feat(managed-agent): enforce high-risk confirmation for runtime operations

Author: chenanran555

packages/cli/tests/skill-risk-confirmation.test.ts

@@ -5,9 +5,18 @@ import { expect, test } from "vite-plus/test";
 
 const repositoryRoot = join(dirname(fileURLToPath(import.meta.url)), "../../..");
 const skillsRoot = join(repositoryRoot, "skills");
+const scopedCreateCommands = new Set([
+  "bl managed-agent agent create",
+  "bl managed-agent deployment create",
+  "bl managed-agent environment create",
+  "bl managed-agent skill create",
+  "bl managed-agent vault create",
+  "bl managed-agent vault credential create",
+]);
 
-test("every generated high-risk command reference requires user confirmation before --yes", () => {
+test("generated references distinguish runtime high-risk confirmation from scoped create execution", () => {
   let highRiskCommandCount = 0;
+  const seenScopedCreateCommands = new Set<string>();
 
   for (const skillDirectory of readdirSync(skillsRoot, { withFileTypes: true })) {
     if (!skillDirectory.isDirectory()) continue;
@@ -27,9 +36,21 @@ test("every generated high-risk command reference requires user confirmation bef
       const commandSections = markdown.split(/(?=^### `bl )/m).slice(1);
 
       for (const commandSection of commandSections) {
-        if (!commandSection.includes("`--yes`")) continue;
+        const commandName = commandSection.match(/^### `([^`]+)`/m)?.[1];
+        const hasConfirmationFlag = commandSection.includes("`--yes`");
+        const hasHighRiskMetadata = /\|\s+\*\*Risk\*\*\s+\|\s+`high`\s+\|/.test(commandSection);
+
+        if (!hasHighRiskMetadata) {
+          if (!hasConfirmationFlag) continue;
+          expect(commandName).toBeDefined();
+          expect(scopedCreateCommands.has(commandName ?? "")).toBe(true);
+          expect(commandSection).toMatch(/Without --yes, .*preview/i);
+          seenScopedCreateCommands.add(commandName ?? "");
+          continue;
+        }
+
         highRiskCommandCount += 1;
-        expect(commandSection).toMatch(/\|\s+\*\*Risk\*\*\s+\|\s+`high`\s+\|/);
+        expect(hasConfirmationFlag).toBe(true);
         expect(commandSection).toMatch(/\|\s+\*\*Risk message\*\*\s+\|\s+.+\|/);
         expect(commandSection).toMatch(/type=.*requires_confirmation/);
         const agentSafetyLine = commandSection
@@ -44,4 +65,5 @@ test("every generated high-risk command reference requires user confirmation bef
   }
 
   expect(highRiskCommandCount).toBeGreaterThan(0);
+  expect([...seenScopedCreateCommands].sort()).toEqual([...scopedCreateCommands].sort());
 });

packages/commands/src/commands/managed-agent/deployment/_set-paused.ts

@@ -16,9 +16,24 @@ export function createSetDeploymentPausedCommand(paused: boolean) {
       ? { "en-US": "Pause a Managed Agent deployment", "zh-CN": "暂停托管 Agent Deployment" }
       : { "en-US": "Unpause a Managed Agent deployment", "zh-CN": "恢复托管 Agent Deployment" },
     auth: "apiKey",
+    risk: {
+      level: "high",
+      message: paused
+        ? {
+            "en-US":
+              "This pauses the specified Managed Agent deployment and stops its scheduled executions until resumed.",
+            "zh-CN": "该操作会暂停指定的托管 Agent Deployment，并停止其定时执行直至恢复。",
+          }
+        : {
+            "en-US":
+              "This resumes the specified Managed Agent deployment and may restart scheduled executions and related usage.",
+            "zh-CN":
+              "该操作会恢复指定的托管 Agent Deployment，可能重新开始定时执行并产生相关用量。",
+          },
+    },
     usageArgs: "(--deployment <name> | --deployment-id <id>)",
     flags: DEPLOYMENT_ACTION_TARGET_FLAGS,
-    exampleArgs: [`--deployment daily-report --dry-run`, `--deployment-id dep_abc`],
+    exampleArgs: [`--deployment daily-report --dry-run`, `--deployment-id dep_abc --yes`],
     notes: CREDENTIALS_NOTE,
     validate: validateDeploymentActionTarget,
     async run(ctx) {

packages/commands/src/commands/managed-agent/deployment/_shared.ts

@@ -96,14 +96,6 @@ export const DEPLOYMENT_ACTION_TARGET_FLAGS = {
   },
 } as const;
 
