@quonfig/cli 0.0.39 → 0.0.41

package/README.md

@@ -3,6 +3,9 @@
 <!-- toc -->
 * [Quonfig CLI](#quonfig-cli)
 * [Usage](#usage)
+* [Running commands with injected env](#running-commands-with-injected-env)
+* [.qfg.env](#qfgenv)
+* [blank lines and # comments are skipped](#blank-lines-and--comments-are-skipped)
 * [Commands](#commands)
 <!-- tocstop -->
 
@@ -14,7 +17,7 @@ $ npm install -g @quonfig/cli
 $ qfg COMMAND
 running command...
 $ qfg (--version)
-@quonfig/cli/0.0.39 linux-x64 node-v24.4.1
+@quonfig/cli/0.0.41 linux-x64 node-v24.4.1
 $ qfg --help [COMMAND]
 USAGE
   $ qfg COMMAND
@@ -22,6 +25,98 @@ USAGE
 ```
 <!-- usagestop -->
 
+# Running commands with injected env
+
+Some workflows need Quonfig values to land in `process.env` **before** application
+code runs — Drizzle migrations read `DATABASE_URL` at module import, `next-auth`
+reads `AUTH_SECRET` automatically, and arbitrary build steps / one-shot scripts
+can't always go through `instrumentation.ts`. Use `qfg run` to resolve configs
+and exec the child with those vars merged into its environment.
+
+The flag separator `--` is **required** between `qfg run` flags and the child
+command — without it, oclif tries to parse the child's flags as its own.
+
+## Inline form
+
+```sh
+qfg run \
+  --env DATABASE_URL=db.url \
+  --env AUTH_SECRET=auth.secret \
+  --environment=staging \
+  -- \
+  npm run migrate
+```
+
+The grammar is `VAR=key.path` (uses `=`, not `:`, to match `docker -e VAR=value`
+muscle memory). `--env` is repeatable.
+
+## File form
+
+```sh
+# .qfg.env
+DATABASE_URL=db.url
+AUTH_SECRET=auth.secret
+# blank lines and # comments are skipped
+```
+
+```sh
+qfg run --env-file=.qfg.env --environment=staging -- npm run migrate
+```
+
+## Auth / environment is binary
+
+`qfg run` enforces a strict either/or rule, never a precedence chain. This is
+intentional — a "match-only" exception drifts silently in CI and masks
+misconfiguration.
+
+| Mode  | When                                    | Provides                                                  |
+|-------|-----------------------------------------|-----------------------------------------------------------|
+| **A** | `QUONFIG_BACKEND_SDK_KEY` is set        | env + workspace from the SDK key                          |
+| **B** | No SDK key — uses `qfg login` user auth | `--environment` _or_ `QUONFIG_ENVIRONMENT` (exactly one)  |
+
+Mixing the two is an error:
+
+- Mode A + `--environment` (or `QUONFIG_ENVIRONMENT`) → exits non-zero before
+  spawning, even if they would agree.
+- Mode B with neither → exits non-zero.
+- Mode B with both `--environment` and `QUONFIG_ENVIRONMENT` → exits non-zero.
+
+There is **no interactive prompt**. `qfg run` is meant for scripts and CI;
+prompting mid-`&&`-chain would be worse UX than failing loud.
+
+## Override vs preserve
+
+By default `qfg run` **overrides** any value already set in the parent env —
+the whole point is "make these vars come from Quonfig." Pass `--preserve-env`
+to flip that: vars already set in the parent are kept, and only unset vars
+are filled in.
+
+```sh
+qfg run --env DATABASE_URL=db.url --preserve-env --environment=staging -- npm test
+```
+
+## Missing keys fail before the child spawns
+
+If any requested config key is missing from the workspace, `qfg run` exits
+non-zero with a list of the missing keys and never spawns the child. This
+avoids the trap where the child blows up later with an empty value and the
+real cause is buried under unrelated stack traces.
+
+## package.json example
+
+```json
+{
+  "scripts": {
+    "migrate": "qfg run --env-file=.qfg.env --environment=staging -- drizzle-kit migrate",
+    "migrate:prod": "qfg run --env-file=.qfg.env -- drizzle-kit migrate"
+  }
+}
+```
+
+The first uses Mode B (`--environment=staging` flag). The second relies on
+`QUONFIG_BACKEND_SDK_KEY` being set in the prod environment (Mode A) so the
+script doesn't need to know which env it's running in.
+
 # Commands
 
 <!-- commands -->
@@ -56,6 +151,7 @@ USAGE
 * [`qfg override [NAME] [VALUE]`](#qfg-override-name-value)
 * [`qfg pull`](#qfg-pull)
 * [`qfg push`](#qfg-push)
+* [`qfg run [COMMAND]`](#qfg-run-command)
 * [`qfg schema NAME`](#qfg-schema-name)
 * [`qfg sdk-key`](#qfg-sdk-key)
 * [`qfg sdk-key create`](#qfg-sdk-key-create)
@@ -99,7 +195,7 @@ EXAMPLES
   $ qfg activity restore my.flag --yes
 ```
 
