cloudflare / vinext

feat(deploy): add --env support with security and parsing improvements (#49)
* feat(deploy): add --env support for wrangler deploy Adds vinext deploy --env <name> and threads it through to wrangler deploy --env <name>. Keeps --preview working as shorthand for preview environment, adds unit tests for wrangler arg construction, and updates README/help examples. Refs #33. * fix(deploy): use execFileSync and util.parseArgs for --env support Build on #44 by liuxiaopai-ai — adds --env flag for wrangler deploy. Security: switch from execSync(shell string) to execFileSync(binary, args) to eliminate command injection via unsanitized --env/--name values. Replace hand-rolled flag parsing (parseStringFlag, parseNumericFlag, rawArgs.includes) with Node.js built-in util.parseArgs. This gives us strict mode (throws on unknown flags), automatic --flag=value handling, and proper error messages for missing values. Also: buildWranglerDeployArgs now returns { args, env } directly instead of re-parsing the args array for the log message. --------- Co-authored-by: root <root@localhost.localdomain>
Steve Faulkner Steve Faulkner committed on Feb 25, 2026, 12:57 PM
Showing 4 changed files +180 additions -56 deletions
Browse files at this commit →