@quonfig/cli 0.0.53 → 0.0.55

package/README.md

@@ -17,7 +17,7 @@ $ npm install -g @quonfig/cli
 $ qfg COMMAND
 running command...
 $ qfg (--version)
-@quonfig/cli/0.0.53 linux-x64 node-v24.4.1
+@quonfig/cli/0.0.55 linux-x64 node-v24.4.1
 $ qfg --help [COMMAND]
 USAGE
   $ qfg COMMAND
@@ -196,7 +196,7 @@ EXAMPLES
   $ qfg activity restore my.flag --yes
 ```
 
-_See code: [src/commands/activity.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/activity.ts)_
+_See code: [src/commands/activity.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/activity.ts)_
 
 ## `qfg activity deleted`
 
@@ -225,7 +225,7 @@ EXAMPLES
   $ qfg activity deleted --json
 ```
 
-_See code: [src/commands/activity/deleted.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/activity/deleted.ts)_
+_See code: [src/commands/activity/deleted.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/activity/deleted.ts)_
 
 ## `qfg activity feed`
 
@@ -260,7 +260,7 @@ EXAMPLES
   $ qfg activity feed --json
 ```
 
-_See code: [src/commands/activity/feed.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/activity/feed.ts)_
+_See code: [src/commands/activity/feed.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/activity/feed.ts)_
 
 ## `qfg activity history [NAME]`
 
@@ -294,7 +294,7 @@ EXAMPLES
   $ qfg activity history request.timeout --json
 ```
 
-_See code: [src/commands/activity/history.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/activity/history.ts)_
+_See code: [src/commands/activity/history.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/activity/history.ts)_
 
 ## `qfg activity restore [NAME]`
 
@@ -333,7 +333,7 @@ EXAMPLES
   $ qfg activity restore request.timeout --type config --yes
 ```
 
-_See code: [src/commands/activity/restore.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/activity/restore.ts)_
+_See code: [src/commands/activity/restore.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/activity/restore.ts)_
 
 ## `qfg audit-log [NAME]`
 
@@ -361,7 +361,7 @@ EXAMPLES
   $ qfg audit-log my.flag
 ```
 
-_See code: [src/commands/audit-log.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/audit-log.ts)_
+_See code: [src/commands/audit-log.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/audit-log.ts)_
 
 ## `qfg config-schema`
 
@@ -390,7 +390,7 @@ EXAMPLES
   $ qfg config-schema --json-schema    # full JSON Schema document (copy into your editor)
 ```
 
-_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/config-schema.ts)_
+_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/config-schema.ts)_
 
 ## `qfg create NAME`
 
@@ -475,7 +475,7 @@ EXAMPLES
   $ qfg set-rollout my.new.flag --environment production --true-percent 20
 ```
 
-_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/create.ts)_
+_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/create.ts)_
 
 ## `qfg delete NAME`
 
@@ -521,7 +521,7 @@ EXAMPLES
   $ qfg delete my.config --yes
 ```
 
-_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/delete.ts)_
+_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/delete.ts)_
 
 ## `qfg flag info [NAME]`
 
@@ -725,7 +725,7 @@ EXAMPLES
   $ qfg generate --targets node-ts -o ./dist # combine with targets
 ```
 
-_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/generate.ts)_
+_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/generate.ts)_
 
 ## `qfg generate-new-hex-key`
 
@@ -748,7 +748,7 @@ EXAMPLES
   $ qfg generate-new-hex-key
 ```
 
-_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/generate-new-hex-key.ts)_
+_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/generate-new-hex-key.ts)_
 
 ## `qfg get [NAME]`
 
@@ -780,7 +780,7 @@ EXAMPLES
   $ qfg get my.config.name --environment=production
 ```
 
-_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/get.ts)_
+_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/get.ts)_
 
 ## `qfg history NAME`
 
@@ -806,7 +806,7 @@ EXAMPLES
   $ qfg history my.flag
 ```
 
-_See code: [src/commands/history.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/history.ts)_
+_See code: [src/commands/history.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/history.ts)_
 
 ## `qfg info [NAME]`
 
@@ -854,7 +854,7 @@ EXAMPLES
   $ qfg info my.config.name --exclude-evaluations   # skip 24h stats
 ```
 
-_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/info.ts)_
 
 ## `qfg init [DIRECTORY]`
 
@@ -894,7 +894,7 @@ EXAMPLES
   $ qfg init --dry-run
 ```
 
-_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/init.ts)_
 
 ## `qfg interactive`
 
@@ -924,7 +924,7 @@ EXAMPLES
   $ qfg
 ```
 
-_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/interactive.ts)_
+_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/interactive.ts)_
 
 ## `qfg list`
 
@@ -964,7 +964,7 @@ EXAMPLES
   $ qfg list --feature-flags
 ```
 
-_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/list.ts)_
+_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/list.ts)_
 
 ## `qfg log`
 
@@ -989,7 +989,7 @@ EXAMPLES
   $ qfg log --limit 5
 ```
 
-_See code: [src/commands/log.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/log.ts)_
+_See code: [src/commands/log.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/log.ts)_
 
 ## `qfg log-level NAME`
 
@@ -1054,7 +1054,7 @@ EXAMPLES
   $ qfg log-level log-level.my-app --target=Chatty --value=INFO --environment=production
 ```
 
-_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/log-level.ts)_
+_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/log-level.ts)_
 
 ## `qfg login`
 
@@ -1079,7 +1079,7 @@ EXAMPLES
   $ qfg login --profile myprofile
 ```
 
