@quonfig/cli 0.0.66 → 0.0.68

package/README.md

@@ -17,7 +17,7 @@ $ npm install -g @quonfig/cli
 $ qfg COMMAND
 running command...
 $ qfg (--version)
-@quonfig/cli/0.0.66 linux-x64 node-v24.4.1
+@quonfig/cli/0.0.68 linux-x64 node-v24.4.1
 $ qfg --help [COMMAND]
 USAGE
   $ qfg COMMAND
@@ -201,7 +201,7 @@ EXAMPLES
   $ qfg activity restore my.flag --yes
 ```
 
-_See code: [src/commands/activity.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/activity.ts)_
+_See code: [src/commands/activity.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/activity.ts)_
 
 ## `qfg activity deleted`
 
@@ -230,7 +230,7 @@ EXAMPLES
   $ qfg activity deleted --json
 ```
 
-_See code: [src/commands/activity/deleted.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/activity/deleted.ts)_
+_See code: [src/commands/activity/deleted.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/activity/deleted.ts)_
 
 ## `qfg activity feed`
 
@@ -265,7 +265,7 @@ EXAMPLES
   $ qfg activity feed --json
 ```
 
-_See code: [src/commands/activity/feed.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/activity/feed.ts)_
+_See code: [src/commands/activity/feed.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/activity/feed.ts)_
 
 ## `qfg activity history [NAME]`
 
@@ -299,7 +299,7 @@ EXAMPLES
   $ qfg activity history request.timeout --json
 ```
 
-_See code: [src/commands/activity/history.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/activity/history.ts)_
+_See code: [src/commands/activity/history.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/activity/history.ts)_
 
 ## `qfg activity restore [NAME]`
 
@@ -338,7 +338,7 @@ EXAMPLES
   $ qfg activity restore request.timeout --type config --yes
 ```
 
-_See code: [src/commands/activity/restore.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/activity/restore.ts)_
+_See code: [src/commands/activity/restore.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/activity/restore.ts)_
 
 ## `qfg audit-log [NAME]`
 
@@ -366,7 +366,7 @@ EXAMPLES
   $ qfg audit-log my.flag
 ```
 
-_See code: [src/commands/audit-log.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/audit-log.ts)_
+_See code: [src/commands/audit-log.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/audit-log.ts)_
 
 ## `qfg cleanup`
 
@@ -407,7 +407,7 @@ EXAMPLES
   $ qfg cleanup status my.flag.key
 ```
 
-_See code: [src/commands/cleanup.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/cleanup.ts)_
+_See code: [src/commands/cleanup.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/cleanup.ts)_
 
 ## `qfg cleanup list`
 
@@ -453,7 +453,7 @@ EXAMPLES
   $ qfg cleanup list --json
 ```
 
-_See code: [src/commands/cleanup/list.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/cleanup/list.ts)_
+_See code: [src/commands/cleanup/list.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/cleanup/list.ts)_
 
 ## `qfg cleanup remove [NAME]`
 
@@ -498,7 +498,7 @@ EXAMPLES
   $ qfg cleanup remove my.flag.key --json
 ```
 
-_See code: [src/commands/cleanup/remove.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/cleanup/remove.ts)_
+_See code: [src/commands/cleanup/remove.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/cleanup/remove.ts)_
 
 ## `qfg cleanup status [NAME]`
 
@@ -538,7 +538,7 @@ EXAMPLES
   $ qfg cleanup status my.flag.key --json
 ```
 
-_See code: [src/commands/cleanup/status.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/cleanup/status.ts)_
+_See code: [src/commands/cleanup/status.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/cleanup/status.ts)_
 
