insta 0.1.6 → 0.1.8

package/README.md

@@ -231,7 +231,7 @@ build never reaches a production installer.
 | `insta billing` | Current cycle overview; `subscribe <tier>` · `portal` · `usage` |
 | `insta agent` | `setup` (this machine's coding agents) · `manifest` · `policy …` · `approvals …` · `observe …` · `events` |
 | `insta config` | `install-mcp` · `regions` · `autoupdate` |
-| `insta feedback` | Report an InstaCloud-side hurdle (bug / feature-request / friction) to the team — never for the app you are building; on InstaCloud it needs `insta login`, so the team can reply |
+| `insta feedback` | Report an InstaCloud-side hurdle (bug / feature-request / friction) to the team — never for the app you are building; on InstaCloud it needs `insta login`, so the team can reply, and prints the ticket it opened; `status <ticket-id>` — New / In Progress / Resolved / Closed (the replies are in the console) |
 | `insta upgrade` | Update the CLI |
 
 Every command accepts `--api-url <url>` for this invocation only (internal debugging); for `compute exec`, place it before `compute`. `insta --help` documents it.

package/dist/commands/compute.js

@@ -590,9 +590,25 @@ export async function serviceAlwaysOn(type, mode, serviceName, opts) {
     info(`${type} ${res.body.service?.name ?? svc.name}: always-on ${on ? 'ENABLED — machines stay warm (no cold starts; idle RAM bills at actual usage)' : 'disabled — scales to zero when idle'}`);
 }
 export const computeAlwaysOn = (mode, serviceName, opts) => serviceAlwaysOn('compute', mode, serviceName, opts);
+const INSTANCE_ID = /^inst-[a-f0-9]{12}$/;
+// A lone positional is the service even when it is all digits: service names may be.
+export function removeTarget(count, service, opts) {
+    if (!INSTANCE_ID.test(opts.remove))
+        throw new Error(`invalid instance id: ${opts.remove} (expected inst-<12 hex digits>, the \`instance\` field of \`insta compute logs --json\`)`);
+    if (opts.region !== undefined)
+        throw new Error('--region does not apply to --remove');
+    if (service !== undefined) {
+        throw new Error(count !== undefined && count.trim() !== '' && Number.isFinite(Number(count)) ? '--remove lowers the replica count by one; pass no count' : `unexpected argument: ${service} (usage: insta compute scale [service] --remove <instance>)`);
+    }
+    return count;
+}
 // `insta compute scale <count> [service] [--region <r>]` — POST /services/:id/scale. Count is
 // validated locally (1..10); the paid-plan gate is the backend's and its 403 flows verbatim.
 export async function computeScale(count, serviceName, opts) {
+    if (opts.remove !== undefined)
+        return computeRemoveInstance(removeTarget(count, serviceName, { remove: opts.remove, region: opts.region }), opts.remove, opts);
+    if (count === undefined)
+        throw new Error('a replica count is required (or --remove <instance> to drop one named instance)');
     const machineCount = parseCount(count);
     const api = await ApiClient.load();
     const p = await requireProject();
@@ -606,6 +622,20 @@ export async function computeScale(count, serviceName, opts) {
         return printJson(res.body.service);
     info(`scaled compute ${svc.name} to ${machineCount} replica(s)${opts.region ? ` in ${opts.region}` : ''}`);
 }
+// `insta compute scale [service] --remove <instance>` — DELETE /services/:id/instances/:instance.
+async function computeRemoveInstance(serviceName, instance, opts) {
+    const api = await ApiClient.load();
+    const p = await requireProject();
+    const branch = opts.branch ?? p.branch;
+    const { services } = await api.request('GET', `/projects/${p.projectId}/services${q(branch)}`);
+    const svc = resolveSoleService(services, 'compute', serviceName);
+    const res = await api.rawRequest('DELETE', `/projects/${p.projectId}/services/${svc.id}/instances/${instance}`);
+    if (handleApproval(res, opts.json))
+        return;
+    if (opts.json)
+        return printJson(res.body.service);
+    info(`removed ${instance} from compute ${svc.name}; ${res.body.service?.machine_count ?? '?'} replica(s) remain`);
+}
 // ---- limits (the resource ceiling; paid plans) ----
 // Parse a human memory value into MB: "512", "512mb", "1gb", "2g", "1.5gb".
 // Exported for unit tests — this is the only place a user-typed size becomes a number.

