@quonfig/cli 0.0.20 → 0.0.21

package/README.md

@@ -14,7 +14,7 @@ $ npm install -g @quonfig/cli
 $ qfg COMMAND
 running command...
 $ qfg (--version)
-@quonfig/cli/0.0.20 linux-x64 node-v24.4.1
+@quonfig/cli/0.0.21 linux-x64 node-v24.4.1
 $ qfg --help [COMMAND]
 USAGE
   $ qfg COMMAND
@@ -45,7 +45,7 @@ USAGE
 * [`qfg migrate doctor`](#qfg-migrate-doctor)
 * [`qfg migrate my-code`](#qfg-migrate-my-code)
 * [`qfg migrate status`](#qfg-migrate-status)
-* [`qfg override [NAME]`](#qfg-override-name)
+* [`qfg override [NAME] [VALUE]`](#qfg-override-name-value)
 * [`qfg pull`](#qfg-pull)
 * [`qfg push`](#qfg-push)
 * [`qfg schema NAME`](#qfg-schema-name)
@@ -91,7 +91,7 @@ EXAMPLES
   $ qfg config-schema --json-schema    # full JSON Schema document (copy into your editor)
 ```
 
-_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/config-schema.ts)_
+_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/config-schema.ts)_
 
 ## `qfg create NAME`
 
@@ -99,9 +99,9 @@ Create a new feature flag, config value, or other item.
 
 ```
 USAGE
-  $ qfg create NAME --type boolean-flag|boolean|string|double|int|string-list|json|log_level [--json]
-    [--interactive] [--no-color] [--verbose] [-w <value>] [--confidential] [--env-var <value>] [--value <value>]
-    [--secret] [--secret-key-name <value>]
+  $ qfg create NAME --type boolean-flag|boolean|string|double|int|string-list|json|duration|log_level
+    [--json] [--interactive] [--no-color] [--verbose] [-w <value>] [--confidential] [--env-var <value>] [--value
+    <value>] [--secret] [--secret-key-name <value>]
 
 ARGUMENTS
   NAME  name for your new item (e.g. my.new.flag)
@@ -113,7 +113,7 @@ FLAGS
   --secret-key-name=<value>  [default: quonfig.secrets.encryption.key] name of the secret key to use for
                              encryption/decryption
   --type=<option>            (required)
-                             <options: boolean-flag|boolean|string|double|int|string-list|json|log_level>
+                             <options: boolean-flag|boolean|string|double|int|string-list|json|duration|log_level>
   --value=<value>            default value for your new item
 
 GLOBAL FLAGS
@@ -134,6 +134,7 @@ DESCRIPTION
   string-list   A comma-separated list of strings
   json          An arbitrary JSON blob
   boolean       A plain boolean (not a feature flag)
+  duration      An ISO 8601 duration string, e.g. PT30S, PT5M, PT1H30M (SDK returns milliseconds)
   log_level     A dynamic log level (value must be one of TRACE/DEBUG/INFO/WARN/ERROR/FATAL)
 
   This sets the global default value. Override per-environment with:
@@ -166,6 +167,8 @@ EXAMPLES
 
   $ qfg create my.new.string --type json --value="{\"key\": \"value\"}"
 
+  $ qfg create my.timeout --type duration --value PT90S
+
   $ qfg create log-level.my-app --type log_level --value WARN
 
   # After creating a flag, set a 20% rollout in production:
@@ -173,7 +176,7 @@ EXAMPLES
   $ qfg set-rollout my.new.flag --environment production --true-percent 20
 ```
 
-_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/create.ts)_
+_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/create.ts)_
 
 ## `qfg flag info [NAME]`
 
@@ -312,11 +315,14 @@ Generate type definitions for your Quonfig configuration
 ```
 USAGE
   $ qfg generate [--json] [--interactive] [--no-color] [--verbose] [--dir <value>] [-o <value>] [--targets
-    <value>]
+    <value>] [-w <value>]
 
 FLAGS
   -o, --output-directory=<value>  Override the output directory for generated files
-      --dir=<value>               Path to local QUONFIG_DIR (defaults to QUONFIG_DIR env var)
+  -w, --workspace=<value>         Workspace slug or UUID for the remote-fetch path (defaults to QUONFIG_WORKSPACE env
+                                  var or active profile). Only used when --dir is omitted.
+      --dir=<value>               Path to local QUONFIG_DIR (defaults to QUONFIG_DIR env var). When omitted, fetches the
+                                  workspace from the server using your active credentials.
       --targets=<value>           [default: react-ts] Determines for language/framework to generate code for (node-ts,
                                   react-ts)
 
