@sanity/cli 6.3.1 → 6.4.0

package/dist/util/telemetry/createTelemetryStore.js

@@ -21,6 +21,8 @@ import { telemetryStoreDebug } from './telemetryStoreDebug.js';
     telemetryStoreDebug('Creating telemetry store with sessionId: %s', sessionId);
     let cachedConsent = null;
     let filePath = null;
+    let initComplete = false;
+    const eventBuffer = [];
     const initializeConsent = async ()=>{
         if (cachedConsent) return;
         try {
@@ -48,34 +50,37 @@ import { telemetryStoreDebug } from './telemetryStoreDebug.js';
             filePath = null;
         }
     };
-    const emit = (event)=>{
-        if (!cachedConsent || cachedConsent.status !== 'granted') {
-            if (cachedConsent) {
-                telemetryStoreDebug('Cached consent not granted (%s), skipping event: %s', cachedConsent.status, event.type);
-            } else {
-                telemetryStoreDebug('Consent not resolved, skipping event: %s', event.type);
-            }
-            return;
-        }
+    const writeEvent = (event)=>{
         if (!filePath) {
-            telemetryStoreDebug('File path not initialized, skipping event: %s', event.type);
+            telemetryStoreDebug('No file path, skipping event: %s', event.type);
             return;
         }
         telemetryStoreDebug('Emitting event: %s', event.type);
         try {
-            const eventLine = JSON.stringify(event) + '\n';
             // We use synchronous file writes to ensure telemetry events are captured even when
             // the process exits abruptly (process.exit, uncaught exceptions, SIGTERM, etc.).
             // The performance impact is probably negligible and is worth the trade-off
             // for 100% reliability. Async writes would be lost when the event loop
             // shuts down during process exit.
-            appendFileSync(filePath, eventLine, 'utf8');
+            appendFileSync(filePath, JSON.stringify(event) + '\n', 'utf8');
             telemetryStoreDebug('Successfully wrote event to file: %s', filePath);
         } catch (error) {
             telemetryStoreDebug('Failed to write telemetry event: %o', error);
         // Silent failure - don't break CLI functionality
         }
     };
+    const emit = (event)=>{
+        if (!initComplete) {
+            telemetryStoreDebug('Init pending, buffering event: %s', event.type);
+            eventBuffer.push(event);
+            return;
+        }
+        if (!cachedConsent || cachedConsent.status !== 'granted') {
+            telemetryStoreDebug('Consent not granted (%s), skipping event: %s', cachedConsent?.status ?? 'unresolved', event.type);
+            return;
+        }
+        writeEvent(event);
+    };
     const logger = createLogger(sessionId, emit);
     // Initialize both consent and file path concurrently
     Promise.allSettled([
@@ -88,6 +93,16 @@ import { telemetryStoreDebug } from './telemetryStoreDebug.js';
                 telemetryStoreDebug('Error initializing %s: %o', type, result.reason);
             }
         }
+        initComplete = true;
+        if (cachedConsent?.status === 'granted' && filePath) {
+            telemetryStoreDebug('Flushing %d buffered event(s)', eventBuffer.length);
+            for (const event of eventBuffer){
+                writeEvent(event);
+            }
+        } else {
+            telemetryStoreDebug('Discarding %d buffered event(s), consent: %s', eventBuffer.length, cachedConsent?.status ?? 'unresolved');
+        }
+        eventBuffer.length = 0;
     });
     return logger;
 }

