@sanity/cli 7.12.0 → 7.13.0

package/dist/services/api.js

@@ -0,0 +1,116 @@
+import { getCliToken, getGlobalCliClient, getProjectCliClient } from '@sanity/cli-core';
+import { createRequester } from '@sanity/cli-core/request';
+const API_REQUEST_TAG = 'sanity.cli.api';
+/**
+ * Perform an authenticated raw HTTP request against a Sanity API.
+ *
+ * URL construction and token resolution reuse the standard CLI client
+ * factories; the request itself uses a bare requester so the response
+ * (status, headers, non-JSON bodies) can be passed through unfiltered.
+ */ export async function performApiRequest(options) {
+    const { body, headers = {}, method, query = {}, resolved, token: providedToken, unauthenticated = false } = options;
+    const { token, url } = await resolveRequestTarget(resolved, unauthenticated, providedToken);
+    // Header names are case-insensitive - keyed lowercase so a user-provided
+    // header (eg `-H 'authorization: ...'`) replaces the default regardless of
+    // how either side is cased.
+    const requestHeaders = {};
+    if (token) requestHeaders.authorization = `Bearer ${token}`;
+    let requestBody;
+    if (typeof body === 'string' || Buffer.isBuffer(body)) {
+        // Raw bodies (--input) pass through without a default Content-Type - the
+        // caller knows the media type, we don't (gh api behaves the same way)
+        requestBody = body;
+    } else if (body !== undefined) {
+        requestBody = JSON.stringify(body);
+        requestHeaders['content-type'] = 'application/json';
+    }
+    for (const [key, value] of Object.entries(headers)){
+        requestHeaders[key.toLowerCase()] = value;
+    }
+    const request = createRequester({
+        middleware: {
+            httpErrors: false,
+            promise: {
+                onlyBody: false
+            }
+        }
+    });
+    const mergedQuery = {
+        ...resolved.query,
+        ...query
+    };
+    const response = await request({
+        ...requestBody === undefined ? {} : {
+            body: requestBody
+        },
+        headers: requestHeaders,
+        method,
+        query: {
+            tag: API_REQUEST_TAG,
+            ...mergedQuery
+        },
+        url
+    });
+    const rawBody = typeof response.body === 'string' ? response.body : String(response.body ?? '');
+    const parsed = parseBody(rawBody, response.headers['content-type']);
+    return {
+        body: parsed.body,
+        headers: response.headers,
+        jsonBody: parsed.jsonBody,
+        rawBody,
+        statusCode: response.statusCode,
+        statusMessage: response.statusMessage,
+        url: response.url
+    };
+}
+async function resolveRequestTarget(resolved, unauthenticated, providedToken) {
+    if (resolved.kind === 'url') {
+        const token = unauthenticated ? undefined : providedToken || await getCliToken();
+        if (!token && !unauthenticated) {
+            throw new Error('You must login first - run "sanity login"');
+        }
+        return {
+            token,
+            url: resolved.url
+        };
+    }
+    // The client factories handle token resolution, staging/production API
+    // hosts and the project subdomain - we only use them to build the URL.
