From 2eb52a5bc3ae9e5299d4f8195fbb5918df87f0e6 Mon Sep 17 00:00:00 2001
From: Haitao Pan <manbuzhe2009@qq.com>
Date: Tue, 12 May 2026 18:30:22 +0800
Subject: [PATCH] Fail release preflight when Apple signing is missing

---
 scripts/ci/platform_preflight.sh | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/scripts/ci/platform_preflight.sh b/scripts/ci/platform_preflight.sh
index ff78dc27..7637c6ad 100644
--- a/scripts/ci/platform_preflight.sh
+++ b/scripts/ci/platform_preflight.sh
@@ -30,6 +30,15 @@ set_build_state() {
   fi
 }
 
+fail_release_preflight() {
+  local reason="$1"
+
+  emit_output "should_build_platform" "false"
+  emit_output "skip_reason" "$reason"
+  echo "Release preflight failed for $platform: $reason" >&2
+  exit 1
+}
+
 case "$platform" in
   linux)
     set_build_state "true" ""
@@ -52,6 +61,9 @@ case "$platform" in
     done
 
     if [[ "${#missing[@]}" -gt 0 ]]; then
+      if [[ "$should_release" == "true" ]]; then
+        fail_release_preflight "missing macOS signing secrets: ${missing[*]}"
+      fi
       set_build_state "false" "missing macOS signing secrets: ${missing[*]}"
       exit 0
     fi
@@ -79,8 +91,7 @@ case "$platform" in
     done
 
     if [[ "${#missing[@]}" -gt 0 ]]; then
-      set_build_state "false" "missing iOS signing secrets: ${missing[*]}"
-      exit 0
+      fail_release_preflight "missing iOS signing secrets: ${missing[*]}"
     fi
 
     set_build_state "true" ""