feat(cli): project protection customer support code visibility by brookemosby · Pull Request #15860 · vercel/vercel

brookemosby · 2026-04-07T16:30:59Z

Isolated CLI change: customer-support deployment protection only.

Merge independently; combine with other brooke/cli-236-protection-* PRs for full parity.

changeset-bot · 2026-04-07T16:31:06Z

🦋 Changeset detected

Latest commit: ac14fa1

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
vercel	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

github-actions · 2026-04-07T16:35:01Z

🧪 Unit Test Strategy

Comparing: bf325de → ac14fa1 (view diff)

Strategy: Affected packages only

✅ Only testing packages that have been modified or depend on modified packages.

Affected packages - 1 (3%)

vercel

Unaffected packages - 39 (98%)

@vercel-internals/get-package-json
@vercel/backends
@vercel/build-utils
@vercel/cervel
@vercel/cli-auth
@vercel/client
@vercel/config
@vercel/detect-agent
@vercel/edge
@vercel/elysia
@vercel/error-utils
@vercel/express
@vercel/fastify
@vercel/firewall
@vercel/frameworks
@vercel/fs-detectors
@vercel/functions
@vercel/gatsby-plugin-vercel-builder
@vercel/go
@vercel/h3
@vercel/hono
@vercel/hydrogen
@vercel/koa
@vercel/nestjs
@vercel/next
@vercel/node
@vercel/oidc
@vercel/oidc-aws-credentials-provider
@vercel/python
@vercel/python-analysis
@vercel/redwood
@vercel/related-projects
@vercel/remix-builder
@vercel/routing-utils
@vercel/ruby
@vercel/rust
@vercel/static-build
@vercel/static-config
examples

Results

Unit tests: Only affected packages will run unit tests
E2E tests: Running in parallel via E2E Tests workflow
Type checks: Only affected packages will run type checks

This comment is automatically generated based on the affected testing strategy

vercel · 2026-04-07T16:36:08Z

Low Risk — New CLI subcommand for project protection settings with tests.

command.ts: added protectionSubcommand definition with options and examples
protection.ts: new CLI handler for enable/disable customer support code visibility
protection.test.ts: unit tests for new protection subcommand

^{Assessed at d90af61.}

…t protection Made-with: Cursor

…ction Made-with: Cursor

Refresh project help output snapshots to include the protection subcommand and adjusted wrapping across 40/80/120 column widths. Made-with: Cursor

Resolve project protection conflicts by keeping customer-support-code-visibility CLI behavior and tests while incorporating upstream main updates. Made-with: Cursor

Made-with: Cursor

github-actions · 2026-04-07T20:18:49Z

📦 CLI Tarball Ready

The Vercel CLI tarball for this PR is now available!

Quick Test

You can test this PR's CLI directly by running:

npx https://vercel-3390wm23t.vercel.sh/tarballs/vercel.tgz --help

Use in vercel.json

To use this CLI version in your project builds, add to your vercel.json:

{
  "build": {
    "env": {
      "VERCEL_CLI_VERSION": "vercel@https://vercel-3390wm23t.vercel.sh/tarballs/vercel.tgz"
    }
  }
}

Python Runtime Wheel

A vercel-runtime wheel was also built for this PR.
To use in your Python project builds, also set this environment variable:

VERCEL_RUNTIME_PYTHON="vercel-runtime @ https://vercel-3390wm23t.vercel.sh/tarballs/vercel_runtime-0.13.0.dev1775672705+ac14fa1-py3-none-any.whl"

Python Workers Wheel

A vercel-workers wheel was also built for this PR.
To use in your Python project builds, also set this environment variable:

VERCEL_WORKERS_PYTHON="vercel-workers @ https://vercel-3390wm23t.vercel.sh/tarballs/vercel_workers-0.1.0.dev1775672705+ac14fa1-py3-none-any.whl"

Resolve project protection conflicts: keep password protection from main alongside customer support code visibility (--customer-support-code-visibility). Update flags, PATCH/JSON output, agent hints, and tests. Made-with: Cursor

Resolve project protection conflicts: combine customer support code visibility with main's skew protection (--skew, --skew-max-age, skewProtectionMaxAge). Keep password and SSO; extend missing-flag messaging and agent next hints. Made-with: Cursor

Resolve protection.ts: keep --customer-support-code-visibility from this branch and --git-fork-protection from main; align missing-flag messaging and hints. Made-with: Cursor

