feedbackbasket-cli 0.12.0 → 3.1.0

package/dist/src/commands/auth.js

@@ -1,29 +1,31 @@
-import { Command } from 'commander';
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-import { AuthManager } from '../auth/manager.js';
-import { browserLogin, isCliTokenFormat, manualLogin } from '../auth/login.js';
-import { saveCredentials } from '../config/credentials.js';
-import { loadConfig, saveConfig } from '../config/config.js';
-import { FeedbackBasketClient } from '../client.js';
-import { errAuth, errUsage } from '../output/errors.js';
-import { brand, divider, logo } from '../output/theme.js';
-import { select, confirm } from '../prompt.js';
+import { Command } from "commander";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { AuthManager } from "../auth/manager.js";
+import { browserLogin, isCliTokenFormat, manualLogin } from "../auth/login.js";
+import { saveCredentials } from "../config/credentials.js";
+import { loadConfig, saveConfig } from "../config/config.js";
+import { FeedbackBasketClient } from "../client.js";
+import { errAuth, errUsage } from "../output/errors.js";
+import { brand, divider, logo } from "../output/theme.js";
+import { select, confirm } from "../prompt.js";
+export function authLoginResult(email, scope, defaultProject) {
+    return { authenticated: true, email, scope, defaultProject };
+}
 export function createAuthCommand(getWriter) {
-    const auth = new Command('auth')
-        .description('Manage authentication');
+    const auth = new Command("auth").description("Manage authentication");
     // --- auth login ---
     auth
-        .command('login')
-        .description('Authenticate with FeedbackBasket')
-        .option('--token <token>', 'Use an API token directly (for CI/headless)')
-        .option('--manual', 'Authenticate without a localhost browser callback')
-        .option('--scope <scope>', 'Access scope: read or full', 'full')
+        .command("login")
+        .description("Authenticate with FeedbackBasket")
+        .option("--token <token>", "Use an API token directly (for CI/headless)")
+        .option("--manual", "Authenticate without a localhost browser callback")
+        .option("--scope <scope>", "Maximum browser access: read or full", "full")
         .action(async (opts) => {
         const writer = getWriter();
         const config = loadConfig();
-        const scope = opts.scope === 'read' ? 'read' : 'full';
+        const scope = resolveAuthScope(opts.scope);
         const isInteractive = !writer.isMachineOutput() && process.stdin.isTTY;
         // ── Step 1: Authentication ──
         if (isInteractive) {
@@ -34,19 +36,22 @@ export function createAuthCommand(getWriter) {
             console.log();
         }
         let token;
+        let selectedScope = scope;
         if (opts.token) {
             token = opts.token;
         }
         else if (opts.manual) {
             const result = await manualLogin(config.baseUrl, scope);
             token = result.token;
+            selectedScope = result.scope;
         }
         else {
             const result = await browserLogin(config.baseUrl, scope);
             token = result.token;
+            selectedScope = result.scope;
         }
         if (!isCliTokenFormat(token)) {
-            throw errUsage('Expected a FeedbackBasket CLI token beginning with fb_cli_', 'MCP API keys begin with fb_key_ and are only for MCP server configuration');
+            throw errUsage("Expected a FeedbackBasket CLI token beginning with fb_cli_", "MCP API keys begin with fb_key_ and are only for MCP server configuration");
         }
         // Verify token + get profile
         const client = new FeedbackBasketClient(token, config.baseUrl);
@@ -63,22 +68,22 @@ export function createAuthCommand(getWriter) {
             if (isInteractive) {
                 const msg = err instanceof Error ? err.message : String(err);
                 console.log(brand.warning(`  Could not verify token: ${msg}`));
-                console.log(brand.muted('  Token saved — run feedbackbasket doctor to diagnose'));
+                console.log(brand.muted("  Token saved — run feedbackbasket doctor to diagnose"));
                 console.log();
             }
         }
         saveCredentials({
             token,
-            scope,
+            scope: selectedScope,
             userId,
             email,
             organizationId,
             createdAt: new Date().toISOString(),
         });
         if (isInteractive) {
-            console.log(`  ${brand.success('✓')} Authentication successful`);
+            console.log(`  ${brand.success("✓")} Authentication successful`);
             if (email)
-                console.log(`    ${brand.muted('Logged in as')} ${brand.bold(email)}`);
+                console.log(`    ${brand.muted("Logged in as")} ${brand.bold(email)}`);
             console.log();
         }
         // ── Step 2: Default Project (interactive only, first login) ──
@@ -91,7 +96,7 @@ export function createAuthCommand(getWriter) {
                 const projectsRes = await client.listProjects();
                 const projects = projectsRes.projects;
                 if (projects.length === 0) {
-                    console.log(brand.muted('  No projects found. Create one from the dashboard.'));
