@quonfig/cli 0.0.22 → 0.0.24

package/README.md

@@ -14,7 +14,7 @@ $ npm install -g @quonfig/cli
 $ qfg COMMAND
 running command...
 $ qfg (--version)
-@quonfig/cli/0.0.22 linux-x64 node-v24.4.1
+@quonfig/cli/0.0.24 linux-x64 node-v24.4.1
 $ qfg --help [COMMAND]
 USAGE
   $ qfg COMMAND
@@ -92,7 +92,7 @@ EXAMPLES
   $ qfg config-schema --json-schema    # full JSON Schema document (copy into your editor)
 ```
 
-_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/config-schema.ts)_
+_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/config-schema.ts)_
 
 ## `qfg create NAME`
 
@@ -177,7 +177,7 @@ EXAMPLES
   $ qfg set-rollout my.new.flag --environment production --true-percent 20
 ```
 
-_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/create.ts)_
+_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/create.ts)_
 
 ## `qfg delete NAME`
 
@@ -223,7 +223,7 @@ EXAMPLES
   $ qfg delete my.config --yes
 ```
 
-_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/delete.ts)_
+_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/delete.ts)_
 
 ## `qfg flag info [NAME]`
 
@@ -426,7 +426,7 @@ EXAMPLES
   $ qfg generate --targets node-ts -o ./dist # combine with targets
 ```
 
-_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/generate.ts)_
+_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/generate.ts)_
 
 ## `qfg generate-new-hex-key`
 
@@ -449,7 +449,7 @@ EXAMPLES
   $ qfg generate-new-hex-key
 ```
 
-_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/generate-new-hex-key.ts)_
+_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/generate-new-hex-key.ts)_
 
 ## `qfg get [NAME]`
 
@@ -481,7 +481,7 @@ EXAMPLES
   $ qfg get my.config.name --environment=production
 ```
 
-_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/get.ts)_
+_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/get.ts)_
 
 ## `qfg info [NAME]`
 
@@ -529,7 +529,7 @@ EXAMPLES
   $ qfg info my.config.name --exclude-evaluations   # skip 24h stats
 ```
 
-_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/info.ts)_
 
 ## `qfg init [DIRECTORY]`
 
@@ -569,7 +569,7 @@ EXAMPLES
   $ qfg init --dry-run
 ```
 
-_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/init.ts)_
 
 ## `qfg interactive`
 
@@ -599,7 +599,7 @@ EXAMPLES
   $ qfg
 ```
 
-_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/interactive.ts)_
+_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/interactive.ts)_
 
 ## `qfg list`
 
@@ -639,7 +639,7 @@ EXAMPLES
   $ qfg list --feature-flags
 ```
 
-_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/list.ts)_
+_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/list.ts)_
 
 ## `qfg log-level NAME`
 
@@ -704,7 +704,7 @@ EXAMPLES
   $ qfg log-level log-level.my-app --target=Chatty --value=INFO --environment=production
 ```
 
-_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/log-level.ts)_
+_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/log-level.ts)_
 
 ## `qfg login`
 
@@ -729,7 +729,7 @@ EXAMPLES
   $ qfg login --profile myprofile
 ```
 
-_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/login.ts)_
 
 ## `qfg logout`
 
@@ -752,7 +752,7 @@ EXAMPLES
   $ qfg logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/logout.ts)_
 
 ## `qfg mcp`
 
@@ -785,7 +785,7 @@ EXAMPLES
   $ qfg mcp --url http://local-app.quonfig-staging.com:3003/api/v1/mcp
 ```
 
-_See code: [src/commands/mcp.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/mcp.ts)_
+_See code: [src/commands/mcp.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/mcp.ts)_
 
 ## `qfg migrate`
 
@@ -839,7 +839,7 @@ EXAMPLES
   $ qfg migrate --from launch --api-key $LAUNCH_API_KEY --dir ./quonfig-config --staging
 ```
 
-_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/migrate.ts)_
+_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/migrate.ts)_
 
 ## `qfg migrate doctor`
 
@@ -877,7 +877,7 @@ EXAMPLES
   $ qfg migrate doctor --json
 ```
 
-_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/migrate/doctor.ts)_
+_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/migrate/doctor.ts)_
 
 ## `qfg migrate my-code`
 
@@ -909,7 +909,7 @@ EXAMPLES
   $ qfg migrate my-code --dry-run
 ```
 
