xtra-cli 1.0.4 → 1.0.5

package/dist/commands/completion.js

@@ -1,227 +1,88 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.completionCommand = void 0;
-const commander_1 = require("commander");
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const os = __importStar(require("os"));
-const chalk_1 = __importDefault(require("chalk"));
-// ─── All CLI top-level commands ───────────────────────────────────────────────
-const ALL_COMMANDS = [
-    "login", "run", "secrets", "generate", "status", "diff", "rollback",
-    "scan", "logs", "export", "import", "rotate", "audit", "access",
-    "branch", "checkout", "project", "admin", "integration", "kubernetes",
-    "history", "env", "ui", "completion"
-];
-const SUBCOMMANDS = {
-    secrets: ["list", "set", "link"],
-    branch: ["list", "create", "delete", "update"],
-    admin: ["users", "roles", "role", "set-role"],
-    access: ["request", "list", "approve"],
-    audit: ["verify", "export"],
-    integration: ["sync", "export", "apply"],
-    env: ["clone"],
-    project: ["set", "current"],
-    completion: ["bash", "zsh", "powershell", "install"],
-};
-// ─── Bash completion script ───────────────────────────────────────────────────
-function bashScript() {
-    const subMap = Object.entries(SUBCOMMANDS)
-        .map(([cmd, subs]) => `      ${cmd}) echo "${subs.join(" ")}" ;;`)
-        .join("\n");
-    return `# xtra bash completion
-# Add to ~/.bashrc:  source <(xtra completion bash)
-_xtra_completions() {
-  local cur prev words
-  cur="\${COMP_WORDS[COMP_CWORD]}"
-  prev="\${COMP_WORDS[COMP_CWORD-1]}"
-
-  if [ "\${COMP_CWORD}" -eq 1 ]; then
-    COMPREPLY=( $(compgen -W "${ALL_COMMANDS.join(" ")}" -- "$cur") )
-    return
-  fi
-
-  local subcommands=""
-  case "\${COMP_WORDS[1]}" in
-${subMap}
-    *) ;;
-  esac
-
-  if [ -n "$subcommands" ]; then
-    COMPREPLY=( $(compgen -W "$subcommands" -- "$cur") )
-  fi
-}
-complete -F _xtra_completions xtra
-`;
+var f=Object.create;var c=Object.defineProperty;var g=Object.getOwnPropertyDescriptor;var _=Object.getOwnPropertyNames;var O=Object.getPrototypeOf,P=Object.prototype.hasOwnProperty;var S=(o,e)=>{for(var t in e)c(o,t,{get:e[t],enumerable:!0})},d=(o,e,t,s)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of _(e))!P.call(o,n)&&n!==t&&c(o,n,{get:()=>e[n],enumerable:!(s=g(e,n))||s.enumerable});return o};var i=(o,e,t)=>(t=o!=null?f(O(o)):{},d(e||!o||!o.__esModule?c(t,"default",{value:o,enumerable:!0}):t,o)),j=o=>d(c({},"__esModule",{value:!0}),o);var M={};S(M,{completionCommand:()=>y});module.exports=j(M);var $=require("commander"),a=i(require("fs")),l=i(require("path")),b=i(require("os")),r=i(require("chalk")),m=["login","run","secrets","generate","status","diff","rollback","scan","logs","export","import","rotate","audit","access","branch","checkout","project","admin","integration","kubernetes","history","env","ui","completion"],p={secrets:["list","set","link"],branch:["list","create","delete","update"],admin:["users","roles","role","set-role"],access:["request","list","approve"],audit:["verify","export"],integration:["sync","export","apply"],env:["clone"],project:["set","current"],completion:["bash","zsh","powershell","install"]};function x(){let o=Object.entries(p).map(([e,t])=>`      ${e}) echo "${t.join(" ")}" ;;`).join(`
+`);return`# xtra bash completion
+# Add to ~/.bashrc:  source <(xtra completion bash)
+_xtra_completions() {
+  local cur prev words
+  cur="\${COMP_WORDS[COMP_CWORD]}"
+  prev="\${COMP_WORDS[COMP_CWORD-1]}"
+
+  if [ "\${COMP_CWORD}" -eq 1 ]; then
+    COMPREPLY=( $(compgen -W "${m.join(" ")}" -- "$cur") )
+    return
+  fi
+
+  local subcommands=""
+  case "\${COMP_WORDS[1]}" in
+${o}
+    *) ;;
+  esac
+
+  if [ -n "$subcommands" ]; then
+    COMPREPLY=( $(compgen -W "$subcommands" -- "$cur") )
+  fi
 }