package/dist/util/telemetry/createTelemetryStore.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/util/telemetry/createTelemetryStore.ts"],"sourcesContent":["import {appendFileSync} from 'node:fs'\nimport {mkdir} from 'node:fs/promises'\nimport {dirname} from 'node:path'\n\nimport {\n  type CLITelemetryStore,\n  type ConsentInformation,\n  type TelemetryUserProperties,\n} from '@sanity/cli-core'\nimport {type TelemetryEvent} from '@sanity/telemetry'\n\nimport {generateTelemetryFilePath} from './generateTelemetryFilePath.js'\nimport {createLogger} from './logger.js'\nimport {telemetryStoreDebug} from './telemetryStoreDebug.js'\n\n/**\n * FILE MANAGEMENT STRATEGY:\n *\n * The telemetry system uses a multi-file approach to handle concurrent CLI processes:\n *\n * 1. WRITING (per session):\n *    - Each CLI session gets a unique file: telemetry-\\{hash\\}-\\{env\\}-\\{sessionId\\}.ndjson\n *    - Prevents write conflicts when multiple CLI commands run simultaneously\n *    - Events are written using an RxJS queue for ordered processing with retry logic\n *\n * 2. FLUSHING (aggregate all sessions):\n *    - findTelemetryFiles() discovers ALL telemetry files for user/environment\n *    - Events are collected from all session files and sent as a batch\n *    - Files are deleted after successful transmission\n *\n * 3. CLEANUP (background maintenance):\n *    - cleanupOldTelemetryFiles() removes stale files older than 7 days\n *    - Prevents disk space accumulation from abandoned sessions\n */\n\ninterface CreateTelemetryStoreOptions {\n  resolveConsent: () => Promise<ConsentInformation>\n}\n\n/**\n * Creates a file-based telemetry store with cached consent and reliable synchronous I/O.\n *\n * Key optimizations:\n * - Consent resolved once at creation and cached (vs checking on every emit)\n * - File path generated and directory created once during initialization\n * - Synchronous file writes to ensure events are captured even during process exit\n *\n * @param sessionId - Unique session identifier for file isolation\n * @param options - Configuration options\n * @returns TelemetryStore instance compatible with the telemetry interface\n *\n * @internal\n */\nexport function createTelemetryStore(\n  sessionId: string,\n  options: CreateTelemetryStoreOptions,\n): CLITelemetryStore {\n  telemetryStoreDebug('Creating telemetry store with sessionId: %s', sessionId)\n\n  let cachedConsent: ConsentInformation | null = null\n  let filePath: string | null = null\n\n  const initializeConsent = async () => {\n    if (cachedConsent) return\n\n    try {\n      cachedConsent = await options.resolveConsent()\n      telemetryStoreDebug('Cached consent status: %s', cachedConsent.status)\n    } catch (error) {\n      telemetryStoreDebug('Failed to initialize consent, treating as undetermined: %o', error)\n      cachedConsent = {reason: 'fetchError', status: 'undetermined'}\n    }\n  }\n\n  const initializeFilePath = async () => {\n    if (filePath) return\n\n    try {\n      filePath = await generateTelemetryFilePath(sessionId)\n      telemetryStoreDebug('Generated file path: %s', filePath)\n\n      await mkdir(dirname(filePath), {recursive: true})\n      telemetryStoreDebug('Created directory structure for: %s', filePath)\n    } catch (error) {\n      telemetryStoreDebug('Failed to initialize file path: %o', error)\n      filePath = null\n    }\n  }\n\n  const emit = (event: TelemetryEvent) => {\n    if (!cachedConsent || cachedConsent.status !== 'granted') {\n      if (cachedConsent) {\n        telemetryStoreDebug(\n          'Cached consent not granted (%s), skipping event: %s',\n          cachedConsent.status,\n          event.type,\n        )\n      } else {\n        telemetryStoreDebug('Consent not resolved, skipping event: %s', event.type)\n      }\n      return\n    }\n\n    if (!filePath) {\n      telemetryStoreDebug('File path not initialized, skipping event: %s', event.type)\n      return\n    }\n\n    telemetryStoreDebug('Emitting event: %s', event.type)\n\n    try {\n      const eventLine = JSON.stringify(event) + '\\n'\n\n      // We use synchronous file writes to ensure telemetry events are captured even when\n      // the process exits abruptly (process.exit, uncaught exceptions, SIGTERM, etc.).\n      // The performance impact is probably negligible and is worth the trade-off\n      // for 100% reliability. Async writes would be lost when the event loop\n      // shuts down during process exit.\n      appendFileSync(filePath, eventLine, 'utf8')\n      telemetryStoreDebug('Successfully wrote event to file: %s', filePath)\n    } catch (error) {\n      telemetryStoreDebug('Failed to write telemetry event: %o', error)\n      // Silent failure - don't break CLI functionality\n    }\n  }\n\n  const logger = createLogger<TelemetryUserProperties>(sessionId, emit)\n\n  // Initialize both consent and file path concurrently\n  Promise.allSettled([initializeConsent(), initializeFilePath()]).then((results) => {\n    for (const [index, result] of results.entries()) {\n      if (result.status === 'rejected') {\n        const type = index === 0 ? 'consent' : 'file path'\n        telemetryStoreDebug('Error initializing %s: %o', type, result.reason)\n      }\n    }\n  })\n\n  return logger\n}\n"],"names":["appendFileSync","mkdir","dirname","generateTelemetryFilePath","createLogger","telemetryStoreDebug","createTelemetryStore","sessionId","options","cachedConsent","filePath","initializeConsent","resolveConsent","status","error","reason","initializeFilePath","recursive","emit","event","type","eventLine","JSON","stringify","logger","Promise","allSettled","then","results","index","result","entries"],"mappings":"AAAA,SAAQA,cAAc,QAAO,UAAS;AACtC,SAAQC,KAAK,QAAO,mBAAkB;AACtC,SAAQC,OAAO,QAAO,YAAW;AASjC,SAAQC,yBAAyB,QAAO,iCAAgC;AACxE,SAAQC,YAAY,QAAO,cAAa;AACxC,SAAQC,mBAAmB,QAAO,2BAA0B;AA0B5D;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC,qBACdC,SAAiB,EACjBC,OAAoC;IAEpCH,oBAAoB,+CAA+CE;IAEnE,IAAIE,gBAA2C;IAC/C,IAAIC,WAA0B;IAE9B,MAAMC,oBAAoB;QACxB,IAAIF,eAAe;QAEnB,IAAI;YACFA,gBAAgB,MAAMD,QAAQI,cAAc;YAC5CP,oBAAoB,6BAA6BI,cAAcI,MAAM;QACvE,EAAE,OAAOC,OAAO;YACdT,oBAAoB,8DAA8DS;YAClFL,gBAAgB;gBAACM,QAAQ;gBAAcF,QAAQ;YAAc;QAC/D;IACF;IAEA,MAAMG,qBAAqB;QACzB,IAAIN,UAAU;QAEd,IAAI;YACFA,WAAW,MAAMP,0BAA0BI;YAC3CF,oBAAoB,2BAA2BK;YAE/C,MAAMT,MAAMC,QAAQQ,WAAW;gBAACO,WAAW;YAAI;YAC/CZ,oBAAoB,uCAAuCK;QAC7D,EAAE,OAAOI,OAAO;YACdT,oBAAoB,sCAAsCS;YAC1DJ,WAAW;QACb;IACF;IAEA,MAAMQ,OAAO,CAACC;QACZ,IAAI,CAACV,iBAAiBA,cAAcI,MAAM,KAAK,WAAW;YACxD,IAAIJ,eAAe;gBACjBJ,oBACE,uDACAI,cAAcI,MAAM,EACpBM,MAAMC,IAAI;YAEd,OAAO;gBACLf,oBAAoB,4CAA4Cc,MAAMC,IAAI;YAC5E;YACA;QACF;QAEA,IAAI,CAACV,UAAU;YACbL,oBAAoB,iDAAiDc,MAAMC,IAAI;YAC/E;QACF;QAEAf,oBAAoB,sBAAsBc,MAAMC,IAAI;QAEpD,IAAI;YACF,MAAMC,YAAYC,KAAKC,SAAS,CAACJ,SAAS;YAE1C,mFAAmF;YACnF,iFAAiF;YACjF,2EAA2E;YAC3E,uEAAuE;YACvE,kCAAkC;YAClCnB,eAAeU,UAAUW,WAAW;YACpChB,oBAAoB,wCAAwCK;QAC9D,EAAE,OAAOI,OAAO;YACdT,oBAAoB,uCAAuCS;QAC3D,iDAAiD;QACnD;IACF;IAEA,MAAMU,SAASpB,aAAsCG,WAAWW;IAEhE,qDAAqD;IACrDO,QAAQC,UAAU,CAAC;QAACf;QAAqBK;KAAqB,EAAEW,IAAI,CAAC,CAACC;QACpE,KAAK,MAAM,CAACC,OAAOC,OAAO,IAAIF,QAAQG,OAAO,GAAI;YAC/C,IAAID,OAAOjB,MAAM,KAAK,YAAY;gBAChC,MAAMO,OAAOS,UAAU,IAAI,YAAY;gBACvCxB,oBAAoB,6BAA6Be,MAAMU,OAAOf,MAAM;YACtE;QACF;IACF;IAEA,OAAOS;AACT"}
+{"version":3,"sources":["../../../src/util/telemetry/createTelemetryStore.ts"],"sourcesContent":["import {appendFileSync} from 'node:fs'\nimport {mkdir} from 'node:fs/promises'\nimport {dirname} from 'node:path'\n\nimport {\n  type CLITelemetryStore,\n  type ConsentInformation,\n  type TelemetryUserProperties,\n} from '@sanity/cli-core'\nimport {type TelemetryEvent} from '@sanity/telemetry'\n\nimport {generateTelemetryFilePath} from './generateTelemetryFilePath.js'\nimport {createLogger} from './logger.js'\nimport {telemetryStoreDebug} from './telemetryStoreDebug.js'\n\n/**\n * FILE MANAGEMENT STRATEGY:\n *\n * The telemetry system uses a multi-file approach to handle concurrent CLI processes:\n *\n * 1. WRITING (per session):\n *    - Each CLI session gets a unique file: telemetry-\\{hash\\}-\\{env\\}-\\{sessionId\\}.ndjson\n *    - Prevents write conflicts when multiple CLI commands run simultaneously\n *    - Events are written using an RxJS queue for ordered processing with retry logic\n *\n * 2. FLUSHING (aggregate all sessions):\n *    - findTelemetryFiles() discovers ALL telemetry files for user/environment\n *    - Events are collected from all session files and sent as a batch\n *    - Files are deleted after successful transmission\n *\n * 3. CLEANUP (background maintenance):\n *    - cleanupOldTelemetryFiles() removes stale files older than 7 days\n *    - Prevents disk space accumulation from abandoned sessions\n */\n\ninterface CreateTelemetryStoreOptions {\n  resolveConsent: () => Promise<ConsentInformation>\n}\n\n/**\n * Creates a file-based telemetry store with cached consent and reliable synchronous I/O.\n *\n * Key optimizations:\n * - Consent resolved once at creation and cached (vs checking on every emit)\n * - File path generated and directory created once during initialization\n * - Synchronous file writes to ensure events are captured even during process exit\n *\n * @param sessionId - Unique session identifier for file isolation\n * @param options - Configuration options\n * @returns TelemetryStore instance compatible with the telemetry interface\n *\n * @internal\n */\nexport function createTelemetryStore(\n  sessionId: string,\n  options: CreateTelemetryStoreOptions,\n): CLITelemetryStore {\n  telemetryStoreDebug('Creating telemetry store with sessionId: %s', sessionId)\n\n  let cachedConsent: ConsentInformation | null = null\n  let filePath: string | null = null\n  let initComplete = false\n  const eventBuffer: TelemetryEvent[] = []\n\n  const initializeConsent = async () => {\n    if (cachedConsent) return\n\n    try {\n      cachedConsent = await options.resolveConsent()\n      telemetryStoreDebug('Cached consent status: %s', cachedConsent.status)\n    } catch (error) {\n      telemetryStoreDebug('Failed to initialize consent, treating as undetermined: %o', error)\n      cachedConsent = {reason: 'fetchError', status: 'undetermined'}\n    }\n  }\n\n  const initializeFilePath = async () => {\n    if (filePath) return\n\n    try {\n      filePath = await generateTelemetryFilePath(sessionId)\n      telemetryStoreDebug('Generated file path: %s', filePath)\n\n      await mkdir(dirname(filePath), {recursive: true})\n      telemetryStoreDebug('Created directory structure for: %s', filePath)\n    } catch (error) {\n      telemetryStoreDebug('Failed to initialize file path: %o', error)\n      filePath = null\n    }\n  }\n\n  const writeEvent = (event: TelemetryEvent) => {\n    if (!filePath) {\n      telemetryStoreDebug('No file path, skipping event: %s', event.type)\n      return\n    }\n\n    telemetryStoreDebug('Emitting event: %s', event.type)\n\n    try {\n      // We use synchronous file writes to ensure telemetry events are captured even when\n      // the process exits abruptly (process.exit, uncaught exceptions, SIGTERM, etc.).\n      // The performance impact is probably negligible and is worth the trade-off\n      // for 100% reliability. Async writes would be lost when the event loop\n      // shuts down during process exit.\n      appendFileSync(filePath, JSON.stringify(event) + '\\n', 'utf8')\n      telemetryStoreDebug('Successfully wrote event to file: %s', filePath)\n    } catch (error) {\n      telemetryStoreDebug('Failed to write telemetry event: %o', error)\n      // Silent failure - don't break CLI functionality\n    }\n  }\n\n  const emit = (event: TelemetryEvent) => {\n    if (!initComplete) {\n      telemetryStoreDebug('Init pending, buffering event: %s', event.type)\n      eventBuffer.push(event)\n      return\n    }\n\n    if (!cachedConsent || cachedConsent.status !== 'granted') {\n      telemetryStoreDebug(\n        'Consent not granted (%s), skipping event: %s',\n        cachedConsent?.status ?? 'unresolved',\n        event.type,\n      )\n      return\n    }\n\n    writeEvent(event)\n  }\n\n  const logger = createLogger<TelemetryUserProperties>(sessionId, emit)\n\n  // Initialize both consent and file path concurrently\n  Promise.allSettled([initializeConsent(), initializeFilePath()]).then((results) => {\n    for (const [index, result] of results.entries()) {\n      if (result.status === 'rejected') {\n        const type = index === 0 ? 'consent' : 'file path'\n        telemetryStoreDebug('Error initializing %s: %o', type, result.reason)\n      }\n    }\n\n    initComplete = true\n\n    if (cachedConsent?.status === 'granted' && filePath) {\n      telemetryStoreDebug('Flushing %d buffered event(s)', eventBuffer.length)\n      for (const event of eventBuffer) {\n        writeEvent(event)\n      }\n    } else {\n      telemetryStoreDebug(\n        'Discarding %d buffered event(s), consent: %s',\n        eventBuffer.length,\n        cachedConsent?.status ?? 'unresolved',\n      )\n    }\n    eventBuffer.length = 0\n  })\n\n  return logger\n}\n"],"names":["appendFileSync","mkdir","dirname","generateTelemetryFilePath","createLogger","telemetryStoreDebug","createTelemetryStore","sessionId","options","cachedConsent","filePath","initComplete","eventBuffer","initializeConsent","resolveConsent","status","error","reason","initializeFilePath","recursive","writeEvent","event","type","JSON","stringify","emit","push","logger","Promise","allSettled","then","results","index","result","entries","length"],"mappings":"AAAA,SAAQA,cAAc,QAAO,UAAS;AACtC,SAAQC,KAAK,QAAO,mBAAkB;AACtC,SAAQC,OAAO,QAAO,YAAW;AASjC,SAAQC,yBAAyB,QAAO,iCAAgC;AACxE,SAAQC,YAAY,QAAO,cAAa;AACxC,SAAQC,mBAAmB,QAAO,2BAA0B;AA0B5D;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC,qBACdC,SAAiB,EACjBC,OAAoC;IAEpCH,oBAAoB,+CAA+CE;IAEnE,IAAIE,gBAA2C;IAC/C,IAAIC,WAA0B;IAC9B,IAAIC,eAAe;IACnB,MAAMC,cAAgC,EAAE;IAExC,MAAMC,oBAAoB;QACxB,IAAIJ,eAAe;QAEnB,IAAI;YACFA,gBAAgB,MAAMD,QAAQM,cAAc;YAC5CT,oBAAoB,6BAA6BI,cAAcM,MAAM;QACvE,EAAE,OAAOC,OAAO;YACdX,oBAAoB,8DAA8DW;YAClFP,gBAAgB;gBAACQ,QAAQ;gBAAcF,QAAQ;YAAc;QAC/D;IACF;IAEA,MAAMG,qBAAqB;QACzB,IAAIR,UAAU;QAEd,IAAI;YACFA,WAAW,MAAMP,0BAA0BI;YAC3CF,oBAAoB,2BAA2BK;YAE/C,MAAMT,MAAMC,QAAQQ,WAAW;gBAACS,WAAW;YAAI;YAC/Cd,oBAAoB,uCAAuCK;QAC7D,EAAE,OAAOM,OAAO;YACdX,oBAAoB,sCAAsCW;YAC1DN,WAAW;QACb;IACF;IAEA,MAAMU,aAAa,CAACC;QAClB,IAAI,CAACX,UAAU;YACbL,oBAAoB,oCAAoCgB,MAAMC,IAAI;YAClE;QACF;QAEAjB,oBAAoB,sBAAsBgB,MAAMC,IAAI;QAEpD,IAAI;YACF,mFAAmF;YACnF,iFAAiF;YACjF,2EAA2E;YAC3E,uEAAuE;YACvE,kCAAkC;YAClCtB,eAAeU,UAAUa,KAAKC,SAAS,CAACH,SAAS,MAAM;YACvDhB,oBAAoB,wCAAwCK;QAC9D,EAAE,OAAOM,OAAO;YACdX,oBAAoB,uCAAuCW;QAC3D,iDAAiD;QACnD;IACF;IAEA,MAAMS,OAAO,CAACJ;QACZ,IAAI,CAACV,cAAc;YACjBN,oBAAoB,qCAAqCgB,MAAMC,IAAI;YACnEV,YAAYc,IAAI,CAACL;YACjB;QACF;QAEA,IAAI,CAACZ,iBAAiBA,cAAcM,MAAM,KAAK,WAAW;YACxDV,oBACE,gDACAI,eAAeM,UAAU,cACzBM,MAAMC,IAAI;YAEZ;QACF;QAEAF,WAAWC;IACb;IAEA,MAAMM,SAASvB,aAAsCG,WAAWkB;IAEhE,qDAAqD;IACrDG,QAAQC,UAAU,CAAC;QAAChB;QAAqBK;KAAqB,EAAEY,IAAI,CAAC,CAACC;QACpE,KAAK,MAAM,CAACC,OAAOC,OAAO,IAAIF,QAAQG,OAAO,GAAI;YAC/C,IAAID,OAAOlB,MAAM,KAAK,YAAY;gBAChC,MAAMO,OAAOU,UAAU,IAAI,YAAY;gBACvC3B,oBAAoB,6BAA6BiB,MAAMW,OAAOhB,MAAM;YACtE;QACF;QAEAN,eAAe;QAEf,IAAIF,eAAeM,WAAW,aAAaL,UAAU;YACnDL,oBAAoB,iCAAiCO,YAAYuB,MAAM;YACvE,KAAK,MAAMd,SAAST,YAAa;gBAC/BQ,WAAWC;YACb;QACF,OAAO;YACLhB,oBACE,gDACAO,YAAYuB,MAAM,EAClB1B,eAAeM,UAAU;QAE7B;QACAH,YAAYuB,MAAM,GAAG;IACvB;IAEA,OAAOR;AACT"}

