@sanity/cli 6.0.0-alpha.4 → 6.0.0-alpha.5

package/dist/commands/cors/__tests__/list.test.js

@@ -2,27 +2,23 @@ import { runCommand } from '@oclif/test';
 import { mockApi, testCommand } from '@sanity/cli-test';
 import nock from 'nock';
 import { afterEach, describe, expect, test, vi } from 'vitest';
-import { CORS_API_VERSION } from '../../../actions/cors/constants.js';
+import { CORS_API_VERSION } from '../../../services/cors.js';
 import { NO_PROJECT_ID } from '../../../util/errorMessages.js';
 import { List } from '../list.js';
-// Mock the config functions with relative paths
-vi.mock('../../../../../cli-core/src/config/findProjectRoot.js', ()=>({
-        findProjectRoot: vi.fn().mockResolvedValue({
-            directory: '/test/path',
-            root: '/test/path',
-            type: 'studio'
-        })
-    }));
-vi.mock('../../../../../cli-core/src/config/cli/getCliConfig.js', ()=>({
-        getCliConfig: vi.fn().mockResolvedValue({
-            api: {
-                projectId: 'test-project'
-            }
-        })
-    }));
-vi.mock('../../../../../cli-core/src/services/getCliToken.js', ()=>({
-        getCliToken: vi.fn().mockResolvedValue('test-token')
-    }));
+const testProjectId = 'test-project';
+const defaultMocks = {
+    cliConfig: {
+        api: {
+            projectId: testProjectId
+        }
+    },
+    projectRoot: {
+        directory: '/test/path',
+        path: '/test/path/sanity.config.ts',
+        type: 'studio'
+    },
+    token: 'test-token'
+};
 describe('#list', ()=>{
     afterEach(()=>{
         vi.clearAllMocks();
@@ -40,7 +36,7 @@ describe('#list', ()=>{
     test('displays CORS origins correctly', async ()=>{
         mockApi({
             apiVersion: CORS_API_VERSION,
-            uri: '/projects/test-project/cors'
+            uri: `/projects/${testProjectId}/cors`
         }).reply(200, [
             {
                 allowCredentials: true,
@@ -48,7 +44,7 @@ describe('#list', ()=>{
                 deletedAt: null,
                 id: 1,
                 origin: 'https://example.com',
-                projectId: 'test-project',
+                projectId: testProjectId,
                 updatedAt: '2023-01-02T00:00:00Z'
             },
             {
@@ -57,7 +53,7 @@ describe('#list', ()=>{
                 deletedAt: null,
                 id: 2,
                 origin: 'https://app.example.com',
-                projectId: 'test-project',
+                projectId: testProjectId,
                 updatedAt: null
             },
             {
@@ -66,17 +62,19 @@ describe('#list', ()=>{
                 deletedAt: null,
                 id: 3,
                 origin: 'http://localhost:3000',
-                projectId: 'test-project',
+                projectId: testProjectId,
                 updatedAt: null
             }
         ]);
-        const { stdout } = await testCommand(List);
+        const { stdout } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(stdout).toBe('https://example.com\nhttps://app.example.com\nhttp://localhost:3000\n');
     });
     test('displays single CORS origin correctly', async ()=>{
         mockApi({
             apiVersion: CORS_API_VERSION,
-            uri: '/projects/test-project/cors'
+            uri: `/projects/${testProjectId}/cors`
         }).reply(200, [
             {
                 allowCredentials: true,
@@ -84,92 +82,113 @@ describe('#list', ()=>{
                 deletedAt: null,
                 id: 1,
                 origin: 'https://single-origin.com',
-                projectId: 'test-project',
+                projectId: testProjectId,
                 updatedAt: null
             }
         ]);
-        const { stdout } = await testCommand(List);
+        const { stdout } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(stdout).toBe('https://single-origin.com\n');
     });
     test('handles empty CORS origins list', async ()=>{
         mockApi({
             apiVersion: CORS_API_VERSION,
-            uri: '/projects/test-project/cors'
+            uri: `/projects/${testProjectId}/cors`
         }).reply(200, []);
-        const { stdout } = await testCommand(List);
+        const { stdout } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(stdout).toBe('No CORS origins configured for this project.\n');
     });
     test('displays an error if the API request fails', async ()=>{
         mockApi({
             apiVersion: CORS_API_VERSION,
-            uri: '/projects/test-project/cors'
+            uri: `/projects/${testProjectId}/cors`
         }).reply(500, {
             message: 'Internal Server Error'
         });
-        const { error } = await testCommand(List);
+        const { error } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(error).toBeInstanceOf(Error);
         expect(error?.message).toContain('CORS origins list retrieval failed');
         expect(error?.message).toContain('Internal Server Error');
     });
     test('handles network errors gracefully', async ()=>{
         // Don't set up any mock to simulate network failure
-        const { error } = await testCommand(List);
+        const { error } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(error).toBeInstanceOf(Error);
         expect(error?.message).toContain('CORS origins list retrieval failed');
     // The actual error can vary (authorization, network, etc.) so just check the wrapper
     });
     test('throws error when no project ID is found', async ()=>{
-        const { getCliConfig } = await import('../../../../../cli-core/src/config/cli/getCliConfig.js');
-        vi.mocked(getCliConfig).mockResolvedValueOnce({
-            api: {
-                projectId: undefined
+        const { error } = await testCommand(List, [], {
+            mocks: {
+                ...defaultMocks,
+                cliConfig: {
+                    api: {
+                        projectId: undefined
+                    }
+                }
             }
         });
-        const { error } = await testCommand(List);
         expect(error).toBeInstanceOf(Error);
         expect(error?.message).toEqual(NO_PROJECT_ID);
     });
     test('throws error when project ID is null', async ()=>{
-        const { getCliConfig } = await import('../../../../../cli-core/src/config/cli/getCliConfig.js');
-        vi.mocked(getCliConfig).mockResolvedValueOnce({
-            api: {
-                projectId: undefined
+        const { error } = await testCommand(List, [], {
+            mocks: {
+                ...defaultMocks,
+                cliConfig: {
+                    api: {
+                        projectId: undefined
+                    }
+                }
             }
         });
-        const { error } = await testCommand(List);
         expect(error).toBeInstanceOf(Error);
         expect(error?.message).toEqual(NO_PROJECT_ID);
     });
     test('throws error when project ID is empty string', async ()=>{
-        const { getCliConfig } = await import('../../../../../cli-core/src/config/cli/getCliConfig.js');
-        vi.mocked(getCliConfig).mockResolvedValueOnce({
-            api: {
-                projectId: ''
+        const { error } = await testCommand(List, [], {
+            mocks: {
+                ...defaultMocks,
+                cliConfig: {
+                    api: {
+                        projectId: ''
+                    }
+                }
             }
         });
-        const { error } = await testCommand(List);
         expect(error).toBeInstanceOf(Error);
         expect(error?.message).toEqual(NO_PROJECT_ID);
     });
     test('handles non-array API response', async ()=>{
         mockApi({
             apiVersion: CORS_API_VERSION,
-            uri: '/projects/test-project/cors'
+            uri: `/projects/${testProjectId}/cors`
         }).reply(200, {
             message: 'Not an array'
         });
-        const { error } = await testCommand(List);
+        const { error } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(error).toBeInstanceOf(Error);
         expect(error?.message).toContain('origins.map is not a function');
     });
     test('handles 404 error gracefully', async ()=>{
         mockApi({
             apiVersion: CORS_API_VERSION,
-            uri: '/projects/test-project/cors'
+            uri: `/projects/${testProjectId}/cors`
         }).reply(404, {
             message: 'Project not found'
         });
-        const { error } = await testCommand(List);
+        const { error } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(error).toBeInstanceOf(Error);
         expect(error?.message).toContain('CORS origins list retrieval failed');
         expect(error?.message).toContain('Project not found');
@@ -177,11 +196,13 @@ describe('#list', ()=>{
     test('handles 403 forbidden error', async ()=>{
         mockApi({
             apiVersion: CORS_API_VERSION,
-            uri: '/projects/test-project/cors'
+            uri: `/projects/${testProjectId}/cors`
