@sanity/cli 6.0.0-alpha.9 → 6.1.0

package/dist/types/grants.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=grants.js.map

package/dist/types/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types/grants.ts"],"sourcesContent":["export interface RequiredPermission {\n  /** The grant type, e.g. 'read', 'create', 'update', 'delete' */\n  grant: string\n  /** The permission scope, e.g. 'sanity.project.datasets' */\n  permission: string\n}\n\ninterface GrantResource {\n  grants: Array<{name: string; params: Record<string, unknown>}>\n}\n\nexport interface UserGrantsResponse {\n  organizations: Record<string, Record<string, GrantResource[]>>\n  projects: Record<string, Record<string, GrantResource[]>>\n}\n"],"names":[],"mappings":"AAWA,WAGC"}

package/dist/types.js

@@ -1,4 +1,7 @@
 /**
+ * PackageJson type is now consolidated in readPackageJson.ts
+ * Re-exported here for backward compatibility.
+ *
  * @public
  */ export { };
 

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts"],"sourcesContent":["/**\n * @public\n */\nexport interface PackageJson {\n  name: string\n  version: string\n\n  author?: string\n  dependencies?: Record<string, string>\n  description?: string\n  devDependencies?: Record<string, string>\n  engines?: Record<string, string>\n  license?: string\n  peerDependencies?: Record<string, string>\n  private?: boolean\n  repository?: {type: string; url: string}\n  scripts?: Record<string, string>\n}\n\nexport interface CliApiConfig {\n  dataset?: string\n  projectId?: string\n}\n\nexport interface SanityJson {\n  __experimental_spaces?: {\n    api: {\n      dataset?: string\n      projectId?: string\n    }\n    default?: true\n    name: string\n    title: string\n  }[]\n  api?: CliApiConfig\n  env?: {\n    development?: SanityJson\n    production?: SanityJson\n    staging?: SanityJson\n  }\n  parts?: {\n    description?: string\n    implements?: string\n    name?: string\n    path?: string\n  }[]\n  plugins?: string[]\n  project?: {\n    basePath?: string\n    name?: string\n  }\n  root?: boolean\n}\n"],"names":[],"mappings":"AAAA;;CAEC,GAsBD,WA4BC"}
+{"version":3,"sources":["../src/types.ts"],"sourcesContent":["/**\n * PackageJson type is now consolidated in readPackageJson.ts\n * Re-exported here for backward compatibility.\n *\n * @public\n */\nexport type {PackageJson, ReadPackageJsonOptions} from '@sanity/cli-core'\n\n/**\n * @public\n */\nexport interface CliApiConfig {\n  dataset?: string\n  projectId?: string\n}\n\nexport interface SanityJson {\n  __experimental_spaces?: {\n    api: {\n      dataset?: string\n      projectId?: string\n    }\n    default?: true\n    name: string\n    title: string\n  }[]\n  api?: CliApiConfig\n  env?: {\n    development?: SanityJson\n    production?: SanityJson\n    staging?: SanityJson\n  }\n  parts?: {\n    description?: string\n    implements?: string\n    name?: string\n    path?: string\n  }[]\n  plugins?: string[]\n  project?: {\n    basePath?: string\n    name?: string\n  }\n  root?: boolean\n}\n"],"names":[],"mappings":"AAAA;;;;;CAKC,GAWD,WA4BC"}

package/dist/util/checkProjectPermissions.js

@@ -0,0 +1,21 @@
+/**
+ * Returns the set of project IDs that have ALL of the required permissions.
+ *
+ * Iterates through `grants.projects` and checks that each project has every
+ * required `{permission, grant}` combination present in its grant resources.
+ */ export function getProjectsWithPermissions(grants, requiredPermissions) {
+    const permitted = new Set();
+    for (const [projectId, permissionMap] of Object.entries(grants.projects)){
+        const hasAll = requiredPermissions.every(({ grant, permission })=>{
+            const resources = permissionMap[permission];
+            if (!resources) return false;
+            return resources.some((resource)=>resource.grants.some((g)=>g.name === grant));
+        });
+        if (hasAll) {
+            permitted.add(projectId);
+        }
+    }
+    return permitted;
+}
+
+//# sourceMappingURL=checkProjectPermissions.js.map

package/dist/util/checkProjectPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/util/checkProjectPermissions.ts"],"sourcesContent":["import {type RequiredPermission, type UserGrantsResponse} from '../types/grants.js'\n\n/**\n * Returns the set of project IDs that have ALL of the required permissions.\n *\n * Iterates through `grants.projects` and checks that each project has every\n * required `{permission, grant}` combination present in its grant resources.\n */\nexport function getProjectsWithPermissions(\n  grants: UserGrantsResponse,\n  requiredPermissions: RequiredPermission[],\n): Set<string> {\n  const permitted = new Set<string>()\n\n  for (const [projectId, permissionMap] of Object.entries(grants.projects)) {\n    const hasAll = requiredPermissions.every(({grant, permission}) => {\n      const resources = permissionMap[permission]\n      if (!resources) return false\n      return resources.some((resource) => resource.grants.some((g) => g.name === grant))\n    })\n\n    if (hasAll) {\n      permitted.add(projectId)\n    }\n  }\n\n  return permitted\n}\n"],"names":["getProjectsWithPermissions","grants","requiredPermissions","permitted","Set","projectId","permissionMap","Object","entries","projects","hasAll","every","grant","permission","resources","some","resource","g","name","add"],"mappings":"AAEA;;;;;CAKC,GACD,OAAO,SAASA,2BACdC,MAA0B,EAC1BC,mBAAyC;IAEzC,MAAMC,YAAY,IAAIC;IAEtB,KAAK,MAAM,CAACC,WAAWC,cAAc,IAAIC,OAAOC,OAAO,CAACP,OAAOQ,QAAQ,EAAG;QACxE,MAAMC,SAASR,oBAAoBS,KAAK,CAAC,CAAC,EAACC,KAAK,EAAEC,UAAU,EAAC;YAC3D,MAAMC,YAAYR,aAAa,CAACO,WAAW;YAC3C,IAAI,CAACC,WAAW,OAAO;YACvB,OAAOA,UAAUC,IAAI,CAAC,CAACC,WAAaA,SAASf,MAAM,CAACc,IAAI,CAAC,CAACE,IAAMA,EAAEC,IAAI,KAAKN;QAC7E;QAEA,IAAIF,QAAQ;YACVP,UAAUgB,GAAG,CAACd;QAChB;IACF;IAEA,OAAOF;AACT"}

package/dist/util/cliClient.js

@@ -9,14 +9,15 @@ import { createClient } from '@sanity/client';
     if (typeof process !== 'object') {
         throw new TypeError('getCliClient() should only be called from node.js scripts');
     }
-    const { apiVersion = '2022-06-06', cwd = process.env.SANITY_BASE_PATH || process.cwd(), dataset, projectId, token = getCliClient.__internal__getToken(), useCdn = false } = options;
+    const { apiVersion = '2022-06-06', cwd = process.env.SANITY_BASE_PATH || process.cwd(), dataset, projectId, token = getCliClient.__internal__getToken(), useCdn = false, ...restOfOptions } = options;
     if (projectId && dataset) {
         return createClient({
             apiVersion,
             dataset,
             projectId,
             token,
-            useCdn
+            useCdn,
+            ...restOfOptions
         });
     }
     const projectRoot = findProjectRootSync(cwd);
@@ -33,7 +34,8 @@ import { createClient } from '@sanity/client';
         dataset: apiConfig.dataset,
         projectId: apiConfig.projectId,
         token,
-        useCdn
+        useCdn,
+        ...restOfOptions
     });
 };
 getCliClient.__internal__getToken = ()=>undefined;