package/dist/util/update/fetchUpdateInfo.js

@@ -0,0 +1,40 @@
+import { getUserConfig, subdebug } from '@sanity/cli-core';
+import { getLatestVersion } from 'get-latest-version';
+import { promiseRaceWithTimeout } from '../promiseRaceWithTimeout.js';
+import { resolveUpdateTarget } from './resolveUpdateTarget.js';
+const debug = subdebug('updateChecker');
+const FETCH_TIMEOUT = 15_000;
+/**
+ * Fetch the latest version of the update target package and write it to the config cache.
+ * Designed to run in a detached child process so it never blocks the main CLI.
+ *
+ * When `packageOverride` is given, the cwd-based resolver is skipped — used by
+ * the main process to pin the worker to the same package it already resolved
+ * (e.g. via a runner's symlinked install) so cache reads and writes align.
+ */ export async function fetchUpdateInfo(cwd, cliVersion, packageOverride) {
+    const { packageName } = packageOverride ? {
+        packageName: packageOverride
+    } : await resolveUpdateTarget(cwd, cliVersion);
+    debug('Worker: fetching latest version of %s', packageName);
+    let latestVersion;
+    try {
+        latestVersion = await promiseRaceWithTimeout(getLatestVersion(packageName), FETCH_TIMEOUT);
+    } catch (err) {
+        debug('Worker: failed to fetch latest version of %s from npm: %s', packageName, err instanceof Error ? err.message : String(err));
+        throw err;
+    }
+    if (latestVersion === null) {
+        debug('Worker: fetch timed out after %dms', FETCH_TIMEOUT);
+        return;
+    }
+    debug('Worker: latest %s version is %s', packageName, latestVersion);
+    const store = getUserConfig();
+    const cacheKey = `latestVersion:${packageName}`;
+    store.set(cacheKey, {
+        updatedAt: Date.now(),
+        value: latestVersion
+    });
+    debug('Worker: cached result to %s', cacheKey);
+}
+
+//# sourceMappingURL=fetchUpdateInfo.js.map

package/dist/util/update/fetchUpdateInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/util/update/fetchUpdateInfo.ts"],"sourcesContent":["import {getUserConfig, subdebug} from '@sanity/cli-core'\nimport {getLatestVersion} from 'get-latest-version'\n\nimport {type SanityPackage} from '../packageManager/installationInfo/types.js'\nimport {promiseRaceWithTimeout} from '../promiseRaceWithTimeout.js'\nimport {resolveUpdateTarget} from './resolveUpdateTarget.js'\n\nconst debug = subdebug('updateChecker')\n\nconst FETCH_TIMEOUT = 15_000\n\n/**\n * Fetch the latest version of the update target package and write it to the config cache.\n * Designed to run in a detached child process so it never blocks the main CLI.\n *\n * When `packageOverride` is given, the cwd-based resolver is skipped — used by\n * the main process to pin the worker to the same package it already resolved\n * (e.g. via a runner's symlinked install) so cache reads and writes align.\n */\nexport async function fetchUpdateInfo(\n  cwd: string,\n  cliVersion: string,\n  packageOverride?: SanityPackage,\n): Promise<void> {\n  const {packageName} = packageOverride\n    ? {packageName: packageOverride}\n    : await resolveUpdateTarget(cwd, cliVersion)\n  debug('Worker: fetching latest version of %s', packageName)\n\n  let latestVersion: string | null | undefined\n  try {\n    latestVersion = await promiseRaceWithTimeout(getLatestVersion(packageName), FETCH_TIMEOUT)\n  } catch (err) {\n    debug(\n      'Worker: failed to fetch latest version of %s from npm: %s',\n      packageName,\n      err instanceof Error ? err.message : String(err),\n    )\n    throw err\n  }\n\n  if (latestVersion === null) {\n    debug('Worker: fetch timed out after %dms', FETCH_TIMEOUT)\n    return\n  }\n\n  debug('Worker: latest %s version is %s', packageName, latestVersion)\n\n  const store = getUserConfig()\n  const cacheKey = `latestVersion:${packageName}`\n\n  store.set(cacheKey, {\n    updatedAt: Date.now(),\n    value: latestVersion,\n  })\n\n  debug('Worker: cached result to %s', cacheKey)\n}\n"],"names":["getUserConfig","subdebug","getLatestVersion","promiseRaceWithTimeout","resolveUpdateTarget","debug","FETCH_TIMEOUT","fetchUpdateInfo","cwd","cliVersion","packageOverride","packageName","latestVersion","err","Error","message","String","store","cacheKey","set","updatedAt","Date","now","value"],"mappings":"AAAA,SAAQA,aAAa,EAAEC,QAAQ,QAAO,mBAAkB;AACxD,SAAQC,gBAAgB,QAAO,qBAAoB;AAGnD,SAAQC,sBAAsB,QAAO,+BAA8B;AACnE,SAAQC,mBAAmB,QAAO,2BAA0B;AAE5D,MAAMC,QAAQJ,SAAS;AAEvB,MAAMK,gBAAgB;AAEtB;;;;;;;CAOC,GACD,OAAO,eAAeC,gBACpBC,GAAW,EACXC,UAAkB,EAClBC,eAA+B;IAE/B,MAAM,EAACC,WAAW,EAAC,GAAGD,kBAClB;QAACC,aAAaD;IAAe,IAC7B,MAAMN,oBAAoBI,KAAKC;IACnCJ,MAAM,yCAAyCM;IAE/C,IAAIC;IACJ,IAAI;QACFA,gBAAgB,MAAMT,uBAAuBD,iBAAiBS,cAAcL;IAC9E,EAAE,OAAOO,KAAK;QACZR,MACE,6DACAM,aACAE,eAAeC,QAAQD,IAAIE,OAAO,GAAGC,OAAOH;QAE9C,MAAMA;IACR;IAEA,IAAID,kBAAkB,MAAM;QAC1BP,MAAM,sCAAsCC;QAC5C;IACF;IAEAD,MAAM,mCAAmCM,aAAaC;IAEtD,MAAMK,QAAQjB;IACd,MAAMkB,WAAW,CAAC,cAAc,EAAEP,aAAa;IAE/CM,MAAME,GAAG,CAACD,UAAU;QAClBE,WAAWC,KAAKC,GAAG;QACnBC,OAAOX;IACT;IAEAP,MAAM,+BAA+Ba;AACvC"}

package/dist/util/update/fetchUpdateInfo.worker.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import { pathToFileURL } from 'node:url';
+import { fetchUpdateInfo } from './fetchUpdateInfo.js';
+// Only run if executed directly (not imported)
+if (import.meta.url === pathToFileURL(process.argv[1]).href) {
+    const cwd = process.env.SANITY_UPDATE_CHECK_CWD || process.cwd();
+    const cliVersion = process.env.SANITY_UPDATE_CHECK_CLI_VERSION || '0.0.0';
+    const rawPackage = process.env.SANITY_UPDATE_CHECK_PACKAGE;
+    const packageOverride = rawPackage === 'sanity' || rawPackage === '@sanity/cli' ? rawPackage : undefined;
+    try {
+        await fetchUpdateInfo(cwd, cliVersion, packageOverride);
+        process.exit(0);
+    } catch  {
+        // Silently exit - don't leave zombie processes
+        process.exit(1);
+    }
+}
+
+//# sourceMappingURL=fetchUpdateInfo.worker.js.map

package/dist/util/update/fetchUpdateInfo.worker.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/util/update/fetchUpdateInfo.worker.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport {pathToFileURL} from 'node:url'\n\nimport {type SanityPackage} from '../packageManager/installationInfo/types.js'\nimport {fetchUpdateInfo} from './fetchUpdateInfo.js'\n\n// Only run if executed directly (not imported)\nif (import.meta.url === pathToFileURL(process.argv[1]).href) {\n  const cwd = process.env.SANITY_UPDATE_CHECK_CWD || process.cwd()\n  const cliVersion = process.env.SANITY_UPDATE_CHECK_CLI_VERSION || '0.0.0'\n  const rawPackage = process.env.SANITY_UPDATE_CHECK_PACKAGE\n  const packageOverride: SanityPackage | undefined =\n    rawPackage === 'sanity' || rawPackage === '@sanity/cli' ? rawPackage : undefined\n\n  try {\n    await fetchUpdateInfo(cwd, cliVersion, packageOverride)\n    process.exit(0)\n  } catch {\n    // Silently exit - don't leave zombie processes\n    process.exit(1)\n  }\n}\n"],"names":["pathToFileURL","fetchUpdateInfo","url","process","argv","href","cwd","env","SANITY_UPDATE_CHECK_CWD","cliVersion","SANITY_UPDATE_CHECK_CLI_VERSION","rawPackage","SANITY_UPDATE_CHECK_PACKAGE","packageOverride","undefined","exit"],"mappings":";AAEA,SAAQA,aAAa,QAAO,WAAU;AAGtC,SAAQC,eAAe,QAAO,uBAAsB;AAEpD,+CAA+C;AAC/C,IAAI,YAAYC,GAAG,KAAKF,cAAcG,QAAQC,IAAI,CAAC,EAAE,EAAEC,IAAI,EAAE;IAC3D,MAAMC,MAAMH,QAAQI,GAAG,CAACC,uBAAuB,IAAIL,QAAQG,GAAG;IAC9D,MAAMG,aAAaN,QAAQI,GAAG,CAACG,+BAA+B,IAAI;IAClE,MAAMC,aAAaR,QAAQI,GAAG,CAACK,2BAA2B;IAC1D,MAAMC,kBACJF,eAAe,YAAYA,eAAe,gBAAgBA,aAAaG;IAEzE,IAAI;QACF,MAAMb,gBAAgBK,KAAKG,YAAYI;QACvCV,QAAQY,IAAI,CAAC;IACf,EAAE,OAAM;QACN,+CAA+C;QAC/CZ,QAAQY,IAAI,CAAC;IACf;AACF"}