-_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/migrate/my-code.ts)_
+_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/migrate/my-code.ts)_
 
 ## `qfg migrate status`
 
@@ -940,7 +940,7 @@ EXAMPLES
   $ qfg migrate status --json
 ```
 
-_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/migrate/status.ts)_
+_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/migrate/status.ts)_
 
 ## `qfg override [NAME] [VALUE]`
 
@@ -995,7 +995,7 @@ EXAMPLES
   $ qfg override my.flag true --env=staging
 ```
 
-_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/override.ts)_
+_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/override.ts)_
 
 ## `qfg pull`
 
@@ -1039,7 +1039,7 @@ EXAMPLES
   $ qfg pull  # uses QUONFIG_DIR env var
 ```
 
-_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/pull.ts)_
+_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/pull.ts)_
 
 ## `qfg push`
 
@@ -1087,7 +1087,7 @@ EXAMPLES
   $ qfg push --dir ./our-config --yes
 ```
 
-_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/push.ts)_
+_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/push.ts)_
 
 ## `qfg schema NAME`
 
@@ -1125,7 +1125,7 @@ EXAMPLES
   $ qfg schema my-schema --set-json-schema=@schemas/my-schema.json --protected
 ```
 
-_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/schema.ts)_
+_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/schema.ts)_
 
 ## `qfg sdk-key`
 
@@ -1152,7 +1152,7 @@ EXAMPLES
   $ qfg sdk-key revoke <key-id>
 ```
 
-_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/sdk-key.ts)_
+_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/sdk-key.ts)_
 
 ## `qfg sdk-key create`
 
@@ -1184,7 +1184,7 @@ EXAMPLES
   $ qfg sdk-key create --environment staging --type browser
 ```
 
-_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/sdk-key/create.ts)_
+_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/sdk-key/create.ts)_
 
 ## `qfg sdk-key list`
 
@@ -1213,7 +1213,7 @@ EXAMPLES
   $ qfg sdk-key list --environment production
 ```
 
-_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/sdk-key/list.ts)_
+_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/sdk-key/list.ts)_
 
 ## `qfg sdk-key revoke KEYID`
 
@@ -1240,7 +1240,7 @@ EXAMPLES
   $ qfg sdk-key revoke a1b2c3d4-e5f6-7890-abcd-ef1234567890
 ```
 
-_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/sdk-key/revoke.ts)_
+_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/sdk-key/revoke.ts)_
 
 ## `qfg set-default [NAME]`
 
@@ -1311,7 +1311,7 @@ EXAMPLES
   $ qfg pull && qfg config-schema
 ```
 
-_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/set-default.ts)_
+_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/set-default.ts)_
 
 ## `qfg set-rollout [NAME]`
 
@@ -1388,7 +1388,7 @@ EXAMPLES
   $ qfg set-rollout my.variant.flag --environment production --weights "a:33,b:33,c:34" --hash-by user.id
 ```
 
-_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/set-rollout.ts)_
+_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/set-rollout.ts)_
 
 ## `qfg sync`
 
@@ -1420,7 +1420,7 @@ EXAMPLES
   $ qfg sync --watch --dir ./our-config --interval 30
 ```
 
-_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/sync.ts)_
+_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/sync.ts)_
 
 ## `qfg toggle [NAME]`
 
@@ -1522,7 +1522,7 @@ EXAMPLES
   $ qfg verify --json
 ```
 
-_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/verify.ts)_
+_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/verify.ts)_
 
 ## `qfg whoami`
 
@@ -1545,7 +1545,7 @@ EXAMPLES
   $ qfg whoami
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/whoami.ts)_
 
 ## `qfg workspace`
 
@@ -1568,7 +1568,7 @@ EXAMPLES
   $ qfg workspace
 ```
 
-_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/workspace.ts)_
+_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/workspace.ts)_
 
 ## `qfg workspace bootstrap`
 
@@ -1601,7 +1601,7 @@ EXAMPLES
   $ qfg workspace bootstrap --dir ./our-config --skip-validate
 ```
 
-_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/workspace/bootstrap.ts)_
+_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/workspace/bootstrap.ts)_
 
 ## `qfg workspace create SLUG`
 
@@ -1635,7 +1635,7 @@ EXAMPLES
   $ qfg workspace create my-team --org 11111111-1111-1111-1111-111111111111
 ```
 