-_See code: [src/commands/activity.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/activity.ts)_
+_See code: [src/commands/activity.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/activity.ts)_
 
 ## `qfg activity deleted`
 
@@ -128,7 +224,7 @@ EXAMPLES
   $ qfg activity deleted --json
 ```
 
-_See code: [src/commands/activity/deleted.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/activity/deleted.ts)_
+_See code: [src/commands/activity/deleted.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/activity/deleted.ts)_
 
 ## `qfg activity feed`
 
@@ -163,7 +259,7 @@ EXAMPLES
   $ qfg activity feed --json
 ```
 
-_See code: [src/commands/activity/feed.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/activity/feed.ts)_
+_See code: [src/commands/activity/feed.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/activity/feed.ts)_
 
 ## `qfg activity history [NAME]`
 
@@ -197,7 +293,7 @@ EXAMPLES
   $ qfg activity history request.timeout --json
 ```
 
-_See code: [src/commands/activity/history.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/activity/history.ts)_
+_See code: [src/commands/activity/history.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/activity/history.ts)_
 
 ## `qfg activity restore [NAME]`
 
@@ -236,7 +332,7 @@ EXAMPLES
   $ qfg activity restore request.timeout --type config --yes
 ```
 
-_See code: [src/commands/activity/restore.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/activity/restore.ts)_
+_See code: [src/commands/activity/restore.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/activity/restore.ts)_
 
 ## `qfg audit-log [NAME]`
 
@@ -264,7 +360,7 @@ EXAMPLES
   $ qfg audit-log my.flag
 ```
 
-_See code: [src/commands/audit-log.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/audit-log.ts)_
+_See code: [src/commands/audit-log.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/audit-log.ts)_
 
 ## `qfg config-schema`
 
@@ -293,7 +389,7 @@ EXAMPLES
   $ qfg config-schema --json-schema    # full JSON Schema document (copy into your editor)
 ```
 
-_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/config-schema.ts)_
+_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/config-schema.ts)_
 
 ## `qfg create NAME`
 
@@ -378,7 +474,7 @@ EXAMPLES
   $ qfg set-rollout my.new.flag --environment production --true-percent 20
 ```
 
-_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/create.ts)_
+_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/create.ts)_
 
 ## `qfg delete NAME`
 
@@ -424,7 +520,7 @@ EXAMPLES
   $ qfg delete my.config --yes
 ```
 
-_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/delete.ts)_
+_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/delete.ts)_
 
 ## `qfg flag info [NAME]`
 
@@ -627,7 +723,7 @@ EXAMPLES
   $ qfg generate --targets node-ts -o ./dist # combine with targets
 ```
 
-_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/generate.ts)_
+_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/generate.ts)_
 
 ## `qfg generate-new-hex-key`
 
@@ -650,7 +746,7 @@ EXAMPLES
   $ qfg generate-new-hex-key
 ```
 
-_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/generate-new-hex-key.ts)_
+_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/generate-new-hex-key.ts)_
 
