feat(commands): migrate delete commands to runtime risk confirmation

Author: XXPermanentXX

packages/commands/src/commands/dataset/delete.ts

@@ -1,5 +1,5 @@
 import { defineCommand, deleteDataset, type FlagsDef } from "bailian-cli-core";
-import { emitResult, emitBare, confirmDangerousAction } from "bailian-cli-runtime";
+import { emitResult, emitBare } from "bailian-cli-runtime";
 
 const DELETE_FLAGS = {
   fileId: {
@@ -8,28 +8,25 @@ const DELETE_FLAGS = {
     description: { "en-US": "Dataset file ID (required)", "zh-CN": "数据集文件 ID（必填）" },
     required: true,
   },
-  yes: {
-    type: "switch",
-    description: { "en-US": "Skip the confirmation prompt", "zh-CN": "跳过确认提示" },
-  },
 } satisfies FlagsDef;
 
 export default defineCommand({
   description: { "en-US": "Delete a dataset file by ID", "zh-CN": "通过 ID 删除数据集文件" },
   auth: "apiKey",
-  usageArgs: "--file-id <id> [--yes]",
+  risk: {
+    level: "high",
+    message: {
+      "en-US": "This permanently deletes the specified dataset file and cannot be undone.",
+      "zh-CN": "该操作会永久删除指定的数据集文件，且无法撤销。",
+    },
+  },
+  usageArgs: "--file-id <id>",
   flags: DELETE_FLAGS,
   exampleArgs: [
     "--file-id file-id-xxx",
     "--file-id file-id-xxx --dry-run",
     "--file-id file-id-xxx --yes",
   ],
-  notes: [
-    {
-      "en-US": "Irreversible — the dataset file is permanently removed.",
-      "zh-CN": "该操作不可撤销——数据集文件将被永久删除。",
-    },
-  ],
   async run(ctx) {
     const { settings, flags } = ctx;
     const fileId = flags.fileId;
@@ -39,11 +36,6 @@ export default defineCommand({
       return;
     }
 
-    await confirmDangerousAction(
-      `Delete dataset file ${fileId}.\nThe file is permanently removed. This cannot be undone.`,
-      flags.yes ?? false,
-    );
-
     const response = await deleteDataset(ctx.client, fileId);
 
     if (settings.quiet) {

packages/commands/src/commands/deploy/delete.ts

@@ -6,7 +6,7 @@ import {
   ExitCode,
   type FlagsDef,
 } from "bailian-cli-core";
-import { emitResult, emitBare, confirmDangerousAction } from "bailian-cli-runtime";
+import { emitResult, emitBare } from "bailian-cli-runtime";
 
 const DELETE_FLAGS = {
   deployedModel: {
@@ -25,10 +25,6 @@ const DELETE_FLAGS = {
       "zh-CN": "跳过本地 STOPPED/FAILED 状态预检查",
     },
   },
-  yes: {
-    type: "switch",
-    description: { "en-US": "Skip the confirmation prompt", "zh-CN": "跳过确认提示" },
-  },
 } satisfies FlagsDef;
 
 /**
@@ -44,14 +40,15 @@ export default defineCommand({
     "zh-CN": "删除模型部署（状态必须为 STOPPED 或 FAILED）",
   },
   auth: "apiKey",
-  usageArgs: "--deployed-model <id> [--skip-precheck] [--yes]",
-  flags: DELETE_FLAGS,
-  notes: [
-    {
-      "en-US": "Irreversible — the deployment is permanently destroyed.",
-      "zh-CN": "该操作不可撤销——部署将被永久销毁。",
+  risk: {
+    level: "high",
+    message: {
+      "en-US": "This permanently deletes the specified model deployment and cannot be undone.",
+      "zh-CN": "该操作会永久删除指定的模型部署，且无法撤销。",
     },
-  ],
+  },
+  usageArgs: "--deployed-model <id> [--skip-precheck]",
+  flags: DELETE_FLAGS,
   exampleArgs: [
     "--deployed-model dep-...",
     "--deployed-model dep-... --dry-run",
@@ -87,11 +84,6 @@ export default defineCommand({
       }
     }
 