         }).reply(403, {
             message: 'Forbidden'
         });
-        const { error } = await testCommand(List);
+        const { error } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(error).toBeInstanceOf(Error);
         expect(error?.message).toContain('CORS origins list retrieval failed');
         expect(error?.message).toContain('Forbidden');
@@ -189,7 +210,7 @@ describe('#list', ()=>{
     test('handles origins with special characters', async ()=>{
         mockApi({
             apiVersion: CORS_API_VERSION,
-            uri: '/projects/test-project/cors'
+            uri: `/projects/${testProjectId}/cors`
         }).reply(200, [
             {
                 allowCredentials: true,
@@ -197,7 +218,7 @@ describe('#list', ()=>{
                 deletedAt: null,
                 id: 1,
                 origin: 'https://café.example.com',
-                projectId: 'test-project',
+                projectId: testProjectId,
                 updatedAt: null
             },
             {
@@ -206,11 +227,13 @@ describe('#list', ()=>{
                 deletedAt: null,
                 id: 2,
                 origin: 'https://example.com:8080',
-                projectId: 'test-project',
+                projectId: testProjectId,
                 updatedAt: null
             }
         ]);
-        const { stdout } = await testCommand(List);
+        const { stdout } = await testCommand(List, [], {
+            mocks: defaultMocks
+        });
         expect(stdout).toBe('https://café.example.com\nhttps://example.com:8080\n');
     });
 });

package/dist/commands/cors/__tests__/list.test.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/commands/cors/__tests__/list.test.ts"],"sourcesContent":["import {runCommand} from '@oclif/test'\nimport {mockApi, testCommand} from '@sanity/cli-test'\nimport nock from 'nock'\nimport {afterEach, describe, expect, test, vi} from 'vitest'\n\nimport {CORS_API_VERSION} from '../../../actions/cors/constants.js'\nimport {NO_PROJECT_ID} from '../../../util/errorMessages.js'\nimport {List} from '../list.js'\n\n// Mock the config functions with relative paths\nvi.mock('../../../../../cli-core/src/config/findProjectRoot.js', () => ({\n  findProjectRoot: vi.fn().mockResolvedValue({\n    directory: '/test/path',\n    root: '/test/path',\n    type: 'studio',\n  }),\n}))\n\nvi.mock('../../../../../cli-core/src/config/cli/getCliConfig.js', () => ({\n  getCliConfig: vi.fn().mockResolvedValue({\n    api: {\n      projectId: 'test-project',\n    },\n  }),\n}))\n\nvi.mock('../../../../../cli-core/src/services/getCliToken.js', () => ({\n  getCliToken: vi.fn().mockResolvedValue('test-token'),\n}))\n\ndescribe('#list', () => {\n  afterEach(() => {\n    vi.clearAllMocks()\n    const pending = nock.pendingMocks()\n    nock.cleanAll()\n    expect(pending, 'pending mocks').toEqual([])\n  })\n\n  test('--help works', async () => {\n    const {stdout} = await runCommand(['cors list', '--help'])\n\n    expect(stdout).toContain('List all origins allowed to access the API for this project')\n  })\n\n  test('displays CORS origins correctly', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://example.com',\n        projectId: 'test-project',\n        updatedAt: '2023-01-02T00:00:00Z',\n      },\n      {\n        allowCredentials: false,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 2,\n        origin: 'https://app.example.com',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-03T00:00:00Z',\n        deletedAt: null,\n        id: 3,\n        origin: 'http://localhost:3000',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List)\n\n    expect(stdout).toBe('https://example.com\\nhttps://app.example.com\\nhttp://localhost:3000\\n')\n  })\n\n  test('displays single CORS origin correctly', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://single-origin.com',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List)\n\n    expect(stdout).toBe('https://single-origin.com\\n')\n  })\n\n  test('handles empty CORS origins list', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [])\n\n    const {stdout} = await testCommand(List)\n\n    expect(stdout).toBe('No CORS origins configured for this project.\\n')\n  })\n\n  test('displays an error if the API request fails', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(500, {message: 'Internal Server Error'})\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Internal Server Error')\n  })\n\n  test('handles network errors gracefully', async () => {\n    // Don't set up any mock to simulate network failure\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    // The actual error can vary (authorization, network, etc.) so just check the wrapper\n  })\n\n  test('throws error when no project ID is found', async () => {\n    const {getCliConfig} = await import('../../../../../cli-core/src/config/cli/getCliConfig.js')\n    vi.mocked(getCliConfig).mockResolvedValueOnce({\n      api: {\n        projectId: undefined,\n      },\n    })\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('throws error when project ID is null', async () => {\n    const {getCliConfig} = await import('../../../../../cli-core/src/config/cli/getCliConfig.js')\n    vi.mocked(getCliConfig).mockResolvedValueOnce({\n      api: {\n        projectId: undefined,\n      },\n    })\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('throws error when project ID is empty string', async () => {\n    const {getCliConfig} = await import('../../../../../cli-core/src/config/cli/getCliConfig.js')\n    vi.mocked(getCliConfig).mockResolvedValueOnce({\n      api: {\n        projectId: '',\n      },\n    })\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('handles non-array API response', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, {message: 'Not an array'})\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('origins.map is not a function')\n  })\n\n  test('handles 404 error gracefully', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(404, {message: 'Project not found'})\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Project not found')\n  })\n\n  test('handles 403 forbidden error', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(403, {message: 'Forbidden'})\n\n    const {error} = await testCommand(List)\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Forbidden')\n  })\n\n  test('handles origins with special characters', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: '/projects/test-project/cors',\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://café.example.com',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n      {\n        allowCredentials: false,\n        createdAt: '2023-01-02T00:00:00Z',\n        deletedAt: null,\n        id: 2,\n        origin: 'https://example.com:8080',\n        projectId: 'test-project',\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List)\n\n    expect(stdout).toBe('https://café.example.com\\nhttps://example.com:8080\\n')\n  })\n})\n"],"names":["runCommand","mockApi","testCommand","nock","afterEach","describe","expect","test","vi","CORS_API_VERSION","NO_PROJECT_ID","List","mock","findProjectRoot","fn","mockResolvedValue","directory","root","type","getCliConfig","api","projectId","getCliToken","clearAllMocks","pending","pendingMocks","cleanAll","toEqual","stdout","toContain","apiVersion","uri","reply","allowCredentials","createdAt","deletedAt","id","origin","updatedAt","toBe","message","error","toBeInstanceOf","Error","mocked","mockResolvedValueOnce","undefined"],"mappings":"AAAA,SAAQA,UAAU,QAAO,cAAa;AACtC,SAAQC,OAAO,EAAEC,WAAW,QAAO,mBAAkB;AACrD,OAAOC,UAAU,OAAM;AACvB,SAAQC,SAAS,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,IAAI,EAAEC,EAAE,QAAO,SAAQ;AAE5D,SAAQC,gBAAgB,QAAO,qCAAoC;AACnE,SAAQC,aAAa,QAAO,iCAAgC;AAC5D,SAAQC,IAAI,QAAO,aAAY;AAE/B,gDAAgD;AAChDH,GAAGI,IAAI,CAAC,yDAAyD,IAAO,CAAA;QACtEC,iBAAiBL,GAAGM,EAAE,GAAGC,iBAAiB,CAAC;YACzCC,WAAW;YACXC,MAAM;YACNC,MAAM;QACR;IACF,CAAA;AAEAV,GAAGI,IAAI,CAAC,0DAA0D,IAAO,CAAA;QACvEO,cAAcX,GAAGM,EAAE,GAAGC,iBAAiB,CAAC;YACtCK,KAAK;gBACHC,WAAW;YACb;QACF;IACF,CAAA;AAEAb,GAAGI,IAAI,CAAC,uDAAuD,IAAO,CAAA;QACpEU,aAAad,GAAGM,EAAE,GAAGC,iBAAiB,CAAC;IACzC,CAAA;AAEAV,SAAS,SAAS;IAChBD,UAAU;QACRI,GAAGe,aAAa;QAChB,MAAMC,UAAUrB,KAAKsB,YAAY;QACjCtB,KAAKuB,QAAQ;QACbpB,OAAOkB,SAAS,iBAAiBG,OAAO,CAAC,EAAE;IAC7C;IAEApB,KAAK,gBAAgB;QACnB,MAAM,EAACqB,MAAM,EAAC,GAAG,MAAM5B,WAAW;YAAC;YAAa;SAAS;QAEzDM,OAAOsB,QAAQC,SAAS,CAAC;IAC3B;IAEAtB,KAAK,mCAAmC;QACtCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAM1B,YAAYS;QAEnCL,OAAOsB,QAAQW,IAAI,CAAC;IACtB;IAEAhC,KAAK,yCAAyC;QAC5CN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAM1B,YAAYS;QAEnCL,OAAOsB,QAAQW,IAAI,CAAC;IACtB;IAEAhC,KAAK,mCAAmC;QACtCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK,EAAE;QAEhB,MAAM,EAACJ,MAAM,EAAC,GAAG,MAAM1B,YAAYS;QAEnCL,OAAOsB,QAAQW,IAAI,CAAC;IACtB;IAEAhC,KAAK,8CAA8C;QACjDN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAACQ,SAAS;QAAuB;QAE/C,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;QACjCvB,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACnC;IAEAtB,KAAK,qCAAqC;QACxC,oDAAoD;QACpD,MAAM,EAACkC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACjC,qFAAqF;IACvF;IAEAtB,KAAK,4CAA4C;QAC/C,MAAM,EAACY,YAAY,EAAC,GAAG,MAAM,MAAM,CAAC;QACpCX,GAAGoC,MAAM,CAACzB,cAAc0B,qBAAqB,CAAC;YAC5CzB,KAAK;gBACHC,WAAWyB;YACb;QACF;QAEA,MAAM,EAACL,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASb,OAAO,CAACjB;IACjC;IAEAH,KAAK,wCAAwC;QAC3C,MAAM,EAACY,YAAY,EAAC,GAAG,MAAM,MAAM,CAAC;QACpCX,GAAGoC,MAAM,CAACzB,cAAc0B,qBAAqB,CAAC;YAC5CzB,KAAK;gBACHC,WAAWyB;YACb;QACF;QAEA,MAAM,EAACL,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASb,OAAO,CAACjB;IACjC;IAEAH,KAAK,gDAAgD;QACnD,MAAM,EAACY,YAAY,EAAC,GAAG,MAAM,MAAM,CAAC;QACpCX,GAAGoC,MAAM,CAACzB,cAAc0B,qBAAqB,CAAC;YAC5CzB,KAAK;gBACHC,WAAW;YACb;QACF;QAEA,MAAM,EAACoB,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASb,OAAO,CAACjB;IACjC;IAEAH,KAAK,kCAAkC;QACrCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAACQ,SAAS;QAAc;QAEtC,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACnC;IAEAtB,KAAK,gCAAgC;QACnCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAACQ,SAAS;QAAmB;QAE3C,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;QACjCvB,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACnC;IAEAtB,KAAK,+BAA+B;QAClCN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YAACQ,SAAS;QAAW;QAEnC,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS;QAElCL,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASX,SAAS,CAAC;QACjCvB,OAAOmC,OAAOD,SAASX,SAAS,CAAC;IACnC;IAEAtB,KAAK,2CAA2C;QAC9CN,QAAQ;YACN6B,YAAYrB;YACZsB,KAAK;QACP,GAAGC,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRhB,WAAW;gBACXiB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAM1B,YAAYS;QAEnCL,OAAOsB,QAAQW,IAAI,CAAC;IACtB;AACF"}
+{"version":3,"sources":["../../../../src/commands/cors/__tests__/list.test.ts"],"sourcesContent":["import {runCommand} from '@oclif/test'\nimport {mockApi, testCommand} from '@sanity/cli-test'\nimport nock from 'nock'\nimport {afterEach, describe, expect, test, vi} from 'vitest'\n\nimport {CORS_API_VERSION} from '../../../services/cors.js'\nimport {NO_PROJECT_ID} from '../../../util/errorMessages.js'\nimport {List} from '../list.js'\n\nconst testProjectId = 'test-project'\n\nconst defaultMocks = {\n  cliConfig: {api: {projectId: testProjectId}},\n  projectRoot: {\n    directory: '/test/path',\n    path: '/test/path/sanity.config.ts',\n    type: 'studio' as const,\n  },\n  token: 'test-token',\n}\n\ndescribe('#list', () => {\n  afterEach(() => {\n    vi.clearAllMocks()\n    const pending = nock.pendingMocks()\n    nock.cleanAll()\n    expect(pending, 'pending mocks').toEqual([])\n  })\n\n  test('--help works', async () => {\n    const {stdout} = await runCommand(['cors list', '--help'])\n\n    expect(stdout).toContain('List all origins allowed to access the API for this project')\n  })\n\n  test('displays CORS origins correctly', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: `/projects/${testProjectId}/cors`,\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://example.com',\n        projectId: testProjectId,\n        updatedAt: '2023-01-02T00:00:00Z',\n      },\n      {\n        allowCredentials: false,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 2,\n        origin: 'https://app.example.com',\n        projectId: testProjectId,\n        updatedAt: null,\n      },\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-03T00:00:00Z',\n        deletedAt: null,\n        id: 3,\n        origin: 'http://localhost:3000',\n        projectId: testProjectId,\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(stdout).toBe('https://example.com\\nhttps://app.example.com\\nhttp://localhost:3000\\n')\n  })\n\n  test('displays single CORS origin correctly', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: `/projects/${testProjectId}/cors`,\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://single-origin.com',\n        projectId: testProjectId,\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(stdout).toBe('https://single-origin.com\\n')\n  })\n\n  test('handles empty CORS origins list', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: `/projects/${testProjectId}/cors`,\n    }).reply(200, [])\n\n    const {stdout} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(stdout).toBe('No CORS origins configured for this project.\\n')\n  })\n\n  test('displays an error if the API request fails', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: `/projects/${testProjectId}/cors`,\n    }).reply(500, {message: 'Internal Server Error'})\n\n    const {error} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Internal Server Error')\n  })\n\n  test('handles network errors gracefully', async () => {\n    // Don't set up any mock to simulate network failure\n    const {error} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    // The actual error can vary (authorization, network, etc.) so just check the wrapper\n  })\n\n  test('throws error when no project ID is found', async () => {\n    const {error} = await testCommand(List, [], {\n      mocks: {\n        ...defaultMocks,\n        cliConfig: {api: {projectId: undefined}},\n      },\n    })\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('throws error when project ID is null', async () => {\n    const {error} = await testCommand(List, [], {\n      mocks: {\n        ...defaultMocks,\n        cliConfig: {api: {projectId: undefined}},\n      },\n    })\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('throws error when project ID is empty string', async () => {\n    const {error} = await testCommand(List, [], {\n      mocks: {\n        ...defaultMocks,\n        cliConfig: {api: {projectId: ''}},\n      },\n    })\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toEqual(NO_PROJECT_ID)\n  })\n\n  test('handles non-array API response', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: `/projects/${testProjectId}/cors`,\n    }).reply(200, {message: 'Not an array'})\n\n    const {error} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('origins.map is not a function')\n  })\n\n  test('handles 404 error gracefully', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: `/projects/${testProjectId}/cors`,\n    }).reply(404, {message: 'Project not found'})\n\n    const {error} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Project not found')\n  })\n\n  test('handles 403 forbidden error', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: `/projects/${testProjectId}/cors`,\n    }).reply(403, {message: 'Forbidden'})\n\n    const {error} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(error).toBeInstanceOf(Error)\n    expect(error?.message).toContain('CORS origins list retrieval failed')\n    expect(error?.message).toContain('Forbidden')\n  })\n\n  test('handles origins with special characters', async () => {\n    mockApi({\n      apiVersion: CORS_API_VERSION,\n      uri: `/projects/${testProjectId}/cors`,\n    }).reply(200, [\n      {\n        allowCredentials: true,\n        createdAt: '2023-01-01T00:00:00Z',\n        deletedAt: null,\n        id: 1,\n        origin: 'https://café.example.com',\n        projectId: testProjectId,\n        updatedAt: null,\n      },\n      {\n        allowCredentials: false,\n        createdAt: '2023-01-02T00:00:00Z',\n        deletedAt: null,\n        id: 2,\n        origin: 'https://example.com:8080',\n        projectId: testProjectId,\n        updatedAt: null,\n      },\n    ])\n\n    const {stdout} = await testCommand(List, [], {mocks: defaultMocks})\n\n    expect(stdout).toBe('https://café.example.com\\nhttps://example.com:8080\\n')\n  })\n})\n"],"names":["runCommand","mockApi","testCommand","nock","afterEach","describe","expect","test","vi","CORS_API_VERSION","NO_PROJECT_ID","List","testProjectId","defaultMocks","cliConfig","api","projectId","projectRoot","directory","path","type","token","clearAllMocks","pending","pendingMocks","cleanAll","toEqual","stdout","toContain","apiVersion","uri","reply","allowCredentials","createdAt","deletedAt","id","origin","updatedAt","mocks","toBe","message","error","toBeInstanceOf","Error","undefined"],"mappings":"AAAA,SAAQA,UAAU,QAAO,cAAa;AACtC,SAAQC,OAAO,EAAEC,WAAW,QAAO,mBAAkB;AACrD,OAAOC,UAAU,OAAM;AACvB,SAAQC,SAAS,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,IAAI,EAAEC,EAAE,QAAO,SAAQ;AAE5D,SAAQC,gBAAgB,QAAO,4BAA2B;AAC1D,SAAQC,aAAa,QAAO,iCAAgC;AAC5D,SAAQC,IAAI,QAAO,aAAY;AAE/B,MAAMC,gBAAgB;AAEtB,MAAMC,eAAe;IACnBC,WAAW;QAACC,KAAK;YAACC,WAAWJ;QAAa;IAAC;IAC3CK,aAAa;QACXC,WAAW;QACXC,MAAM;QACNC,MAAM;IACR;IACAC,OAAO;AACT;AAEAhB,SAAS,SAAS;IAChBD,UAAU;QACRI,GAAGc,aAAa;QAChB,MAAMC,UAAUpB,KAAKqB,YAAY;QACjCrB,KAAKsB,QAAQ;QACbnB,OAAOiB,SAAS,iBAAiBG,OAAO,CAAC,EAAE;IAC7C;IAEAnB,KAAK,gBAAgB;QACnB,MAAM,EAACoB,MAAM,EAAC,GAAG,MAAM3B,WAAW;YAAC;YAAa;SAAS;QAEzDM,OAAOqB,QAAQC,SAAS,CAAC;IAC3B;IAEArB,KAAK,mCAAmC;QACtCN,QAAQ;YACN4B,YAAYpB;YACZqB,KAAK,CAAC,UAAU,EAAElB,cAAc,KAAK,CAAC;QACxC,GAAGmB,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRpB,WAAWJ;gBACXyB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRpB,WAAWJ;gBACXyB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRpB,WAAWJ;gBACXyB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAMzB,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEjEP,OAAOqB,QAAQY,IAAI,CAAC;IACtB;IAEAhC,KAAK,yCAAyC;QAC5CN,QAAQ;YACN4B,YAAYpB;YACZqB,KAAK,CAAC,UAAU,EAAElB,cAAc,KAAK,CAAC;QACxC,GAAGmB,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRpB,WAAWJ;gBACXyB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAMzB,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEjEP,OAAOqB,QAAQY,IAAI,CAAC;IACtB;IAEAhC,KAAK,mCAAmC;QACtCN,QAAQ;YACN4B,YAAYpB;YACZqB,KAAK,CAAC,UAAU,EAAElB,cAAc,KAAK,CAAC;QACxC,GAAGmB,KAAK,CAAC,KAAK,EAAE;QAEhB,MAAM,EAACJ,MAAM,EAAC,GAAG,MAAMzB,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEjEP,OAAOqB,QAAQY,IAAI,CAAC;IACtB;IAEAhC,KAAK,8CAA8C;QACjDN,QAAQ;YACN4B,YAAYpB;YACZqB,KAAK,CAAC,UAAU,EAAElB,cAAc,KAAK,CAAC;QACxC,GAAGmB,KAAK,CAAC,KAAK;YAACS,SAAS;QAAuB;QAE/C,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEhEP,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASZ,SAAS,CAAC;QACjCtB,OAAOmC,OAAOD,SAASZ,SAAS,CAAC;IACnC;IAEArB,KAAK,qCAAqC;QACxC,oDAAoD;QACpD,MAAM,EAACkC,KAAK,EAAC,GAAG,MAAMvC,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEhEP,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASZ,SAAS,CAAC;IACjC,qFAAqF;IACvF;IAEArB,KAAK,4CAA4C;QAC/C,MAAM,EAACkC,KAAK,EAAC,GAAG,MAAMvC,YAAYS,MAAM,EAAE,EAAE;YAC1C2B,OAAO;gBACL,GAAGzB,YAAY;gBACfC,WAAW;oBAACC,KAAK;wBAACC,WAAW4B;oBAAS;gBAAC;YACzC;QACF;QAEAtC,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASd,OAAO,CAAChB;IACjC;IAEAH,KAAK,wCAAwC;QAC3C,MAAM,EAACkC,KAAK,EAAC,GAAG,MAAMvC,YAAYS,MAAM,EAAE,EAAE;YAC1C2B,OAAO;gBACL,GAAGzB,YAAY;gBACfC,WAAW;oBAACC,KAAK;wBAACC,WAAW4B;oBAAS;gBAAC;YACzC;QACF;QAEAtC,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASd,OAAO,CAAChB;IACjC;IAEAH,KAAK,gDAAgD;QACnD,MAAM,EAACkC,KAAK,EAAC,GAAG,MAAMvC,YAAYS,MAAM,EAAE,EAAE;YAC1C2B,OAAO;gBACL,GAAGzB,YAAY;gBACfC,WAAW;oBAACC,KAAK;wBAACC,WAAW;oBAAE;gBAAC;YAClC;QACF;QAEAV,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASd,OAAO,CAAChB;IACjC;IAEAH,KAAK,kCAAkC;QACrCN,QAAQ;YACN4B,YAAYpB;YACZqB,KAAK,CAAC,UAAU,EAAElB,cAAc,KAAK,CAAC;QACxC,GAAGmB,KAAK,CAAC,KAAK;YAACS,SAAS;QAAc;QAEtC,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEhEP,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASZ,SAAS,CAAC;IACnC;IAEArB,KAAK,gCAAgC;QACnCN,QAAQ;YACN4B,YAAYpB;YACZqB,KAAK,CAAC,UAAU,EAAElB,cAAc,KAAK,CAAC;QACxC,GAAGmB,KAAK,CAAC,KAAK;YAACS,SAAS;QAAmB;QAE3C,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEhEP,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASZ,SAAS,CAAC;QACjCtB,OAAOmC,OAAOD,SAASZ,SAAS,CAAC;IACnC;IAEArB,KAAK,+BAA+B;QAClCN,QAAQ;YACN4B,YAAYpB;YACZqB,KAAK,CAAC,UAAU,EAAElB,cAAc,KAAK,CAAC;QACxC,GAAGmB,KAAK,CAAC,KAAK;YAACS,SAAS;QAAW;QAEnC,MAAM,EAACC,KAAK,EAAC,GAAG,MAAMvC,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEhEP,OAAOmC,OAAOC,cAAc,CAACC;QAC7BrC,OAAOmC,OAAOD,SAASZ,SAAS,CAAC;QACjCtB,OAAOmC,OAAOD,SAASZ,SAAS,CAAC;IACnC;IAEArB,KAAK,2CAA2C;QAC9CN,QAAQ;YACN4B,YAAYpB;YACZqB,KAAK,CAAC,UAAU,EAAElB,cAAc,KAAK,CAAC;QACxC,GAAGmB,KAAK,CAAC,KAAK;YACZ;gBACEC,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRpB,WAAWJ;gBACXyB,WAAW;YACb;YACA;gBACEL,kBAAkB;gBAClBC,WAAW;gBACXC,WAAW;gBACXC,IAAI;gBACJC,QAAQ;gBACRpB,WAAWJ;gBACXyB,WAAW;YACb;SACD;QAED,MAAM,EAACV,MAAM,EAAC,GAAG,MAAMzB,YAAYS,MAAM,EAAE,EAAE;YAAC2B,OAAOzB;QAAY;QAEjEP,OAAOqB,QAAQY,IAAI,CAAC;IACtB;AACF"}

package/dist/commands/cors/add.js

@@ -4,8 +4,8 @@ import { Args, Flags } from '@oclif/core';
 import { SanityCommand, subdebug } from '@sanity/cli-core';
 import { chalk, confirm, logSymbols } from '@sanity/cli-core/ux';
 import { oneline } from 'oneline';
-import { CORS_API_VERSION } from '../../actions/cors/constants.js';
 import { filterAndValidateOrigin } from '../../actions/cors/filterAndValidateOrigin.js';
+import { createCorsOrigin } from '../../services/cors.js';
 import { NO_PROJECT_ID } from '../../util/errorMessages.js';
 const addCorsDebug = subdebug('cors:add');
 export class Add extends SanityCommand {
@@ -41,10 +41,6 @@ export class Add extends SanityCommand {
     async run() {
         const { args, flags } = await this.parse(Add);
         const { origin } = args;
-        const client = await this.getGlobalApiClient({
-            apiVersion: CORS_API_VERSION,
-            requireUser: true
-        });
         // Ensure we have project context
         const projectId = await this.getProjectId();
         if (!projectId) {
@@ -76,14 +72,10 @@ export class Add extends SanityCommand {
             this.log(`Normalized origin to: ${filteredOrigin}`);
         }
         try {
-            const response = await client.request({
-                body: {
-                    allowCredentials,
-                    origin: filteredOrigin
-                },
-                maxRedirects: 0,
-                method: 'POST',
-                uri: `/projects/${projectId}/cors`
+            const response = await createCorsOrigin({
+                allowCredentials,
+                origin: filteredOrigin,
+                projectId
             });
             addCorsDebug(`CORS origin added successfully`, response);
             this.log('CORS origin added successfully');

package/dist/commands/cors/add.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/cors/add.ts"],"sourcesContent":["import fs from 'node:fs'\nimport path from 'node:path'\n\nimport {Args, Flags} from '@oclif/core'\nimport {SanityCommand, subdebug} from '@sanity/cli-core'\nimport {chalk, confirm, logSymbols} from '@sanity/cli-core/ux'\nimport {oneline} from 'oneline'\n\nimport {CORS_API_VERSION} from '../../actions/cors/constants.js'\nimport {filterAndValidateOrigin} from '../../actions/cors/filterAndValidateOrigin.js'\nimport {NO_PROJECT_ID} from '../../util/errorMessages.js'\n\nconst addCorsDebug = subdebug('cors:add')\n\nexport class Add extends SanityCommand<typeof Add> {\n  static override args = {\n    origin: Args.string({\n      description: 'Origin to allow (e.g., https://example.com)',\n      required: true,\n    }),\n  }\n\n  static override description = 'Allow a new origin to use your project API through CORS'\n\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'Interactively add a CORS origin',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> http://localhost:3000 --no-credentials',\n      description: 'Add a localhost origin without credentials',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> https://myapp.com --credentials',\n      description: 'Add a production origin with credentials allowed',\n    },\n  ]\n\n  static override flags = {\n    credentials: Flags.boolean({\n      allowNo: true,\n      default: undefined,\n      description: 'Allow credentials (token/cookie) to be sent from this origin',\n      required: false,\n    }),\n  }\n\n  public async run(): Promise<void> {\n    const {args, flags} = await this.parse(Add)\n    const {origin} = args\n\n    const client = await this.getGlobalApiClient({\n      apiVersion: CORS_API_VERSION,\n      requireUser: true,\n    })\n\n    // Ensure we have project context\n    const projectId = await this.getProjectId()\n    if (!projectId) {\n      this.error(NO_PROJECT_ID, {exit: 1})\n    }\n\n    // Check if the origin argument looks like a file path and warn\n    try {\n      const isFile = fs.existsSync(path.join(process.cwd(), args.origin))\n      if (isFile) {\n        this.warn(`Origin \"${args.origin}?\" Remember to quote values (sanity cors add \"*\")`)\n      }\n    } catch {\n      // Ignore errors checking if it's a file\n    }\n\n    const filteredOrigin = await filterAndValidateOrigin(origin, this.output)\n    const hasWildcard = origin.includes('*')\n\n    if (hasWildcard) {\n      const confirmed = await this.promptForWildcardConfirmation(origin)\n      if (!confirmed) {\n        this.error('Operation cancelled', {exit: 1})\n      }\n    }\n\n    const allowCredentials =\n      flags.credentials === undefined\n        ? await this.promptForCredentials(hasWildcard)\n        : Boolean(flags.credentials)\n\n    if (filteredOrigin !== origin) {\n      this.log(`Normalized origin to: ${filteredOrigin}`)\n    }\n\n    try {\n      const response = await client.request({\n        body: {\n          allowCredentials,\n          origin: filteredOrigin,\n        },\n        maxRedirects: 0,\n        method: 'POST',\n        uri: `/projects/${projectId}/cors`,\n      })\n\n      addCorsDebug(`CORS origin added successfully`, response)\n\n      this.log('CORS origin added successfully')\n    } catch (error) {\n      const err = error as Error\n\n      addCorsDebug(`Error adding CORS origin`, err)\n      this.error(`CORS origin addition failed:\\n${err.message}`, {exit: 1})\n    }\n  }\n\n  /**\n   * Prompt the user for credentials\n   *\n   * @param hasWildcard - Whether the origin contains a wildcard\n   * @returns - Whether to allow credentials\n   */\n  private async promptForCredentials(hasWildcard: boolean) {\n    this.log('')\n    if (hasWildcard) {\n      this.log(oneline`\n      ${chalk.yellow(`${logSymbols.warning} Warning:`)}\n      We ${chalk.red(chalk.underline('HIGHLY'))} recommend NOT allowing credentials\n      on origins containing wildcards. If you are logged in to a studio, people will\n      be able to send requests ${chalk.underline('on your behalf')} to read and modify\n      data, from any matching origin. Please tread carefully!