+                    console.log(brand.muted("  No projects found. Create one from the dashboard."));
                     console.log();
                 }
                 else if (projects.length === 1) {
@@ -100,13 +105,13 @@ export function createAuthCommand(getWriter) {
                     config.defaultProject = p.id;
                     saveConfig(config);
                     defaultProjectName = p.name;
-                    console.log(`  ${brand.success('✓')} Default project: ${brand.bold(p.name)}`);
-                    console.log(`    ${brand.muted('Only project in your organization')}`);
+                    console.log(`  ${brand.success("✓")} Default project: ${brand.bold(p.name)}`);
+                    console.log(`    ${brand.muted("Only project in your organization")}`);
                     console.log();
                 }
                 else {
                     console.log(`  You have ${brand.bold(String(projects.length))} projects:\n`);
-                    const choice = await select('Select default project', projects.map(p => {
+                    const choice = await select("Select default project", projects.map((p) => {
                         const count = brand.muted(`(${p.totalFeedback} feedback)`);
                         return `${p.name} ${count}`;
                     }));
@@ -116,12 +121,12 @@ export function createAuthCommand(getWriter) {
                         saveConfig(config);
                         defaultProjectName = p.name;
                         console.log();
-                        console.log(`  ${brand.success('✓')} Default project: ${brand.bold(p.name)}`);
-                        console.log(`    ${brand.muted('Use --project to override per-command')}`);
+                        console.log(`  ${brand.success("✓")} Default project: ${brand.bold(p.name)}`);
+                        console.log(`    ${brand.muted("Use --project to override per-command")}`);
                     }
                     else {
                         console.log();
-                        console.log(`  ${brand.muted('Skipped. Use --project or: feedbackbasket config set defaultProject <id>')}`);
+                        console.log(`  ${brand.muted("Skipped. Use --project or: feedbackbasket config set defaultProject <id>")}`);
                     }
                     console.log();
                 }
@@ -129,55 +134,55 @@ export function createAuthCommand(getWriter) {
             catch (err) {
                 const msg = err instanceof Error ? err.message : String(err);
                 console.log(brand.muted(`  Could not fetch projects: ${msg}`));
-                console.log(brand.muted('  You can set a default later: feedbackbasket config set defaultProject <id>'));
+                console.log(brand.muted("  You can set a default later: feedbackbasket config set defaultProject <id>"));
                 console.log();
             }
         }
         // ── Step 3: Agent Setup (interactive only) ──
         let agentInstalled = false;
         if (isInteractive) {
-            const claudeDir = join(homedir(), '.claude');
-            const skillPath = join(claudeDir, 'skills', 'feedbackbasket', 'SKILL.md');
+            const claudeDir = join(homedir(), ".claude");
+            const skillPath = join(claudeDir, "skills", "feedbackbasket", "SKILL.md");
             const claudeExists = existsSync(claudeDir);
             const skillExists = existsSync(skillPath);
             if (claudeExists && !skillExists) {
                 console.log();
                 console.log(brand.muted(`  Step 3: Agent Setup`));
                 console.log();
-                console.log(`  ${brand.primary('Detected:')} Claude Code`);
+                console.log(`  ${brand.primary("Detected:")} Claude Code`);
                 console.log();
                 console.log(`  This will:`);
                 console.log(`    1. Install FeedbackBasket skill to ~/.claude/skills/`);
                 console.log();
-                const doSetup = await confirm('  Set up for Claude Code?');
+                const doSetup = await confirm("  Set up for Claude Code?");
                 if (doSetup) {
                     try {
-                        const { mkdirSync, copyFileSync } = await import('node:fs');
-                        const { dirname } = await import('node:path');
-                        const { fileURLToPath } = await import('node:url');
+                        const { mkdirSync, copyFileSync } = await import("node:fs");
+                        const { dirname } = await import("node:path");
+                        const { fileURLToPath } = await import("node:url");
                         const thisDir = dirname(fileURLToPath(import.meta.url));
-                        const projectRoot = join(thisDir, '..', '..', '..');
-                        let skillSrc = join(projectRoot, 'skills', 'feedbackbasket', 'SKILL.md');
+                        const projectRoot = join(thisDir, "..", "..", "..");
+                        let skillSrc = join(projectRoot, "skills", "feedbackbasket", "SKILL.md");
                         if (!existsSync(skillSrc)) {
-                            skillSrc = join(thisDir, '..', '..', 'skills', 'feedbackbasket', 'SKILL.md');