@@ -373,7 +379,7 @@ EXAMPLES
   $ qfg generate --targets node-ts -o ./dist # combine with targets
 ```
 
-_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/generate.ts)_
+_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/generate.ts)_
 
 ## `qfg generate-new-hex-key`
 
@@ -396,7 +402,7 @@ EXAMPLES
   $ qfg generate-new-hex-key
 ```
 
-_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/generate-new-hex-key.ts)_
+_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/generate-new-hex-key.ts)_
 
 ## `qfg get [NAME]`
 
@@ -428,7 +434,7 @@ EXAMPLES
   $ qfg get my.config.name --environment=production
 ```
 
-_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/get.ts)_
+_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/get.ts)_
 
 ## `qfg info [NAME]`
 
@@ -476,7 +482,7 @@ EXAMPLES
   $ qfg info my.config.name --exclude-evaluations   # skip 24h stats
 ```
 
-_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/info.ts)_
 
 ## `qfg init [DIRECTORY]`
 
@@ -516,7 +522,7 @@ EXAMPLES
   $ qfg init --dry-run
 ```
 
-_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/init.ts)_
 
 ## `qfg interactive`
 
@@ -546,7 +552,7 @@ EXAMPLES
   $ qfg
 ```
 
-_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/interactive.ts)_
+_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/interactive.ts)_
 
 ## `qfg list`
 
@@ -586,7 +592,7 @@ EXAMPLES
   $ qfg list --feature-flags
 ```
 
-_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/list.ts)_
+_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/list.ts)_
 
 ## `qfg log-level NAME`
 
@@ -651,7 +657,7 @@ EXAMPLES
   $ qfg log-level log-level.my-app --target=Chatty --value=INFO --environment=production
 ```
 
-_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/log-level.ts)_
+_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/log-level.ts)_
 
 ## `qfg login`
 
@@ -676,7 +682,7 @@ EXAMPLES
   $ qfg login --profile myprofile
 ```
 
-_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/login.ts)_
 
 ## `qfg logout`
 
@@ -699,7 +705,7 @@ EXAMPLES
   $ qfg logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/logout.ts)_
 
 ## `qfg mcp`
 
@@ -732,7 +738,7 @@ EXAMPLES
   $ qfg mcp --url http://local-app.quonfig-staging.com:3003/api/v1/mcp
 ```
 
-_See code: [src/commands/mcp.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/mcp.ts)_
+_See code: [src/commands/mcp.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/mcp.ts)_
 
 ## `qfg migrate`
 
@@ -786,7 +792,7 @@ EXAMPLES
   $ qfg migrate --from launch --api-key $LAUNCH_API_KEY --dir ./quonfig-config --staging
 ```
 
-_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/migrate.ts)_
+_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/migrate.ts)_
 
 ## `qfg migrate doctor`
 
@@ -824,7 +830,7 @@ EXAMPLES
   $ qfg migrate doctor --json
 ```
 
-_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/migrate/doctor.ts)_
+_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/migrate/doctor.ts)_
 
 ## `qfg migrate my-code`
 
@@ -856,7 +862,7 @@ EXAMPLES
   $ qfg migrate my-code --dry-run
 ```
 
-_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/migrate/my-code.ts)_
+_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/migrate/my-code.ts)_
 
 ## `qfg migrate status`
 
@@ -887,24 +893,25 @@ EXAMPLES
   $ qfg migrate status --json
 ```
 
-_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/migrate/status.ts)_
+_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/migrate/status.ts)_
 
