npm - @bussolabs/closeyourit-cli - Versions diffs - 0.23.1 → 0.24.2 - Mend

@bussolabs/closeyourit-cli 0.23.1 → 0.24.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

package/README.md +3 -0
package/dist/base.d.ts +12 -0
package/dist/base.js +16 -0
package/dist/commands/coverage/show.d.ts +10 -0
package/dist/commands/coverage/show.js +39 -0
package/dist/commands/tickets/clarifications.d.ts +21 -0
package/dist/commands/tickets/clarifications.js +36 -0
package/dist/commands/usage/list.d.ts +12 -0
package/dist/commands/usage/list.js +43 -0
package/dist/commands/usage/reporters.d.ts +10 -0
package/dist/commands/usage/reporters.js +37 -0
package/dist/lib/api.d.ts +12 -0
package/dist/lib/api.js +25 -3
package/dist/lib/ticket-clarifications.d.ts +13 -0
package/dist/lib/ticket-clarifications.js +31 -0
package/oclif.manifest.json +8325 -6114
package/opencli.json +1658 -2
package/package.json +106 -1

package/opencli.json CHANGED Viewed

@@ -3,7 +3,7 @@
   "opencli": "0.1",
   "info": {
     "title": "closeyourit",
-    "version": "0.23.1",
+    "version": "0.24.2",
     "description": "CLI for CloseYourIt — manage org, errors, tokens and tickets with your user token",
     "license": {
       "name": "MIT",
@@ -60,10 +60,17 @@
         "commands": [
           {
             "name": "tokens",
+            "description": "The automator tokens themselves: create, list, revoke (the secret is shown only once)",
             "commands": [
               {
                 "name": "create",
                 "description": "Create an org automator token (cyi_a_ — the secret is shown only once)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "NAME",
@@ -79,6 +86,10 @@
                 "name": "list",
                 "description": "List the org automator tokens (closeyourit-automator authenticates with these)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -98,6 +109,10 @@
                 "name": "revoke",
                 "description": "Revoke an org automator token (the automator using it stops syncing)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the revocation"
@@ -120,14 +135,20 @@
       },
       {
         "name": "alerts",
+        "description": "Alert rules, external delivery channels and your own notifications",
         "commands": [
           {
             "name": "channels",
+            "description": "External delivery channels for alerts (webhook, Telegram)",
             "commands": [
               {
                 "name": "create",
                 "description": "Create an external alert channel (webhook or Telegram)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--kind",
                     "description": "Channel kind",
@@ -200,6 +221,10 @@
                 "name": "delete",
                 "description": "Delete an external alert channel (rules keep delivering in-app/email)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the deletion"
@@ -220,6 +245,10 @@
                 "name": "list",
                 "description": "List the external alert channels (webhook / Telegram)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -241,6 +270,10 @@
             "name": "create",
             "description": "Create an alert rule in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--event-type",
                 "description": "Event that triggers the rule",
@@ -389,6 +422,10 @@
             "name": "delete",
             "description": "Delete an alert rule",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -409,6 +446,10 @@
             "name": "list",
             "description": "List the alert rules in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -427,11 +468,16 @@
           },
           {
             "name": "notifications",
+            "description": "Your in-app notification inbox: list, mark read, delete",
             "commands": [
               {
                 "name": "delete",
                 "description": "Delete one of your notifications (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the irreversible deletion"
@@ -452,6 +498,10 @@
                 "name": "list",
                 "description": "List your in-app alert notifications (your own inbox)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -471,6 +521,12 @@
               {
                 "name": "read",
                 "description": "Mark a single notification as read (idempotent)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ID",
@@ -485,6 +541,12 @@
               {
                 "name": "read-all",
                 "description": "Mark all your unread notifications as read",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "examples": [
                   "closeyourit alerts notifications read-all"
                 ]
@@ -493,10 +555,17 @@
           },
           {
             "name": "preferences",
+            "description": "Your personal alert preferences, per organization",
             "commands": [
               {
                 "name": "show",
                 "description": "Show your personal alert preferences (per organization)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "examples": [
                   "closeyourit alerts preferences show"
                 ]
@@ -505,6 +574,10 @@
                 "name": "update",
                 "description": "Update your personal alert preferences (send only the fields you want to change)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--in-app-enabled",
                     "description": "Deliver notifications in-app"
@@ -588,6 +661,12 @@
           {
             "name": "show",
             "description": "Show a single alert rule",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -603,6 +682,10 @@
             "name": "update",
             "description": "Update an alert rule (send only the fields you want to change)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "Rule name",
@@ -764,11 +847,16 @@
         "commands": [
           {
             "name": "goals",
+            "description": "Conversion goals of a project: create, list, delete",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a conversion goal on a project",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -839,6 +927,10 @@
                 "name": "delete",
                 "description": "Delete a conversion goal (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -873,6 +965,10 @@
                 "name": "list",
                 "description": "List the conversion goals of a project",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -898,6 +994,10 @@
             "name": "share",
             "description": "Publish a public shareable link to the analytics dashboard (optional password)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -932,6 +1032,10 @@
             "name": "show",
             "description": "Show the web analytics snapshot for a project (traffic, top pages, goals)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -982,6 +1086,10 @@
             "name": "unshare",
             "description": "Revoke the public analytics dashboard link",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1015,6 +1123,10 @@
             "name": "ask",
             "description": "Ask the assistant a question about your own data; it reads what you are allowed to see and answers (may take a while)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--conversation",
                 "aliases": [
@@ -1059,6 +1171,10 @@
                 "name": "create",
                 "description": "Open an empty conversation with the assistant (ask questions into it with `assistant ask --conversation`)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--title",
                     "description": "Conversation title (defaults to the first question asked)",
@@ -1079,6 +1195,10 @@
                 "name": "delete",
                 "description": "Delete a conversation with the assistant, questions and answers included (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the irreversible deletion"
@@ -1099,6 +1219,10 @@
                 "name": "list",
                 "description": "List your conversations with the assistant (most recently active first)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--per",
                     "description": "Page size",
@@ -1128,6 +1252,12 @@
               {
                 "name": "show",
                 "description": "Read one conversation with the assistant: its questions, its answers and what they were based on",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ID",
@@ -1143,6 +1273,51 @@
           }
         ]
       },
+      {
+        "name": "coverage",
+        "description": "Test coverage published by the CI (last snapshot per branch)",
+        "commands": [
+          {
+            "name": "show",
+            "description": "Show the coverage extract the CI published for a project (last snapshot per branch, never the history)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
+              {
+                "name": "--project",
+                "aliases": [
+                  "-p"
+                ],
+                "description": "Project id (UUID) or key",
+                "required": true,
+                "arguments": [
+                  {
+                    "name": "PROJECT",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "name": "--branch",
+                "description": "Only the extract of this branch",
+                "arguments": [
+                  {
+                    "name": "BRANCH",
+                    "required": true
+                  }
+                ]
+              }
+            ],
+            "examples": [
+              "closeyourit coverage show --project closeyourit-rails",
+              "closeyourit coverage show -p CYRA --branch main",
+              "closeyourit coverage show -p CYRA --json"
+            ]
+          }
+        ]
+      },
       {
         "name": "cron-monitors",
         "description": "Cron/heartbeat monitors (read-only)",
@@ -1151,6 +1326,10 @@
             "name": "list",
             "description": "List cron / heartbeat monitors across your visible projects",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -1199,6 +1378,12 @@
           {
             "name": "show",
             "description": "Show a cron / heartbeat monitor",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -1214,11 +1399,16 @@
       },
       {
         "name": "environments",
+        "description": "Environments (production, staging, …) shared by projects, tokens and monitors",
