@sanity/cli 8.0.1 → 8.0.3

package/dist/exports/_internal.d.ts

@@ -1,54 +1,13 @@
-import { getStudioEnvironmentVariables } from "@sanity/cli-build/_internal/env";
-import { Interfaces } from "@oclif/core";
 import { Schema } from "@sanity/types";
-import { StudioEnvVariablesOptions } from "@sanity/cli-build/_internal/env";
-
-/** @internal */
-export declare interface CommandTelemetry {
-  redactedFlags: readonly RedactedFlag[];
-}
-
-declare type CommandTelemetryConfig<Flags extends Interfaces.FlagInput> = {
-  redact?: readonly OptionFlagName<Flags>[];
-};
-
-/** @internal */
-export declare function defineCommandTelemetry<
-  const Flags extends Interfaces.FlagInput,
->(flags: Flags, config: CommandTelemetryConfig<Flags>): CommandTelemetry;
-
-/**
- * Extracts all serializable properties from userland schema types,
- * so they best-effort can be used as definitions for Schema.compile.
- *
- * @internal
- */
-export declare function extractManifestSchemaTypes(
-  schema: Schema,
-  workDir: string,
-): Promise<ManifestSchemaType[]>;
-
-export { getStudioEnvironmentVariables };
-
-declare type ManifestArrayMember = Omit<ManifestSchemaType, "name"> & {
-  name?: string;
-};
-
-declare type ManifestField = ManifestSchemaType & {
-  fieldset?: string;
-};
-
-declare interface ManifestFieldset {
-  [index: string]: ManifestSerializable | undefined;
-  name: string;
-  title?: string;
-}
-
-declare type ManifestReferenceMember = Omit<ManifestSchemaType, "name"> & {
-  name?: string;
+import "sanity";
+import "zod/mini";
+import "@sanity/cli-core";
+import { Interfaces } from "@oclif/core";
+import { StudioEnvVariablesOptions, getStudioEnvironmentVariables } from "@sanity/cli-build/_internal/env";
+type ManifestSerializable = boolean | ManifestSerializable[] | number | string | {
+  [k: string]: ManifestSerializable;
 };
-
-declare interface ManifestSchemaType {
+interface ManifestSchemaType {
   name: string;
   type: string;
   deprecated?: {
@@ -56,7 +15,7 @@ declare interface ManifestSchemaType {
   };
   fields?: ManifestField[];
   fieldsets?: ManifestFieldset[];
-  hidden?: "conditional" | boolean;
+  hidden?: 'conditional' | boolean;
   lists?: ManifestTitledValue[];
   marks?: {
     annotations?: ManifestArrayMember[];
@@ -67,53 +26,62 @@ declare interface ManifestSchemaType {
   preview?: {
     select: Record<string, string>;
   };
-  readOnly?: "conditional" | boolean;
+  readOnly?: 'conditional' | boolean;
   styles?: ManifestTitledValue[];
   title?: string;
   to?: ManifestReferenceMember[];
   validation?: ManifestValidationGroup[];
 }
-
-declare type ManifestSerializable =
-  | boolean
-  | ManifestSerializable[]
-  | number
-  | string
-  | {
-      [k: string]: ManifestSerializable;
-    };
-
-declare interface ManifestTitledValue {
+interface ManifestFieldset {
+  [index: string]: ManifestSerializable | undefined;
+  name: string;
+  title?: string;
+}
+interface ManifestTitledValue {
   value: string;
   title?: string;
 }
-
-declare interface ManifestValidationGroup {
+type ManifestArrayMember = Omit<ManifestSchemaType, 'name'> & {
+  name?: string;
+};
+type ManifestReferenceMember = Omit<ManifestSchemaType, 'name'> & {
+  name?: string;
+};
+type ManifestField = ManifestSchemaType & {
+  fieldset?: string;
+};
+interface ManifestValidationGroup {
   rules: ManifestValidationRule[];
-  level?: "error" | "info" | "warning";
+  level?: 'error' | 'info' | 'warning';
   message?: string;
 }
-
-declare type ManifestValidationRule = {
+type ManifestValidationRule = {
   [index: string]: ManifestSerializable | undefined;
   constraint?: ManifestSerializable;
   flag: string;
 };
-
-declare type OptionFlagName<Flags extends Interfaces.FlagInput> = string &
-  {
-    [Name in keyof Flags]: Flags[Name] extends {
-      type: "option";
-    }
-      ? Name
-      : never;
-  }[keyof Flags];
-
-declare interface RedactedFlag {
+/**
+ * Extracts all serializable properties from userland schema types,
+ * so they best-effort can be used as definitions for Schema.compile.
+ *
+ * @internal
+ */
+declare function extractManifestSchemaTypes(schema: Schema, workDir: string): Promise<ManifestSchemaType[]>;
+interface RedactedFlag {
   canonical: string;
   flags: readonly string[];
 }
-
-export { StudioEnvVariablesOptions };
-
-export {};
+/** @internal */
+interface CommandTelemetry {
+  redactedFlags: readonly RedactedFlag[];
+}
+type OptionFlagName<Flags extends Interfaces.FlagInput> = string & { [Name in keyof Flags]: Flags[Name] extends {
+  type: 'option';
+} ? Name : never; }[keyof Flags];
+type CommandTelemetryConfig<Flags extends Interfaces.FlagInput> = {
+  redact?: readonly OptionFlagName<Flags>[];
+};
+/** @internal */
+declare function defineCommandTelemetry<const Flags extends Interfaces.FlagInput>(flags: Flags, config: CommandTelemetryConfig<Flags>): CommandTelemetry;
+export { type CommandTelemetry, type StudioEnvVariablesOptions, defineCommandTelemetry, extractManifestSchemaTypes, getStudioEnvironmentVariables };
+//# sourceMappingURL=_internal.d.ts.map

package/dist/exports/index.d.ts

@@ -1,72 +1,12 @@
-import { CliConfig } from "@sanity/cli-core";
-import { ClientConfig } from "@sanity/client";
-import { DefineAppInput } from "@sanity/workbench-cli";
-import { DefineMediaLibraryInput } from "@sanity/workbench-cli";
+import "@sanity/types";
+import { CliConfig, CliConfig as CliConfig$1, UserViteConfig } from "@sanity/cli-core";
+import { ClientConfig, SanityClient } from "@sanity/client";
 import { loadEnv } from "vite";
-import { MediaLibraryField } from "@sanity/workbench-cli";
-import { SanityClient } from "@sanity/client";
-import { unstable_defineApp } from "@sanity/workbench-cli";
-import { unstable_defineMediaLibrary } from "@sanity/workbench-cli";
-import { UserViteConfig } from "@sanity/cli-core";
-
+import { DefineAppInput, DefineMediaLibraryInput, MediaLibraryField, unstable_defineApp, unstable_defineMediaLibrary } from "@sanity/workbench-cli";
 /**
  * @public
  */
-export declare interface CliApiConfig {
-  dataset?: string;
-  projectId?: string;
-}
-
-declare type CliClientGetter = ((
-  options?: CliClientOptions,
-) => SanityClient) & {
-  /**
-   * @deprecated This is only for INTERNAL use, and should not be relied upon outside of official Sanity modules
-   * @returns A token to use when constructing a client without a `token` explicitly defined, or undefined
-   * @internal
-   */
-  __internal__getToken: () => string | undefined;
-};
-
-/**
- * @public
- */
-export declare interface CliClientOptions extends ClientConfig {
-  /**
-   * If no `projectId` or `dataset` is provided, `getCliClient` will try to
-   * resolve these from the `sanity.cli.ts` configuration file. Use this option
-   * to specify the directory to look for this file.
-   */
-  cwd?: string;
-}
-
-export { CliConfig };
-
-/**
- * @deprecated Use `defineCliConfig` instead
- * @public
- */
-export declare function createCliConfig(config: CliConfig): CliConfig;
-
-export { DefineAppInput };
-
-/** @beta */
-export declare function defineCliConfig(config: CliConfig): CliConfig;
-
-export { DefineMediaLibraryInput };
-
-/**
- * @public
- *
- * @param options - The options to use for the client.
- * @returns A configured Sanity API client.
- */
-export declare const getCliClient: CliClientGetter;
-
-/**
- * @public
- */
-export declare interface GraphQLAPIConfig {
+interface GraphQLAPIConfig {
   /**
    * Suffix to use for generated filter types.
    *
@@ -79,7 +19,7 @@ export declare interface GraphQLAPIConfig {
    *
    * Optional, defaults to `gen3` (which is the only option, currently)
    */
-  generation?: "gen1" | "gen2" | "gen3";
+  generation?: 'gen1' | 'gen2' | 'gen3';
   /**
    * ID of GraphQL API. Only (currently) required when using the `--api` flag
    * for `sanity graphql deploy`, in order to only deploy a specific API.