package/dist/util/cliClient.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/util/cliClient.ts"],"sourcesContent":["import {findProjectRootSync, getCliConfigSync} from '@sanity/cli-core'\nimport {createClient, type SanityClient} from '@sanity/client'\n\n/**\n * @public\n */\nexport interface CliClientOptions {\n  apiVersion?: string\n\n  cwd?: string\n  dataset?: string\n  projectId?: string\n  token?: string\n  useCdn?: boolean\n}\n\n/**\n * @public\n *\n * @param options - The options to use for the client.\n * @returns A configured Sanity API client.\n */\nexport const getCliClient: CliClientGetter = (options: CliClientOptions = {}): SanityClient => {\n  if (typeof process !== 'object') {\n    throw new TypeError('getCliClient() should only be called from node.js scripts')\n  }\n\n  const {\n    apiVersion = '2022-06-06',\n    cwd = process.env.SANITY_BASE_PATH || process.cwd(),\n    dataset,\n    projectId,\n    token = getCliClient.__internal__getToken(),\n    useCdn = false,\n  } = options\n\n  if (projectId && dataset) {\n    return createClient({apiVersion, dataset, projectId, token, useCdn})\n  }\n\n  const projectRoot = findProjectRootSync(cwd)\n  const cliConfig = getCliConfigSync(projectRoot.directory)\n\n  if (!cliConfig) {\n    throw new Error('Unable to resolve CLI configuration')\n  }\n\n  const apiConfig = cliConfig.api || {}\n  if (!apiConfig.projectId || !apiConfig.dataset) {\n    throw new Error('Unable to resolve project ID/dataset from CLI configuration')\n  }\n\n  return createClient({\n    apiVersion,\n    dataset: apiConfig.dataset,\n    projectId: apiConfig.projectId,\n    token,\n    useCdn,\n  })\n}\n\ntype CliClientGetter = ((options?: CliClientOptions) => SanityClient) & {\n  /**\n   * @deprecated This is only for INTERNAL use, and should not be relied upon outside of official Sanity modules\n   * @returns A token to use when constructing a client without a `token` explicitly defined, or undefined\n   * @internal\n   */\n  __internal__getToken: () => string | undefined\n}\n\ngetCliClient.__internal__getToken = (): string | undefined => undefined\n"],"names":["findProjectRootSync","getCliConfigSync","createClient","getCliClient","options","process","TypeError","apiVersion","cwd","env","SANITY_BASE_PATH","dataset","projectId","token","__internal__getToken","useCdn","projectRoot","cliConfig","directory","Error","apiConfig","api","undefined"],"mappings":"AAAA,SAAQA,mBAAmB,EAAEC,gBAAgB,QAAO,mBAAkB;AACtE,SAAQC,YAAY,QAA0B,iBAAgB;AAe9D;;;;;CAKC,GACD,OAAO,MAAMC,eAAgC,CAACC,UAA4B,CAAC,CAAC;IAC1E,IAAI,OAAOC,YAAY,UAAU;QAC/B,MAAM,IAAIC,UAAU;IACtB;IAEA,MAAM,EACJC,aAAa,YAAY,EACzBC,MAAMH,QAAQI,GAAG,CAACC,gBAAgB,IAAIL,QAAQG,GAAG,EAAE,EACnDG,OAAO,EACPC,SAAS,EACTC,QAAQV,aAAaW,oBAAoB,EAAE,EAC3CC,SAAS,KAAK,EACf,GAAGX;IAEJ,IAAIQ,aAAaD,SAAS;QACxB,OAAOT,aAAa;YAACK;YAAYI;YAASC;YAAWC;YAAOE;QAAM;IACpE;IAEA,MAAMC,cAAchB,oBAAoBQ;IACxC,MAAMS,YAAYhB,iBAAiBe,YAAYE,SAAS;IAExD,IAAI,CAACD,WAAW;QACd,MAAM,IAAIE,MAAM;IAClB;IAEA,MAAMC,YAAYH,UAAUI,GAAG,IAAI,CAAC;IACpC,IAAI,CAACD,UAAUR,SAAS,IAAI,CAACQ,UAAUT,OAAO,EAAE;QAC9C,MAAM,IAAIQ,MAAM;IAClB;IAEA,OAAOjB,aAAa;QAClBK;QACAI,SAASS,UAAUT,OAAO;QAC1BC,WAAWQ,UAAUR,SAAS;QAC9BC;QACAE;IACF;AACF,EAAC;AAWDZ,aAAaW,oBAAoB,GAAG,IAA0BQ"}
+{"version":3,"sources":["../../src/util/cliClient.ts"],"sourcesContent":["import {findProjectRootSync, getCliConfigSync} from '@sanity/cli-core'\nimport {type ClientConfig, createClient, type SanityClient} from '@sanity/client'\n\n/**\n * @public\n */\nexport interface CliClientOptions extends ClientConfig {\n  /**\n   * If no `projectId` or `dataset` is provided, `getCliClient` will try to\n   * resolve these from the `sanity.cli.ts` configuration file. Use this option\n   * to specify the directory to look for this file.\n   */\n  cwd?: string\n}\n\n/**\n * @public\n *\n * @param options - The options to use for the client.\n * @returns A configured Sanity API client.\n */\nexport const getCliClient: CliClientGetter = (options: CliClientOptions = {}): SanityClient => {\n  if (typeof process !== 'object') {\n    throw new TypeError('getCliClient() should only be called from node.js scripts')\n  }\n\n  const {\n    apiVersion = '2022-06-06',\n    cwd = process.env.SANITY_BASE_PATH || process.cwd(),\n    dataset,\n    projectId,\n    token = getCliClient.__internal__getToken(),\n    useCdn = false,\n    ...restOfOptions\n  } = options\n\n  if (projectId && dataset) {\n    return createClient({apiVersion, dataset, projectId, token, useCdn, ...restOfOptions})\n  }\n\n  const projectRoot = findProjectRootSync(cwd)\n  const cliConfig = getCliConfigSync(projectRoot.directory)\n\n  if (!cliConfig) {\n    throw new Error('Unable to resolve CLI configuration')\n  }\n\n  const apiConfig = cliConfig.api || {}\n  if (!apiConfig.projectId || !apiConfig.dataset) {\n    throw new Error('Unable to resolve project ID/dataset from CLI configuration')\n  }\n\n  return createClient({\n    apiVersion,\n    dataset: apiConfig.dataset,\n    projectId: apiConfig.projectId,\n    token,\n    useCdn,\n    ...restOfOptions,\n  })\n}\n\ntype CliClientGetter = ((options?: CliClientOptions) => SanityClient) & {\n  /**\n   * @deprecated This is only for INTERNAL use, and should not be relied upon outside of official Sanity modules\n   * @returns A token to use when constructing a client without a `token` explicitly defined, or undefined\n   * @internal\n   */\n  __internal__getToken: () => string | undefined\n}\n\ngetCliClient.__internal__getToken = (): string | undefined => undefined\n"],"names":["findProjectRootSync","getCliConfigSync","createClient","getCliClient","options","process","TypeError","apiVersion","cwd","env","SANITY_BASE_PATH","dataset","projectId","token","__internal__getToken","useCdn","restOfOptions","projectRoot","cliConfig","directory","Error","apiConfig","api","undefined"],"mappings":"AAAA,SAAQA,mBAAmB,EAAEC,gBAAgB,QAAO,mBAAkB;AACtE,SAA2BC,YAAY,QAA0B,iBAAgB;AAcjF;;;;;CAKC,GACD,OAAO,MAAMC,eAAgC,CAACC,UAA4B,CAAC,CAAC;IAC1E,IAAI,OAAOC,YAAY,UAAU;QAC/B,MAAM,IAAIC,UAAU;IACtB;IAEA,MAAM,EACJC,aAAa,YAAY,EACzBC,MAAMH,QAAQI,GAAG,CAACC,gBAAgB,IAAIL,QAAQG,GAAG,EAAE,EACnDG,OAAO,EACPC,SAAS,EACTC,QAAQV,aAAaW,oBAAoB,EAAE,EAC3CC,SAAS,KAAK,EACd,GAAGC,eACJ,GAAGZ;IAEJ,IAAIQ,aAAaD,SAAS;QACxB,OAAOT,aAAa;YAACK;YAAYI;YAASC;YAAWC;YAAOE;YAAQ,GAAGC,aAAa;QAAA;IACtF;IAEA,MAAMC,cAAcjB,oBAAoBQ;IACxC,MAAMU,YAAYjB,iBAAiBgB,YAAYE,SAAS;IAExD,IAAI,CAACD,WAAW;QACd,MAAM,IAAIE,MAAM;IAClB;IAEA,MAAMC,YAAYH,UAAUI,GAAG,IAAI,CAAC;IACpC,IAAI,CAACD,UAAUT,SAAS,IAAI,CAACS,UAAUV,OAAO,EAAE;QAC9C,MAAM,IAAIS,MAAM;IAClB;IAEA,OAAOlB,aAAa;QAClBK;QACAI,SAASU,UAAUV,OAAO;QAC1BC,WAAWS,UAAUT,SAAS;QAC9BC;QACAE;QACA,GAAGC,aAAa;IAClB;AACF,EAAC;AAWDb,aAAaW,oBAAoB,GAAG,IAA0BS"}

package/dist/util/compareDependencyVersions.js

@@ -1,28 +1,17 @@
 import path from 'node:path';
-import resolveFrom from 'resolve-from';
+import { readPackageJson } from '@sanity/cli-core';
+import { createRequester } from '@sanity/cli-core/request';
 import semver from 'semver';
 import { getModuleUrl } from '../actions/build/getAutoUpdatesImportMap.js';
-import { readPackageManifest } from './readPackageManifest.js';
-function getRemoteResolvedVersion(fetchFn, url) {
-    return fetchFn(url, {
-        method: 'HEAD',
-        redirect: 'manual'
-    }).then((res)=>{
-        // 302 is expected, but lets also handle 2xx
-        if (res.ok || res.status < 400) {
-            const resolved = res.headers.get('x-resolved-version');
-            if (!resolved) {
-                throw new Error(`Missing 'x-resolved-version' header on response from HEAD ${url}`);
-            }
-            return resolved;
+import { getLocalPackageVersion } from './getLocalPackageVersion.js';
+const defaultRequester = createRequester({
+    middleware: {
+        httpErrors: false,
+        promise: {
+            onlyBody: false
         }
-        throw new Error(`Unexpected HTTP response: ${res.status} ${res.statusText}`);
-    }, (err)=>{
-        throw new Error(`Failed to fetch remote version for ${url}: ${err.message}`, {
-            cause: err
-        });
-    });
-}
+    }
+});
 /**
  * @internal
  *
@@ -35,39 +24,86 @@ function getRemoteResolvedVersion(fetchFn, url) {
  * The failed dependencies are anything that does not strictly match the remote version.
  * This means that if a version is lower or greater by even a patch it will be marked as failed.
  *
- * @param autoUpdatesImports - An object mapping package names to their remote import URLs.
+ * @param packages - An array of packages with their name and version to compare against remote.
  * @param workDir - The path to the working directory containing the package.json file.
- * @param fetchFn - Optional {@link https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API | Fetch}-compatible function to use for requesting the current remote version of a module
+ * @param options - Optional configuration for version comparison.
  *
- * @returns A promise that resolves to an array of objects, each containing
- * the name of a package whose local and remote versions do not match, along with the local and remote versions.
+ * @returns A promise that resolves to an object containing `mismatched` (packages whose local and remote versions differ)
+ * and `unresolvedPrerelease` (packages with prerelease versions that could not be resolved remotely).
  *
- * @throws Throws an error if the remote version of a package cannot be fetched, or if the local version of a package
- * cannot be parsed.
- */ export async function compareDependencyVersions(packages, workDir, { fetchFn = globalThis.fetch } = {}) {
-    const manifest = await readPackageManifest(path.join(workDir, 'package.json'));
+ * @throws Throws an error if the remote version of a non-prerelease package cannot be fetched, or if the local version
+ * of a package cannot be parsed.
+ */ export async function compareDependencyVersions(packages, workDir, { appId, requester = defaultRequester } = {}) {
+    const manifest = await readPackageJson(path.join(workDir, 'package.json'), {
+        skipSchemaValidation: true
+    });
     const dependencies = {
-        ...manifest.dependencies,
-        ...manifest.devDependencies
+        ...manifest?.dependencies,
+        ...manifest?.devDependencies
     };
-    const failedDependencies = [];
+    const mismatched = [];
+    const unresolvedPrerelease = [];
     for (const pkg of packages){
-        const resolvedVersion = await getRemoteResolvedVersion(fetchFn, getModuleUrl(pkg));
-        const manifestPath = resolveFrom.silent(workDir, path.join(pkg.name, 'package.json'));
+        // Skip packages that are not declared in the local package.json
+        if (!dependencies[pkg.name]) {
+            continue;
+        }
+        const resolvedVersion = await getRemoteResolvedVersion(getModuleUrl(pkg, {
+            appId
+        }), requester);
+        if (resolvedVersion === null) {
+            if (semver.prerelease(pkg.version)) {
+                unresolvedPrerelease.push({
+                    pkg: pkg.name,
+                    version: pkg.version
+                });
+                continue;
+            }
+            throw new Error(`Failed to resolve remote version for ${pkg.name}@${pkg.version}: package not found`);
+        }
+        const packageVersion = await getLocalPackageVersion(pkg.name, workDir);
         const manifestVersion = dependencies[pkg.name];
-        const installed = semver.coerce(manifestPath ? semver.parse((await readPackageManifest(manifestPath)).version) : semver.coerce(manifestVersion));
+        const installed = semver.coerce(packageVersion ? semver.parse(packageVersion) : semver.coerce(manifestVersion));
         if (!installed) {
-            throw new Error(`Failed to parse installed version for ${pkg}`);
+            throw new Error(`Failed to parse installed version for ${pkg.name}`);
         }
         if (!semver.eq(resolvedVersion, installed.version)) {
-            failedDependencies.push({
+            mismatched.push({
                 installed: installed.version,
                 pkg: pkg.name,
                 remote: resolvedVersion
             });
         }
     }
-    return failedDependencies;
+    return {
+        mismatched,
+        unresolvedPrerelease
+    };
+}
+async function getRemoteResolvedVersion(url, request) {
+    let response;
+    try {
+        response = await request({
+            maxRedirects: 0,
+            method: 'HEAD',
+            url
+        });
+    } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        throw new Error(`Failed to fetch remote version for ${url}: ${message}`);
+    }
+    // 302 is expected, but lets also handle 2xx
+    if (response.statusCode < 400) {
+        const resolved = response.headers['x-resolved-version'];
+        if (!resolved) {
+            throw new Error(`Missing 'x-resolved-version' header on response from HEAD ${url}`);
+        }
+        return resolved;
+    }
+    if (response.statusCode === 404) {
+        return null;
+    }
+    throw new Error(`Unexpected HTTP response: ${response.statusCode} ${response.statusMessage}`);
 }
 