package/dist/commands/feedback.js

@@ -13,7 +13,7 @@ import * as clack from '@clack/prompts';
 import { ApiClient, ApiError } from '../api.js';
 import { readGlobal, readProject } from '../config.js';
 import { envForApiUrl } from '../env.js';
-import { info, printJson, refuse, CliCancel } from '../util.js';
+import { info, printJson, refuse, CliCancel, CliExit } from '../util.js';
 import { clean } from '../redact.js';
 import { cliVersion } from '../version.js';
 export const TYPES = ['bug', 'feature-request', 'friction', 'other'];
@@ -186,20 +186,24 @@ export async function submit(payload, fetchImpl, assertion) {
     catch { /* non-JSON body — fall through to status handling */ }
     if (!res.ok)
         return { status: 'error', error: body?.error ?? `HTTP ${res.status}` };
-    return { status: body?.status === 'duplicate' ? 'duplicate' : 'received', id: body?.id ?? null };
+    return { status: body?.status === 'duplicate' ? 'duplicate' : 'received', id: body?.id ?? null, ticket: body?.ticket };
 }
 const SIGNED_OUT = 'not signed in to InstaCloud — run `insta login`, then send this again so the team can reply to you';
 const STAGING = 'not accepted from staging — send InstaCloud feedback from production';
+// Bearer only: agent evidence adds a session round trip the timeout cannot bound, and 401s signing in cannot fix.
+async function userAssertion(api) {
+    return (await api.request('GET', '/me/feedback-assertion', undefined, { evidence: false, signal: AbortSignal.timeout(ASSERTION_TIMEOUT_MS) })).token;
+}
 // Exit 2, not the submit path's 0: the caller can act on this one.
 function refuseFeedback(message, json) {
     if (json)
         printJson({ status: 'refused', submitted: false, error: message });
     refuse([`insta feedback: ${message}`]);
 }
-function inputError(e, json) {
+function inputError(e, json, fields = { submitted: false }) {
     if (!json)
         throw e;
-    printJson({ status: 'error', submitted: false, error: e instanceof Error ? e.message : String(e) });
+    printJson({ status: 'error', ...fields, error: e instanceof Error ? e.message : String(e) });
     process.exitCode = 1;
 }
 export async function feedback(opts, deps = {}) {
@@ -235,8 +239,7 @@ export async function feedback(opts, deps = {}) {
     let assertion;
     if (env === 'prod') {
         try {
-            // Bearer only: agent evidence adds a session round trip the timeout cannot bound, and 401s signing in cannot fix.
-            assertion = (await api.request('GET', '/me/feedback-assertion', undefined, { evidence: false, signal: AbortSignal.timeout(ASSERTION_TIMEOUT_MS) })).token;
+            assertion = await userAssertion(api);
         }
         catch (e) {
             if (e instanceof ApiError && e.status === 401)
@@ -262,13 +265,66 @@ export async function feedback(opts, deps = {}) {
         return;
     }
     if (opts.json)
-        return printJson({ status: result.status, id: result.id });
+        return printJson({ status: result.status, id: result.id, ticket: result.ticket });
     if (result.status === 'duplicate') {