@@ -114,15 +54,45 @@ export declare interface GraphQLAPIConfig {
    */
   workspace?: string;
 }
-
-export { loadEnv };
-
-export { MediaLibraryField };
-
-export { unstable_defineApp };
-
-export { unstable_defineMediaLibrary };
-
-export { UserViteConfig };
-
-export {};
+/**
+ * @deprecated Use `defineCliConfig` instead
+ * @public
+ */
+declare function createCliConfig(config: CliConfig$1): CliConfig$1;
+/** @beta */
+declare function defineCliConfig(config: CliConfig$1): CliConfig$1;
+/**
+ * @public
+ */
+interface CliApiConfig {
+  dataset?: string;
+  projectId?: string;
+}
+/**
+ * @public
+ */
+interface CliClientOptions extends ClientConfig {
+  /**
+   * If no `projectId` or `dataset` is provided, `getCliClient` will try to
+   * resolve these from the `sanity.cli.ts` configuration file. Use this option
+   * to specify the directory to look for this file.
+   */
+  cwd?: string;
+}
+/**
+ * @public
+ *
+ * @param options - The options to use for the client.
+ * @returns A configured Sanity API client.
+ */
+declare const getCliClient: CliClientGetter;
+type CliClientGetter = ((options?: CliClientOptions) => SanityClient) & {
+  /**
+   * @deprecated This is only for INTERNAL use, and should not be relied upon outside of official Sanity modules
+   * @returns A token to use when constructing a client without a `token` explicitly defined, or undefined
+   * @internal
+   */
+  __internal__getToken: () => string | undefined;
+};
+export { type CliApiConfig, type CliClientOptions, type CliConfig, type DefineAppInput, type DefineMediaLibraryInput, type GraphQLAPIConfig, type MediaLibraryField, type UserViteConfig, createCliConfig, defineCliConfig, getCliClient, loadEnv, unstable_defineApp, unstable_defineMediaLibrary };
+//# sourceMappingURL=index.d.ts.map

package/dist/exports/invokeSanityCli/index.d.ts

@@ -1,26 +1,100 @@
 import { Config } from "@oclif/core";
 import { SanityEnvironment } from "@sanity/cli-core/executionContext";
-
-/** Where an invocation originates; selects the policy to enforce. */
-declare type InvocationSource = "mcp";
-
 /**
- * Run a policy-permitted CLI command in-process and capture its result.
+ * Valid body types for fetch requests.
  *
- * Command-level failures (unknown command, bad flags, API errors) are
- * reported through `exitCode`/`output` rather than thrown, so callers can
- * relay them verbatim.
+ * Includes `Uint8Array` since the standard `fetch` accepts typed-array
+ * request bodies. It is pinned to `Uint8Array<ArrayBuffer>` (rather than the
+ * abstract `ArrayBufferView` or the default `Uint8Array<ArrayBufferLike>`) to
+ * stay assignable to the platform `BodyInit` across the DOM and Node lib
+ * definitions, which keeps `FetchFunction` compatible with the runtime
+ * `fetch`. Widening further breaks that compatibility.
  *
- * @internal
+ * @public
  */
-export declare function invokeSanityCli(
-  options: InvokeSanityCliOptions,
-): Promise<InvokeSanityCliResult>;
-
+type FetchBody = string | ArrayBuffer | Uint8Array<ArrayBuffer> | Blob | FormData | URLSearchParams | ReadableStream;
+/**
+ * Accepted header formats — tuple pairs, a plain record, or a `Headers` instance.
+ *
+ * @public
+ */
+type FetchHeaders = [string, string][] | Record<string, string> | Headers;
+/**
+ * Init options passed to a {@link FetchFunction}.
+ *
+ * This is a minimal subset of the standard `RequestInit` so the library
+ * doesn't depend on the full DOM lib.
+ *
+ * @public
+ */
+interface FetchInit {
+  /** HTTP method (GET, POST, PUT, etc.). */
+  method?: string;
+  /** Request headers. */
+  headers?: FetchHeaders;
+  /** Request body. */
+  body?: FetchBody | null;
+  /** Abort signal for cancellation. */
+  signal?: AbortSignal;
+  /**
+   * Redirect handling strategy.
+   *
+   * ⚠️ In browsers, `'manual'` yields an opaque-redirect response (status `0`,
+   * empty headers) per the Fetch spec — you cannot read the status or headers
+   * (e.g. `location`) of the 3xx response. Reading them throws nothing and warns
+   * nothing: `headers.get()` returns `null` and iteration is empty. Detect it via
+   * `status === 0`. Non-browser runtimes (Node.js, Bun, Deno, edge runtimes,
+   * workers) return the real 3xx response, so its status and headers are readable.
+   */
+  redirect?: 'error' | 'follow' | 'manual';
+  /** Credentials mode (browser-only — some runtimes crash if set). */
+  credentials?: 'include' | 'omit' | 'same-origin';
+}
+/**
+ * Response object returned by a {@link FetchFunction}.
+ *
+ * A minimal subset of the standard `Response` — just the properties
+ * get-it actually reads.
+ *
+ * @public
+ */
+interface FetchResponse {
+  /** Whether the response status is in the 200–299 range. */
+  ok: boolean;
+  /** HTTP status code. */
+  status: number;
+  /** HTTP status text (e.g. "OK", "Not Found"). */
+  statusText: string;
+  /** Response headers. */
+  headers: Headers;
+  /** The final URL after any redirects. */
+  url: string;
+  /** Whether the response was the result of a redirect. */
+  redirected: boolean;
+  /** Readable stream of the response body, or `null` if empty. */
+  body: ReadableStream<Uint8Array> | null;
+  /** Reads the entire body as a string. */
+  text(): Promise<string>;
+  /** Reads the entire body as an ArrayBuffer. */
+  arrayBuffer(): Promise<ArrayBuffer>;
+}
+/**
+ * A function that performs an HTTP fetch. Must conform to the standard
+ * `fetch()` signature but only needs to return a `FetchResponse`.
+ *
+ * @param input - The URL to fetch.
+ * @param init - Optional request init options.
+ * @returns A promise resolving to the response.
+ *
+ * @public
+ */
+type FetchFunction = (input: string, init?: FetchInit) => Promise<FetchResponse>;
+/** Where an invocation originates; selects the policy to enforce. */
+type InvocationSource = 'mcp';
 /**
  * @internal
  */
-export declare interface InvokeSanityCliOptions {
+interface InvokeSanityCliOptions {
   /**
    * Arguments after `sanity` (a leading `sanity` token is tolerated), either
    * as a single string — shell-style quoting is supported, but no shell is
@@ -43,6 +117,13 @@ export declare interface InvokeSanityCliOptions {
    * package's config, loaded once and cached across invocations.
    */
   config?: Config;
+  /**
+   * Optional fetch implementation for API requests made by this invocation.
+   * Scoped to this call via the CLI execution context; defaults to the CLI's
+   * own transport. The execution context's transport hygiene (such as
+   * stripping the embedding process's lineage header) is applied on top.
+   */
+  fetch?: FetchFunction;
   /**
    * Sanity deployment environment for this invocation. Scoped to this call
    * via the CLI execution context and defaults to production. The embedding
@@ -50,11 +131,10 @@ export declare interface InvokeSanityCliOptions {
    */
   sanityEnv?: SanityEnvironment;
 }
-
 /**
  * @internal
  */
-export declare interface InvokeSanityCliResult {
+interface InvokeSanityCliResult {
   /** `0` on success, the command's exit code otherwise. */
   exitCode: number;
   /** Combined stdout and stderr output, in emission order. */
@@ -65,5 +145,15 @@ export declare interface InvokeSanityCliResult {
    */
   commandId?: string;
 }
-
-export {};
+/**
+ * Run a policy-permitted CLI command in-process and capture its result.
+ *
+ * Command-level failures (unknown command, bad flags, API errors) are
+ * reported through `exitCode`/`output` rather than thrown, so callers can
+ * relay them verbatim.
