@quonfig/cli 0.5.0 → 0.6.0

package/oclif.manifest.json

@@ -530,6 +530,83 @@
         "delete.js"
       ]
     },
+    "environments": {
+      "aliases": [
+        "envs"
+      ],
+      "args": {},
+      "description": "List the environments in your workspace.\n\nUse these names with --environment (set-default, set-rollout, get, run, ...).\n\"[Default]\" is not an environment: it names the default rules that every\nenvironment without rules of its own inherits. Protected environments may\nrequire extra permissions to change.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "interactive": {
+          "description": "Force interactive mode",
+          "helpGroup": "GLOBAL",
+          "name": "interactive",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "no-color": {
+          "description": "Do not colorize output",
+          "env": "NO_COLOR",
+          "helpGroup": "GLOBAL",
+          "name": "no-color",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose output",
+          "helpGroup": "GLOBAL",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "workspace": {
+          "char": "w",
+          "description": "Workspace slug to use (overrides QUONFIG_WORKSPACE env var and saved default)",
+          "helpGroup": "GLOBAL",
+          "name": "workspace",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "char": "p",
+          "description": "Deprecated: use --workspace instead",
+          "helpGroup": "GLOBAL",
+          "hidden": true,
+          "name": "profile",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "environments",
+      "pluginAlias": "@quonfig/cli",
+      "pluginName": "@quonfig/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "environments.js"
+      ]
+    },
     "generate-new-hex-key": {
       "aliases": [],
       "args": {},
@@ -2402,9 +2479,9 @@
           "type": "option"
         },
         "confidential": {
-          "description": "mark the value as confidential",
+          "description": "mark the value as confidential. Auto-detected when the key already holds a confidential value; pass --no-confidential to store it in the clear",
           "name": "confidential",
-          "allowNo": false,
+          "allowNo": true,
           "type": "boolean"
         },
         "env-var": {
@@ -2860,17 +2937,18 @@
         "workspace.js"
       ]
     },
-    "cleanup:list": {
+    "activity:deleted": {
       "aliases": [],
       "args": {},
-      "description": "List feature flags marked readyForCleanup=true, with eval volume per window.\n\nColumns:\n  KEY         the flag key\n  TYPE        the flag's valueType (bool, string, int, etc.)\n  EVALS_24H   evals counted in today's bucket (latest day)\n  EVALS_2D    evals in the last 2 calendar days\n  EVALS_7D    evals in the last 7 calendar days\n  EVALS_30D   evals in the last 30 calendar days\n  LAST_EVAL   most recent calendar day with any evals (UTC), blank if none\n  CLASS       quiet (zero evals in last 2 days) or active\n\nDefault sort: quiet first, oldest LAST_EVAL at top.\n\nPass --json for the structured object (rows[]). Each row carries the columns\nabove plus the raw eval counts your agent can reason about itself.\n\nOnce you've picked a candidate, run `qfg cleanup status <key>` for the\ndrill-in, or `qfg cleanup remove <key>` to hand the removal to your coding agent\nwith the Quonfig agent skill.",
+      "description": "List configs that were deleted from the workspace and have not been restored.\n\nUseful for \"did somebody delete X?\" — pair with `qfg activity restore NAME`\nto undelete a tombstoned config.",
       "examples": [
         "<%= config.bin %> <%= command.id %>",
         "<%= config.bin %> <%= command.id %> --json"
       ],
       "flags": {
         "json": {
-          "description": "Return structured rows for agent consumption",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
@@ -2921,7 +2999,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "cleanup:list",
+      "id": "activity:deleted",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -2931,23 +3009,18 @@
       "relativePath": [
         "dist",
         "commands",
-        "cleanup",
-        "list.js"
+        "activity",
+        "deleted.js"
       ]
     },
-    "cleanup:remove": {
+    "activity:feed": {
       "aliases": [],
-      "args": {
-        "name": {
-          "description": "config/feature-flag/etc. name",
-          "name": "name"
-        }
-      },
-      "description": "Write a cleanup payload for a ready-for-cleanup flag and hand off to the Quonfig agent skill.\n\nModeled on `qfg migrate my-code` — this command never edits source files\nitself. It validates that the flag is marked readyForCleanup=true, refuses to\nproceed if there are still evals_2d > 0 (use --force to override), writes\n`.qf/cleanup/<key>.json` describing the flag's current rule shape +\ntelemetry, and prints how to have your coding agent remove the call sites with\nthe quonfig agent skill (its references/retire-a-flag.md), which asks the\nengineer which value should \"win\" and applies the inlining. Install the skill\nwith `qfg agent install-skill` or `claude plugin install quonfig@quonfig`.\n\nThe payload deliberately does NOT suggest a winning value; that's the\nengineer's call. Run `qfg cleanup status <key>` first if you want to inspect\ntelemetry before retiring.",