+                            skillSrc = join(thisDir, "..", "..", "skills", "feedbackbasket", "SKILL.md");
                         }
                         if (existsSync(skillSrc)) {
-                            const skillDir = join(claudeDir, 'skills', 'feedbackbasket');
+                            const skillDir = join(claudeDir, "skills", "feedbackbasket");
                             mkdirSync(skillDir, { recursive: true });
                             copyFileSync(skillSrc, skillPath);
                             agentInstalled = true;
-                            console.log(`  ${brand.success('✓')} Agent skill installed`);
+                            console.log(`  ${brand.success("✓")} Agent skill installed`);
                         }
                         else {
-                            console.log(`  ${brand.error('✗')} SKILL.md not found in package`);
+                            console.log(`  ${brand.error("✗")} SKILL.md not found in package`);
                         }
                     }
                     catch {
-                        console.log(`  ${brand.error('✗')} Failed to install skill`);
+                        console.log(`  ${brand.error("✗")} Failed to install skill`);
                     }
                 }
                 else {
-                    console.log(brand.muted('  Skipped. Run later: feedbackbasket setup claude'));
+                    console.log(brand.muted("  Skipped. Run later: feedbackbasket setup claude"));
                 }
                 console.log();
             }
@@ -189,78 +194,80 @@ export function createAuthCommand(getWriter) {
         if (isInteractive) {
             console.log();
             console.log(divider(35));
-            console.log(brand.bold('  Setup complete!'));
+            console.log(brand.bold("  Setup complete!"));
             console.log(divider(35));
             console.log();
-            console.log(`  ${brand.success('✓')} Authenticated${email ? ` as ${email}` : ''}`);
+            console.log(`  ${brand.success("✓")} Authenticated${email ? ` as ${email}` : ""}`);
             if (defaultProjectName) {
-                console.log(`  ${brand.success('✓')} Default project: ${defaultProjectName}`);
+                console.log(`  ${brand.success("✓")} Default project: ${defaultProjectName}`);
             }
             else if (config.defaultProject) {
-                console.log(`  ${brand.success('✓')} Default project: ${config.defaultProject}`);
+                console.log(`  ${brand.success("✓")} Default project: ${config.defaultProject}`);
             }
             else {
-                console.log(`  ${brand.muted('-')} No default project`);
+                console.log(`  ${brand.muted("-")} No default project`);
             }
             if (agentInstalled) {
-                console.log(`  ${brand.success('✓')} Claude Code skill`);
+                console.log(`  ${brand.success("✓")} Claude Code skill`);
             }
             console.log();
-            console.log('  Try these commands:');
+            console.log("  Try these commands:");
             console.log();
-            console.log(`    ${brand.command('feedbackbasket projects list')}     List your projects`);
-            console.log(`    ${brand.command('feedbackbasket feedback list')}     View recent feedback`);
-            console.log(`    ${brand.command('feedbackbasket bugs list')}         View bug reports`);
-            console.log(`    ${brand.command('feedbackbasket doctor')}            Run diagnostics`);
+            console.log(`    ${brand.command("feedbackbasket projects list")}     List your projects`);
+            console.log(`    ${brand.command("feedbackbasket feedback list")}     View recent feedback`);
+            console.log(`    ${brand.command("feedbackbasket bugs list")}         View bug reports`);
+            console.log(`    ${brand.command("feedbackbasket doctor")}            Run diagnostics`);
             console.log();
             return; // Skip the JSON output in interactive wizard mode
         }
         // Machine output
-        writer.ok({ authenticated: true, email, scope, defaultProject: config.defaultProject }, {
-            summary: email ? `Logged in as ${email}` : 'Authenticated successfully',
+        writer.ok(authLoginResult(email, selectedScope, config.defaultProject), {
+            summary: email
+                ? `Logged in as ${email}`
+                : "Authenticated successfully",
             breadcrumbs: [
-                { action: 'List projects', cmd: 'feedbackbasket projects list' },
-                { action: 'Check status', cmd: 'feedbackbasket auth status' },
-                { action: 'Run diagnostics', cmd: 'feedbackbasket doctor' },
+                { action: "List projects", cmd: "feedbackbasket projects list" },
+                { action: "Check status", cmd: "feedbackbasket auth status" },
+                { action: "Run diagnostics", cmd: "feedbackbasket doctor" },
             ],
         });
     });
     // --- auth logout ---
     auth
-        .command('logout')
-        .description('Clear stored credentials')
+        .command("logout")
+        .description("Clear stored credentials")
