19e9f5bc88
Remove the typed authorization phrase and the --yes/-y auto-confirm path so every real release must confirm y/N in an interactive terminal. Reject --yes with a clear error so old muscle memory cannot skip the proceed prompt.
56 lines
2.3 KiB
JavaScript
56 lines
2.3 KiB
JavaScript
import test from "node:test";
|
|
import assert from "node:assert/strict";
|
|
import { readFileSync } from "node:fs";
|
|
import { URL } from "node:url";
|
|
|
|
import { evaluateReleaseAuthorization } from "../lib/release-authorization-gate.mjs";
|
|
|
|
test("dry-run is authorized because it publishes nothing", () => {
|
|
assert.deepEqual(evaluateReleaseAuthorization({ dryRun: true }), {
|
|
authorized: true,
|
|
mode: "dry-run-bypass",
|
|
});
|
|
});
|
|
|
|
test("real releases are authorized and proceed to operator confirm", () => {
|
|
assert.deepEqual(evaluateReleaseAuthorization({ dryRun: false }), {
|
|
authorized: true,
|
|
mode: "operator-confirm",
|
|
});
|
|
});
|
|
|
|
test("release script no longer prompts for a typed authorization phrase", () => {
|
|
const source = readFileSync(new URL("../release.mjs", import.meta.url), "utf8");
|
|
const dryRunExitIndex = source.indexOf("if (DRY_RUN) {");
|
|
const confirmIndex = source.indexOf("Proceed with ${CHANNEL} release");
|
|
const versionBumpIndex = source.indexOf('run("pnpm release:version")');
|
|
|
|
assert.notEqual(dryRunExitIndex, -1, "release.mjs should retain the dry-run early exit");
|
|
assert.notEqual(confirmIndex, -1, "release.mjs should still confirm before mutation");
|
|
assert.notEqual(versionBumpIndex, -1, "release.mjs should still run the version bump after gates");
|
|
assert.ok(dryRunExitIndex < confirmIndex, "dry-run must exit before the confirm prompt");
|
|
assert.ok(confirmIndex < versionBumpIndex, "operator confirm must precede the first mutation");
|
|
assert.ok(
|
|
!source.includes("isReleaseAuthorizationPhrase"),
|
|
"typed-phrase check must be fully removed from release.mjs",
|
|
);
|
|
assert.ok(
|
|
!source.includes("RELEASE_AUTHORIZATION_PHRASE"),
|
|
"authorization phrase constant must not be used in release.mjs",
|
|
);
|
|
assert.ok(
|
|
!/Type "authorized"/i.test(source),
|
|
"release.mjs must not prompt the operator to type authorized",
|
|
);
|
|
});
|
|
|
|
test("env vars no longer influence release authorization", () => {
|
|
const source = readFileSync(
|
|
new URL("../lib/release-authorization-gate.mjs", import.meta.url),
|
|
"utf8",
|
|
);
|
|
assert.ok(!/FUSION_RELEASE_AUTHORIZED/.test(source), "the env signal must be fully removed");
|
|
assert.ok(!/process\.env/.test(source), "the gate must not read process env");
|
|
assert.ok(!/RELEASE_AUTHORIZATION_PHRASE/.test(source), "typed phrase must be removed from the gate");
|
|
});
|