package/dist/util/update/getRunnerUpdateCommand.js

@@ -0,0 +1,33 @@
+const BIN_NAMES = {
+    '@sanity/cli': 'sanity',
+    sanity: 'sanity'
+};
+export function getRunnerUpdateCommand(runner, packageName) {
+    const binName = BIN_NAMES[packageName];
+    switch(runner){
+        case 'bunx':
+            {
+                return `bunx ${packageName}@latest`;
+            }
+        case 'npx':
+            {
+                return `npx --yes ${packageName}@latest`;
+            }
+        case 'pnpm-dlx':
+            {
+                return `pnpm dlx ${packageName}@latest`;
+            }
+        case 'yarn-dlx':
+            {
+                // yarn dlx only needs `-p` when the package name differs from the bin name
+                return binName === packageName ? `yarn dlx ${packageName}@latest` : `yarn dlx -p ${packageName}@latest ${binName}`;
+            }
+        default:
+            {
+                const _exhaustive = runner;
+                throw new Error(`Unknown runner: ${_exhaustive}`);
+            }
+    }
+}
+
+//# sourceMappingURL=getRunnerUpdateCommand.js.map

package/dist/util/update/getRunnerUpdateCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/util/update/getRunnerUpdateCommand.ts"],"sourcesContent":["import {type SanityPackage} from '../packageManager/installationInfo/types.js'\nimport {type PackageRunner} from './packageRunner.js'\n\nconst BIN_NAMES: Record<SanityPackage, string> = {\n  '@sanity/cli': 'sanity',\n  sanity: 'sanity',\n}\n\nexport function getRunnerUpdateCommand(runner: PackageRunner, packageName: SanityPackage): string {\n  const binName = BIN_NAMES[packageName]\n\n  switch (runner) {\n    case 'bunx': {\n      return `bunx ${packageName}@latest`\n    }\n    case 'npx': {\n      return `npx --yes ${packageName}@latest`\n    }\n    case 'pnpm-dlx': {\n      return `pnpm dlx ${packageName}@latest`\n    }\n    case 'yarn-dlx': {\n      // yarn dlx only needs `-p` when the package name differs from the bin name\n      return binName === packageName\n        ? `yarn dlx ${packageName}@latest`\n        : `yarn dlx -p ${packageName}@latest ${binName}`\n    }\n    default: {\n      const _exhaustive: never = runner\n      throw new Error(`Unknown runner: ${_exhaustive as string}`)\n    }\n  }\n}\n"],"names":["BIN_NAMES","sanity","getRunnerUpdateCommand","runner","packageName","binName","_exhaustive","Error"],"mappings":"AAGA,MAAMA,YAA2C;IAC/C,eAAe;IACfC,QAAQ;AACV;AAEA,OAAO,SAASC,uBAAuBC,MAAqB,EAAEC,WAA0B;IACtF,MAAMC,UAAUL,SAAS,CAACI,YAAY;IAEtC,OAAQD;QACN,KAAK;YAAQ;gBACX,OAAO,CAAC,KAAK,EAAEC,YAAY,OAAO,CAAC;YACrC;QACA,KAAK;YAAO;gBACV,OAAO,CAAC,UAAU,EAAEA,YAAY,OAAO,CAAC;YAC1C;QACA,KAAK;YAAY;gBACf,OAAO,CAAC,SAAS,EAAEA,YAAY,OAAO,CAAC;YACzC;QACA,KAAK;YAAY;gBACf,2EAA2E;gBAC3E,OAAOC,YAAYD,cACf,CAAC,SAAS,EAAEA,YAAY,OAAO,CAAC,GAChC,CAAC,YAAY,EAAEA,YAAY,QAAQ,EAAEC,SAAS;YACpD;QACA;YAAS;gBACP,MAAMC,cAAqBH;gBAC3B,MAAM,IAAII,MAAM,CAAC,gBAAgB,EAAED,aAAuB;YAC5D;IACF;AACF"}

package/dist/util/update/getUpdateCommand.js

@@ -1,18 +1,17 @@
 import { getYarnMajorVersion } from '@sanity/cli-core/package-manager';
-export const cliPkgName = 'sanity';
 /**
  * Get the appropriate update command for the package manager
- */ export function getUpdateCommand(pm) {
+ */ export function getUpdateCommand(pm, packageName) {
     if (pm === 'yarn') {
         const yarnMajor = getYarnMajorVersion();
         const cmd = yarnMajor !== undefined && yarnMajor >= 2 ? 'up' : 'upgrade';
-        return `yarn ${cmd} ${cliPkgName}`;
+        return `yarn ${cmd} ${packageName}`;
     }
     const localCommands = {
-        bun: `bun update ${cliPkgName}`,
-        manual: `npm update ${cliPkgName}`,
-        npm: `npm update ${cliPkgName}`,
-        pnpm: `pnpm update ${cliPkgName}`
+        bun: `bun update ${packageName}`,
+        manual: `npm update ${packageName}`,
+        npm: `npm update ${packageName}`,
+        pnpm: `pnpm update ${packageName}`
     };
     return localCommands[pm];
 }

package/dist/util/update/getUpdateCommand.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/util/update/getUpdateCommand.ts"],"sourcesContent":["import {getYarnMajorVersion} from '@sanity/cli-core/package-manager'\n\nimport {type PackageManager} from '../packageManager/packageManagerChoice.js'\n\nexport const cliPkgName = 'sanity'\n\n/**\n * Get the appropriate update command for the package manager\n */\nexport function getUpdateCommand(pm: PackageManager): string {\n  if (pm === 'yarn') {\n    const yarnMajor = getYarnMajorVersion()\n    const cmd = yarnMajor !== undefined && yarnMajor >= 2 ? 'up' : 'upgrade'\n    return `yarn ${cmd} ${cliPkgName}`\n  }\n\n  const localCommands: Record<Exclude<PackageManager, 'yarn'>, string> = {\n    bun: `bun update ${cliPkgName}`,\n    manual: `npm update ${cliPkgName}`,\n    npm: `npm update ${cliPkgName}`,\n    pnpm: `pnpm update ${cliPkgName}`,\n  }\n  return localCommands[pm]\n}\n"],"names":["getYarnMajorVersion","cliPkgName","getUpdateCommand","pm","yarnMajor","cmd","undefined","localCommands","bun","manual","npm","pnpm"],"mappings":"AAAA,SAAQA,mBAAmB,QAAO,mCAAkC;AAIpE,OAAO,MAAMC,aAAa,SAAQ;AAElC;;CAEC,GACD,OAAO,SAASC,iBAAiBC,EAAkB;IACjD,IAAIA,OAAO,QAAQ;QACjB,MAAMC,YAAYJ;QAClB,MAAMK,MAAMD,cAAcE,aAAaF,aAAa,IAAI,OAAO;QAC/D,OAAO,CAAC,KAAK,EAAEC,IAAI,CAAC,EAAEJ,YAAY;IACpC;IAEA,MAAMM,gBAAiE;QACrEC,KAAK,CAAC,WAAW,EAAEP,YAAY;QAC/BQ,QAAQ,CAAC,WAAW,EAAER,YAAY;QAClCS,KAAK,CAAC,WAAW,EAAET,YAAY;QAC/BU,MAAM,CAAC,YAAY,EAAEV,YAAY;IACnC;IACA,OAAOM,aAAa,CAACJ,GAAG;AAC1B"}
+{"version":3,"sources":["../../../src/util/update/getUpdateCommand.ts"],"sourcesContent":["import {getYarnMajorVersion} from '@sanity/cli-core/package-manager'\n\nimport {type SanityPackage} from '../packageManager/installationInfo/types.js'\nimport {type PackageManager} from '../packageManager/packageManagerChoice.js'\n\n/**\n * Get the appropriate update command for the package manager\n */\nexport function getUpdateCommand(pm: PackageManager, packageName: SanityPackage): string {\n  if (pm === 'yarn') {\n    const yarnMajor = getYarnMajorVersion()\n    const cmd = yarnMajor !== undefined && yarnMajor >= 2 ? 'up' : 'upgrade'\n    return `yarn ${cmd} ${packageName}`\n  }\n\n  const localCommands: Record<Exclude<PackageManager, 'yarn'>, string> = {\n    bun: `bun update ${packageName}`,\n    manual: `npm update ${packageName}`,\n    npm: `npm update ${packageName}`,\n    pnpm: `pnpm update ${packageName}`,\n  }\n  return localCommands[pm]\n}\n"],"names":["getYarnMajorVersion","getUpdateCommand","pm","packageName","yarnMajor","cmd","undefined","localCommands","bun","manual","npm","pnpm"],"mappings":"AAAA,SAAQA,mBAAmB,QAAO,mCAAkC;AAKpE;;CAEC,GACD,OAAO,SAASC,iBAAiBC,EAAkB,EAAEC,WAA0B;IAC7E,IAAID,OAAO,QAAQ;QACjB,MAAME,YAAYJ;QAClB,MAAMK,MAAMD,cAAcE,aAAaF,aAAa,IAAI,OAAO;QAC/D,OAAO,CAAC,KAAK,EAAEC,IAAI,CAAC,EAAEF,aAAa;IACrC;IAEA,MAAMI,gBAAiE;QACrEC,KAAK,CAAC,WAAW,EAAEL,aAAa;QAChCM,QAAQ,CAAC,WAAW,EAAEN,aAAa;QACnCO,KAAK,CAAC,WAAW,EAAEP,aAAa;QAChCQ,MAAM,CAAC,YAAY,EAAER,aAAa;IACpC;IACA,OAAOI,aAAa,CAACL,GAAG;AAC1B"}

package/dist/util/update/packageRunner.js

@@ -0,0 +1,10 @@
+export function detectPackageRunner(binaryPath = process.argv[1] ?? '') {
+    const normalized = binaryPath.replaceAll('\\', '/');
+    if (normalized.includes('/_npx/')) return 'npx';
+    if (normalized.includes('/pnpm/dlx/')) return 'pnpm-dlx';
+    if (normalized.includes('/xfs-') && normalized.includes('/dlx-')) return 'yarn-dlx';
+    if (/\/bunx-\d+-/.test(normalized)) return 'bunx';
+    return null;
+}
+
+//# sourceMappingURL=packageRunner.js.map

