@sanity/cli 5.1.1-next.5 → 6.0.0-alpha.3

package/codemods/reactIconsV3.js

@@ -1,9 +1,9 @@
+// @ts-check
+/* eslint-disable unicorn/no-array-callback-reference, unicorn/no-array-method-this-argument */
+
 const splitRegexp = [/([a-z0-9])([A-Z])/g, /([A-Z])([A-Z][a-z])/g]
 const stripRegexp = /[^A-Z0-9]+/gi
 
-fixIcons.parser = 'tsx'
-module.exports = fixIcons
-
 function fixIcons(fileInfo, api) {
   const j = api.jscodeshift
   const root = j(fileInfo.source)
@@ -14,28 +14,33 @@ function fixIcons(fileInfo, api) {
   //
   // from: import PersonIcon from 'react-icons/lib/md/person'
   //   to: import {MdPerson as PersonIcon} from 'react-icons/md'
-  root
-    .find(api.jscodeshift.ImportDeclaration, (node) => node.source.value.startsWith('react-icons/'))
-    .filter((path) => isLegacyPath(path.node.source.value))
-    .forEach((path) => {
-      const node = path.value
-      const icon = iconSpecFromPath(node.source.value)
-
-      if (!icon) {
-        // import {MdPerson} from 'react-icons/lib/md' => import {MdPerson} from 'react-icons/md'
-        node.source.value = node.source.value.replace(/react-icons\/lib/, 'react-icons')
-        return
-      }
-
-      // import MdPerson from 'react-icons/lib/md/person' => import {MdPerson} from 'react-icons/md'
-      const oldName = path.value.specifiers[0].local.name
-      j(path).replaceWith(
-        j.importDeclaration(
-          [j.importSpecifier(j.identifier(icon.name), j.identifier(oldName))],
-          j.literal(`react-icons/${icon.pack}`),
-        ),
-      )
-    })
+  const allImportDeclarations = root.find(j.ImportDeclaration)
+  const reactIconsImports = []
+  for (const path of allImportDeclarations.paths()) {
+    if (path.node.source.value.startsWith('react-icons/') && isLegacyPath(path.node.source.value)) {
+      reactIconsImports.push(path)
+    }
+  }
+
+  for (const path of reactIconsImports) {
+    const node = path.value
+    const icon = iconSpecFromPath(node.source.value)
+
+    if (!icon) {
+      // import {MdPerson} from 'react-icons/lib/md' => import {MdPerson} from 'react-icons/md'
+      node.source.value = node.source.value.replace(/react-icons\/lib/, 'react-icons')
+      continue
+    }
+
+    // import MdPerson from 'react-icons/lib/md/person' => import {MdPerson} from 'react-icons/md'
+    const oldName = path.value.specifiers[0].local.name
+    j(path).replaceWith(
+      j.importDeclaration(
+        [j.importSpecifier(j.identifier(icon.name), j.identifier(oldName))],
+        j.literal(`react-icons/${icon.pack}`),
+      ),
+    )
+  }
 
   // Requires
   // from: const PersonIcon = require('react-icons/lib/md/person'
@@ -43,28 +48,38 @@ function fixIcons(fileInfo, api) {
   //
   // from: const {MdPerson} = require('react-icons/lib/md')
   //   to: const {MdPerson} = require('react-icons/md')
-  root
-    .find(j.VariableDeclarator, {
-      id: {type: 'Identifier'},
-      init: {callee: {name: 'require'}},
-    })
-    .filter((path) => isLegacyPath(path.value.init.arguments[0].value))
-    .forEach((path) => {
-      const oldName = path.value.id.name
-      const filePath = path.value.init.arguments[0].value
-      const icon = iconSpecFromPath(filePath)
-      const prop = j.objectProperty(j.identifier(icon.name), j.identifier(oldName), false, true)
-      if (oldName === icon.name) {
-        prop.shorthand = true
-      }
-
-      j(path).replaceWith(
-        j.variableDeclarator(
-          j.objectPattern([prop]),
-          j.callExpression(j.identifier('require'), [j.stringLiteral(`react-icons/${icon.pack}`)]),
-        ),
-      )
-    })
+  const allVariableDeclarators = root.find(j.VariableDeclarator, {
+    id: {type: 'Identifier'},
+    init: {callee: {name: 'require'}},
+  })
+  const legacyRequires = []
+  for (const path of allVariableDeclarators.paths()) {
+    if (isLegacyPath(path.value.init.arguments[0].value)) {
+      legacyRequires.push(path)
+    }
+  }
+
+  for (const path of legacyRequires) {
+    const oldName = path.value.id.name
+    const filePath = path.value.init.arguments[0].value
+    const icon = iconSpecFromPath(filePath)
+
+    if (!icon) {
+      continue
+    }
+
+    const prop = j.objectProperty(j.identifier(icon.name), j.identifier(oldName), false, true)
+    if (oldName === icon.name) {
+      prop.shorthand = true
+    }
+
+    j(path).replaceWith(
+      j.variableDeclarator(
+        j.objectPattern([prop]),
+        j.callExpression(j.identifier('require'), [j.stringLiteral(`react-icons/${icon.pack}`)]),
+      ),
+    )
+  }
 
   return root.toSource()
 }
@@ -72,12 +87,21 @@ function fixIcons(fileInfo, api) {
 function pascalCase(input) {
   const inner = replace(input, splitRegexp, '$1\0$2')
   const result = replace(inner, stripRegexp, '\0')
-  return result.slice(0, result.length).split('\0').map(pascalCaseTransform).join('')
+  const parts = result.split('\0')
+  let output = ''
+  for (const part of parts) {
+    output += pascalCaseTransform(part)
+  }
+  return output
 }
 
 function replace(input, re, value) {
   if (re instanceof RegExp) return input.replace(re, value)
-  return re.reduce((str, pattern) => str.replace(pattern, value), input)
+  let result = input
+  for (const pattern of re) {
+    result = result.replace(pattern, value)
+  }
+  return result
 }
 
 function pascalCaseTransform(input) {
@@ -91,12 +115,12 @@ function iconSpecFromPath(path) {
     path.match(/(ai|bi|bs|cg|di|fa|fc|fi|gi|go|gr|hi|im|io|md|ri|si|src|ti|vsc|wi)\/(.*)/) || []
 