 //# sourceMappingURL=compareDependencyVersions.js.map

package/dist/util/compareDependencyVersions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/util/compareDependencyVersions.ts"],"sourcesContent":["import path from 'node:path'\n\nimport resolveFrom from 'resolve-from'\nimport semver from 'semver'\n\nimport {getModuleUrl} from '../actions/build/getAutoUpdatesImportMap.js'\nimport {readPackageManifest} from './readPackageManifest.js'\n\nfunction getRemoteResolvedVersion(fetchFn: typeof fetch, url: string) {\n  return fetchFn(url, {\n    method: 'HEAD',\n    redirect: 'manual',\n  }).then(\n    (res) => {\n      // 302 is expected, but lets also handle 2xx\n      if (res.ok || res.status < 400) {\n        const resolved = res.headers.get('x-resolved-version')\n        if (!resolved) {\n          throw new Error(`Missing 'x-resolved-version' header on response from HEAD ${url}`)\n        }\n        return resolved\n      }\n      throw new Error(`Unexpected HTTP response: ${res.status} ${res.statusText}`)\n    },\n    (err) => {\n      throw new Error(`Failed to fetch remote version for ${url}: ${err.message}`, {cause: err})\n    },\n  )\n}\n\ninterface CompareDependencyVersions {\n  installed: string\n  pkg: string\n  remote: string\n}\n\n/**\n * @internal\n *\n * Compares the versions of dependencies in the studio or app with their remote versions.\n *\n * This function reads the package.json file in the provided working directory, and compares the versions of the dependencies\n * specified in the `autoUpdatesImports` parameter with their remote versions. If the versions do not match, the dependency is\n * added to a list of failed dependencies, which is returned by the function.\n *\n * The failed dependencies are anything that does not strictly match the remote version.\n * This means that if a version is lower or greater by even a patch it will be marked as failed.\n *\n * @param autoUpdatesImports - An object mapping package names to their remote import URLs.\n * @param workDir - The path to the working directory containing the package.json file.\n * @param fetchFn - Optional {@link https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API | Fetch}-compatible function to use for requesting the current remote version of a module\n *\n * @returns A promise that resolves to an array of objects, each containing\n * the name of a package whose local and remote versions do not match, along with the local and remote versions.\n *\n * @throws Throws an error if the remote version of a package cannot be fetched, or if the local version of a package\n * cannot be parsed.\n */\nexport async function compareDependencyVersions(\n  packages: {name: string; version: string}[],\n  workDir: string,\n  {fetchFn = globalThis.fetch}: {appId?: string; fetchFn?: typeof fetch} = {},\n): Promise<Array<CompareDependencyVersions>> {\n  const manifest = await readPackageManifest(path.join(workDir, 'package.json'))\n  const dependencies = {...manifest.dependencies, ...manifest.devDependencies}\n\n  const failedDependencies: Array<CompareDependencyVersions> = []\n\n  for (const pkg of packages) {\n    const resolvedVersion = await getRemoteResolvedVersion(fetchFn, getModuleUrl(pkg))\n\n    const manifestPath = resolveFrom.silent(workDir, path.join(pkg.name, 'package.json'))\n\n    const manifestVersion = dependencies[pkg.name]\n\n    const installed = semver.coerce(\n      manifestPath\n        ? semver.parse((await readPackageManifest(manifestPath)).version)\n        : semver.coerce(manifestVersion),\n    )\n\n    if (!installed) {\n      throw new Error(`Failed to parse installed version for ${pkg}`)\n    }\n\n    if (!semver.eq(resolvedVersion, installed.version)) {\n      failedDependencies.push({\n        installed: installed.version,\n        pkg: pkg.name,\n        remote: resolvedVersion,\n      })\n    }\n  }\n\n  return failedDependencies\n}\n"],"names":["path","resolveFrom","semver","getModuleUrl","readPackageManifest","getRemoteResolvedVersion","fetchFn","url","method","redirect","then","res","ok","status","resolved","headers","get","Error","statusText","err","message","cause","compareDependencyVersions","packages","workDir","globalThis","fetch","manifest","join","dependencies","devDependencies","failedDependencies","pkg","resolvedVersion","manifestPath","silent","name","manifestVersion","installed","coerce","parse","version","eq","push","remote"],"mappings":"AAAA,OAAOA,UAAU,YAAW;AAE5B,OAAOC,iBAAiB,eAAc;AACtC,OAAOC,YAAY,SAAQ;AAE3B,SAAQC,YAAY,QAAO,8CAA6C;AACxE,SAAQC,mBAAmB,QAAO,2BAA0B;AAE5D,SAASC,yBAAyBC,OAAqB,EAAEC,GAAW;IAClE,OAAOD,QAAQC,KAAK;QAClBC,QAAQ;QACRC,UAAU;IACZ,GAAGC,IAAI,CACL,CAACC;QACC,4CAA4C;QAC5C,IAAIA,IAAIC,EAAE,IAAID,IAAIE,MAAM,GAAG,KAAK;YAC9B,MAAMC,WAAWH,IAAII,OAAO,CAACC,GAAG,CAAC;YACjC,IAAI,CAACF,UAAU;gBACb,MAAM,IAAIG,MAAM,CAAC,0DAA0D,EAAEV,KAAK;YACpF;YACA,OAAOO;QACT;QACA,MAAM,IAAIG,MAAM,CAAC,0BAA0B,EAAEN,IAAIE,MAAM,CAAC,CAAC,EAAEF,IAAIO,UAAU,EAAE;IAC7E,GACA,CAACC;QACC,MAAM,IAAIF,MAAM,CAAC,mCAAmC,EAAEV,IAAI,EAAE,EAAEY,IAAIC,OAAO,EAAE,EAAE;YAACC,OAAOF;QAAG;IAC1F;AAEJ;AAQA;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,OAAO,eAAeG,0BACpBC,QAA2C,EAC3CC,OAAe,EACf,EAAClB,UAAUmB,WAAWC,KAAK,EAA2C,GAAG,CAAC,CAAC;IAE3E,MAAMC,WAAW,MAAMvB,oBAAoBJ,KAAK4B,IAAI,CAACJ,SAAS;IAC9D,MAAMK,eAAe;QAAC,GAAGF,SAASE,YAAY;QAAE,GAAGF,SAASG,eAAe;IAAA;IAE3E,MAAMC,qBAAuD,EAAE;IAE/D,KAAK,MAAMC,OAAOT,SAAU;QAC1B,MAAMU,kBAAkB,MAAM5B,yBAAyBC,SAASH,aAAa6B;QAE7E,MAAME,eAAejC,YAAYkC,MAAM,CAACX,SAASxB,KAAK4B,IAAI,CAACI,IAAII,IAAI,EAAE;QAErE,MAAMC,kBAAkBR,YAAY,CAACG,IAAII,IAAI,CAAC;QAE9C,MAAME,YAAYpC,OAAOqC,MAAM,CAC7BL,eACIhC,OAAOsC,KAAK,CAAC,AAAC,CAAA,MAAMpC,oBAAoB8B,aAAY,EAAGO,OAAO,IAC9DvC,OAAOqC,MAAM,CAACF;QAGpB,IAAI,CAACC,WAAW;YACd,MAAM,IAAIrB,MAAM,CAAC,sCAAsC,EAAEe,KAAK;QAChE;QAEA,IAAI,CAAC9B,OAAOwC,EAAE,CAACT,iBAAiBK,UAAUG,OAAO,GAAG;YAClDV,mBAAmBY,IAAI,CAAC;gBACtBL,WAAWA,UAAUG,OAAO;gBAC5BT,KAAKA,IAAII,IAAI;gBACbQ,QAAQX;YACV;QACF;IACF;IAEA,OAAOF;AACT"}
+{"version":3,"sources":["../../src/util/compareDependencyVersions.ts"],"sourcesContent":["import path from 'node:path'\n\nimport {readPackageJson} from '@sanity/cli-core'\nimport {createRequester} from '@sanity/cli-core/request'\nimport semver from 'semver'\n\nimport {getModuleUrl} from '../actions/build/getAutoUpdatesImportMap.js'\nimport {getLocalPackageVersion} from './getLocalPackageVersion.js'\n\nconst defaultRequester = createRequester({\n  middleware: {httpErrors: false, promise: {onlyBody: false}},\n})\n\ninterface CompareDependencyVersions {\n  installed: string\n  pkg: string\n  remote: string\n}\n\nexport interface UnresolvedPrerelease {\n  pkg: string\n  version: string\n}\n\ninterface CompareDependencyVersionsResult {\n  mismatched: Array<CompareDependencyVersions>\n  unresolvedPrerelease: Array<UnresolvedPrerelease>\n}\n\ninterface CompareDependencyVersionsOptions {\n  /** When provided, uses the app-specific module endpoint instead of the default endpoint. */\n  appId?: string\n  /** Optional requester for dependency injection (primarily for testing). */\n  requester?: typeof defaultRequester\n}\n\n/**\n * @internal\n *\n * Compares the versions of dependencies in the studio or app with their remote versions.\n *\n * This function reads the package.json file in the provided working directory, and compares the versions of the dependencies\n * specified in the `autoUpdatesImports` parameter with their remote versions. If the versions do not match, the dependency is\n * added to a list of failed dependencies, which is returned by the function.\n *\n * The failed dependencies are anything that does not strictly match the remote version.\n * This means that if a version is lower or greater by even a patch it will be marked as failed.\n *\n * @param packages - An array of packages with their name and version to compare against remote.\n * @param workDir - The path to the working directory containing the package.json file.\n * @param options - Optional configuration for version comparison.\n *\n * @returns A promise that resolves to an object containing `mismatched` (packages whose local and remote versions differ)\n * and `unresolvedPrerelease` (packages with prerelease versions that could not be resolved remotely).\n *\n * @throws Throws an error if the remote version of a non-prerelease package cannot be fetched, or if the local version\n * of a package cannot be parsed.\n */\nexport async function compareDependencyVersions(\n  packages: {name: string; version: string}[],\n  workDir: string,\n  {appId, requester = defaultRequester}: CompareDependencyVersionsOptions = {},\n): Promise<CompareDependencyVersionsResult> {\n  const manifest = await readPackageJson(path.join(workDir, 'package.json'), {\n    skipSchemaValidation: true,\n  })\n  const dependencies = {...manifest?.dependencies, ...manifest?.devDependencies}\n\n  const mismatched: Array<CompareDependencyVersions> = []\n  const unresolvedPrerelease: Array<UnresolvedPrerelease> = []\n\n  for (const pkg of packages) {\n    // Skip packages that are not declared in the local package.json\n    if (!dependencies[pkg.name]) {\n      continue\n    }\n\n    const resolvedVersion = await getRemoteResolvedVersion(getModuleUrl(pkg, {appId}), requester)\n\n    if (resolvedVersion === null) {\n      if (semver.prerelease(pkg.version)) {\n        unresolvedPrerelease.push({pkg: pkg.name, version: pkg.version})\n        continue\n      }\n      throw new Error(\n        `Failed to resolve remote version for ${pkg.name}@${pkg.version}: package not found`,\n      )\n    }\n\n    const packageVersion = await getLocalPackageVersion(pkg.name, workDir)\n\n    const manifestVersion = dependencies[pkg.name]\n\n    const installed = semver.coerce(\n      packageVersion ? semver.parse(packageVersion) : semver.coerce(manifestVersion),\n    )\n\n    if (!installed) {\n      throw new Error(`Failed to parse installed version for ${pkg.name}`)\n    }\n\n    if (!semver.eq(resolvedVersion, installed.version)) {\n      mismatched.push({\n        installed: installed.version,\n        pkg: pkg.name,\n        remote: resolvedVersion,\n      })\n    }\n  }\n\n  return {mismatched, unresolvedPrerelease}\n}\n\nasync function getRemoteResolvedVersion(\n  url: string,\n  request: typeof defaultRequester,\n): Promise<string | null> {\n  let response\n  try {\n    response = await request({\n      maxRedirects: 0,\n      method: 'HEAD',\n      url,\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    throw new Error(`Failed to fetch remote version for ${url}: ${message}`)\n  }\n\n  // 302 is expected, but lets also handle 2xx\n  if (response.statusCode < 400) {\n    const resolved = response.headers['x-resolved-version']\n    if (!resolved) {\n      throw new Error(`Missing 'x-resolved-version' header on response from HEAD ${url}`)\n    }\n    return resolved\n  }\n\n  if (response.statusCode === 404) {\n    return null\n  }\n\n  throw new Error(`Unexpected HTTP response: ${response.statusCode} ${response.statusMessage}`)\n}\n"],"names":["path","readPackageJson","createRequester","semver","getModuleUrl","getLocalPackageVersion","defaultRequester","middleware","httpErrors","promise","onlyBody","compareDependencyVersions","packages","workDir","appId","requester","manifest","join","skipSchemaValidation","dependencies","devDependencies","mismatched","unresolvedPrerelease","pkg","name","resolvedVersion","getRemoteResolvedVersion","prerelease","version","push","Error","packageVersion","manifestVersion","installed","coerce","parse","eq","remote","url","request","response","maxRedirects","method","err","message","String","statusCode","resolved","headers","statusMessage"],"mappings":"AAAA,OAAOA,UAAU,YAAW;AAE5B,SAAQC,eAAe,QAAO,mBAAkB;AAChD,SAAQC,eAAe,QAAO,2BAA0B;AACxD,OAAOC,YAAY,SAAQ;AAE3B,SAAQC,YAAY,QAAO,8CAA6C;AACxE,SAAQC,sBAAsB,QAAO,8BAA6B;AAElE,MAAMC,mBAAmBJ,gBAAgB;IACvCK,YAAY;QAACC,YAAY;QAAOC,SAAS;YAACC,UAAU;QAAK;IAAC;AAC5D;AAyBA;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,OAAO,eAAeC,0BACpBC,QAA2C,EAC3CC,OAAe,EACf,EAACC,KAAK,EAAEC,YAAYT,gBAAgB,EAAmC,GAAG,CAAC,CAAC;IAE5E,MAAMU,WAAW,MAAMf,gBAAgBD,KAAKiB,IAAI,CAACJ,SAAS,iBAAiB;QACzEK,sBAAsB;IACxB;IACA,MAAMC,eAAe;QAAC,GAAGH,UAAUG,YAAY;QAAE,GAAGH,UAAUI,eAAe;IAAA;IAE7E,MAAMC,aAA+C,EAAE;IACvD,MAAMC,uBAAoD,EAAE;IAE5D,KAAK,MAAMC,OAAOX,SAAU;QAC1B,gEAAgE;QAChE,IAAI,CAACO,YAAY,CAACI,IAAIC,IAAI,CAAC,EAAE;YAC3B;QACF;QAEA,MAAMC,kBAAkB,MAAMC,yBAAyBtB,aAAamB,KAAK;YAACT;QAAK,IAAIC;QAEnF,IAAIU,oBAAoB,MAAM;YAC5B,IAAItB,OAAOwB,UAAU,CAACJ,IAAIK,OAAO,GAAG;gBAClCN,qBAAqBO,IAAI,CAAC;oBAACN,KAAKA,IAAIC,IAAI;oBAAEI,SAASL,IAAIK,OAAO;gBAAA;gBAC9D;YACF;YACA,MAAM,IAAIE,MACR,CAAC,qCAAqC,EAAEP,IAAIC,IAAI,CAAC,CAAC,EAAED,IAAIK,OAAO,CAAC,mBAAmB,CAAC;QAExF;QAEA,MAAMG,iBAAiB,MAAM1B,uBAAuBkB,IAAIC,IAAI,EAAEX;QAE9D,MAAMmB,kBAAkBb,YAAY,CAACI,IAAIC,IAAI,CAAC;QAE9C,MAAMS,YAAY9B,OAAO+B,MAAM,CAC7BH,iBAAiB5B,OAAOgC,KAAK,CAACJ,kBAAkB5B,OAAO+B,MAAM,CAACF;QAGhE,IAAI,CAACC,WAAW;YACd,MAAM,IAAIH,MAAM,CAAC,sCAAsC,EAAEP,IAAIC,IAAI,EAAE;QACrE;QAEA,IAAI,CAACrB,OAAOiC,EAAE,CAACX,iBAAiBQ,UAAUL,OAAO,GAAG;YAClDP,WAAWQ,IAAI,CAAC;gBACdI,WAAWA,UAAUL,OAAO;gBAC5BL,KAAKA,IAAIC,IAAI;gBACba,QAAQZ;YACV;QACF;IACF;IAEA,OAAO;QAACJ;QAAYC;IAAoB;AAC1C;AAEA,eAAeI,yBACbY,GAAW,EACXC,OAAgC;IAEhC,IAAIC;IACJ,IAAI;QACFA,WAAW,MAAMD,QAAQ;YACvBE,cAAc;YACdC,QAAQ;YACRJ;QACF;IACF,EAAE,OAAOK,KAAK;QACZ,MAAMC,UAAUD,eAAeb,QAAQa,IAAIC,OAAO,GAAGC,OAAOF;QAC5D,MAAM,IAAIb,MAAM,CAAC,mCAAmC,EAAEQ,IAAI,EAAE,EAAEM,SAAS;IACzE;IAEA,4CAA4C;IAC5C,IAAIJ,SAASM,UAAU,GAAG,KAAK;QAC7B,MAAMC,WAAWP,SAASQ,OAAO,CAAC,qBAAqB;QACvD,IAAI,CAACD,UAAU;YACb,MAAM,IAAIjB,MAAM,CAAC,0DAA0D,EAAEQ,KAAK;QACpF;QACA,OAAOS;IACT;IAEA,IAAIP,SAASM,UAAU,KAAK,KAAK;QAC/B,OAAO;IACT;IAEA,MAAM,IAAIhB,MAAM,CAAC,0BAA0B,EAAEU,SAASM,UAAU,CAAC,CAAC,EAAEN,SAASS,aAAa,EAAE;AAC9F"}

