@bussolabs/closeyourit-cli 0.24.1 → 0.25.0

package/opencli.json

@@ -3,7 +3,7 @@
   "opencli": "0.1",
   "info": {
     "title": "closeyourit",
-    "version": "0.24.1",
+    "version": "0.25.0",
     "description": "CLI for CloseYourIt — manage org, errors, tokens and tickets with your user token",
     "license": {
       "name": "MIT",
@@ -60,10 +60,17 @@
         "commands": [
           {
             "name": "tokens",
+            "description": "The automator tokens themselves: create, list, revoke (the secret is shown only once)",
             "commands": [
               {
                 "name": "create",
                 "description": "Create an org automator token (cyi_a_ — the secret is shown only once)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "NAME",
@@ -79,6 +86,10 @@
                 "name": "list",
                 "description": "List the org automator tokens (closeyourit-automator authenticates with these)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -98,6 +109,10 @@
                 "name": "revoke",
                 "description": "Revoke an org automator token (the automator using it stops syncing)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the revocation"
@@ -120,14 +135,20 @@
       },
       {
         "name": "alerts",
+        "description": "Alert rules, external delivery channels and your own notifications",
         "commands": [
           {
             "name": "channels",
+            "description": "External delivery channels for alerts (webhook, Telegram)",
             "commands": [
               {
                 "name": "create",
                 "description": "Create an external alert channel (webhook or Telegram)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--kind",
                     "description": "Channel kind",
@@ -200,6 +221,10 @@
                 "name": "delete",
                 "description": "Delete an external alert channel (rules keep delivering in-app/email)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the deletion"
@@ -220,6 +245,10 @@
                 "name": "list",
                 "description": "List the external alert channels (webhook / Telegram)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -241,6 +270,10 @@
             "name": "create",
             "description": "Create an alert rule in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--event-type",
                 "description": "Event that triggers the rule",
@@ -389,6 +422,10 @@
             "name": "delete",
             "description": "Delete an alert rule",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -409,6 +446,10 @@
             "name": "list",
             "description": "List the alert rules in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -427,11 +468,16 @@
           },
           {
             "name": "notifications",
+            "description": "Your in-app notification inbox: list, mark read, delete",
             "commands": [
               {
                 "name": "delete",
                 "description": "Delete one of your notifications (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the irreversible deletion"
@@ -452,6 +498,10 @@
                 "name": "list",
                 "description": "List your in-app alert notifications (your own inbox)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -471,6 +521,12 @@
               {
                 "name": "read",
                 "description": "Mark a single notification as read (idempotent)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ID",
@@ -485,6 +541,12 @@
               {
                 "name": "read-all",
                 "description": "Mark all your unread notifications as read",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "examples": [
                   "closeyourit alerts notifications read-all"
                 ]
@@ -493,10 +555,17 @@
           },
           {
             "name": "preferences",
+            "description": "Your personal alert preferences, per organization",
             "commands": [
               {
                 "name": "show",
                 "description": "Show your personal alert preferences (per organization)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "examples": [
                   "closeyourit alerts preferences show"
                 ]
@@ -505,6 +574,10 @@
                 "name": "update",
                 "description": "Update your personal alert preferences (send only the fields you want to change)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--in-app-enabled",
                     "description": "Deliver notifications in-app"
@@ -588,6 +661,12 @@
           {
             "name": "show",
             "description": "Show a single alert rule",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -603,6 +682,10 @@
             "name": "update",
             "description": "Update an alert rule (send only the fields you want to change)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "Rule name",
@@ -764,11 +847,16 @@
         "commands": [
           {
             "name": "goals",
+            "description": "Conversion goals of a project: create, list, delete",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a conversion goal on a project",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -839,6 +927,10 @@
                 "name": "delete",
                 "description": "Delete a conversion goal (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -873,6 +965,10 @@
                 "name": "list",
                 "description": "List the conversion goals of a project",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -898,6 +994,10 @@
             "name": "share",
             "description": "Publish a public shareable link to the analytics dashboard (optional password)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -932,6 +1032,10 @@
             "name": "show",
             "description": "Show the web analytics snapshot for a project (traffic, top pages, goals)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -982,6 +1086,10 @@
             "name": "unshare",
             "description": "Revoke the public analytics dashboard link",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1015,6 +1123,10 @@
             "name": "ask",
             "description": "Ask the assistant a question about your own data; it reads what you are allowed to see and answers (may take a while)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--conversation",
                 "aliases": [
@@ -1059,6 +1171,10 @@
                 "name": "create",
                 "description": "Open an empty conversation with the assistant (ask questions into it with `assistant ask --conversation`)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--title",
                     "description": "Conversation title (defaults to the first question asked)",
@@ -1079,6 +1195,10 @@
                 "name": "delete",
                 "description": "Delete a conversation with the assistant, questions and answers included (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the irreversible deletion"
@@ -1099,6 +1219,10 @@
                 "name": "list",
                 "description": "List your conversations with the assistant (most recently active first)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--per",
                     "description": "Page size",
@@ -1128,6 +1252,12 @@
               {
                 "name": "show",
                 "description": "Read one conversation with the assistant: its questions, its answers and what they were based on",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ID",
@@ -1145,11 +1275,16 @@
       },
       {
         "name": "coverage",
+        "description": "Test coverage published by the CI (last snapshot per branch)",
         "commands": [
           {
             "name": "show",
             "description": "Show the coverage extract the CI published for a project (last snapshot per branch, never the history)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1191,6 +1326,10 @@
             "name": "list",
             "description": "List cron / heartbeat monitors across your visible projects",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -1239,6 +1378,12 @@
           {
             "name": "show",
             "description": "Show a cron / heartbeat monitor",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -1254,11 +1399,16 @@
       },
       {
         "name": "environments",
+        "description": "Environments (production, staging, …) shared by projects, tokens and monitors",
         "commands": [
           {
             "name": "create",
             "description": "Create an environment (production, staging, …) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--label",
                 "description": "Human-readable label",
@@ -1324,6 +1474,10 @@
             "name": "delete",
             "description": "Delete an environment (blocked while projects, tokens or monitors reference it)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -1344,6 +1498,10 @@
             "name": "list",
             "description": "List the environments (production, staging, …) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -1364,6 +1522,10 @@
             "name": "update",
             "description": "Update an environment (recode, relabel, recolor, reorder, activate/deactivate)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--code",
                 "description": "New code (lowercase)",
@@ -1445,6 +1607,10 @@
             "name": "assign",
             "description": "Put an error group in someone's hands, or take it out (--unassign)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1490,6 +1656,10 @@
             "name": "bulk-triage",
             "description": "Resolve, ignore or reopen several error groups in one call",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1541,6 +1711,10 @@
             "name": "delete",
             "description": "Delete an error group and every occurrence it holds (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1579,6 +1753,10 @@
                 "name": "create",
