@liiift-studio/deploy-vercel-from-sanity 1.2.0 → 1.2.1

package/README.md

@@ -188,7 +188,7 @@ If "No stderr or stdout was captured" appears, the build may have failed before
 
 ## Security
 
-**API token storage** — The Vercel API token is stored in cleartext in a `config.vercelDeploy` document of type `vercelDeploy.config`. Sanity has no per-document access control at this tier, so **the token is readable by anyone who can read the dataset** — and if the dataset is public, which is the usual setup for a statically generated front-end, that includes unauthenticated requests to the public GROQ API. A `viewer`-role member who cannot write a single document can also read it. Note that a **Full Account** scoped token can read and write your entire Vercel account, so anyone with studio access can read a credential that grants broad Vercel access — treat the token accordingly. The document type is registered with the plugin, so it is visible in Structure and can be deleted from the Studio to revoke the stored token. Audit who has access to your Sanity project at sanity.io → Project → Members, and do not store a Full Account token in a public dataset. If your studio includes untrusted editors, consider a server-side proxy that holds the token and exposes only a scoped deploy endpoint.
+**API token storage** — The Vercel API token is stored in cleartext in a `config.vercelDeploy` document of type `vercelDeploy.config`. Sanity has no per-document access control at this tier, so **the token is readable by anyone who can read the dataset** — and if the dataset is public, which is the usual setup for a statically generated front-end, that includes unauthenticated requests to the public GROQ API. A `viewer`-role member who cannot write a single document can also read it. Note that a **Full Account** scoped token can read and write your entire Vercel account, so anyone with studio access can read a credential that grants broad Vercel access — treat the token accordingly. The document type is deliberately **not** registered in the schema — registering it would list a "Vercel Deploy Configuration" entry in the Structure sidebar for every editor. Revoke the stored token from the plugin instead: **Deploy → Token connected → Remove token**. Audit who has access to your Sanity project at sanity.io → Project → Members, and do not store a Full Account token in a public dataset. If your studio includes untrusted editors, consider a server-side proxy that holds the token and exposes only a scoped deploy endpoint.
 
 **Deploy hook URL validation** — `triggerDeploy` validates that the hook URL matches `api.vercel.com/v1/integrations/deploy/` before making the request, preventing SSRF from a tampered document.
 

package/dist/index.d.mts

@@ -89,38 +89,6 @@ declare const vercelDeploySchema: {
     };
 };
 
-/**
- * Registers the document the plugin stores its Vercel token in.
- *
- * The document was previously written without a registered type, which made it
- * invisible to Structure, absent from schema extraction, and impossible to
- * inspect or revoke from inside the Studio. Registering it does not change where
- * the token lives — see the security note in the README about dataset read
- * access — but it does make the credential visible and removable.
- */
-declare const vercelConfigSchema: {
-    name: "vercelDeploy.config";
-    title: string;
-    type: "document";
-    fields: {
-        name: "accessToken";
-        title: string;
-        type: "string";
-        description: string;
-    }[];
-    preview: {
-        select: {
-            token: string;
-        };
-        prepare: ({ token }: {
-            token?: string;
-        }) => {
-            title: string;
-            subtitle: string;
-        };
-    };
-};
-
 /**
  * Sanity Studio plugin — trigger and monitor Vercel deployments.
  *
@@ -141,4 +109,4 @@ declare const vercelConfigSchema: {
  */
 declare const vercelDeploy: sanity.Plugin<void | VercelDeployPluginConfig>;
 
-export { type DeployTarget, type VercelDeployPluginConfig, type VercelDeployState, type VercelDeployment, vercelConfigSchema, vercelDeploy, vercelDeploySchema };
+export { type DeployTarget, type VercelDeployPluginConfig, type VercelDeployState, type VercelDeployment, vercelDeploy, vercelDeploySchema };

package/dist/index.d.ts

@@ -89,38 +89,6 @@ declare const vercelDeploySchema: {
     };
 };
 