-_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/login.ts)_
 
 ## `qfg logout`
 
@@ -1102,7 +1102,7 @@ EXAMPLES
   $ qfg logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/logout.ts)_
 
 ## `qfg migrate`
 
@@ -1165,7 +1165,7 @@ EXAMPLES
   $ qfg migrate --from launch --source-api-key $LAUNCH_API_KEY --dir ./quonfig-repo --staging
 ```
 
-_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/migrate.ts)_
+_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/migrate.ts)_
 
 ## `qfg migrate doctor`
 
@@ -1203,7 +1203,7 @@ EXAMPLES
   $ qfg migrate doctor --json
 ```
 
-_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/migrate/doctor.ts)_
+_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/migrate/doctor.ts)_
 
 ## `qfg migrate my-code`
 
@@ -1235,7 +1235,7 @@ EXAMPLES
   $ qfg migrate my-code --dry-run
 ```
 
-_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/migrate/my-code.ts)_
+_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/migrate/my-code.ts)_
 
 ## `qfg migrate status`
 
@@ -1266,7 +1266,7 @@ EXAMPLES
   $ qfg migrate status --json
 ```
 
-_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/migrate/status.ts)_
+_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/migrate/status.ts)_
 
 ## `qfg override [NAME] [VALUE]`
 
@@ -1321,7 +1321,7 @@ EXAMPLES
   $ qfg override my.flag true --env=staging
 ```
 
-_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/override.ts)_
+_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/override.ts)_
 
 ## `qfg pull`
 
@@ -1369,7 +1369,7 @@ EXAMPLES
   $ qfg pull  # uses QUONFIG_DIR env var
 ```
 
-_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/pull.ts)_
+_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/pull.ts)_
 
 ## `qfg push`
 
@@ -1418,7 +1418,7 @@ EXAMPLES
   $ qfg push --dir ./our-config --yes
 ```
 
-_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/push.ts)_
+_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/push.ts)_
 
 ## `qfg run [COMMAND]`
 
@@ -1469,7 +1469,7 @@ EXAMPLES
   $ qfg run --env DATABASE_URL=db.url --preserve-env --environment=staging -- npm test
 ```
 
-_See code: [src/commands/run.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/run.ts)_
+_See code: [src/commands/run.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/run.ts)_
 
 ## `qfg schema NAME`
 
@@ -1507,7 +1507,7 @@ EXAMPLES
   $ qfg schema my-schema --set-json-schema=@schemas/my-schema.json --protected
 ```
 
-_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/schema.ts)_
+_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/schema.ts)_
 
 ## `qfg sdk-key`
 
@@ -1534,7 +1534,7 @@ EXAMPLES
   $ qfg sdk-key revoke <key-id>
 ```
 
-_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/sdk-key.ts)_
+_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/sdk-key.ts)_
 
 ## `qfg sdk-key create`
 
@@ -1566,7 +1566,7 @@ EXAMPLES
   $ qfg sdk-key create --environment staging --type browser
 ```
 
-_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/sdk-key/create.ts)_
+_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/sdk-key/create.ts)_
 
 ## `qfg sdk-key list`
 
@@ -1595,7 +1595,7 @@ EXAMPLES
   $ qfg sdk-key list --environment production
 ```
 
-_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/sdk-key/list.ts)_
+_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/sdk-key/list.ts)_
 
 ## `qfg sdk-key revoke KEYID`
 
@@ -1622,7 +1622,7 @@ EXAMPLES
   $ qfg sdk-key revoke a1b2c3d4-e5f6-7890-abcd-ef1234567890
 ```
 
-_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/sdk-key/revoke.ts)_
+_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/sdk-key/revoke.ts)_
 
 ## `qfg serve`
 
@@ -1679,7 +1679,7 @@ EXAMPLES
   $ qfg serve --port 6581 --frontend-sdk-key PUBLIC_KEY
 ```
 
-_See code: [src/commands/serve.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/serve.ts)_
+_See code: [src/commands/serve.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/serve.ts)_
 
 ## `qfg set-default [NAME]`
 
@@ -1750,7 +1750,7 @@ EXAMPLES
   $ qfg pull && qfg config-schema
 ```
 
-_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/set-default.ts)_
+_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/set-default.ts)_
 
 ## `qfg set-rollout [NAME]`
 
@@ -1827,7 +1827,7 @@ EXAMPLES
   $ qfg set-rollout my.variant.flag --environment production --weights "a:33,b:33,c:34" --hash-by user.id
 ```
 
-_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/set-rollout.ts)_
+_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/set-rollout.ts)_
 
 ## `qfg sync`
 
@@ -1859,7 +1859,7 @@ EXAMPLES
   $ qfg sync --watch --dir ./our-config --interval 30
 ```
 
-_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/sync.ts)_
+_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/sync.ts)_
 
 ## `qfg toggle [NAME]`
 
@@ -1961,7 +1961,7 @@ EXAMPLES
   $ qfg verify --json
 ```
 
-_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/verify.ts)_
+_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/verify.ts)_
 
 ## `qfg whoami`
 
@@ -1984,7 +1984,7 @@ EXAMPLES
   $ qfg whoami
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/whoami.ts)_
 