 ## `qfg cleanup verify [NAME]`
 
@@ -584,7 +584,7 @@ EXAMPLES
   $ qfg cleanup verify my.flag.key && qfg delete my.flag.key
 ```
 
-_See code: [src/commands/cleanup/verify.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/cleanup/verify.ts)_
+_See code: [src/commands/cleanup/verify.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/cleanup/verify.ts)_
 
 ## `qfg config-schema`
 
@@ -613,7 +613,7 @@ EXAMPLES
   $ qfg config-schema --json-schema    # full JSON Schema document (copy into your editor)
 ```
 
-_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/config-schema.ts)_
+_See code: [src/commands/config-schema.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/config-schema.ts)_
 
 ## `qfg create NAME`
 
@@ -700,7 +700,7 @@ EXAMPLES
   $ qfg set-rollout my.new.flag --environment production --true-percent 20
 ```
 
-_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/create.ts)_
+_See code: [src/commands/create.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/create.ts)_
 
 ## `qfg delete NAME`
 
@@ -746,7 +746,7 @@ EXAMPLES
   $ qfg delete my.config --yes
 ```
 
-_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/delete.ts)_
+_See code: [src/commands/delete.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/delete.ts)_
 
 ## `qfg flag info [NAME]`
 
@@ -950,7 +950,7 @@ EXAMPLES
   $ qfg generate --targets node-ts -o ./dist # combine with targets
 ```
 
-_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/generate.ts)_
+_See code: [src/commands/generate.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/generate.ts)_
 
 ## `qfg generate-new-hex-key`
 
@@ -973,7 +973,7 @@ EXAMPLES
   $ qfg generate-new-hex-key
 ```
 
-_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/generate-new-hex-key.ts)_
+_See code: [src/commands/generate-new-hex-key.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/generate-new-hex-key.ts)_
 
 ## `qfg get [NAME]`
 
@@ -1005,7 +1005,7 @@ EXAMPLES
   $ qfg get my.config.name --environment=production
 ```
 
-_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/get.ts)_
+_See code: [src/commands/get.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/get.ts)_
 
 ## `qfg history NAME`
 
@@ -1031,7 +1031,7 @@ EXAMPLES
   $ qfg history my.flag
 ```
 
-_See code: [src/commands/history.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/history.ts)_
+_See code: [src/commands/history.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/history.ts)_
 
 ## `qfg info [NAME]`
 
@@ -1079,7 +1079,7 @@ EXAMPLES
   $ qfg info my.config.name --exclude-evaluations   # skip 24h stats
 ```
 
-_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/info.ts)_
+_See code: [src/commands/info.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/info.ts)_
 
 ## `qfg init [DIRECTORY]`
 
@@ -1087,16 +1087,16 @@ Initialize or update a Quonfig workspace
 
 ```
 USAGE
-  $ qfg init [DIRECTORY] [--json] [--interactive] [--no-color] [--verbose] [--dry-run] [--samples]
-    [--workspace <value>]
+  $ qfg init [DIRECTORY] [--json] [--interactive] [--no-color] [--verbose] [--dry-run] [--samples] [-w
+    <value>]
 
 ARGUMENTS
   DIRECTORY  [default: .] Target directory (default: current directory)
 
 FLAGS
-  --dry-run            Show what would be done without writing anything
-  --[no-]samples       Include sample configs (default: yes on first init, no on update)
-  --workspace=<value>  Workspace pin in <org-slug>/<workspace-slug> form (Guard 1). If omitted, no pin is written.
+  -w, --workspace=<value>  Workspace pin in <org-slug>/<workspace-slug> form (Guard 1). If omitted, no pin is written.
+      --dry-run            Show what would be done without writing anything
+      --[no-]samples       Include sample configs (default: yes on first init, no on update)
 
 GLOBAL FLAGS
   --[no-]interactive  Force interactive mode
@@ -1119,7 +1119,7 @@ EXAMPLES
   $ qfg init --dry-run
 ```
 
-_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/init.ts)_
+_See code: [src/commands/init.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/init.ts)_
 
 ## `qfg interactive`
 
@@ -1149,7 +1149,7 @@ EXAMPLES
   $ qfg
 ```
 
