Distillation

Date: Aug 7, 2026

• 🟡 (15:57) The BYK review re-request finally succeeded — the fix (sending reviewers as a real JSON array instead of a JSON-encoded string) resolved the earlier HTTP 422. BYK is now in requested_reviewers on the craft PR (issue-864-vercel-target), but PR still shows mergeStateStatus: BLOCKED. BYK's CHANGES_REQUESTED was on an outdated commit; assistant was checking whether the fresh review request clears the merge gate.
• 🟡 (15:57) PR #865 on getsentry/craft: "feat(targets): add vercel deploy target", author jared-outpost[bot], state open, Closes #864, created 2026-08-06T13:35:55Z, updated 2026-08-07T15:55:4xZ. Repo: getsentry/craft — "The universal Sentry release CLI 🚀".
• 🟡 (15:57) PR #865 adds a release-gated vercel target — the vercel equivalent of the existing cloudflare target (#843), superseding the cloudflare approach for the CLI docs site (#842).
• 🟡 (15:57) New file src/targets/vercel.ts, modeled directly on cloudflare.ts: extracts a vercel.zip (or *-vercel.zip) artifact and shells out to vercel deploy --prod --yes --prebuilt --meta craftRelease=<version>.
• 🟡 (15:57) prebuilt defaults to true (docs site is built in CI; release just promotes the prebuilt .vercel/output); set prebuilt: false to build from source.
• 🔴 (15:57) Design decision in PR #865: VERCEL_TOKEN is the only secret — passed via the environment, never on argv. Optional VERCEL_ORG_ID / VERCEL_PROJECT_ID identifiers are forwarded through the env when set so the deploy links to the right project non-interactively.
• 🔴 (15:57) Design decision in PR #865: rejects config values that look like ${ENV} expansions (defense against spawnProcess expanding a config string into a secret), and hard-guards against dry-run so a remote deploy NEVER runs in dry-run/worktree mode.
• 🟡 (15:57) vercel registered in TARGET_MAP (src/targets/index.ts); vercel CLI bundled in the Dockerfile pinned at vercel@58.7.1, next to the pinned wrangler install.
• 🟡 (15:57) Docs: new docs/src/content/docs/targets/vercel.md + linked from the targets overview.
• 🟡 (15:57) Release-gating: publish() only runs during craft publish, so deployed docs stay in sync with the released version (same guarantee as gh-pages); composes with prefixed release tags (#844) — target reads no tag/branch state itself, per-product .craft.yml invocation (cli@x.y.z) drives it unchanged.
• 🟡 (15:57) Tests: new src/targets/__tests__/vercel.test.ts with 17 tests (mirrors the cloudflare test) covering config defaults/overrides, required-secret enforcement, env-expansion rejection, argv construction, org/project env forwarding, workingDir, artifact count errors, and dry-run safety. pnpm test, pnpm run typecheck, eslint, and prettier --check all pass locally. PR has <!-- jared:ci-checks=3 -->.