   if (!pack) {
-    return undefined
+    return null
   }
 
   const prefix = pack[0].toUpperCase() + pack.slice(1)
   const suffix = pascalCase(icon.replace(/\.jsx?$/, ''))
-  return {pack, name: prefix + suffix}
+  return {name: prefix + suffix, pack}
 }
 
 function isLegacyPath(path) {
@@ -104,3 +128,6 @@ function isLegacyPath(path) {
     path,
   )
 }
+
+fixIcons.parser = 'tsx'
+export default fixIcons

package/dist/SanityHelp.d.ts

@@ -0,0 +1,4 @@
+import { Command, Help } from '@oclif/core';
+export default class SanityHelp extends Help {
+    protected formatCommand(command: Command.Loadable): string;
+}

package/dist/SanityHelp.js

@@ -0,0 +1,43 @@
+import { Help } from '@oclif/core';
+export default class SanityHelp extends Help {
+    formatCommand(command) {
+        const help = super.formatCommand(command);
+        // When `sanity init` is called, but originates from the `create-sanity`
+        // package/binary (eg the one used by `npm create sanity@latest` etc), we want to
+        // customize the help text to show that command instead of `sanity init`. In the
+        // future we may also want to consider prefixing with `npx` etc for non-init
+        // commands - but leaving that for another day.
+        const isFromCreate = process.argv.includes('--from-create') && command.id === 'init';
+        if (!isFromCreate) {
+            return help;
+        }
+        const createCmd = guessCreateCommand();
+        const flagSeparator = needsFlagSeparator() ? ' --' : '';
+        // First replace all `sanity init` references that ends with a newline with the
+        // create variant that does not include any flag separator (eg `--`). Then replace
+        // the other references that do. Most package managers do not require the `--`
+        // separator, but npm does. Only include it if we need to, as the commands look
+        // cleaner without it.
+        return help.replaceAll(/(\s+)sanity(\s+)init(\s*)\n/g, `$1${createCmd}$2\n`).replaceAll(/(\s+)sanity(\s+)init/g, `$1${createCmd}${flagSeparator}`);
+    }
+}
+function guessPackageManager() {
+    const ua = process.env.npm_config_user_agent || '';
+    if (ua.includes('pnpm')) return 'pnpm';
+    if (ua.includes('yarn')) return 'yarn';
+    if (ua.includes('bun')) return 'bun';
+    if (ua.includes('npm')) return 'npm';
+}
+function guessCreateCommand() {
+    const pm = guessPackageManager();
+    if (pm === 'yarn') return `yarn create sanity`;
+    if (pm === 'bun') return `bun create sanity@latest`;
+    if (pm === 'pnpm') return `pnpm create sanity@latest`;
+    return `npm create sanity@latest`;
+}
+function needsFlagSeparator() {
+    const pm = guessPackageManager();
+    return pm === 'npm' || !pm;
+}
+
+//# sourceMappingURL=SanityHelp.js.map

package/dist/SanityHelp.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/SanityHelp.ts"],"sourcesContent":["import {Command, Help} from '@oclif/core'\n\nexport default class SanityHelp extends Help {\n  protected formatCommand(command: Command.Loadable): string {\n    const help = super.formatCommand(command)\n\n    // When `sanity init` is called, but originates from the `create-sanity`\n    // package/binary (eg the one used by `npm create sanity@latest` etc), we want to\n    // customize the help text to show that command instead of `sanity init`. In the\n    // future we may also want to consider prefixing with `npx` etc for non-init\n    // commands - but leaving that for another day.\n    const isFromCreate = process.argv.includes('--from-create') && command.id === 'init'\n    if (!isFromCreate) {\n      return help\n    }\n\n    const createCmd = guessCreateCommand()\n    const flagSeparator = needsFlagSeparator() ? ' --' : ''\n\n    // First replace all `sanity init` references that ends with a newline with the\n    // create variant that does not include any flag separator (eg `--`). Then replace\n    // the other references that do. Most package managers do not require the `--`\n    // separator, but npm does. Only include it if we need to, as the commands look\n    // cleaner without it.\n    return help\n      .replaceAll(/(\\s+)sanity(\\s+)init(\\s*)\\n/g, `$1${createCmd}$2\\n`)\n      .replaceAll(/(\\s+)sanity(\\s+)init/g, `$1${createCmd}${flagSeparator}`)\n  }\n}\n\nfunction guessPackageManager() {\n  const ua = process.env.npm_config_user_agent || ''\n  if (ua.includes('pnpm')) return 'pnpm'\n  if (ua.includes('yarn')) return 'yarn'\n  if (ua.includes('bun')) return 'bun'\n  if (ua.includes('npm')) return 'npm'\n}\n\nfunction guessCreateCommand() {\n  const pm = guessPackageManager()\n  if (pm === 'yarn') return `yarn create sanity`\n  if (pm === 'bun') return `bun create sanity@latest`\n  if (pm === 'pnpm') return `pnpm create sanity@latest`\n  return `npm create sanity@latest`\n}\n\nfunction needsFlagSeparator() {\n  const pm = guessPackageManager()\n  return pm === 'npm' || !pm\n}\n"],"names":["Help","SanityHelp","formatCommand","command","help","isFromCreate","process","argv","includes","id","createCmd","guessCreateCommand","flagSeparator","needsFlagSeparator","replaceAll","guessPackageManager","ua","env","npm_config_user_agent","pm"],"mappings":"AAAA,SAAiBA,IAAI,QAAO,cAAa;AAEzC,eAAe,MAAMC,mBAAmBD;IAC5BE,cAAcC,OAAyB,EAAU;QACzD,MAAMC,OAAO,KAAK,CAACF,cAAcC;QAEjC,wEAAwE;QACxE,iFAAiF;QACjF,gFAAgF;QAChF,4EAA4E;QAC5E,+CAA+C;QAC/C,MAAME,eAAeC,QAAQC,IAAI,CAACC,QAAQ,CAAC,oBAAoBL,QAAQM,EAAE,KAAK;QAC9E,IAAI,CAACJ,cAAc;YACjB,OAAOD;QACT;QAEA,MAAMM,YAAYC;QAClB,MAAMC,gBAAgBC,uBAAuB,QAAQ;QAErD,+EAA+E;QAC/E,kFAAkF;QAClF,8EAA8E;QAC9E,+EAA+E;QAC/E,sBAAsB;QACtB,OAAOT,KACJU,UAAU,CAAC,gCAAgC,CAAC,EAAE,EAAEJ,UAAU,IAAI,CAAC,EAC/DI,UAAU,CAAC,yBAAyB,CAAC,EAAE,EAAEJ,YAAYE,eAAe;IACzE;AACF;AAEA,SAASG;IACP,MAAMC,KAAKV,QAAQW,GAAG,CAACC,qBAAqB,IAAI;IAChD,IAAIF,GAAGR,QAAQ,CAAC,SAAS,OAAO;IAChC,IAAIQ,GAAGR,QAAQ,CAAC,SAAS,OAAO;IAChC,IAAIQ,GAAGR,QAAQ,CAAC,QAAQ,OAAO;IAC/B,IAAIQ,GAAGR,QAAQ,CAAC,QAAQ,OAAO;AACjC;AAEA,SAASG;IACP,MAAMQ,KAAKJ;IACX,IAAII,OAAO,QAAQ,OAAO,CAAC,kBAAkB,CAAC;IAC9C,IAAIA,OAAO,OAAO,OAAO,CAAC,wBAAwB,CAAC;IACnD,IAAIA,OAAO,QAAQ,OAAO,CAAC,yBAAyB,CAAC;IACrD,OAAO,CAAC,wBAAwB,CAAC;AACnC;AAEA,SAASN;IACP,MAAMM,KAAKJ;IACX,OAAOI,OAAO,SAAS,CAACA;AAC1B"}