         "commands": [
           {
             "name": "create",
             "description": "Create an environment (production, staging, …) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--label",
                 "description": "Human-readable label",
@@ -1284,6 +1474,10 @@
             "name": "delete",
             "description": "Delete an environment (blocked while projects, tokens or monitors reference it)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -1304,6 +1498,10 @@
             "name": "list",
             "description": "List the environments (production, staging, …) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -1324,6 +1522,10 @@
             "name": "update",
             "description": "Update an environment (recode, relabel, recolor, reorder, activate/deactivate)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--code",
                 "description": "New code (lowercase)",
@@ -1405,6 +1607,10 @@
             "name": "assign",
             "description": "Put an error group in someone's hands, or take it out (--unassign)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1450,6 +1656,10 @@
             "name": "bulk-triage",
             "description": "Resolve, ignore or reopen several error groups in one call",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1501,6 +1711,10 @@
             "name": "delete",
             "description": "Delete an error group and every occurrence it holds (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1539,6 +1753,10 @@
                 "name": "create",
                 "description": "Add a grouping rule: occurrences that match it are grouped under one key",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -1632,6 +1850,10 @@
                 "name": "delete",
                 "description": "Delete a grouping rule (the groups it already made stay where they are)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -1666,6 +1888,10 @@
                 "name": "list",
                 "description": "List the custom grouping rules of a project, in the order they are applied",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -1699,6 +1925,10 @@
                 "name": "update",
                 "description": "Change a grouping rule: what it matches, where it sends, when it runs, or turn it off",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -1798,6 +2028,10 @@
             "name": "list",
             "description": "List error groups for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1842,6 +2076,10 @@
             "name": "merge",
             "description": "Merge error groups into one: the occurrences move, the absorbed groups disappear (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1887,6 +2125,10 @@
             "name": "mute",
             "description": "Mute an error group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1917,6 +2159,10 @@
             "name": "promote",
             "description": "Promote an error group to a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1947,6 +2193,10 @@
             "name": "reopen",
             "description": "Reopen a resolved error group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1977,6 +2227,10 @@
             "name": "resolve",
             "description": "Mark an error group as resolved",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2007,6 +2261,10 @@
             "name": "show",
             "description": "Show a single error group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2037,6 +2295,10 @@
             "name": "split",
             "description": "Split an error group: pull some occurrences out into a new one",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2078,6 +2340,10 @@
             "name": "unmute",
             "description": "Unmute an error group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2108,11 +2374,16 @@
       },
       {
         "name": "groups",
+        "description": "Groups: containers of related projects (macro-projects)",
         "commands": [
           {
             "name": "create",
             "description": "Create a group (a container of related projects, e.g. \"DriverOne\")",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -2140,6 +2411,10 @@
             "name": "delete",
             "description": "Delete a group (its projects are detached, not deleted)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -2160,6 +2435,10 @@
             "name": "list",
             "description": "List the groups (macro-projects) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -2180,6 +2459,10 @@
             "name": "update",
             "description": "Update a group (rename, recolor)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New name",
@@ -2223,6 +2506,10 @@
             "name": "show",
             "description": "Show a project's effective guidance: the references and procedures resolved by the backend (the CLI never recomposes inheritance)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2254,6 +2541,10 @@
             "name": "archive",
             "description": "Archive an idea (open → archived; author always allowed, others need ideas.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2284,6 +2575,10 @@
             "name": "case",
             "description": "Add a case (example/scenario) to an idea (only open ideas accept cases)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2335,6 +2630,10 @@
             "name": "case-delete",
             "description": "Delete a case from an open idea (author always allowed, others need ideas.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2374,6 +2673,10 @@
             "name": "case-update",
             "description": "Update a case (example/scenario) of an idea (title and/or description)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2430,6 +2733,10 @@
             "name": "comment",
             "description": "Add a comment to an idea (only open ideas accept comments)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2471,6 +2778,10 @@
             "name": "comment-delete",
             "description": "Delete a comment from an open idea (author, or with ideas.comment.delete_any)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2516,6 +2827,10 @@
             "name": "comments",
             "description": "List all comments of an idea (oldest first)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2547,6 +2862,10 @@
             "name": "convert",
             "description": "Convert an idea into a ticket. Without --title/--description the server AI synthesizes the draft from the idea and its comments (may take ~30s). Author always allowed; others need ideas.convert.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2634,6 +2953,10 @@
             "name": "create",
             "description": "Propose an idea for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2699,6 +3022,10 @@
             "name": "delete",
             "description": "Delete an idea (author always allowed; others need ideas.delete)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2733,6 +3060,10 @@
             "name": "list",
             "description": "List ideas for a project (sorted by votes)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2787,6 +3118,10 @@
             "name": "show",
             "description": "Show an idea (fields + problem, solution, stakeholders)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2817,6 +3152,10 @@
             "name": "unarchive",
             "description": "Reopen an archived idea (archived → open; author always allowed, others need ideas.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2847,6 +3186,10 @@
             "name": "unvote",
             "description": "Remove your upvote from an idea (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2877,6 +3220,10 @@
             "name": "update",
             "description": "Update an idea (full replace of title/problem/solution — omitted fields are cleared)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2947,6 +3294,10 @@
             "name": "vote",
             "description": "Upvote an idea (idempotent; only open ideas accept votes)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2977,11 +3328,16 @@
       },
       {
         "name": "invitations",
+        "description": "Invitations to join the organization: create, resend, revoke",
         "commands": [
           {
             "name": "create",
             "description": "Invite a person to the organization. Prints the acceptance link.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--role",
                 "description": "Membership role",
@@ -3014,6 +3370,10 @@
             "name": "list",
             "description": "List the pending/accepted invitations of your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -3033,6 +3393,12 @@
           {
             "name": "resend",
             "description": "Resend a pending invitation. Prints the acceptance link.",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -3047,6 +3413,12 @@
           {
             "name": "revoke",
             "description": "Revoke a pending invitation",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -3067,6 +3439,12 @@
           {
             "name": "ask",
             "description": "Ask a natural-language question; the server AI answers from the knowledge base and cites the pages it used (may take a few seconds)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "QUESTION",
@@ -3082,6 +3460,10 @@
             "name": "attach",
             "description": "Attach one or more local files to a knowledge page",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--file",
                 "description": "Path to a local file to upload (repeatable)",
@@ -3110,6 +3492,10 @@
             "name": "attachment-download",
             "description": "Download a knowledge page's attachment to disk",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--out",
                 "description": "Output directory",
@@ -3151,6 +3537,12 @@
           {
             "name": "attachments",
             "description": "List a knowledge page's attachments",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -3171,6 +3563,10 @@
                 "name": "add-page",
                 "description": "Add a knowledge page to a book, optionally at a given position in the summary",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Id of the knowledge page to add (an id, not a page number; alias: --page-id)",