 ## `qfg workspace`
 
@@ -2007,7 +2007,7 @@ EXAMPLES
   $ qfg workspace
 ```
 
-_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/workspace.ts)_
+_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/workspace.ts)_
 
 ## `qfg workspace bootstrap`
 
@@ -2040,7 +2040,7 @@ EXAMPLES
   $ qfg workspace bootstrap --dir ./our-config --skip-validate
 ```
 
-_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/workspace/bootstrap.ts)_
+_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/workspace/bootstrap.ts)_
 
 ## `qfg workspace create SLUG`
 
@@ -2074,7 +2074,7 @@ EXAMPLES
   $ qfg workspace create my-team --org 11111111-1111-1111-1111-111111111111
 ```
 
-_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/workspace/create.ts)_
+_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/workspace/create.ts)_
 
 ## `qfg workspace switch [SLUG]`
 
@@ -2102,7 +2102,7 @@ EXAMPLES
   $ qfg workspace switch acme/production
 ```
 
-_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.53/src/commands/workspace/switch.ts)_
+_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.55/src/commands/workspace/switch.ts)_
 <!-- commandsstop -->
 
 ## Local Development

package/dist/commands/migrate.d.ts

@@ -19,5 +19,11 @@ export default class Migrate extends BaseCommand {
         workspace: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
     };
     run(): Promise<JsonObj | void>;
+    /**
+     * After a local (non-push) migration commits, the user is left at a prompt
+     * with a fresh directory and no obvious next move. Spell out the review →
+     * push flow explicitly.
+     */
+    private printLocalNextSteps;
     private resolvePushWorkspace;
 }