-_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/workspace/create.ts)_
+_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/workspace/create.ts)_
 
 ## `qfg workspace switch [SLUG]`
 
@@ -1663,7 +1663,7 @@ EXAMPLES
   $ qfg workspace switch my-workspace-slug
 ```
 
-_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.22/src/commands/workspace/switch.ts)_
+_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.24/src/commands/workspace/switch.ts)_
 <!-- commandsstop -->
 
 ## Local Development

package/dist/commands/log-level.js

@@ -122,9 +122,7 @@ For more complex rules (regex, multi-criterion, exact match) edit the JSON:
         // Merge semantics: if an existing rule has the same exact targeting
         // criterion (same propertyName, same valueToMatch set), replace its value.
         // Otherwise insert the new rule before the catch-all so it takes priority.
-        const existingRules = environment
-            ? findEnvRules(current, environment)
-            : current.default?.rules ?? [];
+        const existingRules = environment ? findEnvRules(current, environment) : (current.default?.rules ?? []);
         const mergedRules = mergeTargetingRule(existingRules, newRule);
         const logLevelPatch = environment
             ? { environments: replaceEnvRules(current.environments ?? [], environment, mergedRules) }

package/dist/commands/login.js

@@ -3,6 +3,7 @@ import { select } from '@inquirer/prompts';
 import { BaseCommand } from '../index.js';
 import { decodeJWT, pollForToken, requestDeviceCode } from '../util/oauth-client.js';
 import { getApiUrl } from '../util/domain-urls.js';
+import { openBrowser } from '../util/open-browser.js';
 import { getAuthConfigFilePath, getTokenFilePath, loadAuthConfig, saveAuthConfig, saveTokens, } from '../util/token-storage.js';
 export default class Login extends BaseCommand {
     static description = 'Log in to Quonfig via WorkOS device authorization';
@@ -27,9 +28,37 @@ export default class Login extends BaseCommand {
         this.log(`\nTo authenticate, visit:\n`);
         this.log(`  ${deviceAuth.verification_uri_complete}\n`);
         this.log(`Or go to ${deviceAuth.verification_uri} and enter code: ${deviceAuth.user_code}\n`);
+        // Listen for Enter to open the URL in the user's browser.
+        // Runs concurrently with token polling so the user can also authenticate
+        // by pasting the URL manually without having to press Enter first.
+        const stdinIsTTY = Boolean(process.stdin.isTTY);
+        let browserOpened = false;
+        const onEnter = (chunk) => {
+            if (browserOpened)
+                return;
+            if (!chunk.toString().match(/[\r\n]/))
+                return;
+            browserOpened = true;
+            openBrowser(deviceAuth.verification_uri_complete);
+            this.log('Opening browser...');
+        };
+        if (stdinIsTTY) {
+            this.log('Press Enter to open the URL in your browser, or open it manually.');
+            process.stdin.on('data', onEnter);
+            process.stdin.resume();
+        }
         this.log('Waiting for authentication...');
         // Step 3: Poll for token
-        const tokenResponse = await pollForToken(deviceAuth.device_code, deviceAuth.interval, deviceAuth.expires_in, this.isVerbose);
+        let tokenResponse;
+        try {
+            tokenResponse = await pollForToken(deviceAuth.device_code, deviceAuth.interval, deviceAuth.expires_in, this.isVerbose);
+        }
+        finally {
+            if (stdinIsTTY) {
+                process.stdin.off('data', onEnter);
+                process.stdin.pause();
+            }
+        }
         const user = tokenResponse.user;
         const userEmail = user.email;
         // Decode JWT to inspect claims

package/dist/commands/pull.js

@@ -186,9 +186,9 @@ CLI shortcuts (no JSON editing needed for simple cases):
     async maybeWriteQuonfigDir(dir) {
         if (process.env.QUONFIG_DIR)
             return; // already set via env
-        const os = await import('node:os');
         const pathMod = await import('node:path');
-        const configFilePath = pathMod.join(os.homedir(), '.quonfig', 'config');
