@sanity/cli 7.11.0 → 7.12.0

package/dist/actions/build/buildApp.js

@@ -1,5 +1,5 @@
 import { compareDependencyVersions, buildApp as internalBuildApp } from '@sanity/cli-build/_internal/build';
-import { resolveWorkbenchApp } from '@sanity/workbench-cli/build';
+import { buildAppId, resolveWorkbenchApp } from '@sanity/workbench-cli/build';
 import { getAppId } from '../../util/appId.js';
 import { warnAboutMissingAppId } from '../../util/warnAboutMissingAppId.js';
 import { determineBasePath } from './determineBasePath.js';
@@ -13,6 +13,11 @@ import { determineBasePath } from './determineBasePath.js';
     // `views`/`services` live on the branded `unstable_defineApp` result, not the
     // legacy `app` config object — resolve the workbench capability to read them.
     const workbench = resolveWorkbenchApp(cliConfig);
+    const exposes = workbench ? {
+        config: workbench.config,
+        services: workbench.services,
+        views: workbench.views
+    } : undefined;
     const appId = getAppId(cliConfig);
     await internalBuildApp({
         appId,
@@ -34,11 +39,7 @@ import { determineBasePath } from './determineBasePath.js';
             }),
         determineBasePath: ()=>determineBasePath(cliConfig, 'app', output),
         entry: app?.entry,
-        exposes: workbench ? {
-            config: workbench.config,
-            services: workbench.services,
-            views: workbench.views
-        } : undefined,
+        exposes,
         isWorkbenchApp: !!workbench,
         minify: flags.minify,
         outDir,
@@ -49,7 +50,9 @@ import { determineBasePath } from './determineBasePath.js';
         stats: flags.stats,
         unattendedMode: flags.yes,
         vite: cliConfig.vite,
-        workbenchAppId: workbench?.name,
+        // Shared with deploy: it passes the resolved application id (minted by the
+        // API on a first deploy) to inline; a plain build has none, so it hashes the shape.
+        workbenchAppId: workbench ? options.applicationId ?? buildAppId(workbench) : undefined,
         workDir
     });
 }

package/dist/actions/build/buildApp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/build/buildApp.ts"],"sourcesContent":["import {\n  compareDependencyVersions,\n  buildApp as internalBuildApp,\n} from '@sanity/cli-build/_internal/build'\nimport {resolveWorkbenchApp} from '@sanity/workbench-cli/build'\n\nimport {getAppId} from '../../util/appId.js'\nimport {warnAboutMissingAppId} from '../../util/warnAboutMissingAppId.js'\nimport {determineBasePath} from './determineBasePath.js'\nimport {type BuildOptions} from './types.js'\n\n/**\n * Build the Sanity app.\n *\n * @internal\n */\nexport async function buildApp(options: BuildOptions): Promise<void> {\n  const {cliConfig, flags, outDir, output, workDir} = options\n\n  const app = cliConfig && 'app' in cliConfig ? cliConfig.app : undefined\n  // `views`/`services` live on the branded `unstable_defineApp` result, not the\n  // legacy `app` config object — resolve the workbench capability to read them.\n  const workbench = resolveWorkbenchApp(cliConfig)\n\n  const appId = getAppId(cliConfig)\n\n  await internalBuildApp({\n    appId,\n    appTitle: app?.title,\n    autoUpdatesEnabled: options.autoUpdatesEnabled,\n    checkAppId: () => {\n      // Warn if auto updates enabled but no appId configured.\n      // Skip when called from deploy, since deploy handles appId itself\n      // (prompts the user and tells them to add it to config).\n      if (!appId && !options.calledFromDeploy) {\n        warnAboutMissingAppId({appType: 'app', output})\n      }\n    },\n    compareDependencyVersions: (packages) => compareDependencyVersions(packages, workDir, {appId}),\n    determineBasePath: () => determineBasePath(cliConfig, 'app', output),\n    entry: app?.entry,\n    exposes: workbench\n      ? {\n          config: workbench.config,\n          services: workbench.services,\n          views: workbench.views,\n        }\n      : undefined,\n    isWorkbenchApp: !!workbench,\n    minify: flags.minify,\n    outDir,\n    output,\n    reactCompiler: cliConfig && 'reactCompiler' in cliConfig ? cliConfig.reactCompiler : undefined,\n    schemaExtraction: cliConfig?.schemaExtraction,\n    sourceMap: Boolean(flags['source-maps']),\n    stats: flags.stats,\n    unattendedMode: flags.yes,\n    vite: cliConfig.vite,\n    workbenchAppId: workbench?.name,\n    workDir,\n  })\n}\n"],"names":["compareDependencyVersions","buildApp","internalBuildApp","resolveWorkbenchApp","getAppId","warnAboutMissingAppId","determineBasePath","options","cliConfig","flags","outDir","output","workDir","app","undefined","workbench","appId","appTitle","title","autoUpdatesEnabled","checkAppId","calledFromDeploy","appType","packages","entry","exposes","config","services","views","isWorkbenchApp","minify","reactCompiler","schemaExtraction","sourceMap","Boolean","stats","unattendedMode","yes","vite","workbenchAppId","name"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,YAAYC,gBAAgB,QACvB,oCAAmC;AAC1C,SAAQC,mBAAmB,QAAO,8BAA6B;AAE/D,SAAQC,QAAQ,QAAO,sBAAqB;AAC5C,SAAQC,qBAAqB,QAAO,sCAAqC;AACzE,SAAQC,iBAAiB,QAAO,yBAAwB;AAGxD;;;;CAIC,GACD,OAAO,eAAeL,SAASM,OAAqB;IAClD,MAAM,EAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAEC,MAAM,EAAEC,OAAO,EAAC,GAAGL;IAEpD,MAAMM,MAAML,aAAa,SAASA,YAAYA,UAAUK,GAAG,GAAGC;IAC9D,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAMC,YAAYZ,oBAAoBK;IAEtC,MAAMQ,QAAQZ,SAASI;IAEvB,MAAMN,iBAAiB;QACrBc;QACAC,UAAUJ,KAAKK;QACfC,oBAAoBZ,QAAQY,kBAAkB;QAC9CC,YAAY;YACV,wDAAwD;YACxD,kEAAkE;YAClE,yDAAyD;YACzD,IAAI,CAACJ,SAAS,CAACT,QAAQc,gBAAgB,EAAE;gBACvChB,sBAAsB;oBAACiB,SAAS;oBAAOX;gBAAM;YAC/C;QACF;QACAX,2BAA2B,CAACuB,WAAavB,0BAA0BuB,UAAUX,SAAS;gBAACI;YAAK;QAC5FV,mBAAmB,IAAMA,kBAAkBE,WAAW,OAAOG;QAC7Da,OAAOX,KAAKW;QACZC,SAASV,YACL;YACEW,QAAQX,UAAUW,MAAM;YACxBC,UAAUZ,UAAUY,QAAQ;YAC5BC,OAAOb,UAAUa,KAAK;QACxB,IACAd;QACJe,gBAAgB,CAAC,CAACd;QAClBe,QAAQrB,MAAMqB,MAAM;QACpBpB;QACAC;QACAoB,eAAevB,aAAa,mBAAmBA,YAAYA,UAAUuB,aAAa,GAAGjB;QACrFkB,kBAAkBxB,WAAWwB;QAC7BC,WAAWC,QAAQzB,KAAK,CAAC,cAAc;QACvC0B,OAAO1B,MAAM0B,KAAK;QAClBC,gBAAgB3B,MAAM4B,GAAG;QACzBC,MAAM9B,UAAU8B,IAAI;QACpBC,gBAAgBxB,WAAWyB;QAC3B5B;IACF;AACF"}
+{"version":3,"sources":["../../../src/actions/build/buildApp.ts"],"sourcesContent":["import {\n  compareDependencyVersions,\n  buildApp as internalBuildApp,\n} from '@sanity/cli-build/_internal/build'\nimport {buildAppId, resolveWorkbenchApp} from '@sanity/workbench-cli/build'\n\nimport {getAppId} from '../../util/appId.js'\nimport {warnAboutMissingAppId} from '../../util/warnAboutMissingAppId.js'\nimport {determineBasePath} from './determineBasePath.js'\nimport {type BuildOptions} from './types.js'\n\n/**\n * Build the Sanity app.\n *\n * @internal\n */\nexport async function buildApp(options: BuildOptions): Promise<void> {\n  const {cliConfig, flags, outDir, output, workDir} = options\n\n  const app = cliConfig && 'app' in cliConfig ? cliConfig.app : undefined\n  // `views`/`services` live on the branded `unstable_defineApp` result, not the\n  // legacy `app` config object — resolve the workbench capability to read them.\n  const workbench = resolveWorkbenchApp(cliConfig)\n  const exposes = workbench\n    ? {config: workbench.config, services: workbench.services, views: workbench.views}\n    : undefined\n\n  const appId = getAppId(cliConfig)\n\n  await internalBuildApp({\n    appId,\n    appTitle: app?.title,\n    autoUpdatesEnabled: options.autoUpdatesEnabled,\n    checkAppId: () => {\n      // Warn if auto updates enabled but no appId configured.\n      // Skip when called from deploy, since deploy handles appId itself\n      // (prompts the user and tells them to add it to config).\n      if (!appId && !options.calledFromDeploy) {\n        warnAboutMissingAppId({appType: 'app', output})\n      }\n    },\n    compareDependencyVersions: (packages) => compareDependencyVersions(packages, workDir, {appId}),\n    determineBasePath: () => determineBasePath(cliConfig, 'app', output),\n    entry: app?.entry,\n    exposes,\n    isWorkbenchApp: !!workbench,\n    minify: flags.minify,\n    outDir,\n    output,\n    reactCompiler: cliConfig && 'reactCompiler' in cliConfig ? cliConfig.reactCompiler : undefined,\n    schemaExtraction: cliConfig?.schemaExtraction,\n    sourceMap: Boolean(flags['source-maps']),\n    stats: flags.stats,\n    unattendedMode: flags.yes,\n    vite: cliConfig.vite,\n    // Shared with deploy: it passes the resolved application id (minted by the\n    // API on a first deploy) to inline; a plain build has none, so it hashes the shape.