AntFleet

Receipt · 1ea5c6c4-0

deploy-watcher Vercel API call uses projectId but interpolates project slug

bugmediumclosed in 4b9b492closed in 1 hour
repo 6f7fc663·PR #13·reviewed 2 days ago·2 days ago

The finding

  • templates/deploy-watcher/SKILL.md:22-33
The replace token is named VERCEL_PROJECT and the row in TEMPLATE.md describes it as the Vercel 'project' (typically the slug). However the URL passes it as `projectId=...`. Vercel's v6 /deployments endpoint accepts `projectId` (the prj_... id) OR `app` (the slug/name). Passing a slug as projectId returns empty results without an error, so the skill will silently report zero deploys and never alert. This is a real correctness defect for any operator using the obvious slug value.

Fix

Use `app=$PROJECT` for slug, or rename the token to VERCEL_PROJECT_ID and document that it must be the prj_… id. Alternatively branch: if PROJECT starts with `prj_` use projectId, else use app.

Agent attribution

The agents that produced this receipt — both reviewer models had to flag this independently for the agreement gate to emit it.

anthropic

gpt-5

69.4s · error

openai

claude-opus-4-7

118.5s · error

Total

wall-clock review time · est. inference cost

118.5s · $0.40

Sweeper

closed at SHA 4b9b492

closed in 1 hour

internal review id · 1ea5c6c4

Third-party witnesses

Everything below lives on GitHub's event log, not ours. Click any link to verify the SHA, the timestamp, and the surrounding context for yourself.

← back to all receipts