+    const client = resolved.host === 'project' ? await getProjectCliClient({
+        apiVersion: resolved.apiVersion,
+        projectId: resolved.projectId,
+        requireUser: !unauthenticated,
+        token: providedToken
+    }) : await getGlobalCliClient({
+        apiVersion: resolved.apiVersion,
+        requireUser: !unauthenticated,
+        token: providedToken,
+        unauthenticated
+    });
+    const token = unauthenticated ? undefined : client.config().token ?? undefined;
+    return {
+        token,
+        url: client.getUrl(resolved.path)
+    };
+}
+function parseBody(rawBody, contentType) {
+    if (rawBody === '' || !contentType || !/\bjson\b/.test(contentType)) {
+        return {
+            body: rawBody,
+            jsonBody: false
+        };
+    }
+    try {
+        return {
+            body: JSON.parse(rawBody),
+            jsonBody: true
+        };
+    } catch  {
+        return {
+            body: rawBody,
+            jsonBody: false
+        };
+    }
+}
+
+//# sourceMappingURL=api.js.map

package/dist/services/api.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/services/api.ts"],"sourcesContent":["import {getCliToken, getGlobalCliClient, getProjectCliClient} from '@sanity/cli-core'\nimport {createRequester} from '@sanity/cli-core/request'\n\nimport {type ResolvedEndpoint} from '../actions/api/resolveEndpoint.js'\n\nconst API_REQUEST_TAG = 'sanity.cli.api'\n\n/**\n * Options for {@link performApiRequest}.\n */\nexport interface PerformApiRequestOptions {\n  /** HTTP method (upper case). */\n  method: string\n\n  /** The resolved request target. */\n  resolved: ResolvedEndpoint\n\n  /** Request body: objects are JSON-serialized; strings and raw byte buffers are sent verbatim. */\n  body?: Buffer | string | unknown\n\n  /** Extra request headers. A user-provided `Authorization` header wins over the CLI token. */\n  headers?: Record<string, string>\n\n  /** Extra query parameters, merged with those from the endpoint argument. */\n  query?: Record<string, string | string[]>\n\n  /** Explicit API token, used instead of the logged-in user's token. */\n  token?: string\n\n  /** Send the request without an authorization token. */\n  unauthenticated?: boolean\n}\n\n/**\n * The full HTTP response of an API request. Non-2xx responses are returned,\n * not thrown - the command decides how to surface them.\n */\nexport interface ApiResponse {\n  /** Parsed JSON body for JSON responses, raw text otherwise. */\n  body: unknown\n\n  headers: Record<string, string>\n\n  /** Whether `body` was parsed from a JSON response. */\n  jsonBody: boolean\n\n  /** The raw response body text. */\n  rawBody: string\n\n  statusCode: number\n\n  url: string\n\n  statusMessage?: string\n}\n\n/**\n * Perform an authenticated raw HTTP request against a Sanity API.\n *\n * URL construction and token resolution reuse the standard CLI client\n * factories; the request itself uses a bare requester so the response\n * (status, headers, non-JSON bodies) can be passed through unfiltered.