@sanity/cli 5.1.1-next.5 → 6.0.0-alpha.3

package/dist/commands/cors/__tests__/delete.test.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/commands/cors/__tests__/delete.test.ts"],"sourcesContent":["import {runCommand} from '@oclif/test'\nimport {mockApi, testCommand} from '@sanity/cli-test'\nimport nock from 'nock'\nimport {afterEach, describe, expect, test, vi} from 'vitest'\n\nimport {CORS_API_VERSION} from '../../../actions/cors/constants.js'\nimport {type CorsOrigin} from '../../../actions/cors/types.js'\nimport {NO_PROJECT_ID} from '../../../util/errorMessages.js'\nimport {Delete} from '../delete.js'\n\n// Test fixtures\nconst createCorsOrigin = (\n  overrides: Partial<CorsOrigin> & {id: number; origin: string},\n): CorsOrigin => ({\n  allowCredentials: true,\n  createdAt: '2023-01-01T00:00:00Z',\n  deletedAt: null,\n  projectId: 'test-project',\n  updatedAt: null,\n  ...overrides,\n})\n\nconst TEST_ORIGINS = {\n  APP_EXAMPLE: createCorsOrigin({\n    allowCredentials: false,\n    id: 2,\n    origin: 'https://app.example.com',\n  }),\n  CASE_MIXED: createCorsOrigin({id: 1, origin: 'https://Example.Com'}),\n  EXAMPLE: createCorsOrigin({id: 1, origin: 'https://example.com'}),\n  LOCALHOST: createCorsOrigin({id: 1, origin: 'http://localhost:3000'}),\n  SPECIAL_CHARS: createCorsOrigin({id: 1, origin: 'https://café.example.com'}),\n} as const\n\n// Mock the config functions with relative paths\nvi.mock('../../../../../cli-core/src/config/findProjectRoot.js', () => ({\n  findProjectRoot: vi.fn().mockResolvedValue({\n    directory: '/test/path',\n    root: '/test/path',\n    type: 'studio',\n  }),\n}))\n\nvi.mock('../../../../../cli-core/src/config/cli/getCliConfig.js', () => ({\n  getCliConfig: vi.fn().mockResolvedValue({\n    api: {\n      projectId: 'test-project',\n    },\n  }),\n}))\n\nvi.mock('../../../../../cli-core/src/services/getCliToken.js', () => ({\n  getCliToken: vi.fn().mockResolvedValue('test-token'),\n}))\n\n// Mock inquirer prompts\nvi.mock('@sanity/cli-core/ux', async () => {\n  const actual = await vi.importActual<typeof import('@sanity/cli-core/ux')>('@sanity/cli-core/ux')\n  return {\n    ...actual,\n    select: vi.fn(),\n  }\n})\n\ndescribe('#cors:delete', () => {\n  afterEach(() => {\n    vi.clearAllMocks()\n    const pending = nock.pendingMocks()\n    nock.cleanAll()\n    expect(pending, 'pending mocks').toEqual([])\n  })\n\n  test('--help works', async () => {\n    const {stdout} = await runCommand(['cors delete', '--help'])\n    expect(stdout).toContain('Delete an existing CORS origin from your project')\n  })\n\n  test('deletes a specific CORS origin', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [TEST_ORIGINS.EXAMPLE, TEST_ORIGINS.APP_EXAMPLE])\n\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      method: 'delete',\n      uri: '/projects/test-project/cors/1',\n    }).reply(204)\n\n    const {stdout} = await testCommand(Delete, ['https://example.com'])\n    expect(stdout).toBe('Origin deleted\\n')\n  })\n\n  test('prompts user to select origin when none specified', async () => {\n    const {select} = await import('@sanity/cli-core/ux')\n    vi.mocked(select).mockResolvedValue(2)\n\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [TEST_ORIGINS.EXAMPLE, TEST_ORIGINS.APP_EXAMPLE])\n\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      method: 'delete',\n      uri: '/projects/test-project/cors/2',\n    }).reply(204)\n\n    const {stdout} = await testCommand(Delete)\n    expect(stdout).toBe('Origin deleted\\n')\n    expect(select).toHaveBeenCalledWith({\n      choices: [\n        {name: 'https://example.com', value: 1},\n        {name: 'https://app.example.com', value: 2},\n      ],\n      message: 'Select origin to delete',\n    })\n  })\n\n  test('handles case-insensitive origin matching', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [TEST_ORIGINS.CASE_MIXED])\n\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      method: 'delete',\n      uri: '/projects/test-project/cors/1',\n    }).reply(204)\n\n    const {stdout} = await testCommand(Delete, ['https://example.com'])\n    expect(stdout).toBe('Origin deleted\\n')\n  })\n\n  test('throws error when specified origin is not found', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [TEST_ORIGINS.EXAMPLE])\n\n    const {error} = await testCommand(Delete, ['https://nonexistent.com'])\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual('Origin \"https://nonexistent.com\" not found')\n    expect(error?.oclif?.exit).toBe(1)\n  })\n\n  test('throws error when no CORS origins exist', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [])\n\n    const {error} = await testCommand(Delete, ['https://example.com'])\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual('No CORS origins configured for this project.')\n    expect(error?.oclif?.exit).toBe(1)\n  })\n\n  test.each([\n    {desc: 'when fetching origins', message: 'Internal Server Error', statusCode: 500},\n    {desc: 'with 404 error when fetching origins', message: 'Project not found', statusCode: 404},\n  ])('handles API error $desc', async ({message, statusCode}) => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(statusCode, {message})\n\n    const {error} = await testCommand(Delete, ['https://example.com'])\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('Failed to fetch CORS origins')\n    expect(error?.message).toContain(message)\n    expect(error?.oclif?.exit).toBe(1)\n  })\n\n  test.each([\n    {desc: 'when deleting origin', message: 'Failed to delete', statusCode: 500},\n    {desc: 'with 404 error when deleting origin', message: 'Origin not found', statusCode: 404},\n  ])('handles API error $desc', async ({message, statusCode}) => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [TEST_ORIGINS.EXAMPLE])\n\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      method: 'delete',\n      uri: '/projects/test-project/cors/1',\n    }).reply(statusCode, {message})\n\n    const {error} = await testCommand(Delete, ['https://example.com'])\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('Origin deletion failed')\n    expect(error?.message).toContain(message)\n    expect(error?.oclif?.exit).toBe(1)\n  })\n\n  test.each([\n    {desc: 'no project ID is found', projectId: undefined},\n    {desc: 'project ID is empty string', projectId: ''},\n  ])('throws error when $desc', async ({projectId}) => {\n    const {getCliConfig} = await import('../../../../../cli-core/src/config/cli/getCliConfig.js')\n    vi.mocked(getCliConfig).mockResolvedValueOnce({\n      api: {projectId},\n    })\n\n    const {error} = await testCommand(Delete, ['https://example.com'])\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n    expect(error?.oclif?.exit).toBe(1)\n  })\n\n  test('handles network errors when fetching origins', async () => {\n    // Don't set up any mock to simulate network failure\n    const {error} = await