-// ─── Zsh completion script ────────────────────────────────────────────────────
-function zshScript() {
-    const subDefs = Object.entries(SUBCOMMANDS)
-        .map(([cmd, subs]) => `    (${cmd})\n      local subcmds=(${subs.map(s => `'${s}'`).join(" ")})\n      _describe 'subcommand' subcmds ;;`)
-        .join("\n");
-    return `#compdef xtra
-# xtra zsh completion
-# Add to ~/.zshrc:  source <(xtra completion zsh)
-_xtra() {
-  local state
-  _arguments \\
-    '1: :->command' \\
-    '*: :->args'
-
-  case $state in
-    command)
-      local commands=(${ALL_COMMANDS.map(c => `'${c}'`).join(" ")})
-      _describe 'command' commands ;;
-    args)
-      case $words[2] in
-${subDefs}
-      esac ;;
-  esac
-}
-_xtra
-`;
+complete -F _xtra_completions xtra
+`}function C(){let o=Object.entries(p).map(([e,t])=>`    (${e})
+      local subcmds=(${t.map(s=>`'${s}'`).join(" ")})
+      _describe 'subcommand' subcmds ;;`).join(`
+`);return`#compdef xtra
+# xtra zsh completion
+# Add to ~/.zshrc:  source <(xtra completion zsh)
+_xtra() {
+  local state
+  _arguments \\
+    '1: :->command' \\
+    '*: :->args'
+
+  case $state in
+    command)
+      local commands=(${m.map(e=>`'${e}'`).join(" ")})
+      _describe 'command' commands ;;
+    args)
+      case $words[2] in
+${o}
+      esac ;;
+  esac
 }
-// ─── PowerShell completion script ────────────────────────────────────────────
-function powershellScript() {
-    const subMap = Object.entries(SUBCOMMANDS)
-        .map(([cmd, subs]) => `        '${cmd}' { $subCommands = @(${subs.map(s => `'${s}'`).join(", ")}) }`)
-        .join("\n");
-    return `# xtra PowerShell completion
-# Add to $PROFILE:  xtra completion powershell | Invoke-Expression
-Register-ArgumentCompleter -Native -CommandName xtra -ScriptBlock {
-  param($wordToComplete, $commandAst, $cursorPosition)
-  $tokens = $commandAst.CommandElements
-  $topCommands = @(${ALL_COMMANDS.map(c => `'${c}'`).join(", ")})
-
-  if ($tokens.Count -le 2) {
-    $topCommands | Where-Object { $_ -like "$wordToComplete*" } |
-      ForEach-Object { [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_) }
-    return
-  }
-
-  $subCommands = @()
-  switch ($tokens[1]) {
-${subMap}
-  }
-  $subCommands | Where-Object { $_ -like "$wordToComplete*" } |
-    ForEach-Object { [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_) }
-}
-`;
+_xtra
+`}function w(){let o=Object.entries(p).map(([e,t])=>`        '${e}' { $subCommands = @(${t.map(s=>`'${s}'`).join(", ")}) }`).join(`
+`);return`# xtra PowerShell completion
+# Add to $PROFILE:  xtra completion powershell | Invoke-Expression
+Register-ArgumentCompleter -Native -CommandName xtra -ScriptBlock {
+  param($wordToComplete, $commandAst, $cursorPosition)
+  $tokens = $commandAst.CommandElements
+  $topCommands = @(${m.map(e=>`'${e}'`).join(", ")})
+
+  if ($tokens.Count -le 2) {
+    $topCommands | Where-Object { $_ -like "$wordToComplete*" } |
+      ForEach-Object { [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_) }
+    return
+  }
+
+  $subCommands = @()
+  switch ($tokens[1]) {
+${o}
+  }
+  $subCommands | Where-Object { $_ -like "$wordToComplete*" } |
+    ForEach-Object { [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_) }
 }
-// ─── Install helper ───────────────────────────────────────────────────────────
-function installCompletion(shell) {
-    const home = os.homedir();
-    let rcFile;
-    let snippet;
-    let script;
-    switch (shell) {
-        case "bash":
-            rcFile = path.join(home, ".bashrc");
-            snippet = `\n# xtra CLI completion\nsource <(xtra completion bash)\n`;
-            script = bashScript();
-            break;
-        case "zsh":
-            rcFile = path.join(home, ".zshrc");
-            snippet = `\n# xtra CLI completion\nsource <(xtra completion zsh)\n`;
