Added --dry-run option for write commands

Author: edumansky

README.md

@@ -145,6 +145,7 @@ webex cc agents list --output csv > agents.csv
 | `--output json\|table\|csv\|raw` | Output format (default: json) |
 | `--debug` | Show HTTP request/response details |
 | `--paginate` | Auto-paginate list results |
+| `--dry-run` | Print write requests without executing them |
 
 ## Configuration
 

cmd/root.go

@@ -1,11 +1,13 @@
 package cmd
 
 import (
+	"errors"
 	"fmt"
 	"os"
 
 	"github.com/Cloverhound/webex-cli/internal/appconfig"
 	"github.com/Cloverhound/webex-cli/internal/auth"
+	"github.com/Cloverhound/webex-cli/internal/client"
 	"github.com/Cloverhound/webex-cli/internal/config"
 	"github.com/Cloverhound/webex-cli/internal/output"
 	"github.com/spf13/cobra"
@@ -21,6 +23,10 @@ var rootCmd = &cobra.Command{
 		debug, _ := cmd.Flags().GetBool("debug")
 		config.SetDebug(debug)
 
+		// Dry-run mode
+		dryRun, _ := cmd.Flags().GetBool("dry-run")
+		config.SetDryRun(dryRun)
+
 		// Output format
 		format, _ := cmd.Flags().GetString("output")
 		output.SetFormat(format)
@@ -110,7 +116,11 @@ func Execute() error {
 	stripRequiredOrgID(rootCmd)
 	// Hide per-command org flags so only --organization is visible in help.
 	hideOrgFlags(rootCmd)
-	return rootCmd.Execute()
+	err := rootCmd.Execute()
+	if errors.Is(err, client.ErrDryRun) {
+		return nil
+	}
+	return err
 }
 
 // stripRequiredOrgID recursively removes the "required" annotation from --orgid and --org-id flags.
@@ -146,6 +156,7 @@ func init() {
 	rootCmd.PersistentFlags().String("output", "json", "Output format: json, table, csv, raw")
 	rootCmd.PersistentFlags().Bool("debug", false, "Enable debug logging of HTTP requests")
 	rootCmd.PersistentFlags().Bool("paginate", false, "Auto-paginate list results")
+	rootCmd.PersistentFlags().Bool("dry-run", false, "Print write requests without executing them")
 	rootCmd.PersistentFlags().String("user", "", "Use a specific authenticated user (email)")
 	rootCmd.PersistentFlags().String("organization", "", "Override organization ID for this command")
 

internal/client/client.go

@@ -1,6 +1,7 @@
 package client
 
 import (
+	"errors"
 	"fmt"
 	"io"
 	"net/http"
@@ -10,6 +11,9 @@ import (
 	"github.com/Cloverhound/webex-cli/internal/config"
 )
 
+// ErrDryRun is returned when a write operation is intercepted by --dry-run mode.
+var ErrDryRun = errors.New("dry run: no changes made")
+
 // Do executes an HTTP request. On a 401, it attempts to refresh the token and retry once.
 func Do(req *Request) ([]byte, int, error) {
 	body, status, err := doOnce(req)
@@ -83,6 +87,20 @@ func doOnce(req *Request) ([]byte, int, error) {
 		}
 	}
 
+	// Dry-run: intercept write operations before making the HTTP call
+	if config.DryRun() && isWriteMethod(req.method) {
+		fmt.Fprintf(os.Stderr, "[DRY RUN] %s %s\n", req.method, url)
+		for k, v := range httpReq.Header {
+			if k != "Authorization" {
+				fmt.Fprintf(os.Stderr, "[DRY RUN]   %s: %s\n", k, strings.Join(v, ", "))
+			}
+		}
+		if req.bodyRaw != "" {
+			fmt.Fprintf(os.Stderr, "[DRY RUN]   Body: %s\n", req.bodyRaw)
+		}
+		return nil, 0, ErrDryRun
+	}
+
 	resp, err := http.DefaultClient.Do(httpReq)
 	if err != nil {
 		return nil, 0, fmt.Errorf("executing request: %w", err)
@@ -111,3 +129,12 @@ func truncate(s string, n int) string {
 	}
 	return s[:n] + "..."
 }
+
+// isWriteMethod returns true for HTTP methods that modify data.
+func isWriteMethod(method string) bool {
+	switch method {
+	case http.MethodPost, http.MethodPut, http.MethodDelete, http.MethodPatch:
+		return true
+	}
+	return false
+}

internal/config/config.go

@@ -9,6 +9,7 @@ var (
 	token          string
 	debug          bool
 	paginate       bool
+	dryRun         bool
 	orgID          string // UUID format
 	orgIDBase64    string // base64 Webex format
 	TokenRefresher func() (string, error)
@@ -23,6 +24,9 @@ func Debug() bool     { return debug }
 func SetPaginate(p bool) { paginate = p }
 func Paginate() bool     { return paginate }
 
+func SetDryRun(d bool) { dryRun = d }
+func DryRun() bool     { return dryRun }
+
 // SetOrgID stores the org ID in both UUID and base64 formats.
 // Accepts either format as input and derives the other.
 func SetOrgID(id string) {

skill/SKILL.md

@@ -55,6 +55,7 @@ Aliases: `devices` for `device`, `meeting` for `meetings`, `msg` for `messaging`
 - `--output json|table|csv|raw` — Output format (default: json)
 - `--debug` — Show HTTP request/response details
 - `--paginate` — Auto-paginate list results
+- `--dry-run` — Print write requests (POST/PUT/DELETE/PATCH) without executing them; read operations still run normally
 
 ## Contact Center `--orgid` Handling