package/dist/util/createExpiringConfig.js

@@ -0,0 +1,64 @@
+/**
+ * Minimal interface for a config store that supports get/set/delete operations.
+ * Compatible with the `configstore` package.
+ */ /**
+ * Create a config in the provided config store that expires after the provided TTL.
+ */ export function createExpiringConfig({ fetchValue, key, onCacheHit = ()=>null, onFetch = ()=>null, onRevalidate = ()=>null, store, ttl, validateValue = (value)=>true }) {
+    let currentFetch = null;
+    return {
+        delete () {
+            store.delete(key);
+        },
+        async get () {
+            const stored = store.get(key);
+            if (isExpiringValue(stored)) {
+                const { updatedAt, value } = stored;
+                if (!validateValue(value)) {
+                    throw new Error('Stored value is invalid');
+                }
+                const hasExpired = Date.now() - updatedAt > ttl;
+                if (!hasExpired) {
+                    onCacheHit();
+                    return value;
+                }
+                onRevalidate();
+            }
+            // Return existing fetch if one is already in progress
+            if (currentFetch) {
+                return currentFetch;
+            }
+            onFetch();
+            currentFetch = Promise.resolve(fetchValue());
+            const nextValue = await currentFetch;
+            if (!validateValue(nextValue)) {
+                throw new Error('Fetched value is invalid');
+            }
+            currentFetch = null;
+            store.set(key, {
+                updatedAt: Date.now(),
+                value: nextValue
+            });
+            return nextValue;
+        }
+    };
+}
+/**
+ * Checks if the given stored value is valid (does not check if expired, only verified shape)
+ *
+ * @param stored - The stored value to check
+ * @returns True if the stored value is valid
+ * @internal
+ */ function isExpiringValue(stored) {
+    if (typeof stored !== 'object' || stored === null || Array.isArray(stored)) {
+        return false;
+    }
+    if (!('updatedAt' in stored) || typeof stored.updatedAt !== 'number') {
+        return false;
+    }
+    if (!('value' in stored)) {
+        return false;
+    }
+    return true;
+}
+
+//# sourceMappingURL=createExpiringConfig.js.map