package/dist/util/update/packageRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/util/update/packageRunner.ts"],"sourcesContent":["export type PackageRunner = 'bunx' | 'npx' | 'pnpm-dlx' | 'yarn-dlx'\n\nexport function detectPackageRunner(\n  binaryPath: string = process.argv[1] ?? '',\n): PackageRunner | null {\n  const normalized = binaryPath.replaceAll('\\\\', '/')\n\n  if (normalized.includes('/_npx/')) return 'npx'\n  if (normalized.includes('/pnpm/dlx/')) return 'pnpm-dlx'\n  if (normalized.includes('/xfs-') && normalized.includes('/dlx-')) return 'yarn-dlx'\n  if (/\\/bunx-\\d+-/.test(normalized)) return 'bunx'\n\n  return null\n}\n"],"names":["detectPackageRunner","binaryPath","process","argv","normalized","replaceAll","includes","test"],"mappings":"AAEA,OAAO,SAASA,oBACdC,aAAqBC,QAAQC,IAAI,CAAC,EAAE,IAAI,EAAE;IAE1C,MAAMC,aAAaH,WAAWI,UAAU,CAAC,MAAM;IAE/C,IAAID,WAAWE,QAAQ,CAAC,WAAW,OAAO;IAC1C,IAAIF,WAAWE,QAAQ,CAAC,eAAe,OAAO;IAC9C,IAAIF,WAAWE,QAAQ,CAAC,YAAYF,WAAWE,QAAQ,CAAC,UAAU,OAAO;IACzE,IAAI,cAAcC,IAAI,CAACH,aAAa,OAAO;IAE3C,OAAO;AACT"}

package/dist/util/update/resolveRunnerPackage.js

@@ -0,0 +1,45 @@
+import { readFile, realpath } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { subdebug } from '@sanity/cli-core';
+const debug = subdebug('updateChecker');
+const KNOWN_PACKAGES = new Set([
+    '@sanity/cli',
+    'sanity'
+]);
+const MAX_WALK_ITERATIONS = 25;
+/**
+ * Resolve the Sanity package name + installed version from a runner install.
+ * Falls back to `sanity` + `fallbackVersion` when the walk can't determine them.
+ */ export async function resolveRunnerPackage(binaryPath = process.argv[1] ?? '', fallbackVersion = '') {
+    try {
+        // Follow the runner's .bin/sanity symlink to the real bin file, then walk
+        // up until we hit a package.json for a known Sanity package.
+        let dir = dirname(await realpath(binaryPath));
+        for(let i = 0; i < MAX_WALK_ITERATIONS && dir !== resolve(dir, '..'); i++){
+            try {
+                const pkg = JSON.parse(await readFile(resolve(dir, 'package.json'), 'utf8'));
+                if (typeof pkg.name === 'string' && typeof pkg.version === 'string' && isKnownSanityPackage(pkg.name)) {
+                    return {
+                        installedVersion: pkg.version,
+                        packageName: pkg.name
+                    };
+                }
+            } catch  {
+            // ignore missing/malformed package.json and keep walking
+            }
+            dir = dirname(dir);
+        }
+        debug('resolveRunnerPackage: walk exhausted without finding a known Sanity package');
+    } catch (err) {
+        debug('resolveRunnerPackage: realpath failed for %s (%s)', binaryPath, err);
+    }
+    return {
+        installedVersion: fallbackVersion,
+        packageName: 'sanity'
+    };
+}
+function isKnownSanityPackage(name) {
+    return KNOWN_PACKAGES.has(name);
+}
+
+//# sourceMappingURL=resolveRunnerPackage.js.map

package/dist/util/update/resolveRunnerPackage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/util/update/resolveRunnerPackage.ts"],"sourcesContent":["import {readFile, realpath} from 'node:fs/promises'\nimport {dirname, resolve} from 'node:path'\n\nimport {subdebug} from '@sanity/cli-core'\n\nimport {type SanityPackage} from '../packageManager/installationInfo/types.js'\n\nconst debug = subdebug('updateChecker')\n\nconst KNOWN_PACKAGES = new Set<SanityPackage>(['@sanity/cli', 'sanity'])\nconst MAX_WALK_ITERATIONS = 25\n\ninterface RunnerPackage {\n  installedVersion: string\n  packageName: SanityPackage\n}\n\n/**\n * Resolve the Sanity package name + installed version from a runner install.\n * Falls back to `sanity` + `fallbackVersion` when the walk can't determine them.\n */\nexport async function resolveRunnerPackage(\n  binaryPath: string = process.argv[1] ?? '',\n  fallbackVersion = '',\n): Promise<RunnerPackage> {\n  try {\n    // Follow the runner's .bin/sanity symlink to the real bin file, then walk\n    // up until we hit a package.json for a known Sanity package.\n    let dir = dirname(await realpath(binaryPath))\n    for (let i = 0; i < MAX_WALK_ITERATIONS && dir !== resolve(dir, '..'); i++) {\n      try {\n        const pkg = JSON.parse(await readFile(resolve(dir, 'package.json'), 'utf8'))\n        if (\n          typeof pkg.name === 'string' &&\n          typeof pkg.version === 'string' &&\n          isKnownSanityPackage(pkg.name)\n        ) {\n          return {installedVersion: pkg.version, packageName: pkg.name}\n        }\n      } catch {\n        // ignore missing/malformed package.json and keep walking\n      }\n      dir = dirname(dir)\n    }\n    debug('resolveRunnerPackage: walk exhausted without finding a known Sanity package')\n  } catch (err) {\n    debug('resolveRunnerPackage: realpath failed for %s (%s)', binaryPath, err)\n  }\n\n  return {installedVersion: fallbackVersion, packageName: 'sanity'}\n}\n\nfunction isKnownSanityPackage(name: string): name is SanityPackage {\n  return KNOWN_PACKAGES.has(name as SanityPackage)\n}\n"],"names":["readFile","realpath","dirname","resolve","subdebug","debug","KNOWN_PACKAGES","Set","MAX_WALK_ITERATIONS","resolveRunnerPackage","binaryPath","process","argv","fallbackVersion","dir","i","pkg","JSON","parse","name","version","isKnownSanityPackage","installedVersion","packageName","err","has"],"mappings":"AAAA,SAAQA,QAAQ,EAAEC,QAAQ,QAAO,mBAAkB;AACnD,SAAQC,OAAO,EAAEC,OAAO,QAAO,YAAW;AAE1C,SAAQC,QAAQ,QAAO,mBAAkB;AAIzC,MAAMC,QAAQD,SAAS;AAEvB,MAAME,iBAAiB,IAAIC,IAAmB;IAAC;IAAe;CAAS;AACvE,MAAMC,sBAAsB;AAO5B;;;CAGC,GACD,OAAO,eAAeC,qBACpBC,aAAqBC,QAAQC,IAAI,CAAC,EAAE,IAAI,EAAE,EAC1CC,kBAAkB,EAAE;IAEpB,IAAI;QACF,0EAA0E;QAC1E,6DAA6D;QAC7D,IAAIC,MAAMZ,QAAQ,MAAMD,SAASS;QACjC,IAAK,IAAIK,IAAI,GAAGA,IAAIP,uBAAuBM,QAAQX,QAAQW,KAAK,OAAOC,IAAK;YAC1E,IAAI;gBACF,MAAMC,MAAMC,KAAKC,KAAK,CAAC,MAAMlB,SAASG,QAAQW,KAAK,iBAAiB;gBACpE,IACE,OAAOE,IAAIG,IAAI,KAAK,YACpB,OAAOH,IAAII,OAAO,KAAK,YACvBC,qBAAqBL,IAAIG,IAAI,GAC7B;oBACA,OAAO;wBAACG,kBAAkBN,IAAII,OAAO;wBAAEG,aAAaP,IAAIG,IAAI;oBAAA;gBAC9D;YACF,EAAE,OAAM;YACN,yDAAyD;YAC3D;YACAL,MAAMZ,QAAQY;QAChB;QACAT,MAAM;IACR,EAAE,OAAOmB,KAAK;QACZnB,MAAM,qDAAqDK,YAAYc;IACzE;IAEA,OAAO;QAACF,kBAAkBT;QAAiBU,aAAa;IAAQ;AAClE;AAEA,SAASF,qBAAqBF,IAAY;IACxC,OAAOb,eAAemB,GAAG,CAACN;AAC5B"}

package/dist/util/update/resolveUpdateTarget.js

@@ -0,0 +1,31 @@
+import { subdebug } from '@sanity/cli-core';
+import { findInstalledPackage, findPackageDeclaration } from '../packageManager/installationInfo/detectPackages.js';
+const debug = subdebug('updateChecker');
+/**
+ * Determine which package to check for updates and what version is currently installed.
+ *
+ * If the user's project declares `sanity` as a dependency and it's installed,
+ * we check `sanity` (since that's what the user manages). Otherwise, we fall back
+ * to `@sanity/cli` (the currently running CLI binary).
+ */ export async function resolveUpdateTarget(cwd, cliVersion) {
+    // Check if `sanity` is a dependency in the local project
+    const sanityDeclaration = await findPackageDeclaration('sanity', cwd);
+    if (sanityDeclaration) {
+        debug('Project declares sanity as a dependency, checking installed version');
+        const sanityInstalled = await findInstalledPackage('sanity', cwd);
+        if (sanityInstalled) {
+            debug('Installed sanity version: %s', sanityInstalled.version);
+            return {
+                installedVersion: sanityInstalled.version,
+                packageName: 'sanity'
+            };
+        }
+        debug('sanity is declared but not installed, falling back to @sanity/cli');
+    }
+    return {
+        installedVersion: cliVersion,
+        packageName: '@sanity/cli'
+    };
+}
+
+//# sourceMappingURL=resolveUpdateTarget.js.map

package/dist/util/update/resolveUpdateTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/util/update/resolveUpdateTarget.ts"],"sourcesContent":["import {subdebug} from '@sanity/cli-core'\n\nimport {\n  findInstalledPackage,\n  findPackageDeclaration,\n} from '../packageManager/installationInfo/detectPackages.js'\nimport {type SanityPackage} from '../packageManager/installationInfo/types.js'\n\nconst debug = subdebug('updateChecker')\n\ninterface UpdateTarget {\n  installedVersion: string\n  packageName: SanityPackage\n}\n\n/**\n * Determine which package to check for updates and what version is currently installed.\n *\n * If the user's project declares `sanity` as a dependency and it's installed,\n * we check `sanity` (since that's what the user manages). Otherwise, we fall back\n * to `@sanity/cli` (the currently running CLI binary).\n */\nexport async function resolveUpdateTarget(cwd: string, cliVersion: string): Promise<UpdateTarget> {\n  // Check if `sanity` is a dependency in the local project\n  const sanityDeclaration = await findPackageDeclaration('sanity', cwd)\n\n  if (sanityDeclaration) {\n    debug('Project declares sanity as a dependency, checking installed version')\n    const sanityInstalled = await findInstalledPackage('sanity', cwd)\n\n    if (sanityInstalled) {\n      debug('Installed sanity version: %s', sanityInstalled.version)\n      return {installedVersion: sanityInstalled.version, packageName: 'sanity'}\n    }\n\n    debug('sanity is declared but not installed, falling back to @sanity/cli')\n  }\n\n  return {installedVersion: cliVersion, packageName: '@sanity/cli'}\n}\n"],"names":["subdebug","findInstalledPackage","findPackageDeclaration","debug","resolveUpdateTarget","cwd","cliVersion","sanityDeclaration","sanityInstalled","version","installedVersion","packageName"],"mappings":"AAAA,SAAQA,QAAQ,QAAO,mBAAkB;AAEzC,SACEC,oBAAoB,EACpBC,sBAAsB,QACjB,uDAAsD;AAG7D,MAAMC,QAAQH,SAAS;AAOvB;;;;;;CAMC,GACD,OAAO,eAAeI,oBAAoBC,GAAW,EAAEC,UAAkB;IACvE,yDAAyD;IACzD,MAAMC,oBAAoB,MAAML,uBAAuB,UAAUG;IAEjE,IAAIE,mBAAmB;QACrBJ,MAAM;QACN,MAAMK,kBAAkB,MAAMP,qBAAqB,UAAUI;QAE7D,IAAIG,iBAAiB;YACnBL,MAAM,gCAAgCK,gBAAgBC,OAAO;YAC7D,OAAO;gBAACC,kBAAkBF,gBAAgBC,OAAO;gBAAEE,aAAa;YAAQ;QAC1E;QAEAR,MAAM;IACR;IAEA,OAAO;QAACO,kBAAkBJ;QAAYK,aAAa;IAAa;AAClE"}