-_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/interactive.ts)_
+_See code: [src/commands/interactive.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/interactive.ts)_
 
 ## `qfg list`
 
@@ -1189,7 +1189,7 @@ EXAMPLES
   $ qfg list --feature-flags
 ```
 
-_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/list.ts)_
+_See code: [src/commands/list.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/list.ts)_
 
 ## `qfg log`
 
@@ -1214,7 +1214,7 @@ EXAMPLES
   $ qfg log --limit 5
 ```
 
-_See code: [src/commands/log.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/log.ts)_
+_See code: [src/commands/log.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/log.ts)_
 
 ## `qfg log-level NAME`
 
@@ -1279,7 +1279,7 @@ EXAMPLES
   $ qfg log-level log-level.my-app --target=Chatty --value=INFO --environment=production
 ```
 
-_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/log-level.ts)_
+_See code: [src/commands/log-level.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/log-level.ts)_
 
 ## `qfg login`
 
@@ -1304,7 +1304,7 @@ EXAMPLES
   $ qfg login --profile myprofile
 ```
 
-_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/login.ts)_
+_See code: [src/commands/login.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/login.ts)_
 
 ## `qfg logout`
 
@@ -1327,7 +1327,7 @@ EXAMPLES
   $ qfg logout
 ```
 
-_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/logout.ts)_
+_See code: [src/commands/logout.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/logout.ts)_
 
 ## `qfg migrate`
 
@@ -1337,33 +1337,33 @@ Migrate flags and configs from a legacy feature-flag system into a Quonfig works
 USAGE
   $ qfg migrate --from launch|launchdarkly|flagsmith [--json] [--interactive] [--no-color] [--verbose]
     [--api-key <value>] [--dir <value>] [--dry-run] [--full-summary] [--project <value>] [--push] [--recent <value>]
-    [--reset] [--since <value>] [--source-api-key <value>] [--staging] [--strict-keys] [--workspace <value>]
+    [--reset] [--since <value>] [--source-api-key <value>] [--staging] [--strict-keys] [-w <value>]
 
 FLAGS
-  --api-key=<value>         Deprecated alias for --source-api-key, kept for the `launch` source (or set LAUNCH_API_KEY).
-                            Prefer --source-api-key.
-  --dir=<value>             Target local workspace directory. Defaults to cwd if it looks like a Quonfig workspace,
-                            otherwise ./quonfig-repo.
-  --dry-run                 Fetch and summarize changes without writing anything
-  --from=<option>           (required) Legacy source to migrate from
-                            <options: launch|launchdarkly|flagsmith>
-  --full-summary            Reify the full source-side audit log into per-change git commits (author = original user,
-                            date = original timestamp, message = change summary). Only valid on first-run imports — pass
-                            --reset to re-import everything from scratch with this flag.
-  --project=<value>         Source-system project identifier. For --from launchdarkly this is the project KEY (default:
-                            "default"; env: LAUNCHDARKLY_PROJECT_KEY). For --from flagsmith this is the numeric project
-                            ID (env: FLAGSMITH_PROJECT_ID). Ignored by --from launch.
-  --push                    After migrating to a local dir, also push to the given --workspace on Quonfig cloud