package/dist/actions/auth/authServer.d.ts

@@ -0,0 +1,33 @@
+import { type Server } from 'node:http';
+import { type SanityClient } from '@sanity/client';
+/**
+ * The response shape from /auth/fetch
+ *
+ * @internal
+ */
+interface TokenDetails {
+    label: string;
+    token: string;
+}
+/**
+ * Start a local HTTP server and wait for a request to the auth callback endpoint.
+ * This happens by the user being sent to a login page with a callback URL that points to
+ * this local server. This request includes a short-lived "SID" (session ID) that we then
+ * do a request to the `/auth/fetch` endpoint with to get the actual auth token,
+ * invalidating the SID in the process.
+ *
+ * If we fail to bind to the first port, we retry with the next port in the list.
+ *
+ * @param options - Options for the server
+ * @returns Resolves with HTTP server instance, a login URL to send user to, and a `token` promise
+ * @internal
+ */
+export declare function startServerForTokenCallback(options: {
+    client: SanityClient;
+    providerUrl: string;
+}): Promise<{
+    loginUrl: URL;
+    server: Server;
+    token: Promise<TokenDetails>;
+}>;
+export {};

package/dist/actions/auth/authServer.js

@@ -0,0 +1,153 @@
+import { createServer } from 'node:http';
+import os from 'node:os';
+import { subdebug } from '@sanity/cli-core';
+const debug = subdebug('auth');
+const callbackPorts = [
+    4321,
+    4000,
+    3003,
+    1234,
+    8080,
+    13_333
+];
+const callbackEndpoint = '/callback';
+const platformNames = {
+    aix: 'AIX',
+    android: 'Android',
+    darwin: 'MacOS',
+    freebsd: 'FreeBSD',
+    linux: 'Linux',
+    openbsd: 'OpenBSD',
+    sunos: 'SunOS',
+    win32: 'Windows'
+};
+/**
+ * Start a local HTTP server and wait for a request to the auth callback endpoint.
+ * This happens by the user being sent to a login page with a callback URL that points to
+ * this local server. This request includes a short-lived "SID" (session ID) that we then
+ * do a request to the `/auth/fetch` endpoint with to get the actual auth token,
+ * invalidating the SID in the process.
+ *
+ * If we fail to bind to the first port, we retry with the next port in the list.
+ *
+ * @param options - Options for the server
+ * @returns Resolves with HTTP server instance, a login URL to send user to, and a `token` promise
+ * @internal
+ */ export function startServerForTokenCallback(options) {
+    const { client, providerUrl } = options;
+    const { apiHost } = client.config();
+    const domain = apiHost.includes('.sanity.work') ? 'www.sanity.work' : 'www.sanity.io';
+    const attemptPorts = [
+        ...callbackPorts
+    ];
+    let callbackPort = attemptPorts.shift();
+    // note: replace with `Promise.withResolvers()` when minimum Node.js is 22+
+    let resolveToken;
+    let rejectToken;
+    const tokenPromise = new Promise((resolve, reject)=>{
+        resolveToken = resolve;
+        rejectToken = reject;
+    });
+    return new Promise((resolve, reject)=>{
+        const server = createServer(async function onCallbackServerRequest(req, res) {
+            function failLoginRequest(code = '') {
+                res.writeHead(303, 'See Other', {
+                    Location: `https://${domain}/login/error${code ? `?error=${code}` : ''}`
+                });
+                res.end();
+                server.close();
+            }
+            const url = new URL(req.url || '/', `http://localhost:${callbackPort}`);
+            if (url.pathname !== callbackEndpoint) {
+                res.writeHead(404, 'Not Found', {
+                    'Content-Type': 'text/plain'
+                });
+                res.write('404 Not Found');
+                res.end();
+                return;
+            }
+            const absoluteTokenUrl = url.searchParams.get('url');
+            if (!absoluteTokenUrl) {
+                failLoginRequest();
+                return;
+            }
+            const tokenUrl = new URL(absoluteTokenUrl);
+            if (!tokenUrl.searchParams.has('sid')) {
+                failLoginRequest('NO_SESSION_ID');
+                return;
+            }
+            let token;
+            try {
+                token = await client.request({
+                    uri: `/auth/fetch${tokenUrl.search}`
+                });
+            } catch (err) {
+                failLoginRequest('UNRESOLVED_SESSION');
+                rejectToken(err instanceof Error ? err : new Error(`Unknown error: ${err}`));
+                return;
+            }
+            res.writeHead(303, 'See Other', {
+                Location: `https://${domain}/login/success`
+            });
+            res.end();
+            server.close();
+            resolveToken(token);
+        });
+        server.on('listening', function onCallbackListen() {
+            // Once the server is successfully listening on a port, we can return the promise.
+            // We'll then await the _token promise_, while the server is running in the background.
+            const loginUrl = getLoginUrl(server, providerUrl);
+            resolve({
+                loginUrl,
+                server,
+                token: tokenPromise
+            });
+        });
+        server.on('error', function onCallbackServerError(err) {
+            if ('code' in err && err.code === 'EADDRINUSE') {
+                callbackPort = attemptPorts.shift();
+                if (!callbackPort) {
+                    reject(new Error('Failed to find port number to bind auth callback server to'));
+                    return;
+                }
+                debug('Port busy, trying %d', callbackPort);
+                server.listen(callbackPort);
+            } else {
+                reject(err);
+            }
+        });
+        debug('Starting callback server on port %d', callbackPort);
+        server.listen(callbackPort);
+    });
+}
+/**
+ * Get the login URL to send the user to for the given local auth token server.
+ *
+ * The generated URL will include a label for the session that includes the
+ * hostname and platform of the current computer, to help identify the session.
+ *
+ * @param server - The local auth token server
+ * @param providerUrl - The URL of the login provider
+ * @returns The login URL
+ * @internal
+ */ function getLoginUrl(server, providerUrl) {
+    const serverUrl = server.address();
+    if (!serverUrl || typeof serverUrl === 'string') {
+        // Note: `serverUrl` is string only when binding to unix sockets,
+        // thus we can safely assume Something Is Wrong™ if it's a string
+        throw new Error('Failed to start auth callback server');
+    }
+    // Build a login URL that redirects back back to OAuth flow on success
+    const loginUrl = new URL(providerUrl);
+    // Prefer `MacOS` over `darwin` etc
+    const platformName = os.platform();
+    const platform = platformName in platformNames ? platformNames[platformName] : platformName;
+    // Prefer `espens-macbook` over `espens-macbook.local`
+    const hostname = os.hostname().replaceAll(/\.(local|lan)$/g, '');
+    loginUrl.searchParams.set('type', 'token');
+    loginUrl.searchParams.set('label', `${hostname} / ${platform}`);
+    loginUrl.searchParams.set('origin', `http://localhost:${serverUrl.port}${callbackEndpoint}`);
+    return loginUrl;
+}
+
+//# sourceMappingURL=authServer.js.map

