@quonfig/cli 0.0.2 → 0.0.4

package/README.md

@@ -14,7 +14,7 @@ $ npm install -g @quonfig/cli
 $ qfg COMMAND
 running command...
 $ qfg (--version)
-@quonfig/cli/0.0.2 darwin-arm64 node-v24.4.1
+@quonfig/cli/0.0.4 linux-x64 node-v24.4.1
 $ qfg --help [COMMAND]
 USAGE
   $ qfg COMMAND
@@ -39,12 +39,15 @@ USAGE
 * [`qfg mcp`](#qfg-mcp)
 * [`qfg override [NAME]`](#qfg-override-name)
 * [`qfg profile`](#qfg-profile)
+* [`qfg pull`](#qfg-pull)
 * [`qfg schema NAME`](#qfg-schema-name)
 * [`qfg serve DATA-FILE`](#qfg-serve-data-file)
 * [`qfg set-default [NAME]`](#qfg-set-default-name)
+* [`qfg sync`](#qfg-sync)
 * [`qfg verify [PATH]`](#qfg-verify-path)
 * [`qfg whoami`](#qfg-whoami)
 * [`qfg workspace`](#qfg-workspace)
+* [`qfg workspace bootstrap`](#qfg-workspace-bootstrap)
 
 ## `qfg create NAME`
 
@@ -93,7 +96,7 @@ EXAMPLES
   $ qfg create my.new.string --type json --value="{\"key\": \"value\"}"
 ```
 
-_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/create.ts)_
+_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/create.ts)_
 
 ## `qfg download`
 
@@ -126,7 +129,7 @@ EXAMPLES
   $ qfg download --environment=test --sdk-key=YOUR_SDK_KEY
 ```
 
-_See code: [src/commands/download.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/download.ts)_
+_See code: [src/commands/download.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/download.ts)_
 
 ## `qfg generate`
 
@@ -196,7 +199,7 @@ EXAMPLES
   $ qfg generate --targets node-ts -o ./dist # combine with targets
 ```
 
-_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/generate.ts)_
+_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/generate.ts)_
 
 ## `qfg generate-new-hex-key`
 
@@ -219,7 +222,7 @@ EXAMPLES
   $ qfg generate-new-hex-key
 ```
 
-_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/generate-new-hex-key.ts)_
+_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/generate-new-hex-key.ts)_
 
 ## `qfg get [NAME]`
 
@@ -251,7 +254,7 @@ EXAMPLES
   $ qfg get my.config.name --environment=production
 ```
 
-_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/get.ts)_
+_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/get.ts)_
 
 ## `qfg info [NAME]`
 
@@ -281,7 +284,7 @@ EXAMPLES
   $ qfg info my.config.name
 ```
 
-_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/info.ts)_
 
 ## `qfg init [DIRECTORY]`
 
@@ -319,7 +322,7 @@ EXAMPLES
   $ qfg init --dry-run
 ```
 
-_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/init.ts)_
 
 ## `qfg interactive`
 
@@ -337,7 +340,7 @@ EXAMPLES
   $ qfg
 ```
 
-_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/interactive.ts)_
+_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/interactive.ts)_
 
 ## `qfg list`
 
@@ -374,7 +377,7 @@ EXAMPLES
   $ qfg list --feature-flags
 ```
 
-_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/list.ts)_
+_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/list.ts)_
 
 ## `qfg login`
 
@@ -402,7 +405,7 @@ EXAMPLES
   $ qfg login --profile myprofile
 ```
 
-_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/login.ts)_
 
 ## `qfg logout`
 
@@ -425,7 +428,7 @@ EXAMPLES
   $ qfg logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/logout.ts)_
 