\n    `)\n    } else {\n      this.log(oneline`\n      ${chalk.yellow(`${logSymbols.warning} Warning:`)}\n      Should this origin be allowed to send requests using authentication tokens or\n      session cookies? Be aware that any script on this origin will be able to send\n      requests ${chalk.underline('on your behalf')} to read and modify data if you\n      are logged in to a Sanity studio. If this origin hosts a studio, you will need\n      this, otherwise you should probably answer \"No\" (n).\n    `)\n    }\n\n    this.log('')\n\n    return confirm({\n      default: false,\n      message: oneline`\n      Allow credentials to be sent from this origin? Please read the warning above.\n    `,\n    })\n  }\n\n  /**\n   * Prompt the user for wildcard confirmation\n   *\n   * @param origin - The origin to check for wildcards\n   * @returns - Whether to allow the origin\n   */\n  private async promptForWildcardConfirmation(origin: string) {\n    this.log('')\n    this.log(chalk.yellow(`${logSymbols.warning} Warning: Examples of allowed origins:`))\n\n    if (origin === '*') {\n      this.log('- http://www.some-malicious.site')\n      this.log('- https://not.what-you-were-expecting.com')\n      this.log('- https://high-traffic-site.com')\n      this.log('- http://192.168.1.1:8080')\n    } else {\n      this.log(`- ${origin.replace(/:\\*/, ':1234').replaceAll('*', 'foo')}`)\n      this.log(`- ${origin.replace(/:\\*/, ':3030').replaceAll('*', 'foo.bar')}`)\n    }\n\n    this.log('')\n\n    return confirm({\n      default: false,\n      message: oneline`\n      Using wildcards can be ${chalk.red('risky')}.\n      Are you ${chalk.underline('absolutely sure')} you want to allow this origin?`,\n    })\n  }\n}\n"],"names":["fs","path","Args","Flags","SanityCommand","subdebug","chalk","confirm","logSymbols","oneline","CORS_API_VERSION","filterAndValidateOrigin","NO_PROJECT_ID","addCorsDebug","Add","args","origin","string","description","required","examples","command","flags","credentials","boolean","allowNo","default","undefined","run","parse","client","getGlobalApiClient","apiVersion","requireUser","projectId","getProjectId","error","exit","isFile","existsSync","join","process","cwd","warn","filteredOrigin","output","hasWildcard","includes","confirmed","promptForWildcardConfirmation","allowCredentials","promptForCredentials","Boolean","log","response","request","body","maxRedirects","method","uri","err","message","yellow","warning","red","underline","replace","replaceAll"],"mappings":"AAAA,OAAOA,QAAQ,UAAS;AACxB,OAAOC,UAAU,YAAW;AAE5B,SAAQC,IAAI,EAAEC,KAAK,QAAO,cAAa;AACvC,SAAQC,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AACxD,SAAQC,KAAK,EAAEC,OAAO,EAAEC,UAAU,QAAO,sBAAqB;AAC9D,SAAQC,OAAO,QAAO,UAAS;AAE/B,SAAQC,gBAAgB,QAAO,kCAAiC;AAChE,SAAQC,uBAAuB,QAAO,gDAA+C;AACrF,SAAQC,aAAa,QAAO,8BAA6B;AAEzD,MAAMC,eAAeR,SAAS;AAE9B,OAAO,MAAMS,YAAYV;IACvB,OAAgBW,OAAO;QACrBC,QAAQd,KAAKe,MAAM,CAAC;YAClBC,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,OAAgBD,cAAc,0DAAyD;IAEvF,OAAgBE,WAAW;QACzB;YACEC,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;KACD,CAAA;IAED,OAAgBI,QAAQ;QACtBC,aAAapB,MAAMqB,OAAO,CAAC;YACzBC,SAAS;YACTC,SAASC;YACTT,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,MAAaS,MAAqB;QAChC,MAAM,EAACb,IAAI,EAAEO,KAAK,EAAC,GAAG,MAAM,IAAI,CAACO,KAAK,CAACf;QACvC,MAAM,EAACE,MAAM,EAAC,GAAGD;QAEjB,MAAMe,SAAS,MAAM,IAAI,CAACC,kBAAkB,CAAC;YAC3CC,YAAYtB;YACZuB,aAAa;QACf;QAEA,iCAAiC;QACjC,MAAMC,YAAY,MAAM,IAAI,CAACC,YAAY;QACzC,IAAI,CAACD,WAAW;YACd,IAAI,CAACE,KAAK,CAACxB,eAAe;gBAACyB,MAAM;YAAC;QACpC;QAEA,+DAA+D;QAC/D,IAAI;YACF,MAAMC,SAAStC,GAAGuC,UAAU,CAACtC,KAAKuC,IAAI,CAACC,QAAQC,GAAG,IAAI3B,KAAKC,MAAM;YACjE,IAAIsB,QAAQ;gBACV,IAAI,CAACK,IAAI,CAAC,CAAC,QAAQ,EAAE5B,KAAKC,MAAM,CAAC,iDAAiD,CAAC;YACrF;QACF,EAAE,OAAM;QACN,wCAAwC;QAC1C;QAEA,MAAM4B,iBAAiB,MAAMjC,wBAAwBK,QAAQ,IAAI,CAAC6B,MAAM;QACxE,MAAMC,cAAc9B,OAAO+B,QAAQ,CAAC;QAEpC,IAAID,aAAa;YACf,MAAME,YAAY,MAAM,IAAI,CAACC,6BAA6B,CAACjC;YAC3D,IAAI,CAACgC,WAAW;gBACd,IAAI,CAACZ,KAAK,CAAC,uBAAuB;oBAACC,MAAM;gBAAC;YAC5C;QACF;QAEA,MAAMa,mBACJ5B,MAAMC,WAAW,KAAKI,YAClB,MAAM,IAAI,CAACwB,oBAAoB,CAACL,eAChCM,QAAQ9B,MAAMC,WAAW;QAE/B,IAAIqB,mBAAmB5B,QAAQ;YAC7B,IAAI,CAACqC,GAAG,CAAC,CAAC,sBAAsB,EAAET,gBAAgB;QACpD;QAEA,IAAI;YACF,MAAMU,WAAW,MAAMxB,OAAOyB,OAAO,CAAC;gBACpCC,MAAM;oBACJN;oBACAlC,QAAQ4B;gBACV;gBACAa,cAAc;gBACdC,QAAQ;gBACRC,KAAK,CAAC,UAAU,EAAEzB,UAAU,KAAK,CAAC;YACpC;YAEArB,aAAa,CAAC,8BAA8B,CAAC,EAAEyC;YAE/C,IAAI,CAACD,GAAG,CAAC;QACX,EAAE,OAAOjB,OAAO;YACd,MAAMwB,MAAMxB;YAEZvB,aAAa,CAAC,wBAAwB,CAAC,EAAE+C;YACzC,IAAI,CAACxB,KAAK,CAAC,CAAC,8BAA8B,EAAEwB,IAAIC,OAAO,EAAE,EAAE;gBAACxB,MAAM;YAAC;QACrE;IACF;IAEA;;;;;GAKC,GACD,MAAcc,qBAAqBL,WAAoB,EAAE;QACvD,IAAI,CAACO,GAAG,CAAC;QACT,IAAIP,aAAa;YACf,IAAI,CAACO,GAAG,CAAC5C,OAAO,CAAC;MACjB,EAAEH,MAAMwD,MAAM,CAAC,GAAGtD,WAAWuD,OAAO,CAAC,SAAS,CAAC,EAAE;SAC9C,EAAEzD,MAAM0D,GAAG,CAAC1D,MAAM2D,SAAS,CAAC,WAAW;;+BAEjB,EAAE3D,MAAM2D,SAAS,CAAC,kBAAkB;;IAE/D,CAAC;QACD,OAAO;YACL,IAAI,CAACZ,GAAG,CAAC5C,OAAO,CAAC;MACjB,EAAEH,MAAMwD,MAAM,CAAC,GAAGtD,WAAWuD,OAAO,CAAC,SAAS,CAAC,EAAE;;;eAGxC,EAAEzD,MAAM2D,SAAS,CAAC,kBAAkB;;;IAG/C,CAAC;QACD;QAEA,IAAI,CAACZ,GAAG,CAAC;QAET,OAAO9C,QAAQ;YACbmB,SAAS;YACTmC,SAASpD,OAAO,CAAC;;IAEnB,CAAC;QACD;IACF;IAEA;;;;;GAKC,GACD,MAAcwC,8BAA8BjC,MAAc,EAAE;QAC1D,IAAI,CAACqC,GAAG,CAAC;QACT,IAAI,CAACA,GAAG,CAAC/C,MAAMwD,MAAM,CAAC,GAAGtD,WAAWuD,OAAO,CAAC,sCAAsC,CAAC;QAEnF,IAAI/C,WAAW,KAAK;YAClB,IAAI,CAACqC,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;QACX,OAAO;YACL,IAAI,CAACA,GAAG,CAAC,CAAC,EAAE,EAAErC,OAAOkD,OAAO,CAAC,OAAO,SAASC,UAAU,CAAC,KAAK,QAAQ;YACrE,IAAI,CAACd,GAAG,CAAC,CAAC,EAAE,EAAErC,OAAOkD,OAAO,CAAC,OAAO,SAASC,UAAU,CAAC,KAAK,YAAY;QAC3E;QAEA,IAAI,CAACd,GAAG,CAAC;QAET,OAAO9C,QAAQ;YACbmB,SAAS;YACTmC,SAASpD,OAAO,CAAC;6BACM,EAAEH,MAAM0D,GAAG,CAAC,SAAS;cACpC,EAAE1D,MAAM2D,SAAS,CAAC,mBAAmB,+BAA+B,CAAC;QAC/E;IACF;AACF"}
+{"version":3,"sources":["../../../src/commands/cors/add.ts"],"sourcesContent":["import fs from 'node:fs'\nimport path from 'node:path'\n\nimport {Args, Flags} from '@oclif/core'\nimport {SanityCommand, subdebug} from '@sanity/cli-core'\nimport {chalk, confirm, logSymbols} from '@sanity/cli-core/ux'\nimport {oneline} from 'oneline'\n\nimport {filterAndValidateOrigin} from '../../actions/cors/filterAndValidateOrigin.js'\nimport {createCorsOrigin} from '../../services/cors.js'\nimport {NO_PROJECT_ID} from '../../util/errorMessages.js'\n\nconst addCorsDebug = subdebug('cors:add')\n\nexport class Add extends SanityCommand<typeof Add> {\n  static override args = {\n    origin: Args.string({\n      description: 'Origin to allow (e.g., https://example.com)',\n      required: true,\n    }),\n  }\n\n  static override description = 'Allow a new origin to use your project API through CORS'\n\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'Interactively add a CORS origin',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> http://localhost:3000 --no-credentials',\n      description: 'Add a localhost origin without credentials',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> https://myapp.com --credentials',\n      description: 'Add a production origin with credentials allowed',\n    },\n  ]\n\n  static override flags = {\n    credentials: Flags.boolean({\n      allowNo: true,\n      default: undefined,\n      description: 'Allow credentials (token/cookie) to be sent from this origin',\n      required: false,\n    }),\n  }\n\n  public async run(): Promise<void> {\n    const {args, flags} = await this.parse(Add)\n    const {origin} = args\n\n    // Ensure we have project context\n    const projectId = await this.getProjectId()\n    if (!projectId) {\n      this.error(NO_PROJECT_ID, {exit: 1})\n    }\n\n    // Check if the origin argument looks like a file path and warn\n    try {\n      const isFile = fs.existsSync(path.join(process.cwd(), args.origin))\n      if (isFile) {\n        this.warn(`Origin \"${args.origin}?\" Remember to quote values (sanity cors add \"*\")`)\n      }\n    } catch {\n      // Ignore errors checking if it's a file\n    }\n\n    const filteredOrigin = await filterAndValidateOrigin(origin, this.output)\n    const hasWildcard = origin.includes('*')\n\n    if (hasWildcard) {\n      const confirmed = await this.promptForWildcardConfirmation(origin)\n      if (!confirmed) {\n        this.error('Operation cancelled', {exit: 1})\n      }\n    }\n\n    const allowCredentials =\n      flags.credentials === undefined\n        ? await this.promptForCredentials(hasWildcard)\n        : Boolean(flags.credentials)\n\n    if (filteredOrigin !