@voltade/volty 0.1.31 → 0.1.33

package/dist/volty.js

@@ -300,6 +300,9 @@ async function logout(config, env) {
 // src/dispatch.ts
 import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
 
+// ../shared/ops/dry-run.ts
+var DRY_RUN_HEADER = "x-volty-dry-run";
+
 // ../shared/ops/flag-parse.ts
 function acceptsNull(prop) {
   if (prop.type === "null")
@@ -434,6 +437,21 @@ function resolveOp(catalog, argv) {
   }
   return null;
 }
+function takeBool(argv, name) {
+  const rest = argv.filter((t) => t !== name);
+  return { present: rest.length !== argv.length, rest };
+}
+function takeConfirm(op, argv) {
+  if (op.annotations.destructiveHint !== true)
+    return { rest: argv, dryRun: false };
+  const confirm = takeBool(argv, "--confirm");
+  if (confirm.present)
+    return { rest: confirm.rest, dryRun: false };
+  if (op.dryRun !== true) {
+    throw new CliUsageError(`\`${op.name}\` is destructive: run it again with --confirm to do it`);
+  }
+  return { rest: confirm.rest, dryRun: true };
+}
 function parseFlags(op, rest) {
   const props = op.input.properties ?? {};
   const parsed = parseFlagTokens(props, rest, CliUsageError);
@@ -472,8 +490,9 @@ function readBase64File(flag, path) {
     throw new CliUsageError(`--${flag}: cannot read ${path} (${err.code ?? "error"})`);
   }
 }
-async function runOp(ctx, op, input) {
-  const res = await apiFetch(ctx, pathForOp(op.name), { method: "POST", body: input });
+async function runOp(ctx, op, input, dryRun = false) {
+  const headers = dryRun ? { [DRY_RUN_HEADER]: "1" } : undefined;
+  const res = await apiFetch(ctx, pathForOp(op.name), { method: "POST", body: input, headers });
   return { status: res.status, ok: res.ok, body: res.body };
 }
 function saveOutFile(body, path) {
@@ -1177,10 +1196,6 @@ function takeValue(argv, name) {
   }
   return { value, rest };
 }
-function takeBool(argv, name) {
-  const rest = argv.filter((t) => t !== name);
-  return { present: rest.length !== argv.length, rest };
-}
 async function handleAuth(rest, config, env, orgOverride) {
   const sub = rest[0];
   if (sub === "login") {
@@ -1593,18 +1608,24 @@ async function main() {
   if (out.rest.length !== resolved.rest.length && !out.value)
     fail("--out needs a path, as in --out=./logo.png");
   let parsed;
+  let dryRun = false;
   try {
-    parsed = parseFlags(resolved.op, out.rest);
+    const confirm = takeConfirm(resolved.op, out.rest);
+    dryRun = confirm.dryRun;
+    parsed = parseFlags(resolved.op, confirm.rest);
   } catch (err) {
     if (err instanceof CliUsageError)
       fail(err.message);
     throw err;
   }
-  const result = await runOp(ctx, resolved.op, parsed.input);
+  const result = await runOp(ctx, resolved.op, parsed.input, dryRun);
   if (!result.ok)
     failResult(resolved.op.name, result.body, result.status, parsed.json);
   if (out.value === undefined) {
     process.stdout.write(`${renderResult(result.body, parsed.json)}
+`);
+    if (dryRun && !parsed.json)
+      process.stdout.write(`Dry run: run it again with --confirm to do it.
 `);
     return;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltade/volty",
-  "version": "0.1.31",
+  "version": "0.1.33",
   "description": "Remote CLI for the Volty platform — run operations, trigger real agent wakes, and inspect LLM I/O over an API key.",
   "license": "UNLICENSED",
   "type": "module",

package/skill/volty-cli-ops/SKILL.md

@@ -26,6 +26,7 @@ Use the lane the behaviour was reported on. On the contact lane Volty declines t
 ## On prod
 
 - A key reaches one org and calls operations only; `--org` gets each org you belong to its own key the first time. A call a key cannot make is refused with a sentence naming why; report that sentence instead of working around it. `volty keys create <name>` mints a narrower named key for a script (`volty docs` has the flags).
+- An op that deletes for good runs only with `--confirm`. Run it without first: the CLI prints the dry run the server answers and changes nothing. Show that plan to the user and add `--confirm` only once they agree. Sending a broadcast is never done by key; the refusal names the Broadcasts page, so pass it on.
 - Name the org on every command (`--env prod --org <id>`, or `VOLTY_ENV` and `VOLTY_ORG` in the process), and read the stderr line the CLI prints before each command to check it names the org you meant. Act only in the org the user named.
 - Test through the Sandbox, where a reply to the synthetic contact is recorded as sent and never leaves. A real conversation is never a test target.
 - Run `volty debug sandbox-cleanup --all --env prod --org <id>` when you finish.