package/dist/commands/migrate.js

@@ -5,6 +5,7 @@ import { BaseCommand } from '../index.js';
 import { CrossSourceError, assertSourceMatches, readImportState } from '../migrate/import-state.js';
 import { applyLocalMigration, MigratorKeyCollisionError } from '../migrate/local-write.js';
 import { buildPushConflictSuggestion } from '../migrate/migrate-suggestion.js';
+import { migrationReportPath } from '../migrate/migration-report.js';
 import { PushConflictError, PushHookRejectedError } from '../util/clone-and-stack-push.js';
 import { MigratorVerifyError, pushMigrationToCloud } from '../migrate/push-to-cloud.js';
 import { UnknownSourceError, getSource } from '../migrate/registry.js';
@@ -20,6 +21,10 @@ import { displayUrl } from '../util/git-ops.js';
 import { resolveWorkspaceUuid } from '../util/resolve-workspace.js';
 import { loadAuthConfig } from '../util/token-storage.js';
 const DEFAULT_DIR = 'quonfig-repo';
+// How many fetched changes between progress lines during the (silent,
+// paginated) change-history fetch. Large accounts page through thousands of
+// changes 50 at a time; without periodic output the CLI looks frozen.
+const FETCH_PROGRESS_INTERVAL = 1000;
 export default class Migrate extends BaseCommand {
     static description = 'Migrate flags and configs from a legacy feature-flag system into a Quonfig workspace.\n\n' +
         'Currently supported sources:\n' +
@@ -172,9 +177,28 @@ export default class Migrate extends BaseCommand {
                 return this.err(error.message);
             throw error;
         }
+        // The fetch and write phases below are silent for a long time on a large
+        // account. Print a plan up front and a step line before each slow phase so
+        // the CLI never looks frozen, even without --verbose.
+        this.log(`Migrating from ${flags.from} into ${dir}.`);
+        if (flags['dry-run']) {
+            this.log('Mode: dry run — changes are summarized but nothing is written.');
+        }
+        else if (flags.push) {
+            this.log('Mode: migrate to a local dir, then push to the Quonfig cloud workspace.');
+        }
+        else {
+            this.log('Mode: local migration only — re-run with --push to also publish to a cloud workspace.');
+        }
+        this.log('');
         let duplicateResolutionsForWarn = null;
+        // Set to the target dir once a local (non-push) migration commits, so the
+        // `finally` block can print "what now?" guidance after the warnings.
+        let localNextStepsDir = null;
         try {
+            this.log(`Authenticating with ${flags.from}...`);
             await source.validateAuth(sourceApiKey);
+            this.log(`Reading the environment list from ${flags.from}...`);
             const environments = await source.listEnvironments();
             // Plan §4.1.1: tell the user the real history horizon BEFORE the slow
             // Phase-2 walk starts. validateAuth populated this for LD under
@@ -187,8 +211,15 @@ export default class Migrate extends BaseCommand {
             }
             const existing = readImportState(dir);
             const sinceEpochMs = computeSince(flags, existing);
+            this.log(`Fetching change history from ${flags.from} — this can take a few minutes for a large account...`);
             const changes = [];
-            for await (const change of source.fetchChanges(sinceEpochMs)) {
+            let lastReportedFetch = 0;
+            for await (const change of source.fetchChanges(sinceEpochMs, (fetched) => {
+                if (fetched - lastReportedFetch >= FETCH_PROGRESS_INTERVAL) {
+                    lastReportedFetch = fetched;
+                    this.log(`  ...fetched ${fetched} change(s) so far`);
+                }
+            })) {
                 changes.push(change);
             }
             const toProcess = flags.recent === undefined ? changes : changes.slice(-flags.recent);
@@ -239,6 +270,8 @@ export default class Migrate extends BaseCommand {
                     this.log(result.committed
                         ? `Pushed ${toProcess.length} change(s). commit=${result.commitSha?.slice(0, 8) ?? ''} action=${result.action}`
                         : `No net changes produced by this run. Nothing to commit or push.`);
+                    this.log(`Migration report written to ${migrationReportPath(dir)} — review it before cutover ` +
+                        '(it lives in the hidden .qf/ directory).');
                     return {
                         ...payload,
                         action: result.action,
@@ -285,6 +318,10 @@ export default class Migrate extends BaseCommand {
             this.log(localResult.committed
                 ? `Committed ${toProcess.length} change(s). commit=${localResult.commitSha?.slice(0, 8) ?? ''} action=${localResult.action}`
                 : `No net changes produced by this run. Nothing to commit.`);
+            // Print "what now?" guidance from the `finally` block (after the
+            // warnings) so it is the last thing the user sees.
+            if (localResult.committed)
+                localNextStepsDir = dir;
             return {
                 ...payload,
                 action: localResult.action,
@@ -307,8 +344,33 @@ export default class Migrate extends BaseCommand {
             warnAboutCoercedSentinels(this, source.getCoercedSentinels?.() ?? null);
             warnAboutDuplicateResolutions(this, duplicateResolutionsForWarn);
             warnAboutConversionNotes(this, source.getConversionNotes?.() ?? null);
+            if (localNextStepsDir)
+                this.printLocalNextSteps(localNextStepsDir);
         }
     }
+    /**
+     * After a local (non-push) migration commits, the user is left at a prompt
+     * with a fresh directory and no obvious next move. Spell out the review →
+     * push flow explicitly.
+     */
+    printLocalNextSteps(dir) {
+        this.log('');
+        this.log('Migration written to a local directory — nothing has been pushed to Quonfig cloud yet.');
+        this.log('');
+        this.log('Next steps:');
+        this.log(`  1. Review the migrated config files in ${dir}`);
+        this.log('  2. Read the migration report — it lists every config that was skipped,');
+        this.log('     coerced, or needs a manual follow-up:');
+        this.log(`       ${migrationReportPath(dir)}`);
+        this.log('     (it lives in the hidden .qf/ directory — use `ls -a` to see it)');
+        this.log('  3. Publish to a Quonfig workspace once the migration looks right:');
+        this.log(`       qfg push --dir ${dir} --workspace <org-slug>/<workspace-slug>`);
+        this.log('     (run `qfg login` first if you have not). You can also re-run this command');
+        this.log('     with `--push --workspace <org-slug>/<workspace-slug>` to migrate and push');
+        this.log('     in one step.');
+        this.log('');
+        this.log('Re-running `qfg migrate` later picks up only the changes made since this run.');
+    }
     async resolvePushWorkspace(slugOrId) {
         const authConfig = await loadAuthConfig();
         if (!authConfig)
@@ -368,7 +430,7 @@ function warnAboutDroppedOverrides(cmd, dropped) {
             cmd.warn(`    - ${flagPath} (${perFlag[flagPath]})`);
         }
     }
-    cmd.warn(`If any of these envs are still in use, restore them in the source system and re-run the migration. Full detail is also written to MIGRATION_REPORT.md.`);
+    cmd.warn(`If any of these envs are still in use, restore them in the source system and re-run the migration. Full detail is also written to .qf/MIGRATION_REPORT.md.`);
 }
 function warnAboutDuplicateResolutions(cmd, resolved) {
     if (!resolved || resolved.total === 0)
@@ -378,7 +440,7 @@ function warnAboutDuplicateResolutions(cmd, resolved) {
     for (const entry of sorted) {
         cmd.warn(`  ${entry.key} (${entry.collisionTypes.join(', ')}): kept ${entry.kept}, deleted ${entry.deleted.join(', ')}`);
     }
-    cmd.warn('Full detail is also written to MIGRATION_REPORT.md.');
+    cmd.warn('Full detail is also written to .qf/MIGRATION_REPORT.md.');
 }
 function warnAboutCoercedSentinels(cmd, coerced) {
     if (!coerced || coerced.total === 0)
@@ -393,7 +455,7 @@ function warnAboutCoercedSentinels(cmd, coerced) {
             cmd.warn(`    - ${flagPath} (${perFlag[flagPath]})`);
         }
     }
-    cmd.warn(`If you want a real default for these rules, set one in the source system and re-run the migration. Full detail is also written to MIGRATION_REPORT.md.`);
+    cmd.warn(`If you want a real default for these rules, set one in the source system and re-run the migration. Full detail is also written to .qf/MIGRATION_REPORT.md.`);
 }
 function warnAboutConversionNotes(cmd, notes) {
     if (!notes || notes.length === 0)
@@ -402,12 +464,12 @@ function warnAboutConversionNotes(cmd, notes) {
     if (rebucketed.length > 0) {
         cmd.warn(`${rebucketed.length} flag(s)/segment(s) use a percentage rollout — LaunchDarkly and Quonfig bucket users ` +
             `differently, so individual user assignments WILL change after migration (the rollout percentage is preserved). ` +
-            `See the "Users will be re-bucketed" section of MIGRATION_REPORT.md.`);
+            `See the "Users will be re-bucketed" section of .qf/MIGRATION_REPORT.md.`);
     }
     const other = notes.filter((n) => n.category !== 'rebucketed-rollout' && n.category !== 'skipped-config');
     if (other.length > 0) {
         cmd.warn(`${other.length} source concept(s) could not be converted exactly (dropped prerequisites, lossy individual ` +
-            `targets, etc.). Nothing was silently dropped — see the "Conversion notes" section of MIGRATION_REPORT.md.`);
+            `targets, etc.). Nothing was silently dropped — see the "Conversion notes" section of .qf/MIGRATION_REPORT.md.`);
     }
 }
 function warnAboutSkippedConfigs(cmd, skipped) {
@@ -418,7 +480,7 @@ function warnAboutSkippedConfigs(cmd, skipped) {
     for (const entry of sorted) {
         cmd.warn(`  ${entry.key}: ${entry.reason}`);
     }
-    cmd.warn('Full detail is also written to MIGRATION_REPORT.md.');
+    cmd.warn('Full detail is also written to .qf/MIGRATION_REPORT.md.');
 }
 function resolveTargetDir(dirFlag, cwd) {
     if (dirFlag)

