@quonfig/cli 0.0.19 → 0.0.20

package/README.md

@@ -14,7 +14,7 @@ $ npm install -g @quonfig/cli
 $ qfg COMMAND
 running command...
 $ qfg (--version)
-@quonfig/cli/0.0.19 linux-x64 node-v24.4.1
+@quonfig/cli/0.0.20 linux-x64 node-v24.4.1
 $ qfg --help [COMMAND]
 USAGE
   $ qfg COMMAND
@@ -91,7 +91,7 @@ EXAMPLES
   $ qfg config-schema --json-schema    # full JSON Schema document (copy into your editor)
 ```
 
-_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/config-schema.ts)_
+_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/config-schema.ts)_
 
 ## `qfg create NAME`
 
@@ -173,7 +173,7 @@ EXAMPLES
   $ qfg set-rollout my.new.flag --environment production --true-percent 20
 ```
 
-_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/create.ts)_
+_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/create.ts)_
 
 ## `qfg flag info [NAME]`
 
@@ -373,7 +373,7 @@ EXAMPLES
   $ qfg generate --targets node-ts -o ./dist # combine with targets
 ```
 
-_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/generate.ts)_
+_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/generate.ts)_
 
 ## `qfg generate-new-hex-key`
 
@@ -396,7 +396,7 @@ EXAMPLES
   $ qfg generate-new-hex-key
 ```
 
-_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/generate-new-hex-key.ts)_
+_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/generate-new-hex-key.ts)_
 
 ## `qfg get [NAME]`
 
@@ -428,7 +428,7 @@ EXAMPLES
   $ qfg get my.config.name --environment=production
 ```
 
-_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/get.ts)_
+_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/get.ts)_
 
 ## `qfg info [NAME]`
 
@@ -476,7 +476,7 @@ EXAMPLES
   $ qfg info my.config.name --exclude-evaluations   # skip 24h stats
 ```
 
-_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/info.ts)_
 
 ## `qfg init [DIRECTORY]`
 
@@ -516,7 +516,7 @@ EXAMPLES
   $ qfg init --dry-run
 ```
 
-_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/init.ts)_
 
 ## `qfg interactive`
 
@@ -546,7 +546,7 @@ EXAMPLES
   $ qfg
 ```
 
-_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/interactive.ts)_
+_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/interactive.ts)_
 
 ## `qfg list`
 
@@ -586,7 +586,7 @@ EXAMPLES
   $ qfg list --feature-flags
 ```
 
-_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/list.ts)_
+_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/list.ts)_
 
 ## `qfg log-level NAME`
 
@@ -651,7 +651,7 @@ EXAMPLES
   $ qfg log-level log-level.my-app --target=Chatty --value=INFO --environment=production
 ```
 
-_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/log-level.ts)_
+_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/log-level.ts)_
 
 ## `qfg login`
 
@@ -676,7 +676,7 @@ EXAMPLES
   $ qfg login --profile myprofile
 ```
 
-_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/login.ts)_
 
 ## `qfg logout`
 
@@ -699,7 +699,7 @@ EXAMPLES
   $ qfg logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/logout.ts)_
 
 ## `qfg mcp`
 
@@ -732,7 +732,7 @@ EXAMPLES
   $ qfg mcp --url http://local-app.quonfig-staging.com:3003/api/v1/mcp
 ```
 
-_See code: [src/commands/mcp.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/mcp.ts)_
+_See code: [src/commands/mcp.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/mcp.ts)_
 
 ## `qfg migrate`
 
@@ -786,7 +786,7 @@ EXAMPLES
   $ qfg migrate --from launch --api-key $LAUNCH_API_KEY --dir ./quonfig-config --staging
 ```
 
-_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/migrate.ts)_
+_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/migrate.ts)_
 
 ## `qfg migrate doctor`
 
@@ -824,7 +824,7 @@ EXAMPLES
   $ qfg migrate doctor --json
 ```
 