-/**
- * Registers the document the plugin stores its Vercel token in.
- *
- * The document was previously written without a registered type, which made it
- * invisible to Structure, absent from schema extraction, and impossible to
- * inspect or revoke from inside the Studio. Registering it does not change where
- * the token lives — see the security note in the README about dataset read
- * access — but it does make the credential visible and removable.
- */
-declare const vercelConfigSchema: {
-    name: "vercelDeploy.config";
-    title: string;
-    type: "document";
-    fields: {
-        name: "accessToken";
-        title: string;
-        type: "string";
-        description: string;
-    }[];
-    preview: {
-        select: {
-            token: string;
-        };
-        prepare: ({ token }: {
-            token?: string;
-        }) => {
-            title: string;
-            subtitle: string;
-        };
-    };
-};
-
 /**
  * Sanity Studio plugin — trigger and monitor Vercel deployments.
  *
@@ -141,4 +109,4 @@ declare const vercelConfigSchema: {
  */
 declare const vercelDeploy: sanity.Plugin<void | VercelDeployPluginConfig>;
 
-export { type DeployTarget, type VercelDeployPluginConfig, type VercelDeployState, type VercelDeployment, vercelConfigSchema, vercelDeploy, vercelDeploySchema };
+export { type DeployTarget, type VercelDeployPluginConfig, type VercelDeployState, type VercelDeployment, vercelDeploy, vercelDeploySchema };

package/dist/index.js

@@ -30,12 +30,11 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
-  vercelConfigSchema: () => vercelConfigSchema,
   vercelDeploy: () => vercelDeploy,
   vercelDeploySchema: () => vercelDeploySchema
 });
 module.exports = __toCommonJS(index_exports);
-var import_sanity6 = require("sanity");
+var import_sanity5 = require("sanity");
 
 // src/icons.tsx
 var import_react = require("react");
@@ -45,10 +44,18 @@ var sanityUi = __toESM(require("@sanity/ui"));
 var sanityIcons = __toESM(require("@sanity/icons"));
 var UI = sanityUi;
 var ICONS = sanityIcons;
-function resolveExport(ns, name) {
+function resolveComponent(ns, name) {
   const value = ns[name];
   return typeof value === "function" || typeof value === "object" && value !== null ? value : void 0;
 }
+function resolveFunction(ns, name) {
+  const value = ns[name];
+  return typeof value === "function" ? value : void 0;
+}
+function resolveRecord(ns, name) {
+  const value = ns[name];
+  return typeof value === "object" && value !== null ? value : void 0;
+}
 var STACK_USES_GAP = typeof UI.Stack === "function";
 
