@liiift-studio/deploy-vercel-from-sanity 1.3.0 → 1.3.2

package/README.md

@@ -366,6 +366,21 @@ See [CHANGELOG.md](./CHANGELOG.md).
 
 ---
 
+## Tests and CI
+
+```bash
+npm test        # unit tests
+npm run lint    # includes the compat-seam import rule
+npm run typecheck
+```
+
+Unit tests cover the proxy's authorization boundary (fail-closed status key,
+per-project deployment scoping, role gating, SSRF guard on hook URLs) and the URL
+validators that guard every anchor the plugin renders. `prepublishOnly` runs
+typecheck and tests before building, so a release cannot ship past them.
+
+---
+
 ## Contributing
 
 Issues and pull requests welcome at [github.com/Liiift-Studio/Deploy-Vercel-from-Sanity](https://github.com/Liiift-Studio/Deploy-Vercel-from-Sanity).

package/dist/index.js

@@ -816,8 +816,14 @@ function DeployHistory({ target, token, onClose }) {
   const [loading, setLoading] = (0, import_react7.useState)(true);
   const [error, setError] = (0, import_react7.useState)(null);
   const { projectId, hookId } = parseHookUrl(target.url);
-  const transport = pluginConfig.mode === "proxy" ? { mode: "proxy", proxyUrl: pluginConfig.proxyUrl ?? "", statusKey: pluginConfig.statusKey } : { mode: "direct", token };
-  const targetRef = { projectId, hookId, proxyKey: target.proxyKey, teamId: target.teamId };
+  const transport = (0, import_react7.useMemo)(
+    () => pluginConfig.mode === "proxy" ? { mode: "proxy", proxyUrl: pluginConfig.proxyUrl ?? "", statusKey: pluginConfig.statusKey } : { mode: "direct", token },
+    [pluginConfig.mode, pluginConfig.proxyUrl, pluginConfig.statusKey, token]
+  );
+  const targetRef = (0, import_react7.useMemo)(
+    () => ({ projectId, hookId, proxyKey: target.proxyKey, teamId: target.teamId }),
+    [projectId, hookId, target.proxyKey, target.teamId]
+  );
   const load = (0, import_react7.useCallback)(async () => {
     setLoading(true);
     setError(null);
@@ -829,7 +835,7 @@ function DeployHistory({ target, token, onClose }) {
     } finally {
       setLoading(false);
     }
-  }, [projectId, hookId, token, target.teamId]);
+  }, [transport, targetRef]);
   (0, import_react7.useEffect)(() => {
     load();
   }, [load]);
@@ -910,8 +916,14 @@ function DeployItem({ target, token, onDelete, onEdit }) {
   const toast = useToast();
   const pluginConfig = usePluginConfig();
   const client = (0, import_sanity.useClient)({ apiVersion: "2025-01-01" });
-  const transport = pluginConfig.mode === "proxy" ? { mode: "proxy", proxyUrl: pluginConfig.proxyUrl ?? "", statusKey: pluginConfig.statusKey } : { mode: "direct", token };
-  const targetRef = { projectId, hookId, proxyKey: target.proxyKey, teamId: target.teamId };
+  const transport = (0, import_react8.useMemo)(
+    () => pluginConfig.mode === "proxy" ? { mode: "proxy", proxyUrl: pluginConfig.proxyUrl ?? "", statusKey: pluginConfig.statusKey } : { mode: "direct", token },
+    [pluginConfig.mode, pluginConfig.proxyUrl, pluginConfig.statusKey, token]
+  );
+  const targetRef = (0, import_react8.useMemo)(
+    () => ({ projectId, hookId, proxyKey: target.proxyKey, teamId: target.teamId }),
+    [projectId, hookId, target.proxyKey, target.teamId]
+  );
   const [deployments, setDeployments] = (0, import_react8.useState)([]);
   const [loadingInitial, setLoadingInitial] = (0, import_react8.useState)(true);
   const [pendingSince, setPendingSince] = (0, import_react8.useState)(null);
@@ -939,7 +951,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
   const isPending = pendingSince !== null;
   const isActive = isPending || isActiveState(latest?.state);
   const fetchDeployments2 = (0, import_react8.useCallback)(async () => {
-    const ready = transport.mode === "proxy" ? Boolean(target.proxyKey && pluginConfig.proxyUrl) : Boolean(projectId && hookId && token);
+    const ready = transport.mode === "proxy" ? Boolean(targetRef.proxyKey && transport.proxyUrl) : Boolean(targetRef.projectId && targetRef.hookId && transport.token);
     if (!ready) return;
     const seq = ++requestSeqRef.current;
     try {
@@ -952,7 +964,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
       setPollError(err instanceof Error ? err.message : "Could not reach the Vercel API");
       console.error("Deploy-vercel-from-sanity: fetch error", err);
     }
-  }, [projectId, hookId, token, target.teamId, target.proxyKey, transport.mode, pluginConfig.proxyUrl]);
+  }, [transport, targetRef]);
   (0, import_react8.useEffect)(() => {
     fetchDeployments2().finally(() => setLoadingInitial(false));
   }, [fetchDeployments2]);
@@ -1043,7 +1055,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
     } finally {
       setCanceling(false);
     }
-  }, [latest?.uid, token, target.teamId, fetchDeployments2]);
+  }, [latest?.uid, transport, targetRef, fetchDeployments2]);
   const copyUrl = (0, import_react8.useCallback)(() => {
     if (!latest?.url) return;
     const fullUrl = deploymentHref(latest.url) ?? "";
@@ -1067,7 +1079,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
     } finally {
       setLoadingLogs(false);
     }
-  }, [latest?.uid, token, target.teamId]);
+  }, [latest?.uid, transport, targetRef]);
   const toggleErrorLogs = (0, import_react8.useCallback)(() => {
     if (!showErrorLogs && errorLines.length === 0 && !logError) fetchErrorLogs();
     setShowErrorLogs((v) => !v);
@@ -1632,7 +1644,7 @@ function DeployTargetForm({ initial, onSaved, onClose }) {
 }
 
