insta 0.1.6 → 0.1.7

package/README.md

@@ -231,7 +231,7 @@ build never reaches a production installer.
 | `insta billing` | Current cycle overview; `subscribe <tier>` · `portal` · `usage` |
 | `insta agent` | `setup` (this machine's coding agents) · `manifest` · `policy …` · `approvals …` · `observe …` · `events` |
 | `insta config` | `install-mcp` · `regions` · `autoupdate` |
-| `insta feedback` | Report an InstaCloud-side hurdle (bug / feature-request / friction) to the team — never for the app you are building; on InstaCloud it needs `insta login`, so the team can reply |
+| `insta feedback` | Report an InstaCloud-side hurdle (bug / feature-request / friction) to the team — never for the app you are building; on InstaCloud it needs `insta login`, so the team can reply, and prints the ticket it opened; `status <ticket-id>` — New / In Progress / Resolved / Closed (the replies are in the console) |
 | `insta upgrade` | Update the CLI |
 
 Every command accepts `--api-url <url>` for this invocation only (internal debugging); for `compute exec`, place it before `compute`. `insta --help` documents it.

package/dist/commands/feedback.js

@@ -13,7 +13,7 @@ import * as clack from '@clack/prompts';
 import { ApiClient, ApiError } from '../api.js';
 import { readGlobal, readProject } from '../config.js';
 import { envForApiUrl } from '../env.js';
-import { info, printJson, refuse, CliCancel } from '../util.js';
+import { info, printJson, refuse, CliCancel, CliExit } from '../util.js';
 import { clean } from '../redact.js';
 import { cliVersion } from '../version.js';
 export const TYPES = ['bug', 'feature-request', 'friction', 'other'];
@@ -186,20 +186,24 @@ export async function submit(payload, fetchImpl, assertion) {
     catch { /* non-JSON body — fall through to status handling */ }
     if (!res.ok)
         return { status: 'error', error: body?.error ?? `HTTP ${res.status}` };
-    return { status: body?.status === 'duplicate' ? 'duplicate' : 'received', id: body?.id ?? null };
+    return { status: body?.status === 'duplicate' ? 'duplicate' : 'received', id: body?.id ?? null, ticket: body?.ticket };
 }
 const SIGNED_OUT = 'not signed in to InstaCloud — run `insta login`, then send this again so the team can reply to you';
 const STAGING = 'not accepted from staging — send InstaCloud feedback from production';
+// Bearer only: agent evidence adds a session round trip the timeout cannot bound, and 401s signing in cannot fix.
+async function userAssertion(api) {
+    return (await api.request('GET', '/me/feedback-assertion', undefined, { evidence: false, signal: AbortSignal.timeout(ASSERTION_TIMEOUT_MS) })).token;
+}
 // Exit 2, not the submit path's 0: the caller can act on this one.
 function refuseFeedback(message, json) {
     if (json)
         printJson({ status: 'refused', submitted: false, error: message });
     refuse([`insta feedback: ${message}`]);
 }
-function inputError(e, json) {
+function inputError(e, json, fields = { submitted: false }) {
     if (!json)
         throw e;
-    printJson({ status: 'error', submitted: false, error: e instanceof Error ? e.message : String(e) });
+    printJson({ status: 'error', ...fields, error: e instanceof Error ? e.message : String(e) });
     process.exitCode = 1;
 }
 export async function feedback(opts, deps = {}) {
@@ -235,8 +239,7 @@ export async function feedback(opts, deps = {}) {
     let assertion;
     if (env === 'prod') {
         try {
-            // Bearer only: agent evidence adds a session round trip the timeout cannot bound, and 401s signing in cannot fix.
-            assertion = (await api.request('GET', '/me/feedback-assertion', undefined, { evidence: false, signal: AbortSignal.timeout(ASSERTION_TIMEOUT_MS) })).token;
+            assertion = await userAssertion(api);
         }
         catch (e) {
             if (e instanceof ApiError && e.status === 401)
@@ -262,13 +265,66 @@ export async function feedback(opts, deps = {}) {
         return;
     }
     if (opts.json)
-        return printJson({ status: result.status, id: result.id });
+        return printJson({ status: result.status, id: result.id, ticket: result.ticket });
     if (result.status === 'duplicate') {
         info(`already reported this week — bumped its count instead (id: ${result.id})`);
     }
     else {
         info(`feedback submitted (id: ${result.id}) — thank you!`);
     }
+    if (result.ticket) {
+        info(`ticket ${result.ticket.id} — the team's replies are in the console: ${result.ticket.url}`);
+        info(`check its status with \`insta feedback status ${result.ticket.id}\``);
+    }
     info('PII (emails, tokens, keys, home paths) was redacted before sending.');
 }
+const STATUS_LABEL = { open: 'New', in_progress: 'In Progress', resolved: 'Resolved', closed: 'Closed' };
+const SIGNED_OUT_STATUS = 'not signed in to InstaCloud — run `insta login` to check your ticket';
+function refuseStatus(message, json) {
+    if (json)
+        printJson({ status: 'refused', error: message });
+    refuse([`insta feedback status: ${message}`]);
+}
+export async function feedbackStatus(id, opts, deps = {}) {
+    try {
+        const api = deps.api ?? await ApiClient.load();
+        const env = envForApiUrl(api.apiUrl);
+        if (env !== 'prod')
+            refuseStatus('ticket status is only available on production InstaCloud', opts.json);
+        if (!api.config.accessToken)
+            refuseStatus(SIGNED_OUT_STATUS, opts.json);
+        let assertion;
+        try {
+            assertion = await userAssertion(api);
+        }
+        catch (e) {
+            if (e instanceof ApiError && e.status === 401)
+                refuseStatus(SIGNED_OUT_STATUS, opts.json);
+            throw e;
+        }
+        // Relative, so an endpoint served under a path prefix keeps it.
+        const res = await (deps.fetchImpl ?? fetch)(new URL(`tickets/${encodeURIComponent(id)}`, FEEDBACK_ENDPOINT), {
+            headers: { Authorization: `Bearer ${FEEDBACK_INGEST_TOKEN}`, 'Insta-User-Assertion': assertion },
+            signal: AbortSignal.timeout(FEEDBACK_TIMEOUT_MS),
+        });
+        if (res.status === 404)
+            throw new Error(`no ticket ${id} of yours — use the ticket id \`insta feedback\` printed`);
+        // The platform vouched for this login a moment ago: a 401 here is the service's, not a signed-out user.
+        if (res.status === 401)
+            throw new Error('the feedback service could not verify who you are — signing in again will not fix it');
+        const body = (await res.json().catch(() => ({})));
+        if (!res.ok || !body.status)
+            throw new Error(`the feedback service answered ${res.status}${body.error ? `: ${body.error}` : ''}`);
+        if (opts.json)
+            return printJson({ id: body.id, status: body.status, url: body.url });
+        info(`ticket ${body.id}: ${STATUS_LABEL[body.status] ?? body.status}`);
+        info(`open it in the console: ${body.url}`);
+    }
+    catch (e) {
+        // A refusal has already printed and set exit 2; handled again it would print twice and exit 1.
+        if (e instanceof CliExit)
+            throw e;
+        return inputError(e, opts.json, {});
+    }
+}
 //# sourceMappingURL=feedback.js.map