testCommand(Delete, ['https://example.com'])\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('Failed to fetch CORS origins')\n    expect(error?.oclif?.exit).toBe(1)\n  })\n\n  test.each([\n    {\n      desc: 'special characters',\n      input: 'https://café.example.com',\n      origin: TEST_ORIGINS.SPECIAL_CHARS,\n    },\n    {desc: 'ports', input: 'http://localhost:3000', origin: TEST_ORIGINS.LOCALHOST},\n  ])('handles $desc in origin names', async ({input, origin}) => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [origin])\n\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      method: 'delete',\n      uri: '/projects/test-project/cors/1',\n    }).reply(204)\n\n    const {stdout} = await testCommand(Delete, [input])\n    expect(stdout).toBe('Origin deleted\\n')\n  })\n})\n"],"names":["runCommand","mockApi","testCommand","nock","afterEach","describe","expect","test","vi","CORS_API_VERSION","NO_PROJECT_ID","Delete","createCorsOrigin","overrides","allowCredentials","createdAt","deletedAt","projectId","updatedAt","TEST_ORIGINS","APP_EXAMPLE","id","origin","CASE_MIXED","EXAMPLE","LOCALHOST","SPECIAL_CHARS","mock","findProjectRoot","fn","mockResolvedValue","directory","root","type","getCliConfig","api","getCliToken","actual","importActual","select","clearAllMocks","pending","pendingMocks","cleanAll","toEqual","stdout","toContain","apiVersion","uri","reply","method","toBe","mocked","toHaveBeenCalledWith","choices","name","value","message","error","toBeInstanceOf","Error","oclif","exit","each","desc","statusCode","undefined","mockResolvedValueOnce","input"],"mappings":"AAAA,SAAQA,UAAU,QAAO,cAAa;AACtC,SAAQC,OAAO,EAAEC,WAAW,QAAO,mBAAkB;AACrD,OAAOC,UAAU,OAAM;AACvB,SAAQC,SAAS,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,IAAI,EAAEC,EAAE,QAAO,SAAQ;AAE5D,SAAQC,gBAAgB,QAAO,qCAAoC;AAEnE,SAAQC,aAAa,QAAO,iCAAgC;AAC5D,SAAQC,MAAM,QAAO,eAAc;AAEnC,gBAAgB;AAChB,MAAMC,mBAAmB,CACvBC,YACgB,CAAA;QAChBC,kBAAkB;QAClBC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,WAAW;QACX,GAAGL,SAAS;IACd,CAAA;AAEA,MAAMM,eAAe;IACnBC,aAAaR,iBAAiB;QAC5BE,kBAAkB;QAClBO,IAAI;QACJC,QAAQ;IACV;IACAC,YAAYX,iBAAiB;QAACS,IAAI;QAAGC,QAAQ;IAAqB;IAClEE,SAASZ,iBAAiB;QAACS,IAAI;QAAGC,QAAQ;IAAqB;IAC/DG,WAAWb,iBAAiB;QAACS,IAAI;QAAGC,QAAQ;IAAuB;IACnEI,eAAed,iBAAiB;QAACS,IAAI;QAAGC,QAAQ;IAA0B;AAC5E;AAEA,gDAAgD;AAChDd,GAAGmB,IAAI,CAAC,yDAAyD,IAAO,CAAA;QACtEC,iBAAiBpB,GAAGqB,EAAE,GAAGC,iBAAiB,CAAC;YACzCC,WAAW;YACXC,MAAM;YACNC,MAAM;QACR;IACF,CAAA;AAEAzB,GAAGmB,IAAI,CAAC,0DAA0D,IAAO,CAAA;QACvEO,cAAc1B,GAAGqB,EAAE,GAAGC,iBAAiB,CAAC;YACtCK,KAAK;gBACHlB,WAAW;YACb;QACF;IACF,CAAA;AAEAT,GAAGmB,IAAI,CAAC,uDAAuD,IAAO,CAAA;QACpES,aAAa5B,GAAGqB,EAAE,GAAGC,iBAAiB,CAAC;IACzC,CAAA;AAEA,wBAAwB;AACxBtB,GAAGmB,IAAI,CAAC,uBAAuB;IAC7B,MAAMU,SAAS,MAAM7B,GAAG8B,YAAY,CAAuC;IAC3E,OAAO;QACL,GAAGD,MAAM;QACTE,QAAQ/B,GAAGqB,EAAE;IACf;AACF;AAEAxB,SAAS,gBAAgB;IACvBD,UAAU;QACRI,GAAGgC,aAAa;QAChB,MAAMC,UAAUtC,KAAKuC,YAAY;QACjCvC,KAAKwC,QAAQ;QACbrC,OAAOmC,SAAS,iBAAiBG,OAAO,CAAC,EAAE;IAC7C;IAEArC,KAAK,gBAAgB;QACnB,MAAM,EAACsC,MAAM,EAAC,GAAG,MAAM7C,WAAW;YAAC;YAAe;SAAS;QAC3DM,OAAOuC,QAAQC,SAAS,CAAC;IAC3B;IAEAvC,KAAK,kCAAkC;QACrCN,QAAQ;YACN8C,YAAYtC;YACZuC,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAAC9B,aAAaK,OAAO;YAAEL,aAAaC,WAAW;SAAC;QAE9DnB,QAAQ;YACN8C,YAAYtC;YACZyC,QAAQ;YACRF,KAAK;QACP,GAAGC,KAAK,CAAC;QAET,MAAM,EAACJ,MAAM,EAAC,GAAG,MAAM3C,YAAYS,QAAQ;YAAC;SAAsB;QAClEL,OAAOuC,QAAQM,IAAI,CAAC;IACtB;IAEA5C,KAAK,qDAAqD;QACxD,MAAM,EAACgC,MAAM,EAAC,GAAG,MAAM,MAAM,CAAC;QAC9B/B,GAAG4C,MAAM,CAACb,QAAQT,iBAAiB,CAAC;QAEpC7B,QAAQ;YACN8C,YAAYtC;YACZuC,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAAC9B,aAAaK,OAAO;YAAEL,aAAaC,WAAW;SAAC;QAE9DnB,QAAQ;YACN8C,YAAYtC;YACZyC,QAAQ;YACRF,KAAK;QACP,GAAGC,KAAK,CAAC;QAET,MAAM,EAACJ,MAAM,EAAC,GAAG,MAAM3C,YAAYS;QACnCL,OAAOuC,QAAQM,IAAI,CAAC;QACpB7C,OAAOiC,QAAQc,oBAAoB,CAAC;YAClCC,SAAS;gBACP;oBAACC,MAAM;oBAAuBC,OAAO;gBAAC;gBACtC;oBAACD,MAAM;oBAA2BC,OAAO;gBAAC;aAC3C;YACDC,SAAS;QACX;IACF;IAEAlD,KAAK,4CAA4C;QAC/CN,QAAQ;YACN8C,YAAYtC;YACZuC,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAAC9B,aAAaI,UAAU;SAAC;QAEvCtB,QAAQ;YACN8C,YAAYtC;YACZyC,QAAQ;YACRF,KAAK;QACP,GAAGC,KAAK,CAAC;QAET,MAAM,EAACJ,MAAM,EAAC,GAAG,MAAM3C,YAAYS,QAAQ;YAAC;SAAsB;QAClEL,OAAOuC,QAAQM,IAAI,CAAC;IACtB;IAEA5C,KAAK,mDAAmD;QACtDN,QAAQ;YACN8C,YAAYtC;YACZuC,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAAC9B,aAAaK,OAAO;SAAC;QAEpC,MAAM,EAACkC,KAAK,EAAC,GAAG,MAAMxD,YAAYS,QAAQ;YAAC;SAA0B;QACrEL,OAAOoD,OAAOC,cAAc,CAACC;QAC7BtD,OAAOoD,OAAOD,SAASb,OAAO,CAAC;QAC/BtC,OAAOoD,OAAOG,OAAOC,MAAMX,IAAI,CAAC;IAClC;IAEA5C,KAAK,2CAA2C;QAC9CN,QAAQ;YACN8C,YAAYtC;YACZuC,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK,EAAE;QAEhB,MAAM,EAACS,KAAK,EAAC,GAAG,MAAMxD,YAAYS,QAAQ;YAAC;SAAsB;QACjEL,OAAOoD,OAAOC,cAAc,CAACC;QAC7BtD,OAAOoD,OAAOD,SAASb,OAAO,CAAC;QAC/BtC,OAAOoD,OAAOG,OAAOC,MAAMX,IAAI,CAAC;IAClC;IAEA5C,KAAKwD,IAAI,CAAC;QACR;YAACC,MAAM;YAAyBP,SAAS;YAAyBQ,YAAY;QAAG;QACjF;YAACD,MAAM;YAAwCP,SAAS;YAAqBQ,YAAY;QAAG;KAC7F,EAAE,2BAA2B,OAAO,EAACR,OAAO,EAAEQ,UAAU,EAAC;QACxDhE,QAAQ;YACN8C,YAAYtC;YACZuC,KAAK;QACP,GAAGC,KAAK,CAACgB,YAAY;YAACR;QAAO;QAE7B,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMxD,YAAYS,QAAQ;YAAC;SAAsB;QACjEL,OAAOoD,OAAOC,cAAc,CAACC;QAC7BtD,OAAOoD,OAAOD,SAASX,SAAS,CAAC;QACjCxC,OAAOoD,OAAOD,SAASX,SAAS,CAACW;QACjCnD,OAAOoD,OAAOG,OAAOC,MAAMX,IAAI,CAAC;IAClC;IAEA5C,KAAKwD,IAAI,CAAC;QACR;YAACC,MAAM;YAAwBP,SAAS;YAAoBQ,YAAY;QAAG;QAC3E;YAACD,MAAM;YAAuCP,SAAS;YAAoBQ,YAAY;QAAG;KAC3F,EAAE,2BAA2B,OAAO,EAACR,OAAO,EAAEQ,UAAU,EAAC;QACxDhE,QAAQ;YACN8C,YAAYtC;YACZuC,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAAC9B,aAAaK,OAAO;SAAC;QAEpCvB,QAAQ;YACN8C,YAAYtC;YACZyC,QAAQ;YACRF,KAAK;QACP,GAAGC,KAAK,CAACgB,YAAY;YAACR;QAAO;QAE7B,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMxD,YAAYS,QAAQ;YAAC;SAAsB;QACjEL,OAAOoD,OAAOC,cAAc,CAACC;QAC7BtD,OAAOoD,OAAOD,SAASX,SAAS,CAAC;QACjCxC,OAAOoD,OAAOD,SAASX,SAAS,CAACW;QACjCnD,OAAOoD,OAAOG,OAAOC,MAAMX,IAAI,CAAC;IAClC;IAEA5C,KAAKwD,IAAI,CAAC;QACR;YAACC,MAAM;YAA0B/C,WAAWiD;QAAS;QACrD;YAACF,MAAM;YAA8B/C,WAAW;QAAE;KACnD,EAAE,2BAA2B,OAAO,EAACA,SAAS,EAAC;QAC9C,MAAM,EAACiB,YAAY,EAAC,GAAG,MAAM,MAAM,CAAC;QACpC1B,GAAG4C,MAAM,CAAClB,cAAciC,qBAAqB,CAAC;YAC5ChC,KAAK;gBAAClB;YAAS;QACjB;QAEA,MAAM,EAACyC,KAAK,EAAC,GAAG,MAAMxD,YAAYS,QAAQ;YAAC;SAAsB;QACjEL,OAAOoD,OAAOC,cAAc,CAACC;QAC7BtD,OAAOoD,OAAOD,SAASb,OAAO,CAAClC;QAC/BJ,OAAOoD,OAAOG,OAAOC,MAAMX,IAAI,CAAC;IAClC;IAEA5C,KAAK,gDAAgD;QACnD,oDAAoD;QACpD,MAAM,EAACmD,KAAK,EAAC,GAAG,MAAMxD,YAAYS,QAAQ;YAAC;SAAsB;QACjEL,OAAOoD,OAAOC,cAAc,CAACC;QAC7BtD,OAAOoD,OAAOD,SAASX,SAAS,CAAC;QACjCxC,OAAOoD,OAAOG,OAAOC,MAAMX,IAAI,CAAC;IAClC;IAEA5C,KAAKwD,IAAI,CAAC;QACR;YACEC,MAAM;YACNI,OAAO;YACP9C,QAAQH,aAAaO,aAAa;QACpC;QACA;YAACsC,MAAM;YAASI,OAAO;YAAyB9C,QAAQH,aAAaM,SAAS;QAAA;KAC/E,EAAE,iCAAiC,OAAO,EAAC2C,KAAK,EAAE9C,MAAM,EAAC;QACxDrB,QAAQ;YACN8C,YAAYtC;YACZuC,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAAC3B;SAAO;QAEtBrB,QAAQ;YACN8C,YAAYtC;YACZyC,QAAQ;YACRF,KAAK;QACP,GAAGC,KAAK,CAAC;QAET,MAAM,EAACJ,MAAM,EAAC,GAAG,MAAM3C,YAAYS,QAAQ;YAACyD;SAAM;QAClD9D,OAAOuC,QAAQM,IAAI,CAAC;IACtB;AACF"}