+ *
+ * @internal
+ */
+declare function invokeSanityCli(options: InvokeSanityCliOptions): Promise<InvokeSanityCliResult>;
+export { InvokeSanityCliOptions, InvokeSanityCliResult, invokeSanityCli };
+//# sourceMappingURL=index.d.ts.map

package/dist/exports/invokeSanityCli/index.js

@@ -93,11 +93,12 @@ function unknownCommandResult(argv, policySet) {
     const resolvedConfig = options.config ?? await (cachedConfig ??= loadCliCommandConfig());
     const output = [];
     const sink = (line)=>output.push(line);
-    const { sanityEnv, token } = options;
+    const { fetch, sanityEnv, token } = options;
     // Establish the isolation boundary before rendering help, loading command
     // modules, parsing, or executing. Any code reached by an external
     // invocation can therefore fail closed on context.
     return runWithCliExecutionContext({
+        fetch,
         sanityEnv,
         stderr: sink,
         stdout: sink,

package/dist/exports/invokeSanityCli/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/exports/invokeSanityCli/index.ts"],"sourcesContent":["/**\n * Programmatic (in-process) invocation of CLI commands, e.g. from an MCP\n * server. The invokable surface is governed by a per-source command policy\n * (see ./commandPolicies): every CLI command is explicitly allowed, denied,\n * or allowed conditionally on the parsed invocation.\n *\n * {@link invokeSanityCli} handles arg parsing, policy enforcement, command\n * dispatch, per-invocation auth, and output capture.\n * ```ts\n * import {invokeSanityCli} from '@sanity/cli/invokeSanityCli'\n *\n * const {exitCode, output} = await invokeSanityCli({\n *   args: 'cors list --project-id abc123',\n *   source: 'mcp',\n *   token: extra.authInfo.token,\n * })\n * ```\n *\n * Help works like the regular CLI, scoped to the source's policy: `--help`\n * (or `help`) renders root help listing the invokable topics, and a subject\n * (`cors --help`, `cors list --help`) renders topic or command help.\n */\nimport {Command, Config, Parser, settings} from '@oclif/core'\nimport {getHelpFlagAdditions, normalizeArgv} from '@oclif/core/help'\nimport {exitCodes} from '@sanity/cli-core'\nimport {runWithCliExecutionContext, type SanityEnvironment} from '@sanity/cli-core/executionContext'\nimport {type SanityCommand} from '@sanity/cli-core/SanityCommand'\nimport {parseArgsStringToArgv} from 'string-argv'\n\nimport {resolveTopicAliasInArgv} from '../../topicAliases.js'\nimport {commandPolicies} from './commandPolicies/index.js'\nimport {\n  type CommandPolicySet,\n  deny,\n  type InvocationSource,\n  isConditionalInvocationPolicy,\n} from './commandPolicies/policy.js'\nimport {isHelpRequest, renderInvokableHelp} from './help.js'\nimport {prettyPrintError} from './prettyPrintError.js'\n\ntype InvokableCommand = Pick<SanityCommand<typeof Command>, 'runInExecutionContext'>\n\n/**\n * Instantiate a policy-approved command for isolated execution.\n *\n * Every invokable command extends `SanityCommand`, whose\n * `runInExecutionContext()` runs the instance without oclif's static\n * `Command.run()` — the static runner re-enters `Config.load()` (filesystem\n * reads and a process-global config cache write) on every call. The manifest\n * types command classes as the abstract oclif `Command`, hence the\n * constructor cast. The method is probed rather than checked with\n * `instanceof`, because command modules may load from the compiled build\n * while this module runs from source, giving `SanityCommand` two identities.\n */\nfunction instantiateCommand(\n  CommandClass: Command.Class,\n  argv: string[],\n  config: Config,\n): InvokableCommand {\n  const ConcreteCommand = CommandClass as unknown as new (argv: string[], config: Config) => Command\n  const command = new ConcreteCommand(argv, config) as Command & Partial<InvokableCommand>\n  if (typeof command.runInExecutionContext !== 'function') {\n    throw new TypeError(`Command \"${CommandClass.id}\" does not support isolated execution`)\n  }\n  return command as InvokableCommand\n}\n\n/**\n * Load the oclif `Config` for this package, needed to resolve, load, and run\n * commands. Loading it once and reusing it across invocations avoids\n * re-reading the command manifest per call. It only reads this package's own\n * installed files — process-lifetime initialization, not per-invocation host\n * state — so it happens outside any execution context.\n */\nfunction loadCliCommandConfig(): Promise<Config> {\n  return Config.load(import.meta.url)\n}\n\nlet cachedConfig: Promise<Config> | undefined\n\nfunction unknownCommandResult(argv: string[], policySet: CommandPolicySet): InvokeSanityCliResult {\n  const available = Object.entries(policySet)\n    .filter(([, policy]) => policy.kind !== 'deny')\n    .map(([id]) => id.replaceAll(':', ' '))\n    .toSorted()\n  return {\n    exitCode: exitCodes.USAGE_ERROR,\n    output: [\n      `Unknown or unsupported command: ${argv.slice(0, 2).join(' ') || '(none)'}`,\n      `Available commands: ${available.join(', ')}`,\n    ].join('\\n'),\n  }\n}\n\n/**\n * @internal\n */\nexport interface InvokeSanityCliOptions {\n  /**\n   * Arguments after `sanity` (a leading `sanity` token is tolerated), either\n   * as a single string — shell-style quoting is supported, but no shell is\n   * ever executed — or as a pre-split argv array.\n   */\n  args: string | string[]\n\n  /**\n   * Where this invocation originates. Selects the command policy to enforce:\n   * which commands are invokable and which invocations of them are permitted.\n   */\n  source: InvocationSource\n\n  /**\n   * Auth token for this invocation. Scoped to this call via the CLI execution\n   * context: it never touches process env or the process-wide token cache, so\n   * concurrent invocations with different tokens are fully isolated.\n   */\n  token: string\n\n  /**\n   * Optional oclif config override (mainly for tests). Defaults to this\n   * package's config, loaded once and cached across invocations.\n   */\n  config?: Config\n\n  /**\n   * Sanity deployment environment for this invocation. Scoped to this call\n   * via the CLI execution context and defaults to production. The embedding\n   * process's `SANITY_INTERNAL_ENV` is never consulted.\n   */\n  sanityEnv?: SanityEnvironment\n}\n\n/**\n * @internal\n */\nexport interface InvokeSanityCliResult {\n  /** `0` on success, the command's exit code otherwise. */\n  exitCode: number\n\n  /** Combined stdout and stderr output, in emission order. */\n  output: string\n\n  /**\n   * Canonical oclif command id when the invocation resolved to a command\n   * exposed by the selected policy (for example, `datasets:create`).