                 "description": "Add a grouping rule: occurrences that match it are grouped under one key",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -1672,6 +1850,10 @@
                 "name": "delete",
                 "description": "Delete a grouping rule (the groups it already made stay where they are)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -1706,6 +1888,10 @@
                 "name": "list",
                 "description": "List the custom grouping rules of a project, in the order they are applied",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -1739,6 +1925,10 @@
                 "name": "update",
                 "description": "Change a grouping rule: what it matches, where it sends, when it runs, or turn it off",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -1838,6 +2028,10 @@
             "name": "list",
             "description": "List error groups for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1882,6 +2076,10 @@
             "name": "merge",
             "description": "Merge error groups into one: the occurrences move, the absorbed groups disappear (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1927,6 +2125,10 @@
             "name": "mute",
             "description": "Mute an error group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1957,6 +2159,10 @@
             "name": "promote",
             "description": "Promote an error group to a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -1987,6 +2193,10 @@
             "name": "reopen",
             "description": "Reopen a resolved error group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2017,6 +2227,10 @@
             "name": "resolve",
             "description": "Mark an error group as resolved",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2047,6 +2261,10 @@
             "name": "show",
             "description": "Show a single error group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2077,6 +2295,10 @@
             "name": "split",
             "description": "Split an error group: pull some occurrences out into a new one",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2118,6 +2340,10 @@
             "name": "unmute",
             "description": "Unmute an error group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2148,11 +2374,16 @@
       },
       {
         "name": "groups",
+        "description": "Groups: containers of related projects (macro-projects)",
         "commands": [
           {
             "name": "create",
             "description": "Create a group (a container of related projects, e.g. \"DriverOne\")",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -2180,6 +2411,10 @@
             "name": "delete",
             "description": "Delete a group (its projects are detached, not deleted)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -2200,6 +2435,10 @@
             "name": "list",
             "description": "List the groups (macro-projects) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -2220,6 +2459,10 @@
             "name": "update",
             "description": "Update a group (rename, recolor)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New name",
@@ -2263,6 +2506,10 @@
             "name": "show",
             "description": "Show a project's effective guidance: the references and procedures resolved by the backend (the CLI never recomposes inheritance)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2294,6 +2541,10 @@
             "name": "archive",
             "description": "Archive an idea (open → archived; author always allowed, others need ideas.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2324,6 +2575,10 @@
             "name": "case",
             "description": "Add a case (example/scenario) to an idea (only open ideas accept cases)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2375,6 +2630,10 @@
             "name": "case-delete",
             "description": "Delete a case from an open idea (author always allowed, others need ideas.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2414,6 +2673,10 @@
             "name": "case-update",
             "description": "Update a case (example/scenario) of an idea (title and/or description)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2470,6 +2733,10 @@
             "name": "comment",
             "description": "Add a comment to an idea (only open ideas accept comments)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2511,6 +2778,10 @@
             "name": "comment-delete",
             "description": "Delete a comment from an open idea (author, or with ideas.comment.delete_any)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2556,6 +2827,10 @@
             "name": "comments",
             "description": "List all comments of an idea (oldest first)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2587,6 +2862,10 @@
             "name": "convert",
             "description": "Convert an idea into a ticket. Without --title/--description the server AI synthesizes the draft from the idea and its comments (may take ~30s). Author always allowed; others need ideas.convert.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2674,6 +2953,10 @@
             "name": "create",
             "description": "Propose an idea for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2739,6 +3022,10 @@
             "name": "delete",
             "description": "Delete an idea (author always allowed; others need ideas.delete)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2773,6 +3060,10 @@
             "name": "list",
             "description": "List ideas for a project (sorted by votes)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2827,6 +3118,10 @@
             "name": "show",
             "description": "Show an idea (fields + problem, solution, stakeholders)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2857,6 +3152,10 @@
             "name": "unarchive",
             "description": "Reopen an archived idea (archived → open; author always allowed, others need ideas.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2887,6 +3186,10 @@
             "name": "unvote",
             "description": "Remove your upvote from an idea (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2917,6 +3220,10 @@
             "name": "update",
             "description": "Update an idea (full replace of title/problem/solution — omitted fields are cleared)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -2987,6 +3294,10 @@
             "name": "vote",
             "description": "Upvote an idea (idempotent; only open ideas accept votes)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3017,11 +3328,16 @@
       },
       {
         "name": "invitations",
+        "description": "Invitations to join the organization: create, resend, revoke",
         "commands": [
           {
             "name": "create",
             "description": "Invite a person to the organization. Prints the acceptance link.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--role",
                 "description": "Membership role",
@@ -3054,6 +3370,10 @@
             "name": "list",
             "description": "List the pending/accepted invitations of your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -3073,6 +3393,12 @@
           {
             "name": "resend",
             "description": "Resend a pending invitation. Prints the acceptance link.",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -3087,6 +3413,12 @@
           {
             "name": "revoke",
             "description": "Revoke a pending invitation",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -3104,9 +3436,36 @@
         "name": "kb",
         "description": "Knowledge base: pages (notes/decisions/guides), semantic search and AI ask",
         "commands": [
+          {
+            "name": "approve",
+            "description": "Accept a page waiting for review: it enters search, answers and related panels",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
+            "arguments": [
+              {
+                "name": "ID",
+                "required": true,
+                "description": "Knowledge page id"
+              }
+            ],
+            "examples": [
+              "closeyourit kb approve <page-id>",
+              "closeyourit kb approve <page-id> --json"
+            ]
+          },
           {
             "name": "ask",
             "description": "Ask a natural-language question; the server AI answers from the knowledge base and cites the pages it used (may take a few seconds)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "QUESTION",
@@ -3122,6 +3481,10 @@
             "name": "attach",
             "description": "Attach one or more local files to a knowledge page",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--file",
                 "description": "Path to a local file to upload (repeatable)",
@@ -3150,6 +3513,10 @@
             "name": "attachment-download",
             "description": "Download a knowledge page's attachment to disk",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--out",
                 "description": "Output directory",
@@ -3191,6 +3558,12 @@
           {
             "name": "attachments",
             "description": "List a knowledge page's attachments",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -3211,6 +3584,10 @@
                 "name": "add-page",
                 "description": "Add a knowledge page to a book, optionally at a given position in the summary",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Id of the knowledge page to add (an id, not a page number; alias: --page-id)",
@@ -3250,6 +3627,10 @@
                 "name": "list",
                 "description": "List knowledge books (ordered collections of pages) across the projects you can see",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -3304,6 +3685,12 @@
               {
                 "name": "show",
                 "description": "Show a knowledge book: its metadata, then the summary of the pages it collects",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ID",
@@ -3322,6 +3709,10 @@
             "name": "consolidate",