 // src/icons.tsx
@@ -57,11 +64,11 @@ var GLYPH = { width: "1em", height: "1em", viewBox: "0 0 25 25", fill: "none" };
 var MissingIcon = (0, import_react.forwardRef)(function MissingIcon2(props, ref) {
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", { ...GLYPH, xmlns: "http://www.w3.org/2000/svg", "aria-hidden": "true", focusable: "false", ...props, ref });
 });
-var SYMBOL_MAP = resolveExport(ICONS, "icons");
+var SYMBOL_MAP = resolveRecord(ICONS, "icons");
 function resolveIcon(name, symbol) {
-  const named = resolveExport(ICONS, name);
+  const named = resolveComponent(ICONS, name);
   if (named) return named;
-  const Icon = resolveExport(ICONS, "Icon");
+  const Icon = resolveComponent(ICONS, "Icon");
   if (!Icon) return MissingIcon;
   if (SYMBOL_MAP && !(symbol in SYMBOL_MAP)) return MissingIcon;
   const Resolved = (0, import_react.forwardRef)(function SanityIcon(props, ref) {
@@ -99,21 +106,43 @@ var import_react2 = require("react");
 var import_jsx_runtime2 = require("react/jsx-runtime");
 function domFallback(tag) {
   const Fallback = (0, import_react2.forwardRef)(function SanityUiFallback(props, ref) {
-    const { children, style, id, className, onClick, href, title, ...rest } = props;
+    const { children, style, id, className, onClick, href, title, as, ...rest } = props;
+    const element = typeof as === "string" ? as : tag;
     const passthrough = { style, id, className, onClick, href, title, ref };
-    for (const key of ["role", "type", "value", "checked", "placeholder", "disabled", "onChange", "onKeyDown"]) {
+    for (const key of [
+      "role",
+      "type",
+      "value",
+      "checked",
+      "placeholder",
+      "disabled",
+      "tabIndex",
+      "onChange",
+      "onKeyDown",
+      "onFocus",
+      "onBlur",
+      "onMouseEnter",
+      "onMouseLeave",
+      "htmlFor",
+      "target",
+      "rel",
+      "name",
+      "autoComplete",
+      "required",
+      "readOnly"
+    ]) {
       if (key in rest) passthrough[key] = rest[key];
     }
     for (const key of Object.keys(rest)) {
       if (key.startsWith("aria-") || key.startsWith("data-")) passthrough[key] = rest[key];
     }
-    return (0, import_react2.createElement)(tag, passthrough, children);
+    return (0, import_react2.createElement)(element, passthrough, children);
   });
   Fallback.displayName = `SanityUiFallback(${tag})`;
   return Fallback;
 }
 function primitive(name, tag) {
-  return resolveExport(UI, name) ?? domFallback(tag);
+  return resolveComponent(UI, name) ?? domFallback(tag);
 }
 var Box = primitive("Box", "div");
 var Card = primitive("Card", "div");
@@ -172,11 +201,19 @@ function scheduleDismiss(id, status) {
 }
 function pushLocalToast(params) {
   const toast = { ...params, id: nextToastId++ };
-  localToasts = [...localToasts, toast].slice(-MAX_VISIBLE_TOASTS);
+  const next = [...localToasts, toast];
+  for (const dropped of next.slice(0, Math.max(0, next.length - MAX_VISIBLE_TOASTS))) {
+    const timer = dismissTimers.get(dropped.id);
+    if (timer) {
+      clearTimeout(timer);
+      dismissTimers.delete(dropped.id);
+    }
+  }
+  localToasts = next.slice(-MAX_VISIBLE_TOASTS);
   emitToasts();
   scheduleDismiss(toast.id, toast.status);
 }
-var installedUseToast = resolveExport(UI, "useToast");
+var installedUseToast = resolveFunction(UI, "useToast");
 var localToaster = { push: pushLocalToast };
 function useToast() {
   const real = installedUseToast;
@@ -193,6 +230,10 @@ function ToastViewport() {
       toastListeners.delete(setToasts);
     };
   }, []);
+  const resume = (0, import_react3.useCallback)((toast, el) => {
+    if (el && el.contains(document.activeElement)) return;
+    scheduleDismiss(toast.id, toast.status);
+  }, []);
   const hold = (0, import_react3.useCallback)((id) => {
     const timer = dismissTimers.get(id);
     if (timer) {
@@ -204,9 +245,8 @@ function ToastViewport() {
   return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
     Box,
     {
-      role: "status",
-      "aria-live": "polite",
-      "aria-atomic": false,
+      role: "log",
+      "aria-label": "Deployment notifications",
       style: {
         position: "fixed",
         bottom: 16,
@@ -221,11 +261,12 @@ function ToastViewport() {
           padding: 3,
           radius: 2,
           shadow: 3,
-          tone: LOCAL_TOAST_TONE[toast.status ?? "info"] ?? "primary",
+          tone: LOCAL_TOAST_TONE[toast.status ?? "info"],
           style: { pointerEvents: "auto" },
           onMouseEnter: () => hold(toast.id),
           onFocusCapture: () => hold(toast.id),
-          onMouseLeave: () => scheduleDismiss(toast.id, toast.status),
+          onMouseLeave: (e) => resume(toast, e.currentTarget),
+          onBlurCapture: (e) => resume(toast, e.currentTarget),
           children: /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Flex, { align: "flex-start", gap: 3, children: [
             /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Stack, { space: 2, flex: 1, children: [
               toast.title && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { size: 1, weight: "semibold", children: toast.title }),
@@ -253,48 +294,47 @@ function ToastViewport() {
 // src/compat/tooltip.tsx
 var import_react4 = require("react");
 var import_jsx_runtime4 = require("react/jsx-runtime");
-var InstalledTooltip = resolveExport(UI, "Tooltip");
+var InstalledTooltip = resolveComponent(UI, "Tooltip");
 function Tooltip({ text, children }) {
   const id = (0, import_react4.useId)();
