feat(cli): add feedback add and delete commands for quick CLI feedback

.oxfmtrc.jsonc

@@ -0,0 +1,8 @@
+{
+  "$schema": "./node_modules/oxfmt/configuration_schema.json",
+  "ignorePatterns": [
+    ".repos/**",
+    // Autogenerated files that must stay byte-identical to their generator's output (never reformat)
+    "apps/cli/src/shared/feedback/database.types.ts",
+  ],
+}

apps/cli/AGENTS.md

@@ -119,15 +119,16 @@ Always check `src/shared/` before writing new infrastructure. Do not duplicate w
 
 Also check the following `legacy/` infrastructure before writing equivalent helpers from scratch:
 
-| Path                                                    | What it provides                                                                                                                                                                              |
-| ------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `legacy/config/legacy-cli-config.layer.ts`              | `LegacyCliConfig` — resolves `SUPABASE_PROFILE` (built-in name **or** YAML file path), `--workdir`, `--experimental`, project-id from `supabase/config.toml`                                  |
-| `legacy/config/legacy-project-ref.layer.ts`             | `LegacyProjectRefResolver` — `--project-ref` flag → env → `supabase/.temp/project-ref` file → prompt; matches Go's resolver order                                                             |
-| `legacy/telemetry/legacy-telemetry-state.layer.ts`      | `LegacyTelemetryState.flush` — writes `~/.supabase/telemetry.json`, runs in every command's `Effect.ensuring`                                                                                 |
-| `legacy/telemetry/legacy-linked-project-cache.layer.ts` | `LegacyLinkedProjectCache.cache(ref)` — writes `<workdir>/supabase/.temp/linked-project.json` after `--project-ref` resolves; bypasses generated schema validation (uses raw HTTP client)     |
-| `legacy/auth/legacy-http-debug.layer.ts`                | `legacyHttpClientLayer` — wraps the HTTP transport with a `--debug` stderr logger in Go's `log.LstdFlags` format                                                                              |
-| `legacy/output/legacy-glamour-table.ts`                 | `renderGlamourTable(headers, rows)` — byte-exact ASCII match for Go's `glamour.RenderTable(..., AsciiStyle)`                                                                                  |
-| `legacy/shared/legacy-upgrade-notice.ts`                | `legacyUpgradeNoticeHook` — post-success upgrade notice (Go `checkUpgrade` parity: GitHub latest-release fetch, 10h `supabase/.temp/cli-latest` cache, `SUPABASE_NO_UPDATE_NOTIFIER` opt-out) |
+| Path                                                    | What it provides                                                                                                                                                                                                                                                                                                                                                                                     |
+| ------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `legacy/config/legacy-cli-config.layer.ts`              | `LegacyCliConfig` — resolves `SUPABASE_PROFILE` (built-in name **or** YAML file path), `--workdir`, `--experimental`. Its `projectId` is a bare `SUPABASE_PROJECT_ID` env passthrough — it does **not** read `config.toml` or the linked-project file, so it is `None` in a linked project unless that env var is set. Never treat it as "the linked project ref" on its own; see the two rows below |
+| `legacy/config/legacy-project-ref.layer.ts`             | `LegacyProjectRefResolver` — `--project-ref` flag → env → `supabase/.temp/project-ref` file → prompt; matches Go's resolver order. `resolveOptional` is the soft-load variant (no prompt, no error when unlinked). Requires `LegacyPlatformApiFactory` for its prompt path, so commands that must work unauthenticated should read the file directly instead                                         |
+| `legacy/shared/legacy-temp-paths.ts`                    | `legacyTempPaths(path, workdir)` — the `<workdir>/supabase/.temp/*` paths `supabase link` writes; `legacyReadProjectRefFile(fs, path, workdir)` reads the linked ref with no API/TTY dependency (absent or blank file → `None`; other read errors fail)                                                                                                                                              |
+| `legacy/telemetry/legacy-telemetry-state.layer.ts`      | `LegacyTelemetryState.flush` — writes `~/.supabase/telemetry.json`, runs in every command's `Effect.ensuring`                                                                                                                                                                                                                                                                                        |
+| `legacy/telemetry/legacy-linked-project-cache.layer.ts` | `LegacyLinkedProjectCache.cache(ref)` — writes `<workdir>/supabase/.temp/linked-project.json` after `--project-ref` resolves; bypasses generated schema validation (uses raw HTTP client)                                                                                                                                                                                                            |
+| `legacy/auth/legacy-http-debug.layer.ts`                | `legacyHttpClientLayer` — wraps the HTTP transport with a `--debug` stderr logger in Go's `log.LstdFlags` format                                                                                                                                                                                                                                                                                     |
+| `legacy/output/legacy-glamour-table.ts`                 | `renderGlamourTable(headers, rows)` — byte-exact ASCII match for Go's `glamour.RenderTable(..., AsciiStyle)`                                                                                                                                                                                                                                                                                         |
+| `legacy/shared/legacy-upgrade-notice.ts`                | `legacyUpgradeNoticeHook` — post-success upgrade notice (Go `checkUpgrade` parity: GitHub latest-release fetch, 10h `supabase/.temp/cli-latest` cache, `SUPABASE_NO_UPDATE_NOTIFIER` opt-out)                                                                                                                                                                                                        |
 
