@sanity/cli 8.10.0 → 8.12.0

package/dist/exports/invokeSanityCli/help.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/exports/invokeSanityCli/help.ts"],"sourcesContent":["import {type Command, type Config, Help, type Interfaces} from '@oclif/core'\nimport {getHelpFlagAdditions} from '@oclif/core/help'\n\nimport {resolveTopicAliasInArgv} from '../../topicAliases.js'\nimport {\n  type CommandPolicy,\n  type CommandPolicySet,\n  isConditionalInvocationPolicy,\n} from './commandPolicies/policy.js'\n\n/** Command ids a policy exposes: entries that are not denied. */\nfunction visibleCommandIds(policySet: CommandPolicySet): Set<string> {\n  return new Set(\n    Object.entries(policySet)\n      .filter(([, policy]) => policy.kind !== 'deny')\n      .map(([id]) => id),\n  )\n}\n\n/** Topic names covering the visible commands: every prefix of every id. */\nfunction visibleTopicNames(commandIds: Set<string>): Set<string> {\n  const names = new Set<string>()\n  for (const id of commandIds) {\n    const parts = id.split(':')\n    for (let length = 1; length < parts.length; length++) {\n      names.add(parts.slice(0, length).join(':'))\n    }\n  }\n  return names\n}\n\n/** Thrown when help is requested for a subject outside the policy surface. */\nclass NotInvokableError extends Error {}\n\n/**\n * A copy of `command` without the policy's denied flags, and without examples\n * that use them (under any spelling: `--web`, `--w`, `-w`), so rendered help\n * only advertises invocations the policy accepts.\n */\nfunction withoutDeniedFlags(command: Command.Loadable, policy?: CommandPolicy): Command.Loadable {\n  if (!policy || !isConditionalInvocationPolicy(policy)) return {...command}\n\n  const denied = policy.deniedFlags\n  if (denied.length === 0) return {...command}\n\n  const flags = {...command.flags}\n  const spellings: string[] = []\n  for (const name of denied) {\n    const definition = flags[name]\n    if (!definition) continue\n    spellings.push(`--${name}`)\n    if (definition.char) spellings.push(`-${definition.char}`)\n    for (const alias of definition.aliases ?? []) spellings.push(`--${alias}`, `-${alias}`)\n    delete flags[name]\n  }\n\n  const usesDeniedFlag = (example: Command.Example) => {\n    const text = typeof example === 'string' ? example : example.command\n    return spellings.some((spelling) =>\n      new RegExp(String.raw`(^|\\s)${spelling}(=|\\s|$)`).test(text ?? ''),\n    )\n  }\n\n  return {\n    ...command,\n    examples: command.examples?.filter((example) => !usesDeniedFlag(example)),\n    flags,\n  }\n}\n\n/**\n * oclif help renderer scoped to a policy's command surface. Subject\n * resolution (root vs topic vs command help) is oclif's own; the policy is\n * enforced at the rendering entry points so the rest of the CLI stays\n * invisible to embedding hosts, and listings are filtered to non-denied\n * commands and their topics only.\n *\n * Output is collected in {@link InvokableHelp.lines} instead of being written\n * to the process streams.\n */\nclass InvokableHelp extends Help {\n  public commandId: string | undefined\n  public readonly lines: string[] = []\n\n  private readonly commandIds: Set<string>\n  private readonly policySet: CommandPolicySet\n  private readonly topicNames: Set<string>\n\n  constructor(config: Config, policySet: CommandPolicySet) {\n    super(config, {stripAnsi: true})\n    this.policySet = policySet\n    this.commandIds = visibleCommandIds(policySet)\n    this.topicNames = visibleTopicNames(this.commandIds)\n  }\n\n  // The copies below are load-bearing: oclif's formatters rewrite ids/names\n  // in place (`cors:list` → `cors list`). Without copies those writes corrupt\n  // the shared (cached) config, breaking the policy checks on subsequent\n  // invocations.\n\n  protected override get sortedCommands(): Command.Loadable[] {\n    return super.sortedCommands\n      .filter((command) => this.commandIds.has(command.id))\n      .map((command) => ({...command}))\n  }\n\n  protected override get sortedTopics(): Interfaces.Topic[] {\n    // Topic names and descriptions come from the oclif config (oclif.config.js)\n    return super.sortedTopics\n      .filter((topic) => this.topicNames.has(topic.name))\n      .map((topic) => ({...topic}))\n  }\n\n  protected override log(...args: string[]): void {\n    this.lines.push(...args)\n  }\n\n  public override async showCommandHelp(command: Command.Loadable): Promise<void> {\n    if (!this.commandIds.has(command.id)) throw new NotInvokableError(command.id)\n    this.commandId = command.id\n    return super.showCommandHelp(withoutDeniedFlags(command, this.policySet[command.id]))\n  }\n\n  public override async showHelp(argv: string[]): Promise<void> {\n    return super.showHelp(resolveTopicAliasInArgv(argv))\n  }\n\n  protected override async showTopicHelp(topic: Interfaces.Topic): Promise<void> {\n    if (!this.topicNames.has(topic.name)) throw new NotInvokableError(topic.name)\n    return super.showTopicHelp({...topic})\n  }\n}\n\n/**\n * Render help text for a policy's command surface: root help for a bare help\n * request, or topic/command help when `argv` names a subject (e.g.\n * `['cors', '--help']`), exactly as oclif would resolve it. ANSI styling is\n * stripped so programmatic callers get plain text.\n *\n * Returns `undefined` when the subject is unknown or denied — callers should\n * respond the same way as for an unknown command, so hosts cannot probe the\n * full CLI surface through help.\n *\n * @internal\n */\nexport async function renderInvokableHelp(\n  config: Config,\n  argv: string[],\n  policySet: CommandPolicySet,\n): Promise<{commandId?: string; output: string} | undefined> {\n  const help = new InvokableHelp(config, policySet)\n  try {\n    await help.showHelp(argv)\n  } catch (err) {\n    // Subjects outside the policy surface (NotInvokableError) and subjects\n    // oclif itself cannot resolve (CLIError, marked with an `oclif` property)\n    // both yield no help output.\n    if (err instanceof NotInvokableError || err.oclif) return undefined\n    throw err\n  }\n  return {\n    ...(help.commandId && {commandId: help.commandId}),\n    output: help.lines.join('\\n').trimEnd(),\n  }\n}\n\n/**\n * Whether `argv` asks for help rather than a command invocation: a leading\n * `help` (oclif's help command), or a recognized help flag before any `--`\n * terminator. The flags come from {@link getHelpFlagAdditions} — the same\n * source oclif's own dispatch consults — so this surface recognizes exactly\n * what the regular CLI recognizes.\n *\n * @internal\n */\nexport function isHelpRequest(argv: string[], config: Config): boolean {\n  if (argv[0] === 'help') return true\n  const helpFlags = getHelpFlagAdditions(config)\n  for (const token of argv) {\n    if (token === '--') return false\n    if (helpFlags.includes(token)) return true\n  }\n  return false\n}\n"],"names":["Help","getHelpFlagAdditions","resolveTopicAliasInArgv","isConditionalInvocationPolicy","visibleCommandIds","policySet","Set","Object","entries","filter","policy","kind","map","id","visibleTopicNames","commandIds","names","parts","split","length","add","slice","join","NotInvokableError","Error","withoutDeniedFlags","command","denied","deniedFlags","flags","spellings","name","definition","push","char","alias","aliases","usesDeniedFlag","example","text","some","spelling","RegExp","String","raw","test","examples","InvokableHelp","commandId","lines","topicNames","config","stripAnsi","sortedCommands","has","sortedTopics","topic","log","args","showCommandHelp","showHelp","argv","showTopicHelp","renderInvokableHelp","help","err","oclif","undefined","output","trimEnd","isHelpRequest","helpFlags","token","includes"],"mappings":"AAAA,SAAmCA,IAAI,QAAwB,cAAa;AAC5E,SAAQC,oBAAoB,QAAO,mBAAkB;AAErD,SAAQC,uBAAuB,QAAO,wBAAuB;AAC7D,SAGEC,6BAA6B,QACxB,8BAA6B;AAEpC,+DAA+D,GAC/D,SAASC,kBAAkBC,SAA2B;IACpD,OAAO,IAAIC,IACTC,OAAOC,OAAO,CAACH,WACZI,MAAM,CAAC,CAAC,GAAGC,OAAO,GAAKA,OAAOC,IAAI,KAAK,QACvCC,GAAG,CAAC,CAAC,CAACC,GAAG,GAAKA;AAErB;AAEA,yEAAyE,GACzE,SAASC,kBAAkBC,UAAuB;IAChD,MAAMC,QAAQ,IAAIV;IAClB,KAAK,MAAMO,MAAME,WAAY;QAC3B,MAAME,QAAQJ,GAAGK,KAAK,CAAC;QACvB,IAAK,IAAIC,SAAS,GAAGA,SAASF,MAAME,MAAM,EAAEA,SAAU;YACpDH,MAAMI,GAAG,CAACH,MAAMI,KAAK,CAAC,GAAGF,QAAQG,IAAI,CAAC;QACxC;IACF;IACA,OAAON;AACT;AAEA,4EAA4E,GAC5E,MAAMO,0BAA0BC;AAAO;AAEvC;;;;CAIC,GACD,SAASC,mBAAmBC,OAAyB,EAAEhB,MAAsB;IAC3E,IAAI,CAACA,UAAU,CAACP,8BAA8BO,SAAS,OAAO;QAAC,GAAGgB,OAAO;IAAA;IAEzE,MAAMC,SAASjB,OAAOkB,WAAW;IACjC,IAAID,OAAOR,MAAM,KAAK,GAAG,OAAO;QAAC,GAAGO,OAAO;IAAA;IAE3C,MAAMG,QAAQ;QAAC,GAAGH,QAAQG,KAAK;IAAA;IAC/B,MAAMC,YAAsB,EAAE;IAC9B,KAAK,MAAMC,QAAQJ,OAAQ;QACzB,MAAMK,aAAaH,KAAK,CAACE,KAAK;QAC9B,IAAI,CAACC,YAAY;QACjBF,UAAUG,IAAI,CAAC,CAAC,EAAE,EAAEF,MAAM;QAC1B,IAAIC,WAAWE,IAAI,EAAEJ,UAAUG,IAAI,CAAC,CAAC,CAAC,EAAED,WAAWE,IAAI,EAAE;QACzD,KAAK,MAAMC,SAASH,WAAWI,OAAO,IAAI,EAAE,CAAEN,UAAUG,IAAI,CAAC,CAAC,EAAE,EAAEE,OAAO,EAAE,CAAC,CAAC,EAAEA,OAAO;QACtF,OAAON,KAAK,CAACE,KAAK;IACpB;IAEA,MAAMM,iBAAiB,CAACC;QACtB,MAAMC,OAAO,OAAOD,YAAY,WAAWA,UAAUA,QAAQZ,OAAO;QACpE,OAAOI,UAAUU,IAAI,CAAC,CAACC,WACrB,IAAIC,OAAOC,OAAOC,GAAG,CAAC,MAAM,EAAEH,SAAS,QAAQ,CAAC,EAAEI,IAAI,CAACN,QAAQ;IAEnE;IAEA,OAAO;QACL,GAAGb,OAAO;QACVoB,UAAUpB,QAAQoB,QAAQ,EAAErC,OAAO,CAAC6B,UAAY,CAACD,eAAeC;QAChET;IACF;AACF;AAEA;;;;;;;;;CASC,GACD,MAAMkB,sBAAsB/C;IACnBgD,UAA6B;IACpBC,QAAkB,EAAE,CAAA;IAEnBlC,WAAuB;IACvBV,UAA2B;IAC3B6C,WAAuB;IAExC,YAAYC,MAAc,EAAE9C,SAA2B,CAAE;QACvD,KAAK,CAAC8C,QAAQ;YAACC,WAAW;QAAI;QAC9B,IAAI,CAAC/C,SAAS,GAAGA;QACjB,IAAI,CAACU,UAAU,GAAGX,kBAAkBC;QACpC,IAAI,CAAC6C,UAAU,GAAGpC,kBAAkB,IAAI,CAACC,UAAU;IACrD;IAEA,0EAA0E;IAC1E,4EAA4E;IAC5E,uEAAuE;IACvE,eAAe;IAEf,IAAuBsC,iBAAqC;QAC1D,OAAO,KAAK,CAACA,eACV5C,MAAM,CAAC,CAACiB,UAAY,IAAI,CAACX,UAAU,CAACuC,GAAG,CAAC5B,QAAQb,EAAE,GAClDD,GAAG,CAAC,CAACc,UAAa,CAAA;gBAAC,GAAGA,OAAO;YAAA,CAAA;IAClC;IAEA,IAAuB6B,eAAmC;QACxD,4EAA4E;QAC5E,OAAO,KAAK,CAACA,aACV9C,MAAM,CAAC,CAAC+C,QAAU,IAAI,CAACN,UAAU,CAACI,GAAG,CAACE,MAAMzB,IAAI,GAChDnB,GAAG,CAAC,CAAC4C,QAAW,CAAA;gBAAC,GAAGA,KAAK;YAAA,CAAA;IAC9B;IAEmBC,IAAI,GAAGC,IAAc,EAAQ;QAC9C,IAAI,CAACT,KAAK,CAAChB,IAAI,IAAIyB;IACrB;IAEA,MAAsBC,gBAAgBjC,OAAyB,EAAiB;QAC9E,IAAI,CAAC,IAAI,CAACX,UAAU,CAACuC,GAAG,CAAC5B,QAAQb,EAAE,GAAG,MAAM,IAAIU,kBAAkBG,QAAQb,EAAE;QAC5E,IAAI,CAACmC,SAAS,GAAGtB,QAAQb,EAAE;QAC3B,OAAO,KAAK,CAAC8C,gBAAgBlC,mBAAmBC,SAAS,IAAI,CAACrB,SAAS,CAACqB,QAAQb,EAAE,CAAC;IACrF;IAEA,MAAsB+C,SAASC,IAAc,EAAiB;QAC5D,OAAO,KAAK,CAACD,SAAS1D,wBAAwB2D;IAChD;IAEA,MAAyBC,cAAcN,KAAuB,EAAiB;QAC7E,IAAI,CAAC,IAAI,CAACN,UAAU,CAACI,GAAG,CAACE,MAAMzB,IAAI,GAAG,MAAM,IAAIR,kBAAkBiC,MAAMzB,IAAI;QAC5E,OAAO,KAAK,CAAC+B,cAAc;YAAC,GAAGN,KAAK;QAAA;IACtC;AACF;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,eAAeO,oBACpBZ,MAAc,EACdU,IAAc,EACdxD,SAA2B;IAE3B,MAAM2D,OAAO,IAAIjB,cAAcI,QAAQ9C;IACvC,IAAI;QACF,MAAM2D,KAAKJ,QAAQ,CAACC;IACtB,EAAE,OAAOI,KAAK;QACZ,uEAAuE;QACvE,0EAA0E;QAC1E,6BAA6B;QAC7B,IAAIA,eAAe1C,qBAAqB0C,IAAIC,KAAK,EAAE,OAAOC;QAC1D,MAAMF;IACR;IACA,OAAO;QACL,GAAID,KAAKhB,SAAS,IAAI;YAACA,WAAWgB,KAAKhB,SAAS;QAAA,CAAC;QACjDoB,QAAQJ,KAAKf,KAAK,CAAC3B,IAAI,CAAC,MAAM+C,OAAO;IACvC;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASC,cAAcT,IAAc,EAAEV,MAAc;IAC1D,IAAIU,IAAI,CAAC,EAAE,KAAK,QAAQ,OAAO;IAC/B,MAAMU,YAAYtE,qBAAqBkD;IACvC,KAAK,MAAMqB,SAASX,KAAM;QACxB,IAAIW,UAAU,MAAM,OAAO;QAC3B,IAAID,UAAUE,QAAQ,CAACD,QAAQ,OAAO;IACxC;IACA,OAAO;AACT"}
+{"version":3,"sources":["../../../src/exports/invokeSanityCli/help.ts"],"sourcesContent":["import {type Command, type Config, Help, type Interfaces} from '@oclif/core'\nimport {getHelpFlagAdditions} from '@oclif/core/help'\nimport {\n  type CommandPolicy,\n  type CommandPolicySet,\n  isConditionalInvocationPolicy,\n} from '@sanity/cli-core/commandPolicy'\n\nimport {resolveTopicAliasInArgv} from '../../topicAliases.js'\n\n/** Command ids a policy exposes: entries that are not denied. */\nfunction visibleCommandIds(policySet: CommandPolicySet): Set<string> {\n  return new Set(\n    Object.entries(policySet)\n      .filter(([, policy]) => policy.kind !== 'deny')\n      .map(([id]) => id),\n  )\n}\n\n/** Topic names covering the visible commands: every prefix of every id. */\nfunction visibleTopicNames(commandIds: Set<string>): Set<string> {\n  const names = new Set<string>()\n  for (const id of commandIds) {\n    const parts = id.split(':')\n    for (let length = 1; length < parts.length; length++) {\n      names.add(parts.slice(0, length).join(':'))\n    }\n  }\n  return names\n}\n\n/** Thrown when help is requested for a subject outside the policy surface. */\nclass NotInvokableError extends Error {}\n\n/**\n * A copy of `command` without the policy's denied flags, and without examples\n * that use them (under any spelling: `--web`, `--w`, `-w`), so rendered help\n * only advertises invocations the policy accepts.\n */\nfunction withoutDeniedFlags(command: Command.Loadable, policy?: CommandPolicy): Command.Loadable {\n  if (!policy || !isConditionalInvocationPolicy(policy)) return {...command}\n\n  const denied = policy.deniedFlags\n  if (denied.length === 0) return {...command}\n\n  const flags = {...command.flags}\n  const spellings: string[] = []\n  for (const name of denied) {\n    const definition = flags[name]\n    if (!definition) continue\n    spellings.push(`--${name}`)\n    if (definition.char) spellings.push(`-${definition.char}`)\n    for (const alias of definition.aliases ?? []) spellings.push(`--${alias}`, `-${alias}`)\n    delete flags[name]\n  }\n\n  const usesDeniedFlag = (example: Command.Example) => {\n    const text = typeof example === 'string' ? example : example.command\n    return spellings.some((spelling) =>\n      new RegExp(String.raw`(^|\\s)${spelling}(=|\\s|$)`).test(text ?? ''),\n    )\n  }\n\n  return {\n    ...command,\n    examples: command.examples?.filter((example) => !usesDeniedFlag(example)),\n    flags,\n  }\n}\n\n/**\n * oclif help renderer scoped to a policy's command surface. Subject\n * resolution (root vs topic vs command help) is oclif's own; the policy is\n * enforced at the rendering entry points so the rest of the CLI stays\n * invisible to embedding hosts, and listings are filtered to non-denied\n * commands and their topics only.\n *\n * Output is collected in {@link InvokableHelp.lines} instead of being written\n * to the process streams.\n */\nclass InvokableHelp extends Help {\n  public commandId: string | undefined\n  public readonly lines: string[] = []\n\n  private readonly commandIds: Set<string>\n  private readonly policySet: CommandPolicySet\n  private readonly topicNames: Set<string>\n\n  constructor(config: Config, policySet: CommandPolicySet) {\n    super(config, {stripAnsi: true})\n    this.policySet = policySet\n    this.commandIds = visibleCommandIds(policySet)\n    this.topicNames = visibleTopicNames(this.commandIds)\n  }\n\n  // Both listings start from oclif's, which already drops `hidden` entries, so\n  // help advertises the same commands a CLI user sees, minus the ones the\n  // policy denies. Hiding and denying answer different questions — \"should this\n  // be advertised?\" and \"may this be invoked?\" — and a command that is hidden\n  // but allowed stays invocable by id, exactly as it is for a CLI user who\n  // knows the name.\n  //\n  // The copies below are load-bearing: oclif's formatters rewrite ids/names\n  // in place (`cors:list` → `cors list`). Without copies those writes corrupt\n  // the shared (cached) config, breaking the policy checks on subsequent\n  // invocations.\n\n  protected override get sortedCommands(): Command.Loadable[] {\n    return super.sortedCommands\n      .filter((command) => this.commandIds.has(command.id))\n      .map((command) => ({...command}))\n  }\n\n  protected override get sortedTopics(): Interfaces.Topic[] {\n    // Topic names and descriptions come from the oclif config (oclif.config.js)\n    return super.sortedTopics\n      .filter((topic) => this.topicNames.has(topic.name))\n      .map((topic) => ({...topic}))\n  }\n\n  protected override log(...args: string[]): void {\n    this.lines.push(...args)\n  }\n\n  public override async showCommandHelp(command: Command.Loadable): Promise<void> {\n    if (!this.commandIds.has(command.id)) throw new NotInvokableError(command.id)\n    this.commandId = command.id\n    return super.showCommandHelp(withoutDeniedFlags(command, this.policySet[command.id]))\n  }\n\n  public override async showHelp(argv: string[]): Promise<void> {\n    return super.showHelp(resolveTopicAliasInArgv(argv))\n  }\n\n  protected override async showTopicHelp(topic: Interfaces.Topic): Promise<void> {\n    if (!this.topicNames.has(topic.name)) throw new NotInvokableError(topic.name)\n    return super.showTopicHelp({...topic})\n  }\n}\n\n/**\n * Render help text for a policy's command surface: root help for a bare help\n * request, or topic/command help when `argv` names a subject (e.g.\n * `['cors', '--help']`), exactly as oclif would resolve it. ANSI styling is\n * stripped so programmatic callers get plain text.\n *\n * Returns `undefined` when the subject is unknown or denied — callers should\n * respond the same way as for an unknown command, so hosts cannot probe the\n * full CLI surface through help.\n *\n * @internal\n */\nexport async function renderInvokableHelp(\n  config: Config,\n  argv: string[],\n  policySet: CommandPolicySet,\n): Promise<{commandId?: string; output: string} | undefined> {\n  const help = new InvokableHelp(config, policySet)\n  try {\n    await help.showHelp(argv)\n  } catch (err) {\n    // Subjects outside the policy surface (NotInvokableError) and subjects\n    // oclif itself cannot resolve (CLIError, marked with an `oclif` property)\n    // both yield no help output.\n    if (err instanceof NotInvokableError || err.oclif) return undefined\n    throw err\n  }\n  return {\n    ...(help.commandId && {commandId: help.commandId}),\n    output: help.lines.join('\\n').trimEnd(),\n  }\n}\n\n/**\n * Whether `argv` asks for help rather than a command invocation: a leading\n * `help` (oclif's help command), or a recognized help flag before any `--`\n * terminator. The flags come from {@link getHelpFlagAdditions} — the same\n * source oclif's own dispatch consults — so this surface recognizes exactly\n * what the regular CLI recognizes.