This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated. # Releases ## vercel@50.43.0 ### Minor Changes - Add Deployment Checks support to `deploy --prod`. Shows "Running Checks..." spinner when checks are pending, detects check failures before alias promotion, and displays failed check run details with links to logs. ([#15884](#15884)) - Extend marketplace integration CLI parity: add `vercel integration installations` to list team installations (with optional `--integration` filter and JSON output), align `vercel integration update` argument parsing with other subcommands (parse only tokens after `update`, so the integration slug is the first positional), and ship related help/telemetry updates. ([#15849](#15849)) - Add `vercel project protection` actions for automation protection bypass via PATCH `/v1/projects/.../protection-bypass` (`--protection-bypass`). ([#15862](#15862)) - Add `vercel project protection` actions for customer support code visibility (`--customer-support-code-visibility`). ([#15860](#15860)) - Add `vercel project protection` actions for Git fork protection (`--git-fork-protection`). ([#15861](#15861)) - [services] migrate python workers to Queues V3 API ([#15885](#15885)) - [cli] Add `vercel flags override` subcommand to encrypt and decrypt flag override tokens for the `vercel-flag-overrides` cookie ([#15875](#15875)) ### Patch Changes - Persist CLI telemetry across invocations with bounded-time sessions, stable installation device IDs, and per-invocation identifiers. ([#15872](#15872)) - Update the `vercel metrics` CLI to use the V2 observability metrics API with `--metric`-based schema inspection and querying. ([#15876](#15876)) - Improve `vercel integration add` command to support fallback to the discover API and first-party integrations. ([#15788](#15788)) - refactor(cli): remove FF_AUTO_PROVISION_INSTALL feature flag and dead code from `integration add` ([#15871](#15871)) - Updated dependencies \[[`5e02289f927050a6c1025cc0edb7eda607fd5e73`](5e02289), [`2e15ee828f14de4a849a462429ca03feab161174`](2e15ee8), [`a31c84d1bda56a60da6d7bc6d611b0b18ba3bf57`](a31c84d)]: - @vercel/detect-agent@1.2.2 - @vercel/build-utils@13.14.1 - @vercel/backends@0.0.58 - @vercel/elysia@0.1.61 - @vercel/express@0.1.71 - @vercel/fastify@0.1.64 - @vercel/go@3.4.7 - @vercel/h3@0.1.70 - @vercel/hono@0.2.64 - @vercel/hydrogen@1.3.6 - @vercel/koa@0.1.44 - @vercel/nestjs@0.2.65 - @vercel/next@4.16.5 - @vercel/node@5.7.3 - @vercel/python@6.29.0 - @vercel/redwood@2.4.12 - @vercel/remix-builder@5.7.2 - @vercel/ruby@2.3.2 - @vercel/rust@1.1.0 - @vercel/static-build@2.9.11 ## @vercel/client@17.3.0 ### Minor Changes - Add Deployment Checks support to `deploy --prod`. Shows "Running Checks..." spinner when checks are pending, detects check failures before alias promotion, and displays failed check run details with links to logs. ([#15884](#15884)) ### Patch Changes - Updated dependencies \[[`2e15ee828f14de4a849a462429ca03feab161174`](2e15ee8), [`a31c84d1bda56a60da6d7bc6d611b0b18ba3bf57`](a31c84d)]: - @vercel/build-utils@13.14.1 ## @vercel/backends@0.0.58 ### Patch Changes - Updated dependencies \[[`2e15ee828f14de4a849a462429ca03feab161174`](2e15ee8), [`a31c84d1bda56a60da6d7bc6d611b0b18ba3bf57`](a31c84d)]: - @vercel/build-utils@13.14.1 ## @vercel/build-utils@13.14.1 ### Patch Changes - Restore `finalizeLambda()` to return `zipPath: null` for the default in-memory path, preserving the existing caller-facing result contract while keeping custom ZIP strategies supported. ([#15887](#15887)) - feat(node): filter non-entrypoint Node.js files in `/api` directory ([#15873](#15873)) ## @vercel/cervel@0.0.45 ### Patch Changes - Updated dependencies \[]: - @vercel/backends@0.0.58 ## @vercel/detect-agent@1.2.2 ### Patch Changes - Detect Cursor agent execution when `CURSOR_EXTENSION_HOST_ROLE=agent-exec` is set so tools launched from Cursor still report the `cursor-cli` agent when `CURSOR_AGENT` is not present. ([#15879](#15879)) ## @vercel/elysia@0.1.61 ### Patch Changes - Updated dependencies \[]: - @vercel/node@5.7.3 ## @vercel/express@0.1.71 ### Patch Changes - Updated dependencies \[]: - @vercel/node@5.7.3 - @vercel/cervel@0.0.45 ## @vercel/fastify@0.1.64 ### Patch Changes - Updated dependencies \[]: - @vercel/node@5.7.3 ## @vercel/fs-detectors@5.15.1 ### Patch Changes - feat(node): filter non-entrypoint Node.js files in `/api` directory ([#15873](#15873)) - Updated dependencies \[[`2e15ee828f14de4a849a462429ca03feab161174`](2e15ee8), [`a31c84d1bda56a60da6d7bc6d611b0b18ba3bf57`](a31c84d)]: - @vercel/build-utils@13.14.1 ## @vercel/gatsby-plugin-vercel-builder@2.1.11 ### Patch Changes - Updated dependencies \[[`2e15ee828f14de4a849a462429ca03feab161174`](2e15ee8), [`a31c84d1bda56a60da6d7bc6d611b0b18ba3bf57`](a31c84d)]: - @vercel/build-utils@13.14.1 ## @vercel/h3@0.1.70 ### Patch Changes - Updated dependencies \[]: - @vercel/node@5.7.3 ## @vercel/hono@0.2.64 ### Patch Changes - Updated dependencies \[]: - @vercel/node@5.7.3 ## @vercel/koa@0.1.44 ### Patch Changes - Updated dependencies \[]: - @vercel/node@5.7.3 ## @vercel/nestjs@0.2.65 ### Patch Changes - Updated dependencies \[]: - @vercel/node@5.7.3 ## @vercel/node@5.7.3 ### Patch Changes - Updated dependencies \[[`2e15ee828f14de4a849a462429ca03feab161174`](2e15ee8), [`a31c84d1bda56a60da6d7bc6d611b0b18ba3bf57`](a31c84d)]: - @vercel/build-utils@13.14.1 ## @vercel/static-build@2.9.11 ### Patch Changes - Updated dependencies \[]: - @vercel/gatsby-plugin-vercel-builder@2.1.11 ## @vercel/python-workers@0.0.14 ### Patch Changes - [services] migrate python workers to Queues V3 API ([#15885](#15885)) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