\n    workbenchAppId: workbench ? (options.applicationId ?? buildAppId(workbench)) : undefined,\n    workDir,\n  })\n}\n"],"names":["compareDependencyVersions","buildApp","internalBuildApp","buildAppId","resolveWorkbenchApp","getAppId","warnAboutMissingAppId","determineBasePath","options","cliConfig","flags","outDir","output","workDir","app","undefined","workbench","exposes","config","services","views","appId","appTitle","title","autoUpdatesEnabled","checkAppId","calledFromDeploy","appType","packages","entry","isWorkbenchApp","minify","reactCompiler","schemaExtraction","sourceMap","Boolean","stats","unattendedMode","yes","vite","workbenchAppId","applicationId"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,YAAYC,gBAAgB,QACvB,oCAAmC;AAC1C,SAAQC,UAAU,EAAEC,mBAAmB,QAAO,8BAA6B;AAE3E,SAAQC,QAAQ,QAAO,sBAAqB;AAC5C,SAAQC,qBAAqB,QAAO,sCAAqC;AACzE,SAAQC,iBAAiB,QAAO,yBAAwB;AAGxD;;;;CAIC,GACD,OAAO,eAAeN,SAASO,OAAqB;IAClD,MAAM,EAACC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAEC,MAAM,EAAEC,OAAO,EAAC,GAAGL;IAEpD,MAAMM,MAAML,aAAa,SAASA,YAAYA,UAAUK,GAAG,GAAGC;IAC9D,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAMC,YAAYZ,oBAAoBK;IACtC,MAAMQ,UAAUD,YACZ;QAACE,QAAQF,UAAUE,MAAM;QAAEC,UAAUH,UAAUG,QAAQ;QAAEC,OAAOJ,UAAUI,KAAK;IAAA,IAC/EL;IAEJ,MAAMM,QAAQhB,SAASI;IAEvB,MAAMP,iBAAiB;QACrBmB;QACAC,UAAUR,KAAKS;QACfC,oBAAoBhB,QAAQgB,kBAAkB;QAC9CC,YAAY;YACV,wDAAwD;YACxD,kEAAkE;YAClE,yDAAyD;YACzD,IAAI,CAACJ,SAAS,CAACb,QAAQkB,gBAAgB,EAAE;gBACvCpB,sBAAsB;oBAACqB,SAAS;oBAAOf;gBAAM;YAC/C;QACF;QACAZ,2BAA2B,CAAC4B,WAAa5B,0BAA0B4B,UAAUf,SAAS;gBAACQ;YAAK;QAC5Fd,mBAAmB,IAAMA,kBAAkBE,WAAW,OAAOG;QAC7DiB,OAAOf,KAAKe;QACZZ;QACAa,gBAAgB,CAAC,CAACd;QAClBe,QAAQrB,MAAMqB,MAAM;QACpBpB;QACAC;QACAoB,eAAevB,aAAa,mBAAmBA,YAAYA,UAAUuB,aAAa,GAAGjB;QACrFkB,kBAAkBxB,WAAWwB;QAC7BC,WAAWC,QAAQzB,KAAK,CAAC,cAAc;QACvC0B,OAAO1B,MAAM0B,KAAK;QAClBC,gBAAgB3B,MAAM4B,GAAG;QACzBC,MAAM9B,UAAU8B,IAAI;QACpB,2EAA2E;QAC3E,oFAAoF;QACpFC,gBAAgBxB,YAAaR,QAAQiC,aAAa,IAAItC,WAAWa,aAAcD;QAC/EF;IACF;AACF"}

package/dist/actions/build/buildStudio.js

@@ -1,5 +1,5 @@
 import { compareDependencyVersions, buildStudio as internalBuildStudio } from '@sanity/cli-build/_internal/build';
-import { resolveWorkbenchApp } from '@sanity/workbench-cli/build';
+import { buildAppId, resolveWorkbenchApp } from '@sanity/workbench-cli/build';
 import { getAppId } from '../../util/appId.js';
 import { determineIsApp } from '../../util/determineIsApp.js';
 import { getPackageManagerChoice } from '../../util/packageManager/packageManagerChoice.js';
@@ -15,6 +15,10 @@ import { determineBasePath } from './determineBasePath.js';
     // `views`/`services` live on the branded `unstable_defineApp` result — resolve
     // the workbench capability so it's gated on the brand, like the app build.
     const workbench = resolveWorkbenchApp(cliConfig);
+    const exposes = workbench ? {
+        services: workbench.services,
+        views: workbench.views
+    } : undefined;
     const appId = getAppId(cliConfig);
     const upgradePkgs = async (options)=>{
         await upgradePackages({
@@ -46,10 +50,7 @@ import { determineBasePath } from './determineBasePath.js';
                 appId
             }),
         determineBasePath: ()=>determineBasePath(cliConfig, 'studio', output),
-        exposes: workbench ? {
-            services: workbench.services,
-            views: workbench.views
-        } : undefined,
+        exposes,
         isApp: determineIsApp(cliConfig),
         isWorkbenchApp: !!workbench,
         minify: Boolean(flags.minify),
@@ -62,7 +63,9 @@ import { determineBasePath } from './determineBasePath.js';
         unattendedMode: Boolean(flags.yes),
         upgradePackages: upgradePkgs,
         vite: cliConfig.vite,
-        workbenchAppId: workbench?.name,
+        // Shared with deploy: it passes the resolved application id (minted by the
+        // API on a first deploy) to inline; a plain build has none, so it hashes the shape.