package/dist/actions/auth/authServer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/actions/auth/authServer.ts"],"sourcesContent":["import {createServer, type Server} from 'node:http'\nimport os from 'node:os'\n\nimport {subdebug} from '@sanity/cli-core'\nimport {type SanityClient} from '@sanity/client'\n\nconst debug = subdebug('auth')\nconst callbackPorts = [4321, 4000, 3003, 1234, 8080, 13_333]\nconst callbackEndpoint = '/callback'\n\nconst platformNames: Record<string, string | undefined> = {\n  aix: 'AIX',\n  android: 'Android',\n  darwin: 'MacOS',\n  freebsd: 'FreeBSD',\n  linux: 'Linux',\n  openbsd: 'OpenBSD',\n  sunos: 'SunOS',\n  win32: 'Windows',\n}\n\n/**\n * The response shape from /auth/fetch\n *\n * @internal\n */\ninterface TokenDetails {\n  label: string\n  token: string\n}\n\n/**\n * Start a local HTTP server and wait for a request to the auth callback endpoint.\n * This happens by the user being sent to a login page with a callback URL that points to\n * this local server. This request includes a short-lived \"SID\" (session ID) that we then\n * do a request to the `/auth/fetch` endpoint with to get the actual auth token,\n * invalidating the SID in the process.\n *\n * If we fail to bind to the first port, we retry with the next port in the list.\n *\n * @param options - Options for the server\n * @returns Resolves with HTTP server instance, a login URL to send user to, and a `token` promise\n * @internal\n */\nexport function startServerForTokenCallback(options: {\n  client: SanityClient\n  providerUrl: string\n}): Promise<{loginUrl: URL; server: Server; token: Promise<TokenDetails>}> {\n  const {client, providerUrl} = options\n  const {apiHost} = client.config()\n  const domain = apiHost.includes('.sanity.work') ? 'www.sanity.work' : 'www.sanity.io'\n\n  const attemptPorts = [...callbackPorts]\n  let callbackPort = attemptPorts.shift()\n\n  // note: replace with `Promise.withResolvers()` when minimum Node.js is 22+\n  let resolveToken: (resolvedToken: PromiseLike<TokenDetails> | TokenDetails) => void\n  let rejectToken: (reason: Error) => void\n  const tokenPromise = new Promise<TokenDetails>((resolve, reject) => {\n    resolveToken = resolve\n    rejectToken = reject\n  })\n\n  return new Promise((resolve, reject) => {\n    const server = createServer(async function onCallbackServerRequest(req, res) {\n      function failLoginRequest(code = '') {\n        res.writeHead(303, 'See Other', {\n          Location: `https://${domain}/login/error${code ? `?error=${code}` : ''}`,\n        })\n        res.end()\n        server.close()\n      }\n\n      const url = new URL(req.url || '/', `http://localhost:${callbackPort}`)\n      if (url.pathname !== callbackEndpoint) {\n        res.writeHead(404, 'Not Found', {'Content-Type': 'text/plain'})\n        res.write('404 Not Found')\n        res.end()\n        return\n      }\n\n      const absoluteTokenUrl = url.searchParams.get('url')\n      if (!absoluteTokenUrl) {\n        failLoginRequest()\n        return\n      }\n\n      const tokenUrl = new URL(absoluteTokenUrl)\n      if (!tokenUrl.searchParams.has('sid')) {\n        failLoginRequest('NO_SESSION_ID')\n        return\n      }\n\n      let token: TokenDetails\n      try {\n        token = await client.request({uri: `/auth/fetch${tokenUrl.search}`})\n      } catch (err) {\n        failLoginRequest('UNRESOLVED_SESSION')\n        rejectToken(err instanceof Error ? err : new Error(`Unknown error: ${err}`))\n        return\n      }\n\n      res.writeHead(303, 'See Other', {Location: `https://${domain}/login/success`})\n      res.end()\n      server.close()\n      resolveToken(token)\n    })\n\n    server.on('listening', function onCallbackListen() {\n      // Once the server is successfully listening on a port, we can return the promise.\n      // We'll then await the _token promise_, while the server is running in the background.\n      const loginUrl = getLoginUrl(server, providerUrl)\n      resolve({loginUrl, server, token: tokenPromise})\n    })\n\n    server.on('error', function onCallbackServerError(err) {\n      if ('code' in err && err.code === 'EADDRINUSE') {\n        callbackPort = attemptPorts.shift()\n        if (!callbackPort) {\n          reject(new Error('Failed to find port number to bind auth callback server to'))\n          return\n        }\n\n        debug('Port busy, trying %d', callbackPort)\n        server.listen(callbackPort)\n      } else {\n        reject(err)\n      }\n    })\n\n    debug('Starting callback server on port %d', callbackPort)\n    server.listen(callbackPort)\n  })\n}\n\n/**\n * Get the login URL to send the user to for the given local auth token server.\n *\n * The generated URL will include a label for the session that includes the\n * hostname and platform of the current computer, to help identify the session.