From 79a0d2db9a53dde07288be96aab979a2474ebd61 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=95=85=E7=92=83?= <gujieye.gjy@alibaba-inc.com>
Date: Sun, 16 Aug 2026 23:48:19 +0800
Subject: [PATCH] fix(permission): drop explicit undefined return and make
 revoke --all e2e credential-independent

---
 packages/commands/src/commands/permission/shared.ts | 1 -
 packages/commands/tests/e2e/permission.e2e.test.ts  | 3 +++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/packages/commands/src/commands/permission/shared.ts b/packages/commands/src/commands/permission/shared.ts
index 2d2562d..77c99c0 100644
--- a/packages/commands/src/commands/permission/shared.ts
+++ b/packages/commands/src/commands/permission/shared.ts
@@ -48,7 +48,6 @@ export function validatePermissionChange(flags: {
     if (models.length > MAX_MODELS_PER_REQUEST)
       return `--model accepts at most ${MAX_MODELS_PER_REQUEST} models per call.`;
   }
-  return undefined;
 }
 
 /**
diff --git a/packages/commands/tests/e2e/permission.e2e.test.ts b/packages/commands/tests/e2e/permission.e2e.test.ts
index 027c587..f2d03e6 100644
--- a/packages/commands/tests/e2e/permission.e2e.test.ts
+++ b/packages/commands/tests/e2e/permission.e2e.test.ts
@@ -99,10 +99,13 @@ describe("e2e: permission", () => {
   });
 
   test("permission revoke --all 缺 --yes 拒绝执行", async () => {
+    // --yes 护栏在 run() 开头、任何网络调用之前抛出；带 dummy key 让用例不依赖环境凭证（否则 auth stage 先报 AUTH(3)）。
     const { stderr, exitCode } = await runCommandE2e(PERMISSION_ROUTES, [
       "permission",
       "revoke",
       "--all",
+      "--api-key",
+      "e2e-dummy-key",
     ]);
     expect(exitCode).toBe(2);
     expect(stderr).toContain("Refusing");