   const [visible, setVisible] = (0, import_react4.useState)(false);
   if (InstalledTooltip) {
     return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(InstalledTooltip, { content: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Box, { padding: 2, children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { size: 1, children: text }) }), portal: true, children });
   }
+  const described = visible && (0, import_react4.isValidElement)(children) ? (0, import_react4.cloneElement)(children, { "aria-describedby": id }) : children;
   return /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(
     "span",
     {
       style: { position: "relative", display: "inline-flex" },
-      "aria-describedby": id,
       onMouseEnter: () => setVisible(true),
       onMouseLeave: () => setVisible(false),
       onFocusCapture: () => setVisible(true),
       onBlurCapture: () => setVisible(false),
       onKeyDown: (e) => {
-        if (e.key === "Escape") setVisible(false);
+        if (e.key === "Escape" && visible) {
+          e.stopPropagation();
+          setVisible(false);
+        }
       },
       children: [
-        children,
-        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
-          Card,
+        described,
+        visible && /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
+          "span",
           {
             id,
             role: "tooltip",
-            radius: 2,
-            shadow: 2,
-            padding: 2,
             style: {
               position: "absolute",
               bottom: "100%",
               left: "50%",
               transform: "translateX(-50%)",
-              marginBottom: 4,
+              // No gap between trigger and tooltip, so the pointer can travel onto it
+              // without leaving the hover target (WCAG 1.4.13 Hoverable).
+              paddingBottom: 4,
               whiteSpace: "nowrap",
-              pointerEvents: "none",
-              zIndex: 1e3,
-              // Kept in the accessibility tree when hidden so `aria-describedby` still resolves.
-              visibility: visible ? "visible" : "hidden"
+              zIndex: 1e3
             },
-            children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { size: 1, children: text })
+            children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Card, { radius: 2, shadow: 2, padding: 2, children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { size: 1, children: text }) })
           }
         )
       ]
@@ -305,9 +345,9 @@ function Tooltip({ text, children }) {
 // src/compat/menu.tsx
 var import_react5 = require("react");
 var import_jsx_runtime5 = require("react/jsx-runtime");
-var InstalledMenuButton = resolveExport(UI, "MenuButton");
-var InstalledMenu = resolveExport(UI, "Menu");
-var InstalledMenuItem = resolveExport(UI, "MenuItem");
+var InstalledMenuButton = resolveComponent(UI, "MenuButton");
+var InstalledMenu = resolveComponent(UI, "Menu");
+var InstalledMenuItem = resolveComponent(UI, "MenuItem");
 var INSTALLED_MENU = InstalledMenuButton && InstalledMenu && InstalledMenuItem ? { MenuButton: InstalledMenuButton, Menu: InstalledMenu, MenuItem: InstalledMenuItem } : null;
 var itemKey = (item, index) => item.key ?? `${index}-${item.text}`;
 function ActionMenu({ id, label, items, buttonIcon }) {
@@ -335,7 +375,10 @@ function ActionMenu({ id, label, items, buttonIcon }) {
   (0, import_react5.useEffect)(() => {
     if (INSTALLED_MENU || !open) return;
     const onPointerDown = (e) => {
-      if (!wrapRef.current?.contains(e.target)) setOpen(false);
+      if (wrapRef.current?.contains(e.target)) return;
+      const hadFocus = wrapRef.current?.contains(document.activeElement);
+      setOpen(false);
+      if (hadFocus) triggerRef.current?.focus();
     };
     document.addEventListener("mousedown", onPointerDown);
     return () => document.removeEventListener("mousedown", onPointerDown);
@@ -373,7 +416,20 @@ function ActionMenu({ id, label, items, buttonIcon }) {
       return;
     }
     if (e.key === "Tab") {
-      close(false);
+      triggerRef.current?.focus();
+      setOpen(false);
+      return;
+    }
+    if (e.key === "Enter" || e.key === " ") {
+      e.preventDefault();
+      const item = shownItems[activeIndex];
+      if (item) {
+        if (item.href) {
+          itemRefs.current[activeIndex]?.click();
+        } else {
+          runAction(item);
+        }
+      }
       return;
     }
     if (e.key === "ArrowDown") {
@@ -448,7 +504,6 @@ function ActionMenu({ id, label, items, buttonIcon }) {
             ref: (el) => {
               itemRefs.current[i] = el;
             },
-            onMouseEnter: () => setActiveIndex(i),
             style: {
               display: "block",
               width: "100%",
@@ -473,15 +528,17 @@ function ActionMenu({ id, label, items, buttonIcon }) {
               href: item.href,
               target: "_blank",
               rel: "noreferrer",
-              onClick: () => close(false),
+              onClick: () => {
+                setOpen(false);
+                triggerRef.current?.focus();
+              },
               children: content
             },
             itemKey(item, i)
           ) : /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
-            "button",
+            "div",
             {
               ...shared,
-              type: "button",
               onClick: () => runAction(item),
               children: content
             },
@@ -495,7 +552,7 @@ function ActionMenu({ id, label, items, buttonIcon }) {
 