-## `qfg override [NAME]`
+## `qfg override [NAME] [VALUE]`
 
-Override the value of an item for your user/SDK key combo.
+Override a flag value for your dev user.
 
 ```
 USAGE
-  $ qfg override [NAME] [--json] [--interactive] [--no-color] [--verbose] [-w <value>] [--environment <value>]
-    [--remove] [--value <value>]
+  $ qfg override [NAME] [VALUE] [--json] [--interactive] [--no-color] [--verbose] [-w <value>] [--clear]
+    [--env <value>] [--remove]
 
 ARGUMENTS
-  NAME  config/feature-flag/etc. name
+  NAME   flag/config key to override
+  VALUE  new value (type inferred: bool/int/double/json/string)
 
 FLAGS
-  --environment=<value>  environment to override in
-  --remove               remove your override (if present)
-  --value=<value>        value to use for your override
+  --clear        remove ALL of your overrides in this env
+  --env=<value>  environment to operate in (default: $QUONFIG_ENVIRONMENT)
+  --remove       remove your override on this key
 
 GLOBAL FLAGS
   -w, --workspace=<value>  Workspace slug to use (overrides QUONFIG_WORKSPACE env var and saved default)
@@ -914,24 +921,34 @@ GLOBAL FLAGS
       --verbose            Verbose output
 
 DESCRIPTION
-  Override the value of an item for your user/SDK key combo.
+  Override a flag value for your dev user.
 
-  To target users other than yourself, or to express rules like "user.email == X → value Y",
-  you cannot use override — see:
-  qfg config-schema   # operator reference + worked multi-rule example
-  qfg pull            # clone the workspace so you can edit JSON directly
+  Writes a top-priority rule keyed on the dev-only quonfig-user.email property,
+  so the override only fires for SDK clients that set quonfig-user.email in
+  their context. Production SDKs typically don't set this property, which makes
+  overrides effectively inert in production.
+
+  Examples
+  qfg override                                # list flags where you have an override
+  qfg override my.flag true                   # set bool override
+  qfg override my.flag 42                     # set int override
+  qfg override my.flag '{"a":1}'              # set json override
+  qfg override my.flag --remove               # remove your override on my.flag
+  qfg override --clear                        # remove ALL of your overrides in this env
 
 EXAMPLES
-  $ qfg override # will prompt for name and value
+  $ qfg override
+
+  $ qfg override my.flag true
 
-  $ qfg override my.flag.name --value=true
+  $ qfg override my.flag --remove
 
-  $ qfg override my.flag.name --remove
+  $ qfg override --clear
 
-  $ qfg override my.double.config --value=3.14159
+  $ qfg override my.flag true --env=staging
 ```
 
-_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/override.ts)_
+_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/override.ts)_
 
 ## `qfg pull`
 
@@ -975,7 +992,7 @@ EXAMPLES
   $ qfg pull  # uses QUONFIG_DIR env var
 ```
 
-_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/pull.ts)_
+_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/pull.ts)_
 
 ## `qfg push`
 
@@ -1023,7 +1040,7 @@ EXAMPLES
   $ qfg push --dir ./our-config --yes
 ```
 
-_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/push.ts)_
+_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/push.ts)_
 
 ## `qfg schema NAME`
 
@@ -1061,7 +1078,7 @@ EXAMPLES
   $ qfg schema my-schema --set-json-schema=@schemas/my-schema.json --protected
 ```
 
-_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/schema.ts)_
+_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/schema.ts)_
 
 ## `qfg sdk-key`
 
@@ -1088,7 +1105,7 @@ EXAMPLES
   $ qfg sdk-key revoke <key-id>
 ```
 
-_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sdk-key.ts)_
+_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/sdk-key.ts)_
 
 ## `qfg sdk-key create`
 
@@ -1120,7 +1137,7 @@ EXAMPLES
   $ qfg sdk-key create --environment staging --type browser
 ```
 
-_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sdk-key/create.ts)_
+_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/sdk-key/create.ts)_
 
 ## `qfg sdk-key list`
 
@@ -1149,7 +1166,7 @@ EXAMPLES
   $ qfg sdk-key list --environment production
 ```
 
-_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sdk-key/list.ts)_
+_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/sdk-key/list.ts)_
 
 ## `qfg sdk-key revoke KEYID`
 
@@ -1176,7 +1193,7 @@ EXAMPLES
   $ qfg sdk-key revoke a1b2c3d4-e5f6-7890-abcd-ef1234567890
 ```
 
-_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sdk-key/revoke.ts)_
+_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/sdk-key/revoke.ts)_
 
 ## `qfg set-default [NAME]`
 
@@ -1247,7 +1264,7 @@ EXAMPLES
   $ qfg pull && qfg config-schema
 ```
 
-_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/set-default.ts)_
+_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/set-default.ts)_
 