@@ -3210,6 +3606,10 @@
                 "name": "list",
                 "description": "List knowledge books (ordered collections of pages) across the projects you can see",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -3264,6 +3664,12 @@
               {
                 "name": "show",
                 "description": "Show a knowledge book: its metadata, then the summary of the pages it collects",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ID",
@@ -3282,6 +3688,10 @@
             "name": "consolidate",
             "description": "Mark an accepted page as written to the versioned docs, recording its path",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--path",
                 "description": "Path of the document inside the knowledge-base repo",
@@ -3310,6 +3720,10 @@
             "name": "create",
             "description": "Create a knowledge page in one or more projects (and groups)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3441,6 +3855,10 @@
             "name": "delete",
             "description": "Delete a knowledge page (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -3461,6 +3879,10 @@
             "name": "detach",
             "description": "Remove an attachment from a knowledge page (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--attachment",
                 "description": "Attachment id to remove",
@@ -3492,6 +3914,10 @@
             "name": "list",
             "description": "List knowledge pages across the projects you can see",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3568,6 +3994,10 @@
             "name": "publish",
             "description": "Idempotently create or update a Knowledge page by publication key.\n\nExactly one of --body or --body-file is required.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3644,6 +4074,10 @@
             "name": "related",
             "description": "List the pages to read next: the ones this page links to (and that link to it), plus close matches by meaning",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--question",
                 "description": "Keep only the pages relevant to this question",
@@ -3676,6 +4110,10 @@
             "name": "search",
             "description": "Search knowledge pages (semantic when available, ILIKE fallback on the title otherwise)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3741,6 +4179,10 @@
             "name": "show",
             "description": "Show a single knowledge page: metadata header then the raw markdown body",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--related",
                 "description": "Also list the pages to read next"
@@ -3773,6 +4215,10 @@
             "name": "update",
             "description": "Update a knowledge page (only the fields you pass; the others keep their current value)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--title",
                 "description": "New title (max 255 characters)",
@@ -3898,6 +4344,10 @@
         "name": "login",
         "description": "Authenticate via the device flow and store your CLI token",
         "options": [
+          {
+            "name": "--yes",
+            "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+          },
           {
             "name": "--api-url",
             "description": "Backend base URL to authenticate against (persisted)",
@@ -3917,6 +4367,12 @@
       {
         "name": "logout",
         "description": "Clear the locally stored token and identity",
+        "options": [
+          {
+            "name": "--yes",
+            "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+          }
+        ],
         "examples": [
           "closeyourit logout"
         ]
@@ -3929,6 +4385,10 @@
             "name": "link",
             "description": "Manually link a log entry to an error group or a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--to",
                 "description": "Target to link: \"Errors::Group:<uuid>\" or \"Ticketing::Ticket:<uuid>\"",
@@ -3957,6 +4417,10 @@
             "name": "list",
             "description": "List structured log entries (cross-app stream)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4020,6 +4484,12 @@
           {
             "name": "show",
             "description": "Show a single log entry (attributes, trace id, correlation)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -4035,6 +4505,10 @@
             "name": "unlink",
             "description": "Remove a manual log↔target link (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -4064,11 +4538,16 @@
         "commands": [
           {
             "name": "categories",
+            "description": "Feature groups (categories): how the rows of a product matrix are organized",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a feature group (category) in a product matrix",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--name",
                     "description": "Category name (unique within the product)",
@@ -4107,6 +4586,10 @@
                 "name": "delete",
                 "description": "Delete a feature group (only when empty: move or delete its features first)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the deletion"
@@ -4132,6 +4615,10 @@
                 "name": "list",
                 "description": "List the feature groups (categories) of a product matrix",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -4158,6 +4645,10 @@
                 "name": "update",
                 "description": "Update a feature group (rename or reorder); unpassed fields keep their value",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--name",
                     "description": "New name",
@@ -4200,11 +4691,16 @@
           },
           {
             "name": "cells",
+            "description": "Matrix cells: how far a feature is on a platform, and since which version",
             "commands": [
               {
                 "name": "clear",
                 "description": "Clear a matrix cell: the crossing goes back to \"not set\"",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm clearing the cell"
@@ -4235,6 +4731,10 @@
                 "name": "set",
                 "description": "Write a matrix cell: how far along a feature is on a platform, and since which version",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--status",
                     "description": "Status code (see: matrix statuses) or id",
@@ -4283,11 +4783,16 @@
           },
           {
             "name": "features",
+            "description": "Features: the rows of a product matrix",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a feature (a row of the matrix) inside a category",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--category",
                     "description": "Category id (UUID) or name",
@@ -4357,6 +4862,10 @@
                 "name": "delete",
                 "description": "Delete a feature and every cell written for it (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the deletion"
@@ -4382,6 +4891,10 @@
                 "name": "list",
                 "description": "List the features of a product matrix",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -4418,6 +4931,12 @@
               {
                 "name": "show",
                 "description": "Show one feature and the cells written for it",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "PRODUCT",
@@ -4438,6 +4957,10 @@
                 "name": "update",
                 "description": "Update a feature (rename, move to another category, …); unpassed fields keep their value",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--name",
                     "description": "New name",
@@ -4512,6 +5035,10 @@
             "name": "list",
             "description": "List the products (groups) whose feature matrix you can see",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -4531,6 +5058,12 @@
           {
             "name": "show",
             "description": "Show a product feature matrix: features in rows, platforms in columns",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "PRODUCT",
@@ -4546,6 +5079,12 @@
           {
             "name": "statuses",
             "description": "List the cell statuses of your organization (the codes accepted by matrix cells set)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit matrix statuses",
               "closeyourit matrix statuses --json"
@@ -4555,11 +5094,16 @@
       },
       {
         "name": "members",
+        "description": "Organization members: profile, role, access scope",
         "commands": [
           {
             "name": "list",
             "description": "List the members of your organization (to resolve emails to account ids)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -4580,6 +5124,10 @@
             "name": "remove",
             "description": "Remove a member from your organization (irreversible; requires members.manage)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible removal"
@@ -4600,6 +5148,10 @@
             "name": "set-access",
             "description": "Set a member's access: group/project scope, direct roles, and permission overrides",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--group",
                 "description": "Group id or name to grant access to (repeatable; omit to clear group access)",
@@ -4659,6 +5211,10 @@
             "name": "set-role",
             "description": "Change a member's organization role",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--role",
                 "description": "Organization role",
@@ -4693,6 +5249,10 @@
             "name": "update",
             "description": "Update a member's profile: name, email, handle (requires members.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New display name",
@@ -4746,6 +5306,10 @@
             "name": "bulk-triage",
             "description": "Resolve, ignore or reopen several metric groups in one call",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4797,6 +5361,10 @@
             "name": "list",
             "description": "List performance metric groups (slow queries/methods) for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4841,6 +5409,10 @@
             "name": "promote",
             "description": "Promote a metric group (slow query/method) to a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4871,6 +5443,10 @@
             "name": "show",
             "description": "Show a single metric group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4901,11 +5477,16 @@