package/dist/util/update/showNotificationUpdate.js

@@ -3,20 +3,22 @@ import { ux } from '@oclif/core';
 import { boxen } from '@sanity/cli-core/ux';
 import isInstalledGlobally from 'is-installed-globally';
 import { getPackageManagerChoice } from '../packageManager/packageManagerChoice.js';
-import { cliPkgName, getUpdateCommand } from './getUpdateCommand.js';
+import { getRunnerUpdateCommand } from './getRunnerUpdateCommand.js';
+import { getUpdateCommand } from './getUpdateCommand.js';
 import { isInstalledUsingYarn } from './isInstalledUsingYarn.js';
 /**
  * Show a boxed notification about the available update
- */ export async function showUpdateNotification(currentVersion, latestVersion) {
+ */ export async function showUpdateNotification(currentVersion, latestVersion, packageName, runner = null) {
     let command;
-    // Check if CLI is installed globally
-    if (isInstalledGlobally) {
-        command = isInstalledUsingYarn() ? `yarn global add ${cliPkgName}` : `npm install -g ${cliPkgName}`;
+    if (runner) {
+        command = getRunnerUpdateCommand(runner, packageName);
+    } else if (isInstalledGlobally) {
+        command = isInstalledUsingYarn() ? `yarn global add ${packageName}` : `npm install -g ${packageName}`;
     } else {
         const { chosen } = await getPackageManagerChoice(process.cwd(), {
             interactive: false
         });
-        command = getUpdateCommand(chosen);
+        command = getUpdateCommand(chosen, packageName);
     }
     const message = `Update available: ${styleText('dim', currentVersion)} → ${styleText('green', latestVersion)}\n\nRun ${styleText('cyan', command)} to update`;
     const boxed = boxen(message, {

package/dist/util/update/showNotificationUpdate.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/util/update/showNotificationUpdate.ts"],"sourcesContent":["import {styleText} from 'node:util'\n\nimport {ux} from '@oclif/core'\nimport {boxen} from '@sanity/cli-core/ux'\nimport isInstalledGlobally from 'is-installed-globally'\n\nimport {getPackageManagerChoice} from '../packageManager/packageManagerChoice.js'\nimport {cliPkgName, getUpdateCommand} from './getUpdateCommand.js'\nimport {isInstalledUsingYarn} from './isInstalledUsingYarn.js'\n\n/**\n * Show a boxed notification about the available update\n */\nexport async function showUpdateNotification(\n  currentVersion: string,\n  latestVersion: string,\n): Promise<void> {\n  let command\n\n  // Check if CLI is installed globally\n  if (isInstalledGlobally) {\n    command = isInstalledUsingYarn()\n      ? `yarn global add ${cliPkgName}`\n      : `npm install -g ${cliPkgName}`\n  } else {\n    const {chosen} = await getPackageManagerChoice(process.cwd(), {interactive: false})\n    command = getUpdateCommand(chosen)\n  }\n\n  const message = `Update available: ${styleText('dim', currentVersion)} → ${styleText('green', latestVersion)}\\n\\nRun ${styleText('cyan', command)} to update`\n\n  const boxed = boxen(message, {\n    borderColor: 'yellow',\n    borderStyle: 'round',\n    margin: 1,\n    padding: 1,\n  })\n\n  ux.stderr('\\n' + boxed + '\\n')\n}\n"],"names":["styleText","ux","boxen","isInstalledGlobally","getPackageManagerChoice","cliPkgName","getUpdateCommand","isInstalledUsingYarn","showUpdateNotification","currentVersion","latestVersion","command","chosen","process","cwd","interactive","message","boxed","borderColor","borderStyle","margin","padding","stderr"],"mappings":"AAAA,SAAQA,SAAS,QAAO,YAAW;AAEnC,SAAQC,EAAE,QAAO,cAAa;AAC9B,SAAQC,KAAK,QAAO,sBAAqB;AACzC,OAAOC,yBAAyB,wBAAuB;AAEvD,SAAQC,uBAAuB,QAAO,4CAA2C;AACjF,SAAQC,UAAU,EAAEC,gBAAgB,QAAO,wBAAuB;AAClE,SAAQC,oBAAoB,QAAO,4BAA2B;AAE9D;;CAEC,GACD,OAAO,eAAeC,uBACpBC,cAAsB,EACtBC,aAAqB;IAErB,IAAIC;IAEJ,qCAAqC;IACrC,IAAIR,qBAAqB;QACvBQ,UAAUJ,yBACN,CAAC,gBAAgB,EAAEF,YAAY,GAC/B,CAAC,eAAe,EAAEA,YAAY;IACpC,OAAO;QACL,MAAM,EAACO,MAAM,EAAC,GAAG,MAAMR,wBAAwBS,QAAQC,GAAG,IAAI;YAACC,aAAa;QAAK;QACjFJ,UAAUL,iBAAiBM;IAC7B;IAEA,MAAMI,UAAU,CAAC,kBAAkB,EAAEhB,UAAU,OAAOS,gBAAgB,GAAG,EAAET,UAAU,SAASU,eAAe,QAAQ,EAAEV,UAAU,QAAQW,SAAS,UAAU,CAAC;IAE7J,MAAMM,QAAQf,MAAMc,SAAS;QAC3BE,aAAa;QACbC,aAAa;QACbC,QAAQ;QACRC,SAAS;IACX;IAEApB,GAAGqB,MAAM,CAAC,OAAOL,QAAQ;AAC3B"}
+{"version":3,"sources":["../../../src/util/update/showNotificationUpdate.ts"],"sourcesContent":["import {styleText} from 'node:util'\n\nimport {ux} from '@oclif/core'\nimport {boxen} from '@sanity/cli-core/ux'\nimport isInstalledGlobally from 'is-installed-globally'\n\nimport {type SanityPackage} from '../packageManager/installationInfo/types.js'\nimport {getPackageManagerChoice} from '../packageManager/packageManagerChoice.js'\nimport {getRunnerUpdateCommand} from './getRunnerUpdateCommand.js'\nimport {getUpdateCommand} from './getUpdateCommand.js'\nimport {isInstalledUsingYarn} from './isInstalledUsingYarn.js'\nimport {type PackageRunner} from './packageRunner.js'\n\n/**\n * Show a boxed notification about the available update\n */\nexport async function showUpdateNotification(\n  currentVersion: string,\n  latestVersion: string,\n  packageName: SanityPackage,\n  runner: PackageRunner | null = null,\n): Promise<void> {\n  let command\n\n  if (runner) {\n    command = getRunnerUpdateCommand(runner, packageName)\n  } else if (isInstalledGlobally) {\n    command = isInstalledUsingYarn()\n      ? `yarn global add ${packageName}`\n      : `npm install -g ${packageName}`\n  } else {\n    const {chosen} = await getPackageManagerChoice(process.cwd(), {interactive: false})\n    command = getUpdateCommand(chosen, packageName)\n  }\n\n  const message = `Update available: ${styleText('dim', currentVersion)} → ${styleText('green', latestVersion)}\\n\\nRun ${styleText('cyan', command)} to update`\n\n  const boxed = boxen(message, {\n    borderColor: 'yellow',\n    borderStyle: 'round',\n    margin: 1,\n    padding: 1,\n  })\n\n  ux.stderr('\\n' + boxed + '\\n')\n}\n"],"names":["styleText","ux","boxen","isInstalledGlobally","getPackageManagerChoice","getRunnerUpdateCommand","getUpdateCommand","isInstalledUsingYarn","showUpdateNotification","currentVersion","latestVersion","packageName","runner","command","chosen","process","cwd","interactive","message","boxed","borderColor","borderStyle","margin","padding","stderr"],"mappings":"AAAA,SAAQA,SAAS,QAAO,YAAW;AAEnC,SAAQC,EAAE,QAAO,cAAa;AAC9B,SAAQC,KAAK,QAAO,sBAAqB;AACzC,OAAOC,yBAAyB,wBAAuB;AAGvD,SAAQC,uBAAuB,QAAO,4CAA2C;AACjF,SAAQC,sBAAsB,QAAO,8BAA6B;AAClE,SAAQC,gBAAgB,QAAO,wBAAuB;AACtD,SAAQC,oBAAoB,QAAO,4BAA2B;AAG9D;;CAEC,GACD,OAAO,eAAeC,uBACpBC,cAAsB,EACtBC,aAAqB,EACrBC,WAA0B,EAC1BC,SAA+B,IAAI;IAEnC,IAAIC;IAEJ,IAAID,QAAQ;QACVC,UAAUR,uBAAuBO,QAAQD;IAC3C,OAAO,IAAIR,qBAAqB;QAC9BU,UAAUN,yBACN,CAAC,gBAAgB,EAAEI,aAAa,GAChC,CAAC,eAAe,EAAEA,aAAa;IACrC,OAAO;QACL,MAAM,EAACG,MAAM,EAAC,GAAG,MAAMV,wBAAwBW,QAAQC,GAAG,IAAI;YAACC,aAAa;QAAK;QACjFJ,UAAUP,iBAAiBQ,QAAQH;IACrC;IAEA,MAAMO,UAAU,CAAC,kBAAkB,EAAElB,UAAU,OAAOS,gBAAgB,GAAG,EAAET,UAAU,SAASU,eAAe,QAAQ,EAAEV,UAAU,QAAQa,SAAS,UAAU,CAAC;IAE7J,MAAMM,QAAQjB,MAAMgB,SAAS;QAC3BE,aAAa;QACbC,aAAa;QACbC,QAAQ;QACRC,SAAS;IACX;IAEAtB,GAAGuB,MAAM,CAAC,OAAOL,QAAQ;AAC3B"}