-  --recent=<value>          Import only the last N changes (useful for tire-kicking)
-  --reset                   Ignore the delta cursor and re-import everything from scratch
-  --since=<value>           Override the delta cursor (epoch milliseconds or ISO-8601 timestamp)
-  --source-api-key=<value>  API key for the legacy source. Set this, QUONFIG_MIGRATE_API_KEY, or the per-provider env
-                            var (LAUNCHDARKLY_API_KEY, LAUNCH_API_KEY, FLAGSMITH_API_KEY).
-  --staging                 Hit the staging API for the source (dev-only)
-  --strict-keys             Refuse to migrate if any source key would need rewriting to satisfy Quonfig key rules
-                            (Policy A), instead of rewriting it. Use when you require byte-identical keys.
-  --workspace=<value>       Quonfig cloud workspace slug to push to. Requires `qfg login` and is typically combined with
-                            --push.
+  -w, --workspace=<value>       Quonfig cloud workspace slug to push to. Requires `qfg login` and is typically combined
+                                with --push.
+      --api-key=<value>         Deprecated alias for --source-api-key, kept for the `launch` source (or set
+                                LAUNCH_API_KEY). Prefer --source-api-key.
+      --dir=<value>             Target local workspace directory. Defaults to cwd if it looks like a Quonfig workspace,
+                                otherwise ./quonfig-repo.
+      --dry-run                 Fetch and summarize changes without writing anything
+      --from=<option>           (required) Legacy source to migrate from
+                                <options: launch|launchdarkly|flagsmith>
+      --full-summary            Reify the full source-side audit log into per-change git commits (author = original
+                                user, date = original timestamp, message = change summary). Only valid on first-run
+                                imports — pass --reset to re-import everything from scratch with this flag.
+      --project=<value>         Source-system project identifier. For --from launchdarkly this is the project KEY
+                                (default: "default"; env: LAUNCHDARKLY_PROJECT_KEY). For --from flagsmith this is the
+                                numeric project ID (env: FLAGSMITH_PROJECT_ID). Ignored by --from launch.
+      --push                    After migrating to a local dir, also push to the given --workspace on Quonfig cloud
+      --recent=<value>          Import only the last N changes (useful for tire-kicking)
+      --reset                   Ignore the delta cursor and re-import everything from scratch
+      --since=<value>           Override the delta cursor (epoch milliseconds or ISO-8601 timestamp)
+      --source-api-key=<value>  API key for the legacy source. Set this, QUONFIG_MIGRATE_API_KEY, or the per-provider
+                                env var (LAUNCHDARKLY_API_KEY, LAUNCH_API_KEY, FLAGSMITH_API_KEY).
+      --staging                 Hit the staging API for the source (dev-only)
+      --strict-keys             Refuse to migrate if any source key would need rewriting to satisfy Quonfig key rules
+                                (Policy A), instead of rewriting it. Use when you require byte-identical keys.
 
 GLOBAL FLAGS
   --[no-]interactive  Force interactive mode
@@ -1392,7 +1392,7 @@ EXAMPLES
   $ qfg migrate --from launch --source-api-key $LAUNCH_API_KEY --dir ./quonfig-repo --staging
 ```
 
