Thorough review pass

[austin-denoble]

Summary

A pre-v1.0 finalization pass over the CLI. A review across code, help text, docs, and release plumbing surfaced a handful of release-quality bugs plus several inconsistencies in the soon-to-be-frozen public surface. This PR fixes the bugs and settles the surface ahead of tagging v1.0.0. Internal-quality follow-ups (test coverage, service-interface refactors) are intentionally deferred to post-tag.

Bug fixes

• collection list: dimension/vector-count rendered via string(int32), emitting Unicode runes instead of numbers — now formatted with strconv.
• index configure --json: the flag was read but never registered, so JSON output and FailJSON error paths were unreachable. Flag is now registered.
• auth configure --project-id <unknown>: an unmatched project id fell through to a nil dereference (panic). Now fails cleanly with a clear message.

Help text & error-message corrections

• auth local-keys prune: dry-run hint referenced a nonexistent --yes flag.
• organization delete: stray doubled quote in an example.
• project update / project describe / organization update / api-key list: "no target set" hints pointed users at the wrong subcommand.
• index vector query: fixed a verbless required-input error string.

Public-surface finalization

• Deletion-protection flag: dropped the inconsistent -p/-d shorthands on index configure and index restore (collided with project/dimension shorthands elsewhere); the flag is now long-form-only across create/configure/restore.
• Default namespace: documented that namespace operations address the default namespace via __default__. Validated against the server contract (namespace ops require __default__ and reject ""; responses already render __default__ at the pinned API version), so no client-side rewriting was needed — help-text only. See pc index vector query: empty --namespace coerced to __default__ #85 for background.
• Deletion confirmation prompts: added a shared confirm.Deletion helper and routed all delete commands through it — consolidating three duplicated confirmDelete copies (organization/project/api-key) and adding prompts to index, collection, backup, namespace, and vector delete. Each gains a --skip-confirmation flag, and --json also bypasses the prompt. vector delete confirms only for --all-vectors; targeted --ids/--filter deletes proceed silently.
• --json docs: corrected the AGENTS.md claim — --json is explicit and is not inferred from TTY state (only color is auto-suppressed on a non-TTY); the login/target/auth interactive flows are the documented exception.

Deferred to post-tag

Test-coverage and refactor work that doesn't affect the public surface: vector-ops tests + service-interface refactor, api-key command tests, sdk credential-resolution tests, and whoami/logout de-duplication.

Testing

go build, go vet, go test ./..., and golangci-lint run all pass.

---

Note

Medium Risk
Adds confirmation gates and changes --json/TTY semantics across many delete commands, which can break non-interactive scripts that relied on silent deletes or implicit JSON; fixes are low-risk but behavior change is broad.

Overview
Pre-v1.0 pass that fixes several user-visible bugs, tightens help/errors, and standardizes destructive deletes and flag behavior.

Bug fixes: collection list now prints numeric dimension/vector counts via strconv instead of bogus Unicode from string(int32). index configure registers --json so JSON success/error paths work. auth configure --project-id with an unknown ID fails with a clear message instead of panicking.

Deletion UX: New shared confirm.Deletion replaces three duplicated confirm helpers and adds interactive prompts (plus --skip-confirmation; --json skips prompts) on index, collection, backup, namespace, and API key/org/project deletes. vector delete only prompts for --all-vectors.

Public surface / docs: --deletion-protection is long-form only on configure/restore (removed -p/-d shorthands). Namespace help documents __default__ for the default namespace. AGENTS.md clarifies --json is explicit (not TTY-inferred), except login/target/auth. Various hint strings and examples corrected; e2e teardowns pass --skip-confirmation on deletes.

^{Reviewed by Cursor Bugbot for commit cd109e5. Bugbot is set up for automated code reviews on this repo. Configure here.}