\n   */\n  commandId?: string\n}\n\n/**\n * Unlike a shell, string-argv keeps quotes that are glued to unquoted text:\n * `--name=\"my project\"` tokenizes with the quotes intact. Strip a matching\n * wrapping quote pair from the value side of `--flag=`-shaped tokens so the\n * common shell-style form yields the value the caller intended.\n */\nfunction stripFlagQuotes(rawToken: string): string {\n  const match = /^(-{1,2}[^\\s=]+=)(['\"])([\\s\\S]*)\\2$/.exec(rawToken)\n  return match ? match[1] + match[3] : rawToken\n}\n\n/**\n * Run a policy-permitted CLI command in-process and capture its result.\n *\n * Command-level failures (unknown command, bad flags, API errors) are\n * reported through `exitCode`/`output` rather than thrown, so callers can\n * relay them verbatim.\n *\n * @internal\n */\nexport async function invokeSanityCli(\n  options: InvokeSanityCliOptions,\n): Promise<InvokeSanityCliResult> {\n  // Always load compiled command modules. Oclif's dev-mode source resolution\n  // otherwise probes tsconfigs (reading the filesystem and process.cwd) on\n  // every command load, and may register ts-node process-wide.\n  settings.enableAutoTranspile = false\n\n  const resolvedConfig = options.config ?? (await (cachedConfig ??= loadCliCommandConfig()))\n  const output: string[] = []\n  const sink = (line: string) => output.push(line)\n  const {sanityEnv, token} = options\n\n  // Establish the isolation boundary before rendering help, loading command\n  // modules, parsing, or executing. Any code reached by an external\n  // invocation can therefore fail closed on context.\n  return runWithCliExecutionContext({sanityEnv, stderr: sink, stdout: sink, token}, () =>\n    invokeSanityCliInContext(options, resolvedConfig, output),\n  )\n}\n\nasync function invokeSanityCliInContext(\n  {args, source}: InvokeSanityCliOptions,\n  resolvedConfig: Config,\n  output: string[],\n): Promise<InvokeSanityCliResult> {\n  const policySet = commandPolicies[source]\n\n  // Pre-split argv arrays are taken verbatim; only string input goes through\n  // shell-style tokenization and quote normalization.\n  let argv =\n    typeof args === 'string'\n      ? parseArgsStringToArgv(args).map((t) => stripFlagQuotes(t))\n      : [...args]\n  if (argv[0] === 'sanity') argv = argv.slice(1)\n  argv = resolveTopicAliasInArgv(argv)\n\n  // Help requests are routed through oclif's help system, scoped to the\n  // source's policy: root help for a bare request, topic/command help when a\n  // subject is given. Denied subjects get the standard unknown-command\n  // response (identical to a truly unknown command, so hosts can't probe the\n  // full CLI surface through help), and a help request never executes a\n  // command.\n  if (isHelpRequest(argv, resolvedConfig)) {\n    try {\n      // Drop a leading `help` so the rest is the subject, mirroring how\n      // oclif's dispatch consumes the token before the help command sees argv\n      const helpArgv = argv[0] === 'help' ? argv.slice(1) : argv\n      const result = await renderInvokableHelp(resolvedConfig, helpArgv, policySet)\n      if (result) return {...result, exitCode: exitCodes.SUCCESS}\n      const helpFlags = getHelpFlagAdditions(resolvedConfig)\n      return unknownCommandResult(\n        helpArgv.filter((token) => !helpFlags.includes(token)),\n        policySet,\n      )\n    } catch (err) {\n      return {\n        exitCode: exitCodes.RUNTIME_ERROR,\n        output: err instanceof Error ? err.message : String(err),\n      }\n    }\n  }\n\n  // Resolve the command id the same way oclif's dispatch would (collating\n  // space-separated topics, accepting colon-separated ids as-is), then apply\n  // the policy. Denied and uncategorized ids fail closed, indistinguishable\n  // from commands that don't exist.\n  const [commandId = '', ...commandArgv] = normalizeArgv(resolvedConfig, argv)\n  const policy = policySet[commandId] ?? deny\n  const commandDefinition =\n    policy.kind === 'deny' ? undefined : resolvedConfig.findCommand(commandId)\n  if (!commandDefinition) return unknownCommandResult(argv, policySet)\n\n  const CommandClass = await commandDefinition.load()\n\n  // Parse with the command's real definitions (without executing anything) so\n  // conditional policies are evaluated against typed args/flags, not tokens.\n  let invocation: {args: Record<string, unknown>; flags: Record<string, unknown>}\n  try {\n    const parsed = await Parser.parse(commandArgv, {\n      args: CommandClass.args,\n      baseFlags: CommandClass.baseFlags,\n      enableJsonFlag: CommandClass.enableJsonFlag,\n      flags: CommandClass.flags,\n      strict: CommandClass.strict,\n    })\n    invocation = {\n      args: parsed.args as Record<string, unknown>,\n      flags: parsed.flags as Record<string, unknown>,\n    }\n  } catch (err) {\n    return {\n      commandId,\n      exitCode: exitCodes.USAGE_ERROR,\n      output: err instanceof Error ? err.message : String(err),\n    }\n  }\n\n  if (!policy.validate(invocation)) {\n    const displayId = commandId.replaceAll(':', ' ')\n    let output = `This invocation of \\`${displayId}\\` is not supported here`\n\n    if (isConditionalInvocationPolicy(policy)) {\n      const usedDeniedFlags = policy.deniedFlags.filter(\n        (name) => invocation.flags[name] !== undefined && invocation.flags[name] !== false,\n      )\n      if (usedDeniedFlags.length > 0) {\n        output = `\\nThe ${usedDeniedFlags.map((name) => `--${name}`).join(', ')} flag is not supported here for \\`${displayId}\\``\n      }\n    }\n\n    return {\n      commandId,\n      exitCode: exitCodes.USAGE_ERROR,\n      output,\n    }\n  }\n\n  try {\n    const command = instantiateCommand(CommandClass, commandArgv, resolvedConfig)\n    await command.runInExecutionContext()\n    return {commandId, exitCode: exitCodes.SUCCESS, output: output.join('\\n')}\n  } catch (err) {\n    const exit = err.oclif?.exit\n\n    // `this.exit(0)` throws an ExitError but is a successful outcome\n    if (exit === exitCodes.SUCCESS) {\n      return {commandId, exitCode: exitCodes.SUCCESS, output: output.join('\\n')}\n    }\n\n    const message = prettyPrintError(err) || String(err)\n    if (message) output.push(message)\n    return {\n      commandId,\n      exitCode: typeof exit === 'number' ? exit : exitCodes.RUNTIME_ERROR,\n      output: output.join('\\n'),\n    }\n  }\n}\n"],"names":["Config","Parser","settings","getHelpFlagAdditions","normalizeArgv","exitCodes","runWithCliExecutionContext","parseArgsStringToArgv","resolveTopicAliasInArgv","commandPolicies","deny","isConditionalInvocationPolicy","isHelpRequest","renderInvokableHelp","prettyPrintError","instantiateCommand","CommandClass","argv","config","ConcreteCommand","command","runInExecutionContext","TypeError","id","loadCliCommandConfig","load","url","cachedConfig","unknownCommandResult","policySet","available","Object","entries","filter","policy","kind","map","replaceAll","toSorted","exitCode","USAGE_ERROR","output","slice","join","stripFlagQuotes","rawToken","match","exec","invokeSanityCli","options","enableAutoTranspile","resolvedConfig","sink","line","push","sanityEnv","token","stderr","stdout","invokeSanityCliInContext","args","source","t","helpArgv","result","SUCCESS","helpFlags","includes","err","RUNTIME_ERROR","Error","message","String","commandId","commandArgv","commandDefinition","undefined","findCommand","invocation","parsed","parse","baseFlags","enableJsonFlag","flags","strict","validate","displayId","usedDeniedFlags","deniedFlags","name","length","exit","oclif"],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,SAAiBA,MAAM,EAAEC,MAAM,EAAEC,QAAQ,QAAO,cAAa;AAC7D,SAAQC,oBAAoB,EAAEC,aAAa,QAAO,mBAAkB;AACpE,SAAQC,SAAS,QAAO,mBAAkB;AAC1C,SAAQC,0BAA0B,QAA+B,oCAAmC;AAEpG,SAAQC,qBAAqB,QAAO,cAAa;AAEjD,SAAQC,uBAAuB,QAAO,wBAAuB;AAC7D,SAAQC,eAAe,QAAO,6BAA4B;AAC1D,SAEEC,IAAI,EAEJC,6BAA6B,QACxB,8BAA6B;AACpC,SAAQC,aAAa,EAAEC,mBAAmB,QAAO,YAAW;AAC5D,SAAQC,gBAAgB,QAAO,wBAAuB;AAItD;;;;;;;;;;;CAWC,GACD,SAASC,mBACPC,YAA2B,EAC3BC,IAAc,EACdC,MAAc;IAEd,MAAMC,kBAAkBH;IACxB,MAAMI,UAAU,IAAID,gBAAgBF,MAAMC;IAC1C,IAAI,OAAOE,QAAQC,qBAAqB,KAAK,YAAY;QACvD,MAAM,IAAIC,UAAU,CAAC,SAAS,EAAEN,aAAaO,EAAE,CAAC,qCAAqC,CAAC;IACxF;IACA,OAAOH;AACT;AAEA;;;;;;CAMC,GACD,SAASI;IACP,OAAOxB,OAAOyB,IAAI,CAAC,YAAYC,GAAG;AACpC;AAEA,IAAIC;AAEJ,SAASC,qBAAqBX,IAAc,EAAEY,SAA2B;IACvE,MAAMC,YAAYC,OAAOC,OAAO,CAACH,WAC9BI,MAAM,CAAC,CAAC,GAAGC,OAAO,GAAKA,OAAOC,IAAI,KAAK,QACvCC,GAAG,CAAC,CAAC,CAACb,GAAG,GAAKA,GAAGc,UAAU,CAAC,KAAK,MACjCC,QAAQ;IACX,OAAO;QACLC,UAAUlC,UAAUmC,WAAW;QAC/BC,QAAQ;YACN,CAAC,gCAAgC,EAAExB,KAAKyB,KAAK,CAAC,GAAG,GAAGC,IAAI,CAAC,QAAQ,UAAU;YAC3E,CAAC,oBAAoB,EAAEb,UAAUa,IAAI,CAAC,OAAO;SAC9C,CAACA,IAAI,CAAC;IACT;AACF;AAyDA;;;;;CAKC,GACD,SAASC,gBAAgBC,QAAgB;IACvC,MAAMC,QAAQ,sCAAsCC,IAAI,CAACF;IACzD,OAAOC,QAAQA,KAAK,CAAC,EAAE,GAAGA,KAAK,CAAC,EAAE,GAAGD;AACvC;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeG,gBACpBC,OAA+B;IAE/B,2EAA2E;IAC3E,yEAAyE;IACzE,6DAA6D;IAC7D/C,SAASgD,mBAAmB,GAAG;IAE/B,MAAMC,iBAAiBF,QAAQ/B,MAAM,IAAK,MAAOS,CAAAA,iBAAiBH,sBAAqB;IACvF,MAAMiB,SAAmB,EAAE;IAC3B,MAAMW,OAAO,CAACC,OAAiBZ,OAAOa,IAAI,CAACD;IAC3C,MAAM,EAACE,SAAS,EAAEC,KAAK,EAAC,GAAGP;IAE3B,0EAA0E;IAC1E,kEAAkE;IAClE,mDAAmD;IACnD,OAAO3C,2BAA2B;QAACiD;QAAWE,QAAQL;QAAMM,QAAQN;QAAMI;IAAK,GAAG,IAChFG,yBAAyBV,SAASE,gBAAgBV;AAEtD;AAEA,eAAekB,yBACb,EAACC,IAAI,EAAEC,MAAM,EAAyB,EACtCV,cAAsB,EACtBV,MAAgB;IAEhB,MAAMZ,YAAYpB,eAAe,CAACoD,OAAO;IAEzC,2EAA2E;IAC3E,oDAAoD;IACpD,IAAI5C,OACF,OAAO2C,SAAS,WACZrD,sBAAsBqD,MAAMxB,GAAG,CAAC,CAAC0B,IAAMlB,gBAAgBkB,MACvD;WAAIF;KAAK;IACf,IAAI3C,IAAI,CAAC,EAAE,KAAK,UAAUA,OAAOA,KAAKyB,KAAK,CAAC;IAC5CzB,OAAOT,wBAAwBS;IAE/B,sEAAsE;IACtE,2EAA2E;IAC3E,qEAAqE;IACrE,2EAA2E;IAC3E,sEAAsE;IACtE,WAAW;IACX,IAAIL,cAAcK,MAAMkC,iBAAiB;QACvC,IAAI;YACF,kEAAkE;YAClE,wEAAwE;YACxE,MAAMY,WAAW9C,IAAI,CAAC,EAAE,KAAK,SAASA,KAAKyB,KAAK,CAAC,KAAKzB;YACtD,MAAM+C,SAAS,MAAMnD,oBAAoBsC,gBAAgBY,UAAUlC;YACnE,IAAImC,QAAQ,OAAO;gBAAC,GAAGA,MAAM;gBAAEzB,UAAUlC,UAAU4D,OAAO;YAAA;YAC1D,MAAMC,YAAY/D,qBAAqBgD;YACvC,OAAOvB,qBACLmC,SAAS9B,MAAM,CAAC,CAACuB,QAAU,CAACU,UAAUC,QAAQ,CAACX,SAC/C3B;QAEJ,EAAE,OAAOuC,KAAK;YACZ,OAAO;gBACL7B,UAAUlC,UAAUgE,aAAa;gBACjC5B,QAAQ2B,eAAeE,QAAQF,IAAIG,OAAO,GAAGC,OAAOJ;YACtD;QACF;IACF;IAEA,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,CAACK,YAAY,EAAE,EAAE,GAAGC,YAAY,GAAGtE,cAAc+C,gBAAgBlC;IACvE,MAAMiB,SAASL,SAAS,CAAC4C,UAAU,IAAI/D;IACvC,MAAMiE,oBACJzC,OAAOC,IAAI,KAAK,SAASyC,YAAYzB,eAAe0B,WAAW,CAACJ;IAClE,IAAI,CAACE,mBAAmB,OAAO/C,qBAAqBX,MAAMY;IAE1D,MAAMb,eAAe,MAAM2D,kBAAkBlD,IAAI;IAEjD,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAIqD;IACJ,IAAI;QACF,MAAMC,SAAS,MAAM9E,OAAO+E,KAAK,CAACN,aAAa;YAC7Cd,MAAM5C,aAAa4C,IAAI;YACvBqB,WAAWjE,aAAaiE,SAAS;YACjCC,gBAAgBlE,aAAakE,cAAc;YAC3CC,OAAOnE,aAAamE,KAAK;YACzBC,QAAQpE,aAAaoE,MAAM;QAC7B;QACAN,aAAa;YACXlB,MAAMmB,OAAOnB,IAAI;YACjBuB,OAAOJ,OAAOI,KAAK;QACrB;IACF,EAAE,OAAOf,KAAK;QACZ,OAAO;YACLK;YACAlC,UAAUlC,UAAUmC,WAAW;YAC/BC,QAAQ2B,eAAeE,QAAQF,IAAIG,OAAO,GAAGC,OAAOJ;QACtD;IACF;IAEA,IAAI,CAAClC,OAAOmD,QAAQ,CAACP,aAAa;QAChC,MAAMQ,YAAYb,UAAUpC,UAAU,CAAC,KAAK;QAC5C,IAAII,SAAS,CAAC,qBAAqB,EAAE6C,UAAU,wBAAwB,CAAC;QAExE,IAAI3E,8BAA8BuB,SAAS;YACzC,MAAMqD,kBAAkBrD,OAAOsD,WAAW,CAACvD,MAAM,CAC/C,CAACwD,OAASX,WAAWK,KAAK,CAACM,KAAK,KAAKb,aAAaE,WAAWK,KAAK,CAACM,KAAK,KAAK;YAE/E,IAAIF,gBAAgBG,MAAM,GAAG,GAAG;gBAC9BjD,SAAS,CAAC,MAAM,EAAE8C,gBAAgBnD,GAAG,CAAC,CAACqD,OAAS,CAAC,EAAE,EAAEA,MAAM,EAAE9C,IAAI,CAAC,MAAM,kCAAkC,EAAE2C,UAAU,EAAE,CAAC;YAC3H;QACF;QAEA,OAAO;YACLb;YACAlC,UAAUlC,UAAUmC,WAAW;YAC/BC;QACF;IACF;IAEA,IAAI;QACF,MAAMrB,UAAUL,mBAAmBC,cAAc0D,aAAavB;QAC9D,MAAM/B,QAAQC,qBAAqB;QACnC,OAAO;YAACoD;YAAWlC,UAAUlC,UAAU4D,OAAO;YAAExB,QAAQA,OAAOE,IAAI,CAAC;QAAK;IAC3E,EAAE,OAAOyB,KAAK;QACZ,MAAMuB,OAAOvB,IAAIwB,KAAK,EAAED;QAExB,iEAAiE;QACjE,IAAIA,SAAStF,UAAU4D,OAAO,EAAE;YAC9B,OAAO;gBAACQ;gBAAWlC,UAAUlC,UAAU4D,OAAO;gBAAExB,QAAQA,OAAOE,IAAI,CAAC;YAAK;QAC3E;QAEA,MAAM4B,UAAUzD,iBAAiBsD,QAAQI,OAAOJ;QAChD,IAAIG,SAAS9B,OAAOa,IAAI,CAACiB;QACzB,OAAO;YACLE;YACAlC,UAAU,OAAOoD,SAAS,WAAWA,OAAOtF,UAAUgE,aAAa;YACnE5B,QAAQA,OAAOE,IAAI,CAAC;QACtB;IACF;AACF"}
+{"version":3,"sources":["../../../src/exports/invokeSanityCli/index.ts"],"sourcesContent":["/**\n * Programmatic (in-process) invocation of CLI commands, e.g. from an MCP\n * server. The invokable surface is governed by a per-source command policy\n * (see ./commandPolicies): every CLI command is explicitly allowed, denied,\n * or allowed conditionally on the parsed invocation.\n *\n * {@link invokeSanityCli} handles arg parsing, policy enforcement, command\n * dispatch, per-invocation auth, and output capture.\n * ```ts\n * import {invokeSanityCli} from '@sanity/cli/invokeSanityCli'\n *\n * const {exitCode, output} = await invokeSanityCli({\n *   args: 'cors list --project-id abc123',\n *   source: 'mcp',\n *   token: extra.authInfo.token,\n * })\n * ```\n *\n * Help works like the regular CLI, scoped to the source's policy: `--help`\n * (or `help`) renders root help listing the invokable topics, and a subject\n * (`cors --help`, `cors list --help`) renders topic or command help.