package/dist/util/createExpiringConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/util/createExpiringConfig.ts"],"sourcesContent":["/**\n * Minimal interface for a config store that supports get/set/delete operations.\n * Compatible with the `configstore` package.\n */\ninterface ConfigStoreApi {\n  delete: (key: string) => void\n  get: (key: string) => unknown\n  set: (key: string, value: unknown) => void\n}\n\ninterface ExpiringConfigValue {\n  updatedAt: number\n  value: unknown\n}\n\ninterface ExpiringConfigOptions<Type> {\n  /** Fetch value */\n  fetchValue: () => Promise<Type> | Type\n  /** Config key */\n  key: string\n  /** Config store */\n  store: ConfigStoreApi\n  /** TTL (milliseconds) */\n  ttl: number\n\n  /** Subscribe to cache hit event */\n  onCacheHit?: () => void\n  /** Subscribe to fetch event */\n  onFetch?: () => void\n  /** Subscribe to revalidate event */\n  onRevalidate?: () => void\n\n  /**\n   * Assert the fetched value is valid, or throw if invalid.\n   * If none is provided, it will always accept the fetched value.\n   */\n  validateValue?: (value: unknown) => value is Type\n}\n\ninterface ExpiringConfigApi<Type> {\n  /**\n   * Delete the cached value.\n   */\n  delete: () => void\n  /**\n   * Attempt to get the cached value. If there is no cached value, or the cached value has expired,\n   * fetch, cache, and return the value.\n   */\n  get: () => Promise<Type>\n}\n\n/**\n * Create a config in the provided config store that expires after the provided TTL.\n */\nexport function createExpiringConfig<Type>({\n  fetchValue,\n  key,\n  onCacheHit = () => null,\n  onFetch = () => null,\n  onRevalidate = () => null,\n  store,\n  ttl,\n  validateValue = (value: unknown): value is Type => true,\n}: ExpiringConfigOptions<Type>): ExpiringConfigApi<Type> {\n  let currentFetch: Promise<Type> | null = null\n  return {\n    delete() {\n      store.delete(key)\n    },\n    async get(): Promise<Type> {\n      const stored = store.get(key)\n\n      if (isExpiringValue(stored)) {\n        const {updatedAt, value} = stored\n        if (!validateValue(value)) {\n          throw new Error('Stored value is invalid')\n        }\n\n        const hasExpired = Date.now() - updatedAt > ttl\n\n        if (!hasExpired) {\n          onCacheHit()\n          return value\n        }\n\n        onRevalidate()\n      }\n\n      // Return existing fetch if one is already in progress\n      if (currentFetch) {\n        return currentFetch\n      }\n\n      onFetch()\n\n      currentFetch = Promise.resolve(fetchValue())\n      const nextValue = await currentFetch\n      if (!validateValue(nextValue)) {\n        throw new Error('Fetched value is invalid')\n      }\n\n      currentFetch = null\n\n      store.set(key, {\n        updatedAt: Date.now(),\n        value: nextValue,\n      })\n\n      return nextValue\n    },\n  }\n}\n\n/**\n * Checks if the given stored value is valid (does not check if expired, only verified shape)\n *\n * @param stored - The stored value to check\n * @returns True if the stored value is valid\n * @internal\n */\nfunction isExpiringValue(stored: unknown): stored is ExpiringConfigValue {\n  if (typeof stored !== 'object' || stored === null || Array.isArray(stored)) {\n    return false\n  }\n\n  if (!('updatedAt' in stored) || typeof stored.updatedAt !== 'number') {\n    return false\n  }\n\n  if (!('value' in stored)) {\n    return false\n  }\n\n  return true\n}\n"],"names":["createExpiringConfig","fetchValue","key","onCacheHit","onFetch","onRevalidate","store","ttl","validateValue","value","currentFetch","delete","get","stored","isExpiringValue","updatedAt","Error","hasExpired","Date","now","Promise","resolve","nextValue","set","Array","isArray"],"mappings":"AAAA;;;CAGC,GAgDD;;CAEC,GACD,OAAO,SAASA,qBAA2B,EACzCC,UAAU,EACVC,GAAG,EACHC,aAAa,IAAM,IAAI,EACvBC,UAAU,IAAM,IAAI,EACpBC,eAAe,IAAM,IAAI,EACzBC,KAAK,EACLC,GAAG,EACHC,gBAAgB,CAACC,QAAkC,IAAI,EAC3B;IAC5B,IAAIC,eAAqC;IACzC,OAAO;QACLC;YACEL,MAAMK,MAAM,CAACT;QACf;QACA,MAAMU;YACJ,MAAMC,SAASP,MAAMM,GAAG,CAACV;YAEzB,IAAIY,gBAAgBD,SAAS;gBAC3B,MAAM,EAACE,SAAS,EAAEN,KAAK,EAAC,GAAGI;gBAC3B,IAAI,CAACL,cAAcC,QAAQ;oBACzB,MAAM,IAAIO,MAAM;gBAClB;gBAEA,MAAMC,aAAaC,KAAKC,GAAG,KAAKJ,YAAYR;gBAE5C,IAAI,CAACU,YAAY;oBACfd;oBACA,OAAOM;gBACT;gBAEAJ;YACF;YAEA,sDAAsD;YACtD,IAAIK,cAAc;gBAChB,OAAOA;YACT;YAEAN;YAEAM,eAAeU,QAAQC,OAAO,CAACpB;YAC/B,MAAMqB,YAAY,MAAMZ;YACxB,IAAI,CAACF,cAAcc,YAAY;gBAC7B,MAAM,IAAIN,MAAM;YAClB;YAEAN,eAAe;YAEfJ,MAAMiB,GAAG,CAACrB,KAAK;gBACba,WAAWG,KAAKC,GAAG;gBACnBV,OAAOa;YACT;YAEA,OAAOA;QACT;IACF;AACF;AAEA;;;;;;CAMC,GACD,SAASR,gBAAgBD,MAAe;IACtC,IAAI,OAAOA,WAAW,YAAYA,WAAW,QAAQW,MAAMC,OAAO,CAACZ,SAAS;QAC1E,OAAO;IACT;IAEA,IAAI,CAAE,CAAA,eAAeA,MAAK,KAAM,OAAOA,OAAOE,SAAS,KAAK,UAAU;QACpE,OAAO;IACT;IAEA,IAAI,CAAE,CAAA,WAAWF,MAAK,GAAI;QACxB,OAAO;IACT;IAEA,OAAO;AACT"}

package/dist/util/detectFramework.js

@@ -0,0 +1,135 @@
+import { readFile, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+async function fileExists(filePath) {
+    try {
+        await stat(filePath);
+        return true;
+    } catch  {
+        return false;
+    }
+}
+async function isFile(filePath) {
+    try {
+        const s = await stat(filePath);
+        return s.isFile();
+    } catch  {
+        return false;
+    }
+}
+async function checkDetector(rootPath, framework, detector) {
+    let { matchContent, path: filePath } = detector;
+    const { matchPackage } = detector;
+    if (matchPackage && matchContent) {
+        throw new Error(`Cannot specify "matchPackage" and "matchContent" in the same detector for "${framework.slug}"`);
+    }
+    if (matchPackage && filePath) {
+        throw new Error(`Cannot specify "matchPackage" and "path" in the same detector for "${framework.slug}"`);
+    }
+    if (!filePath && !matchPackage) {
+        throw new Error(`Must specify either "path" or "matchPackage" in detector for "${framework.slug}".`);
+    }
+    if (!filePath) {
+        filePath = 'package.json';
+    }
+    if (matchPackage) {
+        const escapedPkg = matchPackage.replaceAll(/[.*+?^${}()|[\]\\]/g, String.raw`\$&`);
+        matchContent = String.raw`"(dev)?(d|D)ependencies":\s*{[^}]*"${escapedPkg}":\s*"(.+?)"[^}]*}`;
+    }
+    const fullPath = join(rootPath, filePath);
+    if (!await fileExists(fullPath)) {
+        return undefined;
+    }
+    if (matchContent) {
+        if (!await isFile(fullPath)) {
+            return undefined;
+        }
+        const content = await readFile(fullPath, 'utf8');
+        const match = content.match(new RegExp(matchContent, 'm'));
+        if (!match) {
+            return undefined;
+        }
+        if (matchPackage && match[3]) {
+            return {
+                detectedVersion: match[3],
+                framework
+            };
+        }
+    }
+    return {
+        framework
+    };
+}
+async function matchFramework(rootPath, framework) {
+    const { detectors } = framework;
+    if (!detectors) return undefined;
+    const { every, some } = detectors;
+    if (every !== undefined && !Array.isArray(every)) return undefined;
+    if (some !== undefined && !Array.isArray(some)) return undefined;
+    const results = [];
+    if (every) {
+        const everyResults = await Promise.all(every.map((item)=>checkDetector(rootPath, framework, item)));
+        results.push(...everyResults);
+    }
+    if (some) {
+        let someResult;
+        for (const item of some){
+            const result = await checkDetector(rootPath, framework, item);
+            if (result) {
+                someResult = result;
+                break;
+            }
+        }
+        results.push(someResult);
+    }
+    if (results.length === 0) return undefined;
+    if (!results.every((r)=>r !== undefined)) {
+        return undefined;
+    }
+    const detectedVersion = results.find((r)=>r !== undefined && r.detectedVersion !== undefined)?.detectedVersion;
+    return {
+        detectedVersion,
+        framework
+    };
+}
+function removeSupersededFrameworks(matches) {
+    // Snapshot to avoid mutation-during-iteration when splice shifts elements
+    const snapshot = [
+        ...matches
+    ];
+    for (const match of snapshot){
+        if (match?.supersedes) {
+            for (const slug of match.supersedes){
+                removeSupersededFramework(matches, slug);
+            }
+        }
+    }
+}
+function removeSupersededFramework(matches, slug) {
+    const index = matches.findIndex((f)=>f?.slug === slug);
+    const framework = matches[index];
+    if (framework) {
+        matches.splice(index, 1);
+        if (framework.supersedes) {
+            for (const s of framework.supersedes){
+                removeSupersededFramework(matches, s);
+            }
+        }
+    }
+}
+export async function detectFrameworkRecord(options) {
+    const { frameworkList, rootPath } = options;
+    const results = await Promise.all(frameworkList.map(async (fw)=>{
+        const match = await matchFramework(rootPath, fw);
+        if (match) {
+            return {
+                ...fw,
+                detectedVersion: match.detectedVersion
+            };
+        }
+        return null;
+    }));
+    removeSupersededFrameworks(results);
+    return results.find((r)=>r !== null) ?? null;
+}
+
+//# sourceMappingURL=detectFramework.js.map