+        workbenchAppId: workbench ? options.applicationId ?? buildAppId(workbench) : undefined,
         workDir
     });
 }

package/dist/actions/build/buildStudio.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/build/buildStudio.ts"],"sourcesContent":["import {\n  compareDependencyVersions,\n  buildStudio as internalBuildStudio,\n} from '@sanity/cli-build/_internal/build'\nimport {resolveWorkbenchApp} from '@sanity/workbench-cli/build'\n\nimport {getAppId} from '../../util/appId.js'\nimport {determineIsApp} from '../../util/determineIsApp.js'\nimport {getPackageManagerChoice} from '../../util/packageManager/packageManagerChoice.js'\nimport {upgradePackages} from '../../util/packageManager/upgradePackages.js'\nimport {warnAboutMissingAppId} from '../../util/warnAboutMissingAppId.js'\nimport {determineBasePath} from './determineBasePath.js'\nimport {type BuildOptions} from './types.js'\n\n/**\n * Build the Sanity Studio.\n *\n * @internal\n */\nexport async function buildStudio(options: BuildOptions): Promise<void> {\n  const {calledFromDeploy, cliConfig, flags, outDir, output, workDir} = options\n\n  // `views`/`services` live on the branded `unstable_defineApp` result — resolve\n  // the workbench capability so it's gated on the brand, like the app build.\n  const workbench = resolveWorkbenchApp(cliConfig)\n\n  const appId = getAppId(cliConfig)\n\n  const upgradePkgs = async (options: {\n    packages: [name: string, version: string][]\n  }): Promise<void> => {\n    await upgradePackages(\n      {\n        packageManager: (await getPackageManagerChoice(workDir, {interactive: false})).chosen,\n        packages: options.packages,\n      },\n      {output, workDir},\n    )\n  }\n\n  await internalBuildStudio({\n    appId,\n    autoUpdatesEnabled: options.autoUpdatesEnabled,\n    checkAppId: () => {\n      // Warn if auto updates enabled but no appId configured.\n      // Skip when called from deploy, since deploy handles appId itself\n      // (prompts the user and tells them to add it to config).\n      if (!appId && !calledFromDeploy) {\n        warnAboutMissingAppId({appType: 'studio', output, projectId: cliConfig?.api?.projectId})\n      }\n    },\n    compareDependencyVersions: (packages) => compareDependencyVersions(packages, workDir, {appId}),\n    determineBasePath: () => determineBasePath(cliConfig, 'studio', output),\n    exposes: workbench ? {services: workbench.services, views: workbench.views} : undefined,\n    isApp: determineIsApp(cliConfig),\n    isWorkbenchApp: !!workbench,\n    minify: Boolean(flags.minify),\n    outDir,\n    output,\n    reactCompiler: cliConfig.reactCompiler,\n    schemaExtraction: cliConfig.schemaExtraction,\n    sourceMap: Boolean(flags['source-maps']),\n    stats: flags.stats,\n    unattendedMode: Boolean(flags.yes),\n    upgradePackages: upgradePkgs,\n    vite: cliConfig.vite,\n    workbenchAppId: workbench?.name,\n    workDir,\n  })\n}\n"],"names":["compareDependencyVersions","buildStudio","internalBuildStudio","resolveWorkbenchApp","getAppId","determineIsApp","getPackageManagerChoice","upgradePackages","warnAboutMissingAppId","determineBasePath","options","calledFromDeploy","cliConfig","flags","outDir","output","workDir","workbench","appId","upgradePkgs","packageManager","interactive","chosen","packages","autoUpdatesEnabled","checkAppId","appType","projectId","api","exposes","services","views","undefined","isApp","isWorkbenchApp","minify","Boolean","reactCompiler","schemaExtraction","sourceMap","stats","unattendedMode","yes","vite","workbenchAppId","name"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,eAAeC,mBAAmB,QAC7B,oCAAmC;AAC1C,SAAQC,mBAAmB,QAAO,8BAA6B;AAE/D,SAAQC,QAAQ,QAAO,sBAAqB;AAC5C,SAAQC,cAAc,QAAO,+BAA8B;AAC3D,SAAQC,uBAAuB,QAAO,oDAAmD;AACzF,SAAQC,eAAe,QAAO,+CAA8C;AAC5E,SAAQC,qBAAqB,QAAO,sCAAqC;AACzE,SAAQC,iBAAiB,QAAO,yBAAwB;AAGxD;;;;CAIC,GACD,OAAO,eAAeR,YAAYS,OAAqB;IACrD,MAAM,EAACC,gBAAgB,EAAEC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAEC,MAAM,EAAEC,OAAO,EAAC,GAAGN;IAEtE,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAMO,YAAYd,oBAAoBS;IAEtC,MAAMM,QAAQd,SAASQ;IAEvB,MAAMO,cAAc,OAAOT;QAGzB,MAAMH,gBACJ;YACEa,gBAAgB,AAAC,CAAA,MAAMd,wBAAwBU,SAAS;gBAACK,aAAa;YAAK,EAAC,EAAGC,MAAM;YACrFC,UAAUb,QAAQa,QAAQ;QAC5B,GACA;YAACR;YAAQC;QAAO;IAEpB;IAEA,MAAMd,oBAAoB;QACxBgB;QACAM,oBAAoBd,QAAQc,kBAAkB;QAC9CC,YAAY;YACV,wDAAwD;YACxD,kEAAkE;YAClE,yDAAyD;YACzD,IAAI,CAACP,SAAS,CAACP,kBAAkB;gBAC/BH,sBAAsB;oBAACkB,SAAS;oBAAUX;oBAAQY,WAAWf,WAAWgB,KAAKD;gBAAS;YACxF;QACF;QACA3B,2BAA2B,CAACuB,WAAavB,0BAA0BuB,UAAUP,SAAS;gBAACE;YAAK;QAC5FT,mBAAmB,IAAMA,kBAAkBG,WAAW,UAAUG;QAChEc,SAASZ,YAAY;YAACa,UAAUb,UAAUa,QAAQ;YAAEC,OAAOd,UAAUc,KAAK;QAAA,IAAIC;QAC9EC,OAAO5B,eAAeO;QACtBsB,gBAAgB,CAAC,CAACjB;QAClBkB,QAAQC,QAAQvB,MAAMsB,MAAM;QAC5BrB;QACAC;QACAsB,eAAezB,UAAUyB,aAAa;QACtCC,kBAAkB1B,UAAU0B,gBAAgB;QAC5CC,WAAWH,QAAQvB,KAAK,CAAC,cAAc;QACvC2B,OAAO3B,MAAM2B,KAAK;QAClBC,gBAAgBL,QAAQvB,MAAM6B,GAAG;QACjCnC,iBAAiBY;QACjBwB,MAAM/B,UAAU+B,IAAI;QACpBC,gBAAgB3B,WAAW4B;QAC3B7B;IACF;AACF"}