\n *\n * @internal\n */\nexport function isHelpRequest(argv: string[], config: Config): boolean {\n  if (argv[0] === 'help') return true\n  const helpFlags = getHelpFlagAdditions(config)\n  for (const token of argv) {\n    if (token === '--') return false\n    if (helpFlags.includes(token)) return true\n  }\n  return false\n}\n"],"names":["Help","getHelpFlagAdditions","isConditionalInvocationPolicy","resolveTopicAliasInArgv","visibleCommandIds","policySet","Set","Object","entries","filter","policy","kind","map","id","visibleTopicNames","commandIds","names","parts","split","length","add","slice","join","NotInvokableError","Error","withoutDeniedFlags","command","denied","deniedFlags","flags","spellings","name","definition","push","char","alias","aliases","usesDeniedFlag","example","text","some","spelling","RegExp","String","raw","test","examples","InvokableHelp","commandId","lines","topicNames","config","stripAnsi","sortedCommands","has","sortedTopics","topic","log","args","showCommandHelp","showHelp","argv","showTopicHelp","renderInvokableHelp","help","err","oclif","undefined","output","trimEnd","isHelpRequest","helpFlags","token","includes"],"mappings":"AAAA,SAAmCA,IAAI,QAAwB,cAAa;AAC5E,SAAQC,oBAAoB,QAAO,mBAAkB;AACrD,SAGEC,6BAA6B,QACxB,iCAAgC;AAEvC,SAAQC,uBAAuB,QAAO,wBAAuB;AAE7D,+DAA+D,GAC/D,SAASC,kBAAkBC,SAA2B;IACpD,OAAO,IAAIC,IACTC,OAAOC,OAAO,CAACH,WACZI,MAAM,CAAC,CAAC,GAAGC,OAAO,GAAKA,OAAOC,IAAI,KAAK,QACvCC,GAAG,CAAC,CAAC,CAACC,GAAG,GAAKA;AAErB;AAEA,yEAAyE,GACzE,SAASC,kBAAkBC,UAAuB;IAChD,MAAMC,QAAQ,IAAIV;IAClB,KAAK,MAAMO,MAAME,WAAY;QAC3B,MAAME,QAAQJ,GAAGK,KAAK,CAAC;QACvB,IAAK,IAAIC,SAAS,GAAGA,SAASF,MAAME,MAAM,EAAEA,SAAU;YACpDH,MAAMI,GAAG,CAACH,MAAMI,KAAK,CAAC,GAAGF,QAAQG,IAAI,CAAC;QACxC;IACF;IACA,OAAON;AACT;AAEA,4EAA4E,GAC5E,MAAMO,0BAA0BC;AAAO;AAEvC;;;;CAIC,GACD,SAASC,mBAAmBC,OAAyB,EAAEhB,MAAsB;IAC3E,IAAI,CAACA,UAAU,CAACR,8BAA8BQ,SAAS,OAAO;QAAC,GAAGgB,OAAO;IAAA;IAEzE,MAAMC,SAASjB,OAAOkB,WAAW;IACjC,IAAID,OAAOR,MAAM,KAAK,GAAG,OAAO;QAAC,GAAGO,OAAO;IAAA;IAE3C,MAAMG,QAAQ;QAAC,GAAGH,QAAQG,KAAK;IAAA;IAC/B,MAAMC,YAAsB,EAAE;IAC9B,KAAK,MAAMC,QAAQJ,OAAQ;QACzB,MAAMK,aAAaH,KAAK,CAACE,KAAK;QAC9B,IAAI,CAACC,YAAY;QACjBF,UAAUG,IAAI,CAAC,CAAC,EAAE,EAAEF,MAAM;QAC1B,IAAIC,WAAWE,IAAI,EAAEJ,UAAUG,IAAI,CAAC,CAAC,CAAC,EAAED,WAAWE,IAAI,EAAE;QACzD,KAAK,MAAMC,SAASH,WAAWI,OAAO,IAAI,EAAE,CAAEN,UAAUG,IAAI,CAAC,CAAC,EAAE,EAAEE,OAAO,EAAE,CAAC,CAAC,EAAEA,OAAO;QACtF,OAAON,KAAK,CAACE,KAAK;IACpB;IAEA,MAAMM,iBAAiB,CAACC;QACtB,MAAMC,OAAO,OAAOD,YAAY,WAAWA,UAAUA,QAAQZ,OAAO;QACpE,OAAOI,UAAUU,IAAI,CAAC,CAACC,WACrB,IAAIC,OAAOC,OAAOC,GAAG,CAAC,MAAM,EAAEH,SAAS,QAAQ,CAAC,EAAEI,IAAI,CAACN,QAAQ;IAEnE;IAEA,OAAO;QACL,GAAGb,OAAO;QACVoB,UAAUpB,QAAQoB,QAAQ,EAAErC,OAAO,CAAC6B,UAAY,CAACD,eAAeC;QAChET;IACF;AACF;AAEA;;;;;;;;;CASC,GACD,MAAMkB,sBAAsB/C;IACnBgD,UAA6B;IACpBC,QAAkB,EAAE,CAAA;IAEnBlC,WAAuB;IACvBV,UAA2B;IAC3B6C,WAAuB;IAExC,YAAYC,MAAc,EAAE9C,SAA2B,CAAE;QACvD,KAAK,CAAC8C,QAAQ;YAACC,WAAW;QAAI;QAC9B,IAAI,CAAC/C,SAAS,GAAGA;QACjB,IAAI,CAACU,UAAU,GAAGX,kBAAkBC;QACpC,IAAI,CAAC6C,UAAU,GAAGpC,kBAAkB,IAAI,CAACC,UAAU;IACrD;IAEA,6EAA6E;IAC7E,wEAAwE;IACxE,8EAA8E;IAC9E,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB;IAClB,EAAE;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,uEAAuE;IACvE,eAAe;IAEf,IAAuBsC,iBAAqC;QAC1D,OAAO,KAAK,CAACA,eACV5C,MAAM,CAAC,CAACiB,UAAY,IAAI,CAACX,UAAU,CAACuC,GAAG,CAAC5B,QAAQb,EAAE,GAClDD,GAAG,CAAC,CAACc,UAAa,CAAA;gBAAC,GAAGA,OAAO;YAAA,CAAA;IAClC;IAEA,IAAuB6B,eAAmC;QACxD,4EAA4E;QAC5E,OAAO,KAAK,CAACA,aACV9C,MAAM,CAAC,CAAC+C,QAAU,IAAI,CAACN,UAAU,CAACI,GAAG,CAACE,MAAMzB,IAAI,GAChDnB,GAAG,CAAC,CAAC4C,QAAW,CAAA;gBAAC,GAAGA,KAAK;YAAA,CAAA;IAC9B;IAEmBC,IAAI,GAAGC,IAAc,EAAQ;QAC9C,IAAI,CAACT,KAAK,CAAChB,IAAI,IAAIyB;IACrB;IAEA,MAAsBC,gBAAgBjC,OAAyB,EAAiB;QAC9E,IAAI,CAAC,IAAI,CAACX,UAAU,CAACuC,GAAG,CAAC5B,QAAQb,EAAE,GAAG,MAAM,IAAIU,kBAAkBG,QAAQb,EAAE;QAC5E,IAAI,CAACmC,SAAS,GAAGtB,QAAQb,EAAE;QAC3B,OAAO,KAAK,CAAC8C,gBAAgBlC,mBAAmBC,SAAS,IAAI,CAACrB,SAAS,CAACqB,QAAQb,EAAE,CAAC;IACrF;IAEA,MAAsB+C,SAASC,IAAc,EAAiB;QAC5D,OAAO,KAAK,CAACD,SAASzD,wBAAwB0D;IAChD;IAEA,MAAyBC,cAAcN,KAAuB,EAAiB;QAC7E,IAAI,CAAC,IAAI,CAACN,UAAU,CAACI,GAAG,CAACE,MAAMzB,IAAI,GAAG,MAAM,IAAIR,kBAAkBiC,MAAMzB,IAAI;QAC5E,OAAO,KAAK,CAAC+B,cAAc;YAAC,GAAGN,KAAK;QAAA;IACtC;AACF;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,eAAeO,oBACpBZ,MAAc,EACdU,IAAc,EACdxD,SAA2B;IAE3B,MAAM2D,OAAO,IAAIjB,cAAcI,QAAQ9C;IACvC,IAAI;QACF,MAAM2D,KAAKJ,QAAQ,CAACC;IACtB,EAAE,OAAOI,KAAK;QACZ,uEAAuE;QACvE,0EAA0E;QAC1E,6BAA6B;QAC7B,IAAIA,eAAe1C,qBAAqB0C,IAAIC,KAAK,EAAE,OAAOC;QAC1D,MAAMF;IACR;IACA,OAAO;QACL,GAAID,KAAKhB,SAAS,IAAI;YAACA,WAAWgB,KAAKhB,SAAS;QAAA,CAAC;QACjDoB,QAAQJ,KAAKf,KAAK,CAAC3B,IAAI,CAAC,MAAM+C,OAAO;IACvC;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASC,cAAcT,IAAc,EAAEV,MAAc;IAC1D,IAAIU,IAAI,CAAC,EAAE,KAAK,QAAQ,OAAO;IAC/B,MAAMU,YAAYtE,qBAAqBkD;IACvC,KAAK,MAAMqB,SAASX,KAAM;QACxB,IAAIW,UAAU,MAAM,OAAO;QAC3B,IAAID,UAAUE,QAAQ,CAACD,QAAQ,OAAO;IACxC;IACA,OAAO;AACT"}

package/dist/exports/invokeSanityCli/index.d.ts

@@ -1,4 +1,5 @@
 import { Config } from "@oclif/core";
+import { InvocationSource } from "@sanity/cli-core/commandPolicy";
 import { SanityEnvironment } from "@sanity/cli-core/executionContext";
 /**
  * Valid body types for fetch requests.
@@ -89,8 +90,6 @@ interface FetchResponse {
  * @public
  */
 type FetchFunction = (input: string, init?: FetchInit) => Promise<FetchResponse>;
-/** Where an invocation originates; selects the policy to enforce. */
-type InvocationSource = 'mcp';
 /**
  * @internal
  */

package/dist/exports/invokeSanityCli/index.js

@@ -2,7 +2,9 @@
  * Programmatic (in-process) invocation of CLI commands, e.g. from an MCP
  * server. The invokable surface is governed by a per-source command policy
  * (see ./commandPolicies): every CLI command is explicitly allowed, denied,
- * or allowed conditionally on the parsed invocation.
+ * or allowed conditionally on the parsed invocation. Commands contributed by
+ * plugins are covered by the policies those plugins declare, and are denied
+ * unless they declare one.
  *
  * {@link invokeSanityCli} handles arg parsing, policy enforcement, command
  * dispatch, per-invocation auth, and output capture.
@@ -19,34 +21,42 @@
  * Help works like the regular CLI, scoped to the source's policy: `--help`
  * (or `help`) renders root help listing the invokable topics, and a subject
  * (`cors --help`, `cors list --help`) renders topic or command help.
- */ import { Config, Parser, settings } from '@oclif/core';
+ */ import { fileURLToPath } from 'node:url';
+import { Config, Parser, settings } from '@oclif/core';
 import { getHelpFlagAdditions, normalizeArgv } from '@oclif/core/help';
 import { exitCodes } from '@sanity/cli-core';
+import { deny, isConditionalInvocationPolicy } from '@sanity/cli-core/commandPolicy';
 import { runWithCliExecutionContext } from '@sanity/cli-core/executionContext';
 import { parseArgsStringToArgv } from 'string-argv';
 import { resolveTopicAliasInArgv } from '../../topicAliases.js';
-import { commandPolicies } from './commandPolicies/index.js';
-import { deny, isConditionalInvocationPolicy } from './commandPolicies/policy.js';
+import { resolveCommandPolicies } from './commandPolicies/index.js';
 import { isHelpRequest, renderInvokableHelp } from './help.js';
 import { prettyPrintError } from './prettyPrintError.js';
+/**
+ * Whether a command can run in isolation, which in practice means it extends
+ * `SanityCommand`: only that base class routes output, token resolution,
+ * interactivity, and project discovery through the CLI execution context.
+ *
+ * This is a capability check, not a policy check. A plugin can declare a
+ * policy for a command that still extends oclif's `Command` directly, and
+ * such a command must not run here — the policy says the invocation is safe,
+ * but nothing would hold it to the isolation guarantees that assessment
+ * assumes.
+ */ function supportsIsolatedExecution(CommandClass) {
+    const prototype = CommandClass.prototype;
+    return typeof prototype?.runInExecutionContext === 'function';
+}
 /**
  * Instantiate a policy-approved command for isolated execution.
  *
- * Every invokable command extends `SanityCommand`, whose
  * `runInExecutionContext()` runs the instance without oclif's static
  * `Command.run()` — the static runner re-enters `Config.load()` (filesystem
  * reads and a process-global config cache write) on every call. The manifest
  * types command classes as the abstract oclif `Command`, hence the
- * constructor cast. The method is probed rather than checked with
- * `instanceof`, because command modules may load from the compiled build
- * while this module runs from source, giving `SanityCommand` two identities.
+ * constructor cast.
  */ function instantiateCommand(CommandClass, argv, config) {
     const ConcreteCommand = CommandClass;
-    const command = new ConcreteCommand(argv, config);
-    if (typeof command.runInExecutionContext !== 'function') {
-        throw new TypeError(`Command "${CommandClass.id}" does not support isolated execution`);
-    }
-    return command;
+    return new ConcreteCommand(argv, config);
 }
 /**
  * Load the oclif `Config` for this package, needed to resolve, load, and run
@@ -54,8 +64,14 @@ import { prettyPrintError } from './prettyPrintError.js';
  * re-reading the command manifest per call. It only reads this package's own
  * installed files — process-lifetime initialization, not per-invocation host
  * state — so it happens outside any execution context.
+ *
+ * `userPlugins: false` keeps this surface to the plugins this package ships
+ * with. oclif otherwise loads whatever `<dataDir>/package.json` lists.
  */ function loadCliCommandConfig() {
-    return Config.load(import.meta.url);
+    return Config.load({
+        root: fileURLToPath(import.meta.url),
+        userPlugins: false
+    });
 }
 let cachedConfig;
 function unknownCommandResult(argv, policySet) {
@@ -106,7 +122,9 @@ function unknownCommandResult(argv, policySet) {
     }, ()=>invokeSanityCliInContext(options, resolvedConfig, output));
 }
 async function invokeSanityCliInContext({ args, source }, resolvedConfig, output) {
-    const policySet = commandPolicies[source];
+    // Combines this package's own policies with those each plugin declares for
+    // the commands it contributes. Resolved once per config, not per call.