package/dist/util/detectFramework.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/util/detectFramework.ts"],"sourcesContent":["import {readFile, stat} from 'node:fs/promises'\nimport {join} from 'node:path'\n\nimport {type Framework} from '@vercel/frameworks'\n\ntype VersionedFramework = Framework & {detectedVersion?: string}\n\ninterface DetectorMatch {\n  framework: Framework\n\n  detectedVersion?: string\n}\n\nasync function fileExists(filePath: string): Promise<boolean> {\n  try {\n    await stat(filePath)\n    return true\n  } catch {\n    return false\n  }\n}\n\nasync function isFile(filePath: string): Promise<boolean> {\n  try {\n    const s = await stat(filePath)\n    return s.isFile()\n  } catch {\n    return false\n  }\n}\n\nasync function checkDetector(\n  rootPath: string,\n  framework: Framework,\n  detector: {matchContent?: string; matchPackage?: string; path?: string},\n): Promise<DetectorMatch | undefined> {\n  let {matchContent, path: filePath} = detector\n  const {matchPackage} = detector\n\n  if (matchPackage && matchContent) {\n    throw new Error(\n      `Cannot specify \"matchPackage\" and \"matchContent\" in the same detector for \"${framework.slug}\"`,\n    )\n  }\n  if (matchPackage && filePath) {\n    throw new Error(\n      `Cannot specify \"matchPackage\" and \"path\" in the same detector for \"${framework.slug}\"`,\n    )\n  }\n  if (!filePath && !matchPackage) {\n    throw new Error(\n      `Must specify either \"path\" or \"matchPackage\" in detector for \"${framework.slug}\".`,\n    )\n  }\n\n  if (!filePath) {\n    filePath = 'package.json'\n  }\n\n  if (matchPackage) {\n    const escapedPkg = matchPackage.replaceAll(/[.*+?^${}()|[\\]\\\\]/g, String.raw`\\$&`)\n    matchContent = String.raw`\"(dev)?(d|D)ependencies\":\\s*{[^}]*\"${escapedPkg}\":\\s*\"(.+?)\"[^}]*}`\n  }\n\n  const fullPath = join(rootPath, filePath)\n\n  if (!(await fileExists(fullPath))) {\n    return undefined\n  }\n\n  if (matchContent) {\n    if (!(await isFile(fullPath))) {\n      return undefined\n    }\n    const content = await readFile(fullPath, 'utf8')\n    const match = content.match(new RegExp(matchContent, 'm'))\n    if (!match) {\n      return undefined\n    }\n    if (matchPackage && match[3]) {\n      return {detectedVersion: match[3], framework}\n    }\n  }\n\n  return {framework}\n}\n\nasync function matchFramework(\n  rootPath: string,\n  framework: Framework,\n): Promise<DetectorMatch | undefined> {\n  const {detectors} = framework\n  if (!detectors) return undefined\n\n  const {every, some} = detectors\n  if (every !== undefined && !Array.isArray(every)) return undefined\n  if (some !== undefined && !Array.isArray(some)) return undefined\n\n  const results: (DetectorMatch | undefined)[] = []\n\n  if (every) {\n    const everyResults = await Promise.all(\n      every.map((item) => checkDetector(rootPath, framework, item)),\n    )\n    results.push(...everyResults)\n  }\n\n  if (some) {\n    let someResult: DetectorMatch | undefined\n    for (const item of some) {\n      const result = await checkDetector(rootPath, framework, item)\n      if (result) {\n        someResult = result\n        break\n      }\n    }\n    results.push(someResult)\n  }\n\n  if (results.length === 0) return undefined\n\n  if (!results.every((r) => r !== undefined)) {\n    return undefined\n  }\n\n  const detectedVersion = results.find(\n    (r): r is DetectorMatch => r !== undefined && r.detectedVersion !== undefined,\n  )?.detectedVersion\n\n  return {detectedVersion, framework}\n}\n\nfunction removeSupersededFrameworks(matches: (Framework | null)[]): void {\n  // Snapshot to avoid mutation-during-iteration when splice shifts elements\n  const snapshot = [...matches]\n  for (const match of snapshot) {\n    if (match?.supersedes) {\n      for (const slug of match.supersedes) {\n        removeSupersededFramework(matches, slug)\n      }\n    }\n  }\n}\n\nfunction removeSupersededFramework(matches: (Framework | null)[], slug: string): void {\n  const index = matches.findIndex((f) => f?.slug === slug)\n  const framework = matches[index]\n  if (framework) {\n    matches.splice(index, 1)\n    if (framework.supersedes) {\n      for (const s of framework.supersedes) {\n        removeSupersededFramework(matches, s)\n      }\n    }\n  }\n}\n\nexport async function detectFrameworkRecord(options: {\n  frameworkList: readonly Framework[]\n  rootPath: string\n}): Promise<VersionedFramework | null> {\n  const {frameworkList, rootPath} = options\n\n  const results = await Promise.all(\n    frameworkList.map(async (fw): Promise<VersionedFramework | null> => {\n      const match = await matchFramework(rootPath, fw)\n      if (match) {\n        return {...fw, detectedVersion: match.detectedVersion}\n      }\n      return null\n    }),\n  )\n\n  removeSupersededFrameworks(results)\n  return results.find((r) => r !== null) ?? null\n}\n"],"names":["readFile","stat","join","fileExists","filePath","isFile","s","checkDetector","rootPath","framework","detector","matchContent","path","matchPackage","Error","slug","escapedPkg","replaceAll","String","raw","fullPath","undefined","content","match","RegExp","detectedVersion","matchFramework","detectors","every","some","Array","isArray","results","everyResults","Promise","all","map","item","push","someResult","result","length","r","find","removeSupersededFrameworks","matches","snapshot","supersedes","removeSupersededFramework","index","findIndex","f","splice","detectFrameworkRecord","options","frameworkList","fw"],"mappings":"AAAA,SAAQA,QAAQ,EAAEC,IAAI,QAAO,mBAAkB;AAC/C,SAAQC,IAAI,QAAO,YAAW;AAY9B,eAAeC,WAAWC,QAAgB;IACxC,IAAI;QACF,MAAMH,KAAKG;QACX,OAAO;IACT,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,eAAeC,OAAOD,QAAgB;IACpC,IAAI;QACF,MAAME,IAAI,MAAML,KAAKG;QACrB,OAAOE,EAAED,MAAM;IACjB,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,eAAeE,cACbC,QAAgB,EAChBC,SAAoB,EACpBC,QAAuE;IAEvE,IAAI,EAACC,YAAY,EAAEC,MAAMR,QAAQ,EAAC,GAAGM;IACrC,MAAM,EAACG,YAAY,EAAC,GAAGH;IAEvB,IAAIG,gBAAgBF,cAAc;QAChC,MAAM,IAAIG,MACR,CAAC,2EAA2E,EAAEL,UAAUM,IAAI,CAAC,CAAC,CAAC;IAEnG;IACA,IAAIF,gBAAgBT,UAAU;QAC5B,MAAM,IAAIU,MACR,CAAC,mEAAmE,EAAEL,UAAUM,IAAI,CAAC,CAAC,CAAC;IAE3F;IACA,IAAI,CAACX,YAAY,CAACS,cAAc;QAC9B,MAAM,IAAIC,MACR,CAAC,8DAA8D,EAAEL,UAAUM,IAAI,CAAC,EAAE,CAAC;IAEvF;IAEA,IAAI,CAACX,UAAU;QACbA,WAAW;IACb;IAEA,IAAIS,cAAc;QAChB,MAAMG,aAAaH,aAAaI,UAAU,CAAC,uBAAuBC,OAAOC,GAAG,CAAC,GAAG,CAAC;QACjFR,eAAeO,OAAOC,GAAG,CAAC,mCAAmC,EAAEH,WAAW,kBAAkB,CAAC;IAC/F;IAEA,MAAMI,WAAWlB,KAAKM,UAAUJ;IAEhC,IAAI,CAAE,MAAMD,WAAWiB,WAAY;QACjC,OAAOC;IACT;IAEA,IAAIV,cAAc;QAChB,IAAI,CAAE,MAAMN,OAAOe,WAAY;YAC7B,OAAOC;QACT;QACA,MAAMC,UAAU,MAAMtB,SAASoB,UAAU;QACzC,MAAMG,QAAQD,QAAQC,KAAK,CAAC,IAAIC,OAAOb,cAAc;QACrD,IAAI,CAACY,OAAO;YACV,OAAOF;QACT;QACA,IAAIR,gBAAgBU,KAAK,CAAC,EAAE,EAAE;YAC5B,OAAO;gBAACE,iBAAiBF,KAAK,CAAC,EAAE;gBAAEd;YAAS;QAC9C;IACF;IAEA,OAAO;QAACA;IAAS;AACnB;AAEA,eAAeiB,eACblB,QAAgB,EAChBC,SAAoB;IAEpB,MAAM,EAACkB,SAAS,EAAC,GAAGlB;IACpB,IAAI,CAACkB,WAAW,OAAON;IAEvB,MAAM,EAACO,KAAK,EAAEC,IAAI,EAAC,GAAGF;IACtB,IAAIC,UAAUP,aAAa,CAACS,MAAMC,OAAO,CAACH,QAAQ,OAAOP;IACzD,IAAIQ,SAASR,aAAa,CAACS,MAAMC,OAAO,CAACF,OAAO,OAAOR;IAEvD,MAAMW,UAAyC,EAAE;IAEjD,IAAIJ,OAAO;QACT,MAAMK,eAAe,MAAMC,QAAQC,GAAG,CACpCP,MAAMQ,GAAG,CAAC,CAACC,OAAS9B,cAAcC,UAAUC,WAAW4B;QAEzDL,QAAQM,IAAI,IAAIL;IAClB;IAEA,IAAIJ,MAAM;QACR,IAAIU;QACJ,KAAK,MAAMF,QAAQR,KAAM;YACvB,MAAMW,SAAS,MAAMjC,cAAcC,UAAUC,WAAW4B;YACxD,IAAIG,QAAQ;gBACVD,aAAaC;gBACb;YACF;QACF;QACAR,QAAQM,IAAI,CAACC;IACf;IAEA,IAAIP,QAAQS,MAAM,KAAK,GAAG,OAAOpB;IAEjC,IAAI,CAACW,QAAQJ,KAAK,CAAC,CAACc,IAAMA,MAAMrB,YAAY;QAC1C,OAAOA;IACT;IAEA,MAAMI,kBAAkBO,QAAQW,IAAI,CAClC,CAACD,IAA0BA,MAAMrB,aAAaqB,EAAEjB,eAAe,KAAKJ,YACnEI;IAEH,OAAO;QAACA;QAAiBhB;IAAS;AACpC;AAEA,SAASmC,2BAA2BC,OAA6B;IAC/D,0EAA0E;IAC1E,MAAMC,WAAW;WAAID;KAAQ;IAC7B,KAAK,MAAMtB,SAASuB,SAAU;QAC5B,IAAIvB,OAAOwB,YAAY;YACrB,KAAK,MAAMhC,QAAQQ,MAAMwB,UAAU,CAAE;gBACnCC,0BAA0BH,SAAS9B;YACrC;QACF;IACF;AACF;AAEA,SAASiC,0BAA0BH,OAA6B,EAAE9B,IAAY;IAC5E,MAAMkC,QAAQJ,QAAQK,SAAS,CAAC,CAACC,IAAMA,GAAGpC,SAASA;IACnD,MAAMN,YAAYoC,OAAO,CAACI,MAAM;IAChC,IAAIxC,WAAW;QACboC,QAAQO,MAAM,CAACH,OAAO;QACtB,IAAIxC,UAAUsC,UAAU,EAAE;YACxB,KAAK,MAAMzC,KAAKG,UAAUsC,UAAU,CAAE;gBACpCC,0BAA0BH,SAASvC;YACrC;QACF;IACF;AACF;AAEA,OAAO,eAAe+C,sBAAsBC,OAG3C;IACC,MAAM,EAACC,aAAa,EAAE/C,QAAQ,EAAC,GAAG8C;IAElC,MAAMtB,UAAU,MAAME,QAAQC,GAAG,CAC/BoB,cAAcnB,GAAG,CAAC,OAAOoB;QACvB,MAAMjC,QAAQ,MAAMG,eAAelB,UAAUgD;QAC7C,IAAIjC,OAAO;YACT,OAAO;gBAAC,GAAGiC,EAAE;gBAAE/B,iBAAiBF,MAAME,eAAe;YAAA;QACvD;QACA,OAAO;IACT;IAGFmB,2BAA2BZ;IAC3B,OAAOA,QAAQW,IAAI,CAAC,CAACD,IAAMA,MAAM,SAAS;AAC5C"}

package/dist/util/errorMessages.js

@@ -1,5 +1,4 @@
 export const NO_PROJECT_ID = `sanity.cli.ts does not contain a project identifier ("api.projectId"), which is required for the Sanity CLI to communicate with the Sanity API`;
-export const NO_DATASET_ID = `sanity.cli.ts does not contain a dataset identifier ("api.dataset"), which is required for the Sanity CLI to communicate with the Sanity API`;
 export const NO_ORGANIZATION_ID = `sanity.cli.ts does not contain an organization identifier ("app.organizationId"), which is required for the Sanity CLI to communicate with the Sanity API`;
 export const NO_MEDIA_LIBRARY_ASPECTS_PATH = `sanity.cli.ts does not contain a media library aspects path ("mediaLibrary.aspectsPath"), which is required for the Sanity CLI to manage aspects.`;
 