             "description": "Mark an accepted page as written to the versioned docs, recording its path",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--path",
                 "description": "Path of the document inside the knowledge-base repo",
@@ -3350,6 +3741,10 @@
             "name": "create",
             "description": "Create a knowledge page in one or more projects (and groups)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3481,6 +3876,10 @@
             "name": "delete",
             "description": "Delete a knowledge page (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -3501,6 +3900,10 @@
             "name": "detach",
             "description": "Remove an attachment from a knowledge page (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--attachment",
                 "description": "Attachment id to remove",
@@ -3532,6 +3935,10 @@
             "name": "list",
             "description": "List knowledge pages across the projects you can see",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3608,6 +4015,10 @@
             "name": "publish",
             "description": "Idempotently create or update a Knowledge page by publication key.\n\nExactly one of --body or --body-file is required.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3680,10 +4091,35 @@
               "closeyourit kb publish -p CYCL --publication-key docs:release --title \"Release guide\" --kind guide --body-file ./release.md"
             ]
           },
+          {
+            "name": "reject",
+            "description": "Discard a page waiting for review: it stays archived as rejected, out of search and answers",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
+            "arguments": [
+              {
+                "name": "ID",
+                "required": true,
+                "description": "Knowledge page id"
+              }
+            ],
+            "examples": [
+              "closeyourit kb reject <page-id>",
+              "closeyourit kb reject <page-id> --json"
+            ]
+          },
           {
             "name": "related",
             "description": "List the pages to read next: the ones this page links to (and that link to it), plus close matches by meaning",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--question",
                 "description": "Keep only the pages relevant to this question",
@@ -3716,6 +4152,10 @@
             "name": "search",
             "description": "Search knowledge pages (semantic when available, ILIKE fallback on the title otherwise)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -3781,6 +4221,10 @@
             "name": "show",
             "description": "Show a single knowledge page: metadata header then the raw markdown body",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--related",
                 "description": "Also list the pages to read next"
@@ -3813,6 +4257,10 @@
             "name": "update",
             "description": "Update a knowledge page (only the fields you pass; the others keep their current value)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--title",
                 "description": "New title (max 255 characters)",
@@ -3938,6 +4386,10 @@
         "name": "login",
         "description": "Authenticate via the device flow and store your CLI token",
         "options": [
+          {
+            "name": "--yes",
+            "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+          },
           {
             "name": "--api-url",
             "description": "Backend base URL to authenticate against (persisted)",
@@ -3957,6 +4409,12 @@
       {
         "name": "logout",
         "description": "Clear the locally stored token and identity",
+        "options": [
+          {
+            "name": "--yes",
+            "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+          }
+        ],
         "examples": [
           "closeyourit logout"
         ]
@@ -3969,6 +4427,10 @@
             "name": "link",
             "description": "Manually link a log entry to an error group or a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--to",
                 "description": "Target to link: \"Errors::Group:<uuid>\" or \"Ticketing::Ticket:<uuid>\"",
@@ -3997,6 +4459,10 @@
             "name": "list",
             "description": "List structured log entries (cross-app stream)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4060,6 +4526,12 @@
           {
             "name": "show",
             "description": "Show a single log entry (attributes, trace id, correlation)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -4075,6 +4547,10 @@
             "name": "unlink",
             "description": "Remove a manual log↔target link (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -4104,11 +4580,16 @@
         "commands": [
           {
             "name": "categories",
+            "description": "Feature groups (categories): how the rows of a product matrix are organized",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a feature group (category) in a product matrix",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--name",
                     "description": "Category name (unique within the product)",
@@ -4147,6 +4628,10 @@
                 "name": "delete",
                 "description": "Delete a feature group (only when empty: move or delete its features first)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the deletion"
@@ -4172,6 +4657,10 @@
                 "name": "list",
                 "description": "List the feature groups (categories) of a product matrix",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -4198,6 +4687,10 @@
                 "name": "update",
                 "description": "Update a feature group (rename or reorder); unpassed fields keep their value",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--name",
                     "description": "New name",
@@ -4240,11 +4733,16 @@
           },
           {
             "name": "cells",
+            "description": "Matrix cells: how far a feature is on a platform, and since which version",
             "commands": [
               {
                 "name": "clear",
                 "description": "Clear a matrix cell: the crossing goes back to \"not set\"",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm clearing the cell"
@@ -4275,6 +4773,10 @@
                 "name": "set",
                 "description": "Write a matrix cell: how far along a feature is on a platform, and since which version",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--status",
                     "description": "Status code (see: matrix statuses) or id",
@@ -4323,11 +4825,16 @@
           },
           {
             "name": "features",
+            "description": "Features: the rows of a product matrix",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a feature (a row of the matrix) inside a category",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--category",
                     "description": "Category id (UUID) or name",
@@ -4397,6 +4904,10 @@
                 "name": "delete",
                 "description": "Delete a feature and every cell written for it (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the deletion"
@@ -4422,6 +4933,10 @@
                 "name": "list",
                 "description": "List the features of a product matrix",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -4458,6 +4973,12 @@
               {
                 "name": "show",
                 "description": "Show one feature and the cells written for it",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "PRODUCT",
@@ -4478,6 +4999,10 @@
                 "name": "update",
                 "description": "Update a feature (rename, move to another category, …); unpassed fields keep their value",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--name",
                     "description": "New name",
@@ -4552,6 +5077,10 @@
             "name": "list",
             "description": "List the products (groups) whose feature matrix you can see",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -4571,6 +5100,12 @@
           {
             "name": "show",
             "description": "Show a product feature matrix: features in rows, platforms in columns",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "PRODUCT",
@@ -4586,6 +5121,12 @@
           {
             "name": "statuses",
             "description": "List the cell statuses of your organization (the codes accepted by matrix cells set)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit matrix statuses",
               "closeyourit matrix statuses --json"
@@ -4595,11 +5136,16 @@
       },
       {
         "name": "members",
+        "description": "Organization members: profile, role, access scope",
         "commands": [
           {
             "name": "list",
             "description": "List the members of your organization (to resolve emails to account ids)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -4620,6 +5166,10 @@
             "name": "remove",
             "description": "Remove a member from your organization (irreversible; requires members.manage)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible removal"
@@ -4640,6 +5190,10 @@
             "name": "set-access",
             "description": "Set a member's access: group/project scope, direct roles, and permission overrides",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--group",
                 "description": "Group id or name to grant access to (repeatable; omit to clear group access)",
@@ -4699,6 +5253,10 @@
             "name": "set-role",
             "description": "Change a member's organization role",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--role",
                 "description": "Organization role",
@@ -4733,6 +5291,10 @@
             "name": "update",
             "description": "Update a member's profile: name, email, handle (requires members.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New display name",
@@ -4786,6 +5348,10 @@
             "name": "bulk-triage",
             "description": "Resolve, ignore or reopen several metric groups in one call",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4837,6 +5403,10 @@