-            script = zshScript();
-            break;
-        case "powershell":
-            rcFile = path.join(home, "Documents", "WindowsPowerShell", "Microsoft.PowerShell_profile.ps1");
-            snippet = `\n# xtra CLI completion\nxtra completion powershell | Invoke-Expression\n`;
-            script = powershellScript();
-            break;
-        default:
-            console.error(chalk_1.default.red(`Unsupported shell: ${shell}. Use bash, zsh, or powershell.`));
-            process.exit(1);
-    }
-    // Write the completion script to a temp file path for reference
-    const scriptPath = path.join(home, `.xtra-completion.${shell}`);
-    fs.writeFileSync(scriptPath, script, "utf8");
-    // Append sourcing snippet to rc file if not already there
-    let rcContent = "";
-    try {
-        rcContent = fs.readFileSync(rcFile, "utf8");
-    }
-    catch (_) { }
-    if (rcContent.includes("xtra completion")) {
-        console.log(chalk_1.default.yellow(`Completion already installed in ${rcFile}. Skipping.`));
-    }
-    else {
-        fs.appendFileSync(rcFile, snippet, "utf8");
-        console.log(chalk_1.default.green(`✅ Completion installed!\n`));
-        console.log(`  Script saved to: ${chalk_1.default.cyan(scriptPath)}`);
-        console.log(`  Sourced in:      ${chalk_1.default.cyan(rcFile)}`);
-        console.log(`\nRestart your shell or run: ${chalk_1.default.bold(`source ${rcFile}`)}`);
-    }
-}
-// ─── Commander command ────────────────────────────────────────────────────────
-exports.completionCommand = new commander_1.Command("completion")
-    .description("Generate shell completion scripts (bash, zsh, powershell)")
-    .argument("[shell]", "Target shell: bash | zsh | powershell", "bash")
-    .option("--install", "Automatically install completion into your shell profile")
-    .addHelpText("after", `
-Examples:
-  $ xtra completion bash        # Print bash completion script
-  $ xtra completion zsh         # Print zsh completion script
-  $ xtra completion powershell  # Print PowerShell completion script
-  $ source <(xtra completion bash)          # Activate in current session
-  $ xtra completion bash --install          # Auto-install to ~/.bashrc
-  $ xtra completion powershell --install    # Auto-install to $PROFILE
-`)
-    .action((shell, options) => {
-    const normalizedShell = shell.toLowerCase();
-    if (options.install) {
-        installCompletion(normalizedShell);
-        return;
-    }
-    switch (normalizedShell) {
-        case "bash":
-            process.stdout.write(bashScript());
-            break;
-        case "zsh":
-            process.stdout.write(zshScript());
-            break;
-        case "powershell":
-            process.stdout.write(powershellScript());
-            break;
-        default:
-            console.error(chalk_1.default.red(`Unknown shell: '${shell}'. Use bash, zsh, or powershell.`));
-            process.exit(1);
-    }
-});
+`}function k(o){let e=b.homedir(),t,s,n;switch(o){case"bash":t=l.join(e,".bashrc"),s=`
+# xtra CLI completion
+source <(xtra completion bash)
+`,n=x();break;case"zsh":t=l.join(e,".zshrc"),s=`
+# xtra CLI completion
+source <(xtra completion zsh)
+`,n=C();break;case"powershell":t=l.join(e,"Documents","WindowsPowerShell","Microsoft.PowerShell_profile.ps1"),s=`
+# xtra CLI completion
+xtra completion powershell | Invoke-Expression
+`,n=w();break;default:console.error(r.default.red(`Unsupported shell: ${o}. Use bash, zsh, or powershell.`)),process.exit(1)}let h=l.join(e,`.xtra-completion.${o}`);a.writeFileSync(h,n,"utf8");let u="";try{u=a.readFileSync(t,"utf8")}catch{}u.includes("xtra completion")?console.log(r.default.yellow(`Completion already installed in ${t}. Skipping.`)):(a.appendFileSync(t,s,"utf8"),console.log(r.default.green(`\u2705 Completion installed!
