@sanity/cli 6.0.0-alpha.9 → 6.1.0

package/dist/util/packageManager/installationInfo/analyzeIssues.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/util/packageManager/installationInfo/analyzeIssues.ts"],"sourcesContent":["import semver from 'semver'\n\nimport {\n  getGlobalUninstallCommand,\n  getLocalRemoveCommand,\n  getLocalUpdateCommand,\n} from './commands.js'\nimport {\n  type GlobalInstallation,\n  type Issue,\n  type LockfileType,\n  type PackageInfo,\n  type SanityPackage,\n  type WorkspaceInfo,\n} from './types.js'\n\n/**\n * Analyzes package information and workspace configuration to detect potential issues.\n */\nexport function analyzeIssues(\n  packages: Partial<Record<SanityPackage, PackageInfo>>,\n  workspace: WorkspaceInfo,\n  globals: GlobalInstallation[],\n): Issue[] {\n  const issues: Issue[] = []\n  // When multiple lockfiles exist, the \"winning\" lockfile is arbitrary (based on\n  // detection priority order), so fall back to workspace-level signals instead.\n  const pm: LockfileType =\n    workspace.hasMultipleLockfiles || !workspace.lockfile\n      ? inferPackageManager(workspace)\n      : workspace.lockfile.type\n  const updateOptions = {yarnBerry: workspace.yarnBerry}\n\n  // Check for multiple lockfiles\n  if (workspace.hasMultipleLockfiles) {\n    issues.push({\n      message: 'Multiple lockfiles found. This can cause inconsistent installations.',\n      packageName: null,\n      severity: 'warning',\n      suggestion: 'Remove all but one lockfile and use a single package manager.',\n      type: 'multiple-lockfiles',\n    })\n  }\n\n  // Check each package for issues\n  for (const [name, info] of Object.entries(packages) as [\n    SanityPackage,\n    PackageInfo | undefined,\n  ][]) {\n    if (!info) continue\n\n    // override-in-effect\n    if (info.override) {\n      issues.push({\n        message: `${name} has an override (${info.override.mechanism}) set to ${info.override.versionRange}.`,\n        packageName: name,\n        severity: 'info',\n        suggestion: null,\n        type: 'override-in-effect',\n      })\n    }\n\n    // declared-not-installed — skip when an override is in effect, since the\n    // override may explain the unusual state and the user already sees override-in-effect.\n    // Also skip @sanity/cli when sanity is installed — the CLI-specific section below\n    // produces more specific diagnostics (conflicting/redundant/cli-not-installed).\n    const cliSectionWillHandle =\n      name === '@sanity/cli' && Boolean(packages.sanity?.installed?.cliDependencyRange)\n    if (info.declared && !info.installed && !info.override && !cliSectionWillHandle) {\n      issues.push({\n        message: `${name} is declared in package.json but not installed.`,\n        packageName: name,\n        severity: 'error',\n        suggestion: `Run: ${pm} install`,\n        type: 'declared-not-installed',\n      })\n    }\n\n    // global-local-mismatch — only warn on major version differences\n    // Check all global installations, not just the first match.\n    // Skip @sanity/cli here — global-cli-incompatible (below) handles it with\n    // better context by checking against sanity's actual required range.\n    if (info.installed && name !== '@sanity/cli') {\n      const localMajor = semver.parse(info.installed.version)?.major\n      if (localMajor !== undefined) {\n        for (const globalMatch of globals.filter((g) => g.packageName === name)) {\n          const globalMajor = semver.parse(globalMatch.version)?.major\n          if (globalMajor !== undefined && globalMajor !== localMajor) {\n            issues.push({\n              message: `${name} version mismatch: global ${globalMatch.version} (${globalMatch.packageManager}) vs local ${info.installed.version}.`,\n              packageName: name,\n              severity: globalMatch.isActive ? 'warning' : 'info',\n              suggestion: `Run: ${getGlobalUninstallCommand(globalMatch.packageManager, name)}`,\n              type: 'global-local-mismatch',\n            })\n          }\n        }\n      }\n    }\n  }\n\n  // Check @sanity/cli compatibility with sanity\n  const sanityInfo = packages.sanity\n  const cliInfo = packages['@sanity/cli']\n\n  if (sanityInfo?.installed?.cliDependencyRange) {\n    const expectedCliRange = sanityInfo.installed.cliDependencyRange\n    // Normalize pinned versions (e.g. \"5.33.0\" → \"^5.33.0\") for satisfies checks.\n    // Already-ranged values like \"^5.33.0\" pass through unchanged.\n    // Note: sanity always uses caret ranges in practice. The pinned→caret conversion\n    // is a defensive fallback — if sanity ever pinned an exact version, caret semantics\n    // (any compatible minor/patch) are the expected behavior for CLI compatibility.\n    const compatRange = toCaretRange(expectedCliRange)\n\n    // Check if @sanity/cli is explicitly declared with an incompatible version.\n    // Skip when the declared range uses a non-semver protocol (workspace:*, file:,\n    // portal:, link:) — these are local package references, not version conflicts.\n    if (cliInfo?.declared && !isNonSemverProtocol(cliInfo.declared.versionRange)) {\n      const declaredRange = cliInfo.declared.versionRange\n      // Only flag as redundant when every version in the declared range also\n      // satisfies the required range. semver.subset('^5.0.0', '^5.33.0') → false,\n      // so a too-wide range is correctly classified as conflicting.\n      if (safeSubset(declaredRange, expectedCliRange)) {\n        issues.push({\n          message: `@sanity/cli is listed as a dependency but is already provided by sanity. Remove it to avoid version conflicts.`,\n          packageName: '@sanity/cli',\n          severity: 'info',\n          suggestion: `Run: ${getLocalRemoveCommand(pm, '@sanity/cli')}`,\n          type: 'redundant-cli-dependency',\n        })\n      } else {\n        issues.push({\n          message: `@sanity/cli is declared as ${declaredRange} but sanity requires ${expectedCliRange}. Sanity provides @sanity/cli automatically — removing the explicit declaration lets sanity manage the correct version.`,\n          packageName: '@sanity/cli',\n          severity: 'error',\n          suggestion: `Run: ${getLocalRemoveCommand(pm, '@sanity/cli')}`,\n          type: 'conflicting-cli-dependency',\n        })\n      }\n    }\n\n    // Check if installed @sanity/cli satisfies sanity's requirement.\n    // Skip if we already flagged a conflicting declaration — that's the root cause.\n    // Skip if an override is in effect — the user already knows about it, and\n    // suggesting an update would be misleading since the override controls the version.\n    const hasConflictingDeclaration = issues.some((i) => i.type === 'conflicting-cli-dependency')\n    if (cliInfo?.installed && !hasConflictingDeclaration && !cliInfo.override) {\n      const installedVersion = cliInfo.installed.version\n      if (!safeSatisfies(installedVersion, compatRange)) {\n        issues.push({\n          message: `Installed @sanity/cli@${installedVersion} does not satisfy sanity's requirement of ${compatRange}.`,\n          packageName: '@sanity/cli',\n          severity: 'error',\n          suggestion: `Run: ${getLocalUpdateCommand(pm, '@sanity/cli', updateOptions)}`,\n          type: 'cli-version-incompatible',\n        })\n      }\n    }\n\n    // Check if @sanity/cli is missing entirely (not declared, not installed)\n    // This indicates a broken node_modules state since sanity depends on @sanity/cli.\n    if (!cliInfo?.installed && !cliInfo?.declared && !cliInfo?.override) {\n      issues.push({\n        message: `@sanity/cli is not installed. It is required by sanity@${sanityInfo.installed.version}.