         info(`already reported this week — bumped its count instead (id: ${result.id})`);
     }
     else {
         info(`feedback submitted (id: ${result.id}) — thank you!`);
     }
+    if (result.ticket) {
+        info(`ticket ${result.ticket.id} — the team's replies are in the console: ${result.ticket.url}`);
+        info(`check its status with \`insta feedback status ${result.ticket.id}\``);
+    }
     info('PII (emails, tokens, keys, home paths) was redacted before sending.');
 }
+const STATUS_LABEL = { open: 'New', in_progress: 'In Progress', resolved: 'Resolved', closed: 'Closed' };
+const SIGNED_OUT_STATUS = 'not signed in to InstaCloud — run `insta login` to check your ticket';
+function refuseStatus(message, json) {
+    if (json)
+        printJson({ status: 'refused', error: message });
+    refuse([`insta feedback status: ${message}`]);
+}
+export async function feedbackStatus(id, opts, deps = {}) {
+    try {
+        const api = deps.api ?? await ApiClient.load();
+        const env = envForApiUrl(api.apiUrl);
+        if (env !== 'prod')
+            refuseStatus('ticket status is only available on production InstaCloud', opts.json);
+        if (!api.config.accessToken)
+            refuseStatus(SIGNED_OUT_STATUS, opts.json);
+        let assertion;
+        try {
+            assertion = await userAssertion(api);
+        }
+        catch (e) {
+            if (e instanceof ApiError && e.status === 401)
+                refuseStatus(SIGNED_OUT_STATUS, opts.json);
+            throw e;
+        }
+        // Relative, so an endpoint served under a path prefix keeps it.
+        const res = await (deps.fetchImpl ?? fetch)(new URL(`tickets/${encodeURIComponent(id)}`, FEEDBACK_ENDPOINT), {
+            headers: { Authorization: `Bearer ${FEEDBACK_INGEST_TOKEN}`, 'Insta-User-Assertion': assertion },
+            signal: AbortSignal.timeout(FEEDBACK_TIMEOUT_MS),
+        });
+        if (res.status === 404)
+            throw new Error(`no ticket ${id} of yours — use the ticket id \`insta feedback\` printed`);
+        // The platform vouched for this login a moment ago: a 401 here is the service's, not a signed-out user.
+        if (res.status === 401)
+            throw new Error('the feedback service could not verify who you are — signing in again will not fix it');
+        const body = (await res.json().catch(() => ({})));
+        if (!res.ok || !body.status)
+            throw new Error(`the feedback service answered ${res.status}${body.error ? `: ${body.error}` : ''}`);
+        if (opts.json)
+            return printJson({ id: body.id, status: body.status, url: body.url });
+        info(`ticket ${body.id}: ${STATUS_LABEL[body.status] ?? body.status}`);
+        info(`open it in the console: ${body.url}`);
+    }
+    catch (e) {
+        // A refusal has already printed and set exit 2; handled again it would print twice and exit 1.
+        if (e instanceof CliExit)
+            throw e;
+        return inputError(e, opts.json, {});
+    }
+}
 //# sourceMappingURL=feedback.js.map