 // src/compat/code.tsx
 var import_jsx_runtime6 = require("react/jsx-runtime");
-var InstalledCode = resolveExport(UI, "Code");
+var InstalledCode = resolveComponent(UI, "Code");
 var FALLBACK_CODE_STYLE = {
   display: "block",
   fontFamily: "ui-monospace, SFMono-Regular, Menlo, Consolas, monospace",
@@ -672,6 +729,7 @@ function StatusBadge({ state, showSpinner }) {
 var import_react6 = require("react");
 var import_jsx_runtime8 = require("react/jsx-runtime");
 function DeployHistory({ target, token, onClose }) {
+  const dialogId = (0, import_react6.useId)();
   const [deployments, setDeployments] = (0, import_react6.useState)([]);
   const [loading, setLoading] = (0, import_react6.useState)(true);
   const [error, setError] = (0, import_react6.useState)(null);
@@ -695,7 +753,7 @@ function DeployHistory({ target, token, onClose }) {
     Dialog,
     {
       header: `${target.name} \u2014 Deployment History`,
-      id: "deploy-history",
+      id: dialogId,
       onClose,
       width: 2,
       footer: /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Box, { padding: 3, children: /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Button, { text: "Close", icon: CloseIcon, mode: "ghost", onClick: onClose }) }),
@@ -783,8 +841,11 @@ function DeployItem({ target, token, onDelete, onEdit }) {
   const triggeredFromUidRef = (0, import_react7.useRef)(void 0);
   const requestSeqRef = (0, import_react7.useRef)(0);
   const mountedRef = (0, import_react7.useRef)(true);
-  (0, import_react7.useEffect)(() => () => {
-    mountedRef.current = false;
+  (0, import_react7.useEffect)(() => {
+    mountedRef.current = true;
+    return () => {
+      mountedRef.current = false;
+    };
   }, []);
   const latest = deployments[0];
   const isPending = pendingSince !== null;
@@ -1010,17 +1071,36 @@ function DeployItem({ target, token, onDelete, onEdit }) {
                 formatDuration(Math.floor((latest.ready - latest.created) / 1e3)),
                 " to build"
               ] }),
-              latest?.url && latest.state === "READY" && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(import_jsx_runtime9.Fragment, { children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Tooltip, { text: copied ? "Copied!" : "Copy URL", children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
-                Button,
-                {
-                  mode: "ghost",
-                  icon: copied ? CheckmarkIcon : CopyIcon,
-                  padding: 1,
-                  tone: copied ? "positive" : "default",
-                  onClick: copyUrl,
-                  style: { cursor: "pointer" }
-                }
-              ) }) })
+              latest?.url && latest.state === "READY" && /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_jsx_runtime9.Fragment, { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Tooltip, { text: copied ? "Copied" : "Copy deployment URL", children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+                  Button,
+                  {
+                    mode: "ghost",
+                    icon: copied ? CheckmarkIcon : CopyIcon,
+                    padding: 1,
+                    tone: copied ? "positive" : "default",
+                    onClick: copyUrl,
+                    "aria-label": copied ? "Deployment URL copied" : "Copy deployment URL",
+                    style: { cursor: "pointer" }
+                  }
+                ) }),
+                /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+                  "span",
+                  {
+                    role: "status",
+                    "aria-live": "polite",
+                    style: {
+                      position: "absolute",
+                      width: 1,
+                      height: 1,
+                      overflow: "hidden",
+                      clip: "rect(0 0 0 0)",
+                      whiteSpace: "nowrap"
+                    },
+                    children: copied ? "Deployment URL copied to clipboard" : ""
+                  }
+                )
+              ] })
             ] }),
             /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Flex, { align: "center", gap: 2, wrap: "wrap", children: [
               commitMsg && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
@@ -1071,7 +1151,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
               deployError && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Card, { tone: "critical", padding: 2, radius: 2, children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { size: 1, children: deployError }) })
             ] })
           ] }),
-          pollError && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Card, { tone: "caution", padding: 3, radius: 2, role: "status", children: /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Flex, { align: "center", gap: 2, children: [