`,\n        packageName: '@sanity/cli',\n        severity: 'error',\n        suggestion: `Run: ${pm} install`,\n        type: 'cli-not-installed',\n      })\n    }\n\n    // Check global @sanity/cli compatibility with local sanity\n    for (const global of globals) {\n      if (global.packageName !== '@sanity/cli') continue\n\n      if (!safeSatisfies(global.version, compatRange)) {\n        issues.push({\n          message: `Global @sanity/cli@${global.version} (installed via ${global.packageManager}) is incompatible with local sanity@${sanityInfo.installed.version} (requires @sanity/cli ${compatRange}).`,\n          packageName: '@sanity/cli',\n          severity: global.isActive ? 'warning' : 'info',\n          suggestion: `Run: ${getGlobalUninstallCommand(global.packageManager, '@sanity/cli')}`,\n          type: 'global-cli-incompatible',\n        })\n      }\n    }\n  }\n\n  return issues\n}\n\n/**\n * Protocols and prefixes that are not semver ranges.\n * Includes local package references (workspace:, file:, portal:, link:),\n * catalog: which may appear as an unresolved range when pnpm catalog lookup fails,\n * and git/URL-based dependency specifiers.\n */\nconst NON_SEMVER_PROTOCOLS = [\n  'workspace:',\n  'file:',\n  'portal:',\n  'link:',\n  'catalog:',\n  'git+',\n  'git:',\n  'github:',\n  'https:',\n  'http:',\n]\n\nfunction isNonSemverProtocol(range: string): boolean {\n  return NON_SEMVER_PROTOCOLS.some((p) => range.startsWith(p))\n}\n\n/**\n * Infers the package manager from workspace info when no lockfile is present.\n * Uses both the workspace type (which captures workspace config markers like\n * pnpm-workspace.yaml) and the yarnBerry flag (which captures .yarnrc.yml\n * even for standalone projects).\n */\nfunction inferPackageManager(workspace: WorkspaceInfo): LockfileType {\n  if (workspace.type.startsWith('pnpm')) return 'pnpm'\n  if (workspace.type.startsWith('yarn')) return 'yarn'\n  if (workspace.type.startsWith('bun')) return 'bun'\n  if (workspace.yarnBerry) return 'yarn'\n  if (workspace.bunfig) return 'bun'\n  return 'npm'\n}\n\n/**\n * Safe wrapper around semver.satisfies that returns false for non-semver\n * versions or ranges (workspace:*, catalog:, file:, git URLs) instead of throwing.\n * Uses includePrerelease so that pre-release versions (e.g. 5.0.0-rc.1) are\n * correctly matched against caret ranges like ^5.0.0-rc.1.\n */\nfunction safeSatisfies(version: string, range: string): boolean {\n  try {\n    return semver.satisfies(version, range, {includePrerelease: true})\n  } catch {\n    return false\n  }\n}\n\n/**\n * Safe wrapper around semver.subset that returns false for non-semver ranges\n * like workspace:*, catalog:, file:, or git URLs instead of throwing.\n */\nfunction safeSubset(sub: string, sup: string): boolean {\n  try {\n    return semver.subset(sub, sup) ?? false\n  } catch {\n    return false\n  }\n}\n\n/**\n * Converts a pinned version like \"5.33.0\" to \"^5.33.0\".\n * If it's already a range (^, ~, \\>=, etc.), returns as-is.\n */\nfunction toCaretRange(range: string): string {\n  // If it's already a range operator, return as-is\n  if (/^[\\^~><!=]/.test(range) || range.includes(' ')) {\n    return range\n  }\n  // If it's a plain version like \"5.33.0\", treat as ^5.33.0\n  if (semver.valid(range)) {\n    return `^${range}`\n  }\n  return range\n}\n"],"names":["semver","getGlobalUninstallCommand","getLocalRemoveCommand","getLocalUpdateCommand","analyzeIssues","packages","workspace","globals","issues","pm","hasMultipleLockfiles","lockfile","inferPackageManager","type","updateOptions","yarnBerry","push","message","packageName","severity","suggestion","name","info","Object","entries","override","mechanism","versionRange","cliSectionWillHandle","Boolean","sanity","installed","cliDependencyRange","declared","localMajor","parse","version","major","undefined","globalMatch","filter","g","globalMajor","packageManager","isActive","sanityInfo","cliInfo","expectedCliRange","compatRange","toCaretRange","isNonSemverProtocol","declaredRange","safeSubset","hasConflictingDeclaration","some","i","installedVersion","safeSatisfies","global","NON_SEMVER_PROTOCOLS","range","p","startsWith","bunfig","satisfies","includePrerelease","sub","sup","subset","test","includes","valid"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAE3B,SACEC,yBAAyB,EACzBC,qBAAqB,EACrBC,qBAAqB,QAChB,gBAAe;AAUtB;;CAEC,GACD,OAAO,SAASC,cACdC,QAAqD,EACrDC,SAAwB,EACxBC,OAA6B;IAE7B,MAAMC,SAAkB,EAAE;IAC1B,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAMC,KACJH,UAAUI,oBAAoB,IAAI,CAACJ,UAAUK,QAAQ,GACjDC,oBAAoBN,aACpBA,UAAUK,QAAQ,CAACE,IAAI;IAC7B,MAAMC,gBAAgB;QAACC,WAAWT,UAAUS,SAAS;IAAA;IAErD,+BAA+B;IAC/B,IAAIT,UAAUI,oBAAoB,EAAE;QAClCF,OAAOQ,IAAI,CAAC;YACVC,SAAS;YACTC,aAAa;YACbC,UAAU;YACVC,YAAY;YACZP,MAAM;QACR;IACF;IAEA,gCAAgC;IAChC,KAAK,MAAM,CAACQ,MAAMC,KAAK,IAAIC,OAAOC,OAAO,CAACnB,UAGrC;QACH,IAAI,CAACiB,MAAM;QAEX,qBAAqB;QACrB,IAAIA,KAAKG,QAAQ,EAAE;YACjBjB,OAAOQ,IAAI,CAAC;gBACVC,SAAS,GAAGI,KAAK,kBAAkB,EAAEC,KAAKG,QAAQ,CAACC,SAAS,CAAC,SAAS,EAAEJ,KAAKG,QAAQ,CAACE,YAAY,CAAC,CAAC,CAAC;gBACrGT,aAAaG;gBACbF,UAAU;gBACVC,YAAY;gBACZP,MAAM;YACR;QACF;QAEA,yEAAyE;QACzE,uFAAuF;QACvF,kFAAkF;QAClF,gFAAgF;QAChF,MAAMe,uBACJP,SAAS,iBAAiBQ,QAAQxB,SAASyB,MAAM,EAAEC,WAAWC;QAChE,IAAIV,KAAKW,QAAQ,IAAI,CAACX,KAAKS,SAAS,IAAI,CAACT,KAAKG,QAAQ,IAAI,CAACG,sBAAsB;YAC/EpB,OAAOQ,IAAI,CAAC;gBACVC,SAAS,GAAGI,KAAK,+CAA+C,CAAC;gBACjEH,aAAaG;gBACbF,UAAU;gBACVC,YAAY,CAAC,KAAK,EAAEX,GAAG,QAAQ,CAAC;gBAChCI,MAAM;YACR;QACF;QAEA,iEAAiE;QACjE,4DAA4D;QAC5D,0EAA0E;QAC1E,qEAAqE;QACrE,IAAIS,KAAKS,SAAS,IAAIV,SAAS,eAAe;YAC5C,MAAMa,aAAalC,OAAOmC,KAAK,CAACb,KAAKS,SAAS,CAACK,OAAO,GAAGC;YACzD,IAAIH,eAAeI,WAAW;gBAC5B,KAAK,MAAMC,eAAehC,QAAQiC,MAAM,CAAC,CAACC,IAAMA,EAAEvB,WAAW,KAAKG,MAAO;oBACvE,MAAMqB,cAAc1C,OAAOmC,KAAK,CAACI,YAAYH,OAAO,GAAGC;oBACvD,IAAIK,gBAAgBJ,aAAaI,gBAAgBR,YAAY;wBAC3D1B,OAAOQ,IAAI,CAAC;4BACVC,SAAS,GAAGI,KAAK,0BAA0B,EAAEkB,YAAYH,OAAO,CAAC,EAAE,EAAEG,YAAYI,cAAc,CAAC,WAAW,EAAErB,KAAKS,SAAS,CAACK,OAAO,CAAC,CAAC,CAAC;4BACtIlB,aAAaG;4BACbF,UAAUoB,YAAYK,QAAQ,GAAG,YAAY;4BAC7CxB,YAAY,CAAC,KAAK,EAAEnB,0BAA0BsC,YAAYI,cAAc,EAAEtB,OAAO;4BACjFR,MAAM;wBACR;oBACF;gBACF;YACF;QACF;IACF;IAEA,8CAA8C;IAC9C,MAAMgC,aAAaxC,SAASyB,MAAM;IAClC,MAAMgB,UAAUzC,QAAQ,CAAC,cAAc;IAEvC,IAAIwC,YAAYd,WAAWC,oBAAoB;QAC7C,MAAMe,mBAAmBF,WAAWd,SAAS,CAACC,kBAAkB;QAChE,8EAA8E;QAC9E,+DAA+D;QAC/D,iFAAiF;QACjF,oFAAoF;QACpF,gFAAgF;QAChF,MAAMgB,cAAcC,aAAaF;QAEjC,4EAA4E;QAC5E,+EAA+E;QAC/E,+EAA+E;QAC/E,IAAID,SAASb,YAAY,CAACiB,oBAAoBJ,QAAQb,QAAQ,CAACN,YAAY,GAAG;YAC5E,MAAMwB,gBAAgBL,QAAQb,QAAQ,CAACN,YAAY;YACnD,uEAAuE;YACvE,4EAA4E;YAC5E,8DAA8D;YAC9D,IAAIyB,WAAWD,eAAeJ,mBAAmB;gBAC/CvC,OAAOQ,IAAI,CAAC;oBACVC,SAAS,CAAC,8GAA8G,CAAC;oBACzHC,aAAa;oBACbC,UAAU;oBACVC,YAAY,CAAC,KAAK,EAAElB,sBAAsBO,IAAI,gBAAgB;oBAC9DI,MAAM;gBACR;YACF,OAAO;gBACLL,OAAOQ,IAAI,CAAC;oBACVC,SAAS,CAAC,2BAA2B,EAAEkC,cAAc,qBAAqB,EAAEJ,iBAAiB,uHAAuH,CAAC;oBACrN7B,aAAa;oBACbC,UAAU;oBACVC,YAAY,CAAC,KAAK,EAAElB,sBAAsBO,IAAI,gBAAgB;oBAC9DI,MAAM;gBACR;YACF;QACF;QAEA,iEAAiE;QACjE,gFAAgF;QAChF,0EAA0E;QAC1E,oFAAoF;QACpF,MAAMwC,4BAA4B7C,OAAO8C,IAAI,CAAC,CAACC,IAAMA,EAAE1C,IAAI,KAAK;QAChE,IAAIiC,SAASf,aAAa,CAACsB,6BAA6B,CAACP,QAAQrB,QAAQ,EAAE;YACzE,MAAM+B,mBAAmBV,QAAQf,SAAS,CAACK,OAAO;YAClD,IAAI,CAACqB,cAAcD,kBAAkBR,cAAc;gBACjDxC,OAAOQ,IAAI,CAAC;oBACVC,SAAS,CAAC,sBAAsB,EAAEuC,iBAAiB,0CAA0C,EAAER,YAAY,CAAC,CAAC;oBAC7G9B,aAAa;oBACbC,UAAU;oBACVC,YAAY,CAAC,KAAK,EAAEjB,sBAAsBM,IAAI,eAAeK,gBAAgB;oBAC7ED,MAAM;gBACR;YACF;QACF;QAEA,yEAAyE;QACzE,kFAAkF;QAClF,IAAI,CAACiC,SAASf,aAAa,CAACe,SAASb,YAAY,CAACa,SAASrB,UAAU;YACnEjB,OAAOQ,IAAI,CAAC;gBACVC,SAAS,CAAC,uDAAuD,EAAE4B,WAAWd