-_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/migrate.ts)_
+_See code: [src/commands/migrate.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/migrate.ts)_
 
 ## `qfg migrate doctor`
 
@@ -1430,7 +1430,7 @@ EXAMPLES
   $ qfg migrate doctor --json
 ```
 
-_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/migrate/doctor.ts)_
+_See code: [src/commands/migrate/doctor.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/migrate/doctor.ts)_
 
 ## `qfg migrate my-code`
 
@@ -1462,7 +1462,7 @@ EXAMPLES
   $ qfg migrate my-code --dry-run
 ```
 
-_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/migrate/my-code.ts)_
+_See code: [src/commands/migrate/my-code.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/migrate/my-code.ts)_
 
 ## `qfg migrate status`
 
@@ -1493,7 +1493,7 @@ EXAMPLES
   $ qfg migrate status --json
 ```
 
-_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/migrate/status.ts)_
+_See code: [src/commands/migrate/status.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/migrate/status.ts)_
 
 ## `qfg override [NAME] [VALUE]`
 
@@ -1548,7 +1548,7 @@ EXAMPLES
   $ qfg override my.flag true --env=staging
 ```
 
-_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/override.ts)_
+_See code: [src/commands/override.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/override.ts)_
 
 ## `qfg pull`
 
@@ -1556,15 +1556,14 @@ Clone or update a local copy of your workspace config files.
 
 ```
 USAGE
-  $ qfg pull [--json] [--interactive] [--no-color] [--verbose] [--dir <value>] [--rebase] [--workspace
-    <value>]
+  $ qfg pull [--json] [--interactive] [--no-color] [--verbose] [--dir <value>] [--rebase] [-w <value>]
 
 FLAGS
-  --dir=<value>        Local directory to clone/update (defaults to cwd / nearest ancestor with quonfig.json /
-                       QUONFIG_DIR env var)
-  --rebase             Replay local commits on top of origin/main when the two have diverged. Conflicts are surfaced via
-                       standard git markers; resolve with `git rebase --continue`.
-  --workspace=<value>  Workspace ID (defaults to active profile)
+  -w, --workspace=<value>  Workspace ID (defaults to active profile)
+      --dir=<value>        Local directory to clone/update (defaults to cwd / nearest ancestor with quonfig.json /
+                           QUONFIG_DIR env var)
+      --rebase             Replay local commits on top of origin/main when the two have diverged. Conflicts are surfaced
+                           via standard git markers; resolve with `git rebase --continue`.
 
 GLOBAL FLAGS
   --[no-]interactive  Force interactive mode
@@ -1596,7 +1595,7 @@ EXAMPLES
   $ qfg pull  # uses QUONFIG_DIR env var
 ```
 
-_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/pull.ts)_
+_See code: [src/commands/pull.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/pull.ts)_
 
 ## `qfg push`
 
@@ -1604,16 +1603,16 @@ Push local config changes up to your workspace on Quonfig cloud.
 
 ```
 USAGE
-  $ qfg push [--json] [--interactive] [--no-color] [--verbose] [--dir <value>] [--workspace <value>]
-    [--yes] [--skip-validate] [--no-pin-write] [-m <value>]
+  $ qfg push [--json] [--interactive] [--no-color] [--verbose] [--dir <value>] [-w <value>] [--yes]
+    [--skip-validate] [--no-pin-write] [-m <value>]
 
 FLAGS
   -m, --message=<value>    Commit message for bare-path pushes (ignored on clone-path; push what is already committed)
+  -w, --workspace=<value>  Workspace slug or UUID (defaults to active profile)
       --dir=<value>        Local directory to push (defaults to cwd / nearest ancestor with quonfig.json / QUONFIG_DIR
                            env var)
       --no-pin-write       Do not offer to write workspace slug into quonfig.json on success
       --skip-validate      Skip `qfg validate` preflight
-      --workspace=<value>  Workspace slug or UUID (defaults to active profile)
       --yes                Skip the standard Y/N confirm. Never skips typed-slug prompts.
 
 GLOBAL FLAGS
@@ -1645,7 +1644,7 @@ EXAMPLES
   $ qfg push --dir ./our-config --yes
 ```
 
-_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/push.ts)_
+_See code: [src/commands/push.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/push.ts)_
 
 ## `qfg run [COMMAND]`
 
@@ -1696,7 +1695,7 @@ EXAMPLES
   $ qfg run --env DATABASE_URL=db.url --preserve-env --environment=staging -- npm test
 ```
 
-_See code: [src/commands/run.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/run.ts)_
+_See code: [src/commands/run.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/run.ts)_
 
 ## `qfg schema NAME`
 
@@ -1734,7 +1733,7 @@ EXAMPLES
   $ qfg schema my-schema --set-json-schema=@schemas/my-schema.json --protected
 ```
 
-_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/schema.ts)_
+_See code: [src/commands/schema.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/schema.ts)_
 
 ## `qfg sdk-key`
 
@@ -1761,7 +1760,7 @@ EXAMPLES
   $ qfg sdk-key revoke <key-id>
 ```
 
-_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/sdk-key.ts)_
+_See code: [src/commands/sdk-key.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/sdk-key.ts)_
 
 ## `qfg sdk-key create`
 
@@ -1793,7 +1792,7 @@ EXAMPLES
   $ qfg sdk-key create --environment staging --type browser
 ```
 
