overwrite it?"),default:!1}]);if(!l){console.log(c.default.gray("Aborted."));return}}let{project:r,env:s,branch:a}=t;if(!t.yes){let{getAuthToken:l}=await Promise.resolve().then(()=>(S(),H)),$=l(),k=(await import("ora")).default,d=[];if(!$)console.log(c.default.yellow("  \u2139  Not logged in \u2014 project list unavailable. Run `xtra login` first.")),console.log(c.default.yellow(`     You can still enter a Project ID manually below.
+`));else{let i=k("Fetching your projects...").start();try{let{api:u}=await Promise.resolve().then(()=>(P(),F)),w=await u.getProjects();d=Array.isArray(w)?w:w.projects??[],d.length===0?i.warn(c.default.yellow("No projects found in your workspace. Create one at www.xtrasecurity.in first.")):i.succeed(`Found ${d.length} project${d.length>1?"s":""}`)}catch(u){let w=u?.response?.status===401?"session expired \u2014 run `xtra login` again":u?.response?.data?.error||u?.message||"network error";i.warn(c.default.yellow(`Could not fetch projects (${w}). Enter the Project ID manually.`))}}let lt=r||T("project")||"",{project:dt}=await U.default.prompt([{type:d.length>0?"list":"input",name:"project",message:d.length>0?"Select a project:":"Project ID:",choices:d.length>0?d.map(i=>({name:`${i.name} (${i.id})`,value:i.id})):void 0,default:lt,validate:i=>i.trim()?!0:"Project ID is required"}]);r=dt.trim();let m=[],V=k("Fetching branches...").start();try{let{api:i}=await Promise.resolve().then(()=>(P(),F));m=await i.getBranches(r),V.stop()}catch{V.warn(c.default.yellow("Could not fetch branches."))}let B=await U.default.prompt([{type:"list",name:"env",message:"Default environment:",choices:["development","staging","production"],default:s||"development"},{type:m.length>0?"list":"input",name:"branch",message:m.length>0?"Default branch:":"Default branch name:",choices:m.length>0?m.map(i=>({name:i.name,value:i.name})):void 0,default:a||(m.length>0?m[0].name:"main")},{type:"confirm",name:"addGitignore",message:"Add .xtrarc to .gitignore? (recommended)",default:!0}]);if(s=B.env,a=B.branch,B.addGitignore){let i=K.join(e,".gitignore"),u="";try{u=y.readFileSync(i,"utf8")}catch{}u.includes(".xtrarc")||(y.appendFileSync(i,`
+# XtraSecurity config
+.xtrarc
+`),console.log(c.default.gray("  \u2714 Added .xtrarc to .gitignore")))}}r||(console.error(c.default.red("Error: Project ID is required.")),process.exit(1));let b={project:r,env:s,branch:a,apiUrl:process.env.XTRA_API_URL||"https://www.xtrasecurity.in/api",createdAt:new Date().toISOString()};y.writeFileSync(n,JSON.stringify(b,null,2),"utf8"),v("project",r),v("env",s),v("branch",a),console.log(c.default.gray(`     Branch   : ${c.default.white(a)}`)),console.log();try{let{logAudit:l}=await Promise.resolve().then(()=>(pt(),ct));l("PROJECT_INIT",r,s,{branch:a,rcPath:n})}catch{}console.log(c.default.bold("  Next steps:")),console.log(c.default.gray("    xtra login                   # authenticate")),console.log(c.default.gray("    xtra secrets list            # view secrets")),console.log(c.default.gray("    xtra run node app.js         # inject and run")),console.log(c.default.gray("    xtra doctor                  # verify everything works")),console.log()});0&&(module.exports={initCommand});