-_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/migrate/doctor.ts)_
+_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/migrate/doctor.ts)_
 
 ## `qfg migrate my-code`
 
@@ -856,7 +856,7 @@ EXAMPLES
   $ qfg migrate my-code --dry-run
 ```
 
-_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/migrate/my-code.ts)_
+_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/migrate/my-code.ts)_
 
 ## `qfg migrate status`
 
@@ -887,7 +887,7 @@ EXAMPLES
   $ qfg migrate status --json
 ```
 
-_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/migrate/status.ts)_
+_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/migrate/status.ts)_
 
 ## `qfg override [NAME]`
 
@@ -931,7 +931,7 @@ EXAMPLES
   $ qfg override my.double.config --value=3.14159
 ```
 
-_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/override.ts)_
+_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/override.ts)_
 
 ## `qfg pull`
 
@@ -975,7 +975,7 @@ EXAMPLES
   $ qfg pull  # uses QUONFIG_DIR env var
 ```
 
-_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/pull.ts)_
+_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/pull.ts)_
 
 ## `qfg push`
 
@@ -1023,7 +1023,7 @@ EXAMPLES
   $ qfg push --dir ./our-config --yes
 ```
 
-_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/push.ts)_
+_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/push.ts)_
 
 ## `qfg schema NAME`
 
@@ -1061,7 +1061,7 @@ EXAMPLES
   $ qfg schema my-schema --set-json-schema=@schemas/my-schema.json --protected
 ```
 
-_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/schema.ts)_
+_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/schema.ts)_
 
 ## `qfg sdk-key`
 
@@ -1088,7 +1088,7 @@ EXAMPLES
   $ qfg sdk-key revoke <key-id>
 ```
 
-_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/sdk-key.ts)_
+_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sdk-key.ts)_
 
 ## `qfg sdk-key create`
 
@@ -1120,7 +1120,7 @@ EXAMPLES
   $ qfg sdk-key create --environment staging --type browser
 ```
 
-_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/sdk-key/create.ts)_
+_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sdk-key/create.ts)_
 
 ## `qfg sdk-key list`
 
@@ -1149,7 +1149,7 @@ EXAMPLES
   $ qfg sdk-key list --environment production
 ```
 
-_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/sdk-key/list.ts)_
+_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sdk-key/list.ts)_
 
 ## `qfg sdk-key revoke KEYID`
 
@@ -1176,7 +1176,7 @@ EXAMPLES
   $ qfg sdk-key revoke a1b2c3d4-e5f6-7890-abcd-ef1234567890
 ```
 
-_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/sdk-key/revoke.ts)_
+_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sdk-key/revoke.ts)_
 
 ## `qfg set-default [NAME]`
 
@@ -1247,7 +1247,7 @@ EXAMPLES
   $ qfg pull && qfg config-schema
 ```
 
-_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/set-default.ts)_
+_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/set-default.ts)_
 
 ## `qfg set-rollout [NAME]`
 
@@ -1324,7 +1324,7 @@ EXAMPLES
   $ qfg set-rollout my.variant.flag --environment production --weights "a:33,b:33,c:34" --hash-by user.id
 ```
 
-_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/set-rollout.ts)_
+_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/set-rollout.ts)_
 
 ## `qfg sync`
 
@@ -1356,7 +1356,7 @@ EXAMPLES
   $ qfg sync --watch --dir ./our-config --interval 30
 ```
 
-_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/sync.ts)_
+_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sync.ts)_
 
 ## `qfg toggle [NAME]`
 
@@ -1458,7 +1458,7 @@ EXAMPLES
   $ qfg verify --json
 ```
 
-_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/verify.ts)_
+_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/verify.ts)_
 
 ## `qfg whoami`
 
@@ -1481,7 +1481,7 @@ EXAMPLES
   $ qfg whoami
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/whoami.ts)_
 