 ## `qfg get [NAME]`
 
@@ -682,7 +778,7 @@ EXAMPLES
   $ qfg get my.config.name --environment=production
 ```
 
-_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/get.ts)_
+_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/get.ts)_
 
 ## `qfg history NAME`
 
@@ -708,7 +804,7 @@ EXAMPLES
   $ qfg history my.flag
 ```
 
-_See code: [src/commands/history.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/history.ts)_
+_See code: [src/commands/history.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/history.ts)_
 
 ## `qfg info [NAME]`
 
@@ -756,7 +852,7 @@ EXAMPLES
   $ qfg info my.config.name --exclude-evaluations   # skip 24h stats
 ```
 
-_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/info.ts)_
 
 ## `qfg init [DIRECTORY]`
 
@@ -796,7 +892,7 @@ EXAMPLES
   $ qfg init --dry-run
 ```
 
-_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/init.ts)_
 
 ## `qfg interactive`
 
@@ -826,7 +922,7 @@ EXAMPLES
   $ qfg
 ```
 
-_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/interactive.ts)_
+_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/interactive.ts)_
 
 ## `qfg list`
 
@@ -866,7 +962,7 @@ EXAMPLES
   $ qfg list --feature-flags
 ```
 
-_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/list.ts)_
+_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/list.ts)_
 
 ## `qfg log`
 
@@ -891,7 +987,7 @@ EXAMPLES
   $ qfg log --limit 5
 ```
 
-_See code: [src/commands/log.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/log.ts)_
+_See code: [src/commands/log.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/log.ts)_
 
 ## `qfg log-level NAME`
 
@@ -956,7 +1052,7 @@ EXAMPLES
   $ qfg log-level log-level.my-app --target=Chatty --value=INFO --environment=production
 ```
 
-_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/log-level.ts)_
+_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/log-level.ts)_
 
 ## `qfg login`
 
@@ -981,7 +1077,7 @@ EXAMPLES
   $ qfg login --profile myprofile
 ```
 
-_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/login.ts)_
 
 ## `qfg logout`
 
@@ -1004,7 +1100,7 @@ EXAMPLES
   $ qfg logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/logout.ts)_
 
 ## `qfg migrate`
 
@@ -1058,7 +1154,7 @@ EXAMPLES
   $ qfg migrate --from launch --api-key $LAUNCH_API_KEY --dir ./quonfig-repo --staging
 ```
 
-_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/migrate.ts)_
+_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/migrate.ts)_
 
 ## `qfg migrate doctor`
 
@@ -1096,7 +1192,7 @@ EXAMPLES
   $ qfg migrate doctor --json
 ```
 
-_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/migrate/doctor.ts)_
+_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/migrate/doctor.ts)_
 
 ## `qfg migrate my-code`
 
@@ -1128,7 +1224,7 @@ EXAMPLES
   $ qfg migrate my-code --dry-run
 ```
 
-_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/migrate/my-code.ts)_
+_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/migrate/my-code.ts)_
 
 ## `qfg migrate status`
 
@@ -1159,7 +1255,7 @@ EXAMPLES
   $ qfg migrate status --json
 ```
 
-_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/migrate/status.ts)_
+_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/migrate/status.ts)_
 
 ## `qfg override [NAME] [VALUE]`
 
@@ -1214,7 +1310,7 @@ EXAMPLES
   $ qfg override my.flag true --env=staging
 ```
 
-_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/override.ts)_
+_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/override.ts)_
 
 ## `qfg pull`
 
@@ -1261,7 +1357,7 @@ EXAMPLES
   $ qfg pull  # uses QUONFIG_DIR env var
 ```
 
-_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/pull.ts)_
+_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/pull.ts)_
 
 ## `qfg push`
 
@@ -1309,7 +1405,58 @@ EXAMPLES
   $ qfg push --dir ./our-config --yes
 ```
 