+{"version":3,"sources":["../../../src/actions/build/buildStudio.ts"],"sourcesContent":["import {\n  compareDependencyVersions,\n  buildStudio as internalBuildStudio,\n} from '@sanity/cli-build/_internal/build'\nimport {buildAppId, resolveWorkbenchApp} from '@sanity/workbench-cli/build'\n\nimport {getAppId} from '../../util/appId.js'\nimport {determineIsApp} from '../../util/determineIsApp.js'\nimport {getPackageManagerChoice} from '../../util/packageManager/packageManagerChoice.js'\nimport {upgradePackages} from '../../util/packageManager/upgradePackages.js'\nimport {warnAboutMissingAppId} from '../../util/warnAboutMissingAppId.js'\nimport {determineBasePath} from './determineBasePath.js'\nimport {type BuildOptions} from './types.js'\n\n/**\n * Build the Sanity Studio.\n *\n * @internal\n */\nexport async function buildStudio(options: BuildOptions): Promise<void> {\n  const {calledFromDeploy, cliConfig, flags, outDir, output, workDir} = options\n\n  // `views`/`services` live on the branded `unstable_defineApp` result — resolve\n  // the workbench capability so it's gated on the brand, like the app build.\n  const workbench = resolveWorkbenchApp(cliConfig)\n  const exposes = workbench ? {services: workbench.services, views: workbench.views} : undefined\n\n  const appId = getAppId(cliConfig)\n\n  const upgradePkgs = async (options: {\n    packages: [name: string, version: string][]\n  }): Promise<void> => {\n    await upgradePackages(\n      {\n        packageManager: (await getPackageManagerChoice(workDir, {interactive: false})).chosen,\n        packages: options.packages,\n      },\n      {output, workDir},\n    )\n  }\n\n  await internalBuildStudio({\n    appId,\n    autoUpdatesEnabled: options.autoUpdatesEnabled,\n    checkAppId: () => {\n      // Warn if auto updates enabled but no appId configured.\n      // Skip when called from deploy, since deploy handles appId itself\n      // (prompts the user and tells them to add it to config).\n      if (!appId && !calledFromDeploy) {\n        warnAboutMissingAppId({appType: 'studio', output, projectId: cliConfig?.api?.projectId})\n      }\n    },\n    compareDependencyVersions: (packages) => compareDependencyVersions(packages, workDir, {appId}),\n    determineBasePath: () => determineBasePath(cliConfig, 'studio', output),\n    exposes,\n    isApp: determineIsApp(cliConfig),\n    isWorkbenchApp: !!workbench,\n    minify: Boolean(flags.minify),\n    outDir,\n    output,\n    reactCompiler: cliConfig.reactCompiler,\n    schemaExtraction: cliConfig.schemaExtraction,\n    sourceMap: Boolean(flags['source-maps']),\n    stats: flags.stats,\n    unattendedMode: Boolean(flags.yes),\n    upgradePackages: upgradePkgs,\n    vite: cliConfig.vite,\n    // Shared with deploy: it passes the resolved application id (minted by the\n    // API on a first deploy) to inline; a plain build has none, so it hashes the shape.\n    workbenchAppId: workbench ? (options.applicationId ?? buildAppId(workbench)) : undefined,\n    workDir,\n  })\n}\n"],"names":["compareDependencyVersions","buildStudio","internalBuildStudio","buildAppId","resolveWorkbenchApp","getAppId","determineIsApp","getPackageManagerChoice","upgradePackages","warnAboutMissingAppId","determineBasePath","options","calledFromDeploy","cliConfig","flags","outDir","output","workDir","workbench","exposes","services","views","undefined","appId","upgradePkgs","packageManager","interactive","chosen","packages","autoUpdatesEnabled","checkAppId","appType","projectId","api","isApp","isWorkbenchApp","minify","Boolean","reactCompiler","schemaExtraction","sourceMap","stats","unattendedMode","yes","vite","workbenchAppId","applicationId"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,eAAeC,mBAAmB,QAC7B,oCAAmC;AAC1C,SAAQC,UAAU,EAAEC,mBAAmB,QAAO,8BAA6B;AAE3E,SAAQC,QAAQ,QAAO,sBAAqB;AAC5C,SAAQC,cAAc,QAAO,+BAA8B;AAC3D,SAAQC,uBAAuB,QAAO,oDAAmD;AACzF,SAAQC,eAAe,QAAO,+CAA8C;AAC5E,SAAQC,qBAAqB,QAAO,sCAAqC;AACzE,SAAQC,iBAAiB,QAAO,yBAAwB;AAGxD;;;;CAIC,GACD,OAAO,eAAeT,YAAYU,OAAqB;IACrD,MAAM,EAACC,gBAAgB,EAAEC,SAAS,EAAEC,KAAK,EAAEC,MAAM,EAAEC,MAAM,EAAEC,OAAO,EAAC,GAAGN;IAEtE,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAMO,YAAYd,oBAAoBS;IACtC,MAAMM,UAAUD,YAAY;QAACE,UAAUF,UAAUE,QAAQ;QAAEC,OAAOH,UAAUG,KAAK;IAAA,IAAIC;IAErF,MAAMC,QAAQlB,SAASQ;IAEvB,MAAMW,cAAc,OAAOb;QAGzB,MAAMH,gBACJ;YACEiB,gBAAgB,AAAC,CAAA,MAAMlB,wBAAwBU,SAAS;gBAACS,aAAa;YAAK,EAAC,EAAGC,MAAM;YACrFC,UAAUjB,QAAQiB,QAAQ;QAC5B,GACA;YAACZ;YAAQC;QAAO;IAEpB;IAEA,MAAMf,oBAAoB;QACxBqB;QACAM,oBAAoBlB,QAAQkB,kBAAkB;QAC9CC,YAAY;YACV,wDAAwD;YACxD,kEAAkE;YAClE,yDAAyD;YACzD,IAAI,CAACP,SAAS,CAACX,kBAAkB;gBAC/BH,sBAAsB;oBAACsB,SAAS;oBAAUf;oBAAQgB,WAAWnB,WAAWoB,KAAKD;gBAAS;YACxF;QACF;QACAhC,2BAA2B,CAAC4B,WAAa5B,0BAA0B4B,UAAUX,SAAS;gBAACM;YAAK;QAC5Fb,mBAAmB,IAAMA,kBAAkBG,WAAW,UAAUG;QAChEG;QACAe,OAAO5B,eAAeO;QACtBsB,gBAAgB,CAAC,CAACjB;QAClBkB,QAAQC,QAAQvB,MAAMsB,MAAM;QAC5BrB;QACAC;QACAsB,eAAezB,UAAUyB,aAAa;QACtCC,kBAAkB1B,UAAU0B,gBAAgB;QAC5CC,WAAWH,QAAQvB,KAAK,CAAC,cAAc;QACvC2B,OAAO3B,MAAM2B,KAAK;QAClBC,gBAAgBL,QAAQvB,MAAM6B,GAAG;QACjCnC,iBAAiBgB;QACjBoB,MAAM/B,UAAU+B,IAAI;QACpB,2EAA2E;QAC3E,oFAAoF;QACpFC,gBAAgB3B,YAAaP,QAAQmC,aAAa,IAAI3C,WAAWe,aAAcI;QAC/EL;IACF;AACF"}