+    const policySet = await resolveCommandPolicies(resolvedConfig, source);
     // Pre-split argv arrays are taken verbatim; only string input goes through
     // shell-style tokenization and quote normalization.
     let argv = typeof args === 'string' ? parseArgsStringToArgv(args).map((t)=>stripFlagQuotes(t)) : [
@@ -148,6 +166,10 @@ async function invokeSanityCliInContext({ args, source }, resolvedConfig, output
     const commandDefinition = policy.kind === 'deny' ? undefined : resolvedConfig.findCommand(commandId);
     if (!commandDefinition) return unknownCommandResult(argv, policySet);
     const CommandClass = await commandDefinition.load();
+    // A policy can only speak to whether an invocation is safe; it cannot make
+    // a command isolatable. One that isn't is treated as if it did not exist,
+    // like every other fail-closed path here.
+    if (!supportsIsolatedExecution(CommandClass)) return unknownCommandResult(argv, policySet);
     // Parse with the command's real definitions (without executing anything) so
     // conditional policies are evaluated against typed args/flags, not tokens.
     let invocation;

package/dist/exports/invokeSanityCli/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/exports/invokeSanityCli/index.ts"],"sourcesContent":["/**\n * Programmatic (in-process) invocation of CLI commands, e.g. from an MCP\n * server. The invokable surface is governed by a per-source command policy\n * (see ./commandPolicies): every CLI command is explicitly allowed, denied,\n * or allowed conditionally on the parsed invocation.\n *\n * {@link invokeSanityCli} handles arg parsing, policy enforcement, command\n * dispatch, per-invocation auth, and output capture.\n * ```ts\n * import {invokeSanityCli} from '@sanity/cli/invokeSanityCli'\n *\n * const {exitCode, output} = await invokeSanityCli({\n *   args: 'cors list --project-id abc123',\n *   source: 'mcp',\n *   token: extra.authInfo.token,\n * })\n * ```\n *\n * Help works like the regular CLI, scoped to the source's policy: `--help`\n * (or `help`) renders root help listing the invokable topics, and a subject\n * (`cors --help`, `cors list --help`) renders topic or command help.\n */\nimport {Command, Config, Parser, settings} from '@oclif/core'\nimport {getHelpFlagAdditions, normalizeArgv} from '@oclif/core/help'\nimport {exitCodes} from '@sanity/cli-core'\nimport {runWithCliExecutionContext, type SanityEnvironment} from '@sanity/cli-core/executionContext'\nimport {type SanityCommand} from '@sanity/cli-core/SanityCommand'\nimport {type FetchFunction} from 'get-it'\nimport {parseArgsStringToArgv} from 'string-argv'\n\nimport {resolveTopicAliasInArgv} from '../../topicAliases.js'\nimport {commandPolicies} from './commandPolicies/index.js'\nimport {\n  type CommandPolicySet,\n  deny,\n  type InvocationSource,\n  isConditionalInvocationPolicy,\n} from './commandPolicies/policy.js'\nimport {isHelpRequest, renderInvokableHelp} from './help.js'\nimport {prettyPrintError} from './prettyPrintError.js'\n\ntype InvokableCommand = Pick<SanityCommand<typeof Command>, 'runInExecutionContext'>\n\n/**\n * Instantiate a policy-approved command for isolated execution.\n *\n * Every invokable command extends `SanityCommand`, whose\n * `runInExecutionContext()` runs the instance without oclif's static\n * `Command.run()` — the static runner re-enters `Config.load()` (filesystem\n * reads and a process-global config cache write) on every call. The manifest\n * types command classes as the abstract oclif `Command`, hence the\n * constructor cast. The method is probed rather than checked with\n * `instanceof`, because command modules may load from the compiled build\n * while this module runs from source, giving `SanityCommand` two identities.\n */\nfunction instantiateCommand(\n  CommandClass: Command.Class,\n  argv: string[],\n  config: Config,\n): InvokableCommand {\n  const ConcreteCommand = CommandClass as unknown as new (argv: string[], config: Config) => Command\n  const command = new ConcreteCommand(argv, config) as Command & Partial<InvokableCommand>\n  if (typeof command.runInExecutionContext !== 'function') {\n    throw new TypeError(`Command \"${CommandClass.id}\" does not support isolated execution`)\n  }\n  return command as InvokableCommand\n}\n\n/**\n * Load the oclif `Config` for this package, needed to resolve, load, and run\n * commands. Loading it once and reusing it across invocations avoids\n * re-reading the command manifest per call. It only reads this package's own\n * installed files — process-lifetime initialization, not per-invocation host\n * state — so it happens outside any execution context.\n */\nfunction loadCliCommandConfig(): Promise<Config> {\n  return Config.load(import.meta.url)\n}\n\nlet cachedConfig: Promise<Config> | undefined\n\nfunction unknownCommandResult(argv: string[], policySet: CommandPolicySet): InvokeSanityCliResult {\n  const available = Object.entries(policySet)\n    .filter(([, policy]) => policy.kind !== 'deny')\n    .map(([id]) => id.replaceAll(':', ' '))\n    .toSorted()\n  return {\n    exitCode: exitCodes.USAGE_ERROR,\n    output: [\n      `Unknown or unsupported command: ${argv.slice(0, 2).join(' ') || '(none)'}`,\n      `Available commands: ${available.join(', ')}`,\n    ].join('\\n'),\n  }\n}\n\n/**\n * @internal\n */\nexport interface InvokeSanityCliOptions {\n  /**\n   * Arguments after `sanity` (a leading `sanity` token is tolerated), either\n   * as a single string — shell-style quoting is supported, but no shell is\n   * ever executed — or as a pre-split argv array.\n   */\n  args: string | string[]\n\n  /**\n   * Where this invocation originates. Selects the command policy to enforce:\n   * which commands are invokable and which invocations of them are permitted.\n   */\n  source: InvocationSource\n\n  /**\n   * Auth token for this invocation. Scoped to this call via the CLI execution\n   * context: it never touches process env or the process-wide token cache, so\n   * concurrent invocations with different tokens are fully isolated.\n   */\n  token: string\n\n  /**\n   * Optional oclif config override (mainly for tests). Defaults to this\n   * package's config, loaded once and cached across invocations.\n   */\n  config?: Config\n\n  /**\n   * Optional fetch implementation for API requests made by this invocation.\n   * Scoped to this call via the CLI execution context; defaults to the CLI's\n   * own transport. The execution context's transport hygiene (such as\n   * stripping the embedding process's lineage header) is applied on top.\n   */\n  fetch?: FetchFunction\n\n  /**\n   * Sanity deployment environment for this invocation. Scoped to this call\n   * via the CLI execution context and defaults to production. The embedding\n   * process's `SANITY_INTERNAL_ENV` is never consulted.\n   */\n  sanityEnv?: SanityEnvironment\n}\n\n/**\n * @internal\n */\nexport interface InvokeSanityCliResult {\n  /** `0` on success, the command's exit code otherwise. */\n  exitCode: number\n\n  /** Combined stdout and stderr output, in emission order. */\n  output: string\n\n  /**\n   * Canonical oclif command id when the invocation resolved to a command\n   * exposed by the selected policy (for example, `datasets:create`).\n   */\n  commandId?: string\n}\n\n/**\n * Unlike a shell, string-argv keeps quotes that are glued to unquoted text:\n * `--name=\"my project\"` tokenizes with the quotes intact. Strip a matching\n * wrapping quote pair from the value side of `--flag=`-shaped tokens so the\n * common shell-style form yields the value the caller intended.\n */\nfunction stripFlagQuotes(rawToken: string): string {\n  const match = /^(-{1,2}[^\\s=]+=)(['\"])([\\s\\S]*)\\2$/.exec(rawToken)\n  return match ? match[1] + match[3] : rawToken\n}\n\n/**\n * Run a policy-permitted CLI command in-process and capture its result.\n *\n * Command-level failures (unknown command, bad flags, API errors) are\n * reported through `exitCode`/`output` rather than thrown, so callers can\n * relay them verbatim.\n *\n * @internal\n */\nexport async function invokeSanityCli(\n  options: InvokeSanityCliOptions,\n): Promise<InvokeSanityCliResult> {\n  // Always load compiled command modules. Oclif's dev-mode source resolution\n  // otherwise probes tsconfigs (reading the filesystem and process.cwd) on\n  // every command load, and may register ts-node process-wide.\n  settings.enableAutoTranspile = false\n\n  const resolvedConfig = options.config ?? (await (cachedConfig ??= loadCliCommandConfig()))\n  const output: string[] = []\n  const sink = (line: string) => output.push(line)\n  const {fetch, sanityEnv, token} = options\n\n  // Establish the isolation boundary before rendering help, loading command\n  // modules, parsing, or executing. Any code reached by an external\n  // invocation can therefore fail closed on context.\n  return runWithCliExecutionContext({fetch, sanityEnv, stderr: sink, stdout: sink, token}, () =>\n    invokeSanityCliInContext(options, resolvedConfig, output),\n  )\n}\n\nasync function invokeSanityCliInContext(\n  {args, source}: InvokeSanityCliOptions,\n  resolvedConfig: Config,\n  output: string[],\n): Promise<InvokeSanityCliResult> {\n  const policySet = commandPolicies[source]\n\n  // Pre-split argv arrays are taken verbatim; only string input goes through\n  // shell-style tokenization and quote normalization.\n  let argv =\n    typeof args === 'string'\n      ? parseArgsStringToArgv(args).map((t) => stripFlagQuotes(t))\n      : [...args]\n  if (argv[0] === 'sanity') argv = argv.slice(1)\n  argv = resolveTopicAliasInArgv(argv)\n\n  // Help requests are routed through oclif's help system, scoped to the\n  // source's policy: root help for a bare request, topic/command help when a\n  // subject is given. Denied subjects get the standard unknown-command\n  // response (identical to a truly unknown command, so hosts can't probe the\n  // full CLI surface through help), and a help request never executes a\n  // command.