 ## `qfg mcp`
 
@@ -455,10 +458,10 @@ EXAMPLES
 
   $ qfg mcp --editor cursor
 
-  $ qfg mcp --url http://local-app.goatsofquonfig.com:3003/api/v1/mcp
+  $ qfg mcp --url http://local-app.quonfig-staging.com:3003/api/v1/mcp
 ```
 
-_See code: [src/commands/mcp.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/mcp.ts)_
+_See code: [src/commands/mcp.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/mcp.ts)_
 
 ## `qfg override [NAME]`
 
@@ -497,7 +500,7 @@ EXAMPLES
   $ qfg override my.double.config --value=3.14159
 ```
 
-_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/override.ts)_
+_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/override.ts)_
 
 ## `qfg profile`
 
@@ -520,7 +523,36 @@ EXAMPLES
   $ qfg profile
 ```
 
-_See code: [src/commands/profile.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/profile.ts)_
+_See code: [src/commands/profile.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/profile.ts)_
+
+## `qfg pull`
+
+Clone or update a local directory from the workspace Gitea repo
+
+```
+USAGE
+  $ qfg pull [--json] [--interactive] [--no-color] [--verbose] [--dir <value>] [--workspace <value>]
+
+FLAGS
+  --dir=<value>        Local directory to clone/update (defaults to QUONFIG_DIR env var)
+  --workspace=<value>  Workspace ID (defaults to active profile)
+
+GLOBAL FLAGS
+  --[no-]interactive  Force interactive mode
+  --json              Format output as json.
+  --no-color          Do not colorize output
+  --verbose           Verbose output
+
+DESCRIPTION
+  Clone or update a local directory from the workspace Gitea repo
+
+EXAMPLES
+  $ qfg pull --dir ./our-config
+
+  $ qfg pull  # uses QUONFIG_DIR env var
+```
+
+_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/pull.ts)_
 
 ## `qfg schema NAME`
 
@@ -558,7 +590,7 @@ EXAMPLES
   $ qfg schema my-schema --set-json-schema=@schemas/my-schema.json --protected
 ```
 
-_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/schema.ts)_
+_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/schema.ts)_
 
 ## `qfg serve DATA-FILE`
 
@@ -594,7 +626,7 @@ EXAMPLES
   $ qfg serve ./quonfig.test.588.config.json --port=3099
 ```
 
-_See code: [src/commands/serve.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/serve.ts)_
+_See code: [src/commands/serve.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/serve.ts)_
 
 ## `qfg set-default [NAME]`
 
@@ -638,7 +670,39 @@ EXAMPLES
   $ qfg set-default my.config.name --env-var=MY_ENV_VAR_NAME --environment=production
 ```
 
-_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/set-default.ts)_
+_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/set-default.ts)_
+
+## `qfg sync`
+
+Continuously poll for workspace config updates and apply them locally
+
+```
+USAGE
+  $ qfg sync --watch [--json] [--interactive] [--no-color] [--verbose] [--dir <value>] [--interval <value>]
+
+FLAGS
+  --dir=<value>       Local directory to sync (defaults to QUONFIG_DIR env var)
+  --interval=<value>  [default: 60] Poll interval in seconds
+  --watch             (required) Run as a continuous polling daemon (required)
+
+GLOBAL FLAGS
+  --[no-]interactive  Force interactive mode
+  --json              Format output as json.
+  --no-color          Do not colorize output
+  --verbose           Verbose output
+
+DESCRIPTION
+  Continuously poll for workspace config updates and apply them locally
+
+EXAMPLES
+  $ qfg sync --watch
+
+  $ qfg sync --watch --interval 10
+
+  $ qfg sync --watch --dir ./our-config --interval 30
+```
+
+_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/sync.ts)_
 
 ## `qfg verify [PATH]`
 
@@ -671,7 +735,7 @@ EXAMPLES
   $ qfg verify --json
 ```
 
-_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/verify.ts)_
+_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/verify.ts)_
 
 ## `qfg whoami`
 
@@ -694,7 +758,7 @@ EXAMPLES
   $ qfg whoami
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/whoami.ts)_
 
 ## `qfg workspace`
 
@@ -717,7 +781,40 @@ EXAMPLES
   $ qfg workspace
 ```
 