-    await confirmDangerousAction(
-      `Delete deployment ${deployedModel}.\nThe deployment is permanently destroyed. This cannot be undone.`,
-      flags.yes ?? false,
-    );
-
     const response = await deleteDeployment(ctx.client, deployedModel);
 
     if (settings.quiet) {

packages/commands/src/commands/finetune/delete.ts

@@ -1,5 +1,5 @@
 import { defineCommand, deleteFineTune, type FlagsDef } from "bailian-cli-core";
-import { emitResult, emitBare, confirmDangerousAction } from "bailian-cli-runtime";
+import { emitResult, emitBare } from "bailian-cli-runtime";
 
 const DELETE_FLAGS = {
   jobId: {
@@ -8,23 +8,22 @@ const DELETE_FLAGS = {
     description: { "en-US": "Fine-tune job ID (required)", "zh-CN": "微调任务 ID（必填）" },
     required: true,
   },
-  yes: {
-    type: "switch",
-    description: { "en-US": "Skip the confirmation prompt", "zh-CN": "跳过确认提示" },
-  },
 } satisfies FlagsDef;
 
 export default defineCommand({
   description: { "en-US": "Delete a fine-tune job record", "zh-CN": "删除微调任务记录" },
   auth: "apiKey",
-  usageArgs: "--job-id <id> [--yes]",
+  risk: {
+    level: "high",
+    message: {
+      "en-US": "This permanently deletes the specified fine-tune job record and cannot be undone.",
+      "zh-CN": "该操作会永久删除指定的微调任务记录，且无法撤销。",
+    },
+  },
+  usageArgs: "--job-id <id>",
   flags: DELETE_FLAGS,
   exampleArgs: ["--job-id ft-xxx", "--job-id ft-xxx --dry-run", "--job-id ft-xxx --yes"],
   notes: [
-    {
-      "en-US": "Irreversible — the job record is permanently removed.",
-      "zh-CN": "该操作不可撤销——任务记录将被永久删除。",
-    },
     {
       "en-US":
         "Cancel a RUNNING job first via `finetune cancel` — the platform refuses to delete jobs that are still in flight.",
@@ -40,11 +39,6 @@ export default defineCommand({
       return;
     }
 
-    await confirmDangerousAction(
-      `Delete fine-tune job record ${jobId}.\nThe job record is permanently removed. This cannot be undone.`,
-      flags.yes ?? false,
-    );
-
     const response = await deleteFineTune(ctx.client, jobId);
 
     if (settings.quiet) {

packages/commands/src/commands/quota/delete.ts

@@ -1,40 +1,33 @@
 import { defineCommand, detectOutputFormat, modelsLimitsPath } from "bailian-cli-core";
-import { emitResult, confirmDangerousAction } from "bailian-cli-runtime";
+import { emitResult } from "bailian-cli-runtime";
 