package/dist/commands/push.js

@@ -238,9 +238,15 @@ export function buildRealDeps(cmd, orgSlug) {
             }
         },
         async getOriginMainSha(dir) {
-            // qfg-gj3i: clone-path returns the local origin/main SHA after
-            // fetch. Bare path has no `.git/` to rev-parse — return undefined
-            // and let the server apply its bare-path lock policy.
+            // Bare path: `diffHeadVsOrigin` (always called first by runPush)
+            // populated the probe clone. Its HEAD is our view of the workspace
+            // tip — and is exactly what the diff was computed against — so it is
+            // the correct `expectedSha` for the server-side optimistic lock
+            // (qfg-gj3i bare-path follow-up, qfg-nhcb). Without it the bare-path
+            // push omits expectedSha and the server rejects it with a 426.
+            if (barePathProbe)
+                return barePathProbe.remoteHeadSha;
+            // Clone path: the local origin/main SHA after fetch.
             if (!(await isGitRepo(dir)))
                 return;
             return getOriginMainSha(dir);

package/dist/commands/workspace/create.js

@@ -136,7 +136,15 @@ export default class WorkspaceCreate extends BaseCommand {
         this.log(`  Envs:        ${created.environments.map((e) => e.name).join(', ')}`);
         this.log('');
         this.log(`To use this workspace locally:`);
-        this.log(`  qfg workspace switch ${created.workspaceSlug}`);
+        // `qfg workspace switch` requires the `<org-slug>/<workspace-slug>` pin
+        // form — bare slugs are rejected. Fall back to the interactive picker if
+        // the server did not return an org slug.
+        if (created.organizationSlug) {
+            this.log(`  qfg workspace switch ${created.organizationSlug}/${created.workspaceSlug}`);
+        }
+        else {
+            this.log(`  qfg workspace switch`);
+        }
         return {
             workspaceId: created.workspaceId,
             workspaceSlug: created.workspaceSlug,

package/dist/migrate/local-write.d.ts

@@ -94,7 +94,7 @@ export interface BuildAuditFinalCommitOptions {
 }
 /**
  * qfg-wbkj: build the final state-file commit for audit-log mode. Writes
- * `.qf/import-state.json` + `MIGRATION_REPORT.md` with cumulative counts read
+ * `.qf/import-state.json` + `.qf/MIGRATION_REPORT.md` with cumulative counts read
  * from disk, and surfaces the source's accumulated dropped/skipped/coerced
  * summaries via `onAccumulatorUpdate`. The `preWrite` / `postWrite` hooks let
  * push-to-cloud merge environments and run server-side-equivalent validation

package/dist/migrate/local-write.js

@@ -301,7 +301,7 @@ export const buildAuditPerChangeCommits = (changes, source) => changes.map((chan
 });
 /**
  * qfg-wbkj: build the final state-file commit for audit-log mode. Writes
- * `.qf/import-state.json` + `MIGRATION_REPORT.md` with cumulative counts read
+ * `.qf/import-state.json` + `.qf/MIGRATION_REPORT.md` with cumulative counts read
  * from disk, and surfaces the source's accumulated dropped/skipped/coerced
  * summaries via `onAccumulatorUpdate`. The `preWrite` / `postWrite` hooks let
  * push-to-cloud merge environments and run server-side-equivalent validation

package/dist/migrate/migration-report.d.ts

@@ -85,5 +85,16 @@ export interface MigrationReportData {
  */
 export declare const deriveFollowUpFromConversionNotes: (base: FollowUpChecklist, notes: ConversionNote[] | undefined) => FollowUpChecklist;
 export declare const buildMigrationReport: (data: MigrationReportData) => string;
+/**
+ * Path of the migration report. It lives inside the `.qf/` bookkeeping
+ * directory (next to `import-state.json`), NOT the workspace root (qfg-a631).
+ *
+ * `qfg push` mirrors every non-dotfile on disk and the server's
+ * config-path-allowlist only permits `configs/`, `feature-flags/`, etc. plus
+ * `quonfig.json`/`README.md`. A root-level `MIGRATION_REPORT.md` got swept
+ * into the push and rejected ("Path not allowed by push allow-list"). Keeping
+ * it under the `.qf/` dotdir means the existing dotfile/dotdir skip in
+ * `bare-path-diff.ts` excludes it — no server change needed.
+ */
 export declare const migrationReportPath: (outputDir: string) => string;
 export declare const writeMigrationReport: (outputDir: string, data: MigrationReportData) => string;

