@quonfig/cli 0.0.1 → 0.0.2

package/dist/init/schema.js

@@ -0,0 +1,334 @@
+/**
+ * JSON Schema for Quonfig StoredConfig files.
+ *
+ * This is the machine-readable schema for files in configs/, feature-flags/,
+ * segments/, and log-levels/. Written to `quonfig.schema.json` by `qfg init`.
+ *
+ * Derived from the Zod schemas in verify/validate.ts — keep in sync.
+ */
+const configTypes = ['config', 'feature_flag', 'log_level', 'segment'];
+const valueTypes = ['bool', 'string', 'int', 'double', 'json', 'string_list', 'duration', 'log_level'];
+const logLevels = ['TRACE', 'DEBUG', 'INFO', 'WARN', 'ERROR', 'FATAL'];
+const operators = [
+    'ALWAYS_TRUE',
+    'PROP_IS_ONE_OF', 'PROP_IS_NOT_ONE_OF',
+    'PROP_STARTS_WITH_ONE_OF', 'PROP_DOES_NOT_START_WITH_ONE_OF',
+    'PROP_ENDS_WITH_ONE_OF', 'PROP_DOES_NOT_END_WITH_ONE_OF',
+    'PROP_CONTAINS_ONE_OF', 'PROP_DOES_NOT_CONTAIN_ONE_OF',
+    'PROP_LESS_THAN', 'PROP_LESS_THAN_OR_EQUAL',
+    'PROP_GREATER_THAN', 'PROP_GREATER_THAN_OR_EQUAL',
+    'PROP_BEFORE', 'PROP_AFTER',
+    'PROP_MATCHES', 'PROP_DOES_NOT_MATCH',
+    'IN_SEG', 'NOT_IN_SEG',
+    'IN_INT_RANGE',
+    'LOOKUP_KEY_IN', 'LOOKUP_KEY_NOT_IN',
+];
+// ── Value sub-schemas ──────────────────────────────────────────────────
+const boolValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'bool' },
+        value: { type: 'boolean' },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const stringValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'string' },
+        value: { type: 'string' },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const intValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'int' },
+        value: { oneOf: [{ type: 'number' }, { type: 'string' }] },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const doubleValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'double' },
+        value: { oneOf: [{ type: 'number' }, { type: 'string' }] },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const jsonValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'json' },
+        value: {},
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const stringListValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'string_list' },
+        value: { type: 'array', items: { type: 'string' } },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const durationValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'duration' },
+        value: { type: 'string', description: 'Go-style duration (e.g. "30s", "5m", "1h30m")' },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const logLevelValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'log_level' },
+        value: { enum: [...logLevels] },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const schemaValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'schema' },
+        value: {
+            type: 'object',
+            properties: {
+                schemaType: { type: 'string' },
+                schema: { type: 'string' },
+            },
+            required: ['schemaType', 'schema'],
+        },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const providedValue = {
+    type: 'object',
+    properties: {
+        type: { const: 'provided' },
+        value: {
+            type: 'object',
+            properties: {
+                source: { type: 'string' },
+                lookup: { type: 'string' },
+            },
+            required: ['source', 'lookup'],
+        },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const simpleValue = {
+    oneOf: [
+        boolValue,
+        stringValue,
+        intValue,
+        doubleValue,
+        jsonValue,
+        stringListValue,
+        durationValue,
+        logLevelValue,
+        schemaValue,
+        providedValue,
+    ],
+};
+const weightedValuesValue = {
+    type: 'object',
+    description: 'Weighted rollout for A/B testing. Weights are out of 100,000.',
+    properties: {
+        type: { const: 'weighted_values' },
+        value: {
+            type: 'object',
+            properties: {
+                weightedValues: {
+                    type: 'array',
+                    items: {
+                        type: 'object',
+                        properties: {
+                            value: simpleValue,
+                            weight: { type: 'integer', minimum: 0, maximum: 100_000 },
+                        },
+                        required: ['value', 'weight'],
+                        additionalProperties: false,
+                    },
+                },
+                hashByPropertyName: { type: 'string', default: 'user.key' },
+                splitEvenly: { type: 'boolean' },
+            },
+            required: ['weightedValues'],
+            additionalProperties: false,
+        },
+    },
+    required: ['type', 'value'],
+    additionalProperties: false,
+};
+const ruleValue = {
+    oneOf: [
+        ...simpleValue.oneOf,
+        weightedValuesValue,
+    ],
+};
+// ── Criterion ──────────────────────────────────────────────────────────
+const criterion = {
+    type: 'object',
+    properties: {
+        operator: {
+            enum: [...operators],