 export default defineCommand({
   description: {
     "en-US": "Clear all custom rate limits (QPM/TPM) for a model",
     "zh-CN": "清除模型的所有自定义限流配置（QPM/TPM）",
   },
   auth: "apiKey",
-  usageArgs: "--model <model> [--yes]",
+  risk: {
+    level: "high",
+    message: {
+      "en-US":
+        "This permanently clears all custom QPM/TPM rate limits for the specified model and cannot be undone.",
+      "zh-CN": "该操作会永久清除指定模型的所有自定义 QPM/TPM 限流配置，且无法撤销。",
+    },
+  },
+  usageArgs: "--model <model>",
   flags: {
     model: {
       type: "string",
       valueHint: "<model>",
       description: { "en-US": "Model name (required)", "zh-CN": "模型名称（必填）" },
       required: true,
     },
-    yes: {
-      type: "switch",
-      description: {
-        "en-US": "Skip the confirmation prompt",
-        "zh-CN": "跳过确认提示",
-      },
-    },
   },
-  exampleArgs: ["--model qwen-plus", "--model qwen-plus --yes", "--model qwen-plus --output json"],
-  notes: [
-    {
-      "en-US":
-        "Irreversible — the server-side OVERLAY is reset to defaults, so your custom QPM/TPM configuration is permanently removed.",
-      "zh-CN":
-        "该操作不可撤销——服务端 OVERLAY 会重置为默认值，你的自定义 QPM/TPM 配置将被永久删除。",
-    },
-    {
-      "en-US": "Requires confirmation; pass --yes to skip the prompt in scripts.",
-      "zh-CN": "需要确认；脚本中可加 --yes 跳过交互提示。",
-    },
+  exampleArgs: [
+    "--model qwen-plus",
+    "--model qwen-plus --dry-run --output json",
+    "--model qwen-plus --yes",
   ],
   async run(ctx) {
     const { settings, flags } = ctx;
@@ -51,11 +44,6 @@ export default defineCommand({
       return;
     }
 
-    await confirmDangerousAction(
-      `Clear all custom rate limits for model ${modelName}.\nYour custom QPM/TPM configuration will be removed.`,
-      flags.yes ?? false,
-    );
-
     const result = await ctx.client.requestJson<{ request_id?: string }>({
       path: modelsLimitsPath(),
       method: "POST",

packages/commands/tests/e2e/dataset.e2e.test.ts

@@ -293,16 +293,6 @@ describe.skipIf(!isDashScopeE2EReady())("e2e: dataset (offline)", () => {
     expect(`${stdout}\n${stderr}`).toMatch(/--schema video is not supported/);
   });
 
-  test("dataset delete --help 展示 --yes", async () => {
-    const { stderr, exitCode } = await runCommandE2e(DATASET_ROUTES, [
-      "dataset",
-      "delete",
-      "--help",
-    ]);
-    expect(exitCode, stderr).toBe(0);
-    expect(stderr).toMatch(/--yes/i);
-  });
-
   test("dataset delete --dry-run 发出结构化动作", async () => {
     const { stdout, stderr, exitCode } = await runCommandE2e(DATASET_ROUTES, [
       "dataset",
@@ -317,16 +307,34 @@ describe.skipIf(!isDashScopeE2EReady())("e2e: dataset (offline)", () => {
     const data = parseStdoutJson<{ action: string }>(stdout);
     expect(data.action).toBe("dataset.delete");
   });
+});
 
-  test("dataset delete 非 TTY 无 --yes 报 USAGE (2)", async () => {
+describe("e2e: dataset high-risk confirmation", () => {
+  test("dataset delete --help 展示 runtime 注入的 --yes", async () => {
+    const { stderr, exitCode } = await runCommandE2e(DATASET_ROUTES, [
+      "dataset",
+      "delete",
+      "--help",
+    ]);
+    expect(exitCode, stderr).toBe(0);
+    expect(stderr).toMatch(/--yes/i);
+  });
+
+  test("dataset delete 无 --yes 返回确认请求 (7)", async () => {
     const { stderr, exitCode } = await runCommandE2e(DATASET_ROUTES, [
       "dataset",
       "delete",
       "--file-id",
       "file-id-xxx",
+      "--api-key",
+      "e2e-dummy-key",
+      "--output",
+      "json",
     ]);
-    expect(exitCode).toBe(2);
-    expect(stderr).toMatch(/--yes/);
+    expect(exitCode).toBe(7);
+    expect(JSON.parse(stderr)).toMatchObject({
+      error: { code: 7, type: "requires_confirmation" },
+    });
   });
 });
 

packages/commands/tests/e2e/deploy.e2e.test.ts

@@ -201,24 +201,30 @@ describe.skipIf(!isDashScopeE2EReady())("e2e: deploy (offline)", () => {
     const data = parseStdoutJson<{ action: string }>(stdout);
     expect(data.action).toBe(`deploy.${sub}`);
   });
+});
 