       },
       {
         "name": "milestones",
+        "description": "Project milestones: dated goals a ticket can be assigned to",
         "commands": [
           {
             "name": "create",
             "description": "Create a milestone for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4976,6 +5557,10 @@
             "name": "delete",
             "description": "Delete a milestone (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5010,6 +5595,10 @@
             "name": "list",
             "description": "List the milestones for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5044,6 +5633,10 @@
             "name": "show",
             "description": "Show a single milestone",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5074,6 +5667,10 @@
             "name": "update",
             "description": "Update a milestone (send only the fields you want to change)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5149,14 +5746,20 @@
       },
       {
         "name": "monitors",
+        "description": "Uptime monitors of a project: checks, public status page, incidents",
         "commands": [
           {
             "name": "announcements",
+            "description": "Announcement banner shown on a monitor's public status page",
             "commands": [
               {
                 "name": "clear",
                 "description": "Remove the status page announcement banner for a monitor",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5191,6 +5794,10 @@
                 "name": "set",
                 "description": "Upsert the status page announcement banner for a monitor",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5271,6 +5878,10 @@
                 "name": "show",
                 "description": "Show the status page announcement banner for a monitor (null if none)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5303,6 +5914,10 @@
             "name": "create",
             "description": "Create an uptime monitor for a project (one per environment)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5418,6 +6033,10 @@
             "name": "delete",
             "description": "Delete an uptime monitor (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5450,11 +6069,16 @@
           },
           {
             "name": "incidents",
+            "description": "Uptime incidents: group them and narrate them step by step",
             "commands": [
               {
                 "name": "delete",
                 "description": "Delete an uptime incident (and its grouped windows; irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5494,6 +6118,10 @@
                 "name": "group",
                 "description": "Unify incidents of a monitor and post the first narration step",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5563,6 +6191,10 @@
                 "name": "ungroup",
                 "description": "Dissolve an incident grouping (grouped windows become separate again)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5609,6 +6241,10 @@
                 "name": "update-add",
                 "description": "Add a timeline step to a narrated incident",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5672,6 +6308,10 @@
                 "name": "update-delete",
                 "description": "Delete a timeline step from a narrated incident (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5718,6 +6358,10 @@
             "name": "list",
             "description": "List the uptime monitors for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5752,6 +6396,10 @@
             "name": "pause",
             "description": "Pause an uptime monitor (stops scheduling checks)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5782,6 +6430,10 @@
             "name": "publish",
             "description": "Publish the public status page for a monitor (opt-in)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5812,6 +6464,10 @@
             "name": "resume",
             "description": "Resume a paused uptime monitor (re-enables scheduling)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5842,6 +6498,10 @@
             "name": "show",
             "description": "Show a single uptime monitor",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5872,6 +6532,10 @@
             "name": "unpublish",
             "description": "Unpublish the public status page for a monitor",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5902,6 +6566,10 @@
             "name": "update",
             "description": "Update an uptime monitor (URL, method, interval, expected status, timeout)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6013,10 +6681,17 @@
       },
       {
         "name": "org",
+        "description": "Organization settings (show and update)",
         "commands": [
           {
             "name": "show",
             "description": "Show your organization settings",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit org show",
               "closeyourit org show --json"
@@ -6026,6 +6701,10 @@
             "name": "update",
             "description": "Update your organization settings (requires organization.manage)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New organization name",
@@ -6097,6 +6776,12 @@
           {
             "name": "delete",
             "description": "Delete a personal secret from the current organization",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "NAME",
@@ -6112,6 +6797,10 @@
             "name": "download",
             "description": "Download all your personal secrets as .env or JSON (to a file or stdout). Values with newlines: use --format json. Prefer `cyi personal run` to avoid writing plaintext to disk.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--format",
                 "description": "Output format",
@@ -6145,6 +6834,12 @@
           {
             "name": "get",
             "description": "Print the value of a single personal secret (pipeable).",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "NAME",
@@ -6160,6 +6855,10 @@
             "name": "import",
             "description": "Import many personal secrets at once (all-or-nothing) from a .env or JSON file",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--from-file",
                 "description": "Path to a .env or JSON file (default: read from stdin)",
@@ -6194,6 +6893,12 @@
           {
             "name": "list",
             "description": "List your personal secret names for the current organization. Never prints values.",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit personal list",
               "closeyourit personal list --json"
@@ -6202,6 +6907,12 @@
           {
             "name": "run",
             "description": "Run a command with your personal secrets injected as env vars. Secrets never touch disk.",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit personal run -- bundle exec rails server",
               "closeyourit personal run -- printenv OPENAI_API_KEY"
@@ -6211,6 +6922,10 @@
             "name": "set",
             "description": "Set (create or update) a personal secret for the current organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--value",
                 "description": "Secret value (use when the arg is just NAME)",
@@ -6248,11 +6963,16 @@
       },
       {
         "name": "platforms",
+        "description": "Platforms (devices/systems) your projects and tickets run on",
         "commands": [
           {
             "name": "create",
             "description": "Create a platform (a device/system your projects run on)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--label",
                 "description": "Human-readable label",
@@ -6310,6 +7030,10 @@
             "name": "delete",
             "description": "Delete a platform (blocked if any project or ticket still references it)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -6330,6 +7054,10 @@
             "name": "list",
             "description": "List the platforms (devices/systems) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -6350,6 +7078,10 @@
             "name": "update",
             "description": "Update a platform (relabel, recolor, reorder, activate/deactivate, toggle uptime support)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--code",
                 "description": "New code",
@@ -6423,6 +7155,10 @@
             "name": "create",
             "description": "Create a project (optionally inside a group)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -6493,6 +7229,10 @@
             "name": "delete",
             "description": "Delete a project (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6520,6 +7260,10 @@
             "name": "github",
             "description": "Show a project GitHub integration (repo link + tag→release binding rules)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6545,6 +7289,10 @@
             "name": "github-connect",
             "description": "Connect a project to a repository available to the organization GitHub App",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6579,6 +7327,10 @@
             "name": "github-map",
             "description": "List the project → GitHub repository mapping for local automation",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--connected-only",
                 "description": "Show only projects connected to a GitHub repository"
@@ -6594,6 +7346,10 @@
             "name": "github-update",
             "description": "Update a project GitHub binding rules (environment mapping + sync/binding/autoclose flags); only the passed fields change",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6676,6 +7432,10 @@
             "name": "link-server",
             "description": "Link a server host to one of the project declared environments (uptime monitoring)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6721,6 +7481,10 @@
             "name": "list",
             "description": "List the projects visible to you",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -6741,6 +7505,10 @@
             "name": "set-environment-capabilities",
             "description": "Override the servers/uptime/secrets capabilities of a project environment (inherit = follow the environment default)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6824,6 +7592,10 @@
             "name": "set-environments",