-_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.2/src/commands/workspace.ts)_
+_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/workspace.ts)_
+
+## `qfg workspace bootstrap`
+
+Push a local git repo to Gitea as this workspace's config repository
+
+```
+USAGE
+  $ qfg workspace bootstrap [--json] [--interactive] [--no-color] [--verbose] [--dir <value>] [--force]
+  [--skip-validate]
+
+FLAGS
+  --dir=<value>    Local directory to push (defaults to current directory)
+  --force          Force push even if remote already has commits
+  --skip-validate  Skip config validation before pushing
+
+GLOBAL FLAGS
+  --[no-]interactive  Force interactive mode
+  --json              Format output as json.
+  --no-color          Do not colorize output
+  --verbose           Verbose output
+
+DESCRIPTION
+  Push a local git repo to Gitea as this workspace's config repository
+
+EXAMPLES
+  $ qfg workspace bootstrap --dir ./our-config
+
+  $ qfg workspace bootstrap --dir ./launch-migrator/output
+
+  $ qfg workspace bootstrap --dir ./our-config --skip-validate
+```
+
+_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.4/src/commands/workspace/bootstrap.ts)_
 <!-- commandsstop -->
 
 ## Local Development

package/bin/dev.js

@@ -1,9 +1,5 @@
-#!/usr/bin/env -S node --loader ts-node/esm --no-warnings=ExperimentalWarning
-
-// eslint-disable-next-line node/shebang
-async function main() {
-  const {execute} = await import('@oclif/core')
-  await execute({development: true, dir: import.meta.url})
-}
-
-await main()
+#!/usr/bin/env bash
+# Run dev CLI from any directory — ensures ts-node resolves from cli's node_modules
+DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+export TS_NODE_PROJECT="$DIR/tsconfig.json"
+exec node --loader "$DIR/node_modules/ts-node/esm.mjs" --no-warnings=ExperimentalWarning "$DIR/bin/dev.mjs" "$@"

package/bin/dev.mjs

@@ -0,0 +1,6 @@
+async function main() {
+  const {execute} = await import('@oclif/core')
+  await execute({development: true, dir: import.meta.url})
+}
+
+await main()

package/dist/codegen/zod-introspection.js

@@ -183,18 +183,27 @@ export function getMetaDescription(schema) {
     if (!meta || Object.keys(meta).length === 0) {
         return undefined;
     }
-    // If meta only has a description key, return just the description
     const keys = Object.keys(meta);
-    if (keys.length === 1 && keys[0] === 'description' && typeof meta.description === 'string') {
-        return meta.description;
+    const standardKeys = new Set(['title', 'description']);
+    const hasExtraKeys = keys.some((k) => !standardKeys.has(k));
+    // If meta has non-standard keys (e.g. id, required, deprecated),
+    // return JSON representation of the entire meta object so all metadata is preserved
+    if (hasExtraKeys) {
+        try {
+            return JSON.stringify(meta, null, 2);
+        }
+        catch {
+            // If JSON serialization fails, fall through
+        }
     }
+    // For standard keys only (title, description), prefer description then title
     if (typeof meta.description === 'string') {
         return meta.description;
     }
     if (typeof meta.title === 'string') {
         return meta.title;
     }
-    // Otherwise, return JSON representation of the entire meta object
+    // Fallback: return JSON representation of the entire meta object
     try {
         return JSON.stringify(meta, null, 2);
     }