\n  if (isHelpRequest(argv, resolvedConfig)) {\n    try {\n      // Drop a leading `help` so the rest is the subject, mirroring how\n      // oclif's dispatch consumes the token before the help command sees argv\n      const helpArgv = argv[0] === 'help' ? argv.slice(1) : argv\n      const result = await renderInvokableHelp(resolvedConfig, helpArgv, policySet)\n      if (result) return {...result, exitCode: exitCodes.SUCCESS}\n      const helpFlags = getHelpFlagAdditions(resolvedConfig)\n      return unknownCommandResult(\n        helpArgv.filter((token) => !helpFlags.includes(token)),\n        policySet,\n      )\n    } catch (err) {\n      return {\n        exitCode: exitCodes.RUNTIME_ERROR,\n        output: err instanceof Error ? err.message : String(err),\n      }\n    }\n  }\n\n  // Resolve the command id the same way oclif's dispatch would (collating\n  // space-separated topics, accepting colon-separated ids as-is), then apply\n  // the policy. Denied and uncategorized ids fail closed, indistinguishable\n  // from commands that don't exist.\n  const [commandId = '', ...commandArgv] = normalizeArgv(resolvedConfig, argv)\n  const policy = policySet[commandId] ?? deny\n  const commandDefinition =\n    policy.kind === 'deny' ? undefined : resolvedConfig.findCommand(commandId)\n  if (!commandDefinition) return unknownCommandResult(argv, policySet)\n\n  const CommandClass = await commandDefinition.load()\n\n  // Parse with the command's real definitions (without executing anything) so\n  // conditional policies are evaluated against typed args/flags, not tokens.\n  let invocation: {args: Record<string, unknown>; flags: Record<string, unknown>}\n  try {\n    const parsed = await Parser.parse(commandArgv, {\n      args: CommandClass.args,\n      baseFlags: CommandClass.baseFlags,\n      enableJsonFlag: CommandClass.enableJsonFlag,\n      flags: CommandClass.flags,\n      strict: CommandClass.strict,\n    })\n    invocation = {\n      args: parsed.args as Record<string, unknown>,\n      flags: parsed.flags as Record<string, unknown>,\n    }\n  } catch (err) {\n    return {\n      commandId,\n      exitCode: exitCodes.USAGE_ERROR,\n      output: err instanceof Error ? err.message : String(err),\n    }\n  }\n\n  if (!policy.validate(invocation)) {\n    const displayId = commandId.replaceAll(':', ' ')\n    let output = `This invocation of \\`${displayId}\\` is not supported here`\n\n    if (isConditionalInvocationPolicy(policy)) {\n      const usedDeniedFlags = policy.deniedFlags.filter(\n        (name) => invocation.flags[name] !== undefined && invocation.flags[name] !== false,\n      )\n      if (usedDeniedFlags.length > 0) {\n        output = `\\nThe ${usedDeniedFlags.map((name) => `--${name}`).join(', ')} flag is not supported here for \\`${displayId}\\``\n      }\n    }\n\n    return {\n      commandId,\n      exitCode: exitCodes.USAGE_ERROR,\n      output,\n    }\n  }\n\n  try {\n    const command = instantiateCommand(CommandClass, commandArgv, resolvedConfig)\n    await command.runInExecutionContext()\n    return {commandId, exitCode: exitCodes.SUCCESS, output: output.join('\\n')}\n  } catch (err) {\n    const exit = err.oclif?.exit\n\n    // `this.exit(0)` throws an ExitError but is a successful outcome\n    if (exit === exitCodes.SUCCESS) {\n      return {commandId, exitCode: exitCodes.SUCCESS, output: output.join('\\n')}\n    }\n\n    const message = prettyPrintError(err) || String(err)\n    if (message) output.push(message)\n    return {\n      commandId,\n      exitCode: typeof exit === 'number' ? exit : exitCodes.RUNTIME_ERROR,\n      output: output.join('\\n'),\n    }\n  }\n}\n"],"names":["Config","Parser","settings","getHelpFlagAdditions","normalizeArgv","exitCodes","runWithCliExecutionContext","parseArgsStringToArgv","resolveTopicAliasInArgv","commandPolicies","deny","isConditionalInvocationPolicy","isHelpRequest","renderInvokableHelp","prettyPrintError","instantiateCommand","CommandClass","argv","config","ConcreteCommand","command","runInExecutionContext","TypeError","id","loadCliCommandConfig","load","url","cachedConfig","unknownCommandResult","policySet","available","Object","entries","filter","policy","kind","map","replaceAll","toSorted","exitCode","USAGE_ERROR","output","slice","join","stripFlagQuotes","rawToken","match","exec","invokeSanityCli","options","enableAutoTranspile","resolvedConfig","sink","line","push","fetch","sanityEnv","token","stderr","stdout","invokeSanityCliInContext","args","source","t","helpArgv","result","SUCCESS","helpFlags","includes","err","RUNTIME_ERROR","Error","message","String","commandId","commandArgv","commandDefinition","undefined","findCommand","invocation","parsed","parse","baseFlags","enableJsonFlag","flags","strict","validate","displayId","usedDeniedFlags","deniedFlags","name","length","exit","oclif"],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;CAqBC,GACD,SAAiBA,MAAM,EAAEC,MAAM,EAAEC,QAAQ,QAAO,cAAa;AAC7D,SAAQC,oBAAoB,EAAEC,aAAa,QAAO,mBAAkB;AACpE,SAAQC,SAAS,QAAO,mBAAkB;AAC1C,SAAQC,0BAA0B,QAA+B,oCAAmC;AAGpG,SAAQC,qBAAqB,QAAO,cAAa;AAEjD,SAAQC,uBAAuB,QAAO,wBAAuB;AAC7D,SAAQC,eAAe,QAAO,6BAA4B;AAC1D,SAEEC,IAAI,EAEJC,6BAA6B,QACxB,8BAA6B;AACpC,SAAQC,aAAa,EAAEC,mBAAmB,QAAO,YAAW;AAC5D,SAAQC,gBAAgB,QAAO,wBAAuB;AAItD;;;;;;;;;;;CAWC,GACD,SAASC,mBACPC,YAA2B,EAC3BC,IAAc,EACdC,MAAc;IAEd,MAAMC,kBAAkBH;IACxB,MAAMI,UAAU,IAAID,gBAAgBF,MAAMC;IAC1C,IAAI,OAAOE,QAAQC,qBAAqB,KAAK,YAAY;QACvD,MAAM,IAAIC,UAAU,CAAC,SAAS,EAAEN,aAAaO,EAAE,CAAC,qCAAqC,CAAC;IACxF;IACA,OAAOH;AACT;AAEA;;;;;;CAMC,GACD,SAASI;IACP,OAAOxB,OAAOyB,IAAI,CAAC,YAAYC,GAAG;AACpC;AAEA,IAAIC;AAEJ,SAASC,qBAAqBX,IAAc,EAAEY,SAA2B;IACvE,MAAMC,YAAYC,OAAOC,OAAO,CAACH,WAC9BI,MAAM,CAAC,CAAC,GAAGC,OAAO,GAAKA,OAAOC,IAAI,KAAK,QACvCC,GAAG,CAAC,CAAC,CAACb,GAAG,GAAKA,GAAGc,UAAU,CAAC,KAAK,MACjCC,QAAQ;IACX,OAAO;QACLC,UAAUlC,UAAUmC,WAAW;QAC/BC,QAAQ;YACN,CAAC,gCAAgC,EAAExB,KAAKyB,KAAK,CAAC,GAAG,GAAGC,IAAI,CAAC,QAAQ,UAAU;YAC3E,CAAC,oBAAoB,EAAEb,UAAUa,IAAI,CAAC,OAAO;SAC9C,CAACA,IAAI,CAAC;IACT;AACF;AAiEA;;;;;CAKC,GACD,SAASC,gBAAgBC,QAAgB;IACvC,MAAMC,QAAQ,sCAAsCC,IAAI,CAACF;IACzD,OAAOC,QAAQA,KAAK,CAAC,EAAE,GAAGA,KAAK,CAAC,EAAE,GAAGD;AACvC;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeG,gBACpBC,OAA+B;IAE/B,2EAA2E;IAC3E,yEAAyE;IACzE,6DAA6D;IAC7D/C,SAASgD,mBAAmB,GAAG;IAE/B,MAAMC,iBAAiBF,QAAQ/B,MAAM,IAAK,MAAOS,CAAAA,iBAAiBH,sBAAqB;IACvF,MAAMiB,SAAmB,EAAE;IAC3B,MAAMW,OAAO,CAACC,OAAiBZ,OAAOa,IAAI,CAACD;IAC3C,MAAM,EAACE,KAAK,EAAEC,SAAS,EAAEC,KAAK,EAAC,GAAGR;IAElC,0EAA0E;IAC1E,kEAAkE;IAClE,mDAAmD;IACnD,OAAO3C,2BAA2B;QAACiD;QAAOC;QAAWE,QAAQN;QAAMO,QAAQP;QAAMK;IAAK,GAAG,IACvFG,yBAAyBX,SAASE,gBAAgBV;AAEtD;AAEA,eAAemB,yBACb,EAACC,IAAI,EAAEC,MAAM,EAAyB,EACtCX,cAAsB,EACtBV,MAAgB;IAEhB,MAAMZ,YAAYpB,eAAe,CAACqD,OAAO;IAEzC,2EAA2E;IAC3E,oDAAoD;IACpD,IAAI7C,OACF,OAAO4C,SAAS,WACZtD,sBAAsBsD,MAAMzB,GAAG,CAAC,CAAC2B,IAAMnB,gBAAgBmB,MACvD;WAAIF;KAAK;IACf,IAAI5C,IAAI,CAAC,EAAE,KAAK,UAAUA,OAAOA,KAAKyB,KAAK,CAAC;IAC5CzB,OAAOT,wBAAwBS;IAE/B,sEAAsE;IACtE,2EAA2E;IAC3E,qEAAqE;IACrE,2EAA2E;IAC3E,sEAAsE;IACtE,WAAW;IACX,IAAIL,cAAcK,MAAMkC,iBAAiB;QACvC,IAAI;YACF,kEAAkE;YAClE,wEAAwE;YACxE,MAAMa,WAAW/C,IAAI,CAAC,EAAE,KAAK,SAASA,KAAKyB,KAAK,CAAC,KAAKzB;YACtD,MAAMgD,SAAS,MAAMpD,oBAAoBsC,gBAAgBa,UAAUnC;YACnE,IAAIoC,QAAQ,OAAO;gBAAC,GAAGA,MAAM;gBAAE1B,UAAUlC,UAAU6D,OAAO;YAAA;YAC1D,MAAMC,YAAYhE,qBAAqBgD;YACvC,OAAOvB,qBACLoC,SAAS/B,MAAM,CAAC,CAACwB,QAAU,CAACU,UAAUC,QAAQ,CAACX,SAC/C5B;QAEJ,EAAE,OAAOwC,KAAK;YACZ,OAAO;gBACL9B,UAAUlC,UAAUiE,aAAa;gBACjC7B,QAAQ4B,eAAeE,QAAQF,IAAIG,OAAO,GAAGC,OAAOJ;YACtD;QACF;IACF;IAEA,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,CAACK,YAAY,EAAE,EAAE,GAAGC,YAAY,GAAGvE,cAAc+C,gBAAgBlC;IACvE,MAAMiB,SAASL,SAAS,CAAC6C,UAAU,IAAIhE;IACvC,MAAMkE,oBACJ1C,OAAOC,IAAI,KAAK,SAAS0C,YAAY1B,eAAe2B,WAAW,CAACJ;IAClE,IAAI,CAACE,mBAAmB,OAAOhD,qBAAqBX,MAAMY;IAE1D,MAAMb,eAAe,MAAM4D,kBAAkBnD,IAAI;IAEjD,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAIsD;IACJ,IAAI;QACF,MAAMC,SAAS,MAAM/E,OAAOgF,KAAK,CAACN,aAAa;YAC7Cd,MAAM7C,aAAa6C,IAAI;YACvBqB,WAAWlE,aAAakE,SAAS;YACjCC,gBAAgBnE,aAAamE,cAAc;YAC3CC,OAAOpE,aAAaoE,KAAK;YACzBC,QAAQrE,aAAaqE,MAAM;QAC7B;QACAN,aAAa;YACXlB,MAAMmB,OAAOnB,IAAI;YACjBuB,OAAOJ,OAAOI,KAAK;QACrB;IACF,EAAE,OAAOf,KAAK;QACZ,OAAO;YACLK;YACAnC,UAAUlC,UAAUmC,WAAW;YAC/BC,QAAQ4B,eAAeE,QAAQF,IAAIG,OAAO,GAAGC,OAAOJ;QACtD;IACF;IAEA,IAAI,CAACnC,OAAOoD,QAAQ,CAACP,aAAa;QAChC,MAAMQ,YAAYb,UAAUrC,UAAU,CAAC,KAAK;QAC5C,IAAII,SAAS,CAAC,qBAAqB,EAAE8C,UAAU,wBAAwB,CAAC;QAExE,IAAI5E,8BAA8BuB,SAAS;YACzC,MAAMsD,kBAAkBtD,OAAOuD,WAAW,CAACxD,MAAM,CAC/C,CAACyD,OAASX,WAAWK,KAAK,CAACM,KAAK,KAAKb,aAAaE,WAAWK,KAAK,CAACM,KAAK,KAAK;YAE/E,IAAIF,gBAAgBG,MAAM,GAAG,GAAG;gBAC9BlD,SAAS,CAAC,MAAM,EAAE+C,gBAAgBpD,GAAG,CAAC,CAACsD,OAAS,CAAC,EAAE,EAAEA,MAAM,EAAE/C,IAAI,CAAC,MAAM,kCAAkC,EAAE4C,UAAU,EAAE,CAAC;YAC3H;QACF;QAEA,OAAO;YACLb;YACAnC,UAAUlC,UAAUmC,WAAW;YAC/BC;QACF;IACF;IAEA,IAAI;QACF,MAAMrB,UAAUL,mBAAmBC,cAAc2D,aAAaxB;QAC9D,MAAM/B,QAAQC,qBAAqB;QACnC,OAAO;YAACqD;YAAWnC,UAAUlC,UAAU6D,OAAO;YAAEzB,QAAQA,OAAOE,IAAI,CAAC;QAAK;IAC3E,EAAE,OAAO0B,KAAK;QACZ,MAAMuB,OAAOvB,IAAIwB,KAAK,EAAED;QAExB,iEAAiE;QACjE,IAAIA,SAASvF,UAAU6D,OAAO,EAAE;YAC9B,OAAO;gBAACQ;gBAAWnC,UAAUlC,UAAU6D,OAAO;gBAAEzB,QAAQA,OAAOE,IAAI,CAAC;YAAK;QAC3E;QAEA,MAAM6B,UAAU1D,iBAAiBuD,QAAQI,OAAOJ;QAChD,IAAIG,SAAS/B,OAAOa,IAAI,CAACkB;QACzB,OAAO;YACLE;YACAnC,UAAU,OAAOqD,SAAS,WAAWA,OAAOvF,UAAUiE,aAAa;YACnE7B,QAAQA,OAAOE,IAAI,CAAC;QACtB;IACF;AACF"}
