Skip to content

Require explicit interactive consent before self-updating status runs#15

Merged
NagyVikt merged 1 commit intomainfrom
agent/codex/20260411-134802-webubusiness-gmail-com-self-update-prompt
Apr 11, 2026
Merged

Require explicit interactive consent before self-updating status runs#15
NagyVikt merged 1 commit intomainfrom
agent/codex/20260411-134802-webubusiness-gmail-com-self-update-prompt

Conversation

@NagyVikt
Copy link
Copy Markdown
Collaborator

Automated by scripts/agent-branch-finish.sh (PR flow).

Users reported accidental updates when no input was intended. The update check now always prompts in interactive terminals and only honors MUSAFETY_AUTO_UPDATE_APPROVAL in non-interactive runs.

Constraint: Keep non-interactive automation support for CI/scripting
Rejected: Remove env-based auto-approval entirely | would break existing unattended workflows
Confidence: high
Scope-risk: narrow
Reversibility: clean
Directive: Keep interactive update decisions explicit unless a user passes a command flag for opt-in behavior
Tested: npm test (43/43); pseudo-interactive run with MUSAFETY_AUTO_UPDATE_APPROVAL=yes showed prompt and skipped on blank input
Not-tested: Real human tty keystroke path in all terminal emulators
@NagyVikt NagyVikt merged commit 26c0ffa into main Apr 11, 2026
7 checks passed
@NagyVikt NagyVikt deleted the agent/codex/20260411-134802-webubusiness-gmail-com-self-update-prompt branch April 11, 2026 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant