feat: add image rm command

Author: billyb2

pkg/cmd/image/image.go

@@ -16,7 +16,7 @@ func NewCmdImage() *cobra.Command {
 	}
 
 	cmd.AddCommand(NewCmdList())
-	//cmd.AddCommand(NewCmdRM())
+	cmd.AddCommand(NewCmdRM())
 
 	return cmd
 }

pkg/cmd/image/list.go

@@ -6,6 +6,8 @@ import (
 	"encoding/json"
 	"fmt"
 	"os"
+	"sort"
+	"strings"
 	"time"
 
 	"connectrpc.com/connect"
@@ -18,7 +20,6 @@ import (
 	"github.com/depot/cli/pkg/proto/depot/build/v1/buildv1connect"
 	"github.com/pkg/errors"
 	"github.com/spf13/cobra"
-	"sort"
 )
 
 func NewCmdList() *cobra.Command {
@@ -158,8 +159,14 @@ func fetchAllImages(ctx context.Context, projectID, token string, client buildv1
 				t := img.PushedAt.AsTime()
 				pushedAt = &t
 			}
+			// The API returns tags in format: registry.depot.dev/PROJECT:TAG
+			// We want to show them as PROJECT:TAG
+			tag := img.Tag
+			if strings.HasPrefix(tag, "registry.depot.dev/") {
+				tag = strings.TrimPrefix(tag, "registry.depot.dev/")
+			}
 			allImages = append(allImages, DepotImage{
-				Tag:       img.Tag,
+				Tag:       tag,
 				Digest:    img.Digest,
 				SizeBytes: img.SizeBytes,
 				PushedAt:  pushedAt,

pkg/cmd/image/rm.go

@@ -0,0 +1,108 @@
+package image
+
+import (
+	"context"
+	"fmt"
+	"strings"
+	"time"
+
+	"connectrpc.com/connect"
+	"github.com/depot/cli/pkg/api"
+	"github.com/depot/cli/pkg/helpers"
+	v1 "github.com/depot/cli/pkg/proto/depot/build/v1"
+	"github.com/pkg/errors"
+	"github.com/spf13/cobra"
+)
+
+func NewCmdRM() *cobra.Command {
+	var token string
+	var force bool
+	var digests []string
+
+	cmd := &cobra.Command{
+		Use:     "rm PROJECT --digest DIGEST [--digest DIGEST...]",
+		Aliases: []string{"remove", "delete"},
+		Short:   "Remove images from the registry by digest",
+		Long: `Remove images from the registry by digest.
+
+To find image digests, use 'depot image list --project PROJECT'.
+Images are referenced by their sha256 digest.`,
+		Example: `  # Delete a single image by digest
+  depot image rm myproject --digest sha256:abc123...
+  
+  # Delete multiple images
+  depot image rm myproject --digest sha256:abc123... --digest sha256:def456...
+  
+  # Force deletion without confirmation
+  depot image rm myproject --digest sha256:abc123... --force`,
+		Args: cobra.ExactArgs(1),
+		RunE: func(cmd *cobra.Command, args []string) error {
+			ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+			defer cancel()
+
+			projectID := args[0]
+
+			if len(digests) == 0 {
+				return errors.New("at least one --digest is required")
+			}
+
+			// Convert digests to the format ECR expects
+			var imageTags []string
+			for _, digest := range digests {
+				// Remove sha256: prefix if present and convert to sha256- format
+				digest = strings.TrimPrefix(digest, "sha256:")
+				imageTags = append(imageTags, "sha256-"+digest)
+			}
+
+			token, err := helpers.ResolveProjectAuth(context.Background(), token)
+			if err != nil {
+				return err
+			}
+
+			if token == "" {
+				return fmt.Errorf("missing API token, please run `depot login`")
+			}
+
+			totalImages := len(digests)
+			if !force {
+				fmt.Printf("Are you sure you want to delete %d image(s)? [y/N]: ", totalImages)
+				var response string
+				fmt.Scanln(&response)
+				if response != "y" && response != "Y" {
+					fmt.Println("Operation cancelled")
+					return nil
+				}
+			}
+
+			client := api.NewRegistryClient()
+
+			req := connect.NewRequest(&v1.DeleteImageRequest{
+				ProjectId: projectID,
+				ImageTags: imageTags,
+			})
+
+			req = api.WithAuthentication(req, token)
+			_, err = client.DeleteImage(ctx, req)
+			if err != nil {
+				return fmt.Errorf("failed to delete images: %v", err)
+			}
+
+			if totalImages == 1 {
+				fmt.Printf("Successfully deleted image with digest: %s\n", digests[0])
+			} else {
+				fmt.Printf("Successfully deleted %d images\n", totalImages)
+			}
+
+			return nil
+		},
+	}
+
+	flags := cmd.Flags()
+	flags.StringSliceVar(&digests, "digest", []string{}, "Image digest(s) to delete (can be specified multiple times)")
+	flags.StringVar(&token, "token", "", "Depot token")
+	flags.BoolVarP(&force, "force", "f", false, "Force deletion without confirmation")
+
+	cmd.MarkFlagRequired("digest")
+
+	return cmd
+}