fix: abort delete in non-interactive mode unless --force is set

debidong · debidong · commit b5bb39d4533f · 2026-05-14T12:18:22.000+08:00
Previously, confirmAction returned true when stdin was not a TTY,
allowing destructive deletes to proceed silently in CI/cron/pipes.
Now it returns false, requiring explicit --force for non-interactive use.
diff --git a/internal/cli/args.go b/internal/cli/args.go
@@ -49,7 +49,7 @@ func confirmAction(cmd *cobra.Command, message string) bool {
 		return true
 	}
 	if !term.IsTerminal(int(os.Stdin.Fd())) {
-		return true
+		return false
 	}
 	_, _ = fmt.Fprintf(cmd.OutOrStdout(), "%s [y/N]: ", message)
 	scanner := bufio.NewScanner(cmd.InOrStdin())

Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,7 @@ func confirmAction(cmd *cobra.Command, message string) bool {`
`49`	`49`	`return true`
`50`	`50`	`}`
`51`	`51`	`if !term.IsTerminal(int(os.Stdin.Fd())) {`
`52`		`- return true`
	`52`	`+ return false`
`53`	`53`	`}`
`54`	`54`	`_, _ = fmt.Fprintf(cmd.OutOrStdout(), "%s [y/N]: ", message)`
`55`	`55`	`scanner := bufio.NewScanner(cmd.InOrStdin())`