+`)),console.log(`  Script saved to: ${r.default.cyan(h)}`),console.log(`  Sourced in:      ${r.default.cyan(t)}`),console.log(`
+Restart your shell or run: ${r.default.bold(`source ${t}`)}`))}var y=new $.Command("completion").description("Generate shell completion scripts (bash, zsh, powershell)").argument("[shell]","Target shell: bash | zsh | powershell","bash").option("--install","Automatically install completion into your shell profile").addHelpText("after",`
+Examples:
+  $ xtra completion bash        # Print bash completion script
+  $ xtra completion zsh         # Print zsh completion script
+  $ xtra completion powershell  # Print PowerShell completion script
+  $ source <(xtra completion bash)          # Activate in current session
+  $ xtra completion bash --install          # Auto-install to ~/.bashrc
+  $ xtra completion powershell --install    # Auto-install to $PROFILE
+`).action((o,e)=>{let t=o.toLowerCase();if(e.install){k(t);return}switch(t){case"bash":process.stdout.write(x());break;case"zsh":process.stdout.write(C());break;case"powershell":process.stdout.write(w());break;default:console.error(r.default.red(`Unknown shell: '${o}'. Use bash, zsh, or powershell.`)),process.exit(1)}});0&&(module.exports={completionCommand});

package/dist/commands/diff.js

@@ -1,162 +1,6 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.diffCommand = void 0;
-const commander_1 = require("commander");
-const api_1 = require("../lib/api");
-const chalk_1 = __importDefault(require("chalk"));
-const ora_1 = __importDefault(require("ora"));
-const config_1 = require("../lib/config");
-const crypto_1 = require("../lib/crypto");
-const diff = __importStar(require("diff"));
-exports.diffCommand = new commander_1.Command("diff")
-    .description("Show differences between local cache and remote secrets")
-    .argument("[env1]", "Source Environment")
-    .argument("[env2]", "Target Environment")
-    .option("-p, --project <projectId>", "Project ID")
-    .option("-e, --env <environment>", "Environment (dev, stg, prod)", "dev")
-    .option("-b, --branch <branchName>", "Branch Name")
-    .option("--show", "Show actual value differences (sensitive)", false)
-    .action(async (env1, env2, options) => {
-    let { project, env, branch, show } = options;
-    // Use config fallback
-    if (!project)
-        project = (0, config_1.getRcConfig)().project;
-    if (!branch) {
-        branch = (0, config_1.getRcConfig)().branch || "main";
-    }
-    if (!project) {
-        console.error(chalk_1.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first."));
-        process.exit(1);
-    }
-    // Normalize Env Map
-    const envMap = { dev: "development", stg: "staging", prod: "production" };
-    if (env1 && env2) {
-        // COMPARE TWO REMOTE ENVIRONMENTS
-        const sourceEnv = envMap[env1] || env1;
-        const targetEnv = envMap[env2] || env2;
-        const spinner = (0, ora_1.default)(`Fetching secrets for ${sourceEnv} and ${targetEnv} (branch: ${branch})...`).start();
-        try {
-            const [sourceSecrets, targetSecrets] = await Promise.all([
-                api_1.api.getSecrets(project, sourceEnv, branch),
-                api_1.api.getSecrets(project, targetEnv, branch)
-            ]);
-            spinner.stop();
-            console.log(chalk_1.default.bold(`\nDiff Report (${sourceEnv} <-> ${targetEnv} @ ${branch}):\n`));
-            compareSecrets(sourceSecrets, targetSecrets, show);
-        }
-        catch (error) {
-            spinner.fail("Failed to fetch secrets");
-            console.error(chalk_1.default.red(error.message));
-        }
-    }
-    else {
-        // DEFAULT: COMPARE REMOTE VS LOCAL CACHE
-        const targetEnv = envMap[env] || env;
-        const spinner = (0, ora_1.default)(`Fetching remote state for ${targetEnv} (branch: ${branch})...`).start();
-        try {
-            const remoteSecrets = await api_1.api.getSecrets(project, targetEnv, branch);
-            let localSecrets = {};
-            try {
-                const cacheKey = `cache.${project}.${targetEnv}.${branch}`;
-                const encrypted = (0, config_1.getConfigValue)(cacheKey);
-                if (encrypted) {
-                    const decryptedStr = (0, crypto_1.decrypt)(encrypted);
-                    localSecrets = JSON.parse(decryptedStr);
-                }
-            }
-            catch (e) { }
-            spinner.stop();
-            console.log(chalk_1.default.bold(`\nDiff Report (Remote ${targetEnv} vs Local Cache):\n`));
-            compareSecrets(remoteSecrets, localSecrets, show); // Note: verify order or adjust message
-            // existing logic compared local (arg1) to remote (arg2)
-            // But usually diff is "What is in A that is not in B"
-            // Let's call a shared helper or inline it but consistent
-            // To match previous behavior: comparing LOCAL against REMOTE
-            // But wait, user wants to see what's different in Remote.