+        const { getQuonfigConfigHome } = await import('../util/quonfig-home.js');
+        const configFilePath = pathMod.join(getQuonfigConfigHome(), 'config');
         try {
             const existing = await fs.promises.readFile(configFilePath, 'utf8').catch(() => '');
             if (existing.includes('QUONFIG_DIR') || existing.includes('quonfig_dir'))

package/dist/commands/push.d.ts

@@ -1,8 +1,7 @@
 import type { JsonObj } from '../result.js';
 import { BaseCommand } from '../index.js';
 import { GiteaTokenResponse } from '../util/gitea-api.js';
-import type { GiteaTokenMintResult } from '../push/run-push.js';
-import { runPush } from '../push/run-push.js';
+import { runPush, type GiteaTokenMintResult } from '../push/run-push.js';
 export default class Push extends BaseCommand {
     static description: string;
     static examples: string[];
@@ -34,20 +33,13 @@ export declare function giteaResponseToMintResult(resp: GiteaTokenResponse): Git
  *
  * Returns a `{deps, cleanup}` pair. The caller MUST call `cleanup()` in a
  * finally block so the bare-path probe clone is removed even on errors.
+ *
+ * As of qfg-azk.13 the push code path no longer mints a write-scoped Gitea
+ * token; the actual commit is performed server-side by the `configs.push`
+ * oRPC procedure. We still mint a READ token to authenticate the bare-path
+ * probe-clone and the clone-path `git fetch`.
  */
 export declare function buildRealDeps(cmd: Push): {
     deps: Parameters<typeof runPush>[1];
     cleanup: () => Promise<void>;
 };
-/**
- * Copy the contents of `sourceDir` into `destDir`, skipping `.git/` and any
- * temp push-clone scratch directories. Used as the `applyDelta` callback for
- * bare-path pushes — we mirror local files into a fresh clone so that
- * `cloneAndStackPush`'s `git add --all` + diff will reflect the union of
- * (deletes, modifies, adds) we intend.
- *
- * IMPORTANT: this deletes files in destDir that are not in sourceDir so that
- * deletions make it into the push. Without this the clone-and-stack produces
- * an "adds-only" delta and destructive heuristics would never fire in the UI.
- */
-export declare function copyDirMirror(sourceDir: string, destDir: string): Promise<void>;

package/dist/commands/push.js

@@ -5,9 +5,10 @@ import * as util from 'node:util';
 import { Flags } from '@oclif/core';
 import { BaseCommand } from '../index.js';
 import { mintGiteaToken } from '../util/gitea-api.js';
-import { getRemoteUrl, gitFetch, gitSetRemote, isGitRepo, } from '../util/git-ops.js';
-import { PushFatalError, runPush } from '../push/run-push.js';
+import { getRemoteUrl, gitFetch, gitSetRemote, isGitRepo } from '../util/git-ops.js';
+import { PushFatalError, runPush, } from '../push/run-push.js';
 import { computeBarePathDiff } from '../push/bare-path-diff.js';
+import { callConfigsPush } from '../push/config-push-client.js';
 import { resolveWorkspaceUuid } from '../util/resolve-workspace.js';
 const execFile = util.promisify(execFileCb);
 export default class Push extends BaseCommand {
@@ -127,6 +128,11 @@ export function giteaResponseToMintResult(resp) {
  *
  * Returns a `{deps, cleanup}` pair. The caller MUST call `cleanup()` in a
  * finally block so the bare-path probe clone is removed even on errors.
+ *
+ * As of qfg-azk.13 the push code path no longer mints a write-scoped Gitea
+ * token; the actual commit is performed server-side by the `configs.push`
+ * oRPC procedure. We still mint a READ token to authenticate the bare-path
+ * probe-clone and the clone-path `git fetch`.
  */
 export function buildRealDeps(cmd) {
     const log = (line) => cmd.log(line);
@@ -187,12 +193,6 @@ export function buildRealDeps(cmd) {
             const probe = await ensureBarePathProbe(dir);
             return probe.deltas;
         },
-        async push(dir) {
-            await execFile('git', ['-C', dir, 'push', 'origin', 'main']);
-        },
-        async getLocalAuthor(dir) {
-            return readLocalAuthor(dir);
-        },
         async countFilesInRemote(dir) {
             if (await isGitRepo(dir)) {
                 const fromGit = await countTrackedFilesAtRef(dir, 'origin/main');
@@ -207,9 +207,11 @@ export function buildRealDeps(cmd) {
     };
     const deps = {