 ## `qfg set-rollout [NAME]`
 
@@ -1324,7 +1341,7 @@ EXAMPLES
   $ qfg set-rollout my.variant.flag --environment production --weights "a:33,b:33,c:34" --hash-by user.id
 ```
 
-_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/set-rollout.ts)_
+_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/set-rollout.ts)_
 
 ## `qfg sync`
 
@@ -1356,7 +1373,7 @@ EXAMPLES
   $ qfg sync --watch --dir ./our-config --interval 30
 ```
 
-_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/sync.ts)_
+_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/sync.ts)_
 
 ## `qfg toggle [NAME]`
 
@@ -1458,7 +1475,7 @@ EXAMPLES
   $ qfg verify --json
 ```
 
-_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/verify.ts)_
+_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/verify.ts)_
 
 ## `qfg whoami`
 
@@ -1481,7 +1498,7 @@ EXAMPLES
   $ qfg whoami
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/whoami.ts)_
 
 ## `qfg workspace`
 
@@ -1504,7 +1521,7 @@ EXAMPLES
   $ qfg workspace
 ```
 
-_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/workspace.ts)_
+_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/workspace.ts)_
 
 ## `qfg workspace bootstrap`
 
@@ -1537,7 +1554,7 @@ EXAMPLES
   $ qfg workspace bootstrap --dir ./our-config --skip-validate
 ```
 
-_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/workspace/bootstrap.ts)_
+_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/workspace/bootstrap.ts)_
 
 ## `qfg workspace create SLUG`
 
@@ -1571,7 +1588,7 @@ EXAMPLES
   $ qfg workspace create my-team --org 11111111-1111-1111-1111-111111111111
 ```
 
-_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/workspace/create.ts)_
+_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/workspace/create.ts)_
 