\n */\nimport {Command, Config, Parser, settings} from '@oclif/core'\nimport {getHelpFlagAdditions, normalizeArgv} from '@oclif/core/help'\nimport {exitCodes} from '@sanity/cli-core'\nimport {runWithCliExecutionContext, type SanityEnvironment} from '@sanity/cli-core/executionContext'\nimport {type SanityCommand} from '@sanity/cli-core/SanityCommand'\nimport {type FetchFunction} from 'get-it'\nimport {parseArgsStringToArgv} from 'string-argv'\n\nimport {resolveTopicAliasInArgv} from '../../topicAliases.js'\nimport {commandPolicies} from './commandPolicies/index.js'\nimport {\n  type CommandPolicySet,\n  deny,\n  type InvocationSource,\n  isConditionalInvocationPolicy,\n} from './commandPolicies/policy.js'\nimport {isHelpRequest, renderInvokableHelp} from './help.js'\nimport {prettyPrintError} from './prettyPrintError.js'\n\ntype InvokableCommand = Pick<SanityCommand<typeof Command>, 'runInExecutionContext'>\n\n/**\n * Instantiate a policy-approved command for isolated execution.\n *\n * Every invokable command extends `SanityCommand`, whose\n * `runInExecutionContext()` runs the instance without oclif's static\n * `Command.run()` — the static runner re-enters `Config.load()` (filesystem\n * reads and a process-global config cache write) on every call. The manifest\n * types command classes as the abstract oclif `Command`, hence the\n * constructor cast. The method is probed rather than checked with\n * `instanceof`, because command modules may load from the compiled build\n * while this module runs from source, giving `SanityCommand` two identities.\n */\nfunction instantiateCommand(\n  CommandClass: Command.Class,\n  argv: string[],\n  config: Config,\n): InvokableCommand {\n  const ConcreteCommand = CommandClass as unknown as new (argv: string[], config: Config) => Command\n  const command = new ConcreteCommand(argv, config) as Command & Partial<InvokableCommand>\n  if (typeof command.runInExecutionContext !== 'function') {\n    throw new TypeError(`Command \"${CommandClass.id}\" does not support isolated execution`)\n  }\n  return command as InvokableCommand\n}\n\n/**\n * Load the oclif `Config` for this package, needed to resolve, load, and run\n * commands. Loading it once and reusing it across invocations avoids\n * re-reading the command manifest per call. It only reads this package's own\n * installed files — process-lifetime initialization, not per-invocation host\n * state — so it happens outside any execution context.\n */\nfunction loadCliCommandConfig(): Promise<Config> {\n  return Config.load(import.meta.url)\n}\n\nlet cachedConfig: Promise<Config> | undefined\n\nfunction unknownCommandResult(argv: string[], policySet: CommandPolicySet): InvokeSanityCliResult {\n  const available = Object.entries(policySet)\n    .filter(([, policy]) => policy.kind !== 'deny')\n    .map(([id]) => id.replaceAll(':', ' '))\n    .toSorted()\n  return {\n    exitCode: exitCodes.USAGE_ERROR,\n    output: [\n      `Unknown or unsupported command: ${argv.slice(0, 2).join(' ') || '(none)'}`,\n      `Available commands: ${available.join(', ')}`,\n    ].join('\\n'),\n  }\n}\n\n/**\n * @internal\n */\nexport interface InvokeSanityCliOptions {\n  /**\n   * Arguments after `sanity` (a leading `sanity` token is tolerated), either\n   * as a single string — shell-style quoting is supported, but no shell is\n   * ever executed — or as a pre-split argv array.\n   */\n  args: string | string[]\n\n  /**\n   * Where this invocation originates. Selects the command policy to enforce:\n   * which commands are invokable and which invocations of them are permitted.\n   */\n  source: InvocationSource\n\n  /**\n   * Auth token for this invocation. Scoped to this call via the CLI execution\n   * context: it never touches process env or the process-wide token cache, so\n   * concurrent invocations with different tokens are fully isolated.\n   */\n  token: string\n\n  /**\n   * Optional oclif config override (mainly for tests). Defaults to this\n   * package's config, loaded once and cached across invocations.\n   */\n  config?: Config\n\n  /**\n   * Optional fetch implementation for API requests made by this invocation.\n   * Scoped to this call via the CLI execution context; defaults to the CLI's\n   * own transport. The execution context's transport hygiene (such as\n   * stripping the embedding process's lineage header) is applied on top.\n   */\n  fetch?: FetchFunction\n\n  /**\n   * Sanity deployment environment for this invocation. Scoped to this call\n   * via the CLI execution context and defaults to production. The embedding\n   * process's `SANITY_INTERNAL_ENV` is never consulted.\n   */\n  sanityEnv?: SanityEnvironment\n}\n\n/**\n * @internal\n */\nexport interface InvokeSanityCliResult {\n  /** `0` on success, the command's exit code otherwise. */\n  exitCode: number\n\n  /** Combined stdout and stderr output, in emission order. */\n  output: string\n\n  /**\n   * Canonical oclif command id when the invocation resolved to a command\n   * exposed by the selected policy (for example, `datasets:create`).\n   */\n  commandId?: string\n}\n\n/**\n * Unlike a shell, string-argv keeps quotes that are glued to unquoted text:\n * `--name=\"my project\"` tokenizes with the quotes intact. Strip a matching\n * wrapping quote pair from the value side of `--flag=`-shaped tokens so the\n * common shell-style form yields the value the caller intended.\n */\nfunction stripFlagQuotes(rawToken: string): string {\n  const match = /^(-{1,2}[^\\s=]+=)(['\"])([\\s\\S]*)\\2$/.exec(rawToken)\n  return match ? match[1] + match[3] : rawToken\n}\n\n/**\n * Run a policy-permitted CLI command in-process and capture its result.\n *\n * Command-level failures (unknown command, bad flags, API errors) are\n * reported through `exitCode`/`output` rather than thrown, so callers can\n * relay them verbatim.\n *\n * @internal\n */\nexport async function invokeSanityCli(\n  options: InvokeSanityCliOptions,\n): Promise<InvokeSanityCliResult> {\n  // Always load compiled command modules. Oclif's dev-mode source resolution\n  // otherwise probes tsconfigs (reading the filesystem and process.cwd) on\n  // every command load, and may register ts-node process-wide.\n  settings.enableAutoTranspile = false\n\n  const resolvedConfig = options.config ?? (await (cachedConfig ??= loadCliCommandConfig()))\n  const output: string[] = []\n  const sink = (line: string) => output.push(line)\n  const {fetch, sanityEnv, token} = options\n\n  // Establish the isolation boundary before rendering help, loading command\n  // modules, parsing, or executing. Any code reached by an external\n  // invocation can therefore fail closed on context.