+{"version":3,"sources":["../../../src/exports/invokeSanityCli/index.ts"],"sourcesContent":["/**\n * Programmatic (in-process) invocation of CLI commands, e.g. from an MCP\n * server. The invokable surface is governed by a per-source command policy\n * (see ./commandPolicies): every CLI command is explicitly allowed, denied,\n * or allowed conditionally on the parsed invocation. Commands contributed by\n * plugins are covered by the policies those plugins declare, and are denied\n * unless they declare one.\n *\n * {@link invokeSanityCli} handles arg parsing, policy enforcement, command\n * dispatch, per-invocation auth, and output capture.\n * ```ts\n * import {invokeSanityCli} from '@sanity/cli/invokeSanityCli'\n *\n * const {exitCode, output} = await invokeSanityCli({\n *   args: 'cors list --project-id abc123',\n *   source: 'mcp',\n *   token: extra.authInfo.token,\n * })\n * ```\n *\n * Help works like the regular CLI, scoped to the source's policy: `--help`\n * (or `help`) renders root help listing the invokable topics, and a subject\n * (`cors --help`, `cors list --help`) renders topic or command help.\n */\nimport {fileURLToPath} from 'node:url'\n\nimport {Command, Config, Parser, settings} from '@oclif/core'\nimport {getHelpFlagAdditions, normalizeArgv} from '@oclif/core/help'\nimport {exitCodes} from '@sanity/cli-core'\nimport {\n  type CommandPolicySet,\n  deny,\n  type InvocationSource,\n  isConditionalInvocationPolicy,\n} from '@sanity/cli-core/commandPolicy'\nimport {runWithCliExecutionContext, type SanityEnvironment} from '@sanity/cli-core/executionContext'\nimport {type SanityCommand} from '@sanity/cli-core/SanityCommand'\nimport {type FetchFunction} from 'get-it'\nimport {parseArgsStringToArgv} from 'string-argv'\n\nimport {resolveTopicAliasInArgv} from '../../topicAliases.js'\nimport {resolveCommandPolicies} from './commandPolicies/index.js'\nimport {isHelpRequest, renderInvokableHelp} from './help.js'\nimport {prettyPrintError} from './prettyPrintError.js'\n\ntype InvokableCommand = Pick<SanityCommand<typeof Command>, 'runInExecutionContext'>\n\n/**\n * Whether a command can run in isolation, which in practice means it extends\n * `SanityCommand`: only that base class routes output, token resolution,\n * interactivity, and project discovery through the CLI execution context.\n *\n * This is a capability check, not a policy check. A plugin can declare a\n * policy for a command that still extends oclif's `Command` directly, and\n * such a command must not run here — the policy says the invocation is safe,\n * but nothing would hold it to the isolation guarantees that assessment\n * assumes.\n */\nfunction supportsIsolatedExecution(CommandClass: Command.Class): boolean {\n  const prototype = CommandClass.prototype as Partial<InvokableCommand> | undefined\n  return typeof prototype?.runInExecutionContext === 'function'\n}\n\n/**\n * Instantiate a policy-approved command for isolated execution.\n *\n * `runInExecutionContext()` runs the instance without oclif's static\n * `Command.run()` — the static runner re-enters `Config.load()` (filesystem\n * reads and a process-global config cache write) on every call. The manifest\n * types command classes as the abstract oclif `Command`, hence the\n * constructor cast.\n */\nfunction instantiateCommand(\n  CommandClass: Command.Class,\n  argv: string[],\n  config: Config,\n): InvokableCommand {\n  const ConcreteCommand = CommandClass as unknown as new (argv: string[], config: Config) => Command\n  return new ConcreteCommand(argv, config) as unknown as InvokableCommand\n}\n\n/**\n * Load the oclif `Config` for this package, needed to resolve, load, and run\n * commands. Loading it once and reusing it across invocations avoids\n * re-reading the command manifest per call. It only reads this package's own\n * installed files — process-lifetime initialization, not per-invocation host\n * state — so it happens outside any execution context.\n *\n * `userPlugins: false` keeps this surface to the plugins this package ships\n * with. oclif otherwise loads whatever `<dataDir>/package.json` lists.\n */\nfunction loadCliCommandConfig(): Promise<Config> {\n  return Config.load({root: fileURLToPath(import.meta.url), userPlugins: false})\n}\n\nlet cachedConfig: Promise<Config> | undefined\n\nfunction unknownCommandResult(argv: string[], policySet: CommandPolicySet): InvokeSanityCliResult {\n  const available = Object.entries(policySet)\n    .filter(([, policy]) => policy.kind !== 'deny')\n    .map(([id]) => id.replaceAll(':', ' '))\n    .toSorted()\n  return {\n    exitCode: exitCodes.USAGE_ERROR,\n    output: [\n      `Unknown or unsupported command: ${argv.slice(0, 2).join(' ') || '(none)'}`,\n      `Available commands: ${available.join(', ')}`,\n    ].join('\\n'),\n  }\n}\n\n/**\n * @internal\n */\nexport interface InvokeSanityCliOptions {\n  /**\n   * Arguments after `sanity` (a leading `sanity` token is tolerated), either\n   * as a single string — shell-style quoting is supported, but no shell is\n   * ever executed — or as a pre-split argv array.\n   */\n  args: string | string[]\n\n  /**\n   * Where this invocation originates. Selects the command policy to enforce:\n   * which commands are invokable and which invocations of them are permitted.\n   */\n  source: InvocationSource\n\n  /**\n   * Auth token for this invocation. Scoped to this call via the CLI execution\n   * context: it never touches process env or the process-wide token cache, so\n   * concurrent invocations with different tokens are fully isolated.\n   */\n  token: string\n\n  /**\n   * Optional oclif config override (mainly for tests). Defaults to this\n   * package's config, loaded once and cached across invocations.\n   */\n  config?: Config\n\n  /**\n   * Optional fetch implementation for API requests made by this invocation.\n   * Scoped to this call via the CLI execution context; defaults to the CLI's\n   * own transport. The execution context's transport hygiene (such as\n   * stripping the embedding process's lineage header) is applied on top.\n   */\n  fetch?: FetchFunction\n\n  /**\n   * Sanity deployment environment for this invocation. Scoped to this call\n   * via the CLI execution context and defaults to production. The embedding\n   * process's `SANITY_INTERNAL_ENV` is never consulted.\n   */\n  sanityEnv?: SanityEnvironment\n}\n\n/**\n * @internal\n */\nexport interface InvokeSanityCliResult {\n  /** `0` on success, the command's exit code otherwise. */\n  exitCode: number\n\n  /** Combined stdout and stderr output, in emission order. */\n  output: string\n\n  /**\n   * Canonical oclif command id when the invocation resolved to a command\n   * exposed by the selected policy (for example, `datasets:create`).\n   */\n  commandId?: string\n}\n\n/**\n * Unlike a shell, string-argv keeps quotes that are glued to unquoted text:\n * `--name=\"my project\"` tokenizes with the quotes intact. Strip a matching\n * wrapping quote pair from the value side of `--flag=`-shaped tokens so the\n * common shell-style form yields the value the caller intended.\n */\nfunction stripFlagQuotes(rawToken: string): string {\n  const match = /^(-{1,2}[^\\s=]+=)(['\"])([\\s\\S]*)\\2$/.exec(rawToken)\n  return match ? match[1] + match[3] : rawToken\n}\n\n/**\n * Run a policy-permitted CLI command in-process and capture its result.\n *\n * Command-level failures (unknown command, bad flags, API errors) are\n * reported through `exitCode`/`output` rather than thrown, so callers can\n * relay them verbatim.\n *\n * @internal\n */\nexport async function invokeSanityCli(\n  options: InvokeSanityCliOptions,\n): Promise<InvokeSanityCliResult> {\n  // Always load compiled command modules. Oclif's dev-mode source resolution\n  // otherwise probes tsconfigs (reading the filesystem and process.cwd) on\n  // every command load, and may register ts-node process-wide.\n  settings.enableAutoTranspile = false\n\n  const resolvedConfig = options.config ?? (await (cachedConfig ??= loadCliCommandConfig()))\n  const output: string[] = []\n  const sink = (line: string) => output.push(line)\n  const {fetch, sanityEnv, token} = options\n\n  // Establish the isolation boundary before rendering help, loading command\n  // modules, parsing, or executing. Any code reached by an external\n  // invocation can therefore fail closed on context.\n  return runWithCliExecutionContext({fetch, sanityEnv, stderr: sink, stdout: sink, token}, () =>\n    invokeSanityCliInContext(options, resolvedConfig, output),\n  )\n}\n\nasync function invokeSanityCliInContext(\n  {args, source}: InvokeSanityCliOptions,\n  resolvedConfig: Config,\n  output: string[],\n): Promise<InvokeSanityCliResult> {\n  // Combines this package's own policies with those each plugin declares for\n  // the commands it contributes. Resolved once per config, not per call.\n  const policySet = await resolveCommandPolicies(resolvedConfig, source)\n\n  // Pre-split argv arrays are taken verbatim; only string input goes through\n  // shell-style tokenization and quote normalization.\n  let argv =\n    typeof args === 'string'\n      ? parseArgsStringToArgv(args).map((t) => stripFlagQuotes(t))\n      : [...args]\n  if (argv[0] === 'sanity') argv = argv.slice(1)\n  argv = resolveTopicAliasInArgv(argv)\n\n  // Help requests are routed through oclif's help system, scoped to the\n  // source's policy: root help for a bare request, topic/command help when a\n  // subject is given. Denied subjects get the standard unknown-command\n  // response (identical to a truly unknown command, so hosts can't probe the\n  // full CLI surface through help), and a help request never executes a\n  // command.\n  if (isHelpRequest(argv, resolvedConfig)) {\n    try {\n      // Drop a leading `help` so the rest is the subject, mirroring how\n      // oclif's dispatch consumes the token before the help command sees argv\n      const helpArgv = argv[0] === 'help' ? argv.slice(1) : argv\n      const result = await renderInvokableHelp(resolvedConfig, helpArgv, policySet)\n      if (result) return {...result, exitCode: exitCodes.SUCCESS}\n      const helpFlags = getHelpFlagAdditions(resolvedConfig)\n      return unknownCommandResult(\n        helpArgv.filter((token) => !helpFlags.includes(token)),\n        policySet,\n      )\n    } catch (err) {\n      return {\n        exitCode: exitCodes.RUNTIME_ERROR,\n        output: err instanceof Error ? err.message : String(err),\n      }\n    }\n  }\n\n  // Resolve the command id the same way oclif's dispatch would (collating\n  // space-separated topics, accepting colon-separated ids as-is), then apply\n  // the policy. Denied and uncategorized ids fail closed, indistinguishable\n  // from commands that don't exist.\n  const [commandId = '', ...commandArgv] = normalizeArgv(resolvedConfig, argv)\n  const policy = policySet[commandId] ?? deny\n  const commandDefinition =\n    policy.kind === 'deny' ? undefined : resolvedConfig.findCommand(commandId)\n  if (!commandDefinition) return unknownCommandResult(argv, policySet)\n\n  const CommandClass = await commandDefinition.load()\n\n  // A policy can only speak to whether an invocation is safe; it cannot make\n  // a command isolatable. One that isn't is treated as if it did not exist,\n  // like every other fail-closed path here.