+            description: 'ALWAYS_TRUE needs no extra fields. PROP_* operators require propertyName and valueToMatch. IN_SEG/NOT_IN_SEG require valueToMatch with segment key.',
+        },
+        propertyName: {
+            type: 'string',
+            description: 'Required for PROP_* operators.',
+        },
+        valueToMatch: {
+            ...simpleValue,
+            description: 'Required for all operators except ALWAYS_TRUE.',
+        },
+    },
+    required: ['operator'],
+    additionalProperties: false,
+};
+// ── Rule ───────────────────────────────────────────────────────────────
+const configRule = {
+    type: 'object',
+    description: 'Rules are evaluated in order; first match wins. All criteria within a rule are ANDed.',
+    properties: {
+        criteria: {
+            type: 'array',
+            items: criterion,
+        },
+        value: ruleValue,
+    },
+    required: ['criteria', 'value'],
+    additionalProperties: false,
+};
+// ── Environment ────────────────────────────────────────────────────────
+const configEnvironment = {
+    type: 'object',
+    properties: {
+        id: {
+            type: 'string',
+            pattern: '^[a-z0-9]+(?:-[a-z0-9]+)*$',
+            description: 'Lowercase slug (e.g. "production", "staging"). Must NOT be a UUID.',
+        },
+        rules: {
+            type: 'array',
+            items: configRule,
+        },
+    },
+    required: ['id', 'rules'],
+    additionalProperties: false,
+};
+// ── Variant ────────────────────────────────────────────────────────────
+const variant = {
+    type: 'object',
+    properties: {
+        id: { type: 'string' },
+        key: { type: 'string' },
+        value: simpleValue,
+        description: { type: 'string' },
+    },
+    required: ['value'],
+    additionalProperties: false,
+};
+// ── Top-level StoredConfig ─────────────────────────────────────────────
+export function storedConfigJsonSchema() {
+    return {
+        $schema: 'https://json-schema.org/draft/2020-12/schema',
+        $id: 'https://quonfig.com/schemas/stored-config.json',
+        title: 'Quonfig StoredConfig',
+        description: 'Schema for config files in a Quonfig workspace (configs/, feature-flags/, segments/, log-levels/).',
+        type: 'object',
+        properties: {
+            key: {
+                type: 'string',
+                minLength: 1,
+                maxLength: 512,
+                not: { const: 'new' },
+                pattern: '^[^/\\\\]+$',
+                description: 'Unique identifier. Must match the filename (without .json).',
+            },
+            type: {
+                enum: [...configTypes],
+                description: 'Determines which directory the file lives in: config→configs/, feature_flag→feature-flags/, segment→segments/, log_level→log-levels/.',
+            },
+            valueType: {
+                enum: [...valueTypes],
+                description: 'The value type. Must match the "type" field in rule values. Segments must use "bool". Log levels must use "log_level".',
+            },
+            default: {
+                type: 'object',
+                properties: {
+                    rules: {
+                        type: 'array',
+                        items: configRule,
+                        minItems: 1,
+                    },
+                },
+                required: ['rules'],
+                additionalProperties: false,
+            },
+            id: { type: 'string' },
+            projectId: { type: 'string' },
+            name: { type: 'string' },
+            description: { type: 'string' },
+            sendToClientSdk: {
+                type: 'boolean',
+                default: false,
+                description: 'Whether to expose this config to client-side SDKs. Must be false for segments.',
+            },
+            schemaKey: {
+                type: 'string',
+                description: 'References a schema in schemas/ or schemas-protected/. The referenced file must exist.',
+            },
+            accessLevel: { type: 'string' },
+            protection: { type: 'string' },
+            tags: {
+                type: 'array',
+                items: { type: 'string' },
+            },
+            environments: {
+                type: 'array',
+                items: configEnvironment,
+                default: [],
+            },
+            variants: {
+                type: 'array',
+                items: variant,
+                default: [],
+            },
+        },
+        required: ['key', 'type', 'valueType', 'default'],
+        additionalProperties: true,
+        // Type-specific constraints
+        allOf: [
+            {
+                if: { properties: { type: { const: 'segment' } } },
+                then: {
+                    properties: {
+                        valueType: { const: 'bool' },
+                        sendToClientSdk: { const: false },
+                    },
+                },
+            },
+            {
+                if: { properties: { type: { const: 'log_level' } } },
+                then: {
+                    properties: {
+                        valueType: { const: 'log_level' },
+                    },
+                },
+            },
+        ],
+    };
+}