             "name": "list",
             "description": "List performance metric groups (slow queries/methods) for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4881,6 +5451,10 @@
             "name": "promote",
             "description": "Promote a metric group (slow query/method) to a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4911,6 +5485,10 @@
             "name": "show",
             "description": "Show a single metric group",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -4941,11 +5519,16 @@
       },
       {
         "name": "milestones",
+        "description": "Project milestones: dated goals a ticket can be assigned to",
         "commands": [
           {
             "name": "create",
             "description": "Create a milestone for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5016,6 +5599,10 @@
             "name": "delete",
             "description": "Delete a milestone (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5050,6 +5637,10 @@
             "name": "list",
             "description": "List the milestones for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5084,6 +5675,10 @@
             "name": "show",
             "description": "Show a single milestone",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5114,6 +5709,10 @@
             "name": "update",
             "description": "Update a milestone (send only the fields you want to change)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5189,14 +5788,20 @@
       },
       {
         "name": "monitors",
+        "description": "Uptime monitors of a project: checks, public status page, incidents",
         "commands": [
           {
             "name": "announcements",
+            "description": "Announcement banner shown on a monitor's public status page",
             "commands": [
               {
                 "name": "clear",
                 "description": "Remove the status page announcement banner for a monitor",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5231,6 +5836,10 @@
                 "name": "set",
                 "description": "Upsert the status page announcement banner for a monitor",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5311,6 +5920,10 @@
                 "name": "show",
                 "description": "Show the status page announcement banner for a monitor (null if none)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5343,6 +5956,10 @@
             "name": "create",
             "description": "Create an uptime monitor for a project (one per environment)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5458,6 +6075,10 @@
             "name": "delete",
             "description": "Delete an uptime monitor (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5490,11 +6111,16 @@
           },
           {
             "name": "incidents",
+            "description": "Uptime incidents: group them and narrate them step by step",
             "commands": [
               {
                 "name": "delete",
                 "description": "Delete an uptime incident (and its grouped windows; irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5534,6 +6160,10 @@
                 "name": "group",
                 "description": "Unify incidents of a monitor and post the first narration step",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5603,6 +6233,10 @@
                 "name": "ungroup",
                 "description": "Dissolve an incident grouping (grouped windows become separate again)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5649,6 +6283,10 @@
                 "name": "update-add",
                 "description": "Add a timeline step to a narrated incident",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5712,6 +6350,10 @@
                 "name": "update-delete",
                 "description": "Delete a timeline step from a narrated incident (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -5758,6 +6400,10 @@
             "name": "list",
             "description": "List the uptime monitors for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5792,6 +6438,10 @@
             "name": "pause",
             "description": "Pause an uptime monitor (stops scheduling checks)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5822,6 +6472,10 @@
             "name": "publish",
             "description": "Publish the public status page for a monitor (opt-in)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5852,6 +6506,10 @@
             "name": "resume",
             "description": "Resume a paused uptime monitor (re-enables scheduling)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5882,6 +6540,10 @@
             "name": "show",
             "description": "Show a single uptime monitor",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5912,6 +6574,10 @@
             "name": "unpublish",
             "description": "Unpublish the public status page for a monitor",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -5942,6 +6608,10 @@
             "name": "update",
             "description": "Update an uptime monitor (URL, method, interval, expected status, timeout)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6053,10 +6723,17 @@
       },
       {
         "name": "org",
+        "description": "Organization settings (show and update)",
         "commands": [
           {
             "name": "show",
             "description": "Show your organization settings",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit org show",
               "closeyourit org show --json"
@@ -6066,6 +6743,10 @@
             "name": "update",
             "description": "Update your organization settings (requires organization.manage)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New organization name",
@@ -6137,6 +6818,12 @@
           {
             "name": "delete",
             "description": "Delete a personal secret from the current organization",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "NAME",
@@ -6152,6 +6839,10 @@
             "name": "download",
             "description": "Download all your personal secrets as .env or JSON (to a file or stdout). Values with newlines: use --format json. Prefer `cyi personal run` to avoid writing plaintext to disk.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--format",
                 "description": "Output format",
@@ -6185,6 +6876,12 @@
           {
             "name": "get",
             "description": "Print the value of a single personal secret (pipeable).",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "NAME",
@@ -6200,6 +6897,10 @@
             "name": "import",
             "description": "Import many personal secrets at once (all-or-nothing) from a .env or JSON file",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--from-file",
                 "description": "Path to a .env or JSON file (default: read from stdin)",
@@ -6234,6 +6935,12 @@
           {
             "name": "list",
             "description": "List your personal secret names for the current organization. Never prints values.",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit personal list",
               "closeyourit personal list --json"
@@ -6242,6 +6949,12 @@
           {
             "name": "run",
             "description": "Run a command with your personal secrets injected as env vars. Secrets never touch disk.",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit personal run -- bundle exec rails server",
               "closeyourit personal run -- printenv OPENAI_API_KEY"
@@ -6251,6 +6964,10 @@
             "name": "set",
             "description": "Set (create or update) a personal secret for the current organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--value",
                 "description": "Secret value (use when the arg is just NAME)",
@@ -6288,11 +7005,16 @@
       },
       {
         "name": "platforms",
+        "description": "Platforms (devices/systems) your projects and tickets run on",
         "commands": [
           {
             "name": "create",
             "description": "Create a platform (a device/system your projects run on)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--label",
                 "description": "Human-readable label",
@@ -6350,6 +7072,10 @@
             "name": "delete",
             "description": "Delete a platform (blocked if any project or ticket still references it)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -6370,6 +7096,10 @@
             "name": "list",
             "description": "List the platforms (devices/systems) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -6390,6 +7120,10 @@
             "name": "update",
             "description": "Update a platform (relabel, recolor, reorder, activate/deactivate, toggle uptime support)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--code",
                 "description": "New code",
@@ -6463,6 +7197,10 @@
             "name": "create",
             "description": "Create a project (optionally inside a group)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -6533,6 +7271,10 @@
             "name": "delete",
             "description": "Delete a project (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6560,6 +7302,10 @@
             "name": "github",
             "description": "Show a project GitHub integration (repo link + tag→release binding rules)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6585,6 +7331,10 @@
             "name": "github-connect",
             "description": "Connect a project to a repository available to the organization GitHub App",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6619,6 +7369,10 @@
             "name": "github-map",
             "description": "List the project → GitHub repository mapping for local automation",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--connected-only",
                 "description": "Show only projects connected to a GitHub repository"
@@ -6634,6 +7388,10 @@
             "name": "github-update",
             "description": "Update a project GitHub binding rules (environment mapping + sync/binding/autoclose flags); only the passed fields change",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6716,6 +7474,10 @@