-            // Let's stick to the previous logic structure for consistency if I extract it.
-            // Actually, I'll just rewrite the comparison block to be generic.
-        }
-        catch (error) {
-            spinner.fail("Failed to run diff.");
-            console.error(chalk_1.default.red(error.message));
-        }
-    }
-});
-function compareSecrets(source, target, show) {
-    const allKeys = new Set([...Object.keys(source), ...Object.keys(target)]);
-    let hasDiff = false;
-    allKeys.forEach(key => {
-        const val1 = source[key];
-        const val2 = target[key];
-        if (val1 === val2)
-            return;
-        hasDiff = true;
-        if (val1 === undefined) {
-            // Present in Target, missing in Source
-            console.log(chalk_1.default.green(`+ ${key} (Only in Target)`));
-            if (show)
-                console.log(chalk_1.default.green(`  + "${val2}"`));
-        }
-        else if (val2 === undefined) {
-            // Present in Source, missing in Target
-            console.log(chalk_1.default.red(`- ${key} (Only in Source)`));
-            if (show)
-                console.log(chalk_1.default.red(`  - "${val1}"`));
-        }
-        else {
-            console.log(chalk_1.default.yellow(`~ ${key} (Modified)`));
-            if (show) {
-                const changes = diff.diffChars(val1, val2);
-                let diffStr = "  ";
-                changes.forEach(part => {
-                    const color = part.added ? chalk_1.default.green :
-                        part.removed ? chalk_1.default.red : chalk_1.default.gray;
-                    diffStr += color(part.value);
-                });
-                console.log(diffStr);
-            }
-        }
-    });
-    if (!hasDiff) {
-        console.log(chalk_1.default.green("✔ No differences found."));
-    }
-    else if (!show) {
-        console.log(chalk_1.default.gray("\n(Use --show to reveal secret values)"));
-    }
-}
+var J=Object.create;var h=Object.defineProperty;var K=Object.getOwnPropertyDescriptor;var V=Object.getOwnPropertyNames;var H=Object.getPrototypeOf,M=Object.prototype.hasOwnProperty;var X=(e,t)=>{for(var s in t)h(e,s,{get:t[s],enumerable:!0})},C=(e,t,s,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of V(t))!M.call(e,o)&&o!==s&&h(e,o,{get:()=>t[o],enumerable:!(r=K(t,o))||r.enumerable});return e};var c=(e,t,s)=>(s=e!=null?J(H(e)):{},C(t||!e||!e.__esModule?h(s,"default",{value:e,enumerable:!0}):s,e)),z=e=>C(h({},"__esModule",{value:!0}),e);var ee={};X(ee,{diffCommand:()=>Z});module.exports=z(ee);var q=require("commander");var P=c(require("axios"));var R=c(require("conf")),j=c(require("fs")),B=c(require("path")),b="https://www.xtrasecurity.in/api",l=new R.default({projectName:"xtra-cli",defaults:{apiUrl:b}}),S=l.get("apiUrl");S&&!process.env.XTRA_API_URL&&(S.includes("localhost")||S.includes("xtra-security.vercel.app"))&&l.set("apiUrl",b);var v=()=>({...l.store,apiUrl:process.env.XTRA_API_URL||l.get("apiUrl")||b}),U=e=>l.get(e);var A=()=>l.get("token");var x=()=>{let e={};try{let t=B.default.join(process.cwd(),".xtrarc");j.default.existsSync(t)&&(e=JSON.parse(j.default.readFileSync(t,"utf-8")))}catch{}return{project:e.project||l.get("project")||"",env:e.env||l.get("env")||"development",branch:e.branch||l.get("branch")||"main"}};var L=c(require("fs")),T=c(require("path")),Q=JSON.parse(L.readFileSync(T.join(__dirname,"../../package.json"),"utf-8")),n=()=>{let{apiUrl:e}=v(),t=A();return P.default.create({baseURL:e,headers:{"Content-Type":"application/json","X-CLI-Version":Q.version,...t?