feat(cli): project protection customer support code visibility

933e558

brookemosby requested review from a team as code owners April 7, 2026 16:31

vercel bot deployed to Preview April 7, 2026 16:34 View deployment

brookemosby added 2 commits April 7, 2026 10:39

fix(cli): structured agent errors and JSON for non-interactive projec…

0111ff2

…t protection Made-with: Cursor

fix(cli): align project protection next command with enable/disable a…

a1fe47b

…ction Made-with: Cursor

vercel bot deployed to Preview April 7, 2026 16:50 View deployment

test(cli): update project help snapshots

d90af61

Refresh project help output snapshots to include the protection subcommand and adjusted wrapping across 40/80/120 column widths. Made-with: Cursor

vercel bot deployed to Preview April 7, 2026 17:38 View deployment

Merge origin/main into brooke/cli-236-protection-customer-support-code

80ee697

Resolve project protection conflicts by keeping customer-support-code-visibility CLI behavior and tests while incorporating upstream main updates. Made-with: Cursor

vercel bot deployed to Preview April 7, 2026 18:31 View deployment

cli: keep SSO when adding customer support code protection

164192c

Made-with: Cursor

vercel bot deployed to Preview April 7, 2026 18:38 View deployment

Merge branch 'main' into brooke/cli-236-protection-customer-support-code

4dd1c05

vercel bot deployed to Preview April 7, 2026 19:31 View deployment

codywong approved these changes Apr 7, 2026

View reviewed changes

test(cli): add full SSO suite alongside customer support code tests

d0b1594

Made-with: Cursor

vercel bot deployed to Preview April 7, 2026 20:18 View deployment

Merge branch 'main' into brooke/cli-236-protection-customer-support-code

3c604e3

vercel bot deployed to Preview April 7, 2026 22:06 View deployment

vercel bot deployed to Preview April 7, 2026 23:46 View deployment

vercel bot deployed to Preview April 8, 2026 00:32 View deployment

Merge branch 'main' into brooke/cli-236-protection-customer-support-code

f9628cb

brookemosby enabled auto-merge (squash) April 8, 2026 17:38

vercel bot deployed to Preview April 8, 2026 17:41 View deployment

Merge origin/main into brooke/cli-236-protection-customer-support-code

ac14fa1

Resolve protection.ts: keep --customer-support-code-visibility from this branch and --git-fork-protection from main; align missing-flag messaging and hints. Made-with: Cursor

vercel bot deployed to Preview April 8, 2026 18:26 View deployment

brookemosby merged commit 780ca04 into main Apr 8, 2026
178 checks passed

brookemosby deleted the brooke/cli-236-protection-customer-support-code branch April 8, 2026 18:55

vercel-cli-release-bot mentioned this pull request Apr 8, 2026

Version Packages #15880

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(cli): project protection customer support code visibility#15860

feat(cli): project protection customer support code visibility#15860
brookemosby merged 13 commits intomainfrom
brooke/cli-236-protection-customer-support-code

brookemosby commented Apr 7, 2026

Uh oh!

changeset-bot bot commented Apr 7, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Apr 7, 2026 •

edited

Loading

Uh oh!

vercel bot commented Apr 7, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Apr 7, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

brookemosby commented Apr 7, 2026

Uh oh!

changeset-bot bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

github-actions bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🧪 Unit Test Strategy

Results

Uh oh!

vercel bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 CLI Tarball Ready

Quick Test

Use in vercel.json

Python Runtime Wheel

Python Workers Wheel

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

changeset-bot bot commented Apr 7, 2026 •

edited

Loading

github-actions bot commented Apr 7, 2026 •

edited

Loading

vercel bot commented Apr 7, 2026 •

edited

Loading

github-actions bot commented Apr 7, 2026 •

edited

Loading