-  test("deploy delete --help 展示 --yes", async () => {
+describe("e2e: deploy high-risk confirmation", () => {
+  test("deploy delete --help 展示 runtime 注入的 --yes", async () => {
     const { stderr, exitCode } = await runCommandE2e(DEPLOY_ROUTES, ["deploy", "delete", "--help"]);
     expect(exitCode, stderr).toBe(0);
     expect(stderr).toMatch(/--yes/i);
   });
 
-  test("deploy delete 非 TTY 无 --yes 报 USAGE (2)", async () => {
-    // --skip-precheck 保证确认门在发任何网络请求前触发
+  test("deploy delete 无 --yes 返回确认请求 (7)", async () => {
     const { stderr, exitCode } = await runCommandE2e(DEPLOY_ROUTES, [
       "deploy",
       "delete",
       "--deployed-model",
       "dep-xxx",
-      "--skip-precheck",
+      "--api-key",
+      "e2e-dummy-key",
+      "--output",
+      "json",
     ]);
-    expect(exitCode).toBe(2);
-    expect(stderr).toMatch(/--yes/);
+    expect(exitCode).toBe(7);
+    expect(JSON.parse(stderr)).toMatchObject({
+      error: { code: 7, type: "requires_confirmation" },
+    });
   });
 });
 

packages/commands/tests/e2e/finetune.e2e.test.ts

@@ -294,27 +294,6 @@ describe.skipIf(!isDashScopeE2EReady())("e2e: finetune (offline)", () => {
     expect(data.action).toBe(`finetune.${sub}`);
   });
 
-  test("finetune delete --help 展示 --yes", async () => {
-    const { stderr, exitCode } = await runCommandE2e(FINETUNE_ROUTES, [
-      "finetune",
-      "delete",
-      "--help",
-    ]);
-    expect(exitCode, stderr).toBe(0);
-    expect(stderr).toMatch(/--yes/i);
-  });
-
-  test("finetune delete 非 TTY 无 --yes 报 USAGE (2)", async () => {
-    const { stderr, exitCode } = await runCommandE2e(FINETUNE_ROUTES, [
-      "finetune",
-      "delete",
-      "--job-id",
-      "ft-xxx",
-    ]);
-    expect(exitCode).toBe(2);
-    expect(stderr).toMatch(/--yes/);
-  });
-
   test("finetune create --dry-run 解析多 datasets 中的空白", async () => {
     const { stdout, stderr, exitCode } = await runCommandE2e(FINETUNE_ROUTES, [
       "finetune",
@@ -493,6 +472,35 @@ describe.skipIf(!isDashScopeE2EReady())("e2e: finetune (offline)", () => {
   });
 });
 
+describe("e2e: finetune high-risk confirmation", () => {
+  test("finetune delete --help 展示 runtime 注入的 --yes", async () => {
+    const { stderr, exitCode } = await runCommandE2e(FINETUNE_ROUTES, [
+      "finetune",
+      "delete",
+      "--help",
+    ]);
+    expect(exitCode, stderr).toBe(0);
+    expect(stderr).toMatch(/--yes/i);
+  });
+
+  test("finetune delete 无 --yes 返回确认请求 (7)", async () => {
+    const { stderr, exitCode } = await runCommandE2e(FINETUNE_ROUTES, [
+      "finetune",
+      "delete",
+      "--job-id",
+      "ft-xxx",
+      "--api-key",
+      "e2e-dummy-key",
+      "--output",
+      "json",
+    ]);
+    expect(exitCode).toBe(7);
+    expect(JSON.parse(stderr)).toMatchObject({
+      error: { code: 7, type: "requires_confirmation" },
+    });
+  });
+});
+
 describe.skipIf(!isDashScopeE2EReady())("e2e: finetune (DashScope)", () => {
   /**
    * 不同开发者的 key 状态不一：可能鉴权失败、可能账号下没有任何微调记录、