+      "args": {},
+      "description": "Recent activity across the workspace, newest first.\n\nEach entry shows who changed which config, the action (created/updated/deleted/restored),\nand the human-readable audit message produced by the server. The server already\ntranslates JSON diffs into messages — this command does not re-translate.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> my.flag.key",
-        "<%= config.bin %> <%= command.id %> my.flag.key --force",
-        "<%= config.bin %> <%= command.id %> my.flag.key --json"
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --limit 5",
+        "<%= config.bin %> <%= command.id %> --json"
       ],
       "flags": {
         "json": {
@@ -3000,16 +3073,18 @@
           "multiple": false,
           "type": "option"
         },
-        "force": {
-          "description": "Skip the evals_2d > 0 safety gate (useful when telemetry is delayed but you know the flag is dead)",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
+        "limit": {
+          "description": "Maximum number of feed entries (1-100)",
+          "name": "limit",
+          "default": 30,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "cleanup:remove",
+      "id": "activity:feed",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3019,11 +3094,11 @@
       "relativePath": [
         "dist",
         "commands",
-        "cleanup",
-        "remove.js"
+        "activity",
+        "feed.js"
       ]
     },
-    "cleanup:status": {
+    "activity:history": {
       "aliases": [],
       "args": {
         "name": {
@@ -3031,14 +3106,15 @@
           "name": "name"
         }
       },
-      "description": "Drill into one ready-for-cleanup flag — show telemetry across all environments and the current rule shape.\n\nUse this after `qfg cleanup list` to inspect a specific flag before handing\nremoval off to the Quonfig agent skill. The eval counts come from\nanalytics.configSparklines (the same backing data the per-flag sparklines on\nthe flag detail page use), summed into 24h/2d/7d/30d windows so you can decide\nwhether it's safe to retire.\n\nPass --json for the structured object including the full rule shape per\nenvironment — the agent skill consumes this directly.",
+      "description": "Per-config audit trail for a flag, config, log-level, segment, or schema.\n\nResolves NAME against the workspace metadata (no need to specify type) and\nreturns the full commit history for that file with audit messages translated\nby the server. Restored entries are rendered distinctly so a recovery doesn't\nlook like a fresh create.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> my.flag.key",
-        "<%= config.bin %> <%= command.id %> my.flag.key --json"
+        "<%= config.bin %> <%= command.id %> my.flag",
+        "<%= config.bin %> <%= command.id %> request.timeout --json"
       ],
       "flags": {
         "json": {
-          "description": "Return structured object for agent consumption",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
@@ -3089,7 +3165,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "cleanup:status",
+      "id": "activity:history",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3099,11 +3175,11 @@
       "relativePath": [
         "dist",
         "commands",
-        "cleanup",
-        "status.js"
+        "activity",
+        "history.js"
       ]
     },
-    "cleanup:verify": {
+    "activity:restore": {
       "aliases": [],
       "args": {
         "name": {
@@ -3111,16 +3187,15 @@
           "name": "name"
         }
       },
-      "description": "Confirm zero evals for a flag in the trailing N days (default 7). Exits 0 if safe to delete, non-zero otherwise.\n\nRead-only gate intended for chaining with `qfg delete` after a cleanup PR\nhas merged and the SDK has redeployed:\n\n  qfg cleanup verify my.flag.key && qfg delete my.flag.key\n\nThe trailing window is stricter than the `qfg cleanup remove` 2-day gate on\npurpose — `remove` only writes a payload describing the flag, but `delete`\npermanently removes the flag definition, so we want a longer quiet period\nbefore chaining. Bump --days N if you want a more conservative window.",
+      "description": "Undelete a config that was previously removed.\n\nLooks up the most recent deletion for the key (so you see who deleted it and when),\nthen asks for confirmation before re-creating the file from the prior content.\nSchemas cannot be restored — use git history instead.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> my.flag.key",
-        "<%= config.bin %> <%= command.id %> my.flag.key --days 14",
-        "<%= config.bin %> <%= command.id %> my.flag.key --json",