,SAAS,CAACK,OAAO,CAAC,CAAC,CAAC;gBAClGlB,aAAa;gBACbC,UAAU;gBACVC,YAAY,CAAC,KAAK,EAAEX,GAAG,QAAQ,CAAC;gBAChCI,MAAM;YACR;QACF;QAEA,2DAA2D;QAC3D,KAAK,MAAM6C,UAAUnD,QAAS;YAC5B,IAAImD,OAAOxC,WAAW,KAAK,eAAe;YAE1C,IAAI,CAACuC,cAAcC,OAAOtB,OAAO,EAAEY,cAAc;gBAC/CxC,OAAOQ,IAAI,CAAC;oBACVC,SAAS,CAAC,mBAAmB,EAAEyC,OAAOtB,OAAO,CAAC,gBAAgB,EAAEsB,OAAOf,cAAc,CAAC,oCAAoC,EAAEE,WAAWd,SAAS,CAACK,OAAO,CAAC,uBAAuB,EAAEY,YAAY,EAAE,CAAC;oBACjM9B,aAAa;oBACbC,UAAUuC,OAAOd,QAAQ,GAAG,YAAY;oBACxCxB,YAAY,CAAC,KAAK,EAAEnB,0BAA0ByD,OAAOf,cAAc,EAAE,gBAAgB;oBACrF9B,MAAM;gBACR;YACF;QACF;IACF;IAEA,OAAOL;AACT;AAEA;;;;;CAKC,GACD,MAAMmD,uBAAuB;IAC3B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED,SAAST,oBAAoBU,KAAa;IACxC,OAAOD,qBAAqBL,IAAI,CAAC,CAACO,IAAMD,MAAME,UAAU,CAACD;AAC3D;AAEA;;;;;CAKC,GACD,SAASjD,oBAAoBN,SAAwB;IACnD,IAAIA,UAAUO,IAAI,CAACiD,UAAU,CAAC,SAAS,OAAO;IAC9C,IAAIxD,UAAUO,IAAI,CAACiD,UAAU,CAAC,SAAS,OAAO;IAC9C,IAAIxD,UAAUO,IAAI,CAACiD,UAAU,CAAC,QAAQ,OAAO;IAC7C,IAAIxD,UAAUS,SAAS,EAAE,OAAO;IAChC,IAAIT,UAAUyD,MAAM,EAAE,OAAO;IAC7B,OAAO;AACT;AAEA;;;;;CAKC,GACD,SAASN,cAAcrB,OAAe,EAAEwB,KAAa;IACnD,IAAI;QACF,OAAO5D,OAAOgE,SAAS,CAAC5B,SAASwB,OAAO;YAACK,mBAAmB;QAAI;IAClE,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA;;;CAGC,GACD,SAASb,WAAWc,GAAW,EAAEC,GAAW;IAC1C,IAAI;QACF,OAAOnE,OAAOoE,MAAM,CAACF,KAAKC,QAAQ;IACpC,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA;;;CAGC,GACD,SAASlB,aAAaW,KAAa;IACjC,iDAAiD;IACjD,IAAI,aAAaS,IAAI,CAACT,UAAUA,MAAMU,QAAQ,CAAC,MAAM;QACnD,OAAOV;IACT;IACA,0DAA0D;IAC1D,IAAI5D,OAAOuE,KAAK,CAACX,QAAQ;QACvB,OAAO,CAAC,CAAC,EAAEA,OAAO;IACpB;IACA,OAAOA;AACT"}

package/dist/util/packageManager/installationInfo/commands.js

@@ -0,0 +1,73 @@
+import { getYarnMajorVersion } from '@sanity/cli-core/package-manager';
+export function getGlobalUninstallCommand(pm, packageName) {
+    switch(pm){
+        case 'bun':
+            {
+                return `bun remove -g ${packageName}`;
+            }
+        case 'npm':
+            {
+                return `npm uninstall -g ${packageName}`;
+            }
+        case 'pnpm':
+            {
+                return `pnpm remove -g ${packageName}`;
+            }
+        case 'yarn':
+            {
+                // The pm is 'yarn' because queryYarnGlobals found the package, meaning
+                // it was installed with Yarn Classic (`yarn global add`). Only Yarn
+                // Classic can uninstall it — the project's yarn version is irrelevant.
+                return `yarn global remove ${packageName}`;
+            }
+    }
+}
+export function getLocalUpdateCommand(pm, packageName, options) {
+    switch(pm){
+        case 'bun':
+            {
+                return `bun update ${packageName}`;
+            }
+        case 'npm':
+            {
+                return `npm update ${packageName}`;
+            }
+        case 'pnpm':
+            {
+                return `pnpm update ${packageName}`;
+            }
+        case 'yarn':
+            {
+                // Prefer project-level detection (.yarnrc.yml) over process user-agent,
+                // since the doctor command may be invoked via a different package manager.
+                const isBerry = options?.yarnBerry ?? isYarnBerryFromProcess();
+                return `yarn ${isBerry ? 'up' : 'upgrade'} ${packageName}`;
+            }
+    }
+}
+function isYarnBerryFromProcess() {
+    const yarnMajor = getYarnMajorVersion();
+    return yarnMajor !== undefined && yarnMajor >= 2;
+}
+export function getLocalRemoveCommand(pm, packageName) {
+    switch(pm){
+        case 'bun':
+            {
+                return `bun remove ${packageName}`;
+            }
+        case 'npm':
+            {
+                return `npm uninstall ${packageName}`;
+            }
+        case 'pnpm':
+            {
+                return `pnpm remove ${packageName}`;
+            }
+        case 'yarn':
+            {
+                return `yarn remove ${packageName}`;
+            }
+    }
+}
+
+//# sourceMappingURL=commands.js.map

package/dist/util/packageManager/installationInfo/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/util/packageManager/installationInfo/commands.ts"],"sourcesContent":["import {getYarnMajorVersion} from '@sanity/cli-core/package-manager'\n\nimport {type LockfileType} from './types.js'\n\ninterface CommandOptions {\n  /** Whether the project uses Yarn Berry (v2+), determined from .yarnrc.yml. */\n  yarnBerry?: boolean\n}\n\nexport function getGlobalUninstallCommand(pm: LockfileType, packageName: string): string {\n  switch (pm) {\n    case 'bun': {\n      return `bun remove -g ${packageName}`\n    }\n    case 'npm': {\n      return `npm uninstall -g ${packageName}`\n    }\n    case 'pnpm': {\n      return `pnpm remove -g ${packageName}`\n    }\n    case 'yarn': {\n      // The pm is 'yarn' because queryYarnGlobals found the package, meaning\n      // it was installed with Yarn Classic (`yarn global add`). Only Yarn\n      // Classic can uninstall it — the project's yarn version is irrelevant.\n      return `yarn global remove ${packageName}`\n    }\n  }\n}\n\nexport function getLocalUpdateCommand(\n  pm: LockfileType,\n  packageName: string,\n  options?: CommandOptions,\n): string {\n  switch (pm) {\n    case 'bun': {\n      return `bun update ${packageName}`\n    }\n    case 'npm': {\n      return `npm update ${packageName}`\n    }\n    case 'pnpm': {\n      return `pnpm update ${packageName}`\n    }\n    case 'yarn': {\n      // Prefer project-level detection (.yarnrc.yml) over process user-agent,\n      // since the doctor command may be invoked via a different package manager.\n      const isBerry = options?.yarnBerry ?? isYarnBerryFromProcess()\n      return `yarn ${isBerry ? 'up' : 'upgrade'} ${packageName}`\n    }\n  }\n}\n\nfunction isYarnBerryFromProcess(): boolean {\n  const yarnMajor = getYarnMajorVersion()\n  return yarnMajor !== undefined && yarnMajor >= 2\n}\n\nexport function getLocalRemoveCommand(pm: LockfileType, packageName: string): string {\n  switch (pm) {\n    case 'bun': {\n      return `bun remove ${packageName}`\n    }\n    case 'npm': {\n      return `npm uninstall ${packageName}`\n    }\n    case 'pnpm': {\n      return `pnpm remove ${packageName}`\n    }\n    case 'yarn': {\n      return `yarn remove ${packageName}`\n    }\n  }\n}\n"],"names":["getYarnMajorVersion","getGlobalUninstallCommand","pm","packageName","getLocalUpdateCommand","options","isBerry","yarnBerry","isYarnBerryFromProcess","yarnMajor","undefined","getLocalRemoveCommand"],"mappings":"AAAA,SAAQA,mBAAmB,QAAO,mCAAkC;AASpE,OAAO,SAASC,0BAA0BC,EAAgB,EAAEC,WAAmB;IAC7E,OAAQD;QACN,KAAK;YAAO;gBACV,OAAO,CAAC,cAAc,EAAEC,aAAa;YACvC;QACA,KAAK;YAAO;gBACV,OAAO,CAAC,iBAAiB,EAAEA,aAAa;YAC1C;QACA,KAAK;YAAQ;gBACX,OAAO,CAAC,eAAe,EAAEA,aAAa;YACxC;QACA,KAAK;YAAQ;gBACX,uEAAuE;gBACvE,oEAAoE;gBACpE,uEAAuE;gBACvE,OAAO,CAAC,mBAAmB,EAAEA,aAAa;YAC5C;IACF;AACF;AAEA,OAAO,SAASC,sBACdF,EAAgB,EAChBC,WAAmB,EACnBE,OAAwB;IAExB,OAAQH;QACN,KAAK;YAAO;gBACV,OAAO,CAAC,WAAW,EAAEC,aAAa;YACpC;QACA,KAAK;YAAO;gBACV,OAAO,CAAC,WAAW,EAAEA,aAAa;YACpC;QACA,KAAK;YAAQ;gBACX,OAAO,CAAC,YAAY,EAAEA,aAAa;YACrC;QACA,KAAK;YAAQ;gBACX,wEAAwE;gBACxE,2EAA2E;gBAC3E,MAAMG,UAAUD,SAASE,aAAaC;gBACtC,OAAO,CAAC,KAAK,EAAEF,UAAU,OAAO,UAAU,CAAC,EAAEH,aAAa;YAC5D;IACF;AACF;AAEA,SAASK;IACP,MAAMC,YAAYT;IAClB,OAAOS,cAAcC,aAAaD,aAAa;AACjD;AAEA,OAAO,SAASE,sBAAsBT,EAAgB,EAAEC,WAAmB;IACzE,OAAQD;QACN,KAAK;YAAO;gBACV,OAAO,CAAC,WAAW,EAAEC,aAAa;YACpC;QACA,KAAK;YAAO;gBACV,OAAO,CAAC,cAAc,EAAEA,aAAa;YACvC;QACA,KAAK;YAAQ;gBACX,OAAO,CAAC,YAAY,EAAEA,aAAa;YACrC;QACA,KAAK;YAAQ;gBACX,OAAO,CAAC,YAAY,EAAEA,aAAa;YACrC;IACF;AACF"}