== origin) {\n      this.log(`Normalized origin to: ${filteredOrigin}`)\n    }\n\n    try {\n      const response = await createCorsOrigin({\n        allowCredentials,\n        origin: filteredOrigin,\n        projectId,\n      })\n\n      addCorsDebug(`CORS origin added successfully`, response)\n\n      this.log('CORS origin added successfully')\n    } catch (error) {\n      const err = error as Error\n\n      addCorsDebug(`Error adding CORS origin`, err)\n      this.error(`CORS origin addition failed:\\n${err.message}`, {exit: 1})\n    }\n  }\n\n  /**\n   * Prompt the user for credentials\n   *\n   * @param hasWildcard - Whether the origin contains a wildcard\n   * @returns - Whether to allow credentials\n   */\n  private async promptForCredentials(hasWildcard: boolean) {\n    this.log('')\n    if (hasWildcard) {\n      this.log(oneline`\n      ${chalk.yellow(`${logSymbols.warning} Warning:`)}\n      We ${chalk.red(chalk.underline('HIGHLY'))} recommend NOT allowing credentials\n      on origins containing wildcards. If you are logged in to a studio, people will\n      be able to send requests ${chalk.underline('on your behalf')} to read and modify\n      data, from any matching origin. Please tread carefully!\n    `)\n    } else {\n      this.log(oneline`\n      ${chalk.yellow(`${logSymbols.warning} Warning:`)}\n      Should this origin be allowed to send requests using authentication tokens or\n      session cookies? Be aware that any script on this origin will be able to send\n      requests ${chalk.underline('on your behalf')} to read and modify data if you\n      are logged in to a Sanity studio. If this origin hosts a studio, you will need\n      this, otherwise you should probably answer \"No\" (n).\n    `)\n    }\n\n    this.log('')\n\n    return confirm({\n      default: false,\n      message: oneline`\n      Allow credentials to be sent from this origin? Please read the warning above.\n    `,\n    })\n  }\n\n  /**\n   * Prompt the user for wildcard confirmation\n   *\n   * @param origin - The origin to check for wildcards\n   * @returns - Whether to allow the origin\n   */\n  private async promptForWildcardConfirmation(origin: string) {\n    this.log('')\n    this.log(chalk.yellow(`${logSymbols.warning} Warning: Examples of allowed origins:`))\n\n    if (origin === '*') {\n      this.log('- http://www.some-malicious.site')\n      this.log('- https://not.what-you-were-expecting.com')\n      this.log('- https://high-traffic-site.com')\n      this.log('- http://192.168.1.1:8080')\n    } else {\n      this.log(`- ${origin.replace(/:\\*/, ':1234').replaceAll('*', 'foo')}`)\n      this.log(`- ${origin.replace(/:\\*/, ':3030').replaceAll('*', 'foo.bar')}`)\n    }\n\n    this.log('')\n\n    return confirm({\n      default: false,\n      message: oneline`\n      Using wildcards can be ${chalk.red('risky')}.\n      Are you ${chalk.underline('absolutely sure')} you want to allow this origin?`,\n    })\n  }\n}\n"],"names":["fs","path","Args","Flags","SanityCommand","subdebug","chalk","confirm","logSymbols","oneline","filterAndValidateOrigin","createCorsOrigin","NO_PROJECT_ID","addCorsDebug","Add","args","origin","string","description","required","examples","command","flags","credentials","boolean","allowNo","default","undefined","run","parse","projectId","getProjectId","error","exit","isFile","existsSync","join","process","cwd","warn","filteredOrigin","output","hasWildcard","includes","confirmed","promptForWildcardConfirmation","allowCredentials","promptForCredentials","Boolean","log","response","err","message","yellow","warning","red","underline","replace","replaceAll"],"mappings":"AAAA,OAAOA,QAAQ,UAAS;AACxB,OAAOC,UAAU,YAAW;AAE5B,SAAQC,IAAI,EAAEC,KAAK,QAAO,cAAa;AACvC,SAAQC,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AACxD,SAAQC,KAAK,EAAEC,OAAO,EAAEC,UAAU,QAAO,sBAAqB;AAC9D,SAAQC,OAAO,QAAO,UAAS;AAE/B,SAAQC,uBAAuB,QAAO,gDAA+C;AACrF,SAAQC,gBAAgB,QAAO,yBAAwB;AACvD,SAAQC,aAAa,QAAO,8BAA6B;AAEzD,MAAMC,eAAeR,SAAS;AAE9B,OAAO,MAAMS,YAAYV;IACvB,OAAgBW,OAAO;QACrBC,QAAQd,KAAKe,MAAM,CAAC;YAClBC,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,OAAgBD,cAAc,0DAAyD;IAEvF,OAAgBE,WAAW;QACzB;YACEC,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;KACD,CAAA;IAED,OAAgBI,QAAQ;QACtBC,aAAapB,MAAMqB,OAAO,CAAC;YACzBC,SAAS;YACTC,SAASC;YACTT,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,MAAaS,MAAqB;QAChC,MAAM,EAACb,IAAI,EAAEO,KAAK,EAAC,GAAG,MAAM,IAAI,CAACO,KAAK,CAACf;QACvC,MAAM,EAACE,MAAM,EAAC,GAAGD;QAEjB,iCAAiC;QACjC,MAAMe,YAAY,MAAM,IAAI,CAACC,YAAY;QACzC,IAAI,CAACD,WAAW;YACd,IAAI,CAACE,KAAK,CAACpB,eAAe;gBAACqB,MAAM;YAAC;QACpC;QAEA,+DAA+D;QAC/D,IAAI;YACF,MAAMC,SAASlC,GAAGmC,UAAU,CAAClC,KAAKmC,IAAI,CAACC,QAAQC,GAAG,IAAIvB,KAAKC,MAAM;YACjE,IAAIkB,QAAQ;gBACV,IAAI,CAACK,IAAI,CAAC,CAAC,QAAQ,EAAExB,KAAKC,MAAM,CAAC,iDAAiD,CAAC;YACrF;QACF,EAAE,OAAM;QACN,wCAAwC;QAC1C;QAEA,MAAMwB,iBAAiB,MAAM9B,wBAAwBM,QAAQ,IAAI,CAACyB,MAAM;QACxE,MAAMC,cAAc1B,OAAO2B,QAAQ,CAAC;QAEpC,IAAID,aAAa;YACf,MAAME,YAAY,MAAM,IAAI,CAACC,6BAA6B,CAAC7B;YAC3D,IAAI,CAAC4B,WAAW;gBACd,IAAI,CAACZ,KAAK,CAAC,uBAAuB;oBAACC,MAAM;gBAAC;YAC5C;QACF;QAEA,MAAMa,mBACJxB,MAAMC,WAAW,KAAKI,YAClB,MAAM,IAAI,CAACoB,oBAAoB,CAACL,eAChCM,QAAQ1B,MAAMC,WAAW;QAE/B,IAAIiB,mBAAmBxB,QAAQ;YAC7B,IAAI,CAACiC,GAAG,CAAC,CAAC,sBAAsB,EAAET,gBAAgB;QACpD;QAEA,IAAI;YACF,MAAMU,WAAW,MAAMvC,iBAAiB;gBACtCmC;gBACA9B,QAAQwB;gBACRV;YACF;YAEAjB,aAAa,CAAC,8BAA8B,CAAC,EAAEqC;YAE/C,IAAI,CAACD,GAAG,CAAC;QACX,EAAE,OAAOjB,OAAO;YACd,MAAMmB,MAAMnB;YAEZnB,aAAa,CAAC,wBAAwB,CAAC,EAAEsC;YACzC,IAAI,CAACnB,KAAK,CAAC,CAAC,8BAA8B,EAAEmB,IAAIC,OAAO,EAAE,EAAE;gBAACnB,MAAM;YAAC;QACrE;IACF;IAEA;;;;;GAKC,GACD,MAAcc,qBAAqBL,WAAoB,EAAE;QACvD,IAAI,CAACO,GAAG,CAAC;QACT,IAAIP,aAAa;YACf,IAAI,CAACO,GAAG,CAACxC,OAAO,CAAC;MACjB,EAAEH,MAAM+C,MAAM,CAAC,GAAG7C,WAAW8C,OAAO,CAAC,SAAS,CAAC,EAAE;SAC9C,EAAEhD,MAAMiD,GAAG,CAACjD,MAAMkD,SAAS,CAAC,WAAW;;+BAEjB,EAAElD,MAAMkD,SAAS,CAAC,kBAAkB;;IAE/D,CAAC;QACD,OAAO;YACL,IAAI,CAACP,GAAG,CAACxC,OAAO,CAAC;MACjB,EAAEH,MAAM+C,MAAM,CAAC,GAAG7C,WAAW8C,OAAO,CAAC,SAAS,CAAC,EAAE;;;eAGxC,EAAEhD,MAAMkD,SAAS,CAAC,kBAAkB;;;IAG/C,CAAC;QACD;QAEA,IAAI,CAACP,GAAG,CAAC;QAET,OAAO1C,QAAQ;YACbmB,SAAS;YACT0B,SAAS3C,OAAO,CAAC;;IAEnB,CAAC;QACD;IACF;IAEA;;;;;GAKC,GACD,MAAcoC,8BAA8B7B,MAAc,EAAE;QAC1D,IAAI,CAACiC,GAAG,CAAC;QACT,IAAI,CAACA,GAAG,CAAC3C,MAAM+C,MAAM,CAAC,GAAG7C,WAAW8C,OAAO,CAAC,sCAAsC,CAAC;QAEnF,IAAItC,WAAW,KAAK;YAClB,IAAI,CAACiC,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;QACX,OAAO;YACL,IAAI,CAACA,GAAG,CAAC,CAAC,EAAE,EAAEjC,OAAOyC,OAAO,CAAC,OAAO,SAASC,UAAU,CAAC,KAAK,QAAQ;YACrE,IAAI,CAACT,GAAG,CAAC,CAAC,EAAE,EAAEjC,OAAOyC,OAAO,CAAC,OAAO,SAASC,UAAU,CAAC,KAAK,YAAY;QAC3E;QAEA,IAAI,CAACT,GAAG,CAAC;QAET,OAAO1C,QAAQ;YACbmB,SAAS;YACT0B,SAAS3C,OAAO,CAAC;6BACM,EAAEH,MAAMiD,GAAG,CAAC,SAAS;cACpC,EAAEjD,MAAMkD,SAAS,CAAC,mBAAmB,+BAA+B,CAAC;QAC/E;IACF;AACF"}

package/dist/commands/cors/delete.js

@@ -1,7 +1,7 @@
 import { Args } from '@oclif/core';
 import { SanityCommand, subdebug } from '@sanity/cli-core';
 import { select } from '@sanity/cli-core/ux';
-import { CORS_API_VERSION } from '../../actions/cors/constants.js';
+import { deleteCorsOrigin, listCorsOrigins } from '../../services/cors.js';
 import { NO_PROJECT_ID } from '../../util/errorMessages.js';
 const deleteCorsDebug = subdebug('cors:delete');
 export class Delete extends SanityCommand {
@@ -24,10 +24,6 @@ export class Delete extends SanityCommand {
     ];
     async run() {
         const { args } = await this.parse(Delete);
-        const client = await this.getGlobalApiClient({
-            apiVersion: CORS_API_VERSION,
-            requireUser: true
-        });
         // Ensure we have project context
         const projectId = await this.getProjectId();
         if (!projectId) {
@@ -36,12 +32,11 @@ export class Delete extends SanityCommand {
             });
         }
         // Get the origin ID to delete
-        const originId = await this.promptForOrigin(args.origin, client, projectId);
-        // Delete the origin
+        const originId = await this.promptForOrigin(args.origin, projectId);
         try {
-            await client.request({
-                method: 'DELETE',
-                uri: `/projects/${projectId}/cors/${originId}`
+            await deleteCorsOrigin({
+                originId,
+                projectId
             });
             this.log('Origin deleted');
         } catch (error) {
@@ -52,13 +47,10 @@ export class Delete extends SanityCommand {
             });
         }
     }
-    async promptForOrigin(specifiedOrigin, client, projectId) {
-        // Fetch all CORS origins
+    async promptForOrigin(specifiedOrigin, projectId) {
         let origins;
         try {
-            origins = await client.request({
-                uri: `/projects/${projectId}/cors`
-            });
+            origins = await listCorsOrigins(projectId);
         } catch (error) {
             const err = error;
             deleteCorsDebug(`Error fetching CORS origins for project ${projectId}`, err);