             "name": "link-server",
             "description": "Link a server host to one of the project declared environments (uptime monitoring)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6761,6 +7523,10 @@
             "name": "list",
             "description": "List the projects visible to you",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -6781,6 +7547,10 @@
             "name": "set-environment-capabilities",
             "description": "Override the servers/uptime/secrets capabilities of a project environment (inherit = follow the environment default)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6864,6 +7634,10 @@
             "name": "set-environments",
             "description": "Declare the environments a project receives data from (replaces the current set)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6908,6 +7682,10 @@
             "name": "set-platforms",
             "description": "Declare the platforms of a project (replaces the current set)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -6950,11 +7728,16 @@
           },
           {
             "name": "settings",
+            "description": "Per-project settings: log/analytics retention and feature flags",
             "commands": [
               {
                 "name": "show",
                 "description": "Show a project settings (log/analytics retention + feature flags)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -6979,6 +7762,10 @@
                 "name": "update",
                 "description": "Update a project settings (log/analytics retention + feature flags); only the passed fields change",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7033,6 +7820,12 @@
           {
             "name": "show",
             "description": "Show a single project by id or key, with its declared environments and their capabilities",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -7049,6 +7842,10 @@
             "name": "unlink-server",
             "description": "Unlink a server host from the project (removes the host↔environment link)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7083,6 +7880,10 @@
             "name": "update",
             "description": "Update a project (name, key, color, description, group, feature flags)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7168,6 +7969,10 @@
             "name": "list",
             "description": "List the releases of a project (tracked from CI)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7202,11 +8007,16 @@
       },
       {
         "name": "roles",
+        "description": "RBAC roles: named bundles of permission keys",
         "commands": [
           {
             "name": "create",
             "description": "Create an RBAC role (a named bundle of permission keys)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -7242,6 +8052,12 @@
           {
             "name": "delete",
             "description": "Delete a role (its assignments to teams and accounts are removed)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ROLE",
@@ -7257,6 +8073,10 @@
             "name": "list",
             "description": "List the RBAC roles in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -7276,6 +8096,12 @@
           {
             "name": "show",
             "description": "Show a role by id or name (with its permission keys)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ROLE",
@@ -7291,6 +8117,10 @@
             "name": "update",
             "description": "Update a role (rename, recolor, or replace its permission keys)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -7340,6 +8170,10 @@
         "name": "run",
         "description": "Run a command with project/environment secrets injected as env vars. Secrets never touch disk.",
         "options": [
+          {
+            "name": "--yes",
+            "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+          },
           {
             "name": "--project",
             "aliases": [
@@ -7380,10 +8214,15 @@
         "commands": [
           {
             "name": "assets",
+            "description": "Encrypted secret files: upload, download, versions, delegation",
             "commands": [
               {
                 "name": "archive",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7413,6 +8252,10 @@
               {
                 "name": "delegate",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7438,6 +8281,10 @@
                 "name": "download",
                 "description": "Download and decrypt a secret file to an explicit path with mode 0600",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7489,6 +8336,10 @@
                 "name": "list",
                 "description": "List encrypted secret files visible to a project (metadata only)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7531,6 +8382,10 @@
                 "name": "purge",
                 "description": "Permanently delete an archived secret asset and all versions (owner only)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7567,6 +8422,10 @@
               {
                 "name": "rollback",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7601,12 +8460,22 @@
               },
               {
                 "name": "shared-list",
-                "description": "List organization-level encrypted secret files and delegated projects"
+                "description": "List organization-level encrypted secret files and delegated projects",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ]
               },
               {
                 "name": "shared-upload",
                 "description": "Encrypt and upload one organization-level secret file",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--file",
                     "required": true,
@@ -7650,6 +8519,10 @@
               {
                 "name": "undelegate",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7675,6 +8548,10 @@
                 "name": "upload",
                 "description": "Encrypt and upload a mobile CI secret file (never prints its contents)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7732,6 +8609,10 @@
               {
                 "name": "versions",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -7760,6 +8641,10 @@
             "name": "delete",
             "description": "Delete a secret from a project environment",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7804,6 +8689,10 @@
             "name": "download",
             "description": "Download all secrets of an environment as .env or JSON (to a file or stdout). Values with newlines: use --format json. Prefer `cyi run` to avoid writing plaintext to disk.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7866,6 +8755,10 @@
             "name": "get",
             "description": "Print the value of a single secret (pipeable). Requires the secrets.read permission.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7910,6 +8803,10 @@
             "name": "import",
             "description": "Import many secrets at once (all-or-nothing) from a .env or JSON file",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -7973,6 +8870,10 @@
             "name": "list",
             "description": "List secret names for a project (optionally filtered by environment). Lists every secret — never truncated to a page — and never prints values.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8018,6 +8919,10 @@
             "name": "set",
             "description": "Set (create or update) a secret for a project environment",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8083,6 +8988,10 @@
             "name": "sync",
             "description": "Push the project's vault secrets to its connected GitHub repo Environment secrets (enqueues a background sync). Requires the github.manage permission.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8106,11 +9015,16 @@
       },
       {
         "name": "seo",
+        "description": "SEO findings of the watched sites: triage, ignore, promote to ticket",
         "commands": [
           {
             "name": "ignore",
             "description": "Ignore an SEO finding: you accept living with it",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--note",
                 "description": "Why you are keeping it (shown alongside the ignored row)",
@@ -8138,6 +9052,10 @@
             "name": "list",
             "description": "List the SEO findings of your sites (cross-project)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8203,6 +9121,10 @@
             "name": "pages",
             "description": "List the pages the SEO check has visited, with their state",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8246,6 +9168,12 @@
           {
             "name": "promote",
             "description": "Open a ticket from an SEO finding, evidence included",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8260,6 +9188,12 @@
           {
             "name": "reopen",
             "description": "Reopen an ignored SEO finding: you changed your mind",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8275,6 +9209,10 @@
             "name": "rescan",
             "description": "Check a site now, without waiting for the next scheduled run",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--site",
                 "description": "Site id (from `seo-sites list`)",
@@ -8294,6 +9232,12 @@
           {
             "name": "show",
             "description": "Show a single SEO finding, with the evidence behind it",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8309,11 +9253,16 @@
       },
       {
         "name": "seo-sites",
+        "description": "Sites under SEO check: declare, configure, remove",
         "commands": [
           {
             "name": "create",
             "description": "Declare a site to keep an eye on (one per project and environment)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8387,6 +9336,12 @@
           {
             "name": "delete",
             "description": "Stop watching a site and remove its pages and findings",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8402,6 +9357,10 @@