package/dist/commands/login.js

@@ -1,4 +1,5 @@
 import { Flags } from '@oclif/core';
+import { select } from '@inquirer/prompts';
 import { BaseCommand } from '../index.js';
 import { decodeJWT, pollForToken, requestDeviceCode } from '../util/oauth-client.js';
 import { getApiUrl } from '../util/domain-urls.js';
@@ -53,6 +54,8 @@ export default class Login extends BaseCommand {
         // Resolve org_id → workspace UUID via the API
         let workspaceId;
         let workspaceName;
+        let workspaceSlug;
+        let organizationName;
         try {
             const apiUrl = getApiUrl();
             this.verboseLog('Resolving workspace...', { apiUrl, orgId });
@@ -66,14 +69,28 @@ export default class Login extends BaseCommand {
             });
             if (res.ok) {
                 const body = await res.json();
-                const workspaces = body.json ?? body;
-                const match = Array.isArray(workspaces)
-                    ? workspaces.find((w) => w.workosOrgId === orgId) ?? workspaces[0]
-                    : undefined;
+                const allWorkspaces = (body.json ?? body);
+                const orgWorkspaces = Array.isArray(allWorkspaces)
+                    ? allWorkspaces.filter((w) => w.workosOrgId === orgId)
+                    : [];
+                const candidates = orgWorkspaces.length > 0 ? orgWorkspaces : (Array.isArray(allWorkspaces) ? allWorkspaces : []);
+                let match;
+                if (candidates.length === 1) {
+                    match = candidates[0];
+                }
+                else if (candidates.length > 1) {
+                    const chosen = await select({
+                        choices: candidates.map((w) => ({ name: w.workspaceSlug, value: w.workspaceId })),
+                        message: 'Select workspace:',
+                    });
+                    match = candidates.find((w) => w.workspaceId === chosen);
+                }
                 if (match) {
                     workspaceId = match.workspaceId;
-                    workspaceName = match.organizationName;
-                    this.verboseLog('Resolved workspace', { workspaceId, workspaceName });
+                    workspaceName = match.workspaceSlug;
+                    workspaceSlug = match.workspaceSlug;
+                    organizationName = match.organizationName;
+                    this.verboseLog('Resolved workspace', { workspaceId, workspaceName, workspaceSlug, organizationName });
                 }
             }
             else {
@@ -95,6 +112,7 @@ export default class Login extends BaseCommand {
                 [profileName]: {
                     workspace: workspaceId || orgId || 'unknown',
                     workspaceName: workspaceName || (orgId ? `org:${orgId}` : undefined),
+                    workspaceSlug,
                 },
             },
         });
@@ -108,6 +126,9 @@ export default class Login extends BaseCommand {
         }
         if (workspaceName) {
             this.log(`Workspace: ${workspaceName} (${workspaceId})`);
+            if (organizationName) {
+                this.log(`Organization: ${organizationName}`);
+            }
         }
         else if (orgId) {
             this.log(`Organization: ${orgId}`);

package/dist/commands/mcp.js

@@ -12,7 +12,7 @@ export default class Mcp extends BaseCommand {
     static examples = [
         '<%= config.bin %> <%= command.id %>',
         '<%= config.bin %> <%= command.id %> --editor cursor',
-        '<%= config.bin %> <%= command.id %> --url http://local-app.goatsofquonfig.com:3003/api/v1/mcp',
+        '<%= config.bin %> <%= command.id %> --url http://local-app.quonfig-staging.com:3003/api/v1/mcp',
     ];
     static flags = {
         ...BaseCommand.baseFlags,

package/dist/commands/pull.d.ts

@@ -0,0 +1,15 @@
+import type { JsonObj } from '../result.js';
+import { BaseCommand } from '../index.js';
+export default class Pull extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        dir: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        workspace: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+    };
+    run(): Promise<JsonObj | void>;
+    private resolveRepoUrl;
+    private refreshAndGetUrl;
+    private looksLike401;
+    private maybeWriteQuonfigDir;
+}