-_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/sdk-key/create.ts)_
+_See code: [src/commands/sdk-key/create.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/sdk-key/create.ts)_
 
 ## `qfg sdk-key list`
 
@@ -1822,7 +1821,7 @@ EXAMPLES
   $ qfg sdk-key list --environment production
 ```
 
-_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/sdk-key/list.ts)_
+_See code: [src/commands/sdk-key/list.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/sdk-key/list.ts)_
 
 ## `qfg sdk-key revoke KEYID`
 
@@ -1849,7 +1848,7 @@ EXAMPLES
   $ qfg sdk-key revoke a1b2c3d4-e5f6-7890-abcd-ef1234567890
 ```
 
-_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/sdk-key/revoke.ts)_
+_See code: [src/commands/sdk-key/revoke.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/sdk-key/revoke.ts)_
 
 ## `qfg serve`
 
@@ -1906,7 +1905,7 @@ EXAMPLES
   $ qfg serve --port 6581 --frontend-sdk-key PUBLIC_KEY
 ```
 
-_See code: [src/commands/serve.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/serve.ts)_
+_See code: [src/commands/serve.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/serve.ts)_
 
 ## `qfg set-default [NAME]`
 
@@ -1977,7 +1976,7 @@ EXAMPLES
   $ qfg pull && qfg config-schema
 ```
 
-_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/set-default.ts)_
+_See code: [src/commands/set-default.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/set-default.ts)_
 
 ## `qfg set-rollout [NAME]`
 
@@ -2054,7 +2053,7 @@ EXAMPLES
   $ qfg set-rollout my.variant.flag --environment production --weights "a:33,b:33,c:34" --hash-by user.id
 ```
 
-_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/set-rollout.ts)_
+_See code: [src/commands/set-rollout.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/set-rollout.ts)_
 
 ## `qfg sync`
 
@@ -2086,7 +2085,7 @@ EXAMPLES
   $ qfg sync --watch --dir ./our-config --interval 30
 ```
 
-_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/sync.ts)_
+_See code: [src/commands/sync.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/sync.ts)_
 
 ## `qfg toggle [NAME]`
 
@@ -2188,7 +2187,7 @@ EXAMPLES
   $ qfg verify --json
 ```
 
-_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/verify.ts)_
+_See code: [src/commands/verify.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/verify.ts)_
 
 ## `qfg whoami`
 
@@ -2211,7 +2210,7 @@ EXAMPLES
   $ qfg whoami
 ```
 
-_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/whoami.ts)_
+_See code: [src/commands/whoami.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/whoami.ts)_
 
 ## `qfg workspace`
 
@@ -2234,7 +2233,7 @@ EXAMPLES
   $ qfg workspace
 ```
 
-_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/workspace.ts)_
+_See code: [src/commands/workspace.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/workspace.ts)_
 
 ## `qfg workspace bootstrap`
 
@@ -2267,7 +2266,7 @@ EXAMPLES
   $ qfg workspace bootstrap --dir ./our-config --skip-validate
 ```
 
-_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/workspace/bootstrap.ts)_
+_See code: [src/commands/workspace/bootstrap.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/workspace/bootstrap.ts)_
 
 ## `qfg workspace create SLUG`
 
@@ -2301,7 +2300,7 @@ EXAMPLES
   $ qfg workspace create my-team --org 11111111-1111-1111-1111-111111111111
 ```
 
-_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/workspace/create.ts)_
+_See code: [src/commands/workspace/create.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/workspace/create.ts)_
 
 ## `qfg workspace switch [SLUG]`
 
@@ -2329,7 +2328,7 @@ EXAMPLES
   $ qfg workspace switch acme/production
 ```
 