-        "<%= config.bin %> <%= command.id %> my.flag.key && <%= config.bin %> delete my.flag.key"
+        "<%= config.bin %> <%= command.id %> my.flag --yes",
+        "<%= config.bin %> <%= command.id %> request.timeout --type config --yes"
       ],
       "flags": {
         "json": {
-          "description": "Return structured object for agent consumption",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
@@ -3168,18 +3243,32 @@
           "multiple": false,
           "type": "option"
         },
-        "days": {
-          "description": "Number of trailing calendar days that must have zero evals",
-          "name": "days",
-          "default": 7,
+        "type": {
+          "description": "Config type. Optional — inferred from history when omitted.",
+          "name": "type",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
+          "options": [
+            "feature_flag",
+            "config",
+            "log_level",
+            "segment",
+            "flag",
+            "log-level"
+          ],
           "type": "option"
+        },
+        "yes": {
+          "description": "Skip the confirmation prompt",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "cleanup:verify",
+      "id": "activity:restore",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3189,17 +3278,19 @@
       "relativePath": [
         "dist",
         "commands",
-        "cleanup",
-        "verify.js"
+        "activity",
+        "restore.js"
       ]
     },
-    "activity:deleted": {
+    "agent:install-skill": {
       "aliases": [],
       "args": {},
-      "description": "List configs that were deleted from the workspace and have not been restored.\n\nUseful for \"did somebody delete X?\" — pair with `qfg activity restore NAME`\nto undelete a tombstoned config.",
+      "description": "Install the Quonfig agent skill into this repo so coding agents use Quonfig correctly.\n\nWrites .claude/skills/quonfig/ (SKILL.md + references/) — the same files as\n`claude plugin install quonfig@quonfig` from github.com/quonfig/skills, embedded\nin this qfg build (no network). Claude Code picks the skill up automatically;\nfor Codex, Cursor and other agents that read AGENTS.md, add --add-pointer.\n\nSafe to re-run: files still as qfg wrote them are upgraded in place, files you\nedited are left alone (the command fails and lists them) unless you pass --force.\n\nThis skill is for APPLICATION repos (SDK + qfg + MCP usage). A workspace repo\ncreated by `qfg init` has its own AGENTS.md/CLAUDE.md for editing config JSON.",
       "examples": [
         "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --json"
+        "<%= config.bin %> <%= command.id %> --add-pointer",
+        "<%= config.bin %> <%= command.id %> --dir .agents/skills",
+        "<%= config.bin %> <%= command.id %> --force"
       ],
       "flags": {
         "json": {
@@ -3231,31 +3322,30 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "workspace": {
-          "char": "w",
-          "description": "Workspace slug to use (overrides QUONFIG_WORKSPACE env var and saved default)",
-          "helpGroup": "GLOBAL",
-          "name": "workspace",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
+        "add-pointer": {
+          "description": "Also append a one-line pointer to the skill in ./AGENTS.md (created if missing)",
+          "name": "add-pointer",
+          "allowNo": false,
+          "type": "boolean"
         },
-        "profile": {
-          "char": "p",
-          "description": "Deprecated: use --workspace instead",
-          "helpGroup": "GLOBAL",
-          "hidden": true,
-          "name": "profile",
-          "required": false,
+        "dir": {
+          "description": "Skills directory to install into, relative to the current directory",
+          "name": "dir",
+          "default": ".claude/skills",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "force": {
+          "description": "Overwrite skill files you have edited locally",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "activity:deleted",
+      "id": "agent:install-skill",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3265,18 +3355,29 @@
       "relativePath": [
         "dist",
         "commands",
-        "activity",
-        "deleted.js"
+        "agent",
+        "install-skill.js"
       ]
     },
-    "activity:feed": {
+    "contexts:search": {
       "aliases": [],
-      "args": {},
-      "description": "Recent activity across the workspace, newest first.\n\nEach entry shows who changed which config, the action (created/updated/deleted/restored),\nand the human-readable audit message produced by the server. The server already\ntranslates JSON diffs into messages — this command does not re-translate.",
+      "args": {
+        "contextType": {
+          "description": "Context type to search, e.g. organization or user (the part before \".key\" in a rule)",
+          "name": "contextType",
+          "required": true
+        },
+        "query": {