         .action(() => {
         const writer = getWriter();
         const manager = new AuthManager();
         if (!manager.isAuthenticated()) {
-            writer.ok({ authenticated: false }, { summary: 'Already logged out' });
+            writer.ok({ authenticated: false }, { summary: "Already logged out" });
             return;
         }
-        if (manager.getSource() === 'env') {
-            throw errUsage('Credentials are set via FEEDBACKBASKET_TOKEN environment variable', 'Unset the variable: unset FEEDBACKBASKET_TOKEN');
+        if (manager.getSource() === "env") {
+            throw errUsage("Credentials are set via FEEDBACKBASKET_TOKEN environment variable", "Unset the variable: unset FEEDBACKBASKET_TOKEN");
         }
         manager.logout();
         if (!writer.isMachineOutput()) {
-            console.log(`  ${brand.success('✓')} Logged out`);
+            console.log(`  ${brand.success("✓")} Logged out`);
             console.log();
         }
         writer.ok({ authenticated: false }, {
-            summary: 'Logged out',
+            summary: "Logged out",
             breadcrumbs: [
-                { action: 'Log back in', cmd: 'feedbackbasket auth login' },
+                { action: "Log back in", cmd: "feedbackbasket auth login" },
             ],
         });
     });
     // --- auth status ---
     auth
-        .command('status')
-        .description('Show authentication status')
+        .command("status")
+        .description("Show authentication status")
         .action(() => {
         const writer = getWriter();
         const manager = new AuthManager();
         const creds = manager.getCredentials();
         if (!creds) {
-            throw errAuth('Not authenticated');
+            throw errAuth("Not authenticated");
         }
         const config = loadConfig();
         const data = {
@@ -273,52 +280,57 @@ export function createAuthCommand(getWriter) {
             defaultProject: config.defaultProject ?? null,
         };
         writer.ok(data, {
-            summary: `Authenticated${creds.email ? ` as ${creds.email}` : ''}`,
+            summary: `Authenticated${creds.email ? ` as ${creds.email}` : ""}`,
             breadcrumbs: [
-                { action: 'List projects', cmd: 'feedbackbasket projects list' },
-                { action: 'Log out', cmd: 'feedbackbasket auth logout' },
+                { action: "List projects", cmd: "feedbackbasket projects list" },
+                { action: "Log out", cmd: "feedbackbasket auth logout" },
             ],
         });
     });
     // --- auth token ---
     auth
-        .command('token')
-        .description('Print the current access token (for scripting)')
+        .command("token")
+        .description("Print the current access token (for scripting)")
         .action(() => {
         const manager = new AuthManager();
         const token = manager.resolveToken();
         if (!token) {
-            throw errAuth('Not authenticated');
+            throw errAuth("Not authenticated");
         }
         process.stdout.write(token);
     });
     return auth;
 }
+export function resolveAuthScope(value) {
+    if (value === "read" || value === "full")
+        return value;
+    throw errUsage('Scope must be "read" or "full"');
+}
 // Top-level aliases: `feedbackbasket login` and `feedbackbasket logout`
 export function createLoginCommand(getWriter) {
-    return new Command('login')
-        .description('Authenticate with FeedbackBasket (alias for auth login)')
-        .option('--token <token>', 'Use an API token directly (for CI/headless)')
-        .option('--manual', 'Authenticate without a localhost browser callback')
-        .option('--scope <scope>', 'Access scope: read or full', 'full')
+    return new Command("login")
+        .description("Authenticate with FeedbackBasket (alias for auth login)")
+        .option("--token <token>", "Use an API token directly (for CI/headless)")
+        .option("--manual", "Authenticate without a localhost browser callback")
+        .option("--scope <scope>", "Maximum browser access: read or full", "full")
         .action(async (opts) => {
         // Delegate to auth login by re-parsing
         const authCmd = createAuthCommand(getWriter);
-        const args = ['node', 'feedbackbasket', 'login'];
+        const args = ["node", "feedbackbasket", "login"];
         if (opts.token)
-            args.push('--token', opts.token);
+            args.push("--token", opts.token);
         if (opts.manual)
-            args.push('--manual');
+            args.push("--manual");
         if (opts.scope)
-            args.push('--scope', opts.scope);
+            args.push("--scope", opts.scope);
         await authCmd.parseAsync(args);
     });
 }
 export function createLogoutCommand(getWriter) {
-    return new Command('logout')
-        .description('Clear stored credentials (alias for auth logout)')
+    return new Command("logout")
+        .description("Clear stored credentials (alias for auth logout)")
         .action(async () => {
         const authCmd = createAuthCommand(getWriter);
-        await authCmd.parseAsync(['node', 'feedbackbasket', 'logout']);
+        await authCmd.parseAsync(["node", "feedbackbasket", "logout"]);
     });
 }