package/dist/util/packageManager/installationInfo/detectCliInstallation.js

@@ -0,0 +1,66 @@
+import { getRunningPackageManager } from '@sanity/cli-core/package-manager';
+import { analyzeIssues } from './analyzeIssues.js';
+import { detectGlobalInstallations } from './detectGlobals.js';
+import { collectPackageInfo } from './detectPackages.js';
+import { detectWorkspace } from './detectWorkspace.js';
+const SANITY_PACKAGES = [
+    'sanity',
+    '@sanity/cli'
+];
+/**
+ * Main entry point for detecting CLI installation status.
+ * Gathers information about workspace configuration, package declarations,
+ * installed versions, global installations, and potential issues.
+ */ export async function detectCliInstallation(options) {
+    const cwd = options?.cwd ?? process.cwd();
+    // Run detection in parallel where possible
+    const [workspace, globalInstallations] = await Promise.all([
+        detectWorkspace(cwd),
+        detectGlobalInstallations()
+    ]);
+    // Collect package info for both sanity packages
+    const packageInfoResults = await Promise.all(SANITY_PACKAGES.map(async (name)=>{
+        const info = await collectPackageInfo(name, cwd, workspace);
+        return [
+            name,
+            info
+        ];
+    }));
+    const packages = Object.fromEntries(packageInfoResults.filter(([, info])=>info.declared || info.override || info.installed));
+    // Detect execution context
+    const currentExecution = detectExecutionContext(globalInstallations);
+    // Analyze for issues
+    const issues = analyzeIssues(packages, workspace, globalInstallations);
+    return {
+        currentExecution,
+        globalInstallations,
+        issues,
+        packages,
+        workspace
+    };
+}
+function detectExecutionContext(globalInstallations) {
+    // Try to determine how we're running
+    const binaryPath = process.argv[1] ?? null;
+    // Check npm_config_user_agent for package manager
+    const packageManager = getRunningPackageManager() ?? null;
+    // Determine if we're running from global, local, or npx
+    let resolvedFrom = 'unknown';
+    if (binaryPath) {
+        // Check if running via npx
+        if (process.env.npm_execpath?.includes('npx') || binaryPath.includes('/_npx/') || binaryPath.includes('\\_npx\\')) {
+            resolvedFrom = 'npx';
+        } else if (binaryPath.includes('node_modules')) {
+            resolvedFrom = 'local';
+        } else if (globalInstallations.some((g)=>g.isActive)) {
+            resolvedFrom = 'global';
+        }
+    }
+    return {
+        binaryPath,
+        packageManager,
+        resolvedFrom
+    };
+}
+
+//# sourceMappingURL=detectCliInstallation.js.map

package/dist/util/packageManager/installationInfo/detectCliInstallation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/util/packageManager/installationInfo/detectCliInstallation.ts"],"sourcesContent":["import {getRunningPackageManager} from '@sanity/cli-core/package-manager'\n\nimport {analyzeIssues} from './analyzeIssues.js'\nimport {detectGlobalInstallations} from './detectGlobals.js'\nimport {collectPackageInfo} from './detectPackages.js'\nimport {detectWorkspace} from './detectWorkspace.js'\nimport {type CliInstallationInfo, type ExecutionContext, type SanityPackage} from './types.js'\n\nconst SANITY_PACKAGES: SanityPackage[] = ['sanity', '@sanity/cli']\n\ninterface DetectCliInstallationOptions {\n  cwd?: string\n}\n\n/**\n * Main entry point for detecting CLI installation status.\n * Gathers information about workspace configuration, package declarations,\n * installed versions, global installations, and potential issues.\n */\nexport async function detectCliInstallation(\n  options?: DetectCliInstallationOptions,\n): Promise<CliInstallationInfo> {\n  const cwd = options?.cwd ?? process.cwd()\n\n  // Run detection in parallel where possible\n  const [workspace, globalInstallations] = await Promise.all([\n    detectWorkspace(cwd),\n    detectGlobalInstallations(),\n  ])\n\n  // Collect package info for both sanity packages\n  const packageInfoResults = await Promise.all(\n    SANITY_PACKAGES.map(async (name) => {\n      const info = await collectPackageInfo(name, cwd, workspace)\n      return [name, info] as const\n    }),\n  )\n\n  const packages: Partial<Record<SanityPackage, CliInstallationInfo['packages'][SanityPackage]>> =\n    Object.fromEntries(\n      packageInfoResults.filter(([, info]) => info.declared || info.override || info.installed),\n    )\n\n  // Detect execution context\n  const currentExecution = detectExecutionContext(globalInstallations)\n\n  // Analyze for issues\n  const issues = analyzeIssues(packages, workspace, globalInstallations)\n\n  return {\n    currentExecution,\n    globalInstallations,\n    issues,\n    packages,\n    workspace,\n  }\n}\n\nfunction detectExecutionContext(\n  globalInstallations: CliInstallationInfo['globalInstallations'],\n): ExecutionContext {\n  // Try to determine how we're running\n  const binaryPath = process.argv[1] ?? null\n\n  // Check npm_config_user_agent for package manager\n  const packageManager: ExecutionContext['packageManager'] = getRunningPackageManager() ?? null\n\n  // Determine if we're running from global, local, or npx\n  let resolvedFrom: ExecutionContext['resolvedFrom'] = 'unknown'\n\n  if (binaryPath) {\n    // Check if running via npx\n    if (\n      process.env.npm_execpath?.includes('npx') ||\n      binaryPath.includes('/_npx/') ||\n      binaryPath.includes('\\\\_npx\\\\')\n    ) {\n      resolvedFrom = 'npx'\n    }\n    // Check if running from node_modules (local install).\n    // process.argv[1] for npm globals is the symlink path (e.g. /usr/local/bin/sanity),\n    // not the resolved target, so this won't match global installs.\n    else if (binaryPath.includes('node_modules')) {\n      resolvedFrom = 'local'\n    }\n    // Fallback: if there's an active global installation, classify as global.\n    // This covers all PM-specific bin paths (npm, pnpm, yarn, bun) since\n    // markActiveInstallation already identifies the active PM using bin dir checks.\n    else if (globalInstallations.some((g) => g.isActive)) {\n      resolvedFrom = 'global'\n    }\n  }\n\n  return {\n    binaryPath,\n    packageManager,\n    resolvedFrom,\n  }\n}\n"],"names":["getRunningPackageManager","analyzeIssues","detectGlobalInstallations","collectPackageInfo","detectWorkspace","SANITY_PACKAGES","detectCliInstallation","options","cwd","process","workspace","globalInstallations","Promise","all","packageInfoResults","map","name","info","packages","Object","fromEntries","filter","declared","override","installed","currentExecution","detectExecutionContext","issues","binaryPath","argv","packageManager","resolvedFrom","env","npm_execpath","includes","some","g","isActive"],"mappings":"AAAA,SAAQA,wBAAwB,QAAO,mCAAkC;AAEzE,SAAQC,aAAa,QAAO,qBAAoB;AAChD,SAAQC,yBAAyB,QAAO,qBAAoB;AAC5D,SAAQC,kBAAkB,QAAO,sBAAqB;AACtD,SAAQC,eAAe,QAAO,uBAAsB;AAGpD,MAAMC,kBAAmC;IAAC;IAAU;CAAc;AAMlE;;;;CAIC,GACD,OAAO,eAAeC,sBACpBC,OAAsC;IAEtC,MAAMC,MAAMD,SAASC,OAAOC,QAAQD,GAAG;IAEvC,2CAA2C;IAC3C,MAAM,CAACE,WAAWC,oBAAoB,GAAG,MAAMC,QAAQC,GAAG,CAAC;QACzDT,gBAAgBI;QAChBN;KACD;IAED,gDAAgD;IAChD,MAAMY,qBAAqB,MAAMF,QAAQC,GAAG,CAC1CR,gBAAgBU,GAAG,CAAC,OAAOC;QACzB,MAAMC,OAAO,MAAMd,mBAAmBa,MAAMR,KAAKE;QACjD,OAAO;YAACM;YAAMC;SAAK;IACrB;IAGF,MAAMC,WACJC,OAAOC,WAAW,CAChBN,mBAAmBO,MAAM,CAAC,CAAC,GAAGJ,KAAK,GAAKA,KAAKK,QAAQ,IAAIL,KAAKM,QAAQ,IAAIN,KAAKO,SAAS;IAG5F,2BAA2B;IAC3B,MAAMC,mBAAmBC,uBAAuBf;IAEhD,qBAAqB;IACrB,MAAMgB,SAAS1B,cAAciB,UAAUR,WAAWC;IAElD,OAAO;QACLc;QACAd;QACAgB;QACAT;QACAR;IACF;AACF;AAEA,SAASgB,uBACPf,mBAA+D;IAE/D,qCAAqC;IACrC,MAAMiB,aAAanB,QAAQoB,IAAI,CAAC,EAAE,IAAI;IAEtC,kDAAkD;IAClD,MAAMC,iBAAqD9B,8BAA8B;IAEzF,wDAAwD;IACxD,IAAI+B,eAAiD;IAErD,IAAIH,YAAY;QACd,2BAA2B;QAC3B,IACEnB,QAAQuB,GAAG,CAACC,YAAY,EAAEC,SAAS,UACnCN,WAAWM,QAAQ,CAAC,aACpBN,WAAWM,QAAQ,CAAC,aACpB;YACAH,eAAe;QACjB,OAIK,IAAIH,WAAWM,QAAQ,CAAC,iBAAiB;YAC5CH,eAAe;QACjB,OAIK,IAAIpB,oBAAoBwB,IAAI,CAAC,CAACC,IAAMA,EAAEC,QAAQ,GAAG;YACpDN,eAAe;QACjB;IACF;IAEA,OAAO;QACLH;QACAE;QACAC;IACF;AACF"}

