cli/destroy: Require confirmation to destroy all resources for app

.changelog/1232.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/destroy: Require confirmation before destroying all resources
+```

internal/cli/destroy.go

@@ -14,6 +14,8 @@ import (
 
 type DestroyCommand struct {
  *baseCommand
+
+ confirm bool
 }
 
 func (c *DestroyCommand) Run(args []string) int {
@@ -27,6 +29,11 @@ func (c *DestroyCommand) Run(args []string) int {
  }
 
  err := c.DoApp(c.Ctx, func(ctx context.Context, app *clientpkg.App) error {
+ if !c.confirm {
+ app.UI.Output("Destroying app %q requires confirmation with `-auto-approve`.", app.Ref().GetApplication(), terminal.WithWarningStyle())
+ return nil
+ }
+
  if err := app.Destroy(ctx, &pb.Job_DestroyOp{
  Target: &pb.Job_DestroyOp_Workspace{
  Workspace: &empty.Empty{},
@@ -52,6 +59,13 @@ func (c *DestroyCommand) Run(args []string) int {
 
 func (c *DestroyCommand) Flags() *flag.Sets {
  return c.flagSet(flagSetOperation, func(set *flag.Sets) {
+ f := set.NewSet("Command Options")
+ f.BoolVar(&flag.BoolVar{
+ Name: "auto-approve",
+ Target: &c.confirm,
+ Default: false,
+ Usage: "Confirm destroying all resources.",
+ })
  })
 }