package/dist/index.js

@@ -591,7 +591,7 @@ cfg.command('autoupdate [mode]').description('Show or set auto-update: on | off
 const setupCompat = program.command('setup', { hidden: true }).description('Compatibility alias: `insta setup agent` is `insta agent setup`');
 withSetupAgentOptions(setupCompat.command('agent').description('Alias of `insta agent setup`, kept for the console one-liner'));
 // ---- feedback (agent + human hurdle reports → the InstaCloud team) ----
-program.command('feedback')
+const fb = program.command('feedback')
     .description('Report an InstaCloud-side hurdle (bug / missing feature / friction) to the InstaCloud team — about the insta toolkit itself, NEVER about the app you are building. On InstaCloud it needs `insta login`, so the team can reply; works unlinked.')
     .option('--type <type>', `what kind of hurdle: ${feedbackCmd.TYPES.join(' | ')}`)
     .option('--component <component>', `which part of the toolkit: ${feedbackCmd.COMPONENTS.join(' | ')}`)
@@ -607,6 +607,12 @@ program.command('feedback')
     .option('--severity <severity>', `${feedbackCmd.SEVERITIES.join(' | ')} (default: minor)`)
     .option('--json')
     .action(guard((o) => feedbackCmd.feedback(o)));
+// As with billing: a mistyped subcommand must fail, not open the report wizard.
+fb.allowExcessArguments(false);
+fb.command('status <ticket-id>')
+    .description('Show the status of a ticket `insta feedback` opened: New, In Progress, Resolved or Closed. The replies are read and answered in the console.')
+    .option('--json')
+    .action(guard((id, o) => feedbackCmd.feedbackStatus(id, o)));
 // ---- self-update ----
 program.command('upgrade').description('Update the insta CLI to the latest release (binary or npm install)')
     .action(guard(() => selfUpdate.upgrade(cliVersion())));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "insta",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "type": "module",
   "description": "InstaCloud CLI — a thin client of the platform control-plane API.",
   "keywords": [