vercel / vercel/vercel-plugin

Vercel connector deploy create/read authority split and hidden deploy schema

Open
#164 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
287
Forks
58
Avg merge
1d 1h
Merged PRs (30d)
17

Description

Summary

The Vercel connector can return a successful-looking preview deployment receipt from deploy_to_vercel, while the connector's project/deployment read actions cannot resolve the same object in the same confirmed team scope.

There is also a tool-schema mismatch: the exposed deploy_to_vercel schema presents no arguments, while the runtime backend requires target, name, and files[] with file/data strings.

Environment

  • Vercel team: semyon-s-nakama
  • Plan: Hobby
  • Team scope resolved via list_teams
  • Observed: 2026-09-03

Minimal reproduction

  1. list_projects(team) -> []
  2. Call deploy_to_vercel for a preview deployment.
  3. Runtime validation reveals hidden required fields: target, name, files.
  4. Submit a minimal valid preview deployment.
  5. Connector returns deployment ID + hostname.
  6. Read back via the same confirmed team scope.

Observed for the full canary deployment:

  • deployment ID: dpl_Bomj4zS4ym4x4JHwTJ8cexdVSijx
  • hostname: vercel-ci-watcher-canary-c0c30o4ry-semyon-s-nakama.vercel.app
  • list_projects(team id) -> []
  • list_projects(team slug) -> []
  • get_project("vercel-ci-watcher-canary", team) -> 404
  • get_deployment(deployment id, team) -> 404
  • get_deployment(hostname, team) -> 404
  • build-log readback -> 404

Expected

A deployment returned by the connector create path should be resolvable by connector read paths under the same authorized team, or the connector should explicitly document/return a different authority/scope.

The public tool schema should also expose the arguments required by the runtime backend.

Public evidence

Sanitized full reproduction and field notes:
https://github.com/TeaShaman-cyber/vercel-cookbook/issues/4

Canary checkpoint:
https://github.com/TeaShaman-cyber/vercel-cookbook/issues/1#issuecomment-5523271965

Current classification on our side: INCONCLUSIVE_CONNECTOR_BOUNDARY, not runtime failure, because create and read surfaces disagree about the object state.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the deploy_to_vercel tool schema and the connector's deployment create/read entry points; reproduce the listed team-scoped calls and compare their authority and returned fields. Done means the public schema exposes target, name, and files[], and a created deployment is readable under the same team scope or clearly reports its different authority.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
api, backend-api-design
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.