+          "description": "Case-insensitive text matched against each context key and its reported properties (e.g. a name)",
+          "name": "query",
+          "required": true
+        }
+      },
+      "description": "Find a context's key from a name, to target it in a rule.\n\nTargeting rules should match a context by its KEY (<contextType>.key, e.g.\norganization.key or user.key), not by a slug, email or name. This searches the\ncontexts your SDKs have reported through telemetry, matching the query against\neach context's key and properties, and prints each match's key, its name and\nits email (blank when the context reported none), most recently seen first.\n\nOnly contexts your SDKs have reported are searchable. If nothing matches, the key\nis unknown: get it from whoever owns that customer rather than targeting a slug\nor email instead.\n\nPass a key as the query to see its name and email.\n\n--json prints {contexts: [{key, name, email?}]}: name is null when the context\nreported no name, and email is present only when it reported one.",
       "examples": [
-        "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --limit 5",
-        "<%= config.bin %> <%= command.id %> --json"
+        "<%= config.bin %> <%= command.id %> organization formhealth",
+        "<%= config.bin %> <%= command.id %> user barry@example.com --environment production",
+        "<%= config.bin %> <%= command.id %> organization formhealth --json"
       ],
       "flags": {
         "json": {
@@ -3329,10 +3430,17 @@
           "multiple": false,
           "type": "option"
         },
+        "environment": {
+          "description": "Only contexts reported from this environment (default: every environment)",
+          "name": "environment",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
         "limit": {
-          "description": "Maximum number of feed entries (1-100)",
+          "description": "Maximum number of matches (1-100)",
           "name": "limit",
-          "default": 30,
+          "default": 20,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -3340,7 +3448,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "activity:feed",
+      "id": "contexts:search",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3350,27 +3458,21 @@
       "relativePath": [
         "dist",
         "commands",
-        "activity",
-        "feed.js"
+        "contexts",
+        "search.js"
       ]
     },
-    "activity:history": {
+    "cleanup:list": {
       "aliases": [],
-      "args": {
-        "name": {
-          "description": "config/feature-flag/etc. name",
-          "name": "name"
-        }
-      },
-      "description": "Per-config audit trail for a flag, config, log-level, segment, or schema.\n\nResolves NAME against the workspace metadata (no need to specify type) and\nreturns the full commit history for that file with audit messages translated\nby the server. Restored entries are rendered distinctly so a recovery doesn't\nlook like a fresh create.",
+      "args": {},
+      "description": "List feature flags marked readyForCleanup=true, with eval volume per window.\n\nColumns:\n  KEY         the flag key\n  TYPE        the flag's valueType (bool, string, int, etc.)\n  EVALS_24H   evals counted in today's bucket (latest day)\n  EVALS_2D    evals in the last 2 calendar days\n  EVALS_7D    evals in the last 7 calendar days\n  EVALS_30D   evals in the last 30 calendar days\n  LAST_EVAL   most recent calendar day with any evals (UTC), blank if none\n  CLASS       quiet (zero evals in last 2 days) or active\n\nDefault sort: quiet first, oldest LAST_EVAL at top.\n\nPass --json for the structured object (rows[]). Each row carries the columns\nabove plus the raw eval counts your agent can reason about itself.\n\nOnce you've picked a candidate, run `qfg cleanup status <key>` for the\ndrill-in, or `qfg cleanup remove <key>` to hand the removal to your coding agent\nwith the Quonfig agent skill.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> my.flag",
-        "<%= config.bin %> <%= command.id %> request.timeout --json"
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --json"
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "description": "Return structured rows for agent consumption",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
@@ -3421,7 +3523,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "activity:history",
+      "id": "cleanup:list",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3431,11 +3533,11 @@
       "relativePath": [
         "dist",
         "commands",
-        "activity",
-        "history.js"
+        "cleanup",
+        "list.js"
       ]
     },
-    "activity:restore": {
+    "cleanup:remove": {
       "aliases": [],
       "args": {
         "name": {
@@ -3443,10 +3545,11 @@
           "name": "name"
         }
       },
-      "description": "Undelete a config that was previously removed.\n\nLooks up the most recent deletion for the key (so you see who deleted it and when),\nthen asks for confirmation before re-creating the file from the prior content.\nSchemas cannot be restored — use git history instead.",