package/dist/commands/pull.js

@@ -0,0 +1,176 @@
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import { Flags } from '@oclif/core';
+import { BaseCommand } from '../index.js';
+import { getActiveProfile, loadAuthConfig } from '../util/token-storage.js';
+import { loadGiteaToken, isGiteaTokenExpired, saveGiteaToken } from '../util/gitea-token-storage.js';
+import { mintAndStoreGiteaReadToken, mintGiteaToken } from '../util/gitea-api.js';
+import { isGitRepo, getRemoteUrl, isWorkingTreeClean, gitFetch, gitSetRemote, canFastForward, hasDivergedFromRemote, gitMergeFfOnly, gitClone, displayUrl, } from '../util/git-ops.js';
+export default class Pull extends BaseCommand {
+    static description = 'Clone or update a local directory from the workspace Gitea repo';
+    static examples = [
+        '<%= config.bin %> pull --dir ./our-config',
+        '<%= config.bin %> pull  # uses QUONFIG_DIR env var',
+    ];
+    static flags = {
+        dir: Flags.string({
+            description: 'Local directory to clone/update (defaults to QUONFIG_DIR env var)',
+        }),
+        workspace: Flags.string({
+            description: 'Workspace ID (defaults to active profile)',
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Pull);
+        // Resolve target directory
+        const dir = flags.dir || process.env.QUONFIG_DIR;
+        if (!dir) {
+            return this.err('No directory specified. Use --dir <path> or set QUONFIG_DIR.');
+        }
+        const resolvedDir = path.resolve(dir);
+        // Resolve workspace ID
+        let workspaceId = flags.workspace;
+        if (!workspaceId) {
+            const authConfig = await loadAuthConfig();
+            if (!authConfig) {
+                return this.err('Not logged in. Please run `qfg login` first.');
+            }
+            const activeProfile = getActiveProfile();
+            const profile = authConfig.profiles[activeProfile] || authConfig.profiles[authConfig.defaultProfile || 'default'];
+            if (!profile) {
+                return this.err('No active profile found. Please run `qfg login` first.');
+            }
+            workspaceId = profile.workspace;
+        }
+        this.verboseLog('Pull', { workspaceId, dir: resolvedDir });
+        // Get or mint Gitea read token
+        const repoUrl = await this.resolveRepoUrl(workspaceId);
+        // Perform git operation
+        const isRepo = await isGitRepo(resolvedDir);
+        if (!isRepo) {
+            // Clone fresh
+            this.log(`Cloning workspace into ${resolvedDir}...`);
+            try {
+                await gitClone(repoUrl, resolvedDir);
+            }
+            catch (err) {
+                // On 401, refresh token and retry once
+                if (this.looksLike401(err)) {
+                    this.verboseLog('Pull', 'Got 401, refreshing Gitea token...');
+                    const freshUrl = await this.refreshAndGetUrl(workspaceId);
+                    await gitClone(freshUrl, resolvedDir);
+                }
+                else {
+                    throw err;
+                }
+            }
+            this.log(`Cloned successfully into ${resolvedDir}`);
+        }
+        else {
+            // Existing repo — check remote
+            const existingRemote = await getRemoteUrl(resolvedDir);
+            const expectedUrlBase = stripAuth(repoUrl);
+            if (existingRemote && stripAuth(existingRemote) !== expectedUrlBase) {
+                return this.err(`Directory has a different git remote:\n  existing: ${displayUrl(existingRemote)}\n  expected: ${expectedUrlBase}\n\nResolve manually or use a different --dir.`);
+            }
+            // Update the remote URL to use current (possibly refreshed) token
+            await gitSetRemote(resolvedDir, repoUrl);
+            // Check working tree
+            const clean = await isWorkingTreeClean(resolvedDir);
+            if (!clean) {
+                return this.err('Local changes present — commit, stash, or run `git reset --hard origin/main` to discard.');
+            }
+            // Fetch
+            this.log('Fetching from remote...');
+            try {
+                await gitFetch(resolvedDir);
+            }
+            catch (err) {
+                if (this.looksLike401(err)) {
+                    this.verboseLog('Pull', 'Got 401 on fetch, refreshing Gitea token...');
+                    const freshUrl = await this.refreshAndGetUrl(workspaceId);
+                    await gitSetRemote(resolvedDir, freshUrl);
+                    await gitFetch(resolvedDir);