 ---
 

apps/cli/docs/go-cli-divergences.md

@@ -10,13 +10,15 @@ something the old Go CLI didn't — it is not a compatibility promise.
 
 These commands exist in the TS CLI today but have no direct top-level equivalent in the old Go CLI reference.
 
-| TS command        | TS path                                                                                                            | Notes                                                                                                                                                                                         |
-| ----------------- | ------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `dev`             | `planned`                                                                                                          | Reserved for a TS-native long-running local development workflow command that watches files and orchestrates subcommands. Track this as TS-only unless a direct Go equivalent emerges.        |
-| `logs`            | [`../src/next/commands/logs/logs.command.ts`](../src/next/commands/logs/logs.command.ts)                           | Streams local stack logs. No top-level `logs` command exists in the old Go CLI reference.                                                                                                     |
-| `api`             | [`../src/next/commands/platform/api.command.ts`](../src/next/commands/platform/api.command.ts)                     | Low-level Management API client. It supersedes the old generated tree with explicit discovery via `supabase api routes` and execution via `supabase api request <route> [--method <METHOD>]`. |
-| `stack`           | [`../src/next/cli/root.ts`](../src/next/cli/root.ts)                                                               | TS-only local runtime namespace exposing `stack start`, `stack stop`, `stack status`, `stack list`, and `stack update`. Top-level `start`, `stop`, and `status` remain aliases.               |
-| `branches switch` | [`../src/next/commands/branches/switch/switch.command.ts`](../src/next/commands/branches/switch/switch.command.ts) | No direct Go equivalent. Updates local active-branch state so subsequent commands target the selected branch.                                                                                 |
+| TS command        | TS path                                                                                                                | Notes                                                                                                                                                                                                                                                                                                                                                                                   |
+| ----------------- | ---------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `dev`             | `planned`                                                                                                              | Reserved for a TS-native long-running local development workflow command that watches files and orchestrates subcommands. Track this as TS-only unless a direct Go equivalent emerges.                                                                                                                                                                                                  |
+| `feedback add`    | [`../src/legacy/commands/feedback/add/add.command.ts`](../src/legacy/commands/feedback/add/add.command.ts)             | Quick feedback submission, legacy shell only (CLI-1946). Submits through the `submit_interfaces_feedback` RPC via supabase-js with a committed publishable key and prints the server-issued delete token once; profile-driven staging/production environments (production currently reuses staging). `-o` accepts `pretty\|json` only (no Go struct exists for the yaml/toml encoders). |
+| `feedback delete` | [`../src/legacy/commands/feedback/delete/delete.command.ts`](../src/legacy/commands/feedback/delete/delete.command.ts) | Deletes previously submitted feedback using the token printed by `feedback add` (CLI-2188). Previews the feedback text, then hard-deletes via the token-gated RLS policy (`x-feedback-token` + optional `x-feedback-project-ref` / `x-feedback-user-id` headers). `-o` accepts `pretty\|json` only (no Go struct exists for the yaml/toml encoders).                                    |
+| `logs`            | [`../src/next/commands/logs/logs.command.ts`](../src/next/commands/logs/logs.command.ts)                               | Streams local stack logs. No top-level `logs` command exists in the old Go CLI reference.                                                                                                                                                                                                                                                                                               |
+| `api`             | [`../src/next/commands/platform/api.command.ts`](../src/next/commands/platform/api.command.ts)                         | Low-level Management API client. It supersedes the old generated tree with explicit discovery via `supabase api routes` and execution via `supabase api request <route> [--method <METHOD>]`.                                                                                                                                                                                           |
+| `stack`           | [`../src/next/cli/root.ts`](../src/next/cli/root.ts)                                                                   | TS-only local runtime namespace exposing `stack start`, `stack stop`, `stack status`, `stack list`, and `stack update`. Top-level `start`, `stop`, and `status` remain aliases.                                                                                                                                                                                                         |
+| `branches switch` | [`../src/next/commands/branches/switch/switch.command.ts`](../src/next/commands/branches/switch/switch.command.ts)     | No direct Go equivalent. Updates local active-branch state so subsequent commands target the selected branch.                                                                                                                                                                                                                                                                           |
 