package/dist/commands/cors/__tests__/list.test.js

@@ -0,0 +1,218 @@
+import { runCommand } from '@oclif/test';
+import { mockApi, testCommand } from '@sanity/cli-test';
+import nock from 'nock';
+import { afterEach, describe, expect, test, vi } from 'vitest';
+import { CORS_API_VERSION } from '../../../actions/cors/constants.js';
+import { NO_PROJECT_ID } from '../../../util/errorMessages.js';
+import { List } from '../list.js';
+// Mock the config functions with relative paths
+vi.mock('../../../../../cli-core/src/config/findProjectRoot.js', ()=>({
+        findProjectRoot: vi.fn().mockResolvedValue({
+            directory: '/test/path',
+            root: '/test/path',
+            type: 'studio'
+        })
+    }));
+vi.mock('../../../../../cli-core/src/config/cli/getCliConfig.js', ()=>({
+        getCliConfig: vi.fn().mockResolvedValue({
+            api: {
+                projectId: 'test-project'
+            }
+        })
+    }));
+vi.mock('../../../../../cli-core/src/services/getCliToken.js', ()=>({
+        getCliToken: vi.fn().mockResolvedValue('test-token')
+    }));
+describe('#list', ()=>{
+    afterEach(()=>{
+        vi.clearAllMocks();
+        const pending = nock.pendingMocks();
+        nock.cleanAll();
+        expect(pending, 'pending mocks').toEqual([]);
+    });
+    test('--help works', async ()=>{
+        const { stdout } = await runCommand([
+            'cors list',
+            '--help'
+        ]);
+        expect(stdout).toContain('List all origins allowed to access the API for this project');
+    });
+    test('displays CORS origins correctly', async ()=>{
+        mockApi({
+            apiVersion: CORS_API_VERSION,
+            uri: '/projects/test-project/cors'
+        }).reply(200, [
+            {
+                allowCredentials: true,
+                createdAt: '2023-01-01T00:00:00Z',
+                deletedAt: null,
+                id: 1,
+                origin: 'https://example.com',
+                projectId: 'test-project',
+                updatedAt: '2023-01-02T00:00:00Z'
+            },
+            {
+                allowCredentials: false,
+                createdAt: '2023-01-01T00:00:00Z',
+                deletedAt: null,
+                id: 2,
+                origin: 'https://app.example.com',
+                projectId: 'test-project',
+                updatedAt: null
+            },
+            {
+                allowCredentials: true,
+                createdAt: '2023-01-03T00:00:00Z',
+                deletedAt: null,
+                id: 3,
+                origin: 'http://localhost:3000',
+                projectId: 'test-project',
+                updatedAt: null
+            }
+        ]);
+        const { stdout } = await testCommand(List);
+        expect(stdout).toBe('https://example.com\nhttps://app.example.com\nhttp://localhost:3000\n');
+    });
+    test('displays single CORS origin correctly', async ()=>{
+        mockApi({
+            apiVersion: CORS_API_VERSION,
+            uri: '/projects/test-project/cors'
+        }).reply(200, [
+            {
+                allowCredentials: true,
+                createdAt: '2023-01-01T00:00:00Z',
+                deletedAt: null,
+                id: 1,
+                origin: 'https://single-origin.com',
+                projectId: 'test-project',
+                updatedAt: null
+            }
+        ]);
+        const { stdout } = await testCommand(List);
+        expect(stdout).toBe('https://single-origin.com\n');
+    });
+    test('handles empty CORS origins list', async ()=>{
+        mockApi({
+            apiVersion: CORS_API_VERSION,
+            uri: '/projects/test-project/cors'
+        }).reply(200, []);
+        const { stdout } = await testCommand(List);
+        expect(stdout).toBe('No CORS origins configured for this project.\n');
+    });
+    test('displays an error if the API request fails', async ()=>{
+        mockApi({
+            apiVersion: CORS_API_VERSION,
+            uri: '/projects/test-project/cors'
+        }).reply(500, {
+            message: 'Internal Server Error'
+        });
+        const { error } = await testCommand(List);
+        expect(error).toBeInstanceOf(Error);
+        expect(error?.message).toContain('CORS origins list retrieval failed');
+        expect(error?.message).toContain('Internal Server Error');
+    });
+    test('handles network errors gracefully', async ()=>{
+        // Don't set up any mock to simulate network failure
+        const { error } = await testCommand(List);
+        expect(error).toBeInstanceOf(Error);
+        expect(error?.message).toContain('CORS origins list retrieval failed');
+    // The actual error can vary (authorization, network, etc.) so just check the wrapper
+    });
+    test('throws error when no project ID is found', async ()=>{
+        const { getCliConfig } = await import('../../../../../cli-core/src/config/cli/getCliConfig.js');
+        vi.mocked(getCliConfig).mockResolvedValueOnce({
+            api: {
+                projectId: undefined
+            }
+        });
+        const { error } = await testCommand(List);
+        expect(error).toBeInstanceOf(Error);
+        expect(error?.message).toEqual(NO_PROJECT_ID);
+    });
+    test('throws error when project ID is null', async ()=>{
+        const { getCliConfig } = await import('../../../../../cli-core/src/config/cli/getCliConfig.js');
+        vi.mocked(getCliConfig).mockResolvedValueOnce({
+            api: {
+                projectId: undefined
+            }
+        });
+        const { error } = await testCommand(List);
+        expect(error).toBeInstanceOf(Error);
+        expect(error?.message).toEqual(NO_PROJECT_ID);
+    });
+    test('throws error when project ID is empty string', async ()=>{
+        const { getCliConfig } = await import('../../../../../cli-core/src/config/cli/getCliConfig.js');
+        vi.mocked(getCliConfig).mockResolvedValueOnce({
+            api: {
+                projectId: ''
+            }
+        });
+        const { error } = await testCommand(List);
+        expect(error).toBeInstanceOf(Error);
+        expect(error?.message).toEqual(NO_PROJECT_ID);
+    });
+    test('handles non-array API response', async ()=>{
+        mockApi({
+            apiVersion: CORS_API_VERSION,
+            uri: '/projects/test-project/cors'
+        }).reply(200, {
+            message: 'Not an array'
+        });
+        const { error } = await testCommand(List);
+        expect(error).toBeInstanceOf(Error);
+        expect(error?.message).toContain('origins.map is not a function');
+    });
+    test('handles 404 error gracefully', async ()=>{
+        mockApi({
+            apiVersion: CORS_API_VERSION,
+            uri: '/projects/test-project/cors'
+        }).reply(404, {
+            message: 'Project not found'
+        });
+        const { error } = await testCommand(List);
+        expect(error).toBeInstanceOf(Error);
+        expect(error?.message).toContain('CORS origins list retrieval failed');
+        expect(error?.message).toContain('Project not found');
+    });
+    test('handles 403 forbidden error', async ()=>{
+        mockApi({
+            apiVersion: CORS_API_VERSION,
+            uri: '/projects/test-project/cors'
+        }).reply(403, {
+            message: 'Forbidden'
+        });
+        const { error } = await testCommand(List);
+        expect(error).toBeInstanceOf(Error);
+        expect(error?.message).toContain('CORS origins list retrieval failed');
+        expect(error?.message).toContain('Forbidden');
+    });
+    test('handles origins with special characters', async ()=>{
+        mockApi({
+            apiVersion: CORS_API_VERSION,
+            uri: '/projects/test-project/cors'
+        }).reply(200, [
+            {
+                allowCredentials: true,
+                createdAt: '2023-01-01T00:00:00Z',
+                deletedAt: null,
+                id: 1,
+                origin: 'https://café.example.com',
+                projectId: 'test-project',
+                updatedAt: null
+            },
+            {
+                allowCredentials: false,
+                createdAt: '2023-01-02T00:00:00Z',
+                deletedAt: null,
+                id: 2,
+                origin: 'https://example.com:8080',
+                projectId: 'test-project',
+                updatedAt: null
+            }
+        ]);
+        const { stdout } = await testCommand(List);
+        expect(stdout).toBe('https://café.example.com\nhttps://example.com:8080\n');
+    });
+});
+
+//# sourceMappingURL=list.test.js.map