package/dist/util/packageManager/installationInfo/detectGlobals.js

@@ -0,0 +1,295 @@
+import path from 'node:path';
+import { execa } from 'execa';
+import which from 'which';
+const SANITY_PACKAGES = [
+    'sanity',
+    '@sanity/cli'
+];
+/**
+ * Tries to parse JSON from command output that may contain non-JSON prefix lines
+ * (e.g. npm warnings printed before JSON). Returns null if parsing fails.
+ */ function tryParseJson(stdout) {
+    // First, try parsing the full output
+    try {
+        return JSON.parse(stdout);
+    } catch  {
+    // Fall through
+    }
+    // Try to find the start of JSON content (first { or [)
+    const jsonStart = stdout.search(/[{[]/);
+    if (jsonStart > 0) {
+        try {
+            return JSON.parse(stdout.slice(jsonStart));
+        } catch  {
+        // Fall through
+        }
+    }
+    return null;
+}
+/**
+ * Detects global installations of sanity and \@sanity/cli across all package managers.
+ * Runs queries in parallel for efficiency.
+ */ export async function detectGlobalInstallations() {
+    // Query all package managers in parallel
+    const [activeBinaryPath, npmResult, pnpmResult, yarnGlobals, bunGlobals] = await Promise.all([
+        // Find which binary is active in PATH
+        findActiveBinaryPath(),
+        queryNpmGlobals(),
+        queryPnpmGlobals(),
+        queryYarnGlobals(),
+        queryBunGlobals()
+    ]);
+    const allGlobals = [
+        ...npmResult.globals,
+        ...pnpmResult.globals,
+        ...yarnGlobals,
+        ...bunGlobals
+    ];
+    // Mark which installation is active
+    return markActiveInstallation(allGlobals, activeBinaryPath, npmResult.libDir, pnpmResult.binDir);
+}
+async function findActiveBinaryPath() {
+    try {
+        return await which('sanity');
+    } catch  {
+        return null;
+    }
+}
+async function queryNpmGlobals() {
+    try {
+        const result = await execa('npm', [
+            'list',
+            '-g',
+            '--depth=0',
+            '--json'
+        ], {
+            reject: false,
+            timeout: 10_000
+        });
+        if (!result.stdout) {
+            return {
+                globals: [],
+                libDir: null
+            };
+        }
+        const output = tryParseJson(result.stdout);
+        if (!output) {
+            return {
+                globals: [],
+                libDir: null
+            };
+        }
+        const globals = [];
+        for (const pkg of SANITY_PACKAGES){
+            const dep = output.dependencies?.[pkg];
+            if (dep) {
+                globals.push({
+                    isActive: false,
+                    packageManager: 'npm',
+                    packageName: pkg,
+                    // npm's `resolved` is a tarball URL, not a filesystem path.
+                    path: null,
+                    version: dep.version
+                });
+            }
+        }
+        return {
+            globals,
+            libDir: output.path ?? null
+        };
+    } catch  {
+        return {
+            globals: [],
+            libDir: null
+        };
+    }
+}
+async function queryPnpmGlobals() {
+    try {
+        // Query pnpm global bin dir and global packages in parallel
+        const [binResult, listResult] = await Promise.all([
+            execa('pnpm', [
+                'bin',
+                '-g'
+            ], {
+                reject: false,
+                timeout: 10_000
+            }),
+            execa('pnpm', [
+                'list',
+                '-g',
+                '--depth=0',
+                '--json'
+            ], {
+                reject: false,
+                timeout: 10_000
+            })
+        ]);
+        const binDir = binResult.stdout?.trim() || null;
+        if (!listResult.stdout) {
+            return {
+                binDir,
+                globals: []
+            };
+        }
+        const output = tryParseJson(listResult.stdout);
+        if (!output) {
+            return {
+                binDir,
+                globals: []
+            };
+        }
+        const globals = [];
+        for (const project of output){
+            if (!project.dependencies) continue;
+            for (const pkg of SANITY_PACKAGES){
+                const dep = project.dependencies[pkg];
+                if (dep) {
+                    globals.push({
+                        isActive: false,
+                        packageManager: 'pnpm',
+                        packageName: pkg,
+                        path: dep.path || null,
+                        version: dep.version
+                    });
+                }
+            }
+        }
+        return {
+            binDir,
+            globals
+        };
+    } catch  {
+        return {
+            binDir: null,
+            globals: []
+        };
+    }
+}
+async function queryYarnGlobals() {
+    // `yarn global list` only works with Yarn Classic (v1).
+    // Yarn Berry (v2+) removed global installs entirely — the command errors or
+    // produces no output. Because `reject: false` is set, the call returns
+    // empty stdout and we gracefully return []. This means Yarn Berry global
+    // installations (if any exist via third-party plugins) are invisible here.
+    // A version check (via getYarnMajorVersion) could skip the call entirely,
+    // but since it already degrades gracefully the cost is just a failed exec.
+    try {
+        const result = await execa('yarn', [
+            'global',
+            'list',
+            '--json'
+        ], {
+            reject: false,
+            timeout: 10_000
+        });
+        if (!result.stdout) {
+            return [];
+        }
+        // Yarn outputs NDJSON - one JSON object per line
+        const globals = [];
+        const lines = result.stdout.split('\n').filter(Boolean);
+        for (const line of lines){
+            try {
+                const entry = JSON.parse(line);
+                if (entry.type === 'info' && entry.data) {
+                    // Yarn classic emits: "\"sanity@3.67.0\" has binaries:\n  - sanity"
+                    // Extract the quoted "package@version" portion.
+                    for (const pkg of SANITY_PACKAGES){
+                        const prefix = `"${pkg}@`;
+                        if (entry.data.startsWith(prefix)) {
+                            const closingQuote = entry.data.indexOf('"', prefix.length);
+                            if (closingQuote !== -1) {
+                                globals.push({
+                                    isActive: false,
+                                    packageManager: 'yarn',
+                                    packageName: pkg,
+                                    path: null,
+                                    version: entry.data.slice(prefix.length, closingQuote)
+                                });
+                            }
+                        }
+                    }
+                }
+            } catch  {
+            // Skip malformed lines
+            }
+        }
+        return globals;
+    } catch  {
+        return [];
+    }
+}
+// As of Bun 1.2, `bun pm ls` does not support --json or -g flags.