package/dist/migrate/migration-report.js

@@ -565,10 +565,21 @@ export const buildMigrationReport = (data) => {
     }
     return sections.join('\n\n') + '\n';
 };
-export const migrationReportPath = (outputDir) => path.join(outputDir, 'MIGRATION_REPORT.md');
+/**
+ * Path of the migration report. It lives inside the `.qf/` bookkeeping
+ * directory (next to `import-state.json`), NOT the workspace root (qfg-a631).
+ *
+ * `qfg push` mirrors every non-dotfile on disk and the server's
+ * config-path-allowlist only permits `configs/`, `feature-flags/`, etc. plus
+ * `quonfig.json`/`README.md`. A root-level `MIGRATION_REPORT.md` got swept
+ * into the push and rejected ("Path not allowed by push allow-list"). Keeping
+ * it under the `.qf/` dotdir means the existing dotfile/dotdir skip in
+ * `bare-path-diff.ts` excludes it — no server change needed.
+ */
+export const migrationReportPath = (outputDir) => path.join(outputDir, '.qf', 'MIGRATION_REPORT.md');
 export const writeMigrationReport = (outputDir, data) => {
-    fs.mkdirSync(outputDir, { recursive: true });
     const filePath = migrationReportPath(outputDir);
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
     fs.writeFileSync(filePath, buildMigrationReport(data), 'utf8');
     return filePath;
 };

package/dist/migrate/push-to-cloud.d.ts

@@ -28,8 +28,8 @@ export interface PushMigrationToCloudOptions {
      * each commit authored as the original Launch user with their `changedAt` as
      * GIT_AUTHOR_DATE and `summary` as the message. One final state-file commit
      * (migrator identity, now) lands on top carrying .qf/import-state.json +
-     * MIGRATION_REPORT.md so the audit-log commits aren't polluted by bookkeeping
-     * churn. Requires that `source.getCommitMeta` be defined.
+     * .qf/MIGRATION_REPORT.md so the audit-log commits aren't polluted by
+     * bookkeeping churn. Requires that `source.getCommitMeta` be defined.
      */
     fullHistory?: boolean;
     importState: ImportState;

package/dist/migrate/source.d.ts

@@ -87,7 +87,13 @@ export interface CommitMeta {
     message: string;
 }
 export interface MigrationSource {
-    fetchChanges(sinceEpochMs: null | number): AsyncIterable<LegacyChange>;
+    /**
+     * Yields the source's change history oldest→newest. `onProgress`, when
+     * provided, is called with the running fetched-change count as pagination
+     * proceeds, so the CLI can show progress during an otherwise-silent fetch.
+     * Sources that fetch in a single request may ignore it.
+     */
+    fetchChanges(sinceEpochMs: null | number, onProgress?: (fetched: number) => void): AsyncIterable<LegacyChange>;
     /**
      * Optional post-translate accumulator. Returns any rule values that translate()
      * coerced from a sentinel like Launch's empty-string "no value set yet" to the

package/dist/migrate/sources/launch/api.d.ts

@@ -4,4 +4,4 @@ export declare function selectLaunchBaseUrl(staging: boolean): string;
 export declare function applyLaunchBaseUrl(staging: boolean): void;
 export declare function fetchEnvironments(apiKey: string): Promise<Record<string, string>>;
 export declare function fetchChangeHistoryPage(apiKey: string, cursor?: string): Promise<LaunchChangeHistoryResponse>;
-export declare function fetchAllChangeHistory(apiKey: string, sinceEpochMs?: number): Promise<LaunchChangeEntry[]>;
+export declare function fetchAllChangeHistory(apiKey: string, sinceEpochMs?: number, onProgress?: (fetched: number) => void): Promise<LaunchChangeEntry[]>;

package/dist/migrate/sources/launch/api.js

@@ -49,7 +49,7 @@ export async function fetchChangeHistoryPage(apiKey, cursor) {
     }
     return (await apiFetch(`/api/v1/change-history?${params}`, apiKey));
 }
-export async function fetchAllChangeHistory(apiKey, sinceEpochMs) {
+export async function fetchAllChangeHistory(apiKey, sinceEpochMs, onProgress) {
     const collected = [];
     const seenCursors = new Set();
     let cursor;
@@ -66,6 +66,9 @@ export async function fetchAllChangeHistory(apiKey, sinceEpochMs) {
             }
             collected.push(change);
         }
+        // Report cumulative progress after each page — pagination is silent and
+        // can run for many pages (50 changes/page) on a large account.
+        onProgress?.(collected.length);
         if (done || !page.cursor || seenCursors.has(page.cursor))
             break;
         seenCursors.add(page.cursor);

package/dist/migrate/sources/launch.js

@@ -19,10 +19,10 @@ function requireApiKey(operation) {
         throw new MissingAuthError(operation);
     return state.apiKey;
 }
-async function* fetchChangesImpl(sinceEpochMs) {
+async function* fetchChangesImpl(sinceEpochMs, onProgress) {
     const apiKey = requireApiKey('fetchChanges');
     const since = sinceEpochMs === null ? undefined : sinceEpochMs;
-    const changes = await fetchAllChangeHistory(apiKey, since);
+    const changes = await fetchAllChangeHistory(apiKey, since, onProgress);
     for (const change of changes) {
         yield {
             changedAt: change.changedAt,
@@ -147,8 +147,8 @@ async function validateAuthImpl(apiKey) {
     state.coercedSentinels = new Map();
 }
 export const launchSource = {
-    fetchChanges(sinceEpochMs) {
-        return fetchChangesImpl(sinceEpochMs);
+    fetchChanges(sinceEpochMs, onProgress) {
+        return fetchChangesImpl(sinceEpochMs, onProgress);
     },
     getCoercedSentinels: getCoercedSentinelsImpl,
     getCommitMeta: getCommitMetaImpl,