package/dist/commands/cors/__tests__/list.test.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/commands/cors/__tests__/list.test.ts"],"sourcesContent":["import {runCommand} from '@oclif/test'\nimport {mockApi, testCommand} from '@sanity/cli-test'\nimport nock from 'nock'\nimport {afterEach, describe, expect, test, vi} from 'vitest'\n\nimport {CORS_API_VERSION} from '../../../actions/cors/constants.js'\nimport {NO_PROJECT_ID} from '../../../util/errorMessages.js'\nimport {List} from '../list.js'\n\n// Mock the config functions with relative paths\nvi.mock('../../../../../cli-core/src/config/findProjectRoot.js', () => ({\n  findProjectRoot: vi.fn().mockResolvedValue({\n    directory: '/test/path',\n    root: '/test/path',\n    type: 'studio',\n  }),\n}))\n\nvi.mock('../../../../../cli-core/src/config/cli/getCliConfig.js', () => ({\n  getCliConfig: vi.fn().mockResolvedValue({\n    api: {\n      projectId: 'test-project',\n    },\n  }),\n}))\n\nvi.mock('../../../../../cli-core/src/services/getCliToken.js', () => ({\n  getCliToken: vi.fn().mockResolvedValue('test-token'),\n}))\n\ndescribe('#list', () => {\n  afterEach(() => {\n    vi.clearAllMocks()\n    const pending = nock.pendingMocks()\n    nock.cleanAll()\n    expect(pending, 'pending mocks').toEqual([])\n  })\n\n  test('--help works', async () => {\n    const {stdout} = await runCommand(['cors list', '--help'])\n\n    expect(stdout).toContain('List all origins allowed to access the API for this project')\n  })\n\n  test('displays CORS origins correctly', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://example.com',\n        projectId: 'test-project',\n        updatedAt: '2023-01-02T00:00:00Z',\n      },\n      {\n        allowCredentials: false,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 2,\n        origin: 'https://app.example.com',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-03T00:00:00Z',\n        deletedAt: null,\n        id: 3,\n        origin: 'http://localhost:3000',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List)\n\n    expect(stdout).toBe('https://example.com\\nhttps://app.example.com\\nhttp://localhost:3000\\n')\n  })\n\n  test('displays single CORS origin correctly', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://single-origin.com',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List)\n\n    expect(stdout).toBe('https://single-origin.com\\n')\n  })\n\n  test('handles empty CORS origins list', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [])\n\n    const {stdout} = await testCommand(List)\n\n    expect(stdout).toBe('No CORS origins configured for this project.\\n')\n  })\n\n  test('displays an error if the API request fails', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(500, {message: 'Internal Server Error'})\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Internal Server Error')\n  })\n\n  test('handles network errors gracefully', async () => {\n    // Don't set up any mock to simulate network failure\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    // The actual error can vary (authorization, network, etc.) so just check the wrapper\n  })\n\n  test('throws error when no project ID is found', async () => {\n    const {getCliConfig} = await import('../../../../../cli-core/src/config/cli/getCliConfig.js')\n    vi.mocked(getCliConfig).mockResolvedValueOnce({\n      api: {\n        projectId: undefined,\n      },\n    })\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('throws error when project ID is null', async () => {\n    const {getCliConfig} = await import('../../../../../cli-core/src/config/cli/getCliConfig.js')\n    vi.mocked(getCliConfig).mockResolvedValueOnce({\n      api: {\n        projectId: undefined,\n      },\n    })\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('throws error when project ID is empty string', async () => {\n    const {getCliConfig} = await import('../../../../../cli-core/src/config/cli/getCliConfig.js')\n    vi.mocked(getCliConfig).mockResolvedValueOnce({\n      api: {\n        projectId: '',\n      },\n    })\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('handles non-array API response', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, {message: 'Not an array'})\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('origins.map is not a function')\n  })\n\n  test('handles 404 error gracefully', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(404, {message: 'Project not found'})\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Project not found')\n  })\n\n  test('handles 403 forbidden error', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(403, {message: 'Forbidden'})\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Forbidden')\n  })\n\n  test('handles origins with special characters', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://café.example.com',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n      {\n        allowCredentials: false,\n        createdAt: '2023-01-02T00:00:00Z',\n        deletedAt: null,\n        id: 2,\n        origin: 'https://example.com:8080',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List)\n\n    expect(stdout).toBe('https://café.example.com\\nhttps://example.com:8080\\n')\n  })\n})\n"],"names":["runCommand","mockApi","testCommand","nock","afterEach","describe","expect","test","vi","CORS_API_VERSION","NO_PROJECT_ID","List","mock","findProjectRoot","fn","mockResolvedValue","directory","root","type","getCliConfig","api","projectId","getCliToken","clearAllMocks","pending","pendingMocks","cleanAll","toEqual","stdout","toContain","apiVersion","uri","reply","allowCredentials","createdAt","deletedAt","id","origin","updatedAt","toBe","message","error","toBeInstanceOf","Error","mocked","mockResolvedValueOnce","undefined"],"mappings":"AAAA,SAAQA,UAAU,QAAO,cAAa;AACtC,SAAQC,OAAO,EAAEC,WAAW,QAAO,mBAAkB;AACrD,OAAOC,UAAU,OAAM;AACvB,SAAQC,SAAS,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,IAAI,EAAEC,EAAE,QAAO,SAAQ;AAE5D,SAAQC,gBAAgB,QAAO,qCAAoC;AACnE,SAAQC,aAAa,QAAO,iCAAgC;AAC5D,SAAQC,IAAI,QAAO,aAAY;AAE/B,gDAAgD;AAChDH,GAAGI,IAAI,CAAC,yDAAyD,IAAO,CAAA;QACtEC,iBAAiBL,GAAGM,EAAE,GAAGC,iBAAiB,CAAC;YACzCC,WAAW;YACXC,MAAM;YACNC,MAAM;QACR;IACF,CAAA;AAEAV,GAAGI,IAAI,CAAC,0DAA0D,IAAO,CAAA;QACvEO,cAAcX,GAAGM,EAAE,GAAGC,iBAAiB,CAAC;YACtCK,KAAK;gBACHC,WAAW;YACb;QACF;IACF,CAAA;AAEAb,GAAGI,IAAI,CAAC,uDAAuD,IAAO,CAAA;QACpEU,aAAad,GAAGM,EAAE,GAAGC,iBAAiB,CAAC;IACzC,CAAA;AAEAV,SAAS,SAAS;IAChBD,UAAU;QACRI,GAAGe,aAAa;QAChB,MAAMC,UAAUrB,KAAKsB,YAAY;QACjCtB,KAAKuB,QAAQ;QACbpB,OAAOkB,SAAS,iBAAiBG,OAAO,CAAC,EAAE;IAC7C;IAEApB,KAAK,gBAAgB;QACnB,MAAM,EAACqB,MAAM,EAAC,GAAG,MAAM5B,WAAW;YAAC;YAAa;SAAS;QAEzDM,OAAOsB,QAAQC,SAAS,CAAC;IAC3B;IAEAtB,KAAK,mCAAmC;QACtCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAM1B,YAAYS;QAEnCL,OAAOsB,QAAQW,IAAI,CAAC;IACtB;IAEAhC,KAAK,yCAAyC;QAC5CN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAM1B,YAAYS;QAEnCL,OAAOsB,QAAQW,IAAI,CAAC;IACtB;IAEAhC,KAAK,mCAAmC;QACtCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK,EAAE;QAEhB,MAAM,EAACJ,MAAM,EAAC,GAAG,MAAM1B,YAAYS;QAEnCL,OAAOsB,QAAQW,IAAI,CAAC;IACtB;IAEAhC,KAAK,8CAA8C;QACjDN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAACQ,SAAS;QAAuB;QAE/C,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;QACjCvB,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACnC;IAEAtB,KAAK,qCAAqC;QACxC,oDAAoD;QACpD,MAAM,EAACkC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACjC,qFAAqF;IACvF;IAEAtB,KAAK,4CAA4C;QAC/C,MAAM,EAACY,YAAY,EAAC,GAAG,MAAM,MAAM,CAAC;QACpCX,GAAGoC,MAAM,CAACzB,cAAc0B,qBAAqB,CAAC;YAC5CzB,KAAK;gBACHC,WAAWyB;YACb;QACF;QAEA,MAAM,EAACL,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASb,OAAO,CAACjB;IACjC;IAEAH,KAAK,wCAAwC;QAC3C,MAAM,EAACY,YAAY,EAAC,GAAG,MAAM,MAAM,CAAC;QACpCX,GAAGoC,MAAM,CAACzB,cAAc0B,qBAAqB,CAAC;YAC5CzB,KAAK;gBACHC,WAAWyB;YACb;QACF;QAEA,MAAM,EAACL,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASb,OAAO,CAACjB;IACjC;IAEAH,KAAK,gDAAgD;QACnD,MAAM,EAACY,YAAY,EAAC,GAAG,MAAM,MAAM,CAAC;QACpCX,GAAGoC,MAAM,CAACzB,cAAc0B,qBAAqB,CAAC;YAC5CzB,KAAK;gBACHC,WAAW;YACb;QACF;QAEA,MAAM,EAACoB,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASb,OAAO,CAACjB;IACjC;IAEAH,KAAK,kCAAkC;QACrCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAACQ,SAAS;QAAc;QAEtC,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACnC;IAEAtB,KAAK,gCAAgC;QACnCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAACQ,SAAS;QAAmB;QAE3C,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;QACjCvB,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACnC;IAEAtB,KAAK,+BAA+B;QAClCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAACQ,SAAS;QAAW;QAEnC,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;QACjCvB,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACnC;IAEAtB,KAAK,2CAA2C;QAC9CN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAM1B,YAAYS;QAEnCL,OAAOsB,QAAQW,IAAI,CAAC;IACtB;AACF"}