 ## `qfg workspace`
 
@@ -1504,7 +1504,7 @@ EXAMPLES
   $ qfg workspace
 ```
 
-_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/workspace.ts)_
+_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/workspace.ts)_
 
 ## `qfg workspace bootstrap`
 
@@ -1537,7 +1537,7 @@ EXAMPLES
   $ qfg workspace bootstrap --dir ./our-config --skip-validate
 ```
 
-_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/workspace/bootstrap.ts)_
+_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/workspace/bootstrap.ts)_
 
 ## `qfg workspace create SLUG`
 
@@ -1571,7 +1571,7 @@ EXAMPLES
   $ qfg workspace create my-team --org 11111111-1111-1111-1111-111111111111
 ```
 
-_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/workspace/create.ts)_
+_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/workspace/create.ts)_
 
 ## `qfg workspace switch [SLUG]`
 
@@ -1599,7 +1599,7 @@ EXAMPLES
   $ qfg workspace switch my-workspace-slug
 ```
 
-_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.19/src/commands/workspace/switch.ts)_
+_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/workspace/switch.ts)_
 <!-- commandsstop -->
 
 ## Local Development

package/dist/codegen/code-generators/node-typescript-generator.js

@@ -7,7 +7,7 @@ export class NodeTypeScriptGenerator extends BaseTypescriptGenerator {
     declarationGenerate() {
         return (stripIndent `
     /* eslint-disable */
-    // AUTOGENERATED by quonfig-cli's 'gen' command
+    // AUTOGENERATED by quonfig-cli's 'generate' command
     // prettier-ignore
     import "@quonfig/node";
 
@@ -27,7 +27,7 @@ export class NodeTypeScriptGenerator extends BaseTypescriptGenerator {
     generate() {
         return (stripIndent `
     /* eslint-disable */
-    // AUTOGENERATED by quonfig-cli's 'gen' command
+    // AUTOGENERATED by quonfig-cli's 'generate' command
     // prettier-ignore
     import { Quonfig, Contexts, TypedNodeServerConfigurationRaw, TypedNodeServerConfigurationAccessor } from '@quonfig/node'
     // prettier-ignore

package/dist/codegen/code-generators/react-typescript-generator.js

@@ -8,7 +8,7 @@ export class ReactTypeScriptGenerator extends BaseTypescriptGenerator {
     declarationGenerate() {
         return (stripIndent `
     /* eslint-disable */
-    // AUTOGENERATED by quonfig-cli's 'gen' command
+    // AUTOGENERATED by quonfig-cli's 'generate' command
     // prettier-ignore
     import "@quonfig/javascript";
     // prettier-ignore
@@ -42,7 +42,7 @@ export class ReactTypeScriptGenerator extends BaseTypescriptGenerator {
     generate() {
         return (stripIndent `
     /* eslint-disable */
-    // AUTOGENERATED by quonfig-cli's 'gen' command
+    // AUTOGENERATED by quonfig-cli's 'generate' command
     // prettier-ignore
     import { Quonfig, TypedFrontEndConfigurationRaw } from "@quonfig/javascript"
     // prettier-ignore

package/dist/commands/set-default.js

@@ -192,7 +192,7 @@ To see all current values and rules for a flag:
             successMessage = `Successfully changed default to \`${value}\``;
             if (secret.selected) {
                 // Handle encrypted values using shared utility
-                const encryptedValueResult = await makeConfidentialValue(this, value, secret, environment.id);
+                const encryptedValueResult = await makeConfidentialValue(this, value, secret, environment.name);
                 if (!encryptedValueResult.ok) {
                     return this.err(encryptedValueResult.message || 'Failed to encrypt value');
                 }

