From 2e4a0ed6d0914dcdff53f0b42120b217d8f792fe Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 24 Jul 2026 23:02:36 +0000
Subject: [PATCH 1/2] Initial plan


From aaf67f03ba4fbb2cc7cf580eec09febb577f7856 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 24 Jul 2026 23:05:46 +0000
Subject: [PATCH 2/2] fix: add secrets validation step and quote VPS_APP_DIR in
 deploy workflow

---
 .github/workflows/deploy.yml | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 92e8cd6..c5276cd 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -10,6 +10,24 @@ jobs:
     name: Deploy to VPS
     runs-on: ubuntu-latest
     steps:
+      - name: Check required secrets
+        run: |
+          missing=()
+          [ -z "$VPS_HOST" ]    && missing+=("VPS_HOST")
+          [ -z "$VPS_USER" ]    && missing+=("VPS_USER")
+          [ -z "$VPS_SSH_KEY" ] && missing+=("VPS_SSH_KEY")
+          [ -z "$VPS_APP_DIR" ] && missing+=("VPS_APP_DIR")
+          if [ "${#missing[@]}" -gt 0 ]; then
+            echo "::error::Required secrets not configured: ${missing[*]}"
+            echo "Add these secrets in: Settings → Secrets and variables → Actions"
+            exit 1
+          fi
+        env:
+          VPS_HOST:    ${{ secrets.VPS_HOST }}
+          VPS_USER:    ${{ secrets.VPS_USER }}
+          VPS_SSH_KEY: ${{ secrets.VPS_SSH_KEY }}
+          VPS_APP_DIR: ${{ secrets.VPS_APP_DIR }}
+
       - name: Deploy over SSH
         uses: appleboy/ssh-action@v1.2.0
         with:
@@ -21,5 +39,5 @@ jobs:
           script_stop: true
           script: |
             set -euo pipefail
-            cd ${{ secrets.VPS_APP_DIR }}
+            cd "${{ secrets.VPS_APP_DIR }}"
             bash scripts/deploy-prod.sh