package/dist/index.js

@@ -365,8 +365,9 @@ compute.command('restart [service]').description("Restart a compute service by r
     .option('--json').option('--branch <branch>', 'branch (default: current)').action(guard((service, o) => computeCmd.computeRestart(service, o)));
 compute.command('status [service]').description("Show a compute service's desired vs. live state")
     .option('--json').option('--branch <branch>', 'branch (default: current)').action(guard((service, o) => computeCmd.computeStatus(service, o)));
-compute.command('scale <count> [service]').description('Set a compute service same-region replica count, 1 to 10 (paid plans only)')
+compute.command('scale [count] [service]').description('Set a compute service same-region replica count, 1 to 10 (paid plans only). --remove <instance> instead drops that one instance and runs one fewer; instance ids are the `instance` field of `insta compute logs --json`. The last instance cannot be removed')
     .option('--region <region>', 'region to scale in (default: the service region)')
+    .option('--remove <instance>', 'drop this instance (inst-<12 hex>) and run one fewer replica')
     .option('--json').option('--branch <branch>', 'branch (default: current)')
     .action(guard((count, service, o) => computeCmd.computeScale(count, service, o)));
 compute.command('limits [service]').description("Show or set a compute service's resource ceiling (any plan within the free cap; raising above it needs a paid plan). --memory is the dial; cpu derives from it unless --cpu is given. Billing is actual usage — the ceiling caps what the app may burn, it is not a price")
@@ -591,7 +592,7 @@ cfg.command('autoupdate [mode]').description('Show or set auto-update: on | off
 const setupCompat = program.command('setup', { hidden: true }).description('Compatibility alias: `insta setup agent` is `insta agent setup`');
 withSetupAgentOptions(setupCompat.command('agent').description('Alias of `insta agent setup`, kept for the console one-liner'));
 // ---- feedback (agent + human hurdle reports → the InstaCloud team) ----
-program.command('feedback')
+const fb = program.command('feedback')
     .description('Report an InstaCloud-side hurdle (bug / missing feature / friction) to the InstaCloud team — about the insta toolkit itself, NEVER about the app you are building. On InstaCloud it needs `insta login`, so the team can reply; works unlinked.')
     .option('--type <type>', `what kind of hurdle: ${feedbackCmd.TYPES.join(' | ')}`)
     .option('--component <component>', `which part of the toolkit: ${feedbackCmd.COMPONENTS.join(' | ')}`)
@@ -607,6 +608,12 @@ program.command('feedback')
     .option('--severity <severity>', `${feedbackCmd.SEVERITIES.join(' | ')} (default: minor)`)
     .option('--json')
     .action(guard((o) => feedbackCmd.feedback(o)));
+// As with billing: a mistyped subcommand must fail, not open the report wizard.
+fb.allowExcessArguments(false);
+fb.command('status <ticket-id>')
+    .description('Show the status of a ticket `insta feedback` opened: New, In Progress, Resolved or Closed. The replies are read and answered in the console.')
+    .option('--json')
+    .action(guard((id, o) => feedbackCmd.feedbackStatus(id, o)));
 // ---- self-update ----
 program.command('upgrade').description('Update the insta CLI to the latest release (binary or npm install)')
     .action(guard(() => selfUpdate.upgrade(cliVersion())));

package/dist/telemetry.js

@@ -34,7 +34,7 @@ const SAFE_ARGS = {
     'env use': { 0: ENV }, 'project link': { 0: ID },
     'service add': { 0: SERVICE }, 'service remove': { 0: SERVICE }, 'service rename': { 0: SERVICE },
     'storage set-access': { 0: oneOf(['public', 'private']) },
-    'compute scale': { 0: NUMBER },
+    'compute scale': { 0: (v) => /^\d+$/.test(v) },
     'compute always-on': { 0: ON_OFF }, 'postgres always-on': { 0: ON_OFF },
     'redis always-on': { 0: ON_OFF }, 'mysql always-on': { 0: ON_OFF }, 'mongodb always-on': { 0: ON_OFF },
     'template info': { 0: SLUG }, 'billing subscribe': { 0: oneOf(['pro', 'team']) },
@@ -69,8 +69,9 @@ export function redactOptions(opts) {
     }
     return out;
 }
-export function redactArgs(command, args) {
-    const checks = SAFE_ARGS[command] ?? {};
+export function redactArgs(command, args, options = {}) {
+    // with --remove the count's slot holds the service name
+    const checks = command === 'compute scale' && options.remove !== undefined ? {} : SAFE_ARGS[command] ?? {};
     return args.map((a, i) => (a === undefined ? null : typeof a === 'string' && checks[i]?.(a) ? a : REDACTED));
 }
 /** The deployment a `login --env|--api-url` targets. It is persisted only when the login succeeds, so
@@ -125,7 +126,7 @@ export function buildCommandEvent(command, args, options, outcome, ctx) {
         timestamp: new Date().toISOString(),
         properties: {
             command,
-            args: redactArgs(command, args),
+            args: redactArgs(command, args, options),
             options: redactOptions(options),
             success: !cancelled && (outcome.exitCode === 0 || ranChild),
             cancelled,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "insta",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "type": "module",
   "description": "InstaCloud CLI — a thin client of the platform control-plane API.",
   "keywords": [