package/dist/src/commands/feedback-bulk-update.js

@@ -4,11 +4,13 @@ import { AuthManager } from '../auth/manager.js';
 import { loadConfig } from '../config/config.js';
 import { errAuth, errUsage } from '../output/errors.js';
 import { brand } from '../output/theme.js';
+import { requireHighImpactConfirmation } from '../confirmation.js';
 export function createFeedbackBulkUpdateCommand(getWriter) {
     return new Command('bulk-update')
         .description('Update status for multiple feedback items at once')
         .requiredOption('--status <status>', 'New status (OPEN, UNDER_REVIEW, PLANNED, IN_PROGRESS, COMPLETE, CLOSED)')
         .requiredOption('--ids <ids>', 'Comma-separated feedback IDs')
+        .option('--yes', 'Confirm the bulk update')
         .action(async (opts) => {
         const writer = getWriter();
         const client = requireClient();
@@ -16,6 +18,7 @@ export function createFeedbackBulkUpdateCommand(getWriter) {
         if (ids.length === 0) {
             throw errUsage('At least one ID is required', 'Example: --ids id1,id2,id3');
         }
+        await requireHighImpactConfirmation(writer, Boolean(opts.yes), `Update ${ids.length} feedback item${ids.length === 1 ? '' : 's'}?`, '--yes is required for a bulk update in machine mode.');
         const result = await client.bulkUpdateStatus(ids, opts.status);
         if (!writer.isMachineOutput()) {
             console.log(`  ${brand.success('✓')} Updated ${result.updated} feedback items to ${brand.bold(result.status)}`);

