From 986bbd5a3c7a70b1d2ebad7335b854af4ba624d3 Mon Sep 17 00:00:00 2001
From: Vadym Samoilenko <vadymsamoilenko@oliver.agency>
Date: Mon, 23 Feb 2026 13:46:01 +0000
Subject: [PATCH] fix: gen_secret SIGPIPE crash with set -o pipefail

tr/head pipe causes SIGPIPE exit 141, killing script silently.
Wrap with set +o pipefail guard.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 deploy.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/deploy.sh b/deploy.sh
index 9abbc0d..d0c947d 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -34,8 +34,13 @@ header(){ echo -e "\n${BOLD}${CYAN}═══════════════
 # ─── Helpers ──────────────────────────────────────────────────────────────────
 gen_secret() {
   # Generate a random string of given length (default 64)
+  # set +o pipefail to prevent SIGPIPE from tr being treated as an error
   local len="${1:-64}"
-  LC_ALL=C tr -dc 'A-Za-z0-9!@#%^&*()-_=+' </dev/urandom | head -c "$len"
+  local result
+  set +o pipefail
+  result=$(LC_ALL=C tr -dc 'A-Za-z0-9@#%^_=+' </dev/urandom | head -c "$len")
+  set -o pipefail
+  printf '%s' "$result"
 }
 
 prompt_with_default() {