[scubbo]

This PR adds support for Managed Git/GitHub credentials to the CLI.

Example usage:

$ vercel sandbox create --credentials=github

  Inferred Parameters:

  Setting       Value
  ------------  --------------------------
  Team          example-team-name
  Project       example-project-name
  Repo          vercel/repo-name                <------- inferred from local repo
  Actions       github:issues:read              <------- defaults; can be overridden
                github:issues:comment
                github:pull-request:create
                git:write
  GitHub actor  @scubbo                         <------- inferred from `gh auth status`, or from Vercel's own linkage

Create this sandbox? (y/n) n

  Edit these explicit commands as desired

sandbox create --scope=team_teamslug --project=prj_projectslug --credentials-github-repo=vercel/repo-name --credentials-github-action=github:issues:read,github:issues:comment,github:pull-request:create,git:write --credentials-github-act-as=@scubbo


Sandbox creation canceled.

(Per Melkey’s CLI advice, the best way to allow an agent to fixup incorrect guesses is to print the full explicit flags that represent what was inferred)

Credential inputs

--credentials=github requests the default GitHub credentials and infers the repository, actor, and actions. The option takes a comma-separated provider list. Only github is supported.

Do not combine it with --credentials-github-repo, --credentials-github-action, --credentials-github-act-as, --credentials-file, or --credentials-github-from-sandbox. Explicit credential inputs request GitHub credentials on their own. Conflicts fail before authentication or inference. Normal creation and authentication options, and the output path for exporting credentials, remain independent.

--credentials-github-action=git:write,github:pull-request:create requests exact actions. Explicit actions replace all defaults, including Git access. Git actions authorize Git operations. GitHub actions authorize GitHub API operations. There are no read/write presets, and unsupported git:read requests are rejected rather than replaced with write access.

--credentials-file=credentials.json reads the API's complete credentials object. Use - for stdin. The file has provider keys at its root:

{
  "github": [
    {
      "repositories": ["acme/widgets"],
      "actions": ["git:write", "github:pull-request:create"],
      "actAs": "@example-user"
    }
  ]
}

The file contents become the API request's credentials field without regrouping or inferred rights. Files do not select a clone source. Saved credential files use this same shape. File input cannot be combined with inferred credential defaults, direct credential overrides, or Sandbox reuse.

The managed-credentials guide lists all supported actions and their purpose. Consent, project Bounds, actor inference, and single-attempt creation retain their existing behavior.

Validation

The CLI input update was prepared by an automated agent, not Jack.

• The six default/override regression cases failed before the fix. All 71 focused input, resolver, and creation-context tests pass.
• env -u VERCEL_TOKEN -u VERCEL_OIDC_TOKEN pnpm --filter sandbox test --run: 868 tests passed, exit 0.
• pnpm --filter sandbox typecheck: exit 0.
• pnpm --filter sandbox generate-docs: build and help generation completed, exit 0.
• Thirty built-binary cases cover conflicting inputs in both flag orders across create, run, and sh. Each rejects before authentication with exit 2. Help and stdin validation checks also pass.
• Formatting and git diff --check pass.

The test suite emits dependency source-map warnings and output from unrelated tests. The build emits a tsdown deprecation warning. Documentation generation also emits a module-type warning. These commands succeed, but their output is not pristine. This update does not include a live Sandbox creation test.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
sandbox	Ready	Preview, v0	Nov 9, 2026 9:13pm UTC
sandbox-cli	Ready	Preview	Nov 9, 2026 9:13pm UTC
sandbox-sdk-ai-example	Ready	Preview	Nov 9, 2026 9:13pm UTC
workflow-code-runner	Ready	Preview	Nov 9, 2026 9:13pm UTC