package/dist/src/commands/feedback-delete.js

@@ -4,7 +4,7 @@ import { AuthManager } from '../auth/manager.js';
 import { loadConfig } from '../config/config.js';
 import { errAuth } from '../output/errors.js';
 import { brand } from '../output/theme.js';
-import { confirm } from '../prompt.js';
+import { requireHighImpactConfirmation } from '../confirmation.js';
 export function createFeedbackDeleteCommand(getWriter) {
     return new Command('delete')
         .argument('<id>', 'Feedback ID to delete')
@@ -16,12 +16,8 @@ export function createFeedbackDeleteCommand(getWriter) {
         if (!opts.yes && !writer.isMachineOutput() && process.stdin.isTTY) {
             console.log(`  ${brand.warning('Warning:')} This will permanently delete feedback ${brand.bold(id)}`);
             console.log();
-            const confirmed = await confirm('  Delete this feedback?', false);
-            if (!confirmed) {
-                console.log(brand.muted('  Cancelled.'));
-                return;
-            }
         }
+        await requireHighImpactConfirmation(writer, Boolean(opts.yes), 'Delete this feedback?', '--yes is required to delete feedback in machine mode.');
         const result = await client.deleteFeedback(id);
         if (!writer.isMachineOutput()) {
             console.log(`  ${brand.success('✓')} Deleted feedback ${id}`);

package/dist/src/commands/feedback-note.js

@@ -4,15 +4,19 @@ import { AuthManager } from '../auth/manager.js';
 import { loadConfig } from '../config/config.js';
 import { errAuth, errUsage } from '../output/errors.js';
 import { brand } from '../output/theme.js';
+import { requireHighImpactConfirmation } from '../confirmation.js';
 export function createFeedbackNoteCommand(getWriter) {
-    return new Command('note')
-        .argument('<id>', 'Feedback ID to add a note to')
+    const note = new Command('note')
+        .argument('[id]', 'Feedback ID to add a note to')
         .argument('[content]', 'Note content (or use --content)')
         .description('Add an internal note to a feedback item')
         .option('--content <text>', 'Note content (alternative to positional argument)')
         .action(async (id, contentArg, opts) => {
         const writer = getWriter();
         const content = contentArg ?? opts.content;
+        if (!id) {
+            throw errUsage('Feedback ID is required', 'Example: feedbackbasket feedback note <id> "Your note here"');
+        }
         if (!content) {
             throw errUsage('Note content is required', 'Example: feedbackbasket feedback note <id> "Your note here"');
         }
@@ -30,6 +34,34 @@ export function createFeedbackNoteCommand(getWriter) {
             ],
         });
     });
+    note
+        .command('update <feedbackId> <noteId>')
+        .description('Update an internal feedback note')
+        .requiredOption('--content <text>', 'New note content')
+        .action(async (feedbackId, noteId, opts) => {
+        const writer = getWriter();
+        const client = requireClient();
+        const result = await client.updateNote(feedbackId, noteId, opts.content);
+        writer.ok(result, {
+            summary: `Updated note ${noteId}`,
+            breadcrumbs: [{ action: 'View feedback', cmd: `feedbackbasket feedback show ${feedbackId}` }],
+        });
+    });
+    note
+        .command('delete <feedbackId> <noteId>')
+        .description('Delete an internal feedback note')
+        .option('--yes', 'Confirm note deletion')
+        .action(async (feedbackId, noteId, opts) => {
+        const writer = getWriter();
+        const client = requireClient();
+        await requireHighImpactConfirmation(writer, Boolean(opts.yes), `Delete note ${noteId}?`, '--yes is required to delete a note in machine mode.');
+        const result = await client.deleteNote(feedbackId, noteId);
+        writer.ok(result, {
+            summary: `Deleted note ${noteId}`,
+            breadcrumbs: [{ action: 'View feedback', cmd: `feedbackbasket feedback show ${feedbackId}` }],
+        });
+    });
+    return note;
 }
 function requireClient() {
     const manager = new AuthManager();