\n *\n * @param server - The local auth token server\n * @param providerUrl - The URL of the login provider\n * @returns The login URL\n * @internal\n */\nfunction getLoginUrl(server: Server, providerUrl: string): URL {\n  const serverUrl = server.address()\n  if (!serverUrl || typeof serverUrl === 'string') {\n    // Note: `serverUrl` is string only when binding to unix sockets,\n    // thus we can safely assume Something Is Wrong™ if it's a string\n    throw new Error('Failed to start auth callback server')\n  }\n\n  // Build a login URL that redirects back back to OAuth flow on success\n  const loginUrl = new URL(providerUrl)\n\n  // Prefer `MacOS` over `darwin` etc\n  const platformName = os.platform()\n  const platform = platformName in platformNames ? platformNames[platformName] : platformName\n\n  // Prefer `espens-macbook` over `espens-macbook.local`\n  const hostname = os.hostname().replaceAll(/\\.(local|lan)$/g, '')\n\n  loginUrl.searchParams.set('type', 'token')\n  loginUrl.searchParams.set('label', `${hostname} / ${platform}`)\n  loginUrl.searchParams.set('origin', `http://localhost:${serverUrl.port}${callbackEndpoint}`)\n\n  return loginUrl\n}\n"],"names":["createServer","os","subdebug","debug","callbackPorts","callbackEndpoint","platformNames","aix","android","darwin","freebsd","linux","openbsd","sunos","win32","startServerForTokenCallback","options","client","providerUrl","apiHost","config","domain","includes","attemptPorts","callbackPort","shift","resolveToken","rejectToken","tokenPromise","Promise","resolve","reject","server","onCallbackServerRequest","req","res","failLoginRequest","code","writeHead","Location","end","close","url","URL","pathname","write","absoluteTokenUrl","searchParams","get","tokenUrl","has","token","request","uri","search","err","Error","on","onCallbackListen","loginUrl","getLoginUrl","onCallbackServerError","listen","serverUrl","address","platformName","platform","hostname","replaceAll","set","port"],"mappings":"AAAA,SAAQA,YAAY,QAAoB,YAAW;AACnD,OAAOC,QAAQ,UAAS;AAExB,SAAQC,QAAQ,QAAO,mBAAkB;AAGzC,MAAMC,QAAQD,SAAS;AACvB,MAAME,gBAAgB;IAAC;IAAM;IAAM;IAAM;IAAM;IAAM;CAAO;AAC5D,MAAMC,mBAAmB;AAEzB,MAAMC,gBAAoD;IACxDC,KAAK;IACLC,SAAS;IACTC,QAAQ;IACRC,SAAS;IACTC,OAAO;IACPC,SAAS;IACTC,OAAO;IACPC,OAAO;AACT;AAYA;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,4BAA4BC,OAG3C;IACC,MAAM,EAACC,MAAM,EAAEC,WAAW,EAAC,GAAGF;IAC9B,MAAM,EAACG,OAAO,EAAC,GAAGF,OAAOG,MAAM;IAC/B,MAAMC,SAASF,QAAQG,QAAQ,CAAC,kBAAkB,oBAAoB;IAEtE,MAAMC,eAAe;WAAInB;KAAc;IACvC,IAAIoB,eAAeD,aAAaE,KAAK;IAErC,2EAA2E;IAC3E,IAAIC;IACJ,IAAIC;IACJ,MAAMC,eAAe,IAAIC,QAAsB,CAACC,SAASC;QACvDL,eAAeI;QACfH,cAAcI;IAChB;IAEA,OAAO,IAAIF,QAAQ,CAACC,SAASC;QAC3B,MAAMC,SAAShC,aAAa,eAAeiC,wBAAwBC,GAAG,EAAEC,GAAG;YACzE,SAASC,iBAAiBC,OAAO,EAAE;gBACjCF,IAAIG,SAAS,CAAC,KAAK,aAAa;oBAC9BC,UAAU,CAAC,QAAQ,EAAElB,OAAO,YAAY,EAAEgB,OAAO,CAAC,OAAO,EAAEA,MAAM,GAAG,IAAI;gBAC1E;gBACAF,IAAIK,GAAG;gBACPR,OAAOS,KAAK;YACd;YAEA,MAAMC,MAAM,IAAIC,IAAIT,IAAIQ,GAAG,IAAI,KAAK,CAAC,iBAAiB,EAAElB,cAAc;YACtE,IAAIkB,IAAIE,QAAQ,KAAKvC,kBAAkB;gBACrC8B,IAAIG,SAAS,CAAC,KAAK,aAAa;oBAAC,gBAAgB;gBAAY;gBAC7DH,IAAIU,KAAK,CAAC;gBACVV,IAAIK,GAAG;gBACP;YACF;YAEA,MAAMM,mBAAmBJ,IAAIK,YAAY,CAACC,GAAG,CAAC;YAC9C,IAAI,CAACF,kBAAkB;gBACrBV;gBACA;YACF;YAEA,MAAMa,WAAW,IAAIN,IAAIG;YACzB,IAAI,CAACG,SAASF,YAAY,CAACG,GAAG,CAAC,QAAQ;gBACrCd,iBAAiB;gBACjB;YACF;YAEA,IAAIe;YACJ,IAAI;gBACFA,QAAQ,MAAMlC,OAAOmC,OAAO,CAAC;oBAACC,KAAK,CAAC,WAAW,EAAEJ,SAASK,MAAM,EAAE;gBAAA;YACpE,EAAE,OAAOC,KAAK;gBACZnB,iBAAiB;gBACjBT,YAAY4B,eAAeC,QAAQD,MAAM,IAAIC,MAAM,CAAC,eAAe,EAAED,KAAK;gBAC1E;YACF;YAEApB,IAAIG,SAAS,CAAC,KAAK,aAAa;gBAACC,UAAU,CAAC,QAAQ,EAAElB,OAAO,cAAc,CAAC;YAAA;YAC5Ec,IAAIK,GAAG;YACPR,OAAOS,KAAK;YACZf,aAAayB;QACf;QAEAnB,OAAOyB,EAAE,CAAC,aAAa,SAASC;YAC9B,kFAAkF;YAClF,uFAAuF;YACvF,MAAMC,WAAWC,YAAY5B,QAAQd;YACrCY,QAAQ;gBAAC6B;gBAAU3B;gBAAQmB,OAAOvB;YAAY;QAChD;QAEAI,OAAOyB,EAAE,CAAC,SAAS,SAASI,sBAAsBN,GAAG;YACnD,IAAI,UAAUA,OAAOA,IAAIlB,IAAI,KAAK,cAAc;gBAC9Cb,eAAeD,aAAaE,KAAK;gBACjC,IAAI,CAACD,cAAc;oBACjBO,OAAO,IAAIyB,MAAM;oBACjB;gBACF;gBAEArD,MAAM,wBAAwBqB;gBAC9BQ,OAAO8B,MAAM,CAACtC;YAChB,OAAO;gBACLO,OAAOwB;YACT;QACF;QAEApD,MAAM,uCAAuCqB;QAC7CQ,OAAO8B,MAAM,CAACtC;IAChB;AACF;AAEA;;;;;;;;;;CAUC,GACD,SAASoC,YAAY5B,MAAc,EAAEd,WAAmB;IACtD,MAAM6C,YAAY/B,OAAOgC,OAAO;IAChC,IAAI,CAACD,aAAa,OAAOA,cAAc,UAAU;QAC/C,iEAAiE;QACjE,iEAAiE;QACjE,MAAM,IAAIP,MAAM;IAClB;IAEA,sEAAsE;IACtE,MAAMG,WAAW,IAAIhB,IAAIzB;IAEzB,mCAAmC;IACnC,MAAM+C,eAAehE,GAAGiE,QAAQ;IAChC,MAAMA,WAAWD,gBAAgB3D,gBAAgBA,aAAa,CAAC2D,aAAa,GAAGA;IAE/E,sDAAsD;IACtD,MAAME,WAAWlE,GAAGkE,QAAQ,GAAGC,UAAU,CAAC,mBAAmB;IAE7DT,SAASZ,YAAY,CAACsB,GAAG,CAAC,QAAQ;IAClCV,SAASZ,YAAY,CAACsB,GAAG,CAAC,SAAS,GAAGF,SAAS,GAAG,EAAED,UAAU;IAC9DP,SAASZ,YAAY,CAACsB,GAAG,CAAC,UAAU,CAAC,iBAAiB,EAAEN,UAAUO,IAAI,GAAGjE,kBAAkB;IAE3F,OAAOsD;AACT"}