package/dist/util/update/updateChecker.js

@@ -1,17 +1,21 @@
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
 import { getUserConfig, isCi, subdebug } from '@sanity/cli-core';
-import semver from 'semver';
-import { createExpiringConfig } from '../createExpiringConfig.js';
-import { fetchLatestVersion } from './fetchLatestVersion.js';
+import { gt as semverGt } from 'semver';
+import { detectPackageRunner } from './packageRunner.js';
+import { resolveRunnerPackage } from './resolveRunnerPackage.js';
+import { resolveUpdateTarget } from './resolveUpdateTarget.js';
 import { showUpdateNotification } from './showNotificationUpdate.js';
 const debug = subdebug('updateChecker');
-const TWELVE_HOURS = 12 * 60 * 60 * 1000 // 12 hours
-;
-const CHECK_TIMEOUT = 300;
+const TWELVE_HOURS = 12 * 60 * 60 * 1000;
 /**
  * Check for CLI updates and notify the user if a new version is available.
- * This is designed to be non-blocking and will silently fail if anything goes wrong.
  *
- * @param config - The CLI config containing version and name
+ * The main process resolves the local update target (which package and installed version),
+ * then reads the latest version from the config cache. It never makes network requests.
+ * If the cache is empty or expired, a detached worker process is spawned to fetch the
+ * latest version from npm and write it to the cache. The notification is shown on the
+ * next CLI invocation when the cached result is available instantly.
  */ export async function updateChecker(config) {
     debug(`Installed CLI version is ${config.version}`);
     // Skip in CI or if disabled
@@ -22,39 +26,70 @@ const CHECK_TIMEOUT = 300;
     if (!process.stdout.isTTY) {
         return;
     }
+    const runner = detectPackageRunner();
+    const { installedVersion, packageName } = runner ? await resolveRunnerPackage(process.argv[1] ?? '', config.version) : await resolveUpdateTarget(process.cwd(), config.version);
+    debug('Update target: %s@%s%s', packageName, installedVersion, runner ? ` via ${runner}` : '');
     const store = getUserConfig();
-    let showNotificationUpdate = true;
-    // Cache for latest version from npm
-    const latestVersionCache = createExpiringConfig({
-        fetchValue: async ()=>fetchLatestVersion(config.name, CHECK_TIMEOUT),
-        key: 'cliLatestRemoteVersion',
-        onCacheHit: ()=>{
-            debug('Less than 12 hours since last check, skipping update check');
-            showNotificationUpdate = false;
-        },
-        onFetch: ()=>debug('Checking for latest remote version'),
-        store,
-        ttl: TWELVE_HOURS,
-        validateValue: (value)=>typeof value === 'string'
-    });
-    const latestVersion = await latestVersionCache.get();
-    if (!latestVersion) {
-        debug('No cached latest version result found');
-        return;
-    }
-    const comparison = semver.compare(latestVersion, config.version);
-    if (comparison < 0) {
-        debug('Remote version older than local');
-        return;
-    }
-    if (comparison === 0) {
-        debug('No update found');
-        return;
+    const cacheKey = `latestVersion:${packageName}`;
+    const cached = readCachedLatestVersion(store, cacheKey);
+    if (cached) {
+        const { expired, latestVersion, updatedAt } = cached;
+        debug('Cache %s for %s: installed=%s, latest=%s', expired ? 'expired' : 'hit', packageName, installedVersion, latestVersion);
+        if (semverGt(latestVersion, installedVersion)) {
+            const notifiedKey = `notifiedAt:${packageName}`;
+            if (store.get(notifiedKey) === updatedAt) {
+                debug('Update is available (%s), already notified for this cache cycle', latestVersion);
+            } else {
+                debug('Update is available (%s)', latestVersion);
+                await showUpdateNotification(installedVersion, latestVersion, packageName, runner);
+                store.set(notifiedKey, updatedAt);
+            }
+        } else {
+            debug('No update found');
+        }
+        if (expired) {
+            debug('Cache expired, spawning worker to refresh');
+            spawnFetchWorker(config.version, packageName);
+        }
+    } else {
+        debug('No cached update info, spawning worker to fetch');
+        spawnFetchWorker(config.version, packageName);
     }
-    debug('Update is available (%s)', latestVersion);
-    if (showNotificationUpdate) {
-        await showUpdateNotification(config.version, latestVersion);
+}
+/**
+ * Read and validate the cached latest version for a specific package.
+ * The cache only stores the latest npm version (globally valid) - the installed
+ * version is always resolved locally to avoid cross-project confusion.
+ */ function readCachedLatestVersion(store, cacheKey) {
+    const stored = store.get(cacheKey);
+    if (!stored || typeof stored !== 'object' || !('updatedAt' in stored) || typeof stored.updatedAt !== 'number' || !('value' in stored) || typeof stored.value !== 'string') {
+        return null;
     }
+    const expired = Date.now() - stored.updatedAt > TWELVE_HOURS;
+    return {
+        expired,
+        latestVersion: stored.value,
+        updatedAt: stored.updatedAt
+    };
+}
+/**
+ * Spawn a detached worker process to fetch the latest version and update the cache.
+ * The worker is unref'd so the parent CLI can exit immediately.
+ */ function spawnFetchWorker(cliVersion, packageName) {
+    const workerPath = fileURLToPath(new URL('fetchUpdateInfo.worker.js', import.meta.url));
+    debug(`Spawning update check worker: ${process.execPath} ${workerPath}`);
+    spawn(process.execPath, [
+        workerPath
+    ], {
+        detached: true,
+        env: {
+            ...process.env,
+            SANITY_UPDATE_CHECK_CLI_VERSION: cliVersion,
+            SANITY_UPDATE_CHECK_CWD: process.cwd(),
+            SANITY_UPDATE_CHECK_PACKAGE: packageName
+        },
+        stdio: debug.enabled ? 'inherit' : 'ignore'
+    }).unref();
 }
 