-_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/push.ts)_
+_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/push.ts)_
+
+## `qfg run [COMMAND]`
+
+Run a child process with Quonfig configs injected as env vars.
+
+```
+USAGE
+  $ qfg run [COMMAND...] [--json] [--interactive] [--no-color] [--verbose] [-w <value>] [--env
+    <value>...] [--env-file <value>] [--environment <value>] [--preserve-env]
+
+ARGUMENTS
+  COMMAND...  child command (after '--')
+
+FLAGS
+  --env=<value>...       [default: ] Inline env mapping in VAR=key.path form. Repeatable.
+  --env-file=<value>     Path to a file with one VAR=key.path per line (# comments and blank lines OK).
+  --environment=<value>  Quonfig environment to evaluate in (Mode B). Mutually exclusive with QUONFIG_ENVIRONMENT.
+  --preserve-env         Skip vars that are already set in the parent env. Default: override.
+
+GLOBAL FLAGS
+  -w, --workspace=<value>  Workspace slug to use (overrides QUONFIG_WORKSPACE env var and saved default)
+      --[no-]interactive   Force interactive mode
+      --json               Format output as json.
+      --no-color           Do not colorize output
+      --verbose            Verbose output
+
+DESCRIPTION
+  Run a child process with Quonfig configs injected as env vars.
+
+  Resolves --env VAR=key.path mappings (and --env-file lines) against your
+  workspace, merges them into the parent env, and exec's the child command.
+  Exits with the child's exit code. Missing keys → fail before spawning.
+
+  Auth / environment is BINARY:
+  Mode A — QUONFIG_BACKEND_SDK_KEY set: env is encoded in the key.
+  Setting --environment OR QUONFIG_ENVIRONMENT alongside is an error.
+  Mode B — no SDK key: pass exactly one of --environment or QUONFIG_ENVIRONMENT.
+
+  The flag separator '--' is REQUIRED between qfg flags and the child command.
+
+EXAMPLES
+  $ qfg run --env DATABASE_URL=db.url --environment=staging -- env
+
+  $ qfg run --env-file=.qfg.env --environment=staging -- npm run migrate
+
+  $ qfg run --env DATABASE_URL=db.url -- ./bin/migrate.js   # Mode A: relies on QUONFIG_BACKEND_SDK_KEY
+
+  $ qfg run --env DATABASE_URL=db.url --preserve-env --environment=staging -- npm test
+```
+
+_See code: [src/commands/run.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/run.ts)_
 
 ## `qfg schema NAME`
 
@@ -1347,7 +1494,7 @@ EXAMPLES
   $ qfg schema my-schema --set-json-schema=@schemas/my-schema.json --protected
 ```
 
-_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/schema.ts)_
+_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/schema.ts)_
 
 ## `qfg sdk-key`
 
@@ -1374,7 +1521,7 @@ EXAMPLES
   $ qfg sdk-key revoke <key-id>
 ```
 
-_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/sdk-key.ts)_
+_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/sdk-key.ts)_
 
 ## `qfg sdk-key create`
 
@@ -1406,7 +1553,7 @@ EXAMPLES
   $ qfg sdk-key create --environment staging --type browser
 ```
 
-_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/sdk-key/create.ts)_
+_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/sdk-key/create.ts)_
 
 ## `qfg sdk-key list`
 
@@ -1435,7 +1582,7 @@ EXAMPLES
   $ qfg sdk-key list --environment production
 ```
 
-_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/sdk-key/list.ts)_
+_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/sdk-key/list.ts)_
 
 ## `qfg sdk-key revoke KEYID`
 
@@ -1462,7 +1609,7 @@ EXAMPLES
   $ qfg sdk-key revoke a1b2c3d4-e5f6-7890-abcd-ef1234567890
 ```
 
-_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/sdk-key/revoke.ts)_
+_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/sdk-key/revoke.ts)_
 
 ## `qfg set-default [NAME]`
 
@@ -1533,7 +1680,7 @@ EXAMPLES
   $ qfg pull && qfg config-schema
 ```
 
-_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/set-default.ts)_
+_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/set-default.ts)_
 
 ## `qfg set-rollout [NAME]`
 
@@ -1610,7 +1757,7 @@ EXAMPLES
   $ qfg set-rollout my.variant.flag --environment production --weights "a:33,b:33,c:34" --hash-by user.id
 ```
 
-_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/set-rollout.ts)_
+_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/set-rollout.ts)_
 
 ## `qfg sync`
 
@@ -1642,7 +1789,7 @@ EXAMPLES
   $ qfg sync --watch --dir ./our-config --interval 30
 ```
 