package/dist/commands/cors/add.d.ts

@@ -0,0 +1,29 @@
+import { SanityCommand } from '@sanity/cli-core';
+export declare class Add extends SanityCommand<typeof Add> {
+    static args: {
+        origin: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: {
+        command: string;
+        description: string;
+    }[];
+    static flags: {
+        credentials: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    /**
+     * Prompt the user for credentials
+     *
+     * @param hasWildcard - Whether the origin contains a wildcard
+     * @returns - Whether to allow credentials
+     */
+    private promptForCredentials;
+    /**
+     * Prompt the user for wildcard confirmation
+     *
+     * @param origin - The origin to check for wildcards
+     * @returns - Whether to allow the origin
+     */
+    private promptForWildcardConfirmation;
+}

package/dist/commands/cors/add.js

@@ -0,0 +1,158 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { Args, Flags } from '@oclif/core';
+import { SanityCommand, subdebug } from '@sanity/cli-core';
+import { chalk, confirm, logSymbols } from '@sanity/cli-core/ux';
+import { oneline } from 'oneline';
+import { CORS_API_VERSION } from '../../actions/cors/constants.js';
+import { filterAndValidateOrigin } from '../../actions/cors/filterAndValidateOrigin.js';
+import { NO_PROJECT_ID } from '../../util/errorMessages.js';
+const addCorsDebug = subdebug('cors:add');
+export class Add extends SanityCommand {
+    static args = {
+        origin: Args.string({
+            description: 'Origin to allow (e.g., https://example.com)',
+            required: true
+        })
+    };
+    static description = 'Allow a new origin to use your project API through CORS';
+    static examples = [
+        {
+            command: '<%= config.bin %> <%= command.id %>',
+            description: 'Interactively add a CORS origin'
+        },
+        {
+            command: '<%= config.bin %> <%= command.id %> http://localhost:3000 --no-credentials',
+            description: 'Add a localhost origin without credentials'
+        },
+        {
+            command: '<%= config.bin %> <%= command.id %> https://myapp.com --credentials',
+            description: 'Add a production origin with credentials allowed'
+        }
+    ];
+    static flags = {
+        credentials: Flags.boolean({
+            allowNo: true,
+            default: undefined,
+            description: 'Allow credentials (token/cookie) to be sent from this origin',
+            required: false
+        })
+    };
+    async run() {
+        const { args, flags } = await this.parse(Add);
+        const { origin } = args;
+        const client = await this.getGlobalApiClient({
+            apiVersion: CORS_API_VERSION,
+            requireUser: true
+        });
+        // Ensure we have project context
+        const projectId = await this.getProjectId();
+        if (!projectId) {
+            this.error(NO_PROJECT_ID, {
+                exit: 1
+            });
+        }
+        // Check if the origin argument looks like a file path and warn
+        try {
+            const isFile = fs.existsSync(path.join(process.cwd(), args.origin));
+            if (isFile) {
+                this.warn(`Origin "${args.origin}?" Remember to quote values (sanity cors add "*")`);
+            }
+        } catch  {
+        // Ignore errors checking if it's a file
+        }
+        const filteredOrigin = await filterAndValidateOrigin(origin, this.output);
+        const hasWildcard = origin.includes('*');
+        if (hasWildcard) {
+            const confirmed = await this.promptForWildcardConfirmation(origin);
+            if (!confirmed) {
+                this.error('Operation cancelled', {
+                    exit: 1
+                });
+            }
+        }
+        const allowCredentials = flags.credentials === undefined ? await this.promptForCredentials(hasWildcard) : Boolean(flags.credentials);
+        if (filteredOrigin !== origin) {
+            this.log(`Normalized origin to: ${filteredOrigin}`);
+        }
+        try {
+            const response = await client.request({
+                body: {
+                    allowCredentials,
+                    origin: filteredOrigin
+                },
+                maxRedirects: 0,
+                method: 'POST',
+                uri: `/projects/${projectId}/cors`
+            });
+            addCorsDebug(`CORS origin added successfully`, response);
+            this.log('CORS origin added successfully');
+        } catch (error) {
+            const err = error;
+            addCorsDebug(`Error adding CORS origin`, err);
+            this.error(`CORS origin addition failed:\n${err.message}`, {
+                exit: 1
+            });
+        }
+    }
+    /**
+   * Prompt the user for credentials
+   *
+   * @param hasWildcard - Whether the origin contains a wildcard
+   * @returns - Whether to allow credentials
+   */ async promptForCredentials(hasWildcard) {
+        this.log('');
+        if (hasWildcard) {
+            this.log(oneline`
+      ${chalk.yellow(`${logSymbols.warning} Warning:`)}
+      We ${chalk.red(chalk.underline('HIGHLY'))} recommend NOT allowing credentials
+      on origins containing wildcards. If you are logged in to a studio, people will
+      be able to send requests ${chalk.underline('on your behalf')} to read and modify
+      data, from any matching origin. Please tread carefully!
+    `);
+        } else {
+            this.log(oneline`
+      ${chalk.yellow(`${logSymbols.warning} Warning:`)}
+      Should this origin be allowed to send requests using authentication tokens or
+      session cookies? Be aware that any script on this origin will be able to send
+      requests ${chalk.underline('on your behalf')} to read and modify data if you
+      are logged in to a Sanity studio. If this origin hosts a studio, you will need
+      this, otherwise you should probably answer "No" (n).
+    `);
+        }
+        this.log('');
+        return confirm({
+            default: false,
+            message: oneline`
+      Allow credentials to be sent from this origin? Please read the warning above.
+    `
+        });
+    }
+    /**
+   * Prompt the user for wildcard confirmation
+   *
+   * @param origin - The origin to check for wildcards
+   * @returns - Whether to allow the origin
+   */ async promptForWildcardConfirmation(origin) {
+        this.log('');
+        this.log(chalk.yellow(`${logSymbols.warning} Warning: Examples of allowed origins:`));
+        if (origin === '*') {
+            this.log('- http://www.some-malicious.site');
+            this.log('- https://not.what-you-were-expecting.com');
+            this.log('- https://high-traffic-site.com');
+            this.log('- http://192.168.1.1:8080');
+        } else {
+            this.log(`- ${origin.replace(/:\*/, ':1234').replaceAll('*', 'foo')}`);
+            this.log(`- ${origin.replace(/:\*/, ':3030').replaceAll('*', 'foo.bar')}`);
+        }
+        this.log('');
+        return confirm({
+            default: false,
+            message: oneline`
+      Using wildcards can be ${chalk.red('risky')}.
+      Are you ${chalk.underline('absolutely sure')} you want to allow this origin?`
+        });
+    }
+}
+
+//# sourceMappingURL=add.js.map