package/dist/util/errorMessages.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/util/errorMessages.ts"],"sourcesContent":["export const NO_PROJECT_ID = `sanity.cli.ts does not contain a project identifier (\"api.projectId\"), which is required for the Sanity CLI to communicate with the Sanity API`\nexport const NO_DATASET_ID = `sanity.cli.ts does not contain a dataset identifier (\"api.dataset\"), which is required for the Sanity CLI to communicate with the Sanity API`\nexport const NO_ORGANIZATION_ID = `sanity.cli.ts does not contain an organization identifier (\"app.organizationId\"), which is required for the Sanity CLI to communicate with the Sanity API`\nexport const NO_MEDIA_LIBRARY_ASPECTS_PATH = `sanity.cli.ts does not contain a media library aspects path (\"mediaLibrary.aspectsPath\"), which is required for the Sanity CLI to manage aspects.`\n"],"names":["NO_PROJECT_ID","NO_DATASET_ID","NO_ORGANIZATION_ID","NO_MEDIA_LIBRARY_ASPECTS_PATH"],"mappings":"AAAA,OAAO,MAAMA,gBAAgB,CAAC,8IAA8I,CAAC,CAAA;AAC7K,OAAO,MAAMC,gBAAgB,CAAC,4IAA4I,CAAC,CAAA;AAC3K,OAAO,MAAMC,qBAAqB,CAAC,yJAAyJ,CAAC,CAAA;AAC7L,OAAO,MAAMC,gCAAgC,CAAC,iJAAiJ,CAAC,CAAA"}
+{"version":3,"sources":["../../src/util/errorMessages.ts"],"sourcesContent":["export const NO_PROJECT_ID = `sanity.cli.ts does not contain a project identifier (\"api.projectId\"), which is required for the Sanity CLI to communicate with the Sanity API`\nexport const NO_ORGANIZATION_ID = `sanity.cli.ts does not contain an organization identifier (\"app.organizationId\"), which is required for the Sanity CLI to communicate with the Sanity API`\nexport const NO_MEDIA_LIBRARY_ASPECTS_PATH = `sanity.cli.ts does not contain a media library aspects path (\"mediaLibrary.aspectsPath\"), which is required for the Sanity CLI to manage aspects.`\n"],"names":["NO_PROJECT_ID","NO_ORGANIZATION_ID","NO_MEDIA_LIBRARY_ASPECTS_PATH"],"mappings":"AAAA,OAAO,MAAMA,gBAAgB,CAAC,8IAA8I,CAAC,CAAA;AAC7K,OAAO,MAAMC,qBAAqB,CAAC,yJAAyJ,CAAC,CAAA;AAC7L,OAAO,MAAMC,gCAAgC,CAAC,iJAAiJ,CAAC,CAAA"}

package/dist/util/extractDocumentsFromNdjsonOrTarball.js

@@ -3,13 +3,12 @@ import readline from 'node:readline';
 import { Readable } from 'node:stream';
 import zlib from 'node:zlib';
 import tar from 'tar-stream';
+import { isTar } from './isTar.js';
 const HEADER_SIZE = 300;
 // https://github.com/kevva/is-gzip/blob/13dab7c877787bd5cff9de5482b1736f00df99c6/index.js
 const isGzip = (buf)=>buf.length >= 3 && buf[0] === 0x1f && buf[1] === 0x8b && buf[2] === 0x08;
 // https://github.com/watson/is-deflate/blob/f9e8f0c7814eed715e13e29e97c69acee319686a/index.js
 const isDeflate = (buf)=>buf.length >= 2 && buf[0] === 0x78 && (buf[1] === 1 || buf[1] === 0x9c || buf[1] === 0xda);
-// https://github.com/kevva/is-tar/blob/d295ffa2002a5d415946fc3d49f024ace8c28bd3/index.js
-const isTar = (buf)=>buf.length >= 262 && buf[257] === 0x75 && buf[258] === 0x73 && buf[259] === 0x74 && buf[260] === 0x61 && buf[261] === 0x72;
 async function* extract(stream, extractor) {
     // set up a task to drain the input iterable into the extractor asynchronously
     // before this function delegates to the extractor's iterable (containing the