             "name": "list",
             "description": "List the sites under SEO check",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -8434,6 +9393,12 @@
           {
             "name": "show",
             "description": "Show one site under SEO check: how it is set up, what is open, how the last run went and how fast it is",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8450,6 +9415,10 @@
             "name": "update",
             "description": "Change how a site is checked (project and environment are its identity: they never change)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--url",
                 "description": "Public address the visit starts from",
@@ -8519,6 +9488,10 @@
             "name": "delete",
             "description": "Delete a server and all its metrics (a live agent would re-register it)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -8539,6 +9512,10 @@
             "name": "ignored-containers",
             "description": "Read or set the container names this server does not treat as services",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--clear",
                 "description": "Remove every ignored container name"
@@ -8571,6 +9548,10 @@
             "name": "list",
             "description": "List the monitored servers in your organization (fleet snapshot)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -8606,6 +9587,12 @@
           {
             "name": "pause",
             "description": "Pause a server (no staleness checks or alerts until resumed)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8621,6 +9608,10 @@
             "name": "rename",
             "description": "Rename a monitored server (display name only)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New display name",
@@ -8647,6 +9638,12 @@
           {
             "name": "resume",
             "description": "Resume a paused server (back up at the next agent push)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8662,6 +9659,10 @@
             "name": "revoke",
             "description": "Revoke a server: its agent gets 403 and stops (host stays, reversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the revocation"
@@ -8681,6 +9682,12 @@
           {
             "name": "show",
             "description": "Show a monitored server (latest snapshot)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8694,10 +9701,17 @@
           },
           {
             "name": "tokens",
+            "description": "Fleet enrollment tokens (server agents authenticate with these)",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a fleet enrollment token (the secret is shown only once)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "NAME",
@@ -8713,6 +9727,10 @@
                 "name": "list",
                 "description": "List the fleet enrollment tokens (agents authenticate with these)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -8732,6 +9750,10 @@
                 "name": "revoke",
                 "description": "Revoke a fleet enrollment token (agents using it stop pushing)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the revocation"
@@ -8753,6 +9775,12 @@
           {
             "name": "unrevoke",
             "description": "Restore a revoked server (its agent can push again)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8768,11 +9796,16 @@
       },
       {
         "name": "service-accounts",
+        "description": "Service accounts (AI members, CLI-only) and their secret access",
         "commands": [
           {
             "name": "create",
             "description": "Create a service account (AI member, CLI-only)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "Display name",
@@ -8847,6 +9880,10 @@
             "name": "delete",
             "description": "Delete a service account (revokes its tokens + removes org access; the secrets audit trail is kept)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion"
@@ -8867,6 +9904,10 @@
             "name": "list",
             "description": "List the service accounts (AI members, CLI-only) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -8886,6 +9927,12 @@
           {
             "name": "show",
             "description": "Show a service account: identity, how many tokens are active, and the environments it can read secrets in",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -8900,10 +9947,17 @@
           },
           {
             "name": "tokens",
+            "description": "CLI tokens (cyi_u_) of a service account (the secret is shown only once)",
             "commands": [
               {
                 "name": "create",
                 "description": "Create a CLI token (cyi_u_) for a service account (the secret is shown only once)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ACCOUNT",
@@ -8924,6 +9978,10 @@
                 "name": "list",
                 "description": "List the CLI tokens of a service account — which ones still work and which are revoked. Never the secret.",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -8951,6 +10009,10 @@
                 "name": "revoke",
                 "description": "Revoke a service account CLI token (the agent using it loses access)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the revocation"
@@ -8978,6 +10040,10 @@
             "name": "update",
             "description": "Update a service account's secret access: the environments it may read secrets in (full replace)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--secret-environment",
                 "description": "Environment code the account may read secrets in (repeatable; replaces the whole list)",
@@ -9015,6 +10081,10 @@
             "name": "delete",
             "description": "Delete an organization shared secret from EVERY environment at once (irreversible). There is no per-environment deletion.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the deletion across every environment"
@@ -9034,6 +10104,12 @@
           {
             "name": "list",
             "description": "List the organization shared secret names (one row per variable, every page). Never prints values.",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit shared list",
               "closeyourit shared list --json"
@@ -9043,6 +10119,10 @@
             "name": "set",
             "description": "Set (create or update) an organization shared secret for one environment. Projects delegated on that environment read the new value.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--environment",
                 "aliases": [
@@ -9094,10 +10174,17 @@
       },
       {
         "name": "teams",
+        "description": "Teams: people bundled with roles and a group/project scope",
         "commands": [
           {
             "name": "add-member",
             "description": "Add a person to a team, keeping the existing members",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "TEAM",
@@ -9118,6 +10205,10 @@
             "name": "create",
             "description": "Create a team and (optionally) set its roles, group/project scope and members",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -9184,6 +10275,12 @@
           {
             "name": "delete",
             "description": "Delete a team (its members lose the access this team granted)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "TEAM",
@@ -9199,6 +10296,10 @@
             "name": "list",
             "description": "List the teams (people with scope) in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -9218,6 +10319,12 @@
           {
             "name": "remove-member",
             "description": "Remove a person from a team, keeping the other members",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "TEAM",
@@ -9237,6 +10344,12 @@
           {
             "name": "show",
             "description": "Show a team by id or name (roles, group/project scope, members)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "TEAM",
@@ -9252,6 +10365,10 @@
             "name": "update",
             "description": "Update a team. Each given dimension REPLACES the whole set for that dimension.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--color",
                 "description": "Color label",
@@ -9335,6 +10452,10 @@
             "name": "approve",
             "description": "Approve a ticket review: move it to the first done status",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9365,6 +10486,10 @@
             "name": "ask",
             "description": "Ask a natural-language question about the tickets you can see; the AI answers and cites the tickets it used (may take a few seconds)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--timeout",
                 "description": "Seconds to wait for the answer before giving up",
@@ -9391,6 +10516,10 @@
             "name": "assign",
             "description": "Assign a ticket to an account, or unassign it (--unassign)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9436,6 +10565,10 @@
             "name": "attach",
             "description": "Attach one or more local files to a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9478,6 +10611,10 @@
             "name": "attachment-download",
             "description": "Download a ticket binary to disk: works for ticket attachments AND files attached to its comments",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9534,6 +10671,10 @@
             "name": "attachments",
             "description": "List a ticket's attachments",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9565,6 +10706,10 @@
             "name": "branch",
             "description": "Create a GitHub branch from a ticket (name prefixed with the ticket code)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9596,6 +10741,10 @@
             "name": "clarifications",
             "description": "Show the clarification cycle state of a ticket (rounds, reply, escalation)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9627,6 +10776,10 @@
             "name": "comment",
             "description": "Add a comment to a ticket",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9668,6 +10821,10 @@