\n  return runWithCliExecutionContext({fetch, sanityEnv, stderr: sink, stdout: sink, token}, () =>\n    invokeSanityCliInContext(options, resolvedConfig, output),\n  )\n}\n\nasync function invokeSanityCliInContext(\n  {args, source}: InvokeSanityCliOptions,\n  resolvedConfig: Config,\n  output: string[],\n): Promise<InvokeSanityCliResult> {\n  const policySet = commandPolicies[source]\n\n  // Pre-split argv arrays are taken verbatim; only string input goes through\n  // shell-style tokenization and quote normalization.\n  let argv =\n    typeof args === 'string'\n      ? parseArgsStringToArgv(args).map((t) => stripFlagQuotes(t))\n      : [...args]\n  if (argv[0] === 'sanity') argv = argv.slice(1)\n  argv = resolveTopicAliasInArgv(argv)\n\n  // Help requests are routed through oclif's help system, scoped to the\n  // source's policy: root help for a bare request, topic/command help when a\n  // subject is given. Denied subjects get the standard unknown-command\n  // response (identical to a truly unknown command, so hosts can't probe the\n  // full CLI surface through help), and a help request never executes a\n  // command.\n  if (isHelpRequest(argv, resolvedConfig)) {\n    try {\n      // Drop a leading `help` so the rest is the subject, mirroring how\n      // oclif's dispatch consumes the token before the help command sees argv\n      const helpArgv = argv[0] === 'help' ? argv.slice(1) : argv\n      const result = await renderInvokableHelp(resolvedConfig, helpArgv, policySet)\n      if (result) return {...result, exitCode: exitCodes.SUCCESS}\n      const helpFlags = getHelpFlagAdditions(resolvedConfig)\n      return unknownCommandResult(\n        helpArgv.filter((token) => !helpFlags.includes(token)),\n        policySet,\n      )\n    } catch (err) {\n      return {\n        exitCode: exitCodes.RUNTIME_ERROR,\n        output: err instanceof Error ? err.message : String(err),\n      }\n    }\n  }\n\n  // Resolve the command id the same way oclif's dispatch would (collating\n  // space-separated topics, accepting colon-separated ids as-is), then apply\n  // the policy. Denied and uncategorized ids fail closed, indistinguishable\n  // from commands that don't exist.\n  const [commandId = '', ...commandArgv] = normalizeArgv(resolvedConfig, argv)\n  const policy = policySet[commandId] ?? deny\n  const commandDefinition =\n    policy.kind === 'deny' ? undefined : resolvedConfig.findCommand(commandId)\n  if (!commandDefinition) return unknownCommandResult(argv, policySet)\n\n  const CommandClass = await commandDefinition.load()\n\n  // Parse with the command's real definitions (without executing anything) so\n  // conditional policies are evaluated against typed args/flags, not tokens.\n  let invocation: {args: Record<string, unknown>; flags: Record<string, unknown>}\n  try {\n    const parsed = await Parser.parse(commandArgv, {\n      args: CommandClass.args,\n      baseFlags: CommandClass.baseFlags,\n      enableJsonFlag: CommandClass.enableJsonFlag,\n      flags: CommandClass.flags,\n      strict: CommandClass.strict,\n    })\n    invocation = {\n      args: parsed.args as Record<string, unknown>,\n      flags: parsed.flags as Record<string, unknown>,\n    }\n  } catch (err) {\n    return {\n      commandId,\n      exitCode: exitCodes.USAGE_ERROR,\n      output: err instanceof Error ? err.message : String(err),\n    }\n  }\n\n  if (!policy.validate(invocation)) {\n    const displayId = commandId.replaceAll(':', ' ')\n    let output = `This invocation of \\`${displayId}\\` is not supported here`\n\n    if (isConditionalInvocationPolicy(policy)) {\n      const usedDeniedFlags = policy.deniedFlags.filter(\n        (name) => invocation.flags[name] !== undefined && invocation.flags[name] !== false,\n      )\n      if (usedDeniedFlags.length > 0) {\n        output = `\\nThe ${usedDeniedFlags.map((name) => `--${name}`).join(', ')} flag is not supported here for \\`${displayId}\\``\n      }\n    }\n\n    return {\n      commandId,\n      exitCode: exitCodes.USAGE_ERROR,\n      output,\n    }\n  }\n\n  try {\n    const command = instantiateCommand(CommandClass, commandArgv, resolvedConfig)\n    await command.runInExecutionContext()\n    return {commandId, exitCode: exitCodes.SUCCESS, output: output.join('\\n')}\n  } catch (err) {\n    const exit = err.oclif?.exit\n\n    // `this.exit(0)` throws an ExitError but is a successful outcome\n    if (exit === exitCodes.SUCCESS) {\n      return {commandId, exitCode: exitCodes.SUCCESS, output: output.join('\\n')}\n    }\n\n    const message = prettyPrintError(err) || String(err)\n    if (message) output.push(message)\n    return {\n      commandId,\n      exitCode: typeof exit === 'number' ? exit : exitCodes.RUNTIME_ERROR,\n      output: output.join('\\n'),\n    }\n  }\n}\n"],"names":["Config","Parser","settings","getHelpFlagAdditions","normalizeArgv","exitCodes","runWithCliExecutionContext","parseArgsStringToArgv","resolveTopicAliasInArgv","commandPolicies","deny","isConditionalInvocationPolicy","isHelpRequest","renderInvokableHelp","prettyPrintError","instantiateCommand","CommandClass","argv","config","ConcreteCommand","command","runInExecutionContext","TypeError","id","loadCliCommandConfig","load","url","cachedConfig","unknownCommandResult","policySet","available","Object","entries","filter","policy","kind","map","replaceAll","toSorted","exitCode","USAGE_ERROR","output","slice","join","stripFlagQuotes","rawToken","match","exec","invokeSanityCli","options","enableAutoTranspile","resolvedConfig","sink","line","push","fetch","sanityEnv","token","stderr","stdout","invokeSanityCliInContext","args","source","t","helpArgv","result","SUCCESS","helpFlags","includes","err","RUNTIME_ERROR","Error","message","String","commandId","commandArgv","commandDefinition","undefined","findCommand","invocation","parsed","parse","baseFlags","enableJsonFlag","flags","strict","validate","displayId","usedDeniedFlags","deniedFlags","name","length","exit","oclif"],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,SAAiBA,MAAM,EAAEC,MAAM,EAAEC,QAAQ,QAAO,cAAa;AAC7D,SAAQC,oBAAoB,EAAEC,aAAa,QAAO,mBAAkB;AACpE,SAAQC,SAAS,QAAO,mBAAkB;AAC1C,SAAQC,0BAA0B,QAA+B,oCAAmC;AAGpG,SAAQC,qBAAqB,QAAO,cAAa;AAEjD,SAAQC,uBAAuB,QAAO,wBAAuB;AAC7D,SAAQC,eAAe,QAAO,6BAA4B;AAC1D,SAEEC,IAAI,EAEJC,6BAA6B,QACxB,8BAA6B;AACpC,SAAQC,aAAa,EAAEC,mBAAmB,QAAO,YAAW;AAC5D,SAAQC,gBAAgB,QAAO,wBAAuB;AAItD;;;;;;;;;;;CAWC,GACD,SAASC,mBACPC,YAA2B,EAC3BC,IAAc,EACdC,MAAc;IAEd,MAAMC,kBAAkBH;IACxB,MAAMI,UAAU,IAAID,gBAAgBF,MAAMC;IAC1C,IAAI,OAAOE,QAAQC,qBAAqB,KAAK,YAAY;QACvD,MAAM,IAAIC,UAAU,CAAC,SAAS,EAAEN,aAAaO,EAAE,CAAC,qCAAqC,CAAC;IACxF;IACA,OAAOH;AACT;AAEA;;;;;;CAMC,GACD,SAASI;IACP,OAAOxB,OAAOyB,IAAI,CAAC,YAAYC,GAAG;AACpC;AAEA,IAAIC;AAEJ,SAASC,qBAAqBX,IAAc,EAAEY,SAA2B;IACvE,MAAMC,YAAYC,OAAOC,OAAO,CAACH,WAC9BI,MAAM,CAAC,CAAC,GAAGC,OAAO,GAAKA,OAAOC,IAAI,KAAK,QACvCC,GAAG,CAAC,CAAC,CAACb,GAAG,GAAKA,GAAGc,UAAU,CAAC,KAAK,MACjCC,QAAQ;IACX,OAAO;QACLC,UAAUlC,UAAUmC,WAAW;QAC/BC,QAAQ;YACN,CAAC,gCAAgC,EAAExB,KAAKyB,KAAK,CAAC,GAAG,GAAGC,IAAI,CAAC,QAAQ,UAAU;YAC3E,CAAC,oBAAoB,EAAEb,UAAUa,IAAI,CAAC,OAAO;SAC9C,CAACA,IAAI,CAAC;IACT;AACF;AAiEA;;;;;CAKC,GACD,SAASC,gBAAgBC,QAAgB;IACvC,MAAMC,QAAQ,sCAAsCC,IAAI,CAACF;IACzD,OAAOC,QAAQA,KAAK,CAAC,EAAE,GAAGA,KAAK,CAAC,EAAE,GAAGD;AACvC;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeG,gBACpBC,OAA+B;IAE/B,2EAA2E;IAC3E,yEAAyE;IACzE,6DAA6D;IAC7D/C,SAASgD,mBAAmB,GAAG;IAE/B,MAAMC,iBAAiBF,QAAQ/B,MAAM,IAAK,MAAOS,CAAAA,iBAAiBH,sBAAqB;IACvF,MAAMiB,SAAmB,EAAE;IAC3B,MAAMW,OAAO,CAACC,OAAiBZ,OAAOa,IAAI,CAACD;IAC3C,MAAM,EAACE,KAAK,EAAEC,SAAS,EAAEC,KAAK,EAAC,GAAGR;IAElC,0EAA0E;IAC1E,kEAAkE;IAClE,mDAAmD;IACnD,OAAO3C,2BAA2B;QAACiD;QAAOC;QAAWE,QAAQN;QAAMO,QAAQP;QAAMK;IAAK,GAAG,IACvFG,yBAAyBX,SAASE,gBAAgBV;AAEtD;AAEA,eAAemB,yBACb,EAACC,IAAI,EAAEC,MAAM,EAAyB,EACtCX,cAAsB,EACtBV,MAAgB;IAEhB,MAAMZ,YAAYpB,eAAe,CAACqD,OAAO;IAEzC,2EAA2E;IAC3E,oDAAoD;IACpD,IAAI7C,OACF,OAAO4C,SAAS,WACZtD,sBAAsBsD,MAAMzB,GAAG,CAAC,CAAC2B,IAAMnB,gBAAgBmB,MACvD;WAAIF;KAAK;IACf,IAAI5C,IAAI,CAAC,EAAE,KAAK,UAAUA,OAAOA,KAAKyB,KAAK,CAAC;IAC5CzB,OAAOT,wBAAwBS;IAE/B,sEAAsE;IACtE,2EAA2E;IAC3E,qEAAqE;IACrE,2EAA2E;IAC3E,sEAAsE;IACtE,WAAW;IACX,IAAIL,cAAcK,MAAMkC,iBAAiB;QACvC,IAAI;YACF,kEAAkE;YAClE,wEAAwE;YACxE,MAAMa,WAAW/C,IAAI,CAAC,EAAE,KAAK,SAASA,KAAKyB,KAAK,CAAC,KAAKzB;YACtD,MAAMgD,SAAS,MAAMpD,oBAAoBsC,gBAAgBa,UAAUnC;YACnE,IAAIoC,QAAQ,OAAO;gBAAC,GAAGA,MAAM;gBAAE1B,UAAUlC,UAAU6D,OAAO;YAAA;YAC1D,MAAMC,YAAYhE,qBAAqBgD;YACvC,OAAOvB,qBACLoC,SAAS/B,MAAM,CAAC,CAACwB,QAAU,CAACU,UAAUC,QAAQ,CAACX,SAC/C5B;QAEJ,EAAE,OAAOwC,KAAK;YACZ,OAAO;gBACL9B,UAAUlC,UAAUiE,aAAa;gBACjC7B,QAAQ4B,eAAeE,QAAQF,IAAIG,OAAO,GAAGC,OAAOJ;YACtD;QACF;IACF;IAEA,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,CAACK,YAAY,EAAE,EAAE,GAAGC,YAAY,GAAGvE,cAAc+C,gBAAgBlC;IACvE,MAAMiB,SAASL,SAAS,CAAC6C,UAAU,IAAIhE;IACvC,MAAMkE,oBACJ1C,OAAOC,IAAI,KAAK,SAAS0C,YAAY1B,eAAe2B,WAAW,CAACJ;IAClE,IAAI,CAACE,mBAAmB,OAAOhD,qBAAqBX,MAAMY;IAE1D,MAAMb,eAAe,MAAM4D,kBAAkBnD,IAAI;IAEjD,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAIsD;IACJ,IAAI;QACF,MAAMC,SAAS,MAAM/E,OAAOgF,KAAK,CAACN,aAAa;YAC7Cd,MAAM7C,aAAa6C,IAAI;YACvBqB,WAAWlE,aAAakE,SAAS;YACjCC,gBAAgBnE,aAAamE,cAAc;YAC3CC,OAAOpE,aAAaoE,KAAK;YACzBC,QAAQrE,aAAaqE,MAAM;QAC7B;QACAN,aAAa;YACXlB,MAAMmB,OAAOnB,IAAI;YACjBuB,OAAOJ,OAAOI,KAAK;QACrB;IACF,EAAE,OAAOf,KAAK;QACZ,OAAO;YACLK;YACAnC,UAAUlC,UAAUmC,WAAW;YAC/BC,QAAQ4B,eAAeE,QAAQF,IAAIG,OAAO,GAAGC,OAAOJ;QACtD;IACF;IAEA,IAAI,CAACnC,OAAOoD,QAAQ,CAACP,aAAa;QAChC,MAAMQ,YAAYb,UAAUrC,UAAU,CAAC,KAAK;QAC5C,IAAII,SAAS,CAAC,qBAAqB,EAAE8C,UAAU,wBAAwB,CAAC;QAExE,IAAI5E,8BAA8BuB,SAAS;YACzC,MAAMsD,kBAAkBtD,OAAOuD,WAAW,CAACxD,MAAM,CAC/C,CAACyD,OAASX,WAAWK,KAAK,CAACM,KAAK,KAAKb,aAAaE,WAAWK,KAAK,CAACM,KAAK,KAAK;YAE/E,IAAIF,gBAAgBG,MAAM,GAAG,GAAG;gBAC9BlD,SAAS,CAAC,MAAM,EAAE+C,gBAAgBpD,GAAG,CAAC,CAACsD,OAAS,CAAC,EAAE,EAAEA,MAAM,EAAE/C,IAAI,CAAC,MAAM,kCAAkC,EAAE4C,UAAU,EAAE,CAAC;YAC3H;QACF;QAEA,OAAO;YACLb;YACAnC,UAAUlC,UAAUmC,WAAW;YAC/BC;QACF;IACF;IAEA,IAAI;QACF,MAAMrB,UAAUL,mBAAmBC,cAAc2D,aAAaxB;QAC9D,MAAM/B,QAAQC,qBAAqB;QACnC,OAAO;YAACqD;YAAWnC,UAAUlC,UAAU6D,OAAO;YAAEzB,QAAQA,OAAOE,IAAI,CAAC;QAAK;IAC3E,EAAE,OAAO0B,KAAK;QACZ,MAAMuB,OAAOvB,IAAIwB,KAAK,EAAED;QAExB,iEAAiE;QACjE,IAAIA,SAASvF,UAAU6D,OAAO,EAAE;YAC9B,OAAO;gBAACQ;gBAAWnC,UAAUlC,UAAU6D,OAAO;gBAAEzB,QAAQA,OAAOE,IAAI,CAAC;YAAK;QAC3E;QAEA,MAAM6B,UAAU1D,iBAAiBuD,QAAQI,OAAOJ;QAChD,IAAIG,SAAS/B,OAAOa,IAAI,CAACkB;QACzB,OAAO;YACLE;YACAnC,UAAU,OAAOqD,SAAS,WAAWA,OAAOvF,UAAUiE,aAAa;YACnE7B,QAAQA,OAAOE,IAAI,CAAC;QACtB;IACF;AACF"}

package/dist/exports/runtime.d.ts

@@ -1,65 +1,3 @@
-import { AssetSource } from "@sanity/types";
-import { AssetSourceComponent } from "@sanity/workbench-cli";
-import { AssetSourceComponentProps } from "@sanity/types";
-import { AssetSourceViewComponents } from "@sanity/workbench-cli";
-import { DefinedService } from "@sanity/workbench-cli";
-import { DefinedView } from "@sanity/workbench-cli";
-import { InterfaceType } from "@sanity/workbench-cli";
-import { PanelComponent } from "@sanity/workbench-cli";
-import { PanelViewComponents } from "@sanity/workbench-cli";
-import { PanelViewProps } from "@sanity/workbench-cli";
-import { ServiceCallback } from "@sanity/workbench-cli";
-import { ServiceContext } from "@sanity/workbench-cli";
-import { ServiceInfo } from "@sanity/workbench-cli";
-import { ServiceType } from "@sanity/workbench-cli";
-import { TileComponent } from "@sanity/workbench-cli";
-import { TileSize } from "@sanity/workbench-cli";
-import { TileViewComponents } from "@sanity/workbench-cli";
-import { TileViewProps } from "@sanity/workbench-cli";
-import { unstable_defineService } from "@sanity/workbench-cli";
-import { unstable_defineView } from "@sanity/workbench-cli";
-import { ViewComponentsByType } from "@sanity/workbench-cli";
-
-export { AssetSource };
-
-export { AssetSourceComponent };
-
-export { AssetSourceComponentProps };
-
-export { AssetSourceViewComponents };
-
-export { DefinedService };
-
-export { DefinedView };
-
-export { InterfaceType };
-
-export { PanelComponent };
-
-export { PanelViewComponents };
-
-export { PanelViewProps };
-
-export { ServiceCallback };
-
-export { ServiceContext };
-
-export { ServiceInfo };
-
-export { ServiceType };
-
-export { TileComponent };
-
-export { TileSize };
-
-export { TileViewComponents };
-
-export { TileViewProps };
-
-export { unstable_defineService };
-
-export { unstable_defineView };
-
-export { ViewComponentsByType };
-
-export {};
+import { AssetSource, AssetSourceComponentProps } from "@sanity/types";
+import { AssetSourceComponent, AssetSourceViewComponents, DefinedService, DefinedView, InterfaceType, PanelComponent, PanelViewComponents, PanelViewProps, ServiceCallback, ServiceContext, ServiceInfo, ServiceType, TileComponent, TileSize, TileViewComponents, TileViewProps, ViewComponentsByType, unstable_defineService, unstable_defineView } from "@sanity/workbench-cli";
+export { type AssetSource, type AssetSourceComponent, type AssetSourceComponentProps, type AssetSourceViewComponents, type DefinedService, type DefinedView, type InterfaceType, type PanelComponent, type PanelViewComponents, type PanelViewProps, type ServiceCallback, type ServiceContext, type ServiceInfo, type ServiceType, type TileComponent, type TileSize, type TileViewComponents, type TileViewProps, type ViewComponentsByType, unstable_defineService, unstable_defineView };