package/dist/src/commands/feedback-reply.js

@@ -5,6 +5,7 @@ import { loadConfig } from '../config/config.js';
 import { errAuth, errUsage } from '../output/errors.js';
 import { brand } from '../output/theme.js';
 import { ask } from '../prompt.js';
+import { requireHighImpactConfirmation } from '../confirmation.js';
 const deliveryOptions = new Set(['email', 'widget', 'in-app', 'both']);
 export function createFeedbackReplyCommand(getWriter) {
     return new Command('reply')
@@ -14,6 +15,7 @@ export function createFeedbackReplyCommand(getWriter) {
         .option('--content <text>', 'Reply content (alternative to positional argument)')
         .option('--delivery <delivery>', 'Reply delivery (email, widget, in-app, both)', 'email')
         .option('--reply-to <email>', 'Reply-to email for email delivery')
+        .option('--yes', 'Confirm that the reply can be sent')
         .action(async (id, contentArg, opts) => {
         const writer = getWriter();
         const content = contentArg ?? opts.content;
@@ -61,6 +63,7 @@ export function createFeedbackReplyCommand(getWriter) {
         if (sendsWidget && !feedback.hasWidgetAccess) {
             throw errUsage('This feedback has no in-app or widget reply thread.', 'Use --delivery email for feedback with an email address, or ask the human how they want to respond.');
         }
+        await requireHighImpactConfirmation(writer, Boolean(opts.yes), `Send this reply by ${delivery}?`, '--yes is required to send a reply in machine mode.');
         const result = await client.sendReply(id, content, {
             replyToEmail: replyTo,
             destinations,

package/dist/src/commands/mobile.js

@@ -67,6 +67,7 @@ export function createMobileCommand(getWriter) {
     });
     mobile
         .command('bundle-ids [project]')
+        .alias('bundle')
         .description('Add or remove allowed iOS bundle IDs')
         .option('--add <bundle-id>', 'Bundle ID to add (repeatable)', collect, [])
         .option('--remove <bundle-id>', 'Bundle ID to remove (repeatable)', collect, [])

package/dist/src/commands/projects.js

@@ -5,6 +5,7 @@ import { loadConfig } from '../config/config.js';
 import { errAuth, errUsage } from '../output/errors.js';
 import { brand, divider } from '../output/theme.js';
 import { confirm } from '../prompt.js';
+import { requireHighImpactConfirmation } from '../confirmation.js';
 import { resolveProject } from '../resolve.js';
 export function createProjectsCommand(getWriter) {
     const projects = new Command('projects')
@@ -139,17 +140,12 @@ export function createProjectsCommand(getWriter) {
         const resolved = await resolveProject(client, idOrName);
         const id = resolved.id;
         const projectName = resolved.name;
-        // Confirmation (skip in agent mode or --yes)
         if (!opts.yes && !writer.isMachineOutput() && process.stdin.isTTY) {
             console.log(`  ${brand.warning('Warning:')} This will permanently delete project "${brand.bold(projectName)}"`);
             console.log(`  ${brand.muted('All feedback, notes, and settings will be lost.')}`);
             console.log();
-            const confirmed = await confirm(`  Delete "${projectName}"?`, false);
-            if (!confirmed) {
-                console.log(brand.muted('  Cancelled.'));
-                return;
-            }
         }
+        await requireHighImpactConfirmation(writer, Boolean(opts.yes), `Delete "${projectName}"?`, '--yes is required to delete a project in machine mode.');
         const result = await client.deleteProject(id);
         if (!writer.isMachineOutput()) {
             console.log(`  ${brand.success('✓')} Deleted project "${brand.bold(result.name)}"`);