             "description": "Declare the environments a project receives data from (replaces the current set)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6868,6 +7640,10 @@
             "name": "set-platforms",
             "description": "Declare the platforms of a project (replaces the current set)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6910,11 +7686,16 @@
           },
           {
             "name": "settings",
+            "description": "Per-project settings: log/analytics retention and feature flags",
             "commands": [
               {
                 "name": "show",
                 "description": "Show a project settings (log/analytics retention + feature flags)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -6939,6 +7720,10 @@
                 "name": "update",
                 "description": "Update a project settings (log/analytics retention + feature flags); only the passed fields change",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -6993,6 +7778,12 @@
           {
             "name": "show",
             "description": "Show a single project by id or key, with its declared environments and their capabilities",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -7009,6 +7800,10 @@
             "name": "unlink-server",
             "description": "Unlink a server host from the project (removes the host↔environment link)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7043,6 +7838,10 @@
             "name": "update",
             "description": "Update a project (name, key, color, description, group, feature flags)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7128,6 +7927,10 @@
             "name": "list",
             "description": "List the releases of a project (tracked from CI)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7162,11 +7965,16 @@
       },
       {
         "name": "roles",
+        "description": "RBAC roles: named bundles of permission keys",
         "commands": [
           {
             "name": "create",
             "description": "Create an RBAC role (a named bundle of permission keys)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -7202,6 +8010,12 @@
           {
             "name": "delete",
             "description": "Delete a role (its assignments to teams and accounts are removed)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ROLE",
@@ -7217,6 +8031,10 @@
             "name": "list",
             "description": "List the RBAC roles in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -7236,6 +8054,12 @@
           {
             "name": "show",
             "description": "Show a role by id or name (with its permission keys)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ROLE",
@@ -7251,6 +8075,10 @@
             "name": "update",
             "description": "Update a role (rename, recolor, or replace its permission keys)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -7300,6 +8128,10 @@
         "name": "run",
         "description": "Run a command with project/environment secrets injected as env vars. Secrets never touch disk.",
         "options": [
+          {
+            "name": "--yes",
+            "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+          },
           {
             "name": "--project",
             "aliases": [
@@ -7340,10 +8172,15 @@
         "commands": [
           {
             "name": "assets",
+            "description": "Encrypted secret files: upload, download, versions, delegation",
             "commands": [
               {
                 "name": "archive",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7373,6 +8210,10 @@
               {
                 "name": "delegate",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7398,6 +8239,10 @@
                 "name": "download",
                 "description": "Download and decrypt a secret file to an explicit path with mode 0600",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7449,6 +8294,10 @@
                 "name": "list",
                 "description": "List encrypted secret files visible to a project (metadata only)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7491,6 +8340,10 @@
                 "name": "purge",
                 "description": "Permanently delete an archived secret asset and all versions (owner only)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7527,6 +8380,10 @@
               {
                 "name": "rollback",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7561,12 +8418,22 @@
               },
               {
                 "name": "shared-list",
-                "description": "List organization-level encrypted secret files and delegated projects"
+                "description": "List organization-level encrypted secret files and delegated projects",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ]
               },
               {
                 "name": "shared-upload",
                 "description": "Encrypt and upload one organization-level secret file",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--file",
                     "required": true,
@@ -7610,6 +8477,10 @@
               {
                 "name": "undelegate",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7635,6 +8506,10 @@
                 "name": "upload",
                 "description": "Encrypt and upload a mobile CI secret file (never prints its contents)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7692,6 +8567,10 @@
               {
                 "name": "versions",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7720,6 +8599,10 @@
             "name": "delete",
             "description": "Delete a secret from a project environment",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7764,6 +8647,10 @@
             "name": "download",
             "description": "Download all secrets of an environment as .env or JSON (to a file or stdout). Values with newlines: use --format json. Prefer `cyi run` to avoid writing plaintext to disk.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7826,6 +8713,10 @@
             "name": "get",
             "description": "Print the value of a single secret (pipeable). Requires the secrets.read permission.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7870,6 +8761,10 @@
             "name": "import",
             "description": "Import many secrets at once (all-or-nothing) from a .env or JSON file",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7933,6 +8828,10 @@
             "name": "list",
             "description": "List secret names for a project (optionally filtered by environment). Lists every secret — never truncated to a page — and never prints values.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7978,6 +8877,10 @@
             "name": "set",
             "description": "Set (create or update) a secret for a project environment",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8043,6 +8946,10 @@
             "name": "sync",
             "description": "Push the project's vault secrets to its connected GitHub repo Environment secrets (enqueues a background sync). Requires the github.manage permission.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8066,11 +8973,16 @@
       },
       {
         "name": "seo",
+        "description": "SEO findings of the watched sites: triage, ignore, promote to ticket",
         "commands": [
           {
             "name": "ignore",
             "description": "Ignore an SEO finding: you accept living with it",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--note",
                 "description": "Why you are keeping it (shown alongside the ignored row)",
@@ -8098,6 +9010,10 @@
             "name": "list",
             "description": "List the SEO findings of your sites (cross-project)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8163,6 +9079,10 @@
             "name": "pages",
             "description": "List the pages the SEO check has visited, with their state",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8206,6 +9126,12 @@
           {
             "name": "promote",
             "description": "Open a ticket from an SEO finding, evidence included",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8220,6 +9146,12 @@
           {
             "name": "reopen",
             "description": "Reopen an ignored SEO finding: you changed your mind",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8235,6 +9167,10 @@
             "name": "rescan",
             "description": "Check a site now, without waiting for the next scheduled run",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--site",
                 "description": "Site id (from `seo-sites list`)",
@@ -8254,6 +9190,12 @@
           {
             "name": "show",
             "description": "Show a single SEO finding, with the evidence behind it",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8269,11 +9211,16 @@
       },
       {
         "name": "seo-sites",
+        "description": "Sites under SEO check: declare, configure, remove",
         "commands": [
           {
             "name": "create",
             "description": "Declare a site to keep an eye on (one per project and environment)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8347,6 +9294,12 @@
           {
             "name": "delete",
             "description": "Stop watching a site and remove its pages and findings",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8362,6 +9315,10 @@
             "name": "list",
             "description": "List the sites under SEO check",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8394,6 +9351,12 @@
           {
             "name": "show",
             "description": "Show one site under SEO check: how it is set up, what is open, how the last run went and how fast it is",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8410,6 +9373,10 @@
             "name": "update",
             "description": "Change how a site is checked (project and environment are its identity: they never change)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--url",
                 "description": "Public address the visit starts from",
@@ -8479,6 +9446,10 @@
             "name": "delete",
             "description": "Delete a server and all its metrics (a live agent would re-register it)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -8499,6 +9470,10 @@
             "name": "ignored-containers",
             "description": "Read or set the container names this server does not treat as services",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--clear",