 ## `qfg workspace switch [SLUG]`
 
@@ -1599,7 +1616,7 @@ EXAMPLES
   $ qfg workspace switch my-workspace-slug
 ```
 
-_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.20/src/commands/workspace/switch.ts)_
+_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.21/src/commands/workspace/switch.ts)_
 <!-- commandsstop -->
 
 ## Local Development

package/dist/codegen/fetch-workspace-snapshot.d.ts

@@ -0,0 +1,18 @@
+import type { BaseCommand } from '../index.js';
+export interface WorkspaceSnapshot {
+    cleanup: () => Promise<void>;
+    dir: string;
+}
+/**
+ * Clone the active workspace into a fresh OS tmp directory and return its path
+ * along with a cleanup callback. Used by `qfg generate` so codegen works
+ * without requiring `qfg pull` first or a long-lived `--dir` checkout.
+ *
+ * Mirrors `qfg pull`'s auth/clone path: resolves workspace from
+ * QUONFIG_API_KEY/QUONFIG_WORKSPACE or active OAuth profile, mints a Gitea
+ * read token (refreshing on 401), then `git clone`s into the tmp dir. The
+ * caller is responsible for calling `cleanup()` in a `finally` block.
+ */
+export declare function fetchWorkspaceSnapshot(command: BaseCommand, options?: {
+    workspace?: string;
+}): Promise<WorkspaceSnapshot>;

package/dist/codegen/fetch-workspace-snapshot.js

@@ -0,0 +1,52 @@
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { mintAndStoreGiteaReadToken } from '../util/gitea-api.js';
+import { isGiteaTokenExpired, loadGiteaToken } from '../util/gitea-token-storage.js';
+import { gitClone } from '../util/git-ops.js';
+import { resolveWorkspaceUuid } from '../util/resolve-workspace.js';
+const looksLike401 = (err) => {
+    const msg = err instanceof Error ? err.message : String(err);
+    return msg.includes('401') || msg.toLowerCase().includes('authentication failed');
+};
+/**
+ * Clone the active workspace into a fresh OS tmp directory and return its path
+ * along with a cleanup callback. Used by `qfg generate` so codegen works
+ * without requiring `qfg pull` first or a long-lived `--dir` checkout.
+ *
+ * Mirrors `qfg pull`'s auth/clone path: resolves workspace from
+ * QUONFIG_API_KEY/QUONFIG_WORKSPACE or active OAuth profile, mints a Gitea
+ * read token (refreshing on 401), then `git clone`s into the tmp dir. The
+ * caller is responsible for calling `cleanup()` in a `finally` block.
+ */
+export async function fetchWorkspaceSnapshot(command, options = {}) {
+    const workspaceId = await resolveWorkspaceUuid(command, options.workspace);
+    let entry = await loadGiteaToken(workspaceId);
+    if (!entry || isGiteaTokenExpired(entry)) {
+        command.verboseLog('fetchWorkspaceSnapshot', 'Minting new Gitea read token...');
+        entry = await mintAndStoreGiteaReadToken(workspaceId);
+    }
+    const tmpDir = await fs.promises.mkdtemp(path.join(os.tmpdir(), 'qfg-codegen-'));
+    const cleanup = () => fs.promises.rm(tmpDir, { force: true, recursive: true });
+    try {
+        command.verboseLog('fetchWorkspaceSnapshot', `Cloning workspace ${workspaceId} into ${tmpDir}...`);
+        try {
+            await gitClone(entry.repoUrl, tmpDir);
+        }
+        catch (error) {
+            if (looksLike401(error)) {
+                command.verboseLog('fetchWorkspaceSnapshot', 'Got 401 on clone, refreshing Gitea token...');
+                const fresh = await mintAndStoreGiteaReadToken(workspaceId);
+                await gitClone(fresh.repoUrl, tmpDir);
+            }
+            else {
+                throw error;
+            }
+        }
+    }
+    catch (error) {
+        await cleanup();
+        throw error;
+    }
+    return { cleanup, dir: tmpDir };
+}

package/dist/codegen/local-config-reader.js

@@ -10,7 +10,12 @@ function mapGitValue(gitValue) {
             return { value: { int: value } };
         }
         case 'json': {
-            return { value: { json: { json: value } } };
+            // Git-native value may be a parsed JS value (canonical, what `qfg
+            // pull` and our-config produce) or a pre-stringified JSON string
+            // (legacy). Downstream codegen JSON.parses this string, so emit a
+            // string either way.
+            const jsonString = typeof value === 'string' ? value : JSON.stringify(value);
+            return { value: { json: { json: jsonString } } };
         }
         case 'log_level': {
             return { value: { logLevel: value } };

package/dist/commands/create.js

@@ -22,6 +22,7 @@ Use --type to specify the kind of item:
   string-list   A comma-separated list of strings
   json          An arbitrary JSON blob
   boolean       A plain boolean (not a feature flag)
+  duration      An ISO 8601 duration string, e.g. PT30S, PT5M, PT1H30M (SDK returns milliseconds)
   log_level     A dynamic log level (value must be one of ${LOG_LEVELS.join('/')})
 
 This sets the global default value. Override per-environment with:
@@ -47,6 +48,7 @@ Log levels:
         '<%= config.bin %> <%= command.id %> my.new.string --type string --value="hello world" --secret',
         '<%= config.bin %> <%= command.id %> my.new.string --type string --env-var=MY_ENV_VAR_NAME',
         '<%= config.bin %> <%= command.id %> my.new.string --type json --value="{\\"key\\": \\"value\\"}"',
+        '<%= config.bin %> <%= command.id %> my.timeout --type duration --value PT90S',
         '<%= config.bin %> <%= command.id %> log-level.my-app --type log_level --value WARN',
         '# After creating a flag, set a 20% rollout in production:',
         '<%= config.bin %> set-rollout my.new.flag --environment production --true-percent 20',
@@ -55,7 +57,7 @@ Log levels:
         confidential: Flags.boolean({ default: false, description: 'mark the value as confidential' }),