\n */\nexport async function performApiRequest(options: PerformApiRequestOptions): Promise<ApiResponse> {\n  const {\n    body,\n    headers = {},\n    method,\n    query = {},\n    resolved,\n    token: providedToken,\n    unauthenticated = false,\n  } = options\n\n  const {token, url} = await resolveRequestTarget(resolved, unauthenticated, providedToken)\n\n  // Header names are case-insensitive - keyed lowercase so a user-provided\n  // header (eg `-H 'authorization: ...'`) replaces the default regardless of\n  // how either side is cased.\n  const requestHeaders: Record<string, string> = {}\n  if (token) requestHeaders.authorization = `Bearer ${token}`\n\n  let requestBody: Buffer | string | undefined\n  if (typeof body === 'string' || Buffer.isBuffer(body)) {\n    // Raw bodies (--input) pass through without a default Content-Type - the\n    // caller knows the media type, we don't (gh api behaves the same way)\n    requestBody = body\n  } else if (body !== undefined) {\n    requestBody = JSON.stringify(body)\n    requestHeaders['content-type'] = 'application/json'\n  }\n\n  for (const [key, value] of Object.entries(headers)) {\n    requestHeaders[key.toLowerCase()] = value\n  }\n\n  const request = createRequester({\n    middleware: {httpErrors: false, promise: {onlyBody: false}},\n  })\n\n  const mergedQuery = {...resolved.query, ...query}\n\n  const response = await request({\n    ...(requestBody === undefined ? {} : {body: requestBody}),\n    headers: requestHeaders,\n    method,\n    query: {tag: API_REQUEST_TAG, ...mergedQuery},\n    url,\n  })\n\n  const rawBody = typeof response.body === 'string' ? response.body : String(response.body ?? '')\n  const parsed = parseBody(rawBody, response.headers['content-type'])\n\n  return {\n    body: parsed.body,\n    headers: response.headers,\n    jsonBody: parsed.jsonBody,\n    rawBody,\n    statusCode: response.statusCode,\n    statusMessage: response.statusMessage,\n    url: response.url,\n  }\n}\n\nasync function resolveRequestTarget(\n  resolved: ResolvedEndpoint,\n  unauthenticated: boolean,\n  providedToken?: string,\n): Promise<{token?: string; url: string}> {\n  if (resolved.kind === 'url') {\n    const token = unauthenticated ? undefined : providedToken || (await getCliToken())\n    if (!token && !unauthenticated) {\n      throw new Error('You must login first - run \"sanity login\"')\n    }\n    return {token, url: resolved.url}\n  }\n\n  // The client factories handle token resolution, staging/production API\n  // hosts and the project subdomain - we only use them to build the URL.\n  const client =\n    resolved.host === 'project'\n      ? await getProjectCliClient({\n          apiVersion: resolved.apiVersion,\n          projectId: resolved.projectId as string,\n          requireUser: !unauthenticated,\n          token: providedToken,\n        })\n      : await getGlobalCliClient({\n          apiVersion: resolved.apiVersion,\n          requireUser: !unauthenticated,\n          token: providedToken,\n          unauthenticated,\n        })\n\n  const token = unauthenticated ? undefined : (client.config().token ?? undefined)\n\n  return {token, url: client.getUrl(resolved.path)}\n}\n\nfunction parseBody(\n  rawBody: string,\n  contentType: string | undefined,\n): {body: unknown; jsonBody: boolean} {\n  if (rawBody === '' || !contentType || !