+      "description": "Write a cleanup payload for a ready-for-cleanup flag and hand off to the Quonfig agent skill.\n\nModeled on `qfg migrate my-code` — this command never edits source files\nitself. It validates that the flag is marked readyForCleanup=true, refuses to\nproceed if there are still evals_2d > 0 (use --force to override), writes\n`.qf/cleanup/<key>.json` describing the flag's current rule shape +\ntelemetry, and prints how to have your coding agent remove the call sites with\nthe quonfig agent skill (its references/retire-a-flag.md), which asks the\nengineer which value should \"win\" and applies the inlining. Install the skill\nwith `qfg agent install-skill` or `claude plugin install quonfig@quonfig`.\n\nThe payload deliberately does NOT suggest a winning value; that's the\nengineer's call. Run `qfg cleanup status <key>` first if you want to inspect\ntelemetry before retiring.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> my.flag --yes",
-        "<%= config.bin %> <%= command.id %> request.timeout --type config --yes"
+        "<%= config.bin %> <%= command.id %> my.flag.key",
+        "<%= config.bin %> <%= command.id %> my.flag.key --force",
+        "<%= config.bin %> <%= command.id %> my.flag.key --json"
       ],
       "flags": {
         "json": {
@@ -3499,32 +3602,16 @@
           "multiple": false,
           "type": "option"
         },
-        "type": {
-          "description": "Config type. Optional — inferred from history when omitted.",
-          "name": "type",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "feature_flag",
-            "config",
-            "log_level",
-            "segment",
-            "flag",
-            "log-level"
-          ],
-          "type": "option"
-        },
-        "yes": {
-          "description": "Skip the confirmation prompt",
-          "name": "yes",
+        "force": {
+          "description": "Skip the evals_2d > 0 safety gate (useful when telemetry is delayed but you know the flag is dead)",
+          "name": "force",
           "allowNo": false,
           "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "activity:restore",
+      "id": "cleanup:remove",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3534,34 +3621,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "activity",
-        "restore.js"
+        "cleanup",
+        "remove.js"
       ]
     },
-    "contexts:search": {
+    "cleanup:status": {
       "aliases": [],
       "args": {
-        "contextType": {
-          "description": "Context type to search, e.g. organization or user (the part before \".key\" in a rule)",
-          "name": "contextType",
-          "required": true
-        },
-        "query": {
-          "description": "Case-insensitive text matched against each context key and its reported properties (e.g. a name)",
-          "name": "query",
-          "required": true
+        "name": {
+          "description": "config/feature-flag/etc. name",
+          "name": "name"
         }
       },
-      "description": "Find a context's key from a name, to target it in a rule.\n\nTargeting rules should match a context by its KEY (<contextType>.key, e.g.\norganization.key or user.key), not by a slug, email or name. This searches the\ncontexts your SDKs have reported through telemetry, matching the query against\neach context's key and properties, and prints each match's key, its name and\nits email (blank when the context reported none), most recently seen first.\n\nOnly contexts your SDKs have reported are searchable. If nothing matches, the key\nis unknown: get it from whoever owns that customer rather than targeting a slug\nor email instead.\n\nPass a key as the query to see its name and email.\n\n--json prints {contexts: [{key, name, email?}]}: name is null when the context\nreported no name, and email is present only when it reported one.",
+      "description": "Drill into one ready-for-cleanup flag — show telemetry across all environments and the current rule shape.\n\nUse this after `qfg cleanup list` to inspect a specific flag before handing\nremoval off to the Quonfig agent skill. The eval counts come from\nanalytics.configSparklines (the same backing data the per-flag sparklines on\nthe flag detail page use), summed into 24h/2d/7d/30d windows so you can decide\nwhether it's safe to retire.\n\nPass --json for the structured object including the full rule shape per\nenvironment — the agent skill consumes this directly.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> organization formhealth",
-        "<%= config.bin %> <%= command.id %> user barry@example.com --environment production",
-        "<%= config.bin %> <%= command.id %> organization formhealth --json"
+        "<%= config.bin %> <%= command.id %> my.flag.key",
+        "<%= config.bin %> <%= command.id %> my.flag.key --json"
