feat(cli): add feedback add and delete commands for quick CLI feedback

.oxfmtrc.jsonc

@@ -0,0 +1,8 @@
+{
+  "$schema": "./node_modules/oxfmt/configuration_schema.json",
+  "ignorePatterns": [
+    ".repos/**",
+    // Autogenerated files that must stay byte-identical to their generator's output (never reformat)
+    "apps/cli/src/shared/feedback/database.types.ts",
+  ],
+}

apps/cli/AGENTS.md

@@ -114,15 +114,16 @@ Always check `src/shared/` before writing new infrastructure. Do not duplicate w
 
 Also check the following `legacy/` infrastructure before writing equivalent helpers from scratch:
 
-| Path                                                    | What it provides                                                                                                                                                                          |
-| ------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `legacy/config/legacy-cli-config.layer.ts`              | `LegacyCliConfig` — resolves `SUPABASE_PROFILE` (built-in name **or** YAML file path), `--workdir`, `--experimental`, project-id from `supabase/config.toml`                              |
-| `legacy/config/legacy-project-ref.layer.ts`             | `LegacyProjectRefResolver` — `--project-ref` flag → env → `supabase/.temp/project-ref` file → prompt                                                                                      |
-| `legacy/telemetry/legacy-telemetry-state.layer.ts`      | `LegacyTelemetryState.flush` — writes `~/.supabase/telemetry.json`, runs in every command's `Effect.ensuring`                                                                             |
-| `legacy/telemetry/legacy-linked-project-cache.layer.ts` | `LegacyLinkedProjectCache.cache(ref)` — writes `<workdir>/supabase/.temp/linked-project.json` after `--project-ref` resolves; bypasses generated schema validation (uses raw HTTP client) |
-| `legacy/auth/legacy-http-debug.layer.ts`                | `legacyHttpClientLayer` — wraps the HTTP transport with a `--debug` stderr logger (`log.LstdFlags`-style timestamp format)                                                                |
-| `legacy/output/legacy-glamour-table.ts`                 | `renderGlamourTable(headers, rows)` — the CLI's established ASCII table format                                                                                                            |
-| `legacy/shared/legacy-upgrade-notice.ts`                | `legacyUpgradeNoticeHook` — post-success upgrade notice (GitHub latest-release fetch, 10h `supabase/.temp/cli-latest` cache, `SUPABASE_NO_UPDATE_NOTIFIER` opt-out)                       |
+| Path                                                    | What it provides                                                                                                                                                                                                                                                                                                                                                                                     |
+| ------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `legacy/config/legacy-cli-config.layer.ts`              | `LegacyCliConfig` — resolves `SUPABASE_PROFILE` (built-in name **or** YAML file path), `--workdir`, `--experimental`. Its `projectId` is a bare `SUPABASE_PROJECT_ID` env passthrough — it does **not** read `config.toml` or the linked-project file, so it is `None` in a linked project unless that env var is set. Never treat it as "the linked project ref" on its own; see the two rows below |
+| `legacy/config/legacy-project-ref.layer.ts`             | `LegacyProjectRefResolver` — `--project-ref` flag → env → `supabase/.temp/project-ref` file → prompt. `resolveOptional` is the soft-load variant (no prompt, no error when unlinked). Requires `LegacyPlatformApiFactory` for its prompt path, so commands that must work unauthenticated should read the file directly instead                                                                      |
+| `legacy/shared/legacy-temp-paths.ts`                    | `legacyTempPaths(path, workdir)` — the `<workdir>/supabase/.temp/*` paths `supabase link` writes; `legacyReadProjectRefFile(fs, path, workdir)` reads the linked ref with no API/TTY dependency (absent or blank file → `None`; other read errors fail)                                                                                                                                              |
+| `legacy/telemetry/legacy-telemetry-state.layer.ts`      | `LegacyTelemetryState.flush` — writes `~/.supabase/telemetry.json`, runs in every command's `Effect.ensuring`                                                                                                                                                                                                                                                                                        |
+| `legacy/telemetry/legacy-linked-project-cache.layer.ts` | `LegacyLinkedProjectCache.cache(ref)` — writes `<workdir>/supabase/.temp/linked-project.json` after `--project-ref` resolves; bypasses generated schema validation (uses raw HTTP client)                                                                                                                                                                                                            |
+| `legacy/auth/legacy-http-debug.layer.ts`                | `legacyHttpClientLayer` — wraps the HTTP transport with a `--debug` stderr logger (`log.LstdFlags`-style timestamp format)                                                                                                                                                                                                                                                                           |
+| `legacy/output/legacy-glamour-table.ts`                 | `renderGlamourTable(headers, rows)` — the CLI's established ASCII table format                                                                                                                                                                                                                                                                                                                       |
+| `legacy/shared/legacy-upgrade-notice.ts`                | `legacyUpgradeNoticeHook` — post-success upgrade notice (GitHub latest-release fetch, 10h `supabase/.temp/cli-latest` cache, `SUPABASE_NO_UPDATE_NOTIFIER` opt-out)                                                                                                                                                                                                                                  |
 