/\\bjson\\b/.test(contentType)) {\n    return {body: rawBody, jsonBody: false}\n  }\n  try {\n    return {body: JSON.parse(rawBody), jsonBody: true}\n  } catch {\n    return {body: rawBody, jsonBody: false}\n  }\n}\n"],"names":["getCliToken","getGlobalCliClient","getProjectCliClient","createRequester","API_REQUEST_TAG","performApiRequest","options","body","headers","method","query","resolved","token","providedToken","unauthenticated","url","resolveRequestTarget","requestHeaders","authorization","requestBody","Buffer","isBuffer","undefined","JSON","stringify","key","value","Object","entries","toLowerCase","request","middleware","httpErrors","promise","onlyBody","mergedQuery","response","tag","rawBody","String","parsed","parseBody","jsonBody","statusCode","statusMessage","kind","Error","client","host","apiVersion","projectId","requireUser","config","getUrl","path","contentType","test","parse"],"mappings":"AAAA,SAAQA,WAAW,EAAEC,kBAAkB,EAAEC,mBAAmB,QAAO,mBAAkB;AACrF,SAAQC,eAAe,QAAO,2BAA0B;AAIxD,MAAMC,kBAAkB;AAmDxB;;;;;;CAMC,GACD,OAAO,eAAeC,kBAAkBC,OAAiC;IACvE,MAAM,EACJC,IAAI,EACJC,UAAU,CAAC,CAAC,EACZC,MAAM,EACNC,QAAQ,CAAC,CAAC,EACVC,QAAQ,EACRC,OAAOC,aAAa,EACpBC,kBAAkB,KAAK,EACxB,GAAGR;IAEJ,MAAM,EAACM,KAAK,EAAEG,GAAG,EAAC,GAAG,MAAMC,qBAAqBL,UAAUG,iBAAiBD;IAE3E,yEAAyE;IACzE,2EAA2E;IAC3E,4BAA4B;IAC5B,MAAMI,iBAAyC,CAAC;IAChD,IAAIL,OAAOK,eAAeC,aAAa,GAAG,CAAC,OAAO,EAAEN,OAAO;IAE3D,IAAIO;IACJ,IAAI,OAAOZ,SAAS,YAAYa,OAAOC,QAAQ,CAACd,OAAO;QACrD,yEAAyE;QACzE,sEAAsE;QACtEY,cAAcZ;IAChB,OAAO,IAAIA,SAASe,WAAW;QAC7BH,cAAcI,KAAKC,SAAS,CAACjB;QAC7BU,cAAc,CAAC,eAAe,GAAG;IACnC;IAEA,KAAK,MAAM,CAACQ,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACpB,SAAU;QAClDS,cAAc,CAACQ,IAAII,WAAW,GAAG,GAAGH;IACtC;IAEA,MAAMI,UAAU3B,gBAAgB;QAC9B4B,YAAY;YAACC,YAAY;YAAOC,SAAS;gBAACC,UAAU;YAAK;QAAC;IAC5D;IAEA,MAAMC,cAAc;QAAC,GAAGxB,SAASD,KAAK;QAAE,GAAGA,KAAK;IAAA;IAEhD,MAAM0B,WAAW,MAAMN,QAAQ;QAC7B,GAAIX,gBAAgBG,YAAY,CAAC,IAAI;YAACf,MAAMY;QAAW,CAAC;QACxDX,SAASS;QACTR;QACAC,OAAO;YAAC2B,KAAKjC;YAAiB,GAAG+B,WAAW;QAAA;QAC5CpB;IACF;IAEA,MAAMuB,UAAU,OAAOF,SAAS7B,IAAI,KAAK,WAAW6B,SAAS7B,IAAI,GAAGgC,OAAOH,SAAS7B,IAAI,IAAI;IAC5F,MAAMiC,SAASC,UAAUH,SAASF,SAAS5B,OAAO,CAAC,eAAe;IAElE,OAAO;QACLD,MAAMiC,OAAOjC,IAAI;QACjBC,SAAS4B,SAAS5B,OAAO;QACzBkC,UAAUF,OAAOE,QAAQ;QACzBJ;QACAK,YAAYP,SAASO,UAAU;QAC/BC,eAAeR,SAASQ,aAAa;QACrC7B,KAAKqB,SAASrB,GAAG;IACnB;AACF;AAEA,eAAeC,qBACbL,QAA0B,EAC1BG,eAAwB,EACxBD,aAAsB;IAEtB,IAAIF,SAASkC,IAAI,KAAK,OAAO;QAC3B,MAAMjC,QAAQE,kBAAkBQ,YAAYT,iBAAkB,MAAMb;QACpE,IAAI,CAACY,SAAS,CAACE,iBAAiB;YAC9B,MAAM,IAAIgC,MAAM;QAClB;QACA,OAAO;YAAClC;YAAOG,KAAKJ,SAASI,GAAG;QAAA;IAClC;IAEA,uEAAuE;IACvE,uEAAuE;IACvE,MAAMgC,SACJpC,SAASqC,IAAI,KAAK,YACd,MAAM9C,oBAAoB;QACxB+C,YAAYtC,SAASsC,UAAU;QAC/BC,WAAWvC,SAASuC,SAAS;QAC7BC,aAAa,CAACrC;QACdF,OAAOC;IACT,KACA,MAAMZ,mBAAmB;QACvBgD,YAAYtC,SAASsC,UAAU;QAC/BE,aAAa,CAACrC;QACdF,OAAOC;QACPC;IACF;IAEN,MAAMF,QAAQE,kBAAkBQ,YAAayB,OAAOK,MAAM,GAAGxC,KAAK,IAAIU;IAEtE,OAAO;QAACV;QAAOG,KAAKgC,OAAOM,MAAM,CAAC1C,SAAS2C,IAAI;IAAC;AAClD;AAEA,SAASb,UACPH,OAAe,EACfiB,WAA+B;IAE/B,IAAIjB,YAAY,MAAM,CAACiB,eAAe,CAAC,WAAWC,IAAI,CAACD,cAAc;QACnE,OAAO;YAAChD,MAAM+B;YAASI,UAAU;QAAK;IACxC;IACA,IAAI;QACF,OAAO;YAACnC,MAAMgB,KAAKkC,KAAK,CAACnB;YAAUI,UAAU;QAAI;IACnD,EAAE,OAAM;QACN,OAAO;YAACnC,MAAM+B;YAASI,UAAU;QAAK;IACxC;AACF"}