         async mintWriteToken(requestedTarget) {
-            const resp = await mintGiteaToken(requestedTarget, 'write', 'push');
-            // Stash the authenticated URL so the bare-path gitOps methods can
-            // probe-clone it without a second mint.
+            // Read scope: this token authenticates probe-clone and clone-path
+            // fetch. The actual commit goes through the server via configs.push,
+            // which is authorized off the user's WorkOS session — no write PAT
+            // needed in the push code path (qfg-azk.13).
+            const resp = await mintGiteaToken(requestedTarget, 'read', 'pull');
             authenticatedRepoUrl = resp.repoUrl;
             return giteaResponseToMintResult(resp);
         },
@@ -220,7 +222,7 @@ export function buildRealDeps(cmd) {
             return { errors };
         },
         gitOps,
-        copyDirMirror,
+        pushToServer: callConfigsPush,
         log,
         errLog,
     };
@@ -237,26 +239,20 @@ export function buildRealDeps(cmd) {
     return { deps, cleanup };
 }
 /**
- * Diff the working tree (what we are about to push) against origin/main. We
- * use `git diff --name-status HEAD..origin/main` with inverted semantics:
- *   Added here  = present locally (in HEAD), absent in origin/main.
- *   Deleted     = absent locally, present in origin/main.
- *   Modified    = content differs.
+ * Diff the working tree (what we are about to push) against origin/main and
+ * fill in before/after JSON content for each delta as required by the
+ * `configs.push` wire shape (qfg-azk.13).
+ *
+ *   Added    — afterJson = working tree
+ *   Modified — beforeJson = `git show origin/main:<path>`, afterJson = working tree
+ *   Deleted  — beforeJson = `git show origin/main:<path>`
  *
  * `git diff A..B` reports B relative to A. So `HEAD..origin/main` tells us
  * what origin has that we don't. We want "local vs remote" with local as the
  * baseline — i.e. origin/main..HEAD.
  */
 async function diffHeadVsOrigin(dir) {
-    // origin/main..HEAD reports changes HEAD has relative to origin/main.
-    // 'A' -> added locally, 'D' -> deleted locally, 'M' -> modified locally.
-    const { stdout } = await execFile('git', [
-        '-C',
-        dir,
-        'diff',
-        '--name-status',
-        'origin/main..HEAD',
-    ]);
+    const { stdout } = await execFile('git', ['-C', dir, 'diff', '--name-status', 'origin/main..HEAD']);
     const deltas = [];
     for (const raw of stdout.split('\n')) {
         const line = raw.trim();
@@ -266,95 +262,54 @@ async function diffHeadVsOrigin(dir) {
         const pathStr = rest.join(' ');
         if (!pathStr)
             continue;
-        if (status.startsWith('A'))
-            deltas.push({ kind: 'added', path: pathStr });
-        else if (status.startsWith('D'))
-            deltas.push({ kind: 'deleted', path: pathStr });
+        if (status.startsWith('A')) {
+            // eslint-disable-next-line no-await-in-loop
+            const afterJson = await readWorkingTreeFile(dir, pathStr);
+            deltas.push({ kind: 'added', path: pathStr, ...(afterJson === undefined ? {} : { afterJson }) });
+        }
+        else if (status.startsWith('D')) {
+            // eslint-disable-next-line no-await-in-loop
+            const beforeJson = await showAtRef(dir, 'origin/main', pathStr);
+            deltas.push({ kind: 'deleted', path: pathStr, ...(beforeJson === undefined ? {} : { beforeJson }) });
+        }
         else if (status.startsWith('M') || status.startsWith('R') || status.startsWith('C')) {
-            // Treat renames / copies as modifications for diff-summary purposes.
-            deltas.push({ kind: 'modified', path: pathStr });
+            // eslint-disable-next-line no-await-in-loop
+            const beforeJson = await showAtRef(dir, 'origin/main', pathStr);
+            // eslint-disable-next-line no-await-in-loop
+            const afterJson = await readWorkingTreeFile(dir, pathStr);
+            deltas.push({
+                kind: 'modified',
+                path: pathStr,
+                ...(beforeJson === undefined ? {} : { beforeJson }),
+                ...(afterJson === undefined ? {} : { afterJson }),