-_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/sync.ts)_
+_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/sync.ts)_
 
 ## `qfg toggle [NAME]`
 
@@ -1744,7 +1891,7 @@ EXAMPLES
   $ qfg verify --json
 ```
 
-_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/verify.ts)_
+_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/verify.ts)_
 
 ## `qfg whoami`
 
@@ -1767,7 +1914,7 @@ EXAMPLES
   $ qfg whoami
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/whoami.ts)_
 
 ## `qfg workspace`
 
@@ -1790,7 +1937,7 @@ EXAMPLES
   $ qfg workspace
 ```
 
-_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/workspace.ts)_
+_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/workspace.ts)_
 
 ## `qfg workspace bootstrap`
 
@@ -1823,7 +1970,7 @@ EXAMPLES
   $ qfg workspace bootstrap --dir ./our-config --skip-validate
 ```
 
-_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/workspace/bootstrap.ts)_
+_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/workspace/bootstrap.ts)_
 
 ## `qfg workspace create SLUG`
 
@@ -1857,7 +2004,7 @@ EXAMPLES
   $ qfg workspace create my-team --org 11111111-1111-1111-1111-111111111111
 ```
 
-_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/workspace/create.ts)_
+_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/workspace/create.ts)_
 
 ## `qfg workspace switch [SLUG]`
 
@@ -1885,7 +2032,7 @@ EXAMPLES
   $ qfg workspace switch acme/production
 ```
 
-_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.39/src/commands/workspace/switch.ts)_
+_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.41/src/commands/workspace/switch.ts)_
 <!-- commandsstop -->
 
 ## Local Development

package/dist/commands/login.js

@@ -35,7 +35,7 @@ export default class Login extends BaseCommand {
         const onEnter = (chunk) => {
             if (browserOpened)
                 return;
-            if (!chunk.toString().match(/[\r\n]/))
+            if (!/[\n\r]/.test(chunk.toString()))
                 return;
             browserOpened = true;
             openBrowser(deviceAuth.verification_uri_complete);

package/dist/commands/migrate/my-code.js

@@ -5,17 +5,14 @@ import { BaseCommand } from '../../index.js';
 const SKILL_NAME = 'qfg-migrate-code';
 const SUPPORTED_SOURCES = new Set(['launch']);
 function findIdentifierMap(startDir) {
-    let dir = path.resolve(startDir);
-    while (true) {
+    for (let dir = path.resolve(startDir);; dir = path.dirname(dir)) {
         const candidate = path.join(dir, '.qf', 'identifier-map.json');
         if (fs.existsSync(candidate)) {
             const raw = fs.readFileSync(candidate, 'utf8');
             return { dir, map: JSON.parse(raw) };
         }
-        const parent = path.dirname(dir);
-        if (parent === dir)
+        if (path.dirname(dir) === dir)
             return null;
-        dir = parent;
     }
 }
 export default class MigrateMyCode extends BaseCommand {

package/dist/commands/pull.d.ts

@@ -9,17 +9,6 @@ export default class Pull extends BaseCommand {
         workspace: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
     };
     run(): Promise<JsonObj | void>;
-    /**
-     * Wraps `readWorkspaceSlug` so a legacy bare-slug value (`"workspace":
-     * "foo"` instead of `"workspace": "org/foo"`) reads as `undefined`
-     * rather than throwing. The caller then takes the "no pin set" branch
-     * and overwrites with the canonical form, completing the migration.
-     *
-     * Any other parse error still resolves to `undefined` here (and is
-     * verbose-logged) — backfill is non-fatal; the next push surfaces the
-     * real diagnosis.
-     */
-    private readPinTolerant;
     /**
      * Local-only backfill of the `workspace` pin in `quonfig.json`.
      *
@@ -46,6 +35,17 @@ export default class Pull extends BaseCommand {
     private commitPinIfRepo;
     private looksLike401;
     private maybeWriteQuonfigDir;
+    /**