             "name": "comment-delete",
             "description": "Delete a comment from a ticket (author, or with tickets.comment.delete_any)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9713,6 +10870,10 @@
             "name": "comments",
             "description": "List all comments of a ticket (oldest first), including attached files — download them with tickets attachment-download",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9744,6 +10905,10 @@
             "name": "create",
             "description": "Create a ticket (status defaults to open, priority to medium; both take a code or a label)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9957,6 +11122,10 @@
             "name": "delete",
             "description": "Delete a ticket (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -9989,11 +11158,16 @@
           },
           {
             "name": "dependencies",
+            "description": "Ticket prerequisites: what has to be finished before a ticket can start",
             "commands": [
               {
                 "name": "add",
                 "description": "Add a prerequisite to a ticket: the blocker has to be finished before this ticket can start",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10030,6 +11204,10 @@
                 "name": "list",
                 "description": "List the prerequisites of a ticket: what has to be finished before this one can start",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10061,6 +11239,10 @@
                 "name": "remove",
                 "description": "Remove a prerequisite from a ticket",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10098,6 +11280,10 @@
             "name": "detach",
             "description": "Remove an attachment from a ticket (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10143,6 +11329,10 @@
             "name": "eligibility",
             "description": "Allow or block a ticket for autonomous agents (requires tickets.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10195,11 +11385,16 @@
           },
           {
             "name": "lease",
+            "description": "Working lease on a ticket: claim, renew, release (one worker at a time)",
             "commands": [
               {
                 "name": "claim",
                 "description": "Claim the working lease on a ticket, so nobody else (person or agent) starts it at the same time",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10251,6 +11446,10 @@
                 "name": "release",
                 "description": "Release your own working lease on a ticket, so someone else can claim it",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10292,6 +11491,10 @@
                 "name": "renew",
                 "description": "Extend your own working lease on a ticket before it expires",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -10345,6 +11548,10 @@
             "name": "links",
             "description": "List the ticket-to-ticket links involving a ticket (duplicate/related)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10376,6 +11583,10 @@
             "name": "list",
             "description": "List tickets for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10426,6 +11637,10 @@
             "name": "milestone",
             "description": "Set or clear a ticket milestone (--clear)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10471,6 +11686,10 @@
             "name": "pr",
             "description": "Open a GitHub pull request from a ticket (head = the ticket branch, title prefixed with the code)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10501,6 +11720,12 @@
           {
             "name": "priorities",
             "description": "List the organization ticket priorities (id, code, label) — the id feeds `tickets create --priority-id`",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit tickets priorities",
               "closeyourit tickets priorities --json"
@@ -10510,6 +11735,10 @@
             "name": "reject",
             "description": "Reject a ticket review: send it back to work with a reason",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10551,6 +11780,10 @@
             "name": "report",
             "description": "Write the work report of a ticket — the long text a comment cannot hold. Each write adds a version, it never overwrites the previous one",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10602,6 +11835,10 @@
             "name": "report-show",
             "description": "Show the current work report of a ticket, or a past version with --version",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10643,6 +11880,10 @@
             "name": "report-versions",
             "description": "List the versions of the work report of a ticket (newest first)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10684,6 +11925,10 @@
             "name": "reviewer",
             "description": "Set the reviewer of a ticket (requires tickets.assign)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10725,6 +11970,10 @@
             "name": "show",
             "description": "Show a single ticket in full: body (description + Given/When/Then/Expected), comments (with their files) and attachments",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10757,6 +12006,10 @@
             "name": "status",
             "description": "Change a ticket status (by code, label or id)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10798,6 +12051,12 @@
           {
             "name": "statuses",
             "description": "List the organization ticket statuses (id, code, label) — the id feeds `tickets create --status-id`",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "examples": [
               "closeyourit tickets statuses",
               "closeyourit tickets statuses --json"
@@ -10807,6 +12066,10 @@
             "name": "unlink",
             "description": "Remove a ticket-to-ticket link (irreversible; requires tickets.edit)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10846,6 +12109,10 @@
             "name": "unreviewer",
             "description": "Remove the reviewer of a ticket (requires tickets.assign)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10876,6 +12143,10 @@
             "name": "unvote",
             "description": "Remove your upvote from a ticket (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10906,6 +12177,10 @@
             "name": "unwatch",
             "description": "Stop watching a ticket (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -10936,6 +12211,10 @@
             "name": "update",
             "description": "Update a ticket, changing only the fields you pass (the others keep their current value; use --clear to empty one, --replace for the raw full replace)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11180,6 +12459,10 @@
             "name": "vote",
             "description": "Upvote a ticket (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11210,6 +12493,10 @@
             "name": "watch",
             "description": "Watch a ticket to receive its notifications (idempotent)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11240,6 +12527,10 @@
             "name": "work-context",
             "description": "Show the work context frozen when an automation host claimed the ticket: the references and procedures actually delivered back then, never the project's current guidance",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11282,6 +12573,12 @@
           {
             "name": "complete",
             "description": "Mark a todo item as done",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "LISTID",
@@ -11302,6 +12599,10 @@
             "name": "create",
             "description": "Create a todo list",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "List name",
@@ -11333,6 +12634,10 @@
             "name": "delete",
             "description": "Delete a todo list (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -11351,11 +12656,16 @@
           },
           {
             "name": "items",
+            "description": "Items of a todo list: add, list, update, delete",
             "commands": [
               {
                 "name": "add",
                 "description": "Add an item to a todo list",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--title",
                     "description": "Item title",
@@ -11404,6 +12714,10 @@
                 "name": "delete",
                 "description": "Delete a todo item (irreversible)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--confirm",
                     "description": "Required: confirm the irreversible deletion"
@@ -11429,6 +12743,10 @@
                 "name": "list",
                 "description": "List the items of one of your todo lists",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--page",
                     "description": "Page number",
@@ -11455,6 +12773,10 @@
                 "name": "update",
                 "description": "Update a todo item (retitle, relink a ticket, or reposition)",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--title",
                     "description": "New title",
@@ -11509,6 +12831,10 @@
             "name": "list",
             "description": "List your own todo lists",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -11529,6 +12855,10 @@
             "name": "reorder",
             "description": "Reorder your todo lists (pass --list once per id, in the desired order)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--list",
                 "description": "List id, in order (repeatable)",
@@ -11549,6 +12879,10 @@
             "name": "share",
             "description": "Set who a todo list is shared with (replaces the set; omit --account to unshare all)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--account",
                 "description": "Recipient account id (repeatable)",
@@ -11576,6 +12910,10 @@
             "name": "shared",
             "description": "List todo lists shared with you (read-only)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -11595,6 +12933,12 @@
           {
             "name": "shared-show",