 ---
 

apps/cli/package.json

@@ -32,6 +32,7 @@
     "docs:spec": "bun scripts/generate-docs-spec.ts",
     "dev:next": "pnpm exec bun src/next/main.ts",
     "dev:legacy": "pnpm exec bun src/legacy/main.ts",
+    "gen:feedback-types": "pnpm dev:legacy -- gen types typescript --project-id xguihxuzqibwxjnimxev --schema public > src/shared/feedback/database.types.ts",
     "test": "nx run-many -t test:core test:e2e --projects=$npm_package_name",
     "test:core": "nx run-many -t test:unit test:integration --projects=$npm_package_name --coverage.enabled",
     "test:smoke": "bun run tests/smoke-test.ts",
@@ -59,6 +60,7 @@
     "@supabase/pg-topo": "1.0.0-alpha.5",
     "@supabase/process-compose": "workspace:*",
     "@supabase/stack": "workspace:*",
+    "@supabase/supabase-js": "^2.110.7",
     "@tsconfig/bun": "catalog:",
     "@types/bun": "catalog:",
     "@types/pg": "^8.21.0",
@@ -122,6 +124,7 @@
     "ignore": [
       "scripts/*.ts",
       "tests/**/*.ts",
+      "src/shared/feedback/database.types.ts",
       "src/shared/telemetry/event-catalog.ts"
     ],
     "ignoreBinaries": [

apps/cli/src/legacy/cli/root.ts

@@ -8,6 +8,7 @@ import { legacyConfigCommand } from "../commands/config/config.command.ts";
 import { legacyDbCommand } from "../commands/db/db.command.ts";
 import { legacyDomainsCommand } from "../commands/domains/domains.command.ts";
 import { legacyEncryptionCommand } from "../commands/encryption/encryption.command.ts";
+import { legacyFeedbackCommand } from "../commands/feedback/feedback.command.ts";
 import { legacyFunctionsCommand } from "../commands/functions/functions.command.ts";
 import { legacyGenCommand } from "../commands/gen/gen.command.ts";
 import { legacyInitCommand } from "../commands/init/init.command.ts";
@@ -69,6 +70,7 @@ export const legacyRoot = Command.make("supabase").pipe(
     legacyDbCommand,
     legacyDomainsCommand,
     legacyEncryptionCommand,
+    legacyFeedbackCommand,
     legacyFunctionsCommand,
     legacyGenCommand,
     legacyInitCommand,

apps/cli/src/legacy/commands/db/query/query.format.ts

@@ -573,13 +573,3 @@ export function legacyOrderedKeys(body: string): ReadonlyArray<string> {
   }
   return keys;
 }
-
-/** Agent-mode resolution: `yes`→true, `no`→false, `auto`→agent detected. */
-export function legacyResolveAgentMode(
-  agentFlag: "auto" | "yes" | "no",
-  aiToolName: Option.Option<string>,
-): boolean {
-  if (agentFlag === "yes") return true;
-  if (agentFlag === "no") return false;
-  return Option.isSome(aiToolName);
-}

apps/cli/src/legacy/commands/db/query/query.format.unit.test.ts

@@ -11,7 +11,6 @@ import {
   legacyOrderedKeys,
   legacyRenderJson,
   legacyRenderTablewriter,
-  legacyResolveAgentMode,
   legacyToCsv,
 } from "./query.format.ts";
 
@@ -353,15 +352,6 @@ describe("legacyFindNonFiniteJsonValue", () => {
   });
 });
 
-describe("legacyResolveAgentMode", () => {
-  it("honors the explicit flag and falls back to detection on auto", () => {
-    expect(legacyResolveAgentMode("yes", Option.none())).toBe(true);
-    expect(legacyResolveAgentMode("no", Option.some("cursor"))).toBe(false);
-    expect(legacyResolveAgentMode("auto", Option.some("cursor"))).toBe(true);
-    expect(legacyResolveAgentMode("auto", Option.none())).toBe(false);
-  });
-});
-
 describe("legacyBuildRlsAdvisory", () => {
   it("returns None when no tables are unprotected", () => {
     expect(Option.isNone(legacyBuildRlsAdvisory([]))).toBe(true);

apps/cli/src/legacy/commands/db/query/query.handler.ts

@@ -42,9 +42,9 @@ import {
   legacyOrderedKeys,
   legacyRenderJson,
   legacyRenderTablewriter,
-  legacyResolveAgentMode,
   legacyToCsv,
 } from "./query.format.ts";
+import { legacyResolveAgentMode } from "../../../shared/legacy-agent-mode.ts";
 
 /** The output formats `db query` selects: `json|table|csv`. */
 type LegacyResolvedFormat = "json" | "table" | "csv";