+// Skip the subprocess call entirely to avoid wasted latency on every run.
+// Re-enable when bun implements JSON output (see oven-sh/bun#26222).
+async function queryBunGlobals() {
+    return [];
+}
+function markActiveInstallation(globals, activeBinaryPath, npmLibDir, pnpmBinDir) {
+    if (!activeBinaryPath) {
+        return globals;
+    }
+    // Determine which package manager the active binary belongs to.
+    // For npm and pnpm, we verify against their actual reported directories
+    // rather than relying on path substring matching which breaks with
+    // custom install locations.
+    let activePackageManager = null;
+    // bun — check default ~/.bun/ path, then fall back to BUN_INSTALL env var
+    // for users with a custom installation directory.
+    if (isInBunDir(activeBinaryPath)) {
+        activePackageManager = 'bun';
+    } else if (pnpmBinDir && isInPnpmBinDir(activeBinaryPath, pnpmBinDir)) {
+        activePackageManager = 'pnpm';
+    } else if (activeBinaryPath.includes('/.yarn/') || activeBinaryPath.includes('\\.yarn\\') || activeBinaryPath.includes('/.config/yarn/')) {
+        activePackageManager = 'yarn';
+    } else if (npmLibDir && isInNpmBinDir(activeBinaryPath, npmLibDir)) {
+        activePackageManager = 'npm';
+    }
+    return globals.map((g)=>({
+            ...g,
+            // Mark as active if it's from the detected package manager.
+            // Both `sanity` and `@sanity/cli` provide a `sanity` binary,
+            // so either package from the active pm is considered active.
+            isActive: g.packageManager === activePackageManager
+        }));
+}
+/**
+ * Checks whether a binary path is inside pnpm's global bin directory.
+ * `pnpm bin -g` returns the directory where global binaries are linked.
+ */ function isInPnpmBinDir(binaryPath, pnpmBinDir) {
+    const binaryDir = path.dirname(path.normalize(binaryPath));
+    return binaryDir === path.normalize(pnpmBinDir);
+}
+/**
+ * Checks whether a binary path is inside npm's global bin directory.
+ * On Unix: lib is at `<prefix>/lib`, bins at `<prefix>/bin` (sibling dirs).
+ * On Windows: lib and bins share the same directory.
+ */ function isInBunDir(binaryPath) {
+    // Default ~/.bun/ location
+    if (binaryPath.includes('/.bun/') || binaryPath.includes('\\.bun\\')) {
+        return true;
+    }
+    // Custom BUN_INSTALL directory (e.g. BUN_INSTALL=/opt/bun)
+    const bunInstall = process.env.BUN_INSTALL;
+    if (bunInstall) {
+        const binaryDir = path.dirname(path.normalize(binaryPath));
+        const bunBinDir = path.join(path.normalize(bunInstall), 'bin');
+        if (binaryDir === bunBinDir) {
+            return true;
+        }
+    }
+    return false;
+}
+function isInNpmBinDir(binaryPath, npmLibDir) {
+    // Normalize paths first — on Windows, path.dirname preserves forward slashes
+    // but path.join converts to backslashes, causing mismatches without this.
+    const binaryDir = path.dirname(path.normalize(binaryPath));
+    const normalizedLibDir = path.normalize(npmLibDir);
+    // Unix: bins at <prefix>/bin, lib at <prefix>/lib → sibling directories
+    const unixBinDir = path.join(path.dirname(normalizedLibDir), 'bin');
+    // Windows: bins and lib share the same directory
+    return binaryDir === unixBinDir || binaryDir === normalizedLibDir;
+}
+
+//# sourceMappingURL=detectGlobals.js.map

package/dist/util/packageManager/installationInfo/detectGlobals.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/util/packageManager/installationInfo/detectGlobals.ts"],"sourcesContent":["import path from 'node:path'\n\nimport {execa} from 'execa'\nimport which from 'which'\n\nimport {type GlobalInstallation, type LockfileType, type SanityPackage} from './types.js'\n\nconst SANITY_PACKAGES: SanityPackage[] = ['sanity', '@sanity/cli']\n\n/**\n * Tries to parse JSON from command output that may contain non-JSON prefix lines\n * (e.g. npm warnings printed before JSON). Returns null if parsing fails.\n */\nfunction tryParseJson<T>(stdout: string): T | null {\n  // First, try parsing the full output\n  try {\n    return JSON.parse(stdout) as T\n  } catch {\n    // Fall through\n  }\n\n  // Try to find the start of JSON content (first { or [)\n  const jsonStart = stdout.search(/[{[]/)\n  if (jsonStart > 0) {\n    try {\n      return JSON.parse(stdout.slice(jsonStart)) as T\n    } catch {\n      // Fall through\n    }\n  }\n\n  return null\n}\n\ninterface NpmListOutput {\n  dependencies?: Record<\n    string,\n    {\n      resolved?: string\n      version: string\n    }\n  >\n  /** Global lib directory (e.g. /usr/local/lib on Unix). */\n  path?: string\n}\n\ninterface NpmGlobalsResult {\n  globals: GlobalInstallation[]\n  /** npm's global lib directory, used to verify the active binary belongs to npm. */\n  libDir: string | null\n}\n\ninterface PnpmListProject {\n  dependencies?: Record<string, {path?: string; version: string}>\n  path?: string\n}\n\n/**\n * Detects global installations of sanity and \\@sanity/cli across all package managers.\n * Runs queries in parallel for efficiency.\n */\nexport async function detectGlobalInstallations(): Promise<GlobalInstallation[]> {\n  // Query all package managers in parallel\n  const [activeBinaryPath, npmResult, pnpmResult, yarnGlobals, bunGlobals] = await Promise.all([\n    // Find which binary is active in PATH\n    findActiveBinaryPath(),\n    queryNpmGlobals(),\n    queryPnpmGlobals(),\n    queryYarnGlobals(),\n    queryBunGlobals(),\n  ])\n\n  const allGlobals = [...npmResult.globals, ...pnpmResult.globals, ...yarnGlobals, ...bunGlobals]\n\n  // Mark which installation is active\n  return markActiveInstallation(allGlobals, activeBinaryPath, npmResult.libDir, pnpmResult.binDir)\n}\n\nasync function findActiveBinaryPath(): Promise<string | null> {\n  try {\n    return await which('sanity')\n  } catch {\n    return null\n  }\n}\n\nasync function queryNpmGlobals(): Promise<NpmGlobalsResult> {\n  try {\n    const result = await execa('npm', ['list', '-g', '--depth=0', '--json'], {\n      reject: false,\n      timeout: 10_000,\n    })\n\n    if (!result.stdout) {\n      return {globals: [], libDir: null}\n    }\n\n    const output = tryParseJson<NpmListOutput>(result.stdout)\n    if (!output) {\n      return {globals: [], libDir: null}\n    }\n\n    const globals: GlobalInstallation[] = []\n\n    for (const pkg of SANITY_PACKAGES) {\n      const dep = output.dependencies?.[pkg]\n      if (dep) {\n        globals.push({\n          isActive: false, // Will be set later\n          packageManager: 'npm',\n          packageName: pkg,\n          // npm's `resolved` is a tarball URL, not a filesystem path.