package/dist/commands/cors/delete.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/cors/delete.ts"],"sourcesContent":["import {Args} from '@oclif/core'\nimport {SanityCommand, subdebug} from '@sanity/cli-core'\nimport {select} from '@sanity/cli-core/ux'\n\nimport {CORS_API_VERSION} from '../../actions/cors/constants.js'\nimport {type CorsOrigin} from '../../actions/cors/types.js'\nimport {NO_PROJECT_ID} from '../../util/errorMessages.js'\n\nconst deleteCorsDebug = subdebug('cors:delete')\n\nexport class Delete extends SanityCommand<typeof Delete> {\n  static override args = {\n    origin: Args.string({\n      description: 'Origin to delete (will prompt if not provided)',\n      required: false,\n    }),\n  }\n\n  static override description = 'Delete an existing CORS origin from your project'\n\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'Interactively select and delete a CORS origin',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> https://example.com',\n      description: 'Delete a specific CORS origin',\n    },\n  ]\n\n  public async run(): Promise<void> {\n    const {args} = await this.parse(Delete)\n\n    const client = await this.getGlobalApiClient({\n      apiVersion: CORS_API_VERSION,\n      requireUser: true,\n    })\n\n    // Ensure we have project context\n    const projectId = await this.getProjectId()\n    if (!projectId) {\n      this.error(NO_PROJECT_ID, {exit: 1})\n    }\n\n    // Get the origin ID to delete\n    const originId = await this.promptForOrigin(args.origin, client, projectId)\n\n    // Delete the origin\n    try {\n      await client.request({\n        method: 'DELETE',\n        uri: `/projects/${projectId}/cors/${originId}`,\n      })\n\n      this.log('Origin deleted')\n    } catch (error) {\n      const err = error as Error\n      deleteCorsDebug(`Error deleting CORS origin ${originId} for project ${projectId}`, err)\n      this.error(`Origin deletion failed:\\n${err.message}`, {exit: 1})\n    }\n  }\n\n  private async promptForOrigin(\n    specifiedOrigin: string | undefined,\n    client: Awaited<ReturnType<typeof this.getGlobalApiClient>>,\n    projectId: string,\n  ): Promise<number> {\n    // Fetch all CORS origins\n    let origins: CorsOrigin[]\n    try {\n      origins = await client.request<CorsOrigin[]>({uri: `/projects/${projectId}/cors`})\n    } catch (error) {\n      const err = error as Error\n      deleteCorsDebug(`Error fetching CORS origins for project ${projectId}`, err)\n      this.error(`Failed to fetch CORS origins:\\n${err.message}`, {exit: 1})\n    }\n\n    if (origins.length === 0) {\n      this.error('No CORS origins configured for this project.', {exit: 1})\n    }\n\n    // If origin is specified, find it in the list\n    if (specifiedOrigin) {\n      const specifiedOriginLower = specifiedOrigin.toLowerCase()\n      const selectedOrigin = origins.find(\n        (origin) => origin.origin.toLowerCase() === specifiedOriginLower,\n      )\n\n      if (!selectedOrigin) {\n        this.error(`Origin \"${specifiedOrigin}\" not found`, {exit: 1})\n      }\n\n      return selectedOrigin.id\n    }\n\n    // If no origin specified, prompt user to select one\n    const choices = origins.map((origin) => ({\n      name: origin.origin,\n      value: origin.id,\n    }))\n\n    const selectedId = await select({\n      choices,\n      message: 'Select origin to delete',\n    })\n\n    return selectedId\n  }\n}\n"],"names":["Args","SanityCommand","subdebug","select","CORS_API_VERSION","NO_PROJECT_ID","deleteCorsDebug","Delete","args","origin","string","description","required","examples","command","run","parse","client","getGlobalApiClient","apiVersion","requireUser","projectId","getProjectId","error","exit","originId","promptForOrigin","request","method","uri","log","err","message","specifiedOrigin","origins","length","specifiedOriginLower","toLowerCase","selectedOrigin","find","id","choices","map","name","value","selectedId"],"mappings":"AAAA,SAAQA,IAAI,QAAO,cAAa;AAChC,SAAQC,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AACxD,SAAQC,MAAM,QAAO,sBAAqB;AAE1C,SAAQC,gBAAgB,QAAO,kCAAiC;AAEhE,SAAQC,aAAa,QAAO,8BAA6B;AAEzD,MAAMC,kBAAkBJ,SAAS;AAEjC,OAAO,MAAMK,eAAeN;IAC1B,OAAgBO,OAAO;QACrBC,QAAQT,KAAKU,MAAM,CAAC;YAClBC,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,OAAgBD,cAAc,mDAAkD;IAEhF,OAAgBE,WAAW;QACzB;YACEC,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;KACD,CAAA;IAED,MAAaI,MAAqB;QAChC,MAAM,EAACP,IAAI,EAAC,GAAG,MAAM,IAAI,CAACQ,KAAK,CAACT;QAEhC,MAAMU,SAAS,MAAM,IAAI,CAACC,kBAAkB,CAAC;YAC3CC,YAAYf;YACZgB,aAAa;QACf;QAEA,iCAAiC;QACjC,MAAMC,YAAY,MAAM,IAAI,CAACC,YAAY;QACzC,IAAI,CAACD,WAAW;YACd,IAAI,CAACE,KAAK,CAAClB,eAAe;gBAACmB,MAAM;YAAC;QACpC;QAEA,8BAA8B;QAC9B,MAAMC,WAAW,MAAM,IAAI,CAACC,eAAe,CAAClB,KAAKC,MAAM,EAAEQ,QAAQI;QAEjE,oBAAoB;QACpB,IAAI;YACF,MAAMJ,OAAOU,OAAO,CAAC;gBACnBC,QAAQ;gBACRC,KAAK,CAAC,UAAU,EAAER,UAAU,MAAM,EAAEI,UAAU;YAChD;YAEA,IAAI,CAACK,GAAG,CAAC;QACX,EAAE,OAAOP,OAAO;YACd,MAAMQ,MAAMR;YACZjB,gBAAgB,CAAC,2BAA2B,EAAEmB,SAAS,aAAa,EAAEJ,WAAW,EAAEU;YACnF,IAAI,CAACR,KAAK,CAAC,CAAC,yBAAyB,EAAEQ,IAAIC,OAAO,EAAE,EAAE;gBAACR,MAAM;YAAC;QAChE;IACF;IAEA,MAAcE,gBACZO,eAAmC,EACnChB,MAA2D,EAC3DI,SAAiB,EACA;QACjB,yBAAyB;QACzB,IAAIa;QACJ,IAAI;YACFA,UAAU,MAAMjB,OAAOU,OAAO,CAAe;gBAACE,KAAK,CAAC,UAAU,EAAER,UAAU,KAAK,CAAC;YAAA;QAClF,EAAE,OAAOE,OAAO;YACd,MAAMQ,MAAMR;YACZjB,gBAAgB,CAAC,wCAAwC,EAAEe,WAAW,EAAEU;YACxE,IAAI,CAACR,KAAK,CAAC,CAAC,+BAA+B,EAAEQ,IAAIC,OAAO,EAAE,EAAE;gBAACR,MAAM;YAAC;QACtE;QAEA,IAAIU,QAAQC,MAAM,KAAK,GAAG;YACxB,IAAI,CAACZ,KAAK,CAAC,gDAAgD;gBAACC,MAAM;YAAC;QACrE;QAEA,8CAA8C;QAC9C,IAAIS,iBAAiB;YACnB,MAAMG,uBAAuBH,gBAAgBI,WAAW;YACxD,MAAMC,iBAAiBJ,QAAQK,IAAI,CACjC,CAAC9B,SAAWA,OAAOA,MAAM,CAAC4B,WAAW,OAAOD;YAG9C,IAAI,CAACE,gBAAgB;gBACnB,IAAI,CAACf,KAAK,CAAC,CAAC,QAAQ,EAAEU,gBAAgB,WAAW,CAAC,EAAE;oBAACT,MAAM;gBAAC;YAC9D;YAEA,OAAOc,eAAeE,EAAE;QAC1B;QAEA,oDAAoD;QACpD,MAAMC,UAAUP,QAAQQ,GAAG,CAAC,CAACjC,SAAY,CAAA;gBACvCkC,MAAMlC,OAAOA,MAAM;gBACnBmC,OAAOnC,OAAO+B,EAAE;YAClB,CAAA;QAEA,MAAMK,aAAa,MAAM1C,OAAO;YAC9BsC;YACAT,SAAS;QACX;QAEA,OAAOa;IACT;AACF"}
+{"version":3,"sources":["../../../src/commands/cors/delete.ts"],"sourcesContent":["import {Args} from '@oclif/core'\nimport {SanityCommand, subdebug} from '@sanity/cli-core'\nimport {select} from '@sanity/cli-core/ux'\n\nimport {type CorsOrigin, deleteCorsOrigin, listCorsOrigins} from '../../services/cors.js'\nimport {NO_PROJECT_ID} from '../../util/errorMessages.js'\n\nconst deleteCorsDebug = subdebug('cors:delete')\n\nexport class Delete extends SanityCommand<typeof Delete> {\n  static override args = {\n    origin: Args.string({\n      description: 'Origin to delete (will prompt if not provided)',\n      required: false,\n    }),\n  }\n\n  static override description = 'Delete an existing CORS origin from your project'\n\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'Interactively select and delete a CORS origin',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> https://example.com',\n      description: 'Delete a specific CORS origin',\n    },\n  ]\n\n  public async run(): Promise<void> {\n    const {args} = await this.parse(Delete)\n\n    // Ensure we have project context\n    const projectId = await this.getProjectId()\n    if (!projectId) {\n      this.error(NO_PROJECT_ID, {exit: 1})\n    }\n\n    // Get the origin ID to delete\n    const originId = await this.promptForOrigin(args.origin, projectId)\n\n    try {\n      await deleteCorsOrigin({originId, projectId})\n\n      this.log('Origin deleted')\n    } catch (error) {\n      const err = error as Error\n      deleteCorsDebug(`Error deleting CORS origin ${originId} for project ${projectId}`, err)\n      this.error(`Origin deletion failed:\\n${err.message}`, {exit: 1})\n    }\n  }\n\n  private async promptForOrigin(\n    specifiedOrigin: string | undefined,\n    projectId: string,\n  ): Promise<number> {\n    let origins: CorsOrigin[]\n    try {\n      origins = await listCorsOrigins(projectId)\n    } catch (error) {\n      const err = error as Error\n      deleteCorsDebug(`Error fetching CORS origins for project ${projectId}`, err)\n      this.error(`Failed to fetch CORS origins:\\n${err.message}`, {exit: 1})\n    }\n\n    if (origins.length === 0) {\n      this.error('No CORS origins configured for this project.', {exit: 1})\n    }\n\n    // If origin is specified, find it in the list\n    if (specifiedOrigin) {\n      const specifiedOriginLower = specifiedOrigin.toLowerCase()\n      const selectedOrigin = origins.find(\n        (origin) => origin.origin.toLowerCase() === specifiedOriginLower,\n      )\n\n      if (!selectedOrigin) {\n        this.error(`Origin \"${specifiedOrigin}\" not found`, {exit: 1})\n      }\n\n      return selectedOrigin.id\n    }\n\n    // If no origin specified, prompt user to select one\n    const choices = origins.map((origin) => ({\n      name: origin.origin,\n      value: origin.id,\n    }))\n\n    const selectedId = await select({\n      choices,\n      message: 'Select origin to delete',\n    })\n\n    return selectedId\n  }\n}\n"],"names":["Args","SanityCommand","subdebug","select","deleteCorsOrigin","listCorsOrigins","NO_PROJECT_ID","deleteCorsDebug","Delete","args","origin","string","description","required","examples","command","run","parse","projectId","getProjectId","error","exit","originId","promptForOrigin","log","err","message","specifiedOrigin","origins","length","specifiedOriginLower","toLowerCase","selectedOrigin","find","id","choices","map","name","value","selectedId"],"mappings":"AAAA,SAAQA,IAAI,QAAO,cAAa;AAChC,SAAQC,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AACxD,SAAQC,MAAM,QAAO,sBAAqB;AAE1C,SAAyBC,gBAAgB,EAAEC,eAAe,QAAO,yBAAwB;AACzF,SAAQC,aAAa,QAAO,8BAA6B;AAEzD,MAAMC,kBAAkBL,SAAS;AAEjC,OAAO,MAAMM,eAAeP;IAC1B,OAAgBQ,OAAO;QACrBC,QAAQV,KAAKW,MAAM,CAAC;YAClBC,aAAa;YACbC,UAAU;QACZ;IACF,EAAC;IAED,OAAgBD,cAAc,mDAAkD;IAEhF,OAAgBE,WAAW;QACzB;YACEC,SAAS;YACTH,aAAa;QACf;QACA;YACEG,SAAS;YACTH,aAAa;QACf;KACD,CAAA;IAED,MAAaI,MAAqB;QAChC,MAAM,EAACP,IAAI,EAAC,GAAG,MAAM,IAAI,CAACQ,KAAK,CAACT;QAEhC,iCAAiC;QACjC,MAAMU,YAAY,MAAM,IAAI,CAACC,YAAY;QACzC,IAAI,CAACD,WAAW;YACd,IAAI,CAACE,KAAK,CAACd,eAAe;gBAACe,MAAM;YAAC;QACpC;QAEA,8BAA8B;QAC9B,MAAMC,WAAW,MAAM,IAAI,CAACC,eAAe,CAACd,KAAKC,MAAM,EAAEQ;QAEzD,IAAI;YACF,MAAMd,iBAAiB;gBAACkB;gBAAUJ;YAAS;YAE3C,IAAI,CAACM,GAAG,CAAC;QACX,EAAE,OAAOJ,OAAO;YACd,MAAMK,MAAML;YACZb,gBAAgB,CAAC,2BAA2B,EAAEe,SAAS,aAAa,EAAEJ,WAAW,EAAEO;YACnF,IAAI,CAACL,KAAK,CAAC,CAAC,yBAAyB,EAAEK,IAAIC,OAAO,EAAE,EAAE;gBAACL,MAAM;YAAC;QAChE;IACF;IAEA,MAAcE,gBACZI,eAAmC,EACnCT,SAAiB,EACA;QACjB,IAAIU;QACJ,IAAI;YACFA,UAAU,MAAMvB,gBAAgBa;QAClC,EAAE,OAAOE,OAAO;YACd,MAAMK,MAAML;YACZb,gBAAgB,CAAC,wCAAwC,EAAEW,WAAW,EAAEO;YACxE,IAAI,CAACL,KAAK,CAAC,CAAC,+BAA+B,EAAEK,IAAIC,OAAO,EAAE,EAAE;gBAACL,MAAM;YAAC;QACtE;QAEA,IAAIO,QAAQC,MAAM,KAAK,GAAG;YACxB,IAAI,CAACT,KAAK,CAAC,gDAAgD;gBAACC,MAAM;YAAC;QACrE;QAEA,8CAA8C;QAC9C,IAAIM,iBAAiB;YACnB,MAAMG,uBAAuBH,gBAAgBI,WAAW;YACxD,MAAMC,iBAAiBJ,QAAQK,IAAI,CACjC,CAACvB,SAAWA,OAAOA,MAAM,CAACqB,WAAW,OAAOD;YAG9C,IAAI,CAACE,gBAAgB;gBACnB,IAAI,CAACZ,KAAK,CAAC,CAAC,QAAQ,EAAEO,gBAAgB,WAAW,CAAC,EAAE;oBAACN,MAAM;gBAAC;YAC9D;YAEA,OAAOW,eAAeE,EAAE;QAC1B;QAEA,oDAAoD;QACpD,MAAMC,UAAUP,QAAQQ,GAAG,CAAC,CAAC1B,SAAY,CAAA;gBACvC2B,MAAM3B,OAAOA,MAAM;gBACnB4B,OAAO5B,OAAOwB,EAAE;YAClB,CAAA;QAEA,MAAMK,aAAa,MAAMpC,OAAO;YAC9BgC;YACAT,SAAS;QACX;QAEA,OAAOa;IACT;AACF"}

package/dist/commands/cors/list.js

@@ -1,5 +1,5 @@
 import { SanityCommand, subdebug } from '@sanity/cli-core';
-import { CORS_API_VERSION } from '../../actions/cors/constants.js';
+import { listCorsOrigins } from '../../services/cors.js';
 import { NO_PROJECT_ID } from '../../util/errorMessages.js';
 const listCorsDebug = subdebug('cors:list');
 export class List extends SanityCommand {
@@ -11,13 +11,7 @@ export class List extends SanityCommand {
         }
     ];
     async run() {
-        // Parse to ensure no invalid flags are passed
         await this.parse(List);
-        const client = await this.getGlobalApiClient({
-            apiVersion: CORS_API_VERSION,
-            requireUser: true
-        });
-        // Ensure we have project context
         const projectId = await this.getProjectId();
         if (!projectId) {
             this.error(NO_PROJECT_ID, {
@@ -26,9 +20,7 @@ export class List extends SanityCommand {
         }
         let origins;
         try {
-            origins = await client.request({
-                uri: `/projects/${projectId}/cors`
-            });
+            origins = await listCorsOrigins(projectId);
         } catch (error) {
             const err = error;
             listCorsDebug(`Error fetching CORS origins for project ${projectId}`, err);

package/dist/commands/cors/list.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/cors/list.ts"],"sourcesContent":["import {SanityCommand, subdebug} from '@sanity/cli-core'\n\nimport {CORS_API_VERSION} from '../../actions/cors/constants.js'\nimport {type CorsOrigin} from '../../actions/cors/types.js'\nimport {NO_PROJECT_ID} from '../../util/errorMessages.js'\n\nconst listCorsDebug = subdebug('cors:list')\n\nexport class List extends SanityCommand<typeof List> {\n  static override description = 'List all origins allowed to access the API for this project'\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'List CORS origins for the current project',\n    },\n  ]\n\n  public async run(): Promise<void> {\n    // Parse to ensure no invalid flags are passed\n    await this.parse(List)\n\n    const client = await this.getGlobalApiClient({\n      apiVersion: CORS_API_VERSION,\n      requireUser: true,\n    })\n\n    // Ensure we have project context\n    const projectId = await this.getProjectId()\n    if (!projectId) {\n      this.error(NO_PROJECT_ID, {exit: 1})\n    }\n\n    let origins: CorsOrigin[]\n    try {\n      origins = await client.request<CorsOrigin[]>({uri: `/projects/${projectId}/cors`})\n    } catch (error) {\n      const err = error as Error\n\n      listCorsDebug(`Error fetching CORS origins for project ${projectId}`, err)\n      this.error(`CORS origins list retrieval failed:\\n${err.message}`, {exit: 1})\n    }\n\n    if (origins.length === 0) {\n      this.log('No CORS origins configured for this project.')\n      return\n    }\n\n    // Output each origin on a new line, matching the original behavior\n    this.log(origins.map((origin) => origin.origin).join('\\n'))\n  }\n}\n"],"names":["SanityCommand","subdebug","CORS_API_VERSION","NO_PROJECT_ID","listCorsDebug","List","description","examples","command","run","parse","client","getGlobalApiClient","apiVersion","requireUser","projectId","getProjectId","error","exit","origins","request","uri","err","message","length","log","map","origin","join"],"mappings":"AAAA,SAAQA,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AAExD,SAAQC,gBAAgB,QAAO,kCAAiC;AAEhE,SAAQC,aAAa,QAAO,8BAA6B;AAEzD,MAAMC,gBAAgBH,SAAS;AAE/B,OAAO,MAAMI,aAAaL;IACxB,OAAgBM,cAAc,8DAA6D;IAC3F,OAAgBC,WAAW;QACzB;YACEC,SAAS;YACTF,aAAa;QACf;KACD,CAAA;IAED,MAAaG,MAAqB;QAChC,8CAA8C;QAC9C,MAAM,IAAI,CAACC,KAAK,CAACL;QAEjB,MAAMM,SAAS,MAAM,IAAI,CAACC,kBAAkB,CAAC;YAC3CC,YAAYX;YACZY,aAAa;QACf;QAEA,iCAAiC;QACjC,MAAMC,YAAY,MAAM,IAAI,CAACC,YAAY;QACzC,IAAI,CAACD,WAAW;YACd,IAAI,CAACE,KAAK,CAACd,eAAe;gBAACe,MAAM;YAAC;QACpC;QAEA,IAAIC;QACJ,IAAI;YACFA,UAAU,MAAMR,OAAOS,OAAO,CAAe;gBAACC,KAAK,CAAC,UAAU,EAAEN,UAAU,KAAK,CAAC;YAAA;QAClF,EAAE,OAAOE,OAAO;YACd,MAAMK,MAAML;YAEZb,cAAc,CAAC,wCAAwC,EAAEW,WAAW,EAAEO;YACtE,IAAI,CAACL,KAAK,CAAC,CAAC,qCAAqC,EAAEK,IAAIC,OAAO,EAAE,EAAE;gBAACL,MAAM;YAAC;QAC5E;QAEA,IAAIC,QAAQK,MAAM,KAAK,GAAG;YACxB,IAAI,CAACC,GAAG,CAAC;YACT;QACF;QAEA,mEAAmE;QACnE,IAAI,CAACA,GAAG,CAACN,QAAQO,GAAG,CAAC,CAACC,SAAWA,OAAOA,MAAM,EAAEC,IAAI,CAAC;IACvD;AACF"}
+{"version":3,"sources":["../../../src/commands/cors/list.ts"],"sourcesContent":["import {SanityCommand, subdebug} from '@sanity/cli-core'\n\nimport {type CorsOrigin, listCorsOrigins} from '../../services/cors.js'\nimport {NO_PROJECT_ID} from '../../util/errorMessages.js'\n\nconst listCorsDebug = subdebug('cors:list')\n\nexport class List extends SanityCommand<typeof List> {\n  static override description = 'List all origins allowed to access the API for this project'\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'List CORS origins for the current project',\n    },\n  ]\n\n  public async run(): Promise<void> {\n    await this.parse(List)\n\n    const projectId = await this.getProjectId()\n    if (!projectId) {\n      this.error(NO_PROJECT_ID, {exit: 1})\n    }\n\n    let origins: CorsOrigin[]\n    try {\n      origins = await listCorsOrigins(projectId)\n    } catch (error) {\n      const err = error as Error\n\n      listCorsDebug(`Error fetching CORS origins for project ${projectId}`, err)\n      this.error(`CORS origins list retrieval failed:\\n${err.message}`, {exit: 1})\n    }\n\n    if (origins.length === 0) {\n      this.log('No CORS origins configured for this project.')\n      return\n    }\n\n    // Output each origin on a new line, matching the original behavior\n    this.log(origins.map((origin) => origin.origin).join('\\n'))\n  }\n}\n"],"names":["SanityCommand","subdebug","listCorsOrigins","NO_PROJECT_ID","listCorsDebug","List","description","examples","command","run","parse","projectId","getProjectId","error","exit","origins","err","message","length","log","map","origin","join"],"mappings":"AAAA,SAAQA,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AAExD,SAAyBC,eAAe,QAAO,yBAAwB;AACvE,SAAQC,aAAa,QAAO,8BAA6B;AAEzD,MAAMC,gBAAgBH,SAAS;AAE/B,OAAO,MAAMI,aAAaL;IACxB,OAAgBM,cAAc,8DAA6D;IAC3F,OAAgBC,WAAW;QACzB;YACEC,SAAS;YACTF,aAAa;QACf;KACD,CAAA;IAED,MAAaG,MAAqB;QAChC,MAAM,IAAI,CAACC,KAAK,CAACL;QAEjB,MAAMM,YAAY,MAAM,IAAI,CAACC,YAAY;QACzC,IAAI,CAACD,WAAW;YACd,IAAI,CAACE,KAAK,CAACV,eAAe;gBAACW,MAAM;YAAC;QACpC;QAEA,IAAIC;QACJ,IAAI;YACFA,UAAU,MAAMb,gBAAgBS;QAClC,EAAE,OAAOE,OAAO;YACd,MAAMG,MAAMH;YAEZT,cAAc,CAAC,wCAAwC,EAAEO,WAAW,EAAEK;YACtE,IAAI,CAACH,KAAK,CAAC,CAAC,qCAAqC,EAAEG,IAAIC,OAAO,EAAE,EAAE;gBAACH,MAAM;YAAC;QAC5E;QAEA,IAAIC,QAAQG,MAAM,KAAK,GAAG;YACxB,IAAI,CAACC,GAAG,CAAC;YACT;QACF;QAEA,mEAAmE;QACnE,IAAI,CAACA,GAAG,CAACJ,QAAQK,GAAG,CAAC,CAACC,SAAWA,OAAOA,MAAM,EAAEC,IAAI,CAAC;IACvD;AACF"}