-_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.66/src/commands/workspace/switch.ts)_
+_See code: [src/commands/workspace/switch.ts](https://github.com/quonfig/cli/blob/v0.0.68/src/commands/workspace/switch.ts)_
 <!-- commandsstop -->
 
 ## Local Development

package/dist/commands/init.js

@@ -27,6 +27,7 @@ export default class Init extends BaseCommand {
             description: 'Include sample configs (default: yes on first init, no on update)',
         }),
         workspace: Flags.string({
+            char: 'w',
             description: 'Workspace pin in <org-slug>/<workspace-slug> form (Guard 1). If omitted, no pin is written.',
             required: false,
         }),

package/dist/commands/migrate.js

@@ -96,6 +96,7 @@ export default class Migrate extends BaseCommand {
                 '(Policy A), instead of rewriting it. Use when you require byte-identical keys.',
         }),
         workspace: Flags.string({
+            char: 'w',
             description: 'Quonfig cloud workspace slug to push to. Requires `qfg login` and is typically combined with --push.',
         }),
     };

package/dist/commands/pull.js

@@ -35,6 +35,7 @@ CLI shortcuts (no JSON editing needed for simple cases):
             description: 'Replay local commits on top of origin/main when the two have diverged. Conflicts are surfaced via standard git markers; resolve with `git rebase --continue`.',
         }),
         workspace: Flags.string({
+            char: 'w',
             description: 'Workspace ID (defaults to active profile)',
         }),
     };

package/dist/commands/push.js

@@ -33,6 +33,7 @@ Enforces three guards before touching the remote:
             description: 'Local directory to push (defaults to cwd / nearest ancestor with quonfig.json / QUONFIG_DIR env var)',
         }),
         workspace: Flags.string({
+            char: 'w',
             description: 'Workspace slug or UUID (defaults to active profile)',
         }),
         yes: Flags.boolean({

package/dist/migrate/import-state.d.ts

@@ -10,5 +10,8 @@ export declare class CrossSourceError extends Error {
 }
 export declare function writeImportState(outputDir: string, state: ImportState): void;
 export declare function readImportState(outputDir: string): ImportState | null;
+export declare function writeKeyPlan(outputDir: string, keys: Record<string, string>): void;
+/** The persisted plan, or null when absent/unreadable (treat as first run). */
+export declare function readKeyPlan(outputDir: string): null | Record<string, string>;
 export declare function assertSourceMatches(outputDir: string, requestedSource: string): void;
 export declare function removeQfFromGitignore(outputDir: string): void;

package/dist/migrate/import-state.js

@@ -35,6 +35,38 @@ export function readImportState(outputDir) {
         return null;
     return parsed;
 }
+function keyPlanPath(outputDir) {
+    return path.join(outputDir, '.qf', 'key-plan.json');
+}
+export function writeKeyPlan(outputDir, keys) {
+    const filePath = keyPlanPath(outputDir);
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    const sorted = {};
+    for (const source of Object.keys(keys).sort())
+        sorted[source] = keys[source];
+    const serialized = { keys: sorted, version: 1 };
+    fs.writeFileSync(filePath, JSON.stringify(serialized, null, 2) + '\n', 'utf8');
+}
+/** The persisted plan, or null when absent/unreadable (treat as first run). */
+export function readKeyPlan(outputDir) {
+    const filePath = keyPlanPath(outputDir);
+    if (!fs.existsSync(filePath))
+        return null;
+    try {
+        const parsed = JSON.parse(fs.readFileSync(filePath, 'utf8'));
+        if (typeof parsed?.keys !== 'object' || parsed.keys === null || Array.isArray(parsed.keys))
+            return null;
+        const out = {};
+        for (const [source, final] of Object.entries(parsed.keys)) {
+            if (typeof final === 'string')
+                out[source] = final;
+        }
+        return out;
+    }
+    catch {
+        return null;
+    }
+}
 export function assertSourceMatches(outputDir, requestedSource) {
     const state = readImportState(outputDir);
     if (!state)