package/dist/actions/auth/getProviderName.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Try to get a (prettier) name for a provider by ID.
+ *
+ * @param provider - The provider ID, e.g., 'google', 'github', 'sanity', or 'saml-<name>'.
+ * @returns The display name for the provider.
+ * @internal
+ */
+export declare function getProviderName(provider: string): string;

package/dist/actions/auth/getProviderName.js

@@ -0,0 +1,15 @@
+/**
+ * Try to get a (prettier) name for a provider by ID.
+ *
+ * @param provider - The provider ID, e.g., 'google', 'github', 'sanity', or 'saml-<name>'.
+ * @returns The display name for the provider.
+ * @internal
+ */ export function getProviderName(provider) {
+    if (provider === 'google') return 'Google';
+    if (provider === 'github') return 'GitHub';
+    if (provider === 'sanity') return 'Email';
+    if (provider.startsWith('saml-')) return 'SAML';
+    return provider.charAt(0).toUpperCase() + provider.slice(1);
+}
+
+//# sourceMappingURL=getProviderName.js.map

package/dist/actions/auth/getProviderName.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/actions/auth/getProviderName.ts"],"sourcesContent":["/**\n * Try to get a (prettier) name for a provider by ID.\n *\n * @param provider - The provider ID, e.g., 'google', 'github', 'sanity', or 'saml-<name>'.\n * @returns The display name for the provider.\n * @internal\n */\nexport function getProviderName(provider: string): string {\n  if (provider === 'google') return 'Google'\n  if (provider === 'github') return 'GitHub'\n  if (provider === 'sanity') return 'Email'\n  if (provider.startsWith('saml-')) return 'SAML'\n  return provider.charAt(0).toUpperCase() + provider.slice(1)\n}\n"],"names":["getProviderName","provider","startsWith","charAt","toUpperCase","slice"],"mappings":"AAAA;;;;;;CAMC,GACD,OAAO,SAASA,gBAAgBC,QAAgB;IAC9C,IAAIA,aAAa,UAAU,OAAO;IAClC,IAAIA,aAAa,UAAU,OAAO;IAClC,IAAIA,aAAa,UAAU,OAAO;IAClC,IAAIA,SAASC,UAAU,CAAC,UAAU,OAAO;IACzC,OAAOD,SAASE,MAAM,CAAC,GAAGC,WAAW,KAAKH,SAASI,KAAK,CAAC;AAC3D"}