 ## Flag divergences from the Go reference
 

apps/cli/package.json

@@ -32,6 +32,7 @@
     "docs:spec": "bun scripts/generate-docs-spec.ts",
     "dev:next": "pnpm exec bun src/next/main.ts",
     "dev:legacy": "pnpm exec bun src/legacy/main.ts",
+    "gen:feedback-types": "pnpm dev:legacy -- gen types typescript --project-id xguihxuzqibwxjnimxev --schema public > src/shared/feedback/database.types.ts",
     "test": "nx run-many -t test:core test:e2e --projects=$npm_package_name",
     "test:core": "nx run-many -t test:unit test:integration --projects=$npm_package_name --coverage.enabled",
     "test:smoke": "bun run tests/smoke-test.ts",
@@ -59,6 +60,7 @@
     "@supabase/pg-topo": "1.0.0-alpha.5",
     "@supabase/process-compose": "workspace:*",
     "@supabase/stack": "workspace:*",
+    "@supabase/supabase-js": "^2.110.7",
     "@tsconfig/bun": "catalog:",
     "@types/bun": "catalog:",
     "@types/pg": "^8.21.0",
@@ -122,6 +124,7 @@
     "ignore": [
       "scripts/*.ts",
       "tests/**/*.ts",
+      "src/shared/feedback/database.types.ts",
       "src/shared/telemetry/event-catalog.ts"
     ],
     "ignoreBinaries": [

apps/cli/src/legacy/cli/root.ts

@@ -8,6 +8,7 @@ import { legacyConfigCommand } from "../commands/config/config.command.ts";
 import { legacyDbCommand } from "../commands/db/db.command.ts";
 import { legacyDomainsCommand } from "../commands/domains/domains.command.ts";
 import { legacyEncryptionCommand } from "../commands/encryption/encryption.command.ts";
+import { legacyFeedbackCommand } from "../commands/feedback/feedback.command.ts";
 import { legacyFunctionsCommand } from "../commands/functions/functions.command.ts";
 import { legacyGenCommand } from "../commands/gen/gen.command.ts";
 import { legacyInitCommand } from "../commands/init/init.command.ts";
@@ -69,6 +70,7 @@ export const legacyRoot = Command.make("supabase").pipe(
     legacyDbCommand,
     legacyDomainsCommand,
     legacyEncryptionCommand,
+    legacyFeedbackCommand,
     legacyFunctionsCommand,
     legacyGenCommand,
     legacyInitCommand,

apps/cli/src/legacy/commands/db/query/query.format.ts

@@ -573,13 +573,3 @@ export function legacyOrderedKeys(body: string): ReadonlyArray<string> {
   }
   return keys;
 }
-
-/** Agent-mode resolution: `yes`→true, `no`→false, `auto`→agent detected. */
-export function legacyResolveAgentMode(
-  agentFlag: "auto" | "yes" | "no",
-  aiToolName: Option.Option<string>,
-): boolean {
-  if (agentFlag === "yes") return true;
-  if (agentFlag === "no") return false;
-  return Option.isSome(aiToolName);
-}

apps/cli/src/legacy/commands/db/query/query.format.unit.test.ts

@@ -11,7 +11,6 @@ import {
   legacyOrderedKeys,
   legacyRenderJson,
   legacyRenderTablewriter,
-  legacyResolveAgentMode,
   legacyToCsv,
 } from "./query.format.ts";
 
@@ -353,15 +352,6 @@ describe("legacyFindNonFiniteJsonValue", () => {
   });
 });
 
-describe("legacyResolveAgentMode", () => {
-  it("honors the explicit flag and falls back to detection on auto", () => {
-    expect(legacyResolveAgentMode("yes", Option.none())).toBe(true);
-    expect(legacyResolveAgentMode("no", Option.some("cursor"))).toBe(false);
-    expect(legacyResolveAgentMode("auto", Option.some("cursor"))).toBe(true);
-    expect(legacyResolveAgentMode("auto", Option.none())).toBe(false);
-  });
-});
-
 describe("legacyBuildRlsAdvisory", () => {
   it("returns None when no tables are unprotected", () => {
     expect(Option.isNone(legacyBuildRlsAdvisory([]))).toBe(true);

apps/cli/src/legacy/commands/db/query/query.handler.ts

@@ -42,9 +42,9 @@ import {
   legacyOrderedKeys,
   legacyRenderJson,
   legacyRenderTablewriter,
-  legacyResolveAgentMode,
   legacyToCsv,
 } from "./query.format.ts";
+import { legacyResolveAgentMode } from "../../../shared/legacy-agent-mode.ts";
 
 /** The output formats `db query` selects: `json|table|csv`. */
 type LegacyResolvedFormat = "json" | "table" | "csv";