 //# sourceMappingURL=updateChecker.js.map

package/dist/util/update/updateChecker.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/util/update/updateChecker.ts"],"sourcesContent":["import {getUserConfig, isCi, subdebug} from '@sanity/cli-core'\nimport semver from 'semver'\n\nimport {createExpiringConfig} from '../createExpiringConfig.js'\nimport {fetchLatestVersion} from './fetchLatestVersion.js'\nimport {showUpdateNotification} from './showNotificationUpdate.js'\n\nconst debug = subdebug('updateChecker')\n\nconst TWELVE_HOURS = 12 * 60 * 60 * 1000 // 12 hours\nconst CHECK_TIMEOUT = 300\n\n/**\n * Check for CLI updates and notify the user if a new version is available.\n * This is designed to be non-blocking and will silently fail if anything goes wrong.\n *\n * @param config - The CLI config containing version and name\n */\nexport async function updateChecker(config: {\n  name: string\n  root: string\n  version: string\n}): Promise<void> {\n  debug(`Installed CLI version is ${config.version}`)\n  // Skip in CI or if disabled\n  if (isCi() || process.env.NO_UPDATE_NOTIFIER) {\n    debug('Running on CI, or explicitly disabled, skipping update check')\n    return\n  }\n\n  if (!process.stdout.isTTY) {\n    return\n  }\n\n  const store = getUserConfig()\n\n  let showNotificationUpdate = true\n\n  // Cache for latest version from npm\n  const latestVersionCache = createExpiringConfig({\n    fetchValue: async () => fetchLatestVersion(config.name, CHECK_TIMEOUT),\n    key: 'cliLatestRemoteVersion',\n    onCacheHit: () => {\n      debug('Less than 12 hours since last check, skipping update check')\n      showNotificationUpdate = false\n    },\n    onFetch: () => debug('Checking for latest remote version'),\n    store,\n    ttl: TWELVE_HOURS,\n    validateValue: (value): value is string => typeof value === 'string',\n  })\n\n  const latestVersion = await latestVersionCache.get()\n\n  if (!latestVersion) {\n    debug('No cached latest version result found')\n    return\n  }\n\n  const comparison = semver.compare(latestVersion, config.version)\n\n  if (comparison < 0) {\n    debug('Remote version older than local')\n    return\n  }\n\n  if (comparison === 0) {\n    debug('No update found')\n    return\n  }\n\n  debug('Update is available (%s)', latestVersion)\n\n  if (showNotificationUpdate) {\n    await showUpdateNotification(config.version, latestVersion)\n  }\n}\n"],"names":["getUserConfig","isCi","subdebug","semver","createExpiringConfig","fetchLatestVersion","showUpdateNotification","debug","TWELVE_HOURS","CHECK_TIMEOUT","updateChecker","config","version","process","env","NO_UPDATE_NOTIFIER","stdout","isTTY","store","showNotificationUpdate","latestVersionCache","fetchValue","name","key","onCacheHit","onFetch","ttl","validateValue","value","latestVersion","get","comparison","compare"],"mappings":"AAAA,SAAQA,aAAa,EAAEC,IAAI,EAAEC,QAAQ,QAAO,mBAAkB;AAC9D,OAAOC,YAAY,SAAQ;AAE3B,SAAQC,oBAAoB,QAAO,6BAA4B;AAC/D,SAAQC,kBAAkB,QAAO,0BAAyB;AAC1D,SAAQC,sBAAsB,QAAO,8BAA6B;AAElE,MAAMC,QAAQL,SAAS;AAEvB,MAAMM,eAAe,KAAK,KAAK,KAAK,KAAK,WAAW;;AACpD,MAAMC,gBAAgB;AAEtB;;;;;CAKC,GACD,OAAO,eAAeC,cAAcC,MAInC;IACCJ,MAAM,CAAC,yBAAyB,EAAEI,OAAOC,OAAO,EAAE;IAClD,4BAA4B;IAC5B,IAAIX,UAAUY,QAAQC,GAAG,CAACC,kBAAkB,EAAE;QAC5CR,MAAM;QACN;IACF;IAEA,IAAI,CAACM,QAAQG,MAAM,CAACC,KAAK,EAAE;QACzB;IACF;IAEA,MAAMC,QAAQlB;IAEd,IAAImB,yBAAyB;IAE7B,oCAAoC;IACpC,MAAMC,qBAAqBhB,qBAAqB;QAC9CiB,YAAY,UAAYhB,mBAAmBM,OAAOW,IAAI,EAAEb;QACxDc,KAAK;QACLC,YAAY;YACVjB,MAAM;YACNY,yBAAyB;QAC3B;QACAM,SAAS,IAAMlB,MAAM;QACrBW;QACAQ,KAAKlB;QACLmB,eAAe,CAACC,QAA2B,OAAOA,UAAU;IAC9D;IAEA,MAAMC,gBAAgB,MAAMT,mBAAmBU,GAAG;IAElD,IAAI,CAACD,eAAe;QAClBtB,MAAM;QACN;IACF;IAEA,MAAMwB,aAAa5B,OAAO6B,OAAO,CAACH,eAAelB,OAAOC,OAAO;IAE/D,IAAImB,aAAa,GAAG;QAClBxB,MAAM;QACN;IACF;IAEA,IAAIwB,eAAe,GAAG;QACpBxB,MAAM;QACN;IACF;IAEAA,MAAM,4BAA4BsB;IAElC,IAAIV,wBAAwB;QAC1B,MAAMb,uBAAuBK,OAAOC,OAAO,EAAEiB;IAC/C;AACF"}
+{"version":3,"sources":["../../../src/util/update/updateChecker.ts"],"sourcesContent":["import {spawn} from 'node:child_process'\nimport {fileURLToPath} from 'node:url'\n\nimport {getUserConfig, isCi, subdebug} from '@sanity/cli-core'\nimport {gt as semverGt} from 'semver'\n\nimport {type SanityPackage} from '../packageManager/installationInfo/types.js'\nimport {detectPackageRunner} from './packageRunner.js'\nimport {resolveRunnerPackage} from './resolveRunnerPackage.js'\nimport {resolveUpdateTarget} from './resolveUpdateTarget.js'\nimport {showUpdateNotification} from './showNotificationUpdate.js'\n\nconst debug = subdebug('updateChecker')\n\nconst TWELVE_HOURS = 12 * 60 * 60 * 1000\n\n/**\n * Check for CLI updates and notify the user if a new version is available.\n *\n * The main process resolves the local update target (which package and installed version),\n * then reads the latest version from the config cache. It never makes network requests.\n * If the cache is empty or expired, a detached worker process is spawned to fetch the\n * latest version from npm and write it to the cache. The notification is shown on the\n * next CLI invocation when the cached result is available instantly.\n */\nexport async function updateChecker(config: {version: string}): Promise<void> {\n  debug(`Installed CLI version is ${config.version}`)\n\n  // Skip in CI or if disabled\n  if (isCi() || process.env.NO_UPDATE_NOTIFIER) {\n    debug('Running on CI, or explicitly disabled, skipping update check')\n    return\n  }\n\n  if (!process.stdout.isTTY) {\n    return\n  }\n\n  const runner = detectPackageRunner()\n  const {installedVersion, packageName} = runner\n    ? await resolveRunnerPackage(process.argv[1] ?? '', config.version)\n    : await resolveUpdateTarget(process.cwd(), config.version)\n  debug('Update target: %s@%s%s', packageName, installedVersion, runner ? ` via ${runner}` : '')\n\n  const store = getUserConfig()\n  const cacheKey = `latestVersion:${packageName}`\n  const cached = readCachedLatestVersion(store, cacheKey)\n\n  if (cached) {\n    const {expired, latestVersion, updatedAt} = cached\n\n    debug(\n      'Cache %s for %s: installed=%s, latest=%s',\n      expired ? 'expired' : 'hit',\n      packageName,\n      installedVersion,\n      latestVersion,\n    )\n\n    if (semverGt(latestVersion, installedVersion)) {\n      const notifiedKey = `notifiedAt:${packageName}`\n      if (store.get(notifiedKey) === updatedAt) {\n        debug('Update is available (%s), already notified for this cache cycle', latestVersion)\n      } else {\n        debug('Update is available (%s)', latestVersion)\n        await showUpdateNotification(installedVersion, latestVersion, packageName, runner)\n        store.set(notifiedKey, updatedAt)\n      }\n    } else {\n      debug('No update found')\n    }\n\n    if (expired) {\n      debug('Cache expired, spawning worker to refresh')\n      spawnFetchWorker(config.version, packageName)\n    }\n  } else {\n    debug('No cached update info, spawning worker to fetch')\n    spawnFetchWorker(config.version, packageName)\n  }\n}\n\n/**\n * Read and validate the cached latest version for a specific package.\n * The cache only stores the latest npm version (globally valid) - the installed\n * version is always resolved locally to avoid cross-project confusion.\n */\nfunction readCachedLatestVersion(\n  store: ReturnType<typeof getUserConfig>,\n  cacheKey: string,\n): {expired: boolean; latestVersion: string; updatedAt: number} | null {\n  const stored: unknown = store.get(cacheKey)\n\n  if (\n    !stored ||\n    typeof stored !== 'object' ||\n    !('updatedAt' in stored) ||\n    typeof stored.updatedAt !== 'number' ||\n    !('value' in stored) ||\n    typeof stored.value !== 'string'\n  ) {\n    return null\n  }\n\n  const expired = Date.now() - stored.updatedAt > TWELVE_HOURS\n  return {expired, latestVersion: stored.value, updatedAt: stored.updatedAt}\n}\n\n/**\n * Spawn a detached worker process to fetch the latest version and update the cache.\n * The worker is unref'd so the parent CLI can exit immediately.\n */\nfunction spawnFetchWorker(cliVersion: string, packageName: SanityPackage): void {\n  const workerPath = fileURLToPath(new URL('fetchUpdateInfo.worker.js', import.meta.url))\n  debug(`Spawning update check worker: ${process.execPath} ${workerPath}`)\n\n  spawn(process.execPath, [workerPath], {\n    detached: true,\n    env: {\n      ...process.env,\n      SANITY_UPDATE_CHECK_CLI_VERSION: cliVersion,\n      SANITY_UPDATE_CHECK_CWD: process.cwd(),\n      SANITY_UPDATE_CHECK_PACKAGE: packageName,\n    },\n    stdio: debug.enabled ? 'inherit' : 'ignore',\n  }).unref()\n}\n"],"names":["spawn","fileURLToPath","getUserConfig","isCi","subdebug","gt","semverGt","detectPackageRunner","resolveRunnerPackage","resolveUpdateTarget","showUpdateNotification","debug","TWELVE_HOURS","updateChecker","config","version","process","env","NO_UPDATE_NOTIFIER","stdout","isTTY","runner","installedVersion","packageName","argv","cwd","store","cacheKey","cached","readCachedLatestVersion","expired","latestVersion","updatedAt","notifiedKey","get","set","spawnFetchWorker","stored","value","Date","now","cliVersion","workerPath","URL","url","execPath","detached","SANITY_UPDATE_CHECK_CLI_VERSION","SANITY_UPDATE_CHECK_CWD","SANITY_UPDATE_CHECK_PACKAGE","stdio","enabled","unref"],"mappings":"AAAA,SAAQA,KAAK,QAAO,qBAAoB;AACxC,SAAQC,aAAa,QAAO,WAAU;AAEtC,SAAQC,aAAa,EAAEC,IAAI,EAAEC,QAAQ,QAAO,mBAAkB;AAC9D,SAAQC,MAAMC,QAAQ,QAAO,SAAQ;AAGrC,SAAQC,mBAAmB,QAAO,qBAAoB;AACtD,SAAQC,oBAAoB,QAAO,4BAA2B;AAC9D,SAAQC,mBAAmB,QAAO,2BAA0B;AAC5D,SAAQC,sBAAsB,QAAO,8BAA6B;AAElE,MAAMC,QAAQP,SAAS;AAEvB,MAAMQ,eAAe,KAAK,KAAK,KAAK;AAEpC;;;;;;;;CAQC,GACD,OAAO,eAAeC,cAAcC,MAAyB;IAC3DH,MAAM,CAAC,yBAAyB,EAAEG,OAAOC,OAAO,EAAE;IAElD,4BAA4B;IAC5B,IAAIZ,UAAUa,QAAQC,GAAG,CAACC,kBAAkB,EAAE;QAC5CP,MAAM;QACN;IACF;IAEA,IAAI,CAACK,QAAQG,MAAM,CAACC,KAAK,EAAE;QACzB;IACF;IAEA,MAAMC,SAASd;IACf,MAAM,EAACe,gBAAgB,EAAEC,WAAW,EAAC,GAAGF,SACpC,MAAMb,qBAAqBQ,QAAQQ,IAAI,CAAC,EAAE,IAAI,IAAIV,OAAOC,OAAO,IAChE,MAAMN,oBAAoBO,QAAQS,GAAG,IAAIX,OAAOC,OAAO;IAC3DJ,MAAM,0BAA0BY,aAAaD,kBAAkBD,SAAS,CAAC,KAAK,EAAEA,QAAQ,GAAG;IAE3F,MAAMK,QAAQxB;IACd,MAAMyB,WAAW,CAAC,cAAc,EAAEJ,aAAa;IAC/C,MAAMK,SAASC,wBAAwBH,OAAOC;IAE9C,IAAIC,QAAQ;QACV,MAAM,EAACE,OAAO,EAAEC,aAAa,EAAEC,SAAS,EAAC,GAAGJ;QAE5CjB,MACE,4CACAmB,UAAU,YAAY,OACtBP,aACAD,kBACAS;QAGF,IAAIzB,SAASyB,eAAeT,mBAAmB;YAC7C,MAAMW,cAAc,CAAC,WAAW,EAAEV,aAAa;YAC/C,IAAIG,MAAMQ,GAAG,CAACD,iBAAiBD,WAAW;gBACxCrB,MAAM,mEAAmEoB;YAC3E,OAAO;gBACLpB,MAAM,4BAA4BoB;gBAClC,MAAMrB,uBAAuBY,kBAAkBS,eAAeR,aAAaF;gBAC3EK,MAAMS,GAAG,CAACF,aAAaD;YACzB;QACF,OAAO;YACLrB,MAAM;QACR;QAEA,IAAImB,SAAS;YACXnB,MAAM;YACNyB,iBAAiBtB,OAAOC,OAAO,EAAEQ;QACnC;IACF,OAAO;QACLZ,MAAM;QACNyB,iBAAiBtB,OAAOC,OAAO,EAAEQ;IACnC;AACF;AAEA;;;;CAIC,GACD,SAASM,wBACPH,KAAuC,EACvCC,QAAgB;IAEhB,MAAMU,SAAkBX,MAAMQ,GAAG,CAACP;IAElC,IACE,CAACU,UACD,OAAOA,WAAW,YAClB,CAAE,CAAA,eAAeA,MAAK,KACtB,OAAOA,OAAOL,SAAS,KAAK,YAC5B,CAAE,CAAA,WAAWK,MAAK,KAClB,OAAOA,OAAOC,KAAK,KAAK,UACxB;QACA,OAAO;IACT;IAEA,MAAMR,UAAUS,KAAKC,GAAG,KAAKH,OAAOL,SAAS,GAAGpB;IAChD,OAAO;QAACkB;QAASC,eAAeM,OAAOC,KAAK;QAAEN,WAAWK,OAAOL,SAAS;IAAA;AAC3E;AAEA;;;CAGC,GACD,SAASI,iBAAiBK,UAAkB,EAAElB,WAA0B;IACtE,MAAMmB,aAAazC,cAAc,IAAI0C,IAAI,6BAA6B,YAAYC,GAAG;IACrFjC,MAAM,CAAC,8BAA8B,EAAEK,QAAQ6B,QAAQ,CAAC,CAAC,EAAEH,YAAY;IAEvE1C,MAAMgB,QAAQ6B,QAAQ,EAAE;QAACH;KAAW,EAAE;QACpCI,UAAU;QACV7B,KAAK;YACH,GAAGD,QAAQC,GAAG;YACd8B,iCAAiCN;YACjCO,yBAAyBhC,QAAQS,GAAG;YACpCwB,6BAA6B1B;QAC/B;QACA2B,OAAOvC,MAAMwC,OAAO,GAAG,YAAY;IACrC,GAAGC,KAAK;AACV"}