 // src/version.ts
-var VERSION = "1.3.0";
+var VERSION = "1.3.2";
 
 // src/components/DeployTool.tsx
 var import_jsx_runtime13 = require("react/jsx-runtime");

package/dist/index.mjs

@@ -84,7 +84,7 @@ function usePluginConfig() {
 }
 
 // src/components/DeployItem.tsx
-import { useState as useState5, useEffect as useEffect4, useCallback as useCallback4, useRef as useRef2 } from "react";
+import { useState as useState5, useEffect as useEffect4, useCallback as useCallback4, useMemo as useMemo2, useRef as useRef2 } from "react";
 import { flushSync } from "react-dom";
 
 // src/compat/primitives.tsx
@@ -772,7 +772,7 @@ function StatusBadge({ state, showSpinner }) {
 }
 
 // src/components/DeployHistory.tsx
-import { useId as useId3, useEffect as useEffect3, useState as useState4, useCallback as useCallback3 } from "react";
+import { useId as useId3, useEffect as useEffect3, useMemo, useState as useState4, useCallback as useCallback3 } from "react";
 import { jsx as jsx9, jsxs as jsxs5 } from "react/jsx-runtime";
 function DeployHistory({ target, token, onClose }) {
   const dialogId = useId3();
@@ -781,8 +781,14 @@ function DeployHistory({ target, token, onClose }) {
   const [loading, setLoading] = useState4(true);
   const [error, setError] = useState4(null);
   const { projectId, hookId } = parseHookUrl(target.url);
-  const transport = pluginConfig.mode === "proxy" ? { mode: "proxy", proxyUrl: pluginConfig.proxyUrl ?? "", statusKey: pluginConfig.statusKey } : { mode: "direct", token };
-  const targetRef = { projectId, hookId, proxyKey: target.proxyKey, teamId: target.teamId };
+  const transport = useMemo(
+    () => pluginConfig.mode === "proxy" ? { mode: "proxy", proxyUrl: pluginConfig.proxyUrl ?? "", statusKey: pluginConfig.statusKey } : { mode: "direct", token },
+    [pluginConfig.mode, pluginConfig.proxyUrl, pluginConfig.statusKey, token]
+  );
+  const targetRef = useMemo(
+    () => ({ projectId, hookId, proxyKey: target.proxyKey, teamId: target.teamId }),
+    [projectId, hookId, target.proxyKey, target.teamId]
+  );
   const load = useCallback3(async () => {
     setLoading(true);
     setError(null);
@@ -794,7 +800,7 @@ function DeployHistory({ target, token, onClose }) {
     } finally {
       setLoading(false);
     }
-  }, [projectId, hookId, token, target.teamId]);
+  }, [transport, targetRef]);
   useEffect3(() => {
     load();
   }, [load]);
@@ -875,8 +881,14 @@ function DeployItem({ target, token, onDelete, onEdit }) {
   const toast = useToast();
   const pluginConfig = usePluginConfig();
   const client = useClient({ apiVersion: "2025-01-01" });
-  const transport = pluginConfig.mode === "proxy" ? { mode: "proxy", proxyUrl: pluginConfig.proxyUrl ?? "", statusKey: pluginConfig.statusKey } : { mode: "direct", token };
-  const targetRef = { projectId, hookId, proxyKey: target.proxyKey, teamId: target.teamId };
+  const transport = useMemo2(
+    () => pluginConfig.mode === "proxy" ? { mode: "proxy", proxyUrl: pluginConfig.proxyUrl ?? "", statusKey: pluginConfig.statusKey } : { mode: "direct", token },
+    [pluginConfig.mode, pluginConfig.proxyUrl, pluginConfig.statusKey, token]
+  );
+  const targetRef = useMemo2(
+    () => ({ projectId, hookId, proxyKey: target.proxyKey, teamId: target.teamId }),
+    [projectId, hookId, target.proxyKey, target.teamId]
+  );