+            });
         }
     }
     return deltas;
 }
-async function countTrackedFilesAtRef(dir, ref) {
+async function showAtRef(dir, ref, relPath) {
     try {
-        const { stdout } = await execFile('git', ['-C', dir, 'ls-tree', '-r', '--name-only', ref]);
-        return stdout.split('\n').filter((l) => l.trim().length > 0).length;
+        const { stdout } = await execFile('git', ['-C', dir, 'show', `${ref}:${relPath}`]);
+        return stdout;
     }
     catch {
-        return 0;
+        return undefined;
     }
 }
-async function readLocalAuthor(dir) {
+async function readWorkingTreeFile(dir, relPath) {
     try {
-        const { stdout: name } = await execFile('git', ['-C', dir, 'config', 'user.name']);
-        const { stdout: email } = await execFile('git', ['-C', dir, 'config', 'user.email']);
-        const n = name.trim();
-        const e = email.trim();
-        if (!n || !e)
-            return undefined;
-        return { name: n, email: e };
+        return await fs.promises.readFile(path.join(dir, relPath), 'utf8');
     }
     catch {
         return undefined;
     }
 }
-/**
- * Copy the contents of `sourceDir` into `destDir`, skipping `.git/` and any
- * temp push-clone scratch directories. Used as the `applyDelta` callback for
- * bare-path pushes — we mirror local files into a fresh clone so that
- * `cloneAndStackPush`'s `git add --all` + diff will reflect the union of
- * (deletes, modifies, adds) we intend.
- *
- * IMPORTANT: this deletes files in destDir that are not in sourceDir so that
- * deletions make it into the push. Without this the clone-and-stack produces
- * an "adds-only" delta and destructive heuristics would never fire in the UI.
- */
-export async function copyDirMirror(sourceDir, destDir) {
-    // Collect source entries (except .git, .quonfig-push-clone-*)
-    const sourceRel = collectRelPaths(sourceDir);
-    const destRel = collectRelPaths(destDir);
-    // Delete anything in dest that isn't in source
-    for (const rel of destRel) {
-        if (!sourceRel.has(rel)) {
-            const full = path.join(destDir, rel);
-            try {
-                fs.rmSync(full, { force: true });
-            }
-            catch {
-                /* ignore */
-            }
-        }
+async function countTrackedFilesAtRef(dir, ref) {
+    try {
+        const { stdout } = await execFile('git', ['-C', dir, 'ls-tree', '-r', '--name-only', ref]);
+        return stdout.split('\n').filter((l) => l.trim().length > 0).length;
     }
-    // Copy / overwrite everything from source into dest
-    for (const rel of sourceRel) {
-        const src = path.join(sourceDir, rel);
-        const dst = path.join(destDir, rel);
-        fs.mkdirSync(path.dirname(dst), { recursive: true });
-        fs.copyFileSync(src, dst);
+    catch {
+        return 0;
     }
 }
-function collectRelPaths(root) {
-    const out = new Set();
-    if (!fs.existsSync(root))
-        return out;
-    const walk = (dir, prefix) => {
-        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-            if (entry.name === '.git')
-                continue;
-            if (entry.name.startsWith('.quonfig-push-clone-'))
-                continue;
-            const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
-            const full = path.join(dir, entry.name);
-            if (entry.isDirectory()) {
-                walk(full, rel);
-            }
-            else if (entry.isFile() || entry.isSymbolicLink()) {
-                out.add(rel);
-            }
-        }
-    };
-    walk(root, '');
-    return out;
-}

package/dist/commands/workspace/switch.js

@@ -13,10 +13,7 @@ export default class WorkspaceSwitch extends BaseCommand {
         }),
     };
     static description = 'Switch to a different workspace';
-    static examples = [
-        '<%= config.bin %> <%= command.id %>',
-        '<%= config.bin %> <%= command.id %> my-workspace-slug',
-    ];
+    static examples = ['<%= config.bin %> <%= command.id %>', '<%= config.bin %> <%= command.id %> my-workspace-slug'];
     async run() {
         const { args } = await this.parse(WorkspaceSwitch);
         // Get a valid token — refresh silently if needed, error if not logged in