+                }
+                else {
+                    throw err;
+                }
+            }
+            const ff = await canFastForward(resolvedDir);
+            const diverged = !ff && (await hasDivergedFromRemote(resolvedDir));
+            if (diverged) {
+                return this.err('Local commits diverge from remote — resolve manually.');
+            }
+            if (!ff) {
+                this.log('Already up to date.');
+                return { dir: resolvedDir, newCommits: [], workspaceId };
+            }
+            // Merge
+            const newCommits = await gitMergeFfOnly(resolvedDir);
+            if (newCommits.length > 0) {
+                this.log(`Pulled ${newCommits.length} new commit(s):`);
+                for (const msg of newCommits) {
+                    this.log(`  - ${msg}`);
+                }
+            }
+            else {
+                this.log('Updated successfully.');
+            }
+        }
+        // Write QUONFIG_DIR to ~/.quonfig/config if not set
+        await this.maybeWriteQuonfigDir(resolvedDir);
+        return { dir: resolvedDir, workspaceId };
+    }
+    async resolveRepoUrl(workspaceId) {
+        let entry = await loadGiteaToken(workspaceId);
+        if (!entry || isGiteaTokenExpired(entry)) {
+            this.verboseLog('Pull', 'Minting new Gitea read token...');
+            entry = await mintAndStoreGiteaReadToken(workspaceId);
+        }
+        return entry.repoUrl;
+    }
+    async refreshAndGetUrl(workspaceId) {
+        const data = await mintGiteaToken(workspaceId, 'read', 'pull');
+        const entry = { token: data.token, repoUrl: data.repoUrl, expiresAt: data.expiresAt };
+        await saveGiteaToken(workspaceId, entry);
+        return entry.repoUrl;
+    }
+    looksLike401(err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return msg.includes('401') || msg.toLowerCase().includes('authentication failed');
+    }
+    async maybeWriteQuonfigDir(dir) {
+        if (process.env.QUONFIG_DIR)
+            return; // already set via env
+        const os = await import('node:os');
+        const pathMod = await import('node:path');
+        const configFilePath = pathMod.join(os.homedir(), '.quonfig', 'config');
+        try {
+            const existing = await fs.promises.readFile(configFilePath, 'utf8').catch(() => '');
+            if (existing.includes('QUONFIG_DIR') || existing.includes('quonfig_dir'))
+                return;
+            const line = `\nQUONFIG_DIR = ${dir}\n`;
+            await fs.promises.appendFile(configFilePath, line, 'utf8');
+            this.verboseLog('Pull', `Wrote QUONFIG_DIR to ${configFilePath}`);
+        }
+        catch {
+            // Non-fatal
+        }
+    }
+}
+/**
+ * Strip auth credentials from a git URL for comparison purposes.
+ * Converts `https://user:token@host/path` to `https://host/path`.
+ */
+function stripAuth(url) {
+    try {
+        const u = new URL(url);
+        u.username = '';
+        u.password = '';
+        return u.toString();
+    }
+    catch {
+        // Not a valid URL (e.g. SSH) — return as-is
+        return url;
+    }
+}

package/dist/commands/serve.js

@@ -47,7 +47,9 @@ export default class Serve extends BaseCommand {
         }
         catch (error_) {
             const error = error_;
-            if (/No projectEnvId found in config/.test(error.message) || /Unexpected end of JSON input/.test(error.message)) {
+            if (/No projectEnvId found in config/.test(error.message) ||
+                /is not iterable/.test(error.message) ||
+                /Unexpected end of JSON input/.test(error.message)) {
                 return this.error(`${error.message}\nYour download file seems invalid or corrupt. Please redownload your datafile.`);
             }
             return this.error(error);

package/dist/commands/sync.d.ts

@@ -0,0 +1,18 @@
+import type { JsonObj } from '../result.js';
+import { BaseCommand } from '../index.js';
+export default class Sync extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        dir: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        interval: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<number, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        watch: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+    };
+    private workspaceId;
+    private resolvedDir;
+    run(): Promise<JsonObj | void>;
+    private runSync;
+    private ensureRemoteUrl;
+    private refreshToken;
+    private looksLike401;
+}