   const [deployments, setDeployments] = useState5([]);
   const [loadingInitial, setLoadingInitial] = useState5(true);
   const [pendingSince, setPendingSince] = useState5(null);
@@ -904,7 +916,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
   const isPending = pendingSince !== null;
   const isActive = isPending || isActiveState(latest?.state);
   const fetchDeployments2 = useCallback4(async () => {
-    const ready = transport.mode === "proxy" ? Boolean(target.proxyKey && pluginConfig.proxyUrl) : Boolean(projectId && hookId && token);
+    const ready = transport.mode === "proxy" ? Boolean(targetRef.proxyKey && transport.proxyUrl) : Boolean(targetRef.projectId && targetRef.hookId && transport.token);
     if (!ready) return;
     const seq = ++requestSeqRef.current;
     try {
@@ -917,7 +929,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
       setPollError(err instanceof Error ? err.message : "Could not reach the Vercel API");
       console.error("Deploy-vercel-from-sanity: fetch error", err);
     }
-  }, [projectId, hookId, token, target.teamId, target.proxyKey, transport.mode, pluginConfig.proxyUrl]);
+  }, [transport, targetRef]);
   useEffect4(() => {
     fetchDeployments2().finally(() => setLoadingInitial(false));
   }, [fetchDeployments2]);
@@ -1008,7 +1020,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
     } finally {
       setCanceling(false);
     }
-  }, [latest?.uid, token, target.teamId, fetchDeployments2]);
+  }, [latest?.uid, transport, targetRef, fetchDeployments2]);
   const copyUrl = useCallback4(() => {
     if (!latest?.url) return;
     const fullUrl = deploymentHref(latest.url) ?? "";
@@ -1032,7 +1044,7 @@ function DeployItem({ target, token, onDelete, onEdit }) {
     } finally {
       setLoadingLogs(false);
     }
-  }, [latest?.uid, token, target.teamId]);
+  }, [latest?.uid, transport, targetRef]);
   const toggleErrorLogs = useCallback4(() => {
     if (!showErrorLogs && errorLines.length === 0 && !logError) fetchErrorLogs();
     setShowErrorLogs((v) => !v);
@@ -1597,7 +1609,7 @@ function DeployTargetForm({ initial, onSaved, onClose }) {
 }
 
 // src/version.ts
-var VERSION = "1.3.0";
+var VERSION = "1.3.2";
 
 // src/components/DeployTool.tsx
 import { jsx as jsx13, jsxs as jsxs9 } from "react/jsx-runtime";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@liiift-studio/deploy-vercel-from-sanity",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "Sanity Studio plugin — trigger and monitor Vercel deployments with full status, history, and build logs. Supports Studio v3.30 through v6.",
   "license": "MIT",
   "author": "Liiift Studio",
@@ -41,7 +41,11 @@
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run lint && npm run typecheck && npm test && npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "lint": "eslint ."
   },
   "peerDependencies": {
     "@sanity/icons": ">=2 <6",
@@ -55,11 +59,16 @@
     "@sanity/ui": "^4",
     "@types/react": "^19",
     "@types/react-dom": "^19.2.4",
+    "eslint": "^9.39.5",
+    "eslint-plugin-react-hooks": "^5.2.0",
     "react": "^19",
     "react-dom": "^19",
     "sanity": "^6",
+    "styled-components": "^6.5.3",
     "tsup": "^8",
-    "typescript": "^5"
+    "typescript": "^5",
+    "typescript-eslint": "^8.67.0",
+    "vitest": "^3.2.7"
   },
   "repository": {
     "type": "git",