\n          path: null,\n          version: dep.version,\n        })\n      }\n    }\n\n    return {globals, libDir: output.path ?? null}\n  } catch {\n    return {globals: [], libDir: null}\n  }\n}\n\ninterface PnpmGlobalsResult {\n  /** pnpm's global bin directory, used to verify the active binary belongs to pnpm. */\n  binDir: string | null\n  globals: GlobalInstallation[]\n}\n\nasync function queryPnpmGlobals(): Promise<PnpmGlobalsResult> {\n  try {\n    // Query pnpm global bin dir and global packages in parallel\n    const [binResult, listResult] = await Promise.all([\n      execa('pnpm', ['bin', '-g'], {reject: false, timeout: 10_000}),\n      execa('pnpm', ['list', '-g', '--depth=0', '--json'], {reject: false, timeout: 10_000}),\n    ])\n\n    const binDir = binResult.stdout?.trim() || null\n\n    if (!listResult.stdout) {\n      return {binDir, globals: []}\n    }\n\n    const output = tryParseJson<PnpmListProject[]>(listResult.stdout)\n    if (!output) {\n      return {binDir, globals: []}\n    }\n\n    const globals: GlobalInstallation[] = []\n\n    for (const project of output) {\n      if (!project.dependencies) continue\n      for (const pkg of SANITY_PACKAGES) {\n        const dep = project.dependencies[pkg]\n        if (dep) {\n          globals.push({\n            isActive: false,\n            packageManager: 'pnpm',\n            packageName: pkg,\n            path: dep.path || null,\n            version: dep.version,\n          })\n        }\n      }\n    }\n\n    return {binDir, globals}\n  } catch {\n    return {binDir: null, globals: []}\n  }\n}\n\nasync function queryYarnGlobals(): Promise<GlobalInstallation[]> {\n  // `yarn global list` only works with Yarn Classic (v1).\n  // Yarn Berry (v2+) removed global installs entirely — the command errors or\n  // produces no output. Because `reject: false` is set, the call returns\n  // empty stdout and we gracefully return []. This means Yarn Berry global\n  // installations (if any exist via third-party plugins) are invisible here.\n  // A version check (via getYarnMajorVersion) could skip the call entirely,\n  // but since it already degrades gracefully the cost is just a failed exec.\n  try {\n    const result = await execa('yarn', ['global', 'list', '--json'], {\n      reject: false,\n      timeout: 10_000,\n    })\n\n    if (!result.stdout) {\n      return []\n    }\n\n    // Yarn outputs NDJSON - one JSON object per line\n    const globals: GlobalInstallation[] = []\n    const lines = result.stdout.split('\\n').filter(Boolean)\n\n    for (const line of lines) {\n      try {\n        const entry = JSON.parse(line) as {data: string; type: string}\n        if (entry.type === 'info' && entry.data) {\n          // Yarn classic emits: \"\\\"sanity@3.67.0\\\" has binaries:\\n  - sanity\"\n          // Extract the quoted \"package@version\" portion.\n          for (const pkg of SANITY_PACKAGES) {\n            const prefix = `\"${pkg}@`\n            if (entry.data.startsWith(prefix)) {\n              const closingQuote = entry.data.indexOf('\"', prefix.length)\n              if (closingQuote !== -1) {\n                globals.push({\n                  isActive: false,\n                  packageManager: 'yarn',\n                  packageName: pkg,\n                  path: null,\n                  version: entry.data.slice(prefix.length, closingQuote),\n                })\n              }\n            }\n          }\n        }\n      } catch {\n        // Skip malformed lines\n      }\n    }\n\n    return globals\n  } catch {\n    return []\n  }\n}\n\n// As of Bun 1.2, `bun pm ls` does not support --json or -g flags.\n// Skip the subprocess call entirely to avoid wasted latency on every run.\n// Re-enable when bun implements JSON output (see oven-sh/bun#26222).\nasync function queryBunGlobals(): Promise<GlobalInstallation[]> {\n  return []\n}\n\nfunction markActiveInstallation(\n  globals: GlobalInstallation[],\n  activeBinaryPath: string | null,\n  npmLibDir: string | null,\n  pnpmBinDir: string | null,\n): GlobalInstallation[] {\n  if (!activeBinaryPath) {\n    return globals\n  }\n\n  // Determine which package manager the active binary belongs to.\n  // For npm and pnpm, we verify against their actual reported directories\n  // rather than relying on path substring matching which breaks with\n  // custom install locations.\n  let activePackageManager: LockfileType | null = null\n\n  // bun — check default ~/.bun/ path, then fall back to BUN_INSTALL env var\n  // for users with a custom installation directory.\n  if (isInBunDir(activeBinaryPath)) {\n    activePackageManager = 'bun'\n  }\n  // pnpm — verify against pnpm's actual global bin dir from `pnpm bin -g`.\n  // This works regardless of PNPM_HOME configuration.\n  else if (pnpmBinDir && isInPnpmBinDir(activeBinaryPath, pnpmBinDir)) {\n    activePackageManager = 'pnpm'\n  }\n  // yarn — unlike npm/pnpm, Yarn Classic has no reliable command to query its\n  // global bin directory. `yarn global bin` exists but its output varies by\n  // platform and configuration. Fall back to known path patterns.\n  // TODO: Query `yarn global bin` for more accurate detection, similar to\n  // how pnpm uses `pnpm bin -g`. Custom $YARN_DIR or non-standard install\n  // locations will not be detected by these patterns.\n  else if (\n    activeBinaryPath.includes('/.yarn/') ||\n    activeBinaryPath.includes('\\\\.yarn\\\\') ||\n    activeBinaryPath.includes('/.config/yarn/')\n  ) {\n    activePackageManager = 'yarn'\n  }\n  // npm — verify the binary is actually in npm's global bin directory.\n  // `npm list -g --json` reports a `path` (the global lib dir, e.g. /usr/local/lib).\n  // On Unix, bins are at <prefix>/bin (sibling of lib). On Windows, bins are in\n  // the same directory as lib. When npmLibDir is null (npm didn't report a path),\n  // we can't verify — leave activePackageManager as null rather than guessing,\n  // since incorrectly marking npm as active could misclassify local installs.\n  else if (npmLibDir && isInNpmBinDir(activeBinaryPath, npmLibDir)) {\n    activePackageManager = 'npm'\n  }\n\n  return globals.map((g) => ({\n    ...g,\n    // Mark as active if it's from the detected package manager.\n    // Both `sanity` and `@sanity/cli` provide a `sanity` binary,\n    // so either package from the active pm is considered active.\n    isActive: g.packageManager === activePackageManager,\n  }))\n}\n\n/**\n * Checks whether a binary path is inside pnpm's global bin directory.\n * `pnpm bin -g` returns the directory where global binaries are linked.\n */\nfunction isInPnpmBinDir(binaryPath: string, pnpmBinDir: string): boolean {\n  const binaryDir = path.dirname(path.normalize(binaryPath))\n  return binaryDir === path.normalize(pnpmBinDir)\n}\n\n/**\n * Checks whether a binary path is inside npm's global bin directory.\n * On Unix: lib is at `<prefix>/lib`, bins at `<prefix>/bin` (sibling dirs).\n * On Windows: lib and bins share the same directory.