+          pollError && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Card, { tone: "caution", padding: 3, radius: 2, children: /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Flex, { align: "center", gap: 2, children: [
             /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(WarningOutlineIcon, { "aria-hidden": "true" }),
             /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { size: 1, children: [
               "Status updates paused \u2014 ",
@@ -1183,12 +1263,14 @@ var import_react8 = require("react");
 var import_sanity = require("sanity");
 var import_jsx_runtime10 = require("react/jsx-runtime");
 var TOKEN_DOC_ID = "config.vercelDeploy";
-function TokenSetup({ onSaved, onCancel }) {
+function TokenSetup({ onSaved, onCancel, hasToken = false }) {
+  const dialogId = (0, import_react8.useId)();
   const tokenId = (0, import_react8.useId)();
   const client = (0, import_sanity.useClient)({ apiVersion: "2025-01-01" });
   const [token, setToken] = (0, import_react8.useState)("");
   const [saving, setSaving] = (0, import_react8.useState)(false);
   const [error, setError] = (0, import_react8.useState)(null);
+  const [revoking, setRevoking] = (0, import_react8.useState)(false);
   const save = (0, import_react8.useCallback)(async () => {
     if (!token.trim()) return;
     setSaving(true);
@@ -1206,27 +1288,54 @@ function TokenSetup({ onSaved, onCancel }) {
       setSaving(false);
     }
   }, [client, token, onSaved]);
+  const revoke = (0, import_react8.useCallback)(async () => {
+    setRevoking(true);
+    setError(null);
+    try {
+      await client.delete(TOKEN_DOC_ID);
+      onSaved();
+    } catch (err) {
+      setError(err instanceof Error ? err.message : "Failed to remove token");
+    } finally {
+      setRevoking(false);
+    }
+  }, [client, onSaved]);
   return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
     Dialog,
     {
       header: "Connect Vercel API token",
-      id: "token-setup",
+      id: dialogId,
       onClose: onCancel,
       width: 1,
-      footer: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Flex, { padding: 3, gap: 2, justify: "flex-end", children: [
-        onCancel && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Button, { text: "Cancel", mode: "ghost", onClick: onCancel, style: { cursor: "pointer" } }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+      footer: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Flex, { padding: 3, gap: 2, justify: hasToken ? "space-between" : "flex-end", children: [
+        hasToken && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
           Button,
           {
-            text: "Save and connect",
-            tone: "primary",
-            icon: CheckmarkCircleIcon,
-            loading: saving,
-            disabled: !token.trim() || saving,
-            onClick: save,
+            text: "Remove token",
+            mode: "ghost",
+            tone: "critical",
+            icon: TrashIcon,
+            loading: revoking,
+            disabled: revoking || saving,
+            onClick: revoke,
             style: { cursor: "pointer" }
           }
-        )
+        ),
+        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Flex, { gap: 2, children: [
+          onCancel && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Button, { text: "Cancel", mode: "ghost", onClick: onCancel, style: { cursor: "pointer" } }),
+          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
+            Button,
+            {
+              text: "Save and connect",
+              tone: "primary",
+              icon: CheckmarkCircleIcon,
+              loading: saving,
+              disabled: !token.trim() || saving,
+              onClick: save,
+              style: { cursor: "pointer" }
+            }
+          )
+        ] })
       ] }),
       children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Stack, { space: 4, padding: 4, children: [
         /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Stack, { space: 3, children: [
@@ -1267,6 +1376,7 @@ var VERCEL_HOOK_RE2 = /^https:\/\/api\.vercel\.com\/v1\/integrations\/deploy\//;
 function DeployTargetForm({ initial, onSaved, onClose }) {
   const client = (0, import_sanity2.useClient)({ apiVersion: "2025-01-01" });
   const isEdit = Boolean(initial);
+  const dialogId = (0, import_react9.useId)();
   const nameId = (0, import_react9.useId)();
   const urlId = (0, import_react9.useId)();
   const urlErrorId = (0, import_react9.useId)();
@@ -1309,7 +1419,7 @@ function DeployTargetForm({ initial, onSaved, onClose }) {
     Dialog,
     {
       header: isEdit ? `Edit "${initial?.name}"` : "Add deploy target",
-      id: "deploy-target-form",
+      id: dialogId,
       onClose,
       width: 1,
       footer: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Flex, { padding: 3, gap: 2, justify: "flex-end", children: [
@@ -1408,7 +1518,7 @@ function DeployTargetForm({ initial, onSaved, onClose }) {
 }
 