package/dist/commands/cors/add.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/commands/cors/add.ts"],"sourcesContent":["import fs from 'node:fs'\nimport path from 'node:path'\n\nimport {Args, Flags} from '@oclif/core'\nimport {SanityCommand, subdebug} from '@sanity/cli-core'\nimport {chalk, confirm, logSymbols} from '@sanity/cli-core/ux'\nimport {oneline} from 'oneline'\n\nimport {CORS_API_VERSION} from '../../actions/cors/constants.js'\nimport {filterAndValidateOrigin} from '../../actions/cors/filterAndValidateOrigin.js'\nimport {NO_PROJECT_ID} from '../../util/errorMessages.js'\n\nconst addCorsDebug = subdebug('cors:add')\n\nexport class Add extends SanityCommand<typeof Add> {\n  static override args = {\n    origin: Args.string({\n      description: 'Origin to allow (e.g., https://example.com)',\n      required: true,\n    }),\n  }\n\n  static override description = 'Allow a new origin to use your project API through CORS'\n\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'Interactively add a CORS origin',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> http://localhost:3000 --no-credentials',\n      description: 'Add a localhost origin without credentials',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> https://myapp.com --credentials',\n      description: 'Add a production origin with credentials allowed',\n    },\n  ]\n\n  static override flags = {\n    credentials: Flags.boolean({\n      allowNo: true,\n      default: undefined,\n      description: 'Allow credentials (token/cookie) to be sent from this origin',\n      required: false,\n    }),\n  }\n\n  public async run(): Promise<void> {\n    const {args, flags} = await this.parse(Add)\n    const {origin} = args\n\n    const client = await this.getGlobalApiClient({\n      apiVersion: CORS_API_VERSION,\n      requireUser: true,\n    })\n\n    // Ensure we have project context\n    const projectId = await this.getProjectId()\n    if (!projectId) {\n      this.error(NO_PROJECT_ID, {exit: 1})\n    }\n\n    // Check if the origin argument looks like a file path and warn\n    try {\n      const isFile = fs.existsSync(path.join(process.cwd(), args.origin))\n      if (isFile) {\n        this.warn(`Origin \"${args.origin}?\" Remember to quote values (sanity cors add \"*\")`)\n      }\n    } catch {\n      // Ignore errors checking if it's a file\n    }\n\n    const filteredOrigin = await filterAndValidateOrigin(origin, this.output)\n    const hasWildcard = origin.includes('*')\n\n    if (hasWildcard) {\n      const confirmed = await this.promptForWildcardConfirmation(origin)\n      if (!confirmed) {\n        this.error('Operation cancelled', {exit: 1})\n      }\n    }\n\n    const allowCredentials =\n      flags.credentials === undefined\n        ? await this.promptForCredentials(hasWildcard)\n        : Boolean(flags.credentials)\n\n    if (filteredOrigin !== origin) {\n      this.log(`Normalized origin to: ${filteredOrigin}`)\n    }\n\n    try {\n      const response = await client.request({\n        body: {\n          allowCredentials,\n          origin: filteredOrigin,\n        },\n        maxRedirects: 0,\n        method: 'POST',\n        uri: `/projects/${projectId}/cors`,\n      })\n\n      addCorsDebug(`CORS origin added successfully`, response)\n\n      this.log('CORS origin added successfully')\n    } catch (error) {\n      const err = error as Error\n\n      addCorsDebug(`Error adding CORS origin`, err)\n      this.error(`CORS origin addition failed:\\n${err.message}`, {exit: 1})\n    }\n  }\n\n  /**\n   * Prompt the user for credentials\n   *\n   * @param hasWildcard - Whether the origin contains a wildcard\n   * @returns - Whether to allow credentials\n   */\n  private async promptForCredentials(hasWildcard: boolean) {\n    this.log('')\n    if (hasWildcard) {\n      this.log(oneline`\n      ${chalk.yellow(`${logSymbols.warning} Warning:`)}\n      We ${chalk.red(chalk.underline('HIGHLY'))} recommend NOT allowing credentials\n      on origins containing wildcards. If you are logged in to a studio, people will\n      be able to send requests ${chalk.underline('on your behalf')} to read and modify\n      data, from any matching origin. Please tread carefully!\n    `)\n    } else {\n      this.log(oneline`\n      ${chalk.yellow(`${logSymbols.warning} Warning:`)}\n      Should this origin be allowed to send requests using authentication tokens or\n      session cookies? Be aware that any script on this origin will be able to send\n      requests ${chalk.underline('on your behalf')} to read and modify data if you\n      are logged in to a Sanity studio. If this origin hosts a studio, you will need\n      this, otherwise you should probably answer \"No\" (n).\n    `)\n    }\n\n    this.log('')\n\n    return confirm({\n      default: false,\n      message: oneline`\n      Allow credentials to be sent from this origin? Please read the warning above.\n    `,\n    })\n  }\n\n  /**\n   * Prompt the user for wildcard confirmation\n   *\n   * @param origin - The origin to check for wildcards\n   * @returns - Whether to allow the origin\n   */\n  private async promptForWildcardConfirmation(origin: string) {\n    this.log('')\n    this.log(chalk.yellow(`${logSymbols.warning} Warning: Examples of allowed origins:`))\n\n    if (origin === '*') {\n      this.log('- http://www.some-malicious.site')\n      this.log('- https://not.what-you-were-expecting.com')\n      this.log('- https://high-traffic-site.com')\n      this.log('- http://192.168.1.1:8080')\n    } else {\n      this.log(`- ${origin.replace(/:\\*/, ':1234').replaceAll('*', 'foo')}`)\n      this.log(`- ${origin.replace(/:\\*/, ':3030').replaceAll('*', 'foo.bar')}`)\n    }\n\n    this.log('')\n\n    return confirm({\n      default: false,\n      message: oneline`\n      Using wildcards can be ${chalk.red('risky')}.\n      Are you ${chalk.underline('absolutely sure')} you want to allow this origin?`,\n    })\n  }\n}\n"],"names":["fs","path","Args","Flags","SanityCommand","subdebug","chalk","confirm","logSymbols","oneline","CORS_API_VERSION","filterAndValidateOrigin","NO_PROJECT_ID","addCorsDebug","Add","args","origin","string","description","required","examples","command","flags","credentials","boolean","allowNo","default","undefined","run","parse","client","getGlobalApiClient","apiVersion","requireUser","projectId","getProjectId","error","exit","isFile","existsSync","join","process","cwd","warn","filteredOrigin","output","hasWildcard","includes","confirmed","promptForWildcardConfirmation","allowCredentials","promptForCredentials","Boolean","log","response","request","body","maxRedirects","method","uri","err","message","yellow","warning","red","underline","replace","replaceAll"],"mappings":"AAAA,OAAOA,QAAQ,UAAS;AACxB,OAAOC,UAAU,YAAW;AAE5B,SAAQC,IAAI,EAAEC,KAAK,QAAO,cAAa;AACvC,SAAQC,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AACxD,SAAQC,KAAK,EAAEC,OAAO,EAAEC,UAAU,QAAO,sBAAqB;AAC9D,SAAQC,OAAO,QAAO,UAAS;AAE/B,SAAQC,gBAAgB,QAAO,kCAAiC;AAChE,SAAQC,uBAAuB,QAAO,gDAA+C;AACrF,SAAQC,aAAa,QAAO,8BAA6B;AAEzD,MAAMC,eAAeR,SAAS;AAE9B,OAAO,MAAMS,YAAYV;IACvB,OAAgBW,OAAO;QACrBC,QAAQd,KAAKe,MAAM,CAAC;YAClBC,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,OAAgBD,cAAc,0DAAyD;IAEvF,OAAgBE,WAAW;QACzB;YACEC,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;KACD,CAAA;IAED,OAAgBI,QAAQ;QACtBC,aAAapB,MAAMqB,OAAO,CAAC;YACzBC,SAAS;YACTC,SAASC;YACTT,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,MAAaS,MAAqB;QAChC,MAAM,EAACb,IAAI,EAAEO,KAAK,EAAC,GAAG,MAAM,IAAI,CAACO,KAAK,CAACf;QACvC,MAAM,EAACE,MAAM,EAAC,GAAGD;QAEjB,MAAMe,SAAS,MAAM,IAAI,CAACC,kBAAkB,CAAC;YAC3CC,YAAYtB;YACZuB,aAAa;QACf;QAEA,iCAAiC;QACjC,MAAMC,YAAY,MAAM,IAAI,CAACC,YAAY;QACzC,IAAI,CAACD,WAAW;YACd,IAAI,CAACE,KAAK,CAACxB,eAAe;gBAACyB,MAAM;YAAC;QACpC;QAEA,+DAA+D;QAC/D,IAAI;YACF,MAAMC,SAAStC,GAAGuC,UAAU,CAACtC,KAAKuC,IAAI,CAACC,QAAQC,GAAG,IAAI3B,KAAKC,MAAM;YACjE,IAAIsB,QAAQ;gBACV,IAAI,CAACK,IAAI,CAAC,CAAC,QAAQ,EAAE5B,KAAKC,MAAM,CAAC,iDAAiD,CAAC;YACrF;QACF,EAAE,OAAM;QACN,wCAAwC;QAC1C;QAEA,MAAM4B,iBAAiB,MAAMjC,wBAAwBK,QAAQ,IAAI,CAAC6B,MAAM;QACxE,MAAMC,cAAc9B,OAAO+B,QAAQ,CAAC;QAEpC,IAAID,aAAa;YACf,MAAME,YAAY,MAAM,IAAI,CAACC,6BAA6B,CAACjC;YAC3D,IAAI,CAACgC,WAAW;gBACd,IAAI,CAACZ,KAAK,CAAC,uBAAuB;oBAACC,MAAM;gBAAC;YAC5C;QACF;QAEA,MAAMa,mBACJ5B,MAAMC,WAAW,KAAKI,YAClB,MAAM,IAAI,CAACwB,oBAAoB,CAACL,eAChCM,QAAQ9B,MAAMC,WAAW;QAE/B,IAAIqB,mBAAmB5B,QAAQ;YAC7B,IAAI,CAACqC,GAAG,CAAC,CAAC,sBAAsB,EAAET,gBAAgB;QACpD;QAEA,IAAI;YACF,MAAMU,WAAW,MAAMxB,OAAOyB,OAAO,CAAC;gBACpCC,MAAM;oBACJN;oBACAlC,QAAQ4B;gBACV;gBACAa,cAAc;gBACdC,QAAQ;gBACRC,KAAK,CAAC,UAAU,EAAEzB,UAAU,KAAK,CAAC;YACpC;YAEArB,aAAa,CAAC,8BAA8B,CAAC,EAAEyC;YAE/C,IAAI,CAACD,GAAG,CAAC;QACX,EAAE,OAAOjB,OAAO;YACd,MAAMwB,MAAMxB;YAEZvB,aAAa,CAAC,wBAAwB,CAAC,EAAE+C;YACzC,IAAI,CAACxB,KAAK,CAAC,CAAC,8BAA8B,EAAEwB,IAAIC,OAAO,EAAE,EAAE;gBAACxB,MAAM;YAAC;QACrE;IACF;IAEA;;;;;GAKC,GACD,MAAcc,qBAAqBL,WAAoB,EAAE;QACvD,IAAI,CAACO,GAAG,CAAC;QACT,IAAIP,aAAa;YACf,IAAI,CAACO,GAAG,CAAC5C,OAAO,CAAC;MACjB,EAAEH,MAAMwD,MAAM,CAAC,GAAGtD,WAAWuD,OAAO,CAAC,SAAS,CAAC,EAAE;SAC9C,EAAEzD,MAAM0D,GAAG,CAAC1D,MAAM2D,SAAS,CAAC,WAAW;;+BAEjB,EAAE3D,MAAM2D,SAAS,CAAC,kBAAkB;;IAE/D,CAAC;QACD,OAAO;YACL,IAAI,CAACZ,GAAG,CAAC5C,OAAO,CAAC;MACjB,EAAEH,MAAMwD,MAAM,CAAC,GAAGtD,WAAWuD,OAAO,CAAC,SAAS,CAAC,EAAE;;;eAGxC,EAAEzD,MAAM2D,SAAS,CAAC,kBAAkB;;;IAG/C,CAAC;QACD;QAEA,IAAI,CAACZ,GAAG,CAAC;QAET,OAAO9C,QAAQ;YACbmB,SAAS;YACTmC,SAASpD,OAAO,CAAC;;IAEnB,CAAC;QACD;IACF;IAEA;;;;;GAKC,GACD,MAAcwC,8BAA8BjC,MAAc,EAAE;QAC1D,IAAI,CAACqC,GAAG,CAAC;QACT,IAAI,CAACA,GAAG,CAAC/C,MAAMwD,MAAM,CAAC,GAAGtD,WAAWuD,OAAO,CAAC,sCAAsC,CAAC;QAEnF,IAAI/C,WAAW,KAAK;YAClB,IAAI,CAACqC,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;QACX,OAAO;YACL,IAAI,CAACA,GAAG,CAAC,CAAC,EAAE,EAAErC,OAAOkD,OAAO,CAAC,OAAO,SAASC,UAAU,CAAC,KAAK,QAAQ;YACrE,IAAI,CAACd,GAAG,CAAC,CAAC,EAAE,EAAErC,OAAOkD,OAAO,CAAC,OAAO,SAASC,UAAU,CAAC,KAAK,YAAY;QAC3E;QAEA,IAAI,CAACd,GAAG,CAAC;QAET,OAAO9C,QAAQ;YACbmB,SAAS;YACTmC,SAASpD,OAAO,CAAC;6BACM,EAAEH,MAAM0D,GAAG,CAAC,SAAS;cACpC,EAAE1D,MAAM2D,SAAS,CAAC,mBAAmB,+BAA+B,CAAC;QAC/E;IACF;AACF"}