+     * Wraps `readWorkspaceSlug` so a legacy bare-slug value (`"workspace":
+     * "foo"` instead of `"workspace": "org/foo"`) reads as `undefined`
+     * rather than throwing. The caller then takes the "no pin set" branch
+     * and overwrites with the canonical form, completing the migration.
+     *
+     * Any other parse error still resolves to `undefined` here (and is
+     * verbose-logged) — backfill is non-fatal; the next push surfaces the
+     * real diagnosis.
+     */
+    private readPinTolerant;
     private refreshAndGetUrl;
     private resolveTokenEntry;
 }

package/dist/commands/pull.js

@@ -174,25 +174,6 @@ CLI shortcuts (no JSON editing needed for simple cases):
         await this.backfillWorkspacePin(resolvedDir, tokenEntry, workspaceId, orgSlug);
         return { dir: resolvedDir, workspaceId };
     }
-    /**
-     * Wraps `readWorkspaceSlug` so a legacy bare-slug value (`"workspace":
-     * "foo"` instead of `"workspace": "org/foo"`) reads as `undefined`
-     * rather than throwing. The caller then takes the "no pin set" branch
-     * and overwrites with the canonical form, completing the migration.
-     *
-     * Any other parse error still resolves to `undefined` here (and is
-     * verbose-logged) — backfill is non-fatal; the next push surfaces the
-     * real diagnosis.
-     */
-    async readPinTolerant(dir) {
-        try {
-            return await readWorkspaceSlug(dir);
-        }
-        catch (error) {
-            this.verboseLog('Pull', `quonfig.json workspace pin needs migration: ${String(error)}`);
-            return undefined;
-        }
-    }
     /**
      * Local-only backfill of the `workspace` pin in `quonfig.json`.
      *
@@ -304,6 +285,26 @@ CLI shortcuts (no JSON editing needed for simple cases):
             // Non-fatal
         }
     }
+    /**
+     * Wraps `readWorkspaceSlug` so a legacy bare-slug value (`"workspace":
+     * "foo"` instead of `"workspace": "org/foo"`) reads as `undefined`
+     * rather than throwing. The caller then takes the "no pin set" branch
+     * and overwrites with the canonical form, completing the migration.
+     *
+     * Any other parse error still resolves to `undefined` here (and is
+     * verbose-logged) — backfill is non-fatal; the next push surfaces the
+     * real diagnosis.
+     */
+    async readPinTolerant(dir) {
+        let pin;
+        try {
+            pin = await readWorkspaceSlug(dir);
+        }
+        catch (error) {
+            this.verboseLog('Pull', `quonfig.json workspace pin needs migration: ${String(error)}`);
+        }
+        return pin;
+    }
     async refreshAndGetUrl(workspaceId, orgSlug) {
         const data = await mintGiteaToken(workspaceId, orgSlug, 'read', 'pull');
         const entry = {

package/dist/commands/push.js

@@ -3,7 +3,7 @@ import * as path from 'node:path';
 import { Flags } from '@oclif/core';
 import { BaseCommand } from '../index.js';
 import { mintGiteaToken } from '../util/gitea-api.js';
-import { dirtyTrackedFiles, getOriginMainSha, getRemoteUrl, gitFetch, gitSetRemote, isGitRepo, isLocalBehindOrDivergedFromRemote, runGit } from '../util/git-ops.js';
+import { dirtyTrackedFiles, getOriginMainSha, getRemoteUrl, gitFetch, gitSetRemote, isGitRepo, isLocalBehindOrDivergedFromRemote, runGit, } from '../util/git-ops.js';
 import { PushFatalError, runPush, } from '../push/run-push.js';
 import { computeBarePathDiff } from '../push/bare-path-diff.js';
 import { callConfigsPush } from '../push/config-push-client.js';
@@ -230,7 +230,7 @@ export function buildRealDeps(cmd, orgSlug) {
             // fetch. Bare path has no `.git/` to rev-parse — return undefined
             // and let the server apply its bare-path lock policy.
             if (!(await isGitRepo(dir)))
-                return undefined;
+                return;
             return getOriginMainSha(dir);
         },
     };