package/dist/actions/build/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/build/types.ts"],"sourcesContent":["import {type CliConfig, type Output} from '@sanity/cli-core'\n\nimport {BuildCommand} from '../../commands/build.js'\nimport {type DeployFlags} from '../deploy/types.js'\n\nexport type BuildFlags = BuildCommand['flags']\n\nexport interface BuildOptions {\n  autoUpdatesEnabled: boolean\n  cliConfig: CliConfig\n  flags: BuildFlags | DeployFlags\n  output: Output\n\n  workDir: string\n\n  calledFromDeploy?: boolean\n  outDir?: string\n}\n"],"names":[],"mappings":"AAOA,WAUC"}
+{"version":3,"sources":["../../../src/actions/build/types.ts"],"sourcesContent":["import {type CliConfig, type Output} from '@sanity/cli-core'\n\nimport {BuildCommand} from '../../commands/build.js'\nimport {type DeployFlags} from '../deploy/types.js'\n\nexport type BuildFlags = BuildCommand['flags']\n\nexport interface BuildOptions {\n  autoUpdatesEnabled: boolean\n  cliConfig: CliConfig\n  flags: BuildFlags | DeployFlags\n  output: Output\n\n  workDir: string\n\n  applicationId?: string\n  calledFromDeploy?: boolean\n  outDir?: string\n}\n"],"names":[],"mappings":"AAOA,WAWC"}

package/dist/actions/deploy/deployApp.js

@@ -5,14 +5,14 @@ import { exitCodes } from '@sanity/cli-core';
 import { getErrorMessage } from '@sanity/cli-core/errors';
 import { getCoreAppUrl } from '@sanity/cli-core/util';
 import { spinner } from '@sanity/cli-core/ux';
-import { buildExposes, deployConfig, deployCoreApp as deployWorkbenchCoreApp, getApplicationUrl, getWorkbench, resolveInstallationId, summarizeConfig } from '@sanity/workbench-cli/deploy';
+import { buildExposes, createCoreApp, deployConfig, deployWorkbenchApp, getApplicationUrl, getWorkbench, resolveInstallationId, summarizeConfig } from '@sanity/workbench-cli/deploy';
 import { pack } from 'tar-fs';
 import { createDeployment, updateUserApplication } from '../../services/userApplications.js';
 import { getAppId } from '../../util/appId.js';
 import { EXTERNAL_APP_NOT_SUPPORTED, NO_ORGANIZATION_ID } from '../../util/errorMessages.js';
 import { buildApp } from '../build/buildApp.js';
 import { extractCoreAppManifest, readIconFromPath, resolveTitleUpdate } from '../manifest/extractCoreAppManifest.js';
-import { createUserApplication, generateAppSlug } from './createUserApplication.js';
+import { createUserApplication } from './createUserApplication.js';
 import { checkAppId, checkAppTarget, checkAutoUpdates, checkBuild, checkPackageVersion, verifyOutputDir } from './deployChecks.js';
 import { deployDebug } from './deployDebug.js';
 import { listDeploymentFiles, reportExposes } from './deploymentPlan.js';
@@ -103,193 +103,236 @@ export function deployApp(options) {
             reporter
         }));
     }
-    await checkBuild(reporter, {
-        build: ()=>buildApp({
-                autoUpdatesEnabled: isAutoUpdating,
-                calledFromDeploy: true,
-                cliConfig,
-                flags,
-                outDir: sourceDir,
-                output,
-                workDir
-            }),
-        skipReason: flags.build ? undefined : 'Build skipped (--no-build) — validating existing output directory',
-        successMessage: 'App built'
-    });
-    await verifyOutputDir({
-        isWorkbenchApp: workbench !== null,
-        reporter,
-        sourceDir
-    });
-    // Workbench apps ship their icon straight to Brett (below) and don't read the
-    // core-app manifest; only plain core-apps do. Manifests aren't strictly
-    // essential, so a failure warns and continues.
-    let manifest;
-    if (!workbench) {
-        try {
-            manifest = await extractCoreAppManifest({
-                workDir
-            });
-        } catch (err) {
-            deployDebug('Error extracting app manifest', err);
-            reporter.report({
-                message: `Error extracting app manifest: ${getErrorMessage(err)}`,
-                status: 'warn'
-            });
-        }
-    }
-    // Resolve the installation in both modes so the report — dry-run and real —
-    // shows whether the config is deployable; a missing one fails the deploy here.