\n  if (!supportsIsolatedExecution(CommandClass)) return unknownCommandResult(argv, policySet)\n\n  // Parse with the command's real definitions (without executing anything) so\n  // conditional policies are evaluated against typed args/flags, not tokens.\n  let invocation: {args: Record<string, unknown>; flags: Record<string, unknown>}\n  try {\n    const parsed = await Parser.parse(commandArgv, {\n      args: CommandClass.args,\n      baseFlags: CommandClass.baseFlags,\n      enableJsonFlag: CommandClass.enableJsonFlag,\n      flags: CommandClass.flags,\n      strict: CommandClass.strict,\n    })\n    invocation = {\n      args: parsed.args as Record<string, unknown>,\n      flags: parsed.flags as Record<string, unknown>,\n    }\n  } catch (err) {\n    return {\n      commandId,\n      exitCode: exitCodes.USAGE_ERROR,\n      output: err instanceof Error ? err.message : String(err),\n    }\n  }\n\n  if (!policy.validate(invocation)) {\n    const displayId = commandId.replaceAll(':', ' ')\n    let output = `This invocation of \\`${displayId}\\` is not supported here`\n\n    if (isConditionalInvocationPolicy(policy)) {\n      const usedDeniedFlags = policy.deniedFlags.filter(\n        (name) => invocation.flags[name] !== undefined && invocation.flags[name] !== false,\n      )\n      if (usedDeniedFlags.length > 0) {\n        output = `\\nThe ${usedDeniedFlags.map((name) => `--${name}`).join(', ')} flag is not supported here for \\`${displayId}\\``\n      }\n    }\n\n    return {\n      commandId,\n      exitCode: exitCodes.USAGE_ERROR,\n      output,\n    }\n  }\n\n  try {\n    const command = instantiateCommand(CommandClass, commandArgv, resolvedConfig)\n    await command.runInExecutionContext()\n    return {commandId, exitCode: exitCodes.SUCCESS, output: output.join('\\n')}\n  } catch (err) {\n    const exit = err.oclif?.exit\n\n    // `this.exit(0)` throws an ExitError but is a successful outcome\n    if (exit === exitCodes.SUCCESS) {\n      return {commandId, exitCode: exitCodes.SUCCESS, output: output.join('\\n')}\n    }\n\n    const message = prettyPrintError(err) || String(err)\n    if (message) output.push(message)\n    return {\n      commandId,\n      exitCode: typeof exit === 'number' ? exit : exitCodes.RUNTIME_ERROR,\n      output: output.join('\\n'),\n    }\n  }\n}\n"],"names":["fileURLToPath","Config","Parser","settings","getHelpFlagAdditions","normalizeArgv","exitCodes","deny","isConditionalInvocationPolicy","runWithCliExecutionContext","parseArgsStringToArgv","resolveTopicAliasInArgv","resolveCommandPolicies","isHelpRequest","renderInvokableHelp","prettyPrintError","supportsIsolatedExecution","CommandClass","prototype","runInExecutionContext","instantiateCommand","argv","config","ConcreteCommand","loadCliCommandConfig","load","root","url","userPlugins","cachedConfig","unknownCommandResult","policySet","available","Object","entries","filter","policy","kind","map","id","replaceAll","toSorted","exitCode","USAGE_ERROR","output","slice","join","stripFlagQuotes","rawToken","match","exec","invokeSanityCli","options","enableAutoTranspile","resolvedConfig","sink","line","push","fetch","sanityEnv","token","stderr","stdout","invokeSanityCliInContext","args","source","t","helpArgv","result","SUCCESS","helpFlags","includes","err","RUNTIME_ERROR","Error","message","String","commandId","commandArgv","commandDefinition","undefined","findCommand","invocation","parsed","parse","baseFlags","enableJsonFlag","flags","strict","validate","displayId","usedDeniedFlags","deniedFlags","name","length","command","exit","oclif"],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GACD,SAAQA,aAAa,QAAO,WAAU;AAEtC,SAAiBC,MAAM,EAAEC,MAAM,EAAEC,QAAQ,QAAO,cAAa;AAC7D,SAAQC,oBAAoB,EAAEC,aAAa,QAAO,mBAAkB;AACpE,SAAQC,SAAS,QAAO,mBAAkB;AAC1C,SAEEC,IAAI,EAEJC,6BAA6B,QACxB,iCAAgC;AACvC,SAAQC,0BAA0B,QAA+B,oCAAmC;AAGpG,SAAQC,qBAAqB,QAAO,cAAa;AAEjD,SAAQC,uBAAuB,QAAO,wBAAuB;AAC7D,SAAQC,sBAAsB,QAAO,6BAA4B;AACjE,SAAQC,aAAa,EAAEC,mBAAmB,QAAO,YAAW;AAC5D,SAAQC,gBAAgB,QAAO,wBAAuB;AAItD;;;;;;;;;;CAUC,GACD,SAASC,0BAA0BC,YAA2B;IAC5D,MAAMC,YAAYD,aAAaC,SAAS;IACxC,OAAO,OAAOA,WAAWC,0BAA0B;AACrD;AAEA;;;;;;;;CAQC,GACD,SAASC,mBACPH,YAA2B,EAC3BI,IAAc,EACdC,MAAc;IAEd,MAAMC,kBAAkBN;IACxB,OAAO,IAAIM,gBAAgBF,MAAMC;AACnC;AAEA;;;;;;;;;CASC,GACD,SAASE;IACP,OAAOvB,OAAOwB,IAAI,CAAC;QAACC,MAAM1B,cAAc,YAAY2B,GAAG;QAAGC,aAAa;IAAK;AAC9E;AAEA,IAAIC;AAEJ,SAASC,qBAAqBT,IAAc,EAAEU,SAA2B;IACvE,MAAMC,YAAYC,OAAOC,OAAO,CAACH,WAC9BI,MAAM,CAAC,CAAC,GAAGC,OAAO,GAAKA,OAAOC,IAAI,KAAK,QACvCC,GAAG,CAAC,CAAC,CAACC,GAAG,GAAKA,GAAGC,UAAU,CAAC,KAAK,MACjCC,QAAQ;IACX,OAAO;QACLC,UAAUpC,UAAUqC,WAAW;QAC/BC,QAAQ;YACN,CAAC,gCAAgC,EAAEvB,KAAKwB,KAAK,CAAC,GAAG,GAAGC,IAAI,CAAC,QAAQ,UAAU;YAC3E,CAAC,oBAAoB,EAAEd,UAAUc,IAAI,CAAC,OAAO;SAC9C,CAACA,IAAI,CAAC;IACT;AACF;AAiEA;;;;;CAKC,GACD,SAASC,gBAAgBC,QAAgB;IACvC,MAAMC,QAAQ,sCAAsCC,IAAI,CAACF;IACzD,OAAOC,QAAQA,KAAK,CAAC,EAAE,GAAGA,KAAK,CAAC,EAAE,GAAGD;AACvC;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeG,gBACpBC,OAA+B;IAE/B,2EAA2E;IAC3E,yEAAyE;IACzE,6DAA6D;IAC7DjD,SAASkD,mBAAmB,GAAG;IAE/B,MAAMC,iBAAiBF,QAAQ9B,MAAM,IAAK,MAAOO,CAAAA,iBAAiBL,sBAAqB;IACvF,MAAMoB,SAAmB,EAAE;IAC3B,MAAMW,OAAO,CAACC,OAAiBZ,OAAOa,IAAI,CAACD;IAC3C,MAAM,EAACE,KAAK,EAAEC,SAAS,EAAEC,KAAK,EAAC,GAAGR;IAElC,0EAA0E;IAC1E,kEAAkE;IAClE,mDAAmD;IACnD,OAAO3C,2BAA2B;QAACiD;QAAOC;QAAWE,QAAQN;QAAMO,QAAQP;QAAMK;IAAK,GAAG,IACvFG,yBAAyBX,SAASE,gBAAgBV;AAEtD;AAEA,eAAemB,yBACb,EAACC,IAAI,EAAEC,MAAM,EAAyB,EACtCX,cAAsB,EACtBV,MAAgB;IAEhB,2EAA2E;IAC3E,uEAAuE;IACvE,MAAMb,YAAY,MAAMnB,uBAAuB0C,gBAAgBW;IAE/D,2EAA2E;IAC3E,oDAAoD;IACpD,IAAI5C,OACF,OAAO2C,SAAS,WACZtD,sBAAsBsD,MAAM1B,GAAG,CAAC,CAAC4B,IAAMnB,gBAAgBmB,MACvD;WAAIF;KAAK;IACf,IAAI3C,IAAI,CAAC,EAAE,KAAK,UAAUA,OAAOA,KAAKwB,KAAK,CAAC;IAC5CxB,OAAOV,wBAAwBU;IAE/B,sEAAsE;IACtE,2EAA2E;IAC3E,qEAAqE;IACrE,2EAA2E;IAC3E,sEAAsE;IACtE,WAAW;IACX,IAAIR,cAAcQ,MAAMiC,iBAAiB;QACvC,IAAI;YACF,kEAAkE;YAClE,wEAAwE;YACxE,MAAMa,WAAW9C,IAAI,CAAC,EAAE,KAAK,SAASA,KAAKwB,KAAK,CAAC,KAAKxB;YACtD,MAAM+C,SAAS,MAAMtD,oBAAoBwC,gBAAgBa,UAAUpC;YACnE,IAAIqC,QAAQ,OAAO;gBAAC,GAAGA,MAAM;gBAAE1B,UAAUpC,UAAU+D,OAAO;YAAA;YAC1D,MAAMC,YAAYlE,qBAAqBkD;YACvC,OAAOxB,qBACLqC,SAAShC,MAAM,CAAC,CAACyB,QAAU,CAACU,UAAUC,QAAQ,CAACX,SAC/C7B;QAEJ,EAAE,OAAOyC,KAAK;YACZ,OAAO;gBACL9B,UAAUpC,UAAUmE,aAAa;gBACjC7B,QAAQ4B,eAAeE,QAAQF,IAAIG,OAAO,GAAGC,OAAOJ;YACtD;QACF;IACF;IAEA,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,kCAAkC;IAClC,MAAM,CAACK,YAAY,EAAE,EAAE,GAAGC,YAAY,GAAGzE,cAAciD,gBAAgBjC;IACvE,MAAMe,SAASL,SAAS,CAAC8C,UAAU,IAAItE;IACvC,MAAMwE,oBACJ3C,OAAOC,IAAI,KAAK,SAAS2C,YAAY1B,eAAe2B,WAAW,CAACJ;IAClE,IAAI,CAACE,mBAAmB,OAAOjD,qBAAqBT,MAAMU;IAE1D,MAAMd,eAAe,MAAM8D,kBAAkBtD,IAAI;IAEjD,2EAA2E;IAC3E,0EAA0E;IAC1E,0CAA0C;IAC1C,IAAI,CAACT,0BAA0BC,eAAe,OAAOa,qBAAqBT,MAAMU;IAEhF,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAImD;IACJ,IAAI;QACF,MAAMC,SAAS,MAAMjF,OAAOkF,KAAK,CAACN,aAAa;YAC7Cd,MAAM/C,aAAa+C,IAAI;YACvBqB,WAAWpE,aAAaoE,SAAS;YACjCC,gBAAgBrE,aAAaqE,cAAc;YAC3CC,OAAOtE,aAAasE,KAAK;YACzBC,QAAQvE,aAAauE,MAAM;QAC7B;QACAN,aAAa;YACXlB,MAAMmB,OAAOnB,IAAI;YACjBuB,OAAOJ,OAAOI,KAAK;QACrB;IACF,EAAE,OAAOf,KAAK;QACZ,OAAO;YACLK;YACAnC,UAAUpC,UAAUqC,WAAW;YAC/BC,QAAQ4B,eAAeE,QAAQF,IAAIG,OAAO,GAAGC,OAAOJ;QACtD;IACF;IAEA,IAAI,CAACpC,OAAOqD,QAAQ,CAACP,aAAa;QAChC,MAAMQ,YAAYb,UAAUrC,UAAU,CAAC,KAAK;QAC5C,IAAII,SAAS,CAAC,qBAAqB,EAAE8C,UAAU,wBAAwB,CAAC;QAExE,IAAIlF,8BAA8B4B,SAAS;YACzC,MAAMuD,kBAAkBvD,OAAOwD,WAAW,CAACzD,MAAM,CAC/C,CAAC0D,OAASX,WAAWK,KAAK,CAACM,KAAK,KAAKb,aAAaE,WAAWK,KAAK,CAACM,KAAK,KAAK;YAE/E,IAAIF,gBAAgBG,MAAM,GAAG,GAAG;gBAC9BlD,SAAS,CAAC,MAAM,EAAE+C,gBAAgBrD,GAAG,CAAC,CAACuD,OAAS,CAAC,EAAE,EAAEA,MAAM,EAAE/C,IAAI,CAAC,MAAM,kCAAkC,EAAE4C,UAAU,EAAE,CAAC;YAC3H;QACF;QAEA,OAAO;YACLb;YACAnC,UAAUpC,UAAUqC,WAAW;YAC/BC;QACF;IACF;IAEA,IAAI;QACF,MAAMmD,UAAU3E,mBAAmBH,cAAc6D,aAAaxB;QAC9D,MAAMyC,QAAQ5E,qBAAqB;QACnC,OAAO;YAAC0D;YAAWnC,UAAUpC,UAAU+D,OAAO;YAAEzB,QAAQA,OAAOE,IAAI,CAAC;QAAK;IAC3E,EAAE,OAAO0B,KAAK;QACZ,MAAMwB,OAAOxB,IAAIyB,KAAK,EAAED;QAExB,iEAAiE;QACjE,IAAIA,SAAS1F,UAAU+D,OAAO,EAAE;YAC9B,OAAO;gBAACQ;gBAAWnC,UAAUpC,UAAU+D,OAAO;gBAAEzB,QAAQA,OAAOE,IAAI,CAAC;YAAK;QAC3E;QAEA,MAAM6B,UAAU5D,iBAAiByD,QAAQI,OAAOJ;QAChD,IAAIG,SAAS/B,OAAOa,IAAI,CAACkB;QACzB,OAAO;YACLE;YACAnC,UAAU,OAAOsD,SAAS,WAAWA,OAAO1F,UAAUmE,aAAa;YACnE7B,QAAQA,OAAOE,IAAI,CAAC;QACtB;IACF;AACF"}

package/dist/generated/apiRoutes.js

@@ -156,7 +156,9 @@
         host: 'project',
         pathPatterns: [
             'assets/files/{dataset}',
+            'assets/files/{dataset}/from-url',
             'assets/images/{dataset}',
+            'assets/images/{dataset}/from-url',
             'assets/media-library-link/{dataset}'
         ],
         slug: 'assets',

package/dist/generated/apiRoutes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/generated/apiRoutes.ts"],"sourcesContent":["/**\n * GENERATED FILE - DO NOT EDIT\n *\n * Routing manifest for `sanity api`, distilled from the published OpenAPI\n * specifications at https://www.sanity.io/docs/api/openapi\n *\n * Regenerate with: pnpm generate:api-routes\n */\nimport {type ApiRouteEntry} from '../actions/api/types.js'\n\nexport const apiRoutes: ApiRouteEntry[] = [\n  {\n    defaultApiVersion: 'v2025-07-11',\n    host: 'global',\n    pathPatterns: [\n      'access/invites/me',\n      'access/organization/{resourceId}/users/roles/default',\n      'access/requests/me',\n      'access/robots/me',\n      'access/robots/me/rotate',\n      'access/{resourceType}/{resourceId}/invites',\n      'access/{resourceType}/{resourceId}/invites/token/{inviteToken}',\n      'access/{resourceType}/{resourceId}/invites/token/{inviteToken}/accept',\n      'access/{resourceType}/{resourceId}/invites/token/{inviteToken}/eligibility',\n      'access/{resourceType}/{resourceId}/invites/{inviteId}',\n      'access/{resourceType}/{resourceId}/permissions',\n      'access/{resourceType}/{resourceId}/permissions/{permissionName}',\n      'access/{resourceType}/{resourceId}/requests',\n      'access/{resourceType}/{resourceId}/requests/state',\n      'access/{resourceType}/{resourceId}/requests/{requestId}/accept',\n      'access/{resourceType}/{resourceId}/requests/{requestId}/decline',\n      'access/{resourceType}/{resourceId}/robots',\n      'access/{resourceType}/{resourceId}/robots/{robotId}',\n      'access/{resourceType}/{resourceId}/roles',\n      'access/{resourceType}/{resourceId}/roles/{roleName}',\n      'access/{resourceType}/{resourceId}/user-permissions/me',\n      