                 "description": "Remove every ignored container name"
@@ -8531,6 +9506,10 @@
             "name": "list",
             "description": "List the monitored servers in your organization (fleet snapshot)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -8566,6 +9545,12 @@
           {
             "name": "pause",
             "description": "Pause a server (no staleness checks or alerts until resumed)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8581,6 +9566,10 @@
             "name": "rename",
             "description": "Rename a monitored server (display name only)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New display name",
@@ -8607,6 +9596,12 @@
           {
             "name": "resume",
             "description": "Resume a paused server (back up at the next agent push)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8622,6 +9617,10 @@
             "name": "revoke",
             "description": "Revoke a server: its agent gets 403 and stops (host stays, reversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the revocation"
@@ -8641,6 +9640,12 @@
           {
             "name": "show",
             "description": "Show a monitored server (latest snapshot)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8654,10 +9659,17 @@
           },
           {
             "name": "tokens",
+            "description": "Fleet enrollment tokens (server agents authenticate with these)",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a fleet enrollment token (the secret is shown only once)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "NAME",
@@ -8673,6 +9685,10 @@
                 "name": "list",
                 "description": "List the fleet enrollment tokens (agents authenticate with these)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -8692,6 +9708,10 @@
                 "name": "revoke",
                 "description": "Revoke a fleet enrollment token (agents using it stop pushing)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the revocation"
@@ -8713,6 +9733,12 @@
           {
             "name": "unrevoke",
             "description": "Restore a revoked server (its agent can push again)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8728,11 +9754,16 @@
       },
       {
         "name": "service-accounts",
+        "description": "Service accounts (AI members, CLI-only) and their secret access",
         "commands": [
           {
             "name": "create",
             "description": "Create a service account (AI member, CLI-only)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "Display name",
@@ -8807,6 +9838,10 @@
             "name": "delete",
             "description": "Delete a service account (revokes its tokens + removes org access; the secrets audit trail is kept)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -8827,6 +9862,10 @@
             "name": "list",
             "description": "List the service accounts (AI members, CLI-only) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -8846,6 +9885,12 @@
           {
             "name": "show",
             "description": "Show a service account: identity, how many tokens are active, and the environments it can read secrets in",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8860,10 +9905,17 @@
           },
           {
             "name": "tokens",
+            "description": "CLI tokens (cyi_u_) of a service account (the secret is shown only once)",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a CLI token (cyi_u_) for a service account (the secret is shown only once)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ACCOUNT",
@@ -8884,6 +9936,10 @@
                 "name": "list",
                 "description": "List the CLI tokens of a service account — which ones still work and which are revoked. Never the secret.",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -8911,6 +9967,10 @@
                 "name": "revoke",
                 "description": "Revoke a service account CLI token (the agent using it loses access)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the revocation"
@@ -8938,6 +9998,10 @@
             "name": "update",
             "description": "Update a service account's secret access: the environments it may read secrets in (full replace)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--secret-environment",
                 "description": "Environment code the account may read secrets in (repeatable; replaces the whole list)",
@@ -8975,6 +10039,10 @@
             "name": "delete",
             "description": "Delete an organization shared secret from EVERY environment at once (irreversible). There is no per-environment deletion.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion across every environment"
@@ -8994,6 +10062,12 @@
           {
             "name": "list",
             "description": "List the organization shared secret names (one row per variable, every page). Never prints values.",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit shared list",
               "closeyourit shared list --json"
@@ -9003,6 +10077,10 @@
             "name": "set",
             "description": "Set (create or update) an organization shared secret for one environment. Projects delegated on that environment read the new value.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--environment",
                 "aliases": [
@@ -9054,10 +10132,17 @@
       },
       {
         "name": "teams",
+        "description": "Teams: people bundled with roles and a group/project scope",
         "commands": [
           {
             "name": "add-member",
             "description": "Add a person to a team, keeping the existing members",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "TEAM",
@@ -9078,6 +10163,10 @@
             "name": "create",
             "description": "Create a team and (optionally) set its roles, group/project scope and members",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -9144,6 +10233,12 @@
           {
             "name": "delete",
             "description": "Delete a team (its members lose the access this team granted)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "TEAM",
@@ -9159,6 +10254,10 @@
             "name": "list",
             "description": "List the teams (people with scope) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -9178,6 +10277,12 @@
           {
             "name": "remove-member",
             "description": "Remove a person from a team, keeping the other members",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "TEAM",
@@ -9197,6 +10302,12 @@
           {
             "name": "show",
             "description": "Show a team by id or name (roles, group/project scope, members)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "TEAM",
@@ -9212,6 +10323,10 @@
             "name": "update",
             "description": "Update a team. Each given dimension REPLACES the whole set for that dimension.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -9295,6 +10410,10 @@
             "name": "approve",
             "description": "Approve a ticket review: move it to the first done status",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9325,6 +10444,10 @@
             "name": "ask",
             "description": "Ask a natural-language question about the tickets you can see; the AI answers and cites the tickets it used (may take a few seconds)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--timeout",
                 "description": "Seconds to wait for the answer before giving up",
@@ -9351,6 +10474,10 @@
             "name": "assign",
             "description": "Assign a ticket to an account, or unassign it (--unassign)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9396,6 +10523,10 @@
             "name": "attach",
             "description": "Attach one or more local files to a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9438,6 +10569,10 @@
             "name": "attachment-download",
             "description": "Download a ticket binary to disk: works for ticket attachments AND files attached to its comments",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9494,6 +10629,10 @@
             "name": "attachments",
             "description": "List a ticket's attachments",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9525,6 +10664,10 @@
             "name": "branch",
             "description": "Create a GitHub branch from a ticket (name prefixed with the ticket code)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9552,10 +10695,49 @@
               "closeyourit tickets branch DRFL-3 -p driverone-flutter --json"
             ]
           },
+          {
+            "name": "clarifications",
+            "description": "Show the clarification cycle state of a ticket (rounds, reply, escalation)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
+              {
+                "name": "--project",
+                "aliases": [
+                  "-p"
+                ],
+                "description": "Project id (UUID) or key",
+                "required": true,
+                "arguments": [
+                  {
+                    "name": "PROJECT",
+                    "required": true
+                  }
+                ]
+              }
+            ],
+            "arguments": [
+              {
+                "name": "ID",
+                "required": true,
+                "description": "Ticket id or code (e.g. DRFL-3)"
+              }
+            ],
+            "examples": [
+              "closeyourit tickets clarifications <ticket-id> --project acme-api",
+              "closeyourit tickets clarifications DRFL-3 -p acme-api --json"
+            ]
+          },
           {
             "name": "comment",
             "description": "Add a comment to a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9597,6 +10779,10 @@
             "name": "comment-delete",
             "description": "Delete a comment from a ticket (author, or with tickets.comment.delete_any)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9642,6 +10828,10 @@
             "name": "comments",
             "description": "List all comments of a ticket (oldest first), including attached files — download them with tickets attachment-download",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9673,6 +10863,10 @@
             "name": "create",
             "description": "Create a ticket (status defaults to open, priority to medium; both take a code or a label)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9886,6 +11080,10 @@
