add workflow patch for the CLI node-fetch bug

Author: jprusik

.github/workflows/test-all-custom-flags.yml

@@ -146,6 +146,25 @@ jobs:
       - name: Install Bitwarden CLI
         run: npm install -g @bitwarden/cli@2026.6.0
 
+      # FIXME Temporary workaround for PM-39403: server >= 2026.6.1 returns responses
+      # that node-fetch v2 treats as a premature close (ERR_STREAM_PREMATURE_CLOSE),
+      # even though the response body is fully delivered. Neutralize the two
+      # `new Error('Premature close')` emission sites in the CLI's bundled
+      # node-fetch so seed:vault:ciphers can proceed. Remove this step once
+      # PM-39403 ships and the lite image is rebuilt with the fix.
+      - name: Patch @bitwarden/cli node-fetch (PM-39403 workaround)
+        run: |
+          NF=$(npm root -g)/@bitwarden/cli/node_modules/node-fetch/lib/index.js
+          BEFORE=$(grep -c "Premature close" "$NF" || echo 0)
+          # Each match is followed by `err.code = ...` and an emit/callback
+          # line; delete the 3-line body, leaving the surrounding `if` empty.
+          sed -i "/new Error('Premature close')/,+2d" "$NF"
+          AFTER=$(grep -c "Premature close" "$NF" || echo 0)
+          echo "node-fetch patch: removed $((BEFORE - AFTER)) of $BEFORE match(es)"
+          if [ "$AFTER" != "0" ]; then
+            echo "WARNING: not all Premature-close references removed; @bitwarden/cli's node-fetch may have changed shape"
+          fi
+
       - name: Install project dependencies
         run: |
           npm ci

.github/workflows/test-all.yml

@@ -142,6 +142,25 @@ jobs:
       - name: Install Bitwarden CLI
         run: npm install -g @bitwarden/cli@2026.6.0
 
+      # FIXME Temporary workaround for PM-39403: server >= 2026.6.1 returns responses
+      # that node-fetch v2 treats as a premature close (ERR_STREAM_PREMATURE_CLOSE),
+      # even though the response body is fully delivered. Neutralize the two
+      # `new Error('Premature close')` emission sites in the CLI's bundled
+      # node-fetch so seed:vault:ciphers can proceed. Remove this step once
+      # PM-39403 ships and the lite image is rebuilt with the fix.
+      - name: Patch @bitwarden/cli node-fetch (PM-39403 workaround)
+        run: |
+          NF=$(npm root -g)/@bitwarden/cli/node_modules/node-fetch/lib/index.js
+          BEFORE=$(grep -c "Premature close" "$NF" || echo 0)
+          # Each match is followed by `err.code = ...` and an emit/callback
+          # line; delete the 3-line body, leaving the surrounding `if` empty.
+          sed -i "/new Error('Premature close')/,+2d" "$NF"
+          AFTER=$(grep -c "Premature close" "$NF" || echo 0)
+          echo "node-fetch patch: removed $((BEFORE - AFTER)) of $BEFORE match(es)"
+          if [ "$AFTER" != "0" ]; then
+            echo "WARNING: not all Premature-close references removed; @bitwarden/cli's node-fetch may have changed shape"
+          fi
+
       - name: Install project dependencies
         run: |
           npm ci