{Authorization:`Bearer ${t}`}:{}}})},$={login:async(e,t,s)=>(await n().post("/auth/cli-login",{email:e,password:t,apiKey:s})).data,getSecrets:async(e,t,s="main")=>(await n().get(`/projects/${e}/envs/${t}/secrets?branch=${s}`)).data,getSecretVersions:async(e,t,s="main")=>(await n().get(`/projects/${e}/envs/${t}/secrets?includeVersions=true&branch=${s}`)).data,setSecrets:async(e,t,s,r,o="main")=>(await n().post(`/projects/${e}/envs/${t}/secrets`,{secrets:s,expectedVersions:r,branch:o})).data,getSecretDetails:async(e,t,s,r="main")=>(await n().get(`/projects/${e}/envs/${t}/secrets/${s}?branch=${r}`)).data,syncLogs:async e=>(await n().post("/audit/cli-logs",{logs:e})).data,linkSecret:async(e,t,s,r,o,a)=>(await n().post(`/projects/${e}/envs/${t}/secrets/link`,{key:s,sourceProjectId:r,sourceEnv:o,sourceKey:a})).data,rotateSecret:async(e,t,s,r,o)=>(await n().post(`/projects/${e}/envs/${t}/secrets/${s}/rotate`,{strategy:r,parsedNewValue:o})).data,promoteSecret:async(e,t,s)=>(await n().post(`/projects/${e}/envs/${t}/secrets/${s}/promote`,{})).data,verifyAuditLogs:async()=>(await n().get("/audit/verify")).data,exportAuditLogs:async(e,t,s,r)=>{let o={format:e};return t&&(o.startDate=t),s&&(o.endDate=s),r&&(o.projectId=r),(await n().post("/audit/export",o,{responseType:e==="csv"?"text":"json"})).data},requestAccess:async(e,t,s,r)=>(await n().post("/access/request",{projectId:e,secretId:r,reason:t,duration:s})).data,approveAccess:async(e,t)=>(await n().post("/access/approve",{requestId:e,decision:t})).data,listAccessRequests:async e=>{let{workspace:t}=v(),s=t?`&workspaceId=${t}`:"";return(await n().get(`/access/list?mode=${e}${s}`)).data},getAccessRequestStatus:async e=>(await n().get(`/access/request?id=${e}`)).data,getProjects:async()=>{let{workspace:e}=v(),t=e?`/project?workspaceId=${e}`:"/project";return(await n().get(t)).data},getBranches:async e=>(await n().get(`/branch?projectId=${e}`)).data,createBranch:async(e,t,s)=>(await n().post("/branch",{projectId:e,name:t,description:s})).data,deleteBranch:async e=>(await n().delete(`/branch/${e}`)).data,updateBranch:async(e,t)=>(await n().put("/branch",{id:e,...t})).data,getRoles:async()=>(await n().get("/admin/roles")).data,getUsers:async e=>{let t=e?`?teamId=${e}`:"";return(await n().get(`/admin/users${t}`)).data},setUserRole:async(e,t,s)=>(await n().put("/admin/users/role",{email:e,role:t,teamId:s})).data,getIntegrationStatus:async e=>(await n().get(`/integrations/${e}`)).data,getIntegrationRepos:async e=>(await n().get(`/integrations/${e}/sync`)).data.repos,syncSecretsToGithub:async e=>(await n().post("/integrations/github/sync",e)).data,exportKubernetesSecret:async(e,t)=>{let s=new URLSearchParams(t).toString();return(await n().get(`/projects/${e}/kubernetes?