Fix dry-run+yes delete gate, add publish tests, scrub upstream docs

- Block DELETE when --dry-run is unsupported even if --yes is set
- Run typecheck and unit tests in the release-please publish job
- Remove internal api-server, Linear, and monorepo references from docs

Author: cursoragent

.github/workflows/release-please.yml

@@ -61,6 +61,12 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Typecheck
+        run: pnpm test:typescript
+
+      - name: Unit tests
+        run: pnpm test
+
       - name: Build the package
         run: pnpm build
 

AGENTS.md

@@ -4,10 +4,9 @@ This package is the `amp` CLI: the human- and agent-facing surface over the
 Amplitude Developer API. It is vended publicly as a standalone repo, so it is
 held to a higher bar than internal code.
 
-The OpenAPI spec in the parent `api-server` package is the contract; this CLI is
-a thin, generated client over it. Before changing command behavior, auth, or the
-generated manifest, read the parent `../AGENTS.md` and
-`../docs/golden-standards.md`.
+The OpenAPI spec bundled in `openapi/bundled/` is the contract; this CLI is a
+thin, generated client over it. Do not hand-edit `src/generated/` or
+`openapi/bundled/` — regenerate those artifacts when the API contract changes.
 
 ## Tenets
 

docs/cli.md

@@ -126,11 +126,10 @@ Manual checklist:
 5. **Flags write** — create → get → update description → archive dry-run → archive
 6. **Events** — list → create → update → (optional delete with `--yes`)
 
-Known upstream issue: `flags update --enabled false` fails for deployment-less
-flags ([MCP-414](https://linear.app/amplitude/issue/MCP-414)). Avoid that path
-in smoke tests until fixed.
+Known issue: `flags update --enabled false` fails for deployment-less flags.
+Avoid that path in smoke tests until fixed.
 
-## Local api-server
+## Local API server
 
 Point at a running local server:
 
@@ -142,7 +141,5 @@ amp --base-url http://localhost:3036 context
 
 Do not edit by hand:
 
-- `src/generated/cli-manifest.ts` — from `api-server/scripts/generate-cli-manifest.ts`
-- `openapi/bundled/*` — copied from `api-server/openapi/bundled/`
-
-Regenerate via `pnpm build:openapi` in the parent `api-server` package.
+- `src/generated/cli-manifest.ts`
+- `openapi/bundled/*`

src/run.test.ts

@@ -84,6 +84,17 @@ describe('deleteGateDecision', () => {
       }),
     ).toBe('block');
   });
+
+  it('does not let --yes override an unsupported --dry-run', () => {
+    expect(
+      deleteGateDecision({
+        ...base,
+        dryRunRequested: true,
+        dryRunSupported: false,
+        yes: true,
+      }),
+    ).toBe('block');
+  });
 });
 
 describe('runOperation', () => {
@@ -285,4 +296,16 @@ describe('runOperation', () => {
     ).rejects.toThrow('does not support --dry-run');
     expect(fetchMock).not.toHaveBeenCalled();
   });
+
+  it('refuses an unsupported --dry-run even when --yes is set', async () => {
+    await expect(
+      runOperation(deleteWithoutDryRun, {
+        token: 'amp_test',
+        id: 'w_1',
+        'dry-run': true,
+        yes: true,
+      }),
+    ).rejects.toThrow('does not support --dry-run');
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
 });

src/run.ts

@@ -38,6 +38,9 @@ export function deleteGateDecision(options: {
   if (!options.isDelete) {
     return 'proceed';
   }
+  if (options.dryRunRequested && !options.dryRunSupported) {
+    return options.isTTY ? 'confirm' : 'block';
+  }
   if (options.dryRunRequested && options.dryRunSupported) {
     return 'proceed';
   }
@@ -70,7 +73,7 @@ async function ensureDeleteAllowed(
   if (decision === 'block') {
     if (dryRunRequested && !dryRunSupported) {
       throw new Error(
-        `\`amp ${operation.command.join(' ')}\` does not support --dry-run. Pass --yes to confirm, or run it in an interactive terminal.`,
+        `\`amp ${operation.command.join(' ')}\` does not support --dry-run. Remove --dry-run and pass --yes to confirm, or run it in an interactive terminal.`,
       );
     }
     throw new Error(