-    let installationId;
-    let config;
-    const configAppType = workbench?.config?.appType;
-    if (deploySingletonConfig && organizationId && workbench?.config && configAppType) {
-        installationId = await resolveInstallationId({
-            appType: configAppType,
-            organizationId
-        });
-        config = summarizeConfig(workbench.config);
-        reporter.report(installationId ? {
-            config,
-            message: config,
-            status: 'pass'
-        } : {
+    // A first deploy mints the app id and the build inlines it; --no-build would
+    // ship an existing bundle carrying a different id, so it can't be a first deploy.
+    if (deployApplication && workbench && !appId && !flags.external && !flags.build) {
+        reporter.report({
             exitCode: exitCodes.USAGE_ERROR,
-            message: `No active "${configAppType}" installation for organization "${organizationId}"`,
-            solution: 'Install the Media Library for the organization before deploying its config',
+            message: 'A first deploy cannot skip the build (--no-build)',
+            solution: 'Drop --no-build so the new application id is inlined into the build',
             status: 'fail'
         });
     }
-    // Report the exposes deploying with the application, both modes.
-    const exposes = deployApplication && workbench ? reportExposes(reporter, workbench) : [];
-    // Surface the app's explicit singleton flag when set, both modes.
-    if (deployApplication && workbench?.isSingleton !== undefined) {
-        reporter.report({
+    // Read up front so a bad icon path fails before we create or build.
+    const appIcon = !dryRun && workbench?.icon ? await readIconFromPath(workDir, workbench.icon) : undefined;
+    // Create the app before the build so the bundle carries its real id. A
+    // redeploy already has it from `deployment.appId`; a dry run skips creation.
+    let applicationId = appId;
+    let applicationCreated = false;
+    let rollbackApp;
+    if (!dryRun && deployApplication && workbench && organizationId && !applicationId) {
+        ;
+        ({ applicationId, rollback: rollbackApp } = await createCoreApp({
             isSingleton: workbench.isSingleton,
-            message: `Singleton: ${workbench.isSingleton}`,
-            status: 'pass'
-        });
-    }
-    // Dry run stops here — everything below mutates.
-    if (dryRun) return;
-    if (installationId && version && configAppType && organizationId) {
-        await deployConfig({
-            appType: configAppType,
-            installationId,
             organizationId,
-            output,
-            sourceDir,
-            version
-        });
+            slug: workbench.slug,
+            title: appTitle,
+            visibility: workbench.visibility
+        }));
+        applicationCreated = true;
     }
-    // A config-only singleton ships no application, only its config.
-    if (!deployApplication) {
-        if (installationId && version) {
+    // A record created above is stranded at its slug (and blocks retries) if any
+    // step before it fully deploys fails, so undo the creation on failure.
+    try {
+        await checkBuild(reporter, {
+            build: ()=>buildApp({
+                    applicationId: workbench ? applicationId : undefined,
+                    autoUpdatesEnabled: isAutoUpdating,
+                    calledFromDeploy: true,
+                    cliConfig,
+                    flags,
+                    outDir: sourceDir,
+                    output,
+                    workDir
+                }),
+            skipReason: flags.build ? undefined : 'Build skipped (--no-build) — validating existing output directory',
+            successMessage: 'App built'
+        });
+        await verifyOutputDir({
+            isWorkbenchApp: workbench !== null,
+            reporter,
+            sourceDir
+        });
+        // Workbench apps ship their icon straight to Brett (below) and don't read the
+        // core-app manifest; only plain core-apps do. Manifests aren't strictly
+        // essential, so a failure warns and continues.
+        let manifest;
+        if (!workbench) {
+            try {
+                manifest = await extractCoreAppManifest({
+                    workDir
+                });
+            } catch (err) {
+                deployDebug('Error extracting app manifest', err);
+                reporter.report({
+                    message: `Error extracting app manifest: ${getErrorMessage(err)}`,
+                    status: 'warn'
+                });
+            }
+        }
+        // Resolve the installation in both modes so the report — dry-run and real —
+        // shows whether the config is deployable; a missing one fails the deploy here.
+        let installationId;
+        let config;
+        const configAppType = workbench?.config?.appType;
+        if (deploySingletonConfig && organizationId && workbench?.config && configAppType) {
+            installationId = await resolveInstallationId({
+                appType: configAppType,
+                organizationId
+            });
+            config = summarizeConfig(workbench.config);
+            reporter.report(installationId ? {
+                config,
+                message: config,
+                status: 'pass'
+            } : {
+                exitCode: exitCodes.USAGE_ERROR,
+                message: `No active "${configAppType}" installation for organization "${organizationId}"`,
+                solution: 'Install the Media Library for the organization before deploying its config',
+                status: 'fail'
+            });
+        }
+        // Report the exposes deploying with the application, both modes.
+        const exposes = deployApplication && workbench ? reportExposes(reporter, workbench) : [];
+        // Surface the app's explicit singleton flag when set, both modes.
+        if (deployApplication && workbench?.isSingleton !== undefined) {
+            reporter.report({
+                isSingleton: workbench.isSingleton,
+                message: `Singleton: ${workbench.isSingleton}`,
+                status: 'pass'
+            });
+        }
+        // Applied after the app is live (see below) so a failed deploy never leaves
+        // the org's installation config without its application.
+        const deployApplicationConfig = async ()=>{
+            if (installationId && version && configAppType && organizationId) {
+                await deployConfig({
+                    appType: configAppType,
+                    installationId,
+                    organizationId,
+                    output,
+                    sourceDir,
+                    version
+                });
+            }
+        };
+        // Dry run stops here — everything below mutates.