package/dist/push/bare-path-diff.d.ts

@@ -27,6 +27,13 @@
 import { FileDelta } from './diff-summary.js';
 export interface BarePathDiffResult {
     deltas: FileDelta[];
+    /**
+     * The probe clone's HEAD sha — the workspace's current tip on the cloud
+     * repo. Threaded into `configs.push` as `expectedSha` so the server-side
+     * optimistic lock (qfg-gj3i) accepts bare-path pushes instead of rejecting
+     * them with a forced-upgrade 426.
+     */
+    remoteHeadSha: string;
     /** Tmp dir holding the probe clone. Caller must rm -rf in a finally block. */
     scratchDir: string;
     /** Total file count in the scratch clone (under the same prefix rules as `deltas`). */

package/dist/push/bare-path-diff.js

@@ -52,6 +52,22 @@ export async function computeBarePathDiff(localDir, remoteUrl) {
         }
         throw error;
     }
+    // The probe clone's HEAD is the workspace tip — the optimistic-lock value
+    // `configs.push` needs as `expectedSha` (qfg-gj3i bare-path follow-up).
+    let remoteHeadSha;
+    try {
+        const { stdout } = await runGit(['-C', scratchDir, 'rev-parse', 'HEAD']);
+        remoteHeadSha = stdout.trim();
+    }
+    catch (error) {
+        try {
+            fs.rmSync(scratchDir, { force: true, recursive: true });
+        }
+        catch {
+            /* ignore */
+        }
+        throw error;
+    }
     const localFiles = collectFiles(localDir);
     const remoteFiles = collectFiles(scratchDir);
     const deltas = [];
@@ -69,7 +85,7 @@ export async function computeBarePathDiff(localDir, remoteUrl) {
             deltas.push({ kind: 'deleted', path: rel, beforeJson: remote.content });
         }
     }
-    return { deltas, scratchDir, totalRemoteFiles: remoteFiles.size };
+    return { deltas, remoteHeadSha, scratchDir, totalRemoteFiles: remoteFiles.size };
 }
 /**
  * Walk `root` and return a map of relative-path -> {content, hash} for every

package/dist/push/run-push.d.ts

@@ -87,13 +87,11 @@ export interface GitOps {
     /** Pack-push — local HEAD SHA. Forwarded as `newSha` on the wire. */
     getHeadSha(dir: string): Promise<string>;
     /**
-     * Returns the local SHA of `origin/main` after fetch — the remote tip
-     * the diff was computed against — or undefined if no `origin/main` ref
-     * exists (bare-path push, or repo never fetched).
-     *
-     * Threaded into the `configs.push` call as `expectedSha` so the
-     * server-side optimistic lock (qfg-gj3i) can reject pushes whose
-     * origin moved between fetch and push.
+     * Returns the workspace-HEAD sha that the diff was computed against —
+     * threaded into `configs.push` as `expectedSha` for the server-side
+     * optimistic lock (qfg-gj3i). Clone path: the local `origin/main` SHA
+     * after fetch. Bare path: the probe clone's HEAD. Undefined only when
+     * neither is available; the server rejects a missing value with a 426.
      */
     getOriginMainSha(dir: string): Promise<string | undefined>;
     /**

package/dist/push/run-push.js

@@ -354,10 +354,10 @@ export async function runPush(input, deps) {
             ...(d.beforeJson === undefined ? {} : { beforeJson: d.beforeJson }),
             ...(d.afterJson === undefined ? {} : { afterJson: d.afterJson }),
         }));
-        // qfg-gj3i: pass origin/main SHA as expectedSha so the server-side
-        // optimistic lock can reject the push if origin moved between fetch
-        // and now. Undefined on bare-path; the server treats absence as
-        // "non-clone client" and applies its bare-path policy.
+        // qfg-gj3i: expectedSha is the workspace HEAD the server checks its
+        // optimistic lock against. For the bare path it is the probe clone's
+        // HEAD (resolved inside getOriginMainSha, qfg-nhcb). It must be present
+        // — the server rejects a missing expectedSha with a forced-upgrade 426.
         const expectedSha = await deps.gitOps.getOriginMainSha(input.dir);
         log('Sending push to Quonfig cloud...');
         const result = await deps.pushToServer({