package/dist/actions/auth/login/getProvider.d.ts

@@ -0,0 +1,15 @@
+import { type SanityClient } from '@sanity/client';
+import { type LoginProvider } from '../types.js';
+/**
+ * Prompt the user to select a login provider, or use the specified provider if given.
+ *
+ * @param options - Options for the provider resolve operation
+ * @returns Promise that resolves to the selected login provider
+ * @internal
+ */
+export declare function getProvider({ client, experimental, orgSlug, specifiedProvider, }: {
+    client: SanityClient;
+    experimental: boolean | undefined;
+    orgSlug: string | undefined;
+    specifiedProvider: string | undefined;
+}): Promise<LoginProvider | undefined>;

package/dist/actions/auth/login/getProvider.js

@@ -0,0 +1,54 @@
+import { input, spinner } from '@sanity/cli-core/ux';
+import { getSSOProvider } from './getSSOProvider.js';
+import { promptProviders } from './promptProviders.js';
+/**
+ * Prompt the user to select a login provider, or use the specified provider if given.
+ *
+ * @param options - Options for the provider resolve operation
+ * @returns Promise that resolves to the selected login provider
+ * @internal
+ */ export async function getProvider({ client, experimental, orgSlug, specifiedProvider }) {
+    if (orgSlug) {
+        return getSSOProvider({
+            client,
+            orgSlug
+        });
+    }
+    // Fetch and prompt for login provider to use
+    const spin = spinner('Fetching providers...').start();
+    let { providers } = await client.request({
+        uri: '/auth/providers'
+    });
+    if (experimental) {
+        providers = [
+            ...providers,
+            {
+                name: 'sso',
+                title: 'SSO',
+                url: '_not_used_'
+            }
+        ];
+    }
+    spin.stop();
+    const providerNames = providers.map((prov)=>prov.name);
+    if (specifiedProvider && providerNames.includes(specifiedProvider)) {
+        const provider = providers.find((prov)=>prov.name === specifiedProvider);
+        if (!provider) {
+            throw new Error(`Cannot find login provider with name "${specifiedProvider}"`);
+        }
+        return provider;
+    }
+    const provider = await promptProviders(providers);
+    if (provider.name === 'sso') {
+        const orgSlug = await input({
+            message: 'Organization slug:'
+        });
+        return getSSOProvider({
+            client,
+            orgSlug
+        });
+    }
+    return provider;
+}
+
+//# sourceMappingURL=getProvider.js.map

package/dist/actions/auth/login/getProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/actions/auth/login/getProvider.ts"],"sourcesContent":["import {input, spinner} from '@sanity/cli-core/ux'\nimport {type SanityClient} from '@sanity/client'\n\nimport {type LoginProvider, type ProvidersResponse} from '../types.js'\nimport {getSSOProvider} from './getSSOProvider.js'\nimport {promptProviders} from './promptProviders.js'\n\n/**\n * Prompt the user to select a login provider, or use the specified provider if given.\n *\n * @param options - Options for the provider resolve operation\n * @returns Promise that resolves to the selected login provider\n * @internal\n */\nexport async function getProvider({\n  client,\n  experimental,\n  orgSlug,\n  specifiedProvider,\n}: {\n  client: SanityClient\n  experimental: boolean | undefined\n  orgSlug: string | undefined\n  specifiedProvider: string | undefined\n}): Promise<LoginProvider | undefined> {\n  if (orgSlug) {\n    return getSSOProvider({client, orgSlug})\n  }\n\n  // Fetch and prompt for login provider to use\n  const spin = spinner('Fetching providers...').start()\n  let {providers} = await client.request<ProvidersResponse>({uri: '/auth/providers'})\n  if (experimental) {\n    providers = [...providers, {name: 'sso', title: 'SSO', url: '_not_used_'}]\n  }\n  spin.stop()\n\n  const providerNames = providers.map((prov) => prov.name)\n\n  if (specifiedProvider && providerNames.includes(specifiedProvider)) {\n    const provider = providers.find((prov) => prov.name === specifiedProvider)\n\n    if (!provider) {\n      throw new Error(`Cannot find login provider with name \"${specifiedProvider}\"`)\n    }\n\n    return provider\n  }\n\n  const provider = await promptProviders(providers)\n  if (provider.name === 'sso') {\n    const orgSlug = await input({message: 'Organization slug:'})\n    return getSSOProvider({client, orgSlug})\n  }\n\n  return provider\n}\n"],"names":["input","spinner","getSSOProvider","promptProviders","getProvider","client","experimental","orgSlug","specifiedProvider","spin","start","providers","request","uri","name","title","url","stop","providerNames","map","prov","includes","provider","find","Error","message"],"mappings":"AAAA,SAAQA,KAAK,EAAEC,OAAO,QAAO,sBAAqB;AAIlD,SAAQC,cAAc,QAAO,sBAAqB;AAClD,SAAQC,eAAe,QAAO,uBAAsB;AAEpD;;;;;;CAMC,GACD,OAAO,eAAeC,YAAY,EAChCC,MAAM,EACNC,YAAY,EACZC,OAAO,EACPC,iBAAiB,EAMlB;IACC,IAAID,SAAS;QACX,OAAOL,eAAe;YAACG;YAAQE;QAAO;IACxC;IAEA,6CAA6C;IAC7C,MAAME,OAAOR,QAAQ,yBAAyBS,KAAK;IACnD,IAAI,EAACC,SAAS,EAAC,GAAG,MAAMN,OAAOO,OAAO,CAAoB;QAACC,KAAK;IAAiB;IACjF,IAAIP,cAAc;QAChBK,YAAY;eAAIA;YAAW;gBAACG,MAAM;gBAAOC,OAAO;gBAAOC,KAAK;YAAY;SAAE;IAC5E;IACAP,KAAKQ,IAAI;IAET,MAAMC,gBAAgBP,UAAUQ,GAAG,CAAC,CAACC,OAASA,KAAKN,IAAI;IAEvD,IAAIN,qBAAqBU,cAAcG,QAAQ,CAACb,oBAAoB;QAClE,MAAMc,WAAWX,UAAUY,IAAI,CAAC,CAACH,OAASA,KAAKN,IAAI,KAAKN;QAExD,IAAI,CAACc,UAAU;YACb,MAAM,IAAIE,MAAM,CAAC,sCAAsC,EAAEhB,kBAAkB,CAAC,CAAC;QAC/E;QAEA,OAAOc;IACT;IAEA,MAAMA,WAAW,MAAMnB,gBAAgBQ;IACvC,IAAIW,SAASR,IAAI,KAAK,OAAO;QAC3B,MAAMP,UAAU,MAAMP,MAAM;YAACyB,SAAS;QAAoB;QAC1D,OAAOvB,eAAe;YAACG;YAAQE;QAAO;IACxC;IAEA,OAAOe;AACT"}