+        if (dryRun) return;
+        // A config-only singleton ships no application, only its config.
+        if (!deployApplication) {
+            await deployApplicationConfig();
+            if (installationId && version) {
+                return {
+                    applicationType: 'coreApp',
+                    applicationVersion: version,
+                    ...config ? {
+                        config
+                    } : {},
+                    installationId,
+                    target: null
+                };
+            }
+            return;
+        }
+        // A real deploy already exited on a version-resolution failure; this narrows the type.
+        if (!version) return;
+        // The app was created (or resolved from `deployment.appId`) before the build,
+        // so this only ships the deployment; plain coreApps use user-applications below.
+        if (workbench && organizationId && applicationId) {
+            await deployWorkbenchApp({
+                applicationId,
+                icon: appIcon,
+                interfaces: buildExposes(workbench, {
+                    appName: workbench.name,
+                    appTitle,
+                    exposesAppView: workbench.entry !== undefined,
+                    version
+                }),
+                isAutoUpdating,
+                // Once the deployment is live, a metadata-sync or later config failure
+                // must not delete the app.
+                onDeployed: ()=>{
+                    rollbackApp = undefined;
+                },
+                sourceDir,
+                title: appTitle,
+                version,
+                visibility: workbench.visibility
+            });
+            await deployApplicationConfig();
+            const url = getApplicationUrl({
+                id: applicationId,
+                organizationId,
+                type: 'coreApp'
+            });
+            logAppDeployed({
+                applicationId,
+                cliConfig,
+                created: applicationCreated,
+                organizationId,
+                output,
+                title: appTitle,
+                url
+            });
             return {
                 applicationType: 'coreApp',
                 applicationVersion: version,
-                ...config ? {
-                    config
+                ...exposes.length > 0 ? {
+                    exposes
                 } : {},
-                installationId,
-                target: null
+                ...workbench.isSingleton === undefined ? {} : {
+                    isSingleton: workbench.isSingleton
+                },
+                target: {
+                    action: applicationCreated ? 'create' : 'update',
+                    applicationId,
+                    // A redeploy targets an existing app; only a create reports the slug.
+                    ...applicationCreated ? {
+                        slug: workbench.slug
+                    } : {},
+                    title: appTitle,
+                    url
+                }
             };
         }
-        return;
-    }
-    // A real deploy already exited on a version-resolution failure; this narrows the type.
-    if (!version) return;
-    // Workbench apps deploy to Brett; plain coreApps use user-applications.
-    if (workbench && organizationId) {
-        const appId = getAppId(cliConfig);
-        const slug = workbench.slug ?? generateAppSlug();
-        const { applicationId } = await deployWorkbenchCoreApp({
-            appId,
-            icon: workbench.icon ? await readIconFromPath(workDir, workbench.icon) : undefined,
-            interfaces: buildExposes(workbench, {
-                appName: workbench.name,
-                appTitle,
-                exposesAppView: workbench.entry !== undefined,
-                version
-            }),
+        // A real deploy has already exited if anything failed; landing here without a
+        // resolved application means the deploy target was never resolved.
+        if (!application) return;
+        application = await syncApplicationMetadata({
+            application,
+            manifest,
+            output,
+            visibility: cliConfig.app?.visibility
+        });
+        await shipAppDeployment({
+            application,
             isAutoUpdating,
-            isSingleton: workbench.isSingleton,
-            organizationId,
-            slug,
+            manifest,
             sourceDir,
-            title: appTitle,
-            version,
-            visibility: workbench.visibility
-        });
-        const url = getApplicationUrl({
-            id: applicationId,
-            organizationId,
-            type: 'coreApp'
+            version
         });
         logAppDeployed({
-            applicationId,
+            applicationId: application.id,
             cliConfig,
-            created: !appId,
-            organizationId,
+            created: appCreated,
+            organizationId: application.organizationId,
             output,
-            title: appTitle,
-            url
+            title: application.title
         });
         return {
             applicationType: 'coreApp',
             applicationVersion: version,
-            ...exposes.length > 0 ? {
-                exposes
-            } : {},
-            ...workbench.isSingleton === undefined ? {} : {
-                isSingleton: workbench.isSingleton
-            },
             target: {
-                action: appId ? 'update' : 'create',
-                applicationId,
-                // A redeploy ignores the slug, so only a create reports the one it used.
-                ...appId ? {} : {
-                    slug
-                },
-                title: appTitle,
-                url
+                action: appCreated ? 'create' : 'update',
+                applicationId: application.id,
+                title: application.title ?? null,
+                url: getCoreAppUrl(application.organizationId, application.id)
             }
         };
+    } catch (err) {
+        await rollbackApp?.();
+        throw err;
     }
-    // A real deploy has already exited if anything failed; landing here without a
-    // resolved application means the deploy target was never resolved.
-    if (!application) return;
-    application = await syncApplicationMetadata({
-        application,
-        manifest,
-        output,
-        visibility: cliConfig.app?.visibility
-    });
-    await shipAppDeployment({
-        application,
-        isAutoUpdating,
-        manifest,
-        sourceDir,
-        version
-    });
-    logAppDeployed({
-        applicationId: application.id,
-        cliConfig,
-        created: appCreated,
-        organizationId: application.organizationId,
-        output,
-        title: application.title
-    });
-    return {
-        applicationType: 'coreApp',
-        applicationVersion: version,
-        target: {
-            action: appCreated ? 'create' : 'update',
-            applicationId: application.id,
-            title: application.title ?? null,
-            url: getCoreAppUrl(application.organizationId, application.id)
-        }
-    };
 }
 /**
  * Finds the application a real deploy targets, creating one when none is