 // src/version.ts
-var VERSION = "1.2.0";
+var VERSION = "1.2.1";
 
 // src/components/DeployTool.tsx
 var import_jsx_runtime12 = require("react/jsx-runtime");
@@ -1613,7 +1723,8 @@ function DeployTool() {
           setShowTokenSetup(false);
           load();
         },
-        onCancel: () => setShowTokenSetup(false)
+        onCancel: () => setShowTokenSetup(false),
+        hasToken: Boolean(token)
       }
     ),
     showCreateForm && /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
@@ -1760,37 +1871,13 @@ var vercelDeploySchema = (0, import_sanity4.defineType)({
   }
 });
 
-// src/schema/vercelConfig.ts
-var import_sanity5 = require("sanity");
-var vercelConfigSchema = (0, import_sanity5.defineType)({
-  name: "vercelDeploy.config",
-  title: "Vercel Deploy Configuration",
-  type: "document",
-  fields: [
-    (0, import_sanity5.defineField)({
-      name: "accessToken",
-      title: "Vercel API Token",
-      type: "string",
-      description: "Readable by anyone who can read this dataset. Delete this document to revoke the stored token."
-    })
-  ],
-  preview: {
-    select: { token: "accessToken" },
-    prepare: ({ token }) => ({
-      title: "Vercel API Token",
-      // Never render the secret itself in a preview.
-      subtitle: token ? "Connected" : "Not set"
-    })
-  }
-});
-
 // src/index.ts
-var vercelDeploy = (0, import_sanity6.definePlugin)((options) => {
+var vercelDeploy = (0, import_sanity5.definePlugin)((options) => {
   const config = options ?? {};
   return {
     name: "deploy-vercel-from-sanity",
     schema: {
-      types: [vercelDeploySchema, vercelConfigSchema]
+      types: [vercelDeploySchema]
     },
     tools: [
       {
@@ -1804,7 +1891,6 @@ var vercelDeploy = (0, import_sanity6.definePlugin)((options) => {
 });
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  vercelConfigSchema,
   vercelDeploy,
   vercelDeploySchema
 });