package/dist/src/commands/team.js

@@ -4,7 +4,7 @@ import { AuthManager } from '../auth/manager.js';
 import { loadConfig } from '../config/config.js';
 import { errAuth, errUsage } from '../output/errors.js';
 import { brand, divider } from '../output/theme.js';
-import { confirm } from '../prompt.js';
+import { requireHighImpactConfirmation } from '../confirmation.js';
 export function createTeamCommand(getWriter) {
     const team = new Command('team')
         .description('Manage organization members');
@@ -31,12 +31,14 @@ export function createTeamCommand(getWriter) {
         .command('role <memberId>')
         .description('Update a member\'s role')
         .requiredOption('--role <role>', 'New role: admin or member')
+        .option('--yes', 'Confirm the role change')
         .action(async (memberId, opts) => {
         const writer = getWriter();
         const client = requireClient();
         if (!['admin', 'member'].includes(opts.role)) {
             throw errUsage('Role must be "admin" or "member"');
         }
+        await requireHighImpactConfirmation(writer, Boolean(opts.yes), `Change member ${memberId} to ${opts.role}?`, '--yes is required to change a team role in machine mode.');
         const result = await client.updateMemberRole(memberId, opts.role);
         if (!writer.isMachineOutput()) {
             console.log(`  ${brand.success('✓')} Updated ${brand.bold(result.name)} to ${brand.bold(result.role)}`);
@@ -57,13 +59,7 @@ export function createTeamCommand(getWriter) {
         .action(async (memberId, opts) => {
         const writer = getWriter();
         const client = requireClient();
-        if (!opts.yes && !writer.isMachineOutput() && process.stdin.isTTY) {
-            const confirmed = await confirm(`  Remove member ${memberId}?`, false);
-            if (!confirmed) {
-                console.log(brand.muted('  Cancelled.'));
-                return;
-            }
-        }
+        await requireHighImpactConfirmation(writer, Boolean(opts.yes), `Remove member ${memberId}?`, '--yes is required to remove a team member in machine mode.');
         const result = await client.removeMember(memberId);
         if (!writer.isMachineOutput()) {
             console.log(`  ${brand.success('✓')} Removed ${brand.bold(result.name)} (${result.email})`);

package/dist/src/commands/widget.js

@@ -50,6 +50,7 @@ export function createWidgetCommand(getWriter) {
     // --- widget settings ---
     widget
         .command('settings [project]')
+        .alias('update')
         .description('View or update widget settings')
         .option('--capture-mode <mode>', 'Capture mode (feedback, waitlist)')
         .option('--color <hex>', 'Button color (e.g. #22c55e)')

package/dist/src/confirmation.d.ts

@@ -0,0 +1,2 @@
+import type { OutputWriter } from './output/writer.js';
+export declare function requireHighImpactConfirmation(writer: OutputWriter, confirmedByFlag: boolean, question: string, hint: string): Promise<void>;

package/dist/src/confirmation.js

@@ -0,0 +1,11 @@
+import { errUsage } from './output/errors.js';
+import { confirm } from './prompt.js';
+export async function requireHighImpactConfirmation(writer, confirmedByFlag, question, hint) {
+    if (confirmedByFlag)
+        return;
+    if (writer.isMachineOutput() || !process.stdin.isTTY) {
+        throw errUsage(hint, `${hint} Re-run the command with --yes.`);
+    }
+    if (!(await confirm(`  ${question}`, false)))
+        throw errUsage('Action cancelled');
+}