${s}`)).data},getSecretHistory:async(e,t,s)=>(await n().get(`/projects/${e}/envs/${t}/secrets/${s}/history`)).data,rollbackSecret:async(e,t,s,r)=>(await n().post(`/projects/${e}/envs/${t}/secrets/${s}/history`,{version:r})).data,cloneEnvironment:async(e,t,s,r,o)=>(await n().post(`/projects/${e}/envs/clone`,{fromEnv:t,toEnv:s,overwrite:r,branch:o})).data,generateJitLink:async e=>(await n().post("/jit/generate",e)).data,claimJitLink:async e=>(await n().post("/jit/claim",{token:e})).data,getJitInfo:async e=>(await n().get(`/jit/${e}`)).data,post:async(e,t)=>(await n().post(e,t)).data};var i=c(require("chalk")),k=c(require("ora"));var w=c(require("crypto")),O=c(require("conf")),_=require("node-machine-id"),W="aes-256-gcm",N=new O.default({projectName:"xtra-cli-crypto"});function Y(){let e=N.get("masterKey");e||(e=w.default.randomBytes(32).toString("hex"),N.set("masterKey",e));let t=(0,_.machineIdSync)();return w.default.createHash("sha256").update(e+t).digest()}var D=e=>{let t=Y(),s=Buffer.from(e.iv,"hex"),r=Buffer.from(e.tag,"hex"),o=w.default.createDecipheriv(W,t,s);o.setAuthTag(r);let a=o.update(e.content,"hex","utf8");return a+=o.final("utf8"),a};var F=c(require("diff")),Z=new q.Command("diff").description("Show differences between local cache and remote secrets").argument("[env1]","Source Environment").argument("[env2]","Target Environment").option("-p, --project <projectId>","Project ID").option("-e, --env <environment>","Environment (dev, stg, prod)","dev").option("-b, --branch <branchName>","Branch Name").option("--show","Show actual value differences (sensitive)",!1).action(async(e,t,s)=>{let{project:r,env:o,branch:a,show:f}=s;r||(r=x().project),a||(a=x().branch||"main"),r||(console.error(i.default.red("Error: Project ID is required. Use -p <id> or run 'xtra project set' first.")),process.exit(1));let u={dev:"development",stg:"staging",prod:"production"};if(e&&t){let g=u[e]||e,d=u[t]||t,p=(0,k.default)(`Fetching secrets for ${g} and ${d} (branch: ${a})...`).start();try{let[m,y]=await Promise.all([$.getSecrets(r,g,a),$.getSecrets(r,d,a)]);p.stop(),console.log(i.default.bold(`
+Diff Report (${g} <-> ${d} @ ${a}):
+`)),E(m,y,f)}catch(m){p.fail("Failed to fetch secrets"),console.error(i.default.red(m.message))}}else{let g=u[o]||o,d=(0,k.default)(`Fetching remote state for ${g} (branch: ${a})...`).start();try{let p=await $.getSecrets(r,g,a),m={};try{let y=`cache.${r}.${g}.${a}`,I=U(y);if(I){let G=D(I);m=JSON.parse(G)}}catch{}d.stop(),console.log(i.default.bold(`
+Diff Report (Remote ${g} vs Local Cache):
+`)),E(p,m,f)}catch(p){d.fail("Failed to run diff."),console.error(i.default.red(p.message))}}});function E(e,t,s){let r=new Set([...Object.keys(e),...Object.keys(t)]),o=!1;r.forEach(a=>{let f=e[a],u=t[a];if(f!==u){if(o=!0,f===void 0)console.log(i.default.green(`+ ${a} (Only in Target)`)),s&&console.log(i.default.green(`  + "${u}"`));else if(u===void 0)console.log(i.default.red(`- ${a} (Only in Source)`)),s&&console.log(i.default.red(`  - "${f}"`));else if(console.log(i.default.yellow(`~ ${a} (Modified)`)),s){let g=F.diffChars(f,u),d="  ";g.forEach(p=>{let m=p.added?i.default.green:p.removed?i.default.red:i.default.gray;d+=m(p.value)}),console.log(d)}}}),o?s||console.log(i.default.gray(`
+(Use --show to reveal secret values)`)):console.log(i.default.green("\u2714 No differences found."))}0&&(module.exports={diffCommand});