             "description": "Show a todo list shared with you (read-only)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -11609,6 +12953,12 @@
           {
             "name": "shares",
             "description": "List the members a todo list is shared with (read-only)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "LISTID",
@@ -11623,6 +12973,12 @@
           {
             "name": "show",
             "description": "Show one of your todo lists",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -11637,6 +12993,12 @@
           {
             "name": "uncomplete",
             "description": "Reopen a todo item (mark it not done)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "LISTID",
@@ -11657,6 +13019,10 @@
             "name": "update",
             "description": "Update a todo list (rename or recolor)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "New name",
@@ -11700,6 +13066,10 @@
             "name": "create",
             "description": "Create an ingest token (the secret is shown only once)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11745,6 +13115,10 @@
             "name": "list",
             "description": "List ingest tokens for a project",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11769,6 +13143,10 @@
             "name": "provision",
             "description": "Generate an ingest token and deliver it without revealing the secret",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11877,11 +13255,16 @@
           },
           {
             "name": "provisions",
+            "description": "GitHub provisioning of an ingest token: status and retry (never the secret)",
             "commands": [
               {
                 "name": "retry",
                 "description": "Retry GitHub synchronization without regenerating or revealing the token",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -11909,6 +13292,10 @@
                 "name": "show",
                 "description": "Show secret-free token provision status",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--project",
                     "aliases": [
@@ -11938,6 +13325,10 @@
             "name": "revoke",
             "description": "Revoke an ingest token",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -11968,6 +13359,10 @@
             "name": "rotate",
             "description": "Rotate an ingest token (the new secret is shown only once)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12004,6 +13399,10 @@
             "name": "create",
             "description": "Create an uptime monitor group (org-level container)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "Group name",
@@ -12055,6 +13454,10 @@
             "name": "delete",
             "description": "Delete an uptime monitor group (irreversible)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -12075,6 +13478,10 @@
             "name": "list",
             "description": "List the uptime monitor groups in your organization",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -12094,6 +13501,12 @@
           {
             "name": "publish",
             "description": "Publish the public status page for an uptime group",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12108,6 +13521,12 @@
           {
             "name": "show",
             "description": "Show an uptime monitor group",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12122,6 +13541,12 @@
           {
             "name": "unpublish",
             "description": "Unpublish (retract) the public status page for an uptime group",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12137,6 +13562,10 @@
             "name": "update",
             "description": "Update an uptime monitor group (only the provided fields)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--name",
                 "description": "Group name",
@@ -12193,11 +13622,16 @@
       },
       {
         "name": "usage",
+        "description": "Usage the product reported as actually executed (routes, jobs, custom keys)",
         "commands": [
           {
             "name": "list",
             "description": "List the usage symbols the product reported as actually executed (routes as Controller#action, jobs, custom keys)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12253,6 +13687,10 @@
             "name": "reporters",
             "description": "List the usage reporters: which SDK is sending usage of each kind, and since when",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12296,6 +13734,12 @@
               {
                 "name": "approve",
                 "description": "Approve a pending secret change request: the change it carries is applied to the vault. Whoever asked for it cannot approve it (four-eyes), and a service account never can.",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ID",
@@ -12311,6 +13755,12 @@
               {
                 "name": "list",
                 "description": "List the secret changes waiting for a second approval, across every visible project. Shows the name and the intent, never the proposed value.",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "examples": [
                   "closeyourit vault requests list",
                   "closeyourit vault requests list --json"
@@ -12320,6 +13770,10 @@
                 "name": "reject",
                 "description": "Reject a pending secret change request with a reason. Nothing changes in the vault: the request freezes as rejected and the reason reaches whoever asked.",
                 "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  },
                   {
                     "name": "--reason",
                     "aliases": [
@@ -12353,6 +13807,7 @@
       },
       {
         "name": "vulnerabilities",
+        "description": "Dependency vulnerabilities and runtime support: triage, ignore, promote to ticket",
         "commands": [
           {
             "name": "ignore",
@@ -12361,6 +13816,10 @@
               "vulns:ignore"
             ],
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--note",
                 "description": "Why you are keeping it (shown alongside the ignored row)",
@@ -12391,6 +13850,10 @@
               "vulns:list"
             ],
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12458,6 +13921,12 @@
             "aliases": [
               "vulns:promote"
             ],
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12475,6 +13944,12 @@
             "aliases": [
               "vulns:reopen"
             ],
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12493,6 +13968,10 @@
               "vulns:rescan"
             ],
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12519,6 +13998,10 @@
               "vulns:runtimes"
             ],
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12554,6 +14037,12 @@
             "aliases": [
               "vulns:show"
             ],
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12570,6 +14059,12 @@
       {
         "name": "whoami",
         "description": "Show the authenticated account, organization, token prefix and permissions",
+        "options": [
+          {
+            "name": "--yes",
+            "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+          }
+        ],
         "examples": [
           "closeyourit whoami",
           "closeyourit whoami --json"
@@ -12583,6 +14078,10 @@
             "name": "create",
             "description": "Create a workload action (non-dev activity: fair, meeting, call…) on one of your teams. Add the people with `workload participant add`.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--team",
                 "description": "Team id (UUID) or name — the action belongs to it and cannot be moved later",
@@ -12672,6 +14171,10 @@
             "name": "delete",
             "description": "Delete a workload action (irreversible; a linked ticket survives and only loses the link)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--confirm",
                 "description": "Required: confirm the irreversible deletion"
@@ -12692,6 +14195,10 @@
             "name": "list",
             "description": "List the workload actions of the teams you belong to (newest first)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--page",
                 "description": "Page number",
@@ -12715,6 +14222,12 @@
               {
                 "name": "add",
                 "description": "Add someone to a workload action (they must belong to the team that owns it)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ACTION",
@@ -12734,6 +14247,12 @@
               {
                 "name": "remove",
                 "description": "Remove someone from a workload action (idempotent: removing who is not there succeeds)",
+                "options": [
+                  {
+                    "name": "--yes",
+                    "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+                  }
+                ],
                 "arguments": [
                   {
                     "name": "ACTION",
@@ -12756,6 +14275,10 @@
             "name": "promote",
             "description": "Generate a ticket from a workload action and link it back (the action keeps existing; an already linked action is refused)",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--project",
                 "aliases": [
@@ -12842,6 +14365,12 @@
           {
             "name": "show",
             "description": "Show one workload action (an action of another team answers 404, never 403)",
+            "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              }
+            ],
             "arguments": [
               {
                 "name": "ID",
@@ -12857,6 +14386,10 @@
             "name": "update",
             "description": "Update a workload action (only the passed fields change). The team never changes: moving an action would change who can see it.",
             "options": [
+              {
+                "name": "--yes",
+                "description": "Confirm a dangerous action the server would otherwise refuse (R422-CONFIRM-001)"
+              },
               {
                 "name": "--title",
                 "description": "New title",