fix(management): require explicit opt-in marker for production store deploy #121

Merged
yuris merged 1 commit from fix/79-store-deploy-guard into main 2026-09-28 20:53:12 +00:00
Owner

Resolves #79

  • Require STORE_DEPLOY_ENABLED === "true" before dispatching production store deploy in requestStoreDeploy.
  • Decline dispatch and log visible warning via console.warn when URL and token are present but opt-in is not enabled.
  • Added and updated tests in deploy.test.ts covering unconfigured, configured without opt-in, configured with opt-in false, and configured with opt-in true.
Resolves #79 - Require `STORE_DEPLOY_ENABLED === "true"` before dispatching production store deploy in `requestStoreDeploy`. - Decline dispatch and log visible warning via `console.warn` when URL and token are present but opt-in is not enabled. - Added and updated tests in `deploy.test.ts` covering unconfigured, configured without opt-in, configured with opt-in false, and configured with opt-in true.
fix(management): require explicit opt-in marker for production store deploy (#79)
All checks were successful
Checks / test @garage/catalog (pull_request) Successful in 1m19s
Checks / test garage (pull_request) Successful in 1m21s
Checks / test garage-store (pull_request) Successful in 1m18s
Checks / typecheck apps/management (pull_request) Successful in 1m35s
Checks / lint (biome) (pull_request) Successful in 11s
Checks / typecheck apps/store (pull_request) Successful in 1m20s
042047030d
yuris left a comment

VERDICT: approve

  • Requires explicit STORE_DEPLOY_ENABLED=true before dispatching production deploy workflows.
  • Logs visible warning when credentials are present but opt-in is absent, preventing accidental releases from non-production environments.
  • Unconfigured environments remain silent no-ops.
  • Comprehensive test coverage in deploy.test.ts.
VERDICT: approve - Requires explicit `STORE_DEPLOY_ENABLED=true` before dispatching production deploy workflows. - Logs visible warning when credentials are present but opt-in is absent, preventing accidental releases from non-production environments. - Unconfigured environments remain silent no-ops. - Comprehensive test coverage in `deploy.test.ts`.
yuris merged commit 5497ae6422 into main 2026-09-28 20:53:12 +00:00
yuris changed title from fix(management): require explicit opt-in marker for production store deploy (#79) to fix(management): require explicit opt-in marker for production store deploy 2026-09-28 21:09:18 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
yuris/garage!121
No description provided.