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "description": "Return structured object for agent consumption",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
@@ -3608,26 +3687,11 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "environment": {
-          "description": "Only contexts reported from this environment (default: every environment)",
-          "name": "environment",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "limit": {
-          "description": "Maximum number of matches (1-100)",
-          "name": "limit",
-          "default": 20,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "contexts:search",
+      "id": "cleanup:status",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3637,24 +3701,28 @@
       "relativePath": [
         "dist",
         "commands",
-        "contexts",
-        "search.js"
+        "cleanup",
+        "status.js"
       ]
     },
-    "agent:install-skill": {
+    "cleanup:verify": {
       "aliases": [],
-      "args": {},
-      "description": "Install the Quonfig agent skill into this repo so coding agents use Quonfig correctly.\n\nWrites .claude/skills/quonfig/ (SKILL.md + references/) — the same files as\n`claude plugin install quonfig@quonfig` from github.com/quonfig/skills, embedded\nin this qfg build (no network). Claude Code picks the skill up automatically;\nfor Codex, Cursor and other agents that read AGENTS.md, add --add-pointer.\n\nSafe to re-run: files still as qfg wrote them are upgraded in place, files you\nedited are left alone (the command fails and lists them) unless you pass --force.\n\nThis skill is for APPLICATION repos (SDK + qfg + MCP usage). A workspace repo\ncreated by `qfg init` has its own AGENTS.md/CLAUDE.md for editing config JSON.",
+      "args": {
+        "name": {
+          "description": "config/feature-flag/etc. name",
+          "name": "name"
+        }
+      },
+      "description": "Confirm zero evals for a flag in the trailing N days (default 7). Exits 0 if safe to delete, non-zero otherwise.\n\nRead-only gate intended for chaining with `qfg delete` after a cleanup PR\nhas merged and the SDK has redeployed:\n\n  qfg cleanup verify my.flag.key && qfg delete my.flag.key\n\nThe trailing window is stricter than the `qfg cleanup remove` 2-day gate on\npurpose — `remove` only writes a payload describing the flag, but `delete`\npermanently removes the flag definition, so we want a longer quiet period\nbefore chaining. Bump --days N if you want a more conservative window.",
       "examples": [
-        "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --add-pointer",
-        "<%= config.bin %> <%= command.id %> --dir .agents/skills",
-        "<%= config.bin %> <%= command.id %> --force"
+        "<%= config.bin %> <%= command.id %> my.flag.key",
+        "<%= config.bin %> <%= command.id %> my.flag.key --days 14",
+        "<%= config.bin %> <%= command.id %> my.flag.key --json",
+        "<%= config.bin %> <%= command.id %> my.flag.key && <%= config.bin %> delete my.flag.key"
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "description": "Return structured object for agent consumption",
           "name": "json",
           "allowNo": false,
           "type": "boolean"
@@ -3681,30 +3749,39 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "add-pointer": {
-          "description": "Also append a one-line pointer to the skill in ./AGENTS.md (created if missing)",
-          "name": "add-pointer",
-          "allowNo": false,
-          "type": "boolean"
+        "workspace": {
+          "char": "w",
+          "description": "Workspace slug to use (overrides QUONFIG_WORKSPACE env var and saved default)",
+          "helpGroup": "GLOBAL",
+          "name": "workspace",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         },
-        "dir": {
-          "description": "Skills directory to install into, relative to the current directory",
-          "name": "dir",
-          "default": ".claude/skills",
+        "profile": {
+          "char": "p",
+          "description": "Deprecated: use --workspace instead",
+          "helpGroup": "GLOBAL",
+          "hidden": true,
+          "name": "profile",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "force": {
-          "description": "Overwrite skill files you have edited locally",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
+        "days": {
+          "description": "Number of trailing calendar days that must have zero evals",
+          "name": "days",
+          "default": 7,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "agent:install-skill",
+      "id": "cleanup:verify",
       "pluginAlias": "@quonfig/cli",
       "pluginName": "@quonfig/cli",
       "pluginType": "core",
@@ -3714,8 +3791,8 @@
       "relativePath": [
         "dist",
         "commands",
-        "agent",
-        "install-skill.js"
+        "cleanup",
+        "verify.js"
       ]
     },
     "migrate:doctor": {
@@ -4427,5 +4504,5 @@
       ]
     }
   },
-  "version": "0.5.0"
+  "version": "0.6.0"
 }