package/dist/init/templates.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Managed document templates for `qfg init`.
+ *
+ * These are overwritten on every run of `qfg init` — they are not
+ * user-editable.  Each starts with a comment so users know not to
+ * hand-edit them.
+ */
+export declare function readmeTemplate(): string;
+export declare function claudeMdTemplate(): string;
+export declare function agentsMdTemplate(): string;
+export declare const PRE_COMMIT_MARKER = "# --- qfg-verify ---";
+export declare function preCommitHookContent(): string;

package/dist/init/templates.js

@@ -0,0 +1,161 @@
+/**
+ * Managed document templates for `qfg init`.
+ *
+ * These are overwritten on every run of `qfg init` — they are not
+ * user-editable.  Each starts with a comment so users know not to
+ * hand-edit them.
+ */
+const MANAGED_HEADER = '<!-- Managed by `qfg init` — do not edit manually. Run `qfg init` to update. -->';
+// ── README.md ──────────────────────────────────────────────────────────
+export function readmeTemplate() {
+    return `${MANAGED_HEADER}
+
+# Quonfig Workspace
+
+This is a [Quonfig](https://quonfig.com) workspace repository. All configuration — feature flags, configs, segments, log levels, and schemas — is stored as JSON files tracked in git.
+
+## Directory layout
+
+| Directory | What goes here |
+|-----------|---------------|
+| \`configs/\` | Application configuration (strings, ints, JSON, etc.) |
+| \`feature-flags/\` | Boolean or multi-variant feature flags |
+| \`segments/\` | Audience segments for targeting rules |
+| \`log-levels/\` | Dynamic log level configuration |
+| \`schemas/\` | JSON Schemas that configs can reference for validation |
+| \`schemas-protected/\` | Admin-only schemas |
+
+## Quick start
+
+\`\`\`bash
+# Validate the workspace
+qfg verify
+
+# Create a new feature flag
+qfg create my.new.flag --type=boolean-flag
+
+# List all configs
+qfg list
+\`\`\`
+
+## Schema
+
+\`quonfig.schema.json\` in the repo root defines the config file format. Editors that support JSON Schema will provide autocomplete and validation automatically.
+
+## Validation
+
+Run \`qfg verify\` after every change. A git pre-commit hook is installed to do this automatically.
+`;
+}
+// ── CLAUDE.md ──────────────────────────────────────────────────────────
+export function claudeMdTemplate() {
+    return `${MANAGED_HEADER}
+
+# Quonfig Workspace — Agent Reference
+
+This is a Quonfig workspace repository. Configuration is stored as JSON files in git.
+
+**After every change to this repo, run \`qfg verify\` to validate.**
+
+## JSON Schema
+
+The canonical schema for config files is \`quonfig.schema.json\` in the repo root. Use it as the source of truth for field names, types, enums, and constraints.
+
+Config files can reference it for editor support:
+
+\`\`\`json
+{ "$schema": "./quonfig.schema.json", "key": "my.config", ... }
+\`\`\`
+
+## Directory Structure
+
+Files must live in the directory matching their \`type\`. The filename (without \`.json\`) must exactly match the \`key\` field.
+
+| Directory | Config \`type\` field | Description |
+|-----------|---------------------|-------------|
+| \`configs/\` | \`"config"\` | Application configuration values |
+| \`feature-flags/\` | \`"feature_flag"\` | Boolean or multi-variant feature flags |
+| \`segments/\` | \`"segment"\` | Audience segments for targeting rules |
+| \`log-levels/\` | \`"log_level"\` | Dynamic log level configuration |
+| \`schemas/\` | \`"schema"\` | JSON Schemas that configs can reference |
+| \`schemas-protected/\` | \`"schema"\` | Protected schemas (admin-only) |
+
+## Minimal Example
+
+\`\`\`json
+{
+  "$schema": "./quonfig.schema.json",
+  "key": "my-app.timeout",
+  "type": "config",
+  "valueType": "int",
+  "default": {
+    "rules": [
+      {
+        "criteria": [{ "operator": "ALWAYS_TRUE" }],
+        "value": { "type": "int", "value": 30 }
+      }
+    ]
+  },
+  "environments": [],
+  "variants": []
+}
+\`\`\`
+
+## Rules and Criteria
+
+The \`default\` block (and each environment override) contains a \`rules\` array. Rules are evaluated in order; the first rule whose criteria all match wins. All criteria within one rule are ANDed. Use multiple rules for OR logic.
+
+### Operator quick reference
+
+| Category | Operators | Required fields |
+|----------|-----------|----------------|
+| Always match | \`ALWAYS_TRUE\` | (none) |
+| Property string | \`PROP_IS_ONE_OF\`, \`PROP_IS_NOT_ONE_OF\`, \`PROP_STARTS_WITH_ONE_OF\`, \`PROP_ENDS_WITH_ONE_OF\`, \`PROP_CONTAINS_ONE_OF\` + negative variants | \`propertyName\`, \`valueToMatch\` |
+| Property comparison | \`PROP_LESS_THAN\`, \`PROP_LESS_THAN_OR_EQUAL\`, \`PROP_GREATER_THAN\`, \`PROP_GREATER_THAN_OR_EQUAL\` | \`propertyName\`, \`valueToMatch\` |
+| Property date | \`PROP_BEFORE\`, \`PROP_AFTER\` | \`propertyName\`, \`valueToMatch\` |
+| Property regex | \`PROP_MATCHES\`, \`PROP_DOES_NOT_MATCH\` | \`propertyName\`, \`valueToMatch\` |
+| Segment | \`IN_SEG\`, \`NOT_IN_SEG\` | \`valueToMatch\` (segment key) |
+| Other | \`IN_INT_RANGE\`, \`LOOKUP_KEY_IN\`, \`LOOKUP_KEY_NOT_IN\` | \`valueToMatch\` |
+
+See \`quonfig.schema.json\` for the full operator enum and value type definitions.
+
+## Environments
+
+Environment overrides go in the \`environments\` array. Each has an \`id\` (lowercase slug like \`production\`, never a UUID) and its own \`rules\` array. Environment IDs are defined in \`environments.json\` at the repo root.
+
+## Cross-File Validation Rules
+
+These constraints span multiple files and are enforced by \`qfg verify\` (not expressible in the JSON Schema alone):
+
+1. **Filename = key**: the JSON filename (without .json) must exactly match the \`key\` field
+2. **No duplicate keys** across the entire workspace
+3. **Segment references** (\`IN_SEG\`/\`NOT_IN_SEG\`) must point to existing segments in \`segments/\`
+4. **Schema references** (\`schemaKey\`) must point to existing files in \`schemas/\` or \`schemas-protected/\`
+`;
+}
+// ── AGENTS.md ──────────────────────────────────────────────────────────
+export function agentsMdTemplate() {
+    return `${MANAGED_HEADER}
+
+# Agent Instructions
+
+This is a Quonfig workspace repository. See \`CLAUDE.md\` for the complete schema reference and validation rules.
+
+## Key rules
+
+1. **Always validate**: run \`qfg verify\` after any change to this repo.
+2. Filename must match the \`key\` field (e.g. \`my.flag.json\` has \`"key": "my.flag"\`).
+3. Files must be in the correct directory for their \`type\`.
+4. See \`CLAUDE.md\` for the full list of value types, operators, and constraints.
+`;
+}
+// ── Pre-commit hook ────────────────────────────────────────────────────
+export const PRE_COMMIT_MARKER = '# --- qfg-verify ---';
+export function preCommitHookContent() {
+    return `#!/bin/sh
+${PRE_COMMIT_MARKER}
+# Validate workspace before committing.
+# Installed by \`qfg init\`. Safe to remove if you prefer manual validation.
+qfg verify .
+`;
+}

