flowviant 0.28.0 → 0.28.1

package/bin/lib/deploy.mjs

@@ -60,14 +60,19 @@ export async function reportDeployConfig(repoRoot) {
   const targets = readDeployConfig(repoRoot);
   const json = JSON.stringify(targets);
   if (json === lastConfigJson) return;
-  // Strip commands/secrets before the server sees the config (metadata only).
+  // Scrub command strings before the server sees them — a command line can embed
+  // an internal host or a synced secret. Only redacted metadata leaves the box.
+  const scrubCmds = (o) =>
+    o && typeof o === 'object'
+      ? Object.fromEntries(Object.entries(o).map(([k, v]) => [k, scrub(String(v ?? ''))]))
+      : o;
   const meta = targets.map((t) => ({
     id: t.id,
     label: t.label,
     provider: t.provider || 'cloudflare',
-    command: t.command,
-    build: t.build,
-    commands: t.commands,
+    command: scrub(String(t.command ?? '')),
+    build: t.build ? scrub(String(t.build)) : t.build,
+    commands: scrubCmds(t.commands),
     healthcheck: t.healthcheck,
     healthStatus: t.healthStatus,
     pushSecrets: t.pushSecrets,
@@ -100,6 +105,11 @@ function run(command, { cwd, env, input }) {
         /* already gone */
       }
     }, 30 * 60_000);
+    // A broken pipe (child exits before draining stdin — e.g. a fast-failing
+    // `wrangler secret put`) surfaces as an ASYNC 'error' on the stdin stream,
+    // which the try/catch below can't catch. Without a listener it's an uncaught
+    // exception that kills the whole daemon. Swallow it.
+    child.stdin.on('error', () => {});
     if (input != null) {
       try {
         child.stdin.write(input);
@@ -129,7 +139,7 @@ async function verifyHealth(url, status) {
   for (let i = 0; i < 4; i++) {
     try {
       const res = await fetch(url, { signal: AbortSignal.timeout(10_000), redirect: 'manual' });
-      if (res.status === status) return true;
+      if (res.status === Number(status)) return true; // coerce — a string "200" in deploy.json must still match
     } catch {
       /* not up yet */
     }
@@ -148,6 +158,10 @@ const claiming = new Set(); // in-flight guard (single-flight per daemon process
 export function processDeployJobs(jobs, ctx) {
   if (!Array.isArray(jobs) || !jobs.length) return;
   for (const job of jobs) {
+    // Defend against a malformed roster element — `job.id` on a null would throw
+    // synchronously here (outside the per-job try below) and wedge the whole
+    // reconcile loop, since this runs unguarded from the fleet tick.
+    if (!job || typeof job.id !== 'string') continue;
     if (claiming.has(job.id)) continue;
     claiming.add(job.id);
     void (async () => {
@@ -185,6 +199,7 @@ export function processDeployJobs(jobs, ctx) {
 
 async function runDeploy(job, target, ctx) {
   const env = { ...process.env, ...deployCreds() }; // inject infra creds; never a file
+  delete env.FLEET_TOKEN; // the deploy command has no business reading it; keep it out of a command that might echo its env
   const logs = [];
   // Rollback is a single wrangler command; deploy is build → secrets → deploy.
   if (job.kind === 'rollback') {

package/bin/lib/fleet.mjs

@@ -295,6 +295,7 @@ export async function runFleetDaemon() {
   };
   const processMergeJobs = (jobs) => {
     for (const job of jobs ?? []) {
+      if (!job || typeof job.id !== 'string') continue; // a null element would wedge the loop
       if (merging.has(job.id)) continue;
       merging.add(job.id);
       (async () => {
@@ -374,6 +375,7 @@ export async function runFleetDaemon() {
   const cleaning = new Set();
   const processCleanupJobs = (jobs) => {
     for (const job of jobs ?? []) {
+      if (!job || typeof job.id !== 'string') continue; // a null element would wedge the loop
       if (cleaning.has(job.id)) continue;
       cleaning.add(job.id);
       (async () => {
@@ -889,7 +891,10 @@ export async function runFleetDaemon() {
     // turn) until we report reground-done; the bare drain flushes anything
     // whose earlier mint failed.
     enqueueSweep(roster.codeMapJob);
-    for (const j of roster.regroundJobs ?? []) enqueueReground(j.intentId, j.prUrl, j.title);
+    for (const j of roster.regroundJobs ?? []) {
+      if (!j || typeof j.intentId !== 'string') continue; // a null element would throw + wedge the loop
+      enqueueReground(j.intentId, j.prUrl, j.title);
+    }
     void drainWiki();
 
     // Env sync tick: register/bootstrap/wrap/rotate/sync as the roster block

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flowviant",
-  "version": "0.28.0",
+  "version": "0.28.1",
   "description": "Run your own Claude Code as headless build agents for Flowviant — on your own credentials. Claims dispatched work, opens PRs, captures review evidence, and routes questions back to you.",
   "type": "module",
   "bin": {
@@ -30,7 +30,7 @@
   "homepage": "https://flowviant.com",
   "repository": {
     "type": "git",
-    "url": "https://github.com/flowviant/cli.git"
+    "url": "git+https://github.com/flowviant/cli.git"
   },
   "license": "MIT",
   "bugs": {