package/dist/commands/cors/delete.d.ts

@@ -0,0 +1,13 @@
+import { SanityCommand } from '@sanity/cli-core';
+export declare class Delete extends SanityCommand<typeof Delete> {
+    static args: {
+        origin: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: {
+        command: string;
+        description: string;
+    }[];
+    run(): Promise<void>;
+    private promptForOrigin;
+}

package/dist/commands/cors/delete.js

@@ -0,0 +1,98 @@
+import { Args } from '@oclif/core';
+import { SanityCommand, subdebug } from '@sanity/cli-core';
+import { select } from '@sanity/cli-core/ux';
+import { CORS_API_VERSION } from '../../actions/cors/constants.js';
+import { NO_PROJECT_ID } from '../../util/errorMessages.js';
+const deleteCorsDebug = subdebug('cors:delete');
+export class Delete extends SanityCommand {
+    static args = {
+        origin: Args.string({
+            description: 'Origin to delete (will prompt if not provided)',
+            required: false
+        })
+    };
+    static description = 'Delete an existing CORS origin from your project';
+    static examples = [
+        {
+            command: '<%= config.bin %> <%= command.id %>',
+            description: 'Interactively select and delete a CORS origin'
+        },
+        {
+            command: '<%= config.bin %> <%= command.id %> https://example.com',
+            description: 'Delete a specific CORS origin'
+        }
+    ];
+    async run() {
+        const { args } = await this.parse(Delete);
+        const client = await this.getGlobalApiClient({
+            apiVersion: CORS_API_VERSION,
+            requireUser: true
+        });
+        // Ensure we have project context
+        const projectId = await this.getProjectId();
+        if (!projectId) {
+            this.error(NO_PROJECT_ID, {
+                exit: 1
+            });
+        }
+        // Get the origin ID to delete
+        const originId = await this.promptForOrigin(args.origin, client, projectId);
+        // Delete the origin
+        try {
+            await client.request({
+                method: 'DELETE',
+                uri: `/projects/${projectId}/cors/${originId}`
+            });
+            this.log('Origin deleted');
+        } catch (error) {
+            const err = error;
+            deleteCorsDebug(`Error deleting CORS origin ${originId} for project ${projectId}`, err);
+            this.error(`Origin deletion failed:\n${err.message}`, {
+                exit: 1
+            });
+        }
+    }
+    async promptForOrigin(specifiedOrigin, client, projectId) {
+        // Fetch all CORS origins
+        let origins;
+        try {
+            origins = await client.request({
+                uri: `/projects/${projectId}/cors`
+            });
+        } catch (error) {
+            const err = error;
+            deleteCorsDebug(`Error fetching CORS origins for project ${projectId}`, err);
+            this.error(`Failed to fetch CORS origins:\n${err.message}`, {
+                exit: 1
+            });
+        }
+        if (origins.length === 0) {
+            this.error('No CORS origins configured for this project.', {
+                exit: 1
+            });
+        }
+        // If origin is specified, find it in the list
+        if (specifiedOrigin) {
+            const specifiedOriginLower = specifiedOrigin.toLowerCase();
+            const selectedOrigin = origins.find((origin)=>origin.origin.toLowerCase() === specifiedOriginLower);
+            if (!selectedOrigin) {
+                this.error(`Origin "${specifiedOrigin}" not found`, {
+                    exit: 1
+                });
+            }
+            return selectedOrigin.id;
+        }
+        // If no origin specified, prompt user to select one
+        const choices = origins.map((origin)=>({
+                name: origin.origin,
+                value: origin.id
+            }));
+        const selectedId = await select({
+            choices,
+            message: 'Select origin to delete'
+        });
+        return selectedId;
+    }
+}
+
+//# sourceMappingURL=delete.js.map

