diff --git a/packages/commands/src/commands/managed-agent/session-delete.ts b/packages/commands/src/commands/managed-agent/session-delete.ts index 9cbd2ee..fc56363 100644 --- a/packages/commands/src/commands/managed-agent/session-delete.ts +++ b/packages/commands/src/commands/managed-agent/session-delete.ts @@ -30,9 +30,16 @@ const SESSION_DELETE_FLAGS = { export default defineCommand({ description: { "en-US": "Delete a session", "zh-CN": "删除 Session" }, auth: "apiKey", + risk: { + level: "high", + message: { + "en-US": "This deletes the specified remote managed Agent Session.", + "zh-CN": "该操作会删除指定的远端托管 Agent Session。", + }, + }, usageArgs: "--session-id [--provider ] [--file ]", flags: SESSION_DELETE_FLAGS, - exampleArgs: ["--session-id sess_abc123"], + exampleArgs: ["--session-id sess_abc123 --yes"], notes: CREDENTIALS_NOTE, async run(ctx) { const { settings, flags } = ctx; diff --git a/packages/commands/src/commands/managed-agent/state-rm.ts b/packages/commands/src/commands/managed-agent/state-rm.ts index 8d6242d..2257799 100644 --- a/packages/commands/src/commands/managed-agent/state-rm.ts +++ b/packages/commands/src/commands/managed-agent/state-rm.ts @@ -37,9 +37,17 @@ export default defineCommand({ "zh-CN": "从 State 中移除资源，但不销毁远端资源", }, auth: "none", + risk: { + level: "high", + message: { + "en-US": + "This removes the resource from local state without deleting it remotely, so this project will no longer track it.", + "zh-CN": "该操作会从本地 State 中移除资源但不会删除远端资源，此项目将不再跟踪该资源。", + }, + }, usageArgs: "--address [--file ]", flags: STATE_RM_FLAGS, - exampleArgs: ["--address bailian.agent.assistant"], + exampleArgs: ["--address bailian.agent.assistant --yes"], notes: OFFLINE_NOTE, async run(ctx) { const { settings, flags } = ctx; diff --git a/packages/commands/tests/e2e/managed-agent.e2e.test.ts b/packages/commands/tests/e2e/managed-agent.e2e.test.ts index e17aec0..0268f5c 100644 --- a/packages/commands/tests/e2e/managed-agent.e2e.test.ts +++ b/packages/commands/tests/e2e/managed-agent.e2e.test.ts @@ -149,6 +149,38 @@ describe("e2e: managed-agent", () => { }); }); + test.each([ + ["state rm", ["state", "rm"]], + ["session delete", ["session", "delete"]], + ])("managed-agent %s --help 展示 runtime 注入的 --yes", async (_commandName, commandPath) => { + const { stderr, exitCode } = await runCommandE2e(MANAGED_AGENT_ROUTES, [ + "managed-agent", + ...commandPath, + "--help", + ]); + expect(exitCode, stderr).toBe(0); + expect(stderr).toMatch(/--yes/i); + }); + + test.each([ + ["state rm", ["state", "rm", "--address", "bailian.agent.assistant"]], + [ + "session delete", + ["session", "delete", "--session-id", "sess_e2e", "--api-key", "e2e-dummy-key"], + ], + ])("managed-agent %s 无 --yes 返回确认请求 (7)", async (_commandName, commandArgs) => { + const { stderr, exitCode } = await runCommandE2e(MANAGED_AGENT_ROUTES, [ + "managed-agent", + ...commandArgs, + "--output", + "json", + ]); + expect(exitCode).toBe(7); + expect(JSON.parse(stderr)).toMatchObject({ + error: { code: 7, type: "requires_confirmation" }, + }); + }); + test("managed-agent session delete 缺少 --session-id 时退出为用法错误 (2)", async () => { const { stderr, exitCode } = await runCommandE2e(MANAGED_AGENT_ROUTES, [ "managed-agent", diff --git a/skills/bailian-managed-agent/SKILL.md b/skills/bailian-managed-agent/SKILL.md index a9a963f..50a7f74 100644 --- a/skills/bailian-managed-agent/SKILL.md +++ b/skills/bailian-managed-agent/SKILL.md @@ -26,7 +26,7 @@ description: >- 2. Ask the user to confirm the exact action and scope shown in the plan. 3. Only then run `apply` / `destroy` with `--yes`; a changed