         'env-var': Flags.string({ description: 'environment variable to get value from' }),
         type: Flags.string({
-            options: ['boolean-flag', 'boolean', 'string', 'double', 'int', 'string-list', 'json', 'log_level'],
+            options: ['boolean-flag', 'boolean', 'string', 'double', 'int', 'string-list', 'json', 'duration', 'log_level'],
             required: true,
         }),
         value: Flags.string({ description: 'default value for your new item', required: false }),

package/dist/commands/generate.d.ts

@@ -7,6 +7,7 @@ export default class Generate extends BaseCommand {
         dir: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         'output-directory': import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         targets: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        workspace: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
     };
     static summary: string;
     run(): Promise<JsonObj | void>;

package/dist/commands/generate.js

@@ -4,6 +4,7 @@ import * as path from 'node:path';
 import { z } from 'zod';
 import { NodeTypeScriptGenerator } from '../codegen/code-generators/node-typescript-generator.js';
 import { ReactTypeScriptGenerator } from '../codegen/code-generators/react-typescript-generator.js';
+import { fetchWorkspaceSnapshot } from '../codegen/fetch-workspace-snapshot.js';
 import { LocalConfigReader } from '../codegen/local-config-reader.js';
 import { SupportedLanguage } from '../codegen/types.js';
 import { BaseCommand } from '../index.js';
@@ -109,7 +110,7 @@ Example quonfig.config.json:
     ];
     static flags = {
         dir: Flags.string({
-            description: 'Path to local QUONFIG_DIR (defaults to QUONFIG_DIR env var)',
+            description: 'Path to local QUONFIG_DIR (defaults to QUONFIG_DIR env var). When omitted, fetches the workspace from the server using your active credentials.',
             env: 'QUONFIG_DIR',
         }),
         'output-directory': Flags.string({
@@ -120,16 +121,25 @@ Example quonfig.config.json:
             default: SupportedLanguage.React,
             description: `Determines for language/framework to generate code for (${Object.values(SupportedLanguage).join(', ')})`,
         }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'Workspace slug or UUID for the remote-fetch path (defaults to QUONFIG_WORKSPACE env var or active profile). Only used when --dir is omitted.',
+        }),
     };
     static summary = 'Generate type definitions for your Quonfig configuration';
     async run() {
         const { flags } = await this.parse(Generate);
         this.verboseLog('=== GENERATE COMMAND START ===');
+        let snapshot;
         try {
-            // Resolve workspace directory
-            const dir = flags.dir;
+            // When --dir/QUONFIG_DIR is set, read the local checkout (so users
+            // who edit flag JSON in place keep that workflow). Otherwise clone
+            // the workspace into a tmp dir for codegen-only callers.
+            let dir = flags.dir;
             if (!dir) {
-                this.error('No directory specified. Run `qfg pull` first or pass --dir <path>.');
+                this.verboseLog('No --dir/QUONFIG_DIR set; fetching workspace snapshot from server...');
+                snapshot = await fetchWorkspaceSnapshot(this, { workspace: flags.workspace });
+                dir = snapshot.dir;
             }
             // Look for and read local quonfig.config.json file
             const localConfig = await this.readLocalConfig(flags['output-directory']);
@@ -142,6 +152,7 @@ Example quonfig.config.json:
             const configFile = await reader.read();
             this.verboseLog(`Config read complete. Found ${configFile.configs.length} configs.`);
             const fileCreationPromises = [];
+            let needsMustache = false;
             for (const target of targets) {
                 // Resolve the language input
                 const language = this.resolveLanguage(target);
@@ -154,6 +165,9 @@ Example quonfig.config.json:
                 console.log(`Generating ${language} code for configs...`);
                 const generatedCode = generator.generate();
                 this.verboseLog(`Code generation complete. Size: ${generatedCode.length}`);
+                if (generatedCode.includes("from 'mustache'")) {
+                    needsMustache = true;
+                }
                 const fileManager = createFileManager({ outputDirectory: outputDir, verboseLog: this.verboseLog.bind(this) });
                 fileCreationPromises.push(fileManager.writeFile({ data: generatedCode, filename: targetConfig.clientFileName }));
                 if ([SupportedLanguage.Node, SupportedLanguage.React].includes(language)) {
@@ -163,11 +177,26 @@ Example quonfig.config.json:
                 }
             }
             await Promise.all(fileCreationPromises);
+            if (needsMustache) {
+                console.log('\nNote: generated code imports `mustache` for templated config values.\n' +
+                    '      Add it to your project: `npm install mustache @types/mustache`\n' +
+                    '      (or pnpm/yarn equivalent).');
+            }
         }
         catch (error) {
             console.error('ERROR:', error);
             this.error(error);
         }
+        finally {
+            if (snapshot) {
+                try {
+                    await snapshot.cleanup();
+                }
+                catch (cleanupError) {
+                    this.verboseLog('Generate', `Snapshot cleanup failed: ${String(cleanupError)}`);
+                }
+            }
+        }
         this.verboseLog('=== GENERATE COMMAND END ===');
         return { success: true };
     }