-export const DEPLOYMENT_RUN_ACTION_FLAGS = {
-  ...DEPLOYMENT_ACTION_TARGET_FLAGS,
-  yes: {
-    type: "switch",
-    description: { "en-US": "Confirm deployment run", "zh-CN": "确认运行 Deployment" },
-  },
-} as const;
-
 export function validateDeploymentActionTarget(flags: {
   deployment?: string;
   deploymentId?: string;

packages/commands/src/commands/managed-agent/deployment/run.ts

@@ -1,11 +1,11 @@
 import { runRemoteDeployment } from "@openagentpack/sdk";
-import { BailianError, defineCommand, detectOutputFormat, ExitCode } from "bailian-cli-core";
+import { defineCommand, detectOutputFormat } from "bailian-cli-core";
 import { emitBare, emitResult } from "bailian-cli-runtime";
 import { buildAgentRuntime, CREDENTIALS_NOTE } from "../_engine/config-loader.ts";
 import { withStdoutProtected } from "../_engine/console-capture.ts";
 import { withAgentErrors } from "../_engine/errors.ts";
 import {
-  DEPLOYMENT_RUN_ACTION_FLAGS,
+  DEPLOYMENT_ACTION_TARGET_FLAGS,
   resolveDeploymentTarget,
   validateDeploymentActionTarget,
 } from "./_shared.ts";
@@ -16,8 +16,16 @@ export default defineCommand({
     "zh-CN": "立即运行托管 Agent Deployment",
   },
   auth: "apiKey",
-  usageArgs: "(--deployment <name> | --deployment-id <id>) --yes",
-  flags: DEPLOYMENT_RUN_ACTION_FLAGS,
+  risk: {
+    level: "high",
+    message: {
+      "en-US":
+        "This immediately starts a run for the specified Managed Agent deployment and may incur usage or trigger configured actions.",
+      "zh-CN": "该操作会立即运行指定的托管 Agent Deployment，可能产生用量或触发已配置的动作。",
+    },
+  },
+  usageArgs: "(--deployment <name> | --deployment-id <id>)",
+  flags: DEPLOYMENT_ACTION_TARGET_FLAGS,
   exampleArgs: ["--deployment daily-report --dry-run", "--deployment-id dep_abc --yes"],
   notes: CREDENTIALS_NOTE,
   validate: validateDeploymentActionTarget,
@@ -33,13 +41,6 @@ export default defineCommand({
       );
       return;
     }
-    if (!ctx.flags.yes) {
-      throw new BailianError(
-        "Refusing to run the deployment without confirmation.",
-        ExitCode.USAGE,
-        "Re-run with --yes or preview with --dry-run.",
-      );
-    }
     const result = await withAgentErrors(() =>
       withStdoutProtected(async () => {
         const runtime = await buildAgentRuntime(ctx, ctx.flags.file ?? "agents.yaml");

packages/commands/src/commands/managed-agent/file.ts

@@ -7,7 +7,7 @@ import {
   listRemoteFiles,
   uploadFile,
 } from "@openagentpack/sdk";
-import { BailianError, defineCommand, detectOutputFormat, ExitCode } from "bailian-cli-core";
+import { defineCommand, detectOutputFormat } from "bailian-cli-core";
 import { emitBare, emitResult } from "bailian-cli-runtime";
 import {
   API_TARGET_FLAGS,
@@ -90,10 +90,6 @@ const DOWNLOAD_FLAGS = {
 } as const;
 const DELETE_FLAGS = {
   ...GET_FLAGS,
-  yes: {
-    type: "switch",
-    description: { "en-US": "Confirm permanent file deletion", "zh-CN": "确认永久删除文件" },
-  },
 } as const;
 
 function fileRows(files: ProviderFileInfo[]): string[][] {
@@ -298,7 +294,14 @@ export const managedAgentFileDownload = defineCommand({
 export const managedAgentFileDelete = defineCommand({
   description: { "en-US": "Delete a Managed Agent file", "zh-CN": "删除托管 Agent 文件" },
   auth: "apiKey",
-  usageArgs: "--file-id <id> --yes",
+  risk: {
+    level: "high",
+    message: {
+      "en-US": "This permanently deletes the specified remote Managed Agent file.",
+      "zh-CN": "该操作会永久删除指定的远端托管 Agent 文件。",
+    },
+  },
+  usageArgs: "--file-id <id>",
   flags: DELETE_FLAGS,
   exampleArgs: ["--file-id file_abc --dry-run", "--file-id file_abc --yes"],
   notes: CREDENTIALS_NOTE,
@@ -308,13 +311,6 @@ export const managedAgentFileDelete = defineCommand({
       emitResult({ would_delete_file: ctx.flags.fileId }, format);
       return;
     }
-    if (!ctx.flags.yes) {
-      throw new BailianError(
-        `Refusing to delete file ${ctx.flags.fileId} without confirmation.`,
-        ExitCode.USAGE,
-        "Re-run with --yes or preview with --dry-run.",
-      );
-    }
     await withAgentErrors(() =>
       withStdoutProtected(async () => {
         const runtime = await buildAgentRuntime(ctx, ctx.flags.file ?? "agents.yaml");