             "name": "delete",
             "description": "Delete a ticket (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9918,11 +11116,16 @@
           },
           {
             "name": "dependencies",
+            "description": "Ticket prerequisites: what has to be finished before a ticket can start",
             "commands": [
               {
                 "name": "add",
                 "description": "Add a prerequisite to a ticket: the blocker has to be finished before this ticket can start",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -9959,6 +11162,10 @@
                 "name": "list",
                 "description": "List the prerequisites of a ticket: what has to be finished before this one can start",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -9990,6 +11197,10 @@
                 "name": "remove",
                 "description": "Remove a prerequisite from a ticket",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10027,6 +11238,10 @@
             "name": "detach",
             "description": "Remove an attachment from a ticket (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10072,6 +11287,10 @@
             "name": "eligibility",
             "description": "Allow or block a ticket for autonomous agents (requires tickets.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10124,11 +11343,16 @@
           },
           {
             "name": "lease",
+            "description": "Working lease on a ticket: claim, renew, release (one worker at a time)",
             "commands": [
               {
                 "name": "claim",
                 "description": "Claim the working lease on a ticket, so nobody else (person or agent) starts it at the same time",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10180,6 +11404,10 @@
                 "name": "release",
                 "description": "Release your own working lease on a ticket, so someone else can claim it",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10221,6 +11449,10 @@
                 "name": "renew",
                 "description": "Extend your own working lease on a ticket before it expires",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10274,6 +11506,10 @@
             "name": "links",
             "description": "List the ticket-to-ticket links involving a ticket (duplicate/related)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10305,6 +11541,10 @@
             "name": "list",
             "description": "List tickets for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10355,6 +11595,10 @@
             "name": "milestone",
             "description": "Set or clear a ticket milestone (--clear)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10400,6 +11644,10 @@
             "name": "pr",
             "description": "Open a GitHub pull request from a ticket (head = the ticket branch, title prefixed with the code)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10430,6 +11678,12 @@
           {
             "name": "priorities",
             "description": "List the organization ticket priorities (id, code, label) — the id feeds `tickets create --priority-id`",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit tickets priorities",
               "closeyourit tickets priorities --json"
@@ -10439,6 +11693,10 @@
             "name": "reject",
             "description": "Reject a ticket review: send it back to work with a reason",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10480,6 +11738,10 @@
             "name": "report",
             "description": "Write the work report of a ticket — the long text a comment cannot hold. Each write adds a version, it never overwrites the previous one",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10531,6 +11793,10 @@
             "name": "report-show",
             "description": "Show the current work report of a ticket, or a past version with --version",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10572,6 +11838,10 @@
             "name": "report-versions",
             "description": "List the versions of the work report of a ticket (newest first)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10613,6 +11883,10 @@
             "name": "reviewer",
             "description": "Set the reviewer of a ticket (requires tickets.assign)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10654,6 +11928,10 @@
             "name": "show",
             "description": "Show a single ticket in full: body (description + Given/When/Then/Expected), comments (with their files) and attachments",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10686,6 +11964,10 @@
             "name": "status",
             "description": "Change a ticket status (by code, label or id)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10727,6 +12009,12 @@
           {
             "name": "statuses",
             "description": "List the organization ticket statuses (id, code, label) — the id feeds `tickets create --status-id`",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit tickets statuses",
               "closeyourit tickets statuses --json"
@@ -10736,6 +12024,10 @@
             "name": "unlink",
             "description": "Remove a ticket-to-ticket link (irreversible; requires tickets.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10775,6 +12067,10 @@
             "name": "unreviewer",
             "description": "Remove the reviewer of a ticket (requires tickets.assign)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10805,6 +12101,10 @@
             "name": "unvote",
             "description": "Remove your upvote from a ticket (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10835,6 +12135,10 @@
             "name": "unwatch",
             "description": "Stop watching a ticket (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10865,6 +12169,10 @@
             "name": "update",
             "description": "Update a ticket, changing only the fields you pass (the others keep their current value; use --clear to empty one, --replace for the raw full replace)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11109,6 +12417,10 @@
             "name": "vote",
             "description": "Upvote a ticket (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11139,6 +12451,10 @@
             "name": "watch",
             "description": "Watch a ticket to receive its notifications (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11169,6 +12485,10 @@
             "name": "work-context",
             "description": "Show the work context frozen when an automation host claimed the ticket: the references and procedures actually delivered back then, never the project's current guidance",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11211,6 +12531,12 @@
           {
             "name": "complete",
             "description": "Mark a todo item as done",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "LISTID",
@@ -11231,6 +12557,10 @@
             "name": "create",
             "description": "Create a todo list",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "List name",
@@ -11262,6 +12592,10 @@
             "name": "delete",
             "description": "Delete a todo list (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -11280,11 +12614,16 @@
           },
           {
             "name": "items",
+            "description": "Items of a todo list: add, list, update, delete",
             "commands": [
               {
                 "name": "add",
                 "description": "Add an item to a todo list",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--title",
                     "description": "Item title",
@@ -11333,6 +12672,10 @@
                 "name": "delete",
                 "description": "Delete a todo item (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the irreversible deletion"
@@ -11358,6 +12701,10 @@
                 "name": "list",
                 "description": "List the items of one of your todo lists",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -11384,6 +12731,10 @@
                 "name": "update",
                 "description": "Update a todo item (retitle, relink a ticket, or reposition)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--title",
                     "description": "New title",
@@ -11438,6 +12789,10 @@
             "name": "list",
             "description": "List your own todo lists",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -11458,6 +12813,10 @@
             "name": "reorder",
             "description": "Reorder your todo lists (pass --list once per id, in the desired order)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--list",
                 "description": "List id, in order (repeatable)",
@@ -11478,6 +12837,10 @@
             "name": "share",
             "description": "Set who a todo list is shared with (replaces the set; omit --account to unshare all)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--account",
                 "description": "Recipient account id (repeatable)",
@@ -11505,6 +12868,10 @@
             "name": "shared",
             "description": "List todo lists shared with you (read-only)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -11524,6 +12891,12 @@
           {
             "name": "shared-show",
             "description": "Show a todo list shared with you (read-only)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -11538,6 +12911,12 @@
           {
             "name": "shares",
             "description": "List the members a todo list is shared with (read-only)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "LISTID",
@@ -11552,6 +12931,12 @@
           {
             "name": "show",
             "description": "Show one of your todo lists",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -11566,6 +12951,12 @@
           {
             "name": "uncomplete",
             "description": "Reopen a todo item (mark it not done)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "LISTID",
@@ -11586,6 +12977,10 @@
             "name": "update",
             "description": "Update a todo list (rename or recolor)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New name",
@@ -11629,6 +13024,10 @@
             "name": "create",
             "description": "Create an ingest token (the secret is shown only once)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11674,6 +13073,10 @@
             "name": "list",