package/dist/util/encryption.d.ts

@@ -14,7 +14,10 @@ export declare function decrypt(encryptedString: string, keyStringHex: string):
  * @param command - The APICommand instance for API calls and logging
  * @param value - The plaintext value to encrypt
  * @param secret - Secret configuration containing key name
- * @param environmentId - Environment ID to fetch encryption key for (empty string for default)
+ * @param environmentName - Environment slug to fetch encryption key for (empty string for default).
+ *   Must be the slug stored in config files (e.g. "production"), not the DB UUID — the encryption
+ *   key config's `environments[].id` holds slugs, and matching against UUIDs silently falls back
+ *   to the default key and produces ciphertext that won't decrypt at runtime.
  * @returns Result<ConfigValue> with encrypted value or error
  */
-export declare function makeConfidentialValue(command: APICommand, value: string, secret: Secret, environmentId: string): Promise<Result<any>>;
+export declare function makeConfidentialValue(command: APICommand, value: string, secret: Secret, environmentName: string): Promise<Result<any>>;

package/dist/util/encryption.js

@@ -53,10 +53,13 @@ export function decrypt(encryptedString, keyStringHex) {
  * @param command - The APICommand instance for API calls and logging
  * @param value - The plaintext value to encrypt
  * @param secret - Secret configuration containing key name
- * @param environmentId - Environment ID to fetch encryption key for (empty string for default)
+ * @param environmentName - Environment slug to fetch encryption key for (empty string for default).
+ *   Must be the slug stored in config files (e.g. "production"), not the DB UUID — the encryption
+ *   key config's `environments[].id` holds slugs, and matching against UUIDs silently falls back
+ *   to the default key and produces ciphertext that won't decrypt at runtime.
  * @returns Result<ConfigValue> with encrypted value or error
  */
-export async function makeConfidentialValue(command, value, secret, environmentId) {
+export async function makeConfidentialValue(command, value, secret, environmentName) {
     // First check if the encryption key exists in metadata
     const metadataRequest = await command.apiClient.post('/api/v1/metadata/list', { workspaceId: command.workspaceId });
     if (!metadataRequest.ok) {
@@ -89,10 +92,12 @@ export async function makeConfidentialValue(command, value, secret, environmentI
     // Find the encryption key for this environment (or default)
     let secretKey;
     let envVar;
-    // Check environment-specific config first
-    if (keyConfig.environments && environmentId) {
+    // Check environment-specific config first. environments[].id is the env slug
+    // (e.g. "production") as stored in the git file — match by slug, not UUID.
+    if (keyConfig.environments && environmentName) {
+        const targetSlug = String(environmentName).toLowerCase();
         /* eslint-disable @typescript-eslint/no-explicit-any */
-        const envConfig = keyConfig.environments.find((env) => String(env.id) === String(environmentId));
+        const envConfig = keyConfig.environments.find((env) => String(env.id).toLowerCase() === targetSlug);
         /* eslint-enable @typescript-eslint/no-explicit-any */
         const ruleValue = envConfig?.rules?.[0]?.value;
         // Check if it's a provided value (env var)
@@ -139,7 +144,7 @@ export async function makeConfidentialValue(command, value, secret, environmentI
         command.verboseLog(`Using literal value from ${secret.keyName} to encrypt secret`);
     }
     if (!secretKey) {
-        return failure(`Failed to create secret: ${secret.keyName} does not have a value configured for environment ${environmentId || 'default'} or default env`, {
+        return failure(`Failed to create secret: ${secret.keyName} does not have a value configured for environment ${environmentName || 'default'} or default env`, {
             phase: 'finding-secret',
         });
     }

package/oclif.manifest.json

@@ -2882,5 +2882,5 @@
       ]
     }
   },
-  "version": "0.0.19"
+  "version": "0.0.20"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "packageManager": "yarn@4.11.0+sha512.4e54aeace9141df2f0177c266b05ec50dc044638157dae128c471ba65994ac802122d7ab35bcd9e81641228b7dcf24867d28e750e0bcae8a05277d600008ad54",
   "name": "@quonfig/cli",
-  "version": "0.0.19",
+  "version": "0.0.20",
   "bugs": {
     "url": "https://github.com/quonfig/cli/issues"
   },