package/dist/serve/handlers/evalContext.js

@@ -87,7 +87,7 @@ export async function handleEvalContext(req, res, ctxToken, deps) {
         const result = {
             value: {
                 type: match.value.type,
-                value: coerceNumeric(match.value.type, match.value.value),
+                value: match.value.value,
             },
             configId: cfg.id,
             configType: cfg.type,
@@ -113,35 +113,6 @@ export async function handleEvalContext(req, res, ctxToken, deps) {
     res.writeHead(200, { 'Content-Type': 'application/json' });
     res.end(JSON.stringify(envelope));
 }
-/**
- * qfg-38sf.7: coerce `int`/`double` values to JS numbers so the envelope emits
- * JSON numbers, not JSON strings.
- *
- * Config files (and integration-test-data) store numeric values as JSON
- * strings — e.g. `{"type": "int", "value": "5"}`. api-delivery's
- * `Value.UnmarshalJSON` (api-delivery/internal/config/types.go:182-215) coerces
- * `int` via `strconv.ParseInt` and `double` via `strconv.ParseFloat` at config
- * *load* time, so its EvalEnvelope emits JSON numbers. sdk-node's datadir
- * loader does no such coercion and passes the value through verbatim, so
- * `match.value.value` arrives here as a string. We coerce on output to match
- * api-delivery — a browser SDK consumer doing arithmetic on an integer flag
- * would otherwise get string-concatenation behavior.
- *
- * Discriminate on `valueType` — the value's *own* type, the same field
- * api-delivery switches on (`raw.Type`). This is correct even when the matched
- * value's type differs from the config's declared `valueType` (e.g. a
- * weighted-values config resolving to an `int` arm). ONLY `int` and `double`
- * are coerced; `string`, `bool`, `string_list`, `json`, `provided`, etc. pass
- * through untouched. Integration-test-data's largest numeric value is ~2.5e12,
- * far below Number.MAX_SAFE_INTEGER, so `Number(...)` is lossless here.
- */
-function coerceNumeric(valueType, value) {
-    if ((valueType === 'int' || valueType === 'double') && typeof value === 'string') {
-        const n = Number(value);
-        return Number.isNaN(n) ? value : n;
-    }
-    return value;
-}
 function resolutionReason(cfg, _match) {
     if (cfg.valueType === 'weighted_values')
         return 'SPLIT';

package/dist/util/friction-log.d.ts

@@ -4,7 +4,13 @@ export interface FrictionEntry {
     exitCode: number;
     ts: string;
 }
-export declare function getDefaultFrictionLogPath(home?: string): string;
+/**
+ * Default friction-log location: a `friction.log` file inside the shared
+ * Quonfig config home (`~/.quonfig`, the same dir as tokens/profile config).
+ * Honors `QUONFIG_CONFIG_HOME` via `getQuonfigConfigHome()` so tests and
+ * isolated environments redirect it along with everything else.
+ */
+export declare function getDefaultFrictionLogPath(configHome?: string): string;
 export declare function getFrictionLogPath(envValue?: string | undefined, cwd?: string): null | string;
 export declare function buildFrictionEntry(opts: {
     argv?: string[];

package/dist/util/friction-log.js

@@ -1,8 +1,14 @@
 import fs from 'node:fs';
-import os from 'node:os';
 import path from 'node:path';
-export function getDefaultFrictionLogPath(home = os.homedir()) {
-    return path.join(home, '.qfg', 'friction.log');
+import { getQuonfigConfigHome } from './quonfig-home.js';
+/**
+ * Default friction-log location: a `friction.log` file inside the shared
+ * Quonfig config home (`~/.quonfig`, the same dir as tokens/profile config).
+ * Honors `QUONFIG_CONFIG_HOME` via `getQuonfigConfigHome()` so tests and
+ * isolated environments redirect it along with everything else.
+ */
+export function getDefaultFrictionLogPath(configHome = getQuonfigConfigHome()) {
+    return path.join(configHome, 'friction.log');
 }
 export function getFrictionLogPath(envValue, cwd = process.cwd()) {
     if (envValue === undefined)

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-declare const _default: "0.0.53";
+declare const _default: "0.0.55";
 export default _default;

package/dist/version.js

@@ -1,2 +1,2 @@
 // AUTO-GENERATED from package.json by scripts/generate-version.mjs — do not edit.
-export default '0.0.53';
+export default '0.0.55';

package/oclif.manifest.json

@@ -3738,5 +3738,5 @@
       ]
     }
   },
-  "version": "0.0.53"
+  "version": "0.0.55"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "packageManager": "yarn@4.11.0+sha512.4e54aeace9141df2f0177c266b05ec50dc044638157dae128c471ba65994ac802122d7ab35bcd9e81641228b7dcf24867d28e750e0bcae8a05277d600008ad54",
   "name": "@quonfig/cli",
-  "version": "0.0.53",
+  "version": "0.0.55",
   "bugs": {
     "url": "https://github.com/quonfig/cli/issues"
   },
@@ -21,10 +21,10 @@
     "@oclif/core": "^3.18.2",
     "@oclif/plugin-help": "^6",
     "@oclif/plugin-plugins": "^4",
-    "@quonfig/node": "^0.0.30",
+    "@quonfig/node": "^0.0.32",
     "acorn": "^8.10.0",
     "acorn-walk": "^8.3.5",
-    "chalk": "^5.4.1",
+    "chalk": "^5.6.2",
     "common-tags": "^1.8.2",
     "fuzzy": "^0.1.3",
     "inquirer-autocomplete-standalone": "^0.8.1",
@@ -54,11 +54,11 @@
     "eslint-plugin-only-error": "^1.0.2",
     "mocha": "^11.7.5",
     "msw": "^2.14.6",
-    "oclif": "^4.22.29",
+    "oclif": "^4.23.7",
     "prettier": "^3.8.3",
     "shx": "^0.3.4",
     "ts-node": "^10.9.1",
-    "tsx": "^4.21.0"
+    "tsx": "^4.22.0"
   },
   "engines": {
     "node": ">=20.9.0"