package/dist/commands/cors/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/commands/cors/delete.ts"],"sourcesContent":["import {Args} from '@oclif/core'\nimport {SanityCommand, subdebug} from '@sanity/cli-core'\nimport {select} from '@sanity/cli-core/ux'\n\nimport {CORS_API_VERSION} from '../../actions/cors/constants.js'\nimport {type CorsOrigin} from '../../actions/cors/types.js'\nimport {NO_PROJECT_ID} from '../../util/errorMessages.js'\n\nconst deleteCorsDebug = subdebug('cors:delete')\n\nexport class Delete extends SanityCommand<typeof Delete> {\n  static override args = {\n    origin: Args.string({\n      description: 'Origin to delete (will prompt if not provided)',\n      required: false,\n    }),\n  }\n\n  static override description = 'Delete an existing CORS origin from your project'\n\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'Interactively select and delete a CORS origin',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> https://example.com',\n      description: 'Delete a specific CORS origin',\n    },\n  ]\n\n  public async run(): Promise<void> {\n    const {args} = await this.parse(Delete)\n\n    const client = await this.getGlobalApiClient({\n      apiVersion: CORS_API_VERSION,\n      requireUser: true,\n    })\n\n    // Ensure we have project context\n    const projectId = await this.getProjectId()\n    if (!projectId) {\n      this.error(NO_PROJECT_ID, {exit: 1})\n    }\n\n    // Get the origin ID to delete\n    const originId = await this.promptForOrigin(args.origin, client, projectId)\n\n    // Delete the origin\n    try {\n      await client.request({\n        method: 'DELETE',\n        uri: `/projects/${projectId}/cors/${originId}`,\n      })\n\n      this.log('Origin deleted')\n    } catch (error) {\n      const err = error as Error\n      deleteCorsDebug(`Error deleting CORS origin ${originId} for project ${projectId}`, err)\n      this.error(`Origin deletion failed:\\n${err.message}`, {exit: 1})\n    }\n  }\n\n  private async promptForOrigin(\n    specifiedOrigin: string | undefined,\n    client: Awaited<ReturnType<typeof this.getGlobalApiClient>>,\n    projectId: string,\n  ): Promise<number> {\n    // Fetch all CORS origins\n    let origins: CorsOrigin[]\n    try {\n      origins = await client.request<CorsOrigin[]>({uri: `/projects/${projectId}/cors`})\n    } catch (error) {\n      const err = error as Error\n      deleteCorsDebug(`Error fetching CORS origins for project ${projectId}`, err)\n      this.error(`Failed to fetch CORS origins:\\n${err.message}`, {exit: 1})\n    }\n\n    if (origins.length === 0) {\n      this.error('No CORS origins configured for this project.', {exit: 1})\n    }\n\n    // If origin is specified, find it in the list\n    if (specifiedOrigin) {\n      const specifiedOriginLower = specifiedOrigin.toLowerCase()\n      const selectedOrigin = origins.find(\n        (origin) => origin.origin.toLowerCase() === specifiedOriginLower,\n      )\n\n      if (!selectedOrigin) {\n        this.error(`Origin \"${specifiedOrigin}\" not found`, {exit: 1})\n      }\n\n      return selectedOrigin.id\n    }\n\n    // If no origin specified, prompt user to select one\n    const choices = origins.map((origin) => ({\n      name: origin.origin,\n      value: origin.id,\n    }))\n\n    const selectedId = await select({\n      choices,\n      message: 'Select origin to delete',\n    })\n\n    return selectedId\n  }\n}\n"],"names":["Args","SanityCommand","subdebug","select","CORS_API_VERSION","NO_PROJECT_ID","deleteCorsDebug","Delete","args","origin","string","description","required","examples","command","run","parse","client","getGlobalApiClient","apiVersion","requireUser","projectId","getProjectId","error","exit","originId","promptForOrigin","request","method","uri","log","err","message","specifiedOrigin","origins","length","specifiedOriginLower","toLowerCase","selectedOrigin","find","id","choices","map","name","value","selectedId"],"mappings":"AAAA,SAAQA,IAAI,QAAO,cAAa;AAChC,SAAQC,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AACxD,SAAQC,MAAM,QAAO,sBAAqB;AAE1C,SAAQC,gBAAgB,QAAO,kCAAiC;AAEhE,SAAQC,aAAa,QAAO,8BAA6B;AAEzD,MAAMC,kBAAkBJ,SAAS;AAEjC,OAAO,MAAMK,eAAeN;IAC1B,OAAgBO,OAAO;QACrBC,QAAQT,KAAKU,MAAM,CAAC;YAClBC,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,OAAgBD,cAAc,mDAAkD;IAEhF,OAAgBE,WAAW;QACzB;YACEC,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;KACD,CAAA;IAED,MAAaI,MAAqB;QAChC,MAAM,EAACP,IAAI,EAAC,GAAG,MAAM,IAAI,CAACQ,KAAK,CAACT;QAEhC,MAAMU,SAAS,MAAM,IAAI,CAACC,kBAAkB,CAAC;YAC3CC,YAAYf;YACZgB,aAAa;QACf;QAEA,iCAAiC;QACjC,MAAMC,YAAY,MAAM,IAAI,CAACC,YAAY;QACzC,IAAI,CAACD,WAAW;YACd,IAAI,CAACE,KAAK,CAAClB,eAAe;gBAACmB,MAAM;YAAC;QACpC;QAEA,8BAA8B;QAC9B,MAAMC,WAAW,MAAM,IAAI,CAACC,eAAe,CAAClB,KAAKC,MAAM,EAAEQ,QAAQI;QAEjE,oBAAoB;QACpB,IAAI;YACF,MAAMJ,OAAOU,OAAO,CAAC;gBACnBC,QAAQ;gBACRC,KAAK,CAAC,UAAU,EAAER,UAAU,MAAM,EAAEI,UAAU;YAChD;YAEA,IAAI,CAACK,GAAG,CAAC;QACX,EAAE,OAAOP,OAAO;YACd,MAAMQ,MAAMR;YACZjB,gBAAgB,CAAC,2BAA2B,EAAEmB,SAAS,aAAa,EAAEJ,WAAW,EAAEU;YACnF,IAAI,CAACR,KAAK,CAAC,CAAC,yBAAyB,EAAEQ,IAAIC,OAAO,EAAE,EAAE;gBAACR,MAAM;YAAC;QAChE;IACF;IAEA,MAAcE,gBACZO,eAAmC,EACnChB,MAA2D,EAC3DI,SAAiB,EACA;QACjB,yBAAyB;QACzB,IAAIa;QACJ,IAAI;YACFA,UAAU,MAAMjB,OAAOU,OAAO,CAAe;gBAACE,KAAK,CAAC,UAAU,EAAER,UAAU,KAAK,CAAC;YAAA;QAClF,EAAE,OAAOE,OAAO;YACd,MAAMQ,MAAMR;YACZjB,gBAAgB,CAAC,wCAAwC,EAAEe,WAAW,EAAEU;YACxE,IAAI,CAACR,KAAK,CAAC,CAAC,+BAA+B,EAAEQ,IAAIC,OAAO,EAAE,EAAE;gBAACR,MAAM;YAAC;QACtE;QAEA,IAAIU,QAAQC,MAAM,KAAK,GAAG;YACxB,IAAI,CAACZ,KAAK,CAAC,gDAAgD;gBAACC,MAAM;YAAC;QACrE;QAEA,8CAA8C;QAC9C,IAAIS,iBAAiB;YACnB,MAAMG,uBAAuBH,gBAAgBI,WAAW;YACxD,MAAMC,iBAAiBJ,QAAQK,IAAI,CACjC,CAAC9B,SAAWA,OAAOA,MAAM,CAAC4B,WAAW,OAAOD;YAG9C,IAAI,CAACE,gBAAgB;gBACnB,IAAI,CAACf,KAAK,CAAC,CAAC,QAAQ,EAAEU,gBAAgB,WAAW,CAAC,EAAE;oBAACT,MAAM;gBAAC;YAC9D;YAEA,OAAOc,eAAeE,EAAE;QAC1B;QAEA,oDAAoD;QACpD,MAAMC,UAAUP,QAAQQ,GAAG,CAAC,CAACjC,SAAY,CAAA;gBACvCkC,MAAMlC,OAAOA,MAAM;gBACnBmC,OAAOnC,OAAO+B,EAAE;YAClB,CAAA;QAEA,MAAMK,aAAa,MAAM1C,OAAO;YAC9BsC;YACAT,SAAS;QACX;QAEA,OAAOa;IACT;AACF"}

package/dist/commands/cors/list.d.ts

@@ -0,0 +1,9 @@
+import { SanityCommand } from '@sanity/cli-core';
+export declare class List extends SanityCommand<typeof List> {
+    static description: string;
+    static examples: {
+        command: string;
+        description: string;
+    }[];
+    run(): Promise<void>;
+}