package/dist/util/extractDocumentsFromNdjsonOrTarball.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/util/extractDocumentsFromNdjsonOrTarball.ts"],"sourcesContent":["import path from 'node:path'\nimport readline from 'node:readline'\nimport {Readable, type Writable} from 'node:stream'\nimport zlib from 'node:zlib'\n\nimport {type SanityDocument} from '@sanity/types'\nimport tar from 'tar-stream'\n\nconst HEADER_SIZE = 300\n\n// https://github.com/kevva/is-gzip/blob/13dab7c877787bd5cff9de5482b1736f00df99c6/index.js\nconst isGzip = (buf: Buffer) =>\n  buf.length >= 3 && buf[0] === 0x1f && buf[1] === 0x8b && buf[2] === 0x08\n\n// https://github.com/watson/is-deflate/blob/f9e8f0c7814eed715e13e29e97c69acee319686a/index.js\nconst isDeflate = (buf: Buffer) =>\n  buf.length >= 2 && buf[0] === 0x78 && (buf[1] === 1 || buf[1] === 0x9c || buf[1] === 0xda)\n\n// https://github.com/kevva/is-tar/blob/d295ffa2002a5d415946fc3d49f024ace8c28bd3/index.js\nconst isTar = (buf: Buffer) =>\n  buf.length >= 262 &&\n  buf[257] === 0x75 &&\n  buf[258] === 0x73 &&\n  buf[259] === 0x74 &&\n  buf[260] === 0x61 &&\n  buf[261] === 0x72\n\nasync function* extract<TReturn>(\n  stream: AsyncIterable<Buffer>,\n  extractor: AsyncIterable<TReturn> & Writable,\n) {\n  // set up a task to drain the input iterable into the extractor asynchronously\n  // before this function delegates to the extractor's iterable (containing the\n  // result of the extraction)\n  const drained = new Promise<void>((resolve, reject) => {\n    // setTimeout is used here to ensure draining occurs after delegation\n    setTimeout(async () => {\n      try {\n        for await (const chunk of stream) extractor.write(chunk)\n        extractor.end()\n        resolve()\n      } catch (err) {\n        reject(err)\n      }\n    })\n  })\n\n  // have this function delegate the results of the extractor\n  yield* extractor\n  await drained\n  extractor.destroy()\n}\n\n/**\n * Given a async iterable of buffers, looks at the header of the file in the\n * first few bytes to see the file type then extracts the contents tries again.\n * If the given iterable of buffers is a tarball then it looks for an ndjson\n * files and returns another iterable of buffers with the contents of the\n * ndjson file\n */\nasync function* maybeExtractNdjson(stream: AsyncIterable<Buffer>): AsyncIterable<Buffer> {\n  let buffer = Buffer.alloc(0)\n\n  for await (const chunk of stream) {\n    buffer = Buffer.concat([buffer, chunk])\n    if (buffer.length < HEADER_SIZE) continue\n\n    const fileHeader = buffer\n    const restOfStream = async function* restOfStream() {\n      yield fileHeader\n      yield* stream\n    }\n\n    if (isGzip(fileHeader)) {\n      yield* maybeExtractNdjson(extract(restOfStream(), zlib.createGunzip()))\n      return\n    }\n\n    if (isDeflate(fileHeader)) {\n      yield* maybeExtractNdjson(extract(restOfStream(), zlib.createDeflate()))\n      return\n    }\n\n    if (isTar(fileHeader)) {\n      for await (const entry of extract(restOfStream(), tar.extract())) {\n        const filename = path.basename(entry.header.name)\n        const extname = path.extname(filename).toLowerCase()\n        // ignore hidden and non-ndjson files\n        if (extname !== '.ndjson' || filename.startsWith('.')) continue\n\n        for await (const ndjsonChunk of entry) yield ndjsonChunk\n        return\n      }\n    }\n\n    yield* restOfStream()\n  }\n}\n\n/**\n * Takes in an async iterable of buffers from an ndjson file or tarball and\n * returns an async iterable of sanity documents.\n */\nexport async function* extractDocumentsFromNdjsonOrTarball(\n  file: AsyncIterable<Buffer>,\n): AsyncIterable<SanityDocument> {\n  const lines = readline.createInterface({\n    input: Readable.from(maybeExtractNdjson(file)),\n  })\n\n  for await (const line of lines) {\n    const trimmed = line.trim()\n    if (trimmed) yield JSON.parse(trimmed) as SanityDocument\n  }\n  lines.close()\n}\n"],"names":["path","readline","Readable","zlib","tar","HEADER_SIZE","isGzip","buf","length","isDeflate","isTar","extract","stream","extractor","drained","Promise","resolve","reject","setTimeout","chunk","write","end","err","destroy","maybeExtractNdjson","buffer","Buffer","alloc","concat","fileHeader","restOfStream","createGunzip","createDeflate","entry","filename","basename","header","name","extname","toLowerCase","startsWith","ndjsonChunk","extractDocumentsFromNdjsonOrTarball","file","lines","createInterface","input","from","line","trimmed","trim","JSON","parse","close"],"mappings":"AAAA,OAAOA,UAAU,YAAW;AAC5B,OAAOC,cAAc,gBAAe;AACpC,SAAQC,QAAQ,QAAsB,cAAa;AACnD,OAAOC,UAAU,YAAW;AAG5B,OAAOC,SAAS,aAAY;AAE5B,MAAMC,cAAc;AAEpB,0FAA0F;AAC1F,MAAMC,SAAS,CAACC,MACdA,IAAIC,MAAM,IAAI,KAAKD,GAAG,CAAC,EAAE,KAAK,QAAQA,GAAG,CAAC,EAAE,KAAK,QAAQA,GAAG,CAAC,EAAE,KAAK;AAEtE,8FAA8F;AAC9F,MAAME,YAAY,CAACF,MACjBA,IAAIC,MAAM,IAAI,KAAKD,GAAG,CAAC,EAAE,KAAK,QAASA,CAAAA,GAAG,CAAC,EAAE,KAAK,KAAKA,GAAG,CAAC,EAAE,KAAK,QAAQA,GAAG,CAAC,EAAE,KAAK,IAAG;AAE1F,yFAAyF;AACzF,MAAMG,QAAQ,CAACH,MACbA,IAAIC,MAAM,IAAI,OACdD,GAAG,CAAC,IAAI,KAAK,QACbA,GAAG,CAAC,IAAI,KAAK,QACbA,GAAG,CAAC,IAAI,KAAK,QACbA,GAAG,CAAC,IAAI,KAAK,QACbA,GAAG,CAAC,IAAI,KAAK;AAEf,gBAAgBI,QACdC,MAA6B,EAC7BC,SAA4C;IAE5C,8EAA8E;IAC9E,6EAA6E;IAC7E,4BAA4B;IAC5B,MAAMC,UAAU,IAAIC,QAAc,CAACC,SAASC;QAC1C,qEAAqE;QACrEC,WAAW;YACT,IAAI;gBACF,WAAW,MAAMC,SAASP,OAAQC,UAAUO,KAAK,CAACD;gBAClDN,UAAUQ,GAAG;gBACbL;YACF,EAAE,OAAOM,KAAK;gBACZL,OAAOK;YACT;QACF;IACF;IAEA,2DAA2D;IAC3D,OAAOT;IACP,MAAMC;IACND,UAAUU,OAAO;AACnB;AAEA;;;;;;CAMC,GACD,gBAAgBC,mBAAmBZ,MAA6B;IAC9D,IAAIa,SAASC,OAAOC,KAAK,CAAC;IAE1B,WAAW,MAAMR,SAASP,OAAQ;QAChCa,SAASC,OAAOE,MAAM,CAAC;YAACH;YAAQN;SAAM;QACtC,IAAIM,OAAOjB,MAAM,GAAGH,aAAa;QAEjC,MAAMwB,aAAaJ;QACnB,MAAMK,eAAe,gBAAgBA;YACnC,MAAMD;YACN,OAAOjB;QACT;QAEA,IAAIN,OAAOuB,aAAa;YACtB,OAAOL,mBAAmBb,QAAQmB,gBAAgB3B,KAAK4B,YAAY;YACnE;QACF;QAEA,IAAItB,UAAUoB,aAAa;YACzB,OAAOL,mBAAmBb,QAAQmB,gBAAgB3B,KAAK6B,aAAa;YACpE;QACF;QAEA,IAAItB,MAAMmB,aAAa;YACrB,WAAW,MAAMI,SAAStB,QAAQmB,gBAAgB1B,IAAIO,OAAO,IAAK;gBAChE,MAAMuB,WAAWlC,KAAKmC,QAAQ,CAACF,MAAMG,MAAM,CAACC,IAAI;gBAChD,MAAMC,UAAUtC,KAAKsC,OAAO,CAACJ,UAAUK,WAAW;gBAClD,qCAAqC;gBACrC,IAAID,YAAY,aAAaJ,SAASM,UAAU,CAAC,MAAM;gBAEvD,WAAW,MAAMC,eAAeR,MAAO,MAAMQ;gBAC7C;YACF;QACF;QAEA,OAAOX;IACT;AACF;AAEA;;;CAGC,GACD,OAAO,gBAAgBY,oCACrBC,IAA2B;IAE3B,MAAMC,QAAQ3C,SAAS4C,eAAe,CAAC;QACrCC,OAAO5C,SAAS6C,IAAI,CAACvB,mBAAmBmB;IAC1C;IAEA,WAAW,MAAMK,QAAQJ,MAAO;QAC9B,MAAMK,UAAUD,KAAKE,IAAI;QACzB,IAAID,SAAS,MAAME,KAAKC,KAAK,CAACH;IAChC;IACAL,MAAMS,KAAK;AACb"}
+{"version":3,"sources":["../../src/util/extractDocumentsFromNdjsonOrTarball.ts"],"sourcesContent":["import path from 'node:path'\nimport readline from 'node:readline'\nimport {Readable, type Writable} from 'node:stream'\nimport zlib from 'node:zlib'\n\nimport {type SanityDocument} from '@sanity/types'\nimport tar from 'tar-stream'\n\nimport {isTar} from './isTar.js'\n\nconst HEADER_SIZE = 300\n\n// https://github.com/kevva/is-gzip/blob/13dab7c877787bd5cff9de5482b1736f00df99c6/index.js\nconst isGzip = (buf: Buffer) =>\n  buf.length >= 3 && buf[0] === 0x1f && buf[1] === 0x8b && buf[2] === 0x08\n\n// https://github.com/watson/is-deflate/blob/f9e8f0c7814eed715e13e29e97c69acee319686a/index.js\nconst isDeflate = (buf: Buffer) =>\n  buf.length >= 2 && buf[0] === 0x78 && (buf[1] === 1 || buf[1] === 0x9c || buf[1] === 0xda)\n\nasync function* extract<TReturn>(\n  stream: AsyncIterable<Buffer>,\n  extractor: AsyncIterable<TReturn> & Writable,\n) {\n  // set up a task to drain the input iterable into the extractor asynchronously\n  // before this function delegates to the extractor's iterable (containing the\n  // result of the extraction)\n  const drained = new Promise<void>((resolve, reject) => {\n    // setTimeout is used here to ensure draining occurs after delegation\n    setTimeout(async () => {\n      try {\n        for await (const chunk of stream) extractor.write(chunk)\n        extractor.end()\n        resolve()\n      } catch (err) {\n        reject(err)\n      }\n    })\n  })\n\n  // have this function delegate the results of the extractor\n  yield* extractor\n  await drained\n  extractor.destroy()\n}\n\n/**\n * Given a async iterable of buffers, looks at the header of the file in the\n * first few bytes to see the file type then extracts the contents tries again.\n * If the given iterable of buffers is a tarball then it looks for an ndjson\n * files and returns another iterable of buffers with the contents of the\n * ndjson file\n */\nasync function* maybeExtractNdjson(stream: AsyncIterable<Buffer>): AsyncIterable<Buffer> {\n  let buffer = Buffer.alloc(0)\n\n  for await (const chunk of stream) {\n    buffer = Buffer.concat([buffer, chunk])\n    if (buffer.length < HEADER_SIZE) continue\n\n    const fileHeader = buffer\n    const restOfStream = async function* restOfStream() {\n      yield fileHeader\n      yield* stream\n    }\n\n    if (isGzip(fileHeader)) {\n      yield* maybeExtractNdjson(extract(restOfStream(), zlib.createGunzip()))\n      return\n    }\n\n    if (isDeflate(fileHeader)) {\n      yield* maybeExtractNdjson(extract(restOfStream(), zlib.createDeflate()))\n      return\n    }\n\n    if (isTar(fileHeader)) {\n      for await (const entry of extract(restOfStream(), tar.extract())) {\n        const filename = path.basename(entry.header.name)\n        const extname = path.extname(filename).toLowerCase()\n        // ignore hidden and non-ndjson files\n        if (extname !== '.ndjson' || filename.startsWith('.')) continue\n\n        for await (const ndjsonChunk of entry) yield ndjsonChunk\n        return\n      }\n    }\n\n    yield* restOfStream()\n  }\n}\n\n/**\n * Takes in an async iterable of buffers from an ndjson file or tarball and\n * returns an async iterable of sanity documents.\n */\nexport async function* extractDocumentsFromNdjsonOrTarball(\n  file: AsyncIterable<Buffer>,\n): AsyncIterable<SanityDocument> {\n  const lines = readline.createInterface({\n    input: Readable.from(maybeExtractNdjson(file)),\n  })\n\n  for await (const line of lines) {\n    const trimmed = line.trim()\n    if (trimmed) yield JSON.parse(trimmed) as SanityDocument\n  }\n  lines.close()\n}\n"],"names":["path","readline","Readable","zlib","tar","isTar","HEADER_SIZE","isGzip","buf","length","isDeflate","extract","stream","extractor","drained","Promise","resolve","reject","setTimeout","chunk","write","end","err","destroy","maybeExtractNdjson","buffer","Buffer","alloc","concat","fileHeader","restOfStream","createGunzip","createDeflate","entry","filename","basename","header","name","extname","toLowerCase","startsWith","ndjsonChunk","extractDocumentsFromNdjsonOrTarball","file","lines","createInterface","input","from","line","trimmed","trim","JSON","parse","close"],"mappings":"AAAA,OAAOA,UAAU,YAAW;AAC5B,OAAOC,cAAc,gBAAe;AACpC,SAAQC,QAAQ,QAAsB,cAAa;AACnD,OAAOC,UAAU,YAAW;AAG5B,OAAOC,SAAS,aAAY;AAE5B,SAAQC,KAAK,QAAO,aAAY;AAEhC,MAAMC,cAAc;AAEpB,0FAA0F;AAC1F,MAAMC,SAAS,CAACC,MACdA,IAAIC,MAAM,IAAI,KAAKD,GAAG,CAAC,EAAE,KAAK,QAAQA,GAAG,CAAC,EAAE,KAAK,QAAQA,GAAG,CAAC,EAAE,KAAK;AAEtE,8FAA8F;AAC9F,MAAME,YAAY,CAACF,MACjBA,IAAIC,MAAM,IAAI,KAAKD,GAAG,CAAC,EAAE,KAAK,QAASA,CAAAA,GAAG,CAAC,EAAE,KAAK,KAAKA,GAAG,CAAC,EAAE,KAAK,QAAQA,GAAG,CAAC,EAAE,KAAK,IAAG;AAE1F,gBAAgBG,QACdC,MAA6B,EAC7BC,SAA4C;IAE5C,8EAA8E;IAC9E,6EAA6E;IAC7E,4BAA4B;IAC5B,MAAMC,UAAU,IAAIC,QAAc,CAACC,SAASC;QAC1C,qEAAqE;QACrEC,WAAW;YACT,IAAI;gBACF,WAAW,MAAMC,SAASP,OAAQC,UAAUO,KAAK,CAACD;gBAClDN,UAAUQ,GAAG;gBACbL;YACF,EAAE,OAAOM,KAAK;gBACZL,OAAOK;YACT;QACF;IACF;IAEA,2DAA2D;IAC3D,OAAOT;IACP,MAAMC;IACND,UAAUU,OAAO;AACnB;AAEA;;;;;;CAMC,GACD,gBAAgBC,mBAAmBZ,MAA6B;IAC9D,IAAIa,SAASC,OAAOC,KAAK,CAAC;IAE1B,WAAW,MAAMR,SAASP,OAAQ;QAChCa,SAASC,OAAOE,MAAM,CAAC;YAACH;YAAQN;SAAM;QACtC,IAAIM,OAAOhB,MAAM,GAAGH,aAAa;QAEjC,MAAMuB,aAAaJ;QACnB,MAAMK,eAAe,gBAAgBA;YACnC,MAAMD;YACN,OAAOjB;QACT;QAEA,IAAIL,OAAOsB,aAAa;YACtB,OAAOL,mBAAmBb,QAAQmB,gBAAgB3B,KAAK4B,YAAY;YACnE;QACF;QAEA,IAAIrB,UAAUmB,aAAa;YACzB,OAAOL,mBAAmBb,QAAQmB,gBAAgB3B,KAAK6B,aAAa;YACpE;QACF;QAEA,IAAI3B,MAAMwB,aAAa;YACrB,WAAW,MAAMI,SAAStB,QAAQmB,gBAAgB1B,IAAIO,OAAO,IAAK;gBAChE,MAAMuB,WAAWlC,KAAKmC,QAAQ,CAACF,MAAMG,MAAM,CAACC,IAAI;gBAChD,MAAMC,UAAUtC,KAAKsC,OAAO,CAACJ,UAAUK,WAAW;gBAClD,qCAAqC;gBACrC,IAAID,YAAY,aAAaJ,SAASM,UAAU,CAAC,MAAM;gBAEvD,WAAW,MAAMC,eAAeR,MAAO,MAAMQ;gBAC7C;YACF;QACF;QAEA,OAAOX;IACT;AACF;AAEA;;;CAGC,GACD,OAAO,gBAAgBY,oCACrBC,IAA2B;IAE3B,MAAMC,QAAQ3C,SAAS4C,eAAe,CAAC;QACrCC,OAAO5C,SAAS6C,IAAI,CAACvB,mBAAmBmB;IAC1C;IAEA,WAAW,MAAMK,QAAQJ,MAAO;QAC9B,MAAMK,UAAUD,KAAKE,IAAI;QACzB,IAAID,SAAS,MAAME,KAAKC,KAAK,CAACH;IAChC;IACAL,MAAMS,KAAK;AACb"}

package/dist/util/getCliVersion.js

@@ -1,7 +1,7 @@
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { readPackageJson } from '@sanity/cli-core';
 import { packageDirectory } from 'package-directory';
-import { readPackageJson } from './readPackageJson.js';
 /**
  * Get the version of the `@sanity/cli` package.
  *