19e9f5bc88
Remove the typed authorization phrase and the --yes/-y auto-confirm path so every real release must confirm y/N in an interactive terminal. Reject --yes with a clear error so old muscle memory cannot skip the proceed prompt.
27 lines
1.2 KiB
JavaScript
27 lines
1.2 KiB
JavaScript
/**
|
|
* FNXC:ReleaseScript 2026-07-08-11:20:
|
|
* The former operator-held environment signal is removed. An env var is self-grantable (an agent can `export` it) and survives into non-interactive shells, so it never proved a live human.
|
|
*
|
|
* FNXC:ReleaseScript 2026-08-03-02:56:
|
|
* The typed "authorized" phrase is removed. Real releases are gated by the operator y/N confirmation
|
|
* in scripts/release.mjs. Dry-runs publish nothing and need no authorization. Agents must not run
|
|
* real releases (AGENTS.md → Releasing); that is instruction, not a typed-phrase lock.
|
|
*
|
|
* FNXC:ReleaseScript 2026-08-03-02:57:
|
|
* `--yes` is also removed; every real release requires interactive confirmation.
|
|
*/
|
|
|
|
/**
|
|
* Pure decision for release authorization bookkeeping. Dry-runs bypass; real releases are always
|
|
* allowed to proceed to the script's interactive confirm() step.
|
|
*
|
|
* @param {{ dryRun: boolean }} options
|
|
* @returns {{ authorized: boolean, mode: "dry-run-bypass" | "operator-confirm" }}
|
|
*/
|
|
export function evaluateReleaseAuthorization({ dryRun }) {
|
|
if (dryRun === true) {
|
|
return { authorized: true, mode: "dry-run-bypass" };
|
|
}
|
|
return { authorized: true, mode: "operator-confirm" };
|
|
}
|