package/dist/actions/auth/login/getSSOProvider.d.ts

@@ -0,0 +1,13 @@
+import { type SanityClient } from '@sanity/client';
+import { type LoginProvider } from '../types.js';
+/**
+ * Get the SSO provider for the given slug
+ *
+ * @param options - Options for the provider resolve operation
+ * @returns Promise that resolves to the SSO provider
+ * @internal
+ */
+export declare function getSSOProvider({ client, orgSlug, }: {
+    client: SanityClient;
+    orgSlug: string;
+}): Promise<LoginProvider | undefined>;

package/dist/actions/auth/login/getSSOProvider.js

@@ -0,0 +1,30 @@
+import { select } from '@sanity/cli-core/ux';
+import { samlProviderToLoginProvider } from './samlProviderToLoginProvider.js';
+/**
+ * Get the SSO provider for the given slug
+ *
+ * @param options - Options for the provider resolve operation
+ * @returns Promise that resolves to the SSO provider
+ * @internal
+ */ export async function getSSOProvider({ client, orgSlug }) {
+    const providers = await client.request({
+        uri: `/auth/organizations/by-slug/${orgSlug}/providers`
+    });
+    const enabledProviders = providers.filter((candidate)=>!candidate.disabled);
+    if (enabledProviders.length === 0) {
+        return undefined;
+    }
+    if (enabledProviders.length === 1) {
+        return samlProviderToLoginProvider(enabledProviders[0]);
+    }
+    const selectedProvider = await select({
+        choices: enabledProviders.map((provider)=>({
+                name: provider.name,
+                value: provider
+            })),
+        message: 'Select SSO provider'
+    });
+    return selectedProvider ? samlProviderToLoginProvider(selectedProvider) : undefined;
+}
+
+//# sourceMappingURL=getSSOProvider.js.map

package/dist/actions/auth/login/getSSOProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/actions/auth/login/getSSOProvider.ts"],"sourcesContent":["import {select} from '@sanity/cli-core/ux'\nimport {type SanityClient} from '@sanity/client'\n\nimport {type LoginProvider, type SamlLoginProvider} from '../types.js'\nimport {samlProviderToLoginProvider} from './samlProviderToLoginProvider.js'\n\n/**\n * Get the SSO provider for the given slug\n *\n * @param options - Options for the provider resolve operation\n * @returns Promise that resolves to the SSO provider\n * @internal\n */\nexport async function getSSOProvider({\n  client,\n  orgSlug,\n}: {\n  client: SanityClient\n  orgSlug: string\n}): Promise<LoginProvider | undefined> {\n  const providers = await client.request<SamlLoginProvider[]>({\n    uri: `/auth/organizations/by-slug/${orgSlug}/providers`,\n  })\n\n  const enabledProviders = providers.filter((candidate) => !candidate.disabled)\n  if (enabledProviders.length === 0) {\n    return undefined\n  }\n\n  if (enabledProviders.length === 1) {\n    return samlProviderToLoginProvider(enabledProviders[0])\n  }\n\n  const selectedProvider = await select({\n    choices: enabledProviders.map((provider) => ({name: provider.name, value: provider})),\n    message: 'Select SSO provider',\n  })\n\n  return selectedProvider ? samlProviderToLoginProvider(selectedProvider) : undefined\n}\n"],"names":["select","samlProviderToLoginProvider","getSSOProvider","client","orgSlug","providers","request","uri","enabledProviders","filter","candidate","disabled","length","undefined","selectedProvider","choices","map","provider","name","value","message"],"mappings":"AAAA,SAAQA,MAAM,QAAO,sBAAqB;AAI1C,SAAQC,2BAA2B,QAAO,mCAAkC;AAE5E;;;;;;CAMC,GACD,OAAO,eAAeC,eAAe,EACnCC,MAAM,EACNC,OAAO,EAIR;IACC,MAAMC,YAAY,MAAMF,OAAOG,OAAO,CAAsB;QAC1DC,KAAK,CAAC,4BAA4B,EAAEH,QAAQ,UAAU,CAAC;IACzD;IAEA,MAAMI,mBAAmBH,UAAUI,MAAM,CAAC,CAACC,YAAc,CAACA,UAAUC,QAAQ;IAC5E,IAAIH,iBAAiBI,MAAM,KAAK,GAAG;QACjC,OAAOC;IACT;IAEA,IAAIL,iBAAiBI,MAAM,KAAK,GAAG;QACjC,OAAOX,4BAA4BO,gBAAgB,CAAC,EAAE;IACxD;IAEA,MAAMM,mBAAmB,MAAMd,OAAO;QACpCe,SAASP,iBAAiBQ,GAAG,CAAC,CAACC,WAAc,CAAA;gBAACC,MAAMD,SAASC,IAAI;gBAAEC,OAAOF;YAAQ,CAAA;QAClFG,SAAS;IACX;IAEA,OAAON,mBAAmBb,4BAA4Ba,oBAAoBD;AAC5E"}

package/dist/actions/auth/login/index.d.ts

@@ -0,0 +1,20 @@
+import { type Output } from '@sanity/cli-core';
+interface LoginOptions {
+    output: Output;
+    experimental?: boolean;
+    open?: boolean;
+    provider?: string;
+    sso?: string;
+}
+/**
+ * Trigger the authentication flow for the CLI.
+ *
+ * NOTE: This uses terminal prompts and will not work for non-interactive/programmatic uses.
+ *
+ * @param options - Options for the login operation
+ * @returns Promise that resolves when the login operation is complete
+ * @throws Will throw if login fails or is cancelled
+ * @internal
+ */
+export declare function login(options: LoginOptions): Promise<void>;
+export {};