             "description": "List ingest tokens for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11698,6 +13101,10 @@
             "name": "provision",
             "description": "Generate an ingest token and deliver it without revealing the secret",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11806,11 +13213,16 @@
           },
           {
             "name": "provisions",
+            "description": "GitHub provisioning of an ingest token: status and retry (never the secret)",
             "commands": [
               {
                 "name": "retry",
                 "description": "Retry GitHub synchronization without regenerating or revealing the token",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -11838,6 +13250,10 @@
                 "name": "show",
                 "description": "Show secret-free token provision status",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -11867,6 +13283,10 @@
             "name": "revoke",
             "description": "Revoke an ingest token",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11897,6 +13317,10 @@
             "name": "rotate",
             "description": "Rotate an ingest token (the new secret is shown only once)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11933,6 +13357,10 @@
             "name": "create",
             "description": "Create an uptime monitor group (org-level container)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "Group name",
@@ -11984,6 +13412,10 @@
             "name": "delete",
             "description": "Delete an uptime monitor group (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -12004,6 +13436,10 @@
             "name": "list",
             "description": "List the uptime monitor groups in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -12023,6 +13459,12 @@
           {
             "name": "publish",
             "description": "Publish the public status page for an uptime group",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12037,6 +13479,12 @@
           {
             "name": "show",
             "description": "Show an uptime monitor group",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12051,6 +13499,12 @@
           {
             "name": "unpublish",
             "description": "Unpublish (retract) the public status page for an uptime group",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12066,6 +13520,10 @@
             "name": "update",
             "description": "Update an uptime monitor group (only the provided fields)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "Group name",
@@ -12120,6 +13578,109 @@
           }
         ]
       },
+      {
+        "name": "usage",
+        "description": "Usage the product reported as actually executed (routes, jobs, custom keys)",
+        "commands": [
+          {
+            "name": "list",
+            "description": "List the usage symbols the product reported as actually executed (routes as Controller#action, jobs, custom keys)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
+              {
+                "name": "--project",
+                "aliases": [
+                  "-p"
+                ],
+                "description": "Project id (UUID) or key",
+                "required": true,
+                "arguments": [
+                  {
+                    "name": "PROJECT",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "name": "--kind",
+                "description": "Only this kind (route, job, custom)",
+                "arguments": [
+                  {
+                    "name": "KIND",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "name": "--environment",
+                "description": "Only this environment",
+                "arguments": [
+                  {
+                    "name": "ENVIRONMENT",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "name": "--page",
+                "description": "Page number",
+                "arguments": [
+                  {
+                    "name": "PAGE",
+                    "required": true
+                  }
+                ]
+              }
+            ],
+            "examples": [
+              "closeyourit usage list --project CYRA",
+              "closeyourit usage list -p CYRA --kind route --environment production",
+              "closeyourit usage list -p CYRA --json"
+            ]
+          },
+          {
+            "name": "reporters",
+            "description": "List the usage reporters: which SDK is sending usage of each kind, and since when",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
+              {
+                "name": "--project",
+                "aliases": [
+                  "-p"
+                ],
+                "description": "Project id (UUID) or key",
+                "required": true,
+                "arguments": [
+                  {
+                    "name": "PROJECT",
+                    "required": true
+                  }
+                ]
+              },
+              {
+                "name": "--kind",
+                "description": "Only this kind (route, job, custom)",
+                "arguments": [
+                  {
+                    "name": "KIND",
+                    "required": true
+                  }
+                ]
+              }
+            ],
+            "examples": [
+              "closeyourit usage reporters --project CYRA",
+              "closeyourit usage reporters -p CYRA --kind route"
+            ]
+          }
+        ]
+      },
       {
         "name": "vault",
         "description": "Vault review: the secret changes waiting for a second approval",
@@ -12131,6 +13692,12 @@
               {
                 "name": "approve",
                 "description": "Approve a pending secret change request: the change it carries is applied to the vault. Whoever asked for it cannot approve it (four-eyes), and a service account never can.",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ID",
@@ -12146,6 +13713,12 @@
               {
                 "name": "list",
                 "description": "List the secret changes waiting for a second approval, across every visible project. Shows the name and the intent, never the proposed value.",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "examples": [
                   "closeyourit vault requests list",
                   "closeyourit vault requests list --json"
@@ -12155,6 +13728,10 @@
                 "name": "reject",
                 "description": "Reject a pending secret change request with a reason. Nothing changes in the vault: the request freezes as rejected and the reason reaches whoever asked.",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--reason",
                     "aliases": [
@@ -12188,6 +13765,7 @@
       },
       {
         "name": "vulnerabilities",
+        "description": "Dependency vulnerabilities and runtime support: triage, ignore, promote to ticket",
         "commands": [
           {
             "name": "ignore",
@@ -12196,6 +13774,10 @@
               "vulns:ignore"
             ],
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--note",
                 "description": "Why you are keeping it (shown alongside the ignored row)",
@@ -12226,6 +13808,10 @@
               "vulns:list"
             ],
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12293,6 +13879,12 @@
             "aliases": [
               "vulns:promote"
             ],
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12310,6 +13902,12 @@
             "aliases": [
               "vulns:reopen"
             ],
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12328,6 +13926,10 @@
               "vulns:rescan"
             ],
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12354,6 +13956,10 @@
               "vulns:runtimes"
             ],
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12389,6 +13995,12 @@
             "aliases": [
               "vulns:show"
             ],
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12405,6 +14017,12 @@
       {
         "name": "whoami",
         "description": "Show the authenticated account, organization, token prefix and permissions",
+        "options": [
+          {
+            "name": "--yes",
+            "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+          }
+        ],
         "examples": [
           "closeyourit whoami",
           "closeyourit whoami --json"
@@ -12418,6 +14036,10 @@
             "name": "create",
             "description": "Create a workload action (non-dev activity: fair, meeting, call…) on one of your teams. Add the people with `workload participant add`.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--team",
                 "description": "Team id (UUID) or name — the action belongs to it and cannot be moved later",
@@ -12507,6 +14129,10 @@
             "name": "delete",
             "description": "Delete a workload action (irreversible; a linked ticket survives and only loses the link)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -12527,6 +14153,10 @@
             "name": "list",
             "description": "List the workload actions of the teams you belong to (newest first)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -12550,6 +14180,12 @@
               {
                 "name": "add",
                 "description": "Add someone to a workload action (they must belong to the team that owns it)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ACTION",
@@ -12569,6 +14205,12 @@
               {
                 "name": "remove",
                 "description": "Remove someone from a workload action (idempotent: removing who is not there succeeds)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ACTION",
@@ -12591,6 +14233,10 @@
             "name": "promote",
             "description": "Generate a ticket from a workload action and link it back (the action keeps existing; an already linked action is refused)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12677,6 +14323,12 @@
           {
             "name": "show",
             "description": "Show one workload action (an action of another team answers 404, never 403)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12692,6 +14344,10 @@
             "name": "update",
             "description": "Update a workload action (only the passed fields change). The team never changes: moving an action would change who can see it.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--title",
                 "description": "New title",