package/dist/util/token-storage.js

@@ -1,8 +1,13 @@
 import * as fs from 'node:fs';
 import * as os from 'node:os';
 import * as path from 'node:path';
+import { getDomain } from './domain-urls.js';
 const getQuonfigDir = (options) => options?.quonfigDir || path.join(os.homedir(), '.quonfig');
-const getTokenFile = (options) => path.join(getQuonfigDir(options), 'tokens.json');
+const getTokenFile = (options) => {
+    const domain = getDomain();
+    const filename = domain !== 'quonfig.com' ? `tokens-${domain.replaceAll('.', '-')}.json` : 'tokens.json';
+    return path.join(getQuonfigDir(options), filename);
+};
 const getConfigFile = (options) => path.join(getQuonfigDir(options), 'config');
 const ensureQuonfigDir = async (options) => {
     const quonfigDir = getQuonfigDir(options);

package/dist/verify/validate.d.ts

@@ -26,10 +26,23 @@ export interface ValidationIssue {
     severity: Severity;
     suggestion?: string;
 }
+export interface ValidationStats {
+    configs: number;
+    featureFlags: number;
+    segments: number;
+    logLevels: number;
+    schemas: number;
+    environmentOverrides: number;
+    rules: number;
+    segmentRefsChecked: number;
+    schemaRefsChecked: number;
+    uniqueKeysVerified: number;
+}
 export interface ValidationResult {
     issues: ValidationIssue[];
     filesChecked: number;
     valid: boolean;
+    stats: ValidationStats;
 }
 /**
  * Validate an entire workspace directory on disk.