plan requires confirmation again. -`session delete` and future `risk: high` commands follow the shared protocol. +`state rm`, `session delete`, and future `risk: high` commands follow the shared protocol. ## IaC lifecycle diff --git a/skills/bailian-managed-agent/reference/managed-agent.md b/skills/bailian-managed-agent/reference/managed-agent.md index 5e96846..b017e0a 100644 --- a/skills/bailian-managed-agent/reference/managed-agent.md +++ b/skills/bailian-managed-agent/reference/managed-agent.md @@ -237,6 +237,10 @@ bl managed-agent session create --agent assistant --title 'debug run' | **Description** | Delete a session | | **Authentication** | API Key | | **Usage** | `bl managed-agent session delete --session-id [--provider ] [--file ]` | +| **Risk** | `high` | +| **Risk message** | This deletes the specified remote managed Agent Session. | + +> **Agent safety:** Never add `--yes` automatically. On `type="requires_confirmation"`, stop and ask for explicit user confirmation of the same action and scope. #### Flags @@ -245,6 +249,7 @@ bl managed-agent session create --agent assistant --title 'debug run' | `--session-id ` | string | yes | Session ID (required) | | `--file ` | string | no | Config file path (default: agents.yaml) | | `--provider ` | string | no | Target provider | +| `--yes` | switch | no | Confirm this high-risk operation | | `--api-key ` | string | no | API key | | `--base-url ` | string | no | API base URL | @@ -257,7 +262,8 @@ bl managed-agent session create --agent assistant --title 'debug run' #### Examples ```bash -bl managed-agent session delete --session-id sess_abc123 +# Only after explicit user confirmation: +bl managed-agent session delete --session-id sess_abc123 --yes ``` ### `bl managed-agent session events` @@ -552,12 +558,16 @@ bl managed-agent state list --file agents.yaml ### `bl managed-agent state rm` -| Field | Value | -| ------------------ | -------------------------------------------------------------------------- | -| **Name** | `managed-agent state rm` | -| **Description** | Remove a resource from state without destroying it remotely | -| **Authentication** | No Auth | -| **Usage** | `bl managed-agent state rm --address [--file ]` | +| Field | Value | +| ------------------ | ----------------------------------------------------------------------------------------------------------------- | +| **Name** | `managed-agent state rm` | +| **Description** | Remove a resource from state without destroying it remotely | +| **Authentication** | No Auth | +| **Usage** | `bl managed-agent state rm --address [--file ]` | +| **Risk** | `high` | +| **Risk message** | This removes the resource from local state without deleting it remotely, so this project will no longer track it. | + +> **Agent safety:** Never add `--yes` automatically. On `type="requires_confirmation"`, stop and ask for explicit user confirmation of the same action and scope. #### Flags @@ -565,6 +575,7 @@ bl managed-agent state list --file agents.yaml | -------------------------------- | ------ | -------- | --------------------------------------- | | `--address ` | string | yes | Resource state address (required) | | `--file ` | string | no | Config file path (default: agents.yaml) | +| `--yes` | switch | no | Confirm this high-risk operation | #### Notes @@ -573,7 +584,8 @@ bl managed-agent state list --file agents.yaml #### Examples ```bash -bl managed-agent state rm --address bailian.agent.assistant +# Only after explicit user confirmation: +bl managed-agent state rm --address bailian.agent.assistant --yes ``` ### `bl managed-agent state show`