packages/commands/src/commands/managed-agent/session-management.ts

@@ -90,10 +90,6 @@ const UPDATE_FLAGS = {
 const ARCHIVE_FLAGS = {
   ...API_TARGET_FLAGS,
   ...SESSION_ID_FLAG,
-  yes: {
-    type: "switch",
-    description: { "en-US": "Confirm session archive", "zh-CN": "确认归档 Session" },
-  },
 } as const;
 
 function sessionRows(sessions: ProviderSessionInfo[]): string[][] {
@@ -217,7 +213,14 @@ export const managedAgentSessionUpdate = defineCommand({
 export const managedAgentSessionArchive = defineCommand({
   description: { "en-US": "Archive a Managed Agent session", "zh-CN": "归档托管 Agent Session" },
   auth: "apiKey",
-  usageArgs: "--session-id <id> --yes",
+  risk: {
+    level: "high",
+    message: {
+      "en-US": "This archives the specified remote Managed Agent Session.",
+      "zh-CN": "该操作会归档指定的远端托管 Agent Session。",
+    },
+  },
+  usageArgs: "--session-id <id>",
   flags: ARCHIVE_FLAGS,
   exampleArgs: ["--session-id sess_abc --dry-run", "--session-id sess_abc --yes"],
   notes: CREDENTIALS_NOTE,
@@ -227,13 +230,6 @@ export const managedAgentSessionArchive = defineCommand({
       emitResult({ would_archive_session: ctx.flags.sessionId }, format);
       return;
     }
-    if (!ctx.flags.yes) {
-      throw new BailianError(
-        `Refusing to archive session ${ctx.flags.sessionId} without confirmation.`,
-        ExitCode.USAGE,
-        "Re-run with --yes or preview with --dry-run.",
-      );
-    }
     const session = await withAgentErrors(() =>
       withStdoutProtected(async () => {
         const runtime = await buildAgentRuntime(ctx, ctx.flags.file ?? "agents.yaml");

packages/commands/tests/e2e/managed-agent.e2e.test.ts

@@ -1046,6 +1046,11 @@ vaults:
   test.each([
     ["state rm", ["state", "rm"]],
     ["session delete", ["session", "delete"]],
+    ["session archive", ["session", "archive"]],
+    ["file delete", ["file", "delete"]],
+    ["deployment run", ["deployment", "run"]],
+    ["deployment pause", ["deployment", "pause"]],
+    ["deployment unpause", ["deployment", "unpause"]],
   ])("managed-agent %s --help 展示 runtime 注入的 --yes", async (_commandName, commandPath) => {
     const { stderr, exitCode } = await runCommandE2e(MANAGED_AGENT_ROUTES, [
       "managed-agent",
@@ -1062,6 +1067,11 @@ vaults:
       "session delete",
       ["session", "delete", "--session-id", "sess_e2e", "--api-key", "e2e-dummy-key"],
     ],
+    ["session archive", ["session", "archive", "--session-id", "sess_e2e"]],
+    ["file delete", ["file", "delete", "--file-id", "file_e2e"]],
+    ["deployment run", ["deployment", "run", "--deployment-id", "dep_e2e"]],
+    ["deployment pause", ["deployment", "pause", "--deployment-id", "dep_e2e"]],
+    ["deployment unpause", ["deployment", "unpause", "--deployment-id", "dep_e2e"]],
   ])("managed-agent %s 无 --yes 返回确认请求 (7)", async (_commandName, commandArgs) => {
     const { stderr, exitCode } = await runCommandE2e(MANAGED_AGENT_ROUTES, [
       "managed-agent",

skills/bailian-managed-agent/SKILL.md

@@ -30,10 +30,11 @@ description: >-
 
 API-oriented commands do not replace IaC. Agent / Environment / Skill / Vault / Deployment 的 create 命令仍通过
 `agents.yaml → scoped plan → scoped apply` 管理；查询命令和 Session、Event、File、Deployment 运行时动作直接调用 API。
-`session archive|delete`、`file delete`、`deployment run` 也需要先 `--dry-run`，确认后才传 `--yes`。
+`session archive|delete`、`file delete`、`deployment run|pause|unpause` 也需要先 `--dry-run`，确认后才传 `--yes`。
 
-`state rm`, `session delete`, and future `risk: high` commands follow the shared protocol: show the
-risk message and exact scope, then wait for explicit confirmation before re-running with `--yes`.
+`state rm`, `session archive|delete`, `file delete`, `deployment run|pause|unpause`, and future
+`risk: high` commands follow the shared protocol: show the risk message and exact scope, then wait
+for explicit confirmation before re-running with `--yes`.
 
 ## IaC lifecycle