\n */\nfunction isInBunDir(binaryPath: string): boolean {\n  // Default ~/.bun/ location\n  if (binaryPath.includes('/.bun/') || binaryPath.includes('\\\\.bun\\\\')) {\n    return true\n  }\n  // Custom BUN_INSTALL directory (e.g. BUN_INSTALL=/opt/bun)\n  const bunInstall = process.env.BUN_INSTALL\n  if (bunInstall) {\n    const binaryDir = path.dirname(path.normalize(binaryPath))\n    const bunBinDir = path.join(path.normalize(bunInstall), 'bin')\n    if (binaryDir === bunBinDir) {\n      return true\n    }\n  }\n  return false\n}\n\nfunction isInNpmBinDir(binaryPath: string, npmLibDir: string): boolean {\n  // Normalize paths first — on Windows, path.dirname preserves forward slashes\n  // but path.join converts to backslashes, causing mismatches without this.\n  const binaryDir = path.dirname(path.normalize(binaryPath))\n  const normalizedLibDir = path.normalize(npmLibDir)\n  // Unix: bins at <prefix>/bin, lib at <prefix>/lib → sibling directories\n  const unixBinDir = path.join(path.dirname(normalizedLibDir), 'bin')\n  // Windows: bins and lib share the same directory\n  return binaryDir === unixBinDir || binaryDir === normalizedLibDir\n}\n"],"names":["path","execa","which","SANITY_PACKAGES","tryParseJson","stdout","JSON","parse","jsonStart","search","slice","detectGlobalInstallations","activeBinaryPath","npmResult","pnpmResult","yarnGlobals","bunGlobals","Promise","all","findActiveBinaryPath","queryNpmGlobals","queryPnpmGlobals","queryYarnGlobals","queryBunGlobals","allGlobals","globals","markActiveInstallation","libDir","binDir","result","reject","timeout","output","pkg","dep","dependencies","push","isActive","packageManager","packageName","version","binResult","listResult","trim","project","lines","split","filter","Boolean","line","entry","type","data","prefix","startsWith","closingQuote","indexOf","length","npmLibDir","pnpmBinDir","activePackageManager","isInBunDir","isInPnpmBinDir","includes","isInNpmBinDir","map","g","binaryPath","binaryDir","dirname","normalize","bunInstall","process","env","BUN_INSTALL","bunBinDir","join","normalizedLibDir","unixBinDir"],"mappings":"AAAA,OAAOA,UAAU,YAAW;AAE5B,SAAQC,KAAK,QAAO,QAAO;AAC3B,OAAOC,WAAW,QAAO;AAIzB,MAAMC,kBAAmC;IAAC;IAAU;CAAc;AAElE;;;CAGC,GACD,SAASC,aAAgBC,MAAc;IACrC,qCAAqC;IACrC,IAAI;QACF,OAAOC,KAAKC,KAAK,CAACF;IACpB,EAAE,OAAM;IACN,eAAe;IACjB;IAEA,uDAAuD;IACvD,MAAMG,YAAYH,OAAOI,MAAM,CAAC;IAChC,IAAID,YAAY,GAAG;QACjB,IAAI;YACF,OAAOF,KAAKC,KAAK,CAACF,OAAOK,KAAK,CAACF;QACjC,EAAE,OAAM;QACN,eAAe;QACjB;IACF;IAEA,OAAO;AACT;AAyBA;;;CAGC,GACD,OAAO,eAAeG;IACpB,yCAAyC;IACzC,MAAM,CAACC,kBAAkBC,WAAWC,YAAYC,aAAaC,WAAW,GAAG,MAAMC,QAAQC,GAAG,CAAC;QAC3F,sCAAsC;QACtCC;QACAC;QACAC;QACAC;QACAC;KACD;IAED,MAAMC,aAAa;WAAIX,UAAUY,OAAO;WAAKX,WAAWW,OAAO;WAAKV;WAAgBC;KAAW;IAE/F,oCAAoC;IACpC,OAAOU,uBAAuBF,YAAYZ,kBAAkBC,UAAUc,MAAM,EAAEb,WAAWc,MAAM;AACjG;AAEA,eAAeT;IACb,IAAI;QACF,OAAO,MAAMjB,MAAM;IACrB,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,eAAekB;IACb,IAAI;QACF,MAAMS,SAAS,MAAM5B,MAAM,OAAO;YAAC;YAAQ;YAAM;YAAa;SAAS,EAAE;YACvE6B,QAAQ;YACRC,SAAS;QACX;QAEA,IAAI,CAACF,OAAOxB,MAAM,EAAE;YAClB,OAAO;gBAACoB,SAAS,EAAE;gBAAEE,QAAQ;YAAI;QACnC;QAEA,MAAMK,SAAS5B,aAA4ByB,OAAOxB,MAAM;QACxD,IAAI,CAAC2B,QAAQ;YACX,OAAO;gBAACP,SAAS,EAAE;gBAAEE,QAAQ;YAAI;QACnC;QAEA,MAAMF,UAAgC,EAAE;QAExC,KAAK,MAAMQ,OAAO9B,gBAAiB;YACjC,MAAM+B,MAAMF,OAAOG,YAAY,EAAE,CAACF,IAAI;YACtC,IAAIC,KAAK;gBACPT,QAAQW,IAAI,CAAC;oBACXC,UAAU;oBACVC,gBAAgB;oBAChBC,aAAaN;oBACb,4DAA4D;oBAC5DjC,MAAM;oBACNwC,SAASN,IAAIM,OAAO;gBACtB;YACF;QACF;QAEA,OAAO;YAACf;YAASE,QAAQK,OAAOhC,IAAI,IAAI;QAAI;IAC9C,EAAE,OAAM;QACN,OAAO;YAACyB,SAAS,EAAE;YAAEE,QAAQ;QAAI;IACnC;AACF;AAQA,eAAeN;IACb,IAAI;QACF,4DAA4D;QAC5D,MAAM,CAACoB,WAAWC,WAAW,GAAG,MAAMzB,QAAQC,GAAG,CAAC;YAChDjB,MAAM,QAAQ;gBAAC;gBAAO;aAAK,EAAE;gBAAC6B,QAAQ;gBAAOC,SAAS;YAAM;YAC5D9B,MAAM,QAAQ;gBAAC;gBAAQ;gBAAM;gBAAa;aAAS,EAAE;gBAAC6B,QAAQ;gBAAOC,SAAS;YAAM;SACrF;QAED,MAAMH,SAASa,UAAUpC,MAAM,EAAEsC,UAAU;QAE3C,IAAI,CAACD,WAAWrC,MAAM,EAAE;YACtB,OAAO;gBAACuB;gBAAQH,SAAS,EAAE;YAAA;QAC7B;QAEA,MAAMO,SAAS5B,aAAgCsC,WAAWrC,MAAM;QAChE,IAAI,CAAC2B,QAAQ;YACX,OAAO;gBAACJ;gBAAQH,SAAS,EAAE;YAAA;QAC7B;QAEA,MAAMA,UAAgC,EAAE;QAExC,KAAK,MAAMmB,WAAWZ,OAAQ;YAC5B,IAAI,CAACY,QAAQT,YAAY,EAAE;YAC3B,KAAK,MAAMF,OAAO9B,gBAAiB;gBACjC,MAAM+B,MAAMU,QAAQT,YAAY,CAACF,IAAI;gBACrC,IAAIC,KAAK;oBACPT,QAAQW,IAAI,CAAC;wBACXC,UAAU;wBACVC,gBAAgB;wBAChBC,aAAaN;wBACbjC,MAAMkC,IAAIlC,IAAI,IAAI;wBAClBwC,SAASN,IAAIM,OAAO;oBACtB;gBACF;YACF;QACF;QAEA,OAAO;YAACZ;YAAQH;QAAO;IACzB,EAAE,OAAM;QACN,OAAO;YAACG,QAAQ;YAAMH,SAAS,EAAE;QAAA;IACnC;AACF;AAEA,eAAeH;IACb,wDAAwD;IACxD,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI;QACF,MAAMO,SAAS,MAAM5B,MAAM,QAAQ;YAAC;YAAU;YAAQ;SAAS,EAAE;YAC/D6B,QAAQ;YACRC,SAAS;QACX;QAEA,IAAI,CAACF,OAAOxB,MAAM,EAAE;YAClB,OAAO,EAAE;QACX;QAEA,iDAAiD;QACjD,MAAMoB,UAAgC,EAAE;QACxC,MAAMoB,QAAQhB,OAAOxB,MAAM,CAACyC,KAAK,CAAC,MAAMC,MAAM,CAACC;QAE/C,KAAK,MAAMC,QAAQJ,MAAO;YACxB,IAAI;gBACF,MAAMK,QAAQ5C,KAAKC,KAAK,CAAC0C;gBACzB,IAAIC,MAAMC,IAAI,KAAK,UAAUD,MAAME,IAAI,EAAE;oBACvC,oEAAoE;oBACpE,gDAAgD;oBAChD,KAAK,MAAMnB,OAAO9B,gBAAiB;wBACjC,MAAMkD,SAAS,CAAC,CAAC,EAAEpB,IAAI,CAAC,CAAC;wBACzB,IAAIiB,MAAME,IAAI,CAACE,UAAU,CAACD,SAAS;4BACjC,MAAME,eAAeL,MAAME,IAAI,CAACI,OAAO,CAAC,KAAKH,OAAOI,MAAM;4BAC1D,IAAIF,iBAAiB,CAAC,GAAG;gCACvB9B,QAAQW,IAAI,CAAC;oCACXC,UAAU;oCACVC,gBAAgB;oCAChBC,aAAaN;oCACbjC,MAAM;oCACNwC,SAASU,MAAME,IAAI,CAAC1C,KAAK,CAAC2C,OAAOI,MAAM,EAAEF;gCAC3C;4BACF;wBACF;oBACF;gBACF;YACF,EAAE,OAAM;YACN,uBAAuB;YACzB;QACF;QAEA,OAAO9B;IACT,EAAE,OAAM;QACN,OAAO,EAAE;IACX;AACF;AAEA,kEAAkE;AAClE,0EAA0E;AAC1E,qEAAqE;AACrE,eAAeF;IACb,OAAO,EAAE;AACX;AAEA,SAASG,uBACPD,OAA6B,EAC7Bb,gBAA+B,EAC/B8C,SAAwB,EACxBC,UAAyB;IAEzB,IAAI,CAAC/C,kBAAkB;QACrB,OAAOa;IACT;IAEA,gEAAgE;IAChE,wEAAwE;IACxE,mEAAmE;IACnE,4BAA4B;IAC5B,IAAImC,uBAA4C;IAEhD,0EAA0E;IAC1E,kDAAkD;IAClD,IAAIC,WAAWjD,mBAAmB;QAChCgD,uBAAuB;IACzB,OAGK,IAAID,cAAcG,eAAelD,kBAAkB+C,aAAa;QACnEC,uBAAuB;IACzB,OAOK,IACHhD,iBAAiBmD,QAAQ,CAAC,cAC1BnD,iBAAiBmD,QAAQ,CAAC,gBAC1BnD,iBAAiBmD,QAAQ,CAAC,mBAC1B;QACAH,uBAAuB;IACzB,OAOK,IAAIF,aAAaM,cAAcpD,kBAAkB8C,YAAY;QAChEE,uBAAuB;IACzB;IAEA,OAAOnC,QAAQwC,GAAG,CAAC,CAACC,IAAO,CAAA;YACzB,GAAGA,CAAC;YACJ,4DAA4D;YAC5D,6DAA6D;YAC7D,6DAA6D;YAC7D7B,UAAU6B,EAAE5B,cAAc,KAAKsB;QACjC,CAAA;AACF;AAEA;;;CAGC,GACD,SAASE,eAAeK,UAAkB,EAAER,UAAkB;IAC5D,MAAMS,YAAYpE,KAAKqE,OAAO,CAACrE,KAAKsE,SAAS,CAACH;IAC9C,OAAOC,cAAcpE,KAAKsE,SAAS,CAACX;AACtC;AAEA;;;;CAIC,GACD,SAASE,WAAWM,UAAkB;IACpC,2BAA2B;IAC3B,IAAIA,WAAWJ,QAAQ,CAAC,aAAaI,WAAWJ,QAAQ,CAAC,aAAa;QACpE,OAAO;IACT;IACA,2DAA2D;IAC3D,MAAMQ,aAAaC,QAAQC,GAAG,CAACC,WAAW;IAC1C,IAAIH,YAAY;QACd,MAAMH,YAAYpE,KAAKqE,OAAO,CAACrE,KAAKsE,SAAS,CAACH;QAC9C,MAAMQ,YAAY3E,KAAK4E,IAAI,CAAC5E,KAAKsE,SAAS,CAACC,aAAa;QACxD,IAAIH,cAAcO,WAAW;YAC3B,OAAO;QACT;IACF;IACA,OAAO;AACT;AAEA,SAASX,cAAcG,UAAkB,EAAET,SAAiB;IAC1D,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAMU,YAAYpE,KAAKqE,OAAO,CAACrE,KAAKsE,SAAS,CAACH;IAC9C,MAAMU,mBAAmB7E,KAAKsE,SAAS,CAACZ;IACxC,wEAAwE;IACxE,MAAMoB,aAAa9E,KAAK4E,IAAI,CAAC5E,KAAKqE,OAAO,CAACQ,mBAAmB;IAC7D,iDAAiD;IACjD,OAAOT,cAAcU,cAAcV,cAAcS;AACnD"}