'access/{resourceType}/{resourceId}/user-permissions/me/check',\n      'access/{resourceType}/{resourceId}/users',\n      'access/{resourceType}/{resourceId}/users/me',\n      'access/{resourceType}/{resourceId}/users/{sanityUserId}',\n      'access/{resourceType}/{resourceId}/users/{sanityUserId}/roles',\n      'access/{resourceType}/{resourceId}/users/{sanityUserId}/roles/{roleName}'\n    ],\n    slug: 'access-api',\n    title: 'Access API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/actions/{dataset}'\n    ],\n    slug: 'actions',\n    title: 'Actions API reference'\n  },\n  {\n    defaultApiVersion: 'v2021-02-01',\n    host: 'global',\n    pathPatterns: [\n      'activity',\n      'activity/export/csv'\n    ],\n    slug: 'activity-log',\n    title: 'Activity Log API Reference'\n  },\n  {\n    defaultApiVersion: 'vX',\n    host: 'project',\n    pathPatterns: [\n      'agent/action/generate/{dataset}',\n      'agent/action/patch/{dataset}',\n      'agent/action/prompt/{dataset}',\n      'agent/action/transform/{dataset}',\n      'agent/action/translate/{dataset}'\n    ],\n    slug: 'agent-actions',\n    title: 'Agent Actions'\n  },\n  {\n    host: 'global',\n    pathPatterns: [\n      'applications',\n      'applications/{applicationId}',\n      'applications/{applicationId}/access',\n      'applications/{applicationId}/deployments',\n      'applications/{applicationId}/installations',\n      'applications/{applicationId}/interfaces',\n      'applications/{applicationId}/workspaces',\n      'deploy',\n      'deploy/quickstart',\n      'installations',\n      'installations/catalog',\n      'installations/defaults',\n      'installations/{installationId}',\n      'installations/{installationId}/access',\n      'installations/{installationId}/configs',\n      'installations/{installationId}/configs/{configId}',\n      'installations/{installationId}/interfaces',\n      'projects/{projectId}/user-applications',\n      'projects/{projectId}/user-applications/{userApplicationId}',\n      'projects/{projectId}/user-applications/{userApplicationId}/config/{configKey}',\n      'projects/{projectId}/user-applications/{userApplicationId}/deployments',\n      'studiohosts/{appHost}/availability',\n      'user-applications',\n      'user-applications/auto-update-version/{userApplicationId}',\n      'user-applications/resolve/application',\n      'user-applications/resolve/project',\n      'user-applications/workspaces',\n      'user-applications/{userApplicationId}',\n      'user-applications/{userApplicationId}/applicationData',\n      'user-applications/{userApplicationId}/config/{configKey}',\n      'user-applications/{userApplicationId}/deployments',\n      'user-applications/{userApplicationId}/workspaces'\n    ],\n    slug: 'applications-api',\n    title: 'Applications API Reference'\n  },\n  {\n    host: 'project',\n    pathPatterns: [\n      'applications',\n      'applications/{applicationId}',\n      'applications/{applicationId}/access',\n      'applications/{applicationId}/deployments',\n      'applications/{applicationId}/installations',\n      'applications/{applicationId}/interfaces',\n      'applications/{applicationId}/workspaces',\n      'deploy',\n      'deploy/quickstart',\n      'installations',\n      'installations/catalog',\n      'installations/defaults',\n      'installations/{installationId}',\n      'installations/{installationId}/access',\n      'installations/{installationId}/configs',\n      'installations/{installationId}/configs/{configId}',\n      'installations/{installationId}/interfaces',\n      'projects/{projectId}/user-applications',\n      'projects/{projectId}/user-applications/{userApplicationId}',\n      'projects/{projectId}/user-applications/{userApplicationId}/config/{configKey}',\n      'projects/{projectId}/user-applications/{userApplicationId}/deployments',\n      'studiohosts/{appHost}/availability',\n      'user-applications',\n      'user-applications/auto-update-version/{userApplicationId}',\n      'user-applications/resolve/application',\n      'user-applications/resolve/project',\n      'user-applications/workspaces',\n      'user-applications/{userApplicationId}',\n      'user-applications/{userApplicationId}/applicationData',\n      'user-applications/{userApplicationId}/config/{configKey}',\n      'user-applications/{userApplicationId}/deployments',\n      'user-applications/{userApplicationId}/workspaces'\n    ],\n    slug: 'applications-api',\n    title: 'Applications API Reference'\n  },\n  {\n    defaultApiVersion: 'v2024-06-24',\n    host: 'project',\n    pathPatterns: [\n      'assets/files/{dataset}',\n      'assets/images/{dataset}',\n      'assets/media-library-link/{dataset}'\n    ],\n    slug: 'assets',\n    title: 'Assets API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'global',\n    pathPatterns: [\n      'projects/{projectId}/datasets/{datasetName}/backups',\n      'projects/{projectId}/datasets/{datasetName}/backups/{backupId}',\n      'projects/{projectId}/datasets/{datasetName}/settings/backups'\n    ],\n    slug: 'backups',\n    title: 'Backups API reference'\n  },\n  {\n    defaultApiVersion: 'vX',\n    host: 'global',\n    pathPatterns: [\n      'agent/prompt',\n      'agent/{organizationId}/threads/{threadId}'\n    ],\n    slug: 'content-agent',\n    title: 'Content Agent API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'global',\n    pathPatterns: [\n      'projects/{projectId}/datasets/{dataset}/copy'\n    ],\n    slug: 'copy',\n    title: 'Copy API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/doc/{dataset}/{documentId}'\n    ],\n    slug: 'doc',\n    title: 'Doc API reference'\n  },\n  {\n    defaultApiVersion: 'vX',\n    host: 'project',\n    pathPatterns: [\n      'embeddings-index/query/{dataset}/{indexName}',\n      'embeddings-index/{dataset}',\n      'embeddings-index/{dataset}/{indexName}'\n    ],\n    slug: 'embeddings-index',\n    title: 'Embeddings Index API reference (deprecated)'\n  },\n  {\n    defaultApiVersion: 'v2021-03-25',\n    host: 'project',\n    pathPatterns: [\n      'data/export/{dataset}'\n    ],\n    slug: 'export',\n    title: 'Export API reference'\n  },\n  {\n    host: 'global',\n    pathPatterns: [\n      'functions',\n      'functions/{functionId}',\n      'functions/{functionId}/envvars',\n      'functions/{functionId}/envvars/{envVarKey}',\n      'functions/{functionId}/invoke',\n      'functions/{functionId}/logs',\n      'functions/{functionId}/logs/stream'\n    ],\n    slug: 'functions-api',\n    title: 'Functions API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/history/{dataset}/documents/{documentId}',\n      'data/history/{dataset}/transactions',\n      'data/history/{dataset}/transactions/{documentIds}'\n    ],\n    slug: 'history',\n    title: 'History API reference'\n  },\n  {\n    defaultApiVersion: 'v2021-06-07',\n    host: 'global',\n    pathPatterns: [\n      'jobs/{jobId}',\n      'jobs/{jobId}/listen'\n    ],\n    slug: 'jobs',\n    title: 'Jobs API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/listen/{dataset}'\n    ],\n    slug: 'listen',\n    title: 'Listen API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/live/events/{dataset}'\n    ],\n    slug: 'live',\n    title: 'Live Content API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'global',\n    pathPatterns: [\n      'media-libraries/{libraryId}/from-url',\n      'media-libraries/{libraryId}/mutate',\n      'media-libraries/{libraryId}/query',\n      'media-libraries/{libraryId}/references/documents/{assetId}/to',\n      'media-libraries/{libraryId}/refsearch',\n      'media-libraries/{libraryId}/signing-keys',\n      'media-libraries/{libraryId}/signing-keys/{keyId}',\n      'media-libraries/{libraryId}/upload',\n      'media-libraries/{libraryId}/video/{videoId}/playback-info',\n      'media-libraries/{libraryId}/video/{videoId}/playback/{type}',\n      'media-libraries/{libraryId}/video/{videoId}/renditions/{name}',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles/upload',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles/{subtitleId}'\n    ],\n    slug: 'media-library',\n    title: 'Media Library API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'media-libraries/{libraryId}/from-url',\n      'media-libraries/{libraryId}/mutate',\n      'media-libraries/{libraryId}/query',\n      'media-libraries/{libraryId}/references/documents/{assetId}/to',\n      'media-libraries/{libraryId}/refsearch',\n      'media-libraries/{libraryId}/signing-keys',\n      'media-libraries/{libraryId}/signing-keys/{keyId}',\n      'media-libraries/{libraryId}/upload',\n      'media-libraries/{libraryId}/video/{videoId}/playback-info',\n      'media-libraries/{libraryId}/video/{videoId}/playback/{type}',\n      'media-libraries/{libraryId}/video/{videoId}/renditions/{name}',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles/upload',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles/{subtitleId}'\n    ],\n    slug: 'media-library',\n    title: 'Media Library API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/mutate/{dataset}'\n    ],\n    slug: 'mutation',\n    title: 'Mutation API reference'\n  },\n  {\n    defaultApiVersion: 'v2021-06-07',\n    host: 'global',\n    pathPatterns: [\n      'projects',\n      'projects/{projectId}',\n      'projects/{projectId}/cors',\n      'projects/{projectId}/cors/{id}',\n      'projects/{projectId}/datasets',\n      'projects/{projectId}/datasets/{datasetName}/tags/{tagIdentifier}',\n      'projects/{projectId}/datasets/{name}',\n      'projects/{projectId}/datasets/{name}/copy',\n      'projects/{projectId}/datasets/{name}/settings/embeddings',\n      'projects/{projectId}/datasets/{name}/tags',\n      'projects/{projectId}/features',\n      'projects/{projectId}/permissions',\n      'projects/{projectId}/tags',\n      'projects/{projectId}/tags/{tagIdentifier}',\n      'projects/{projectId}/tokens',\n      'projects/{projectId}/tokens/{tokenId}',\n      'projects/{projectId}/users/{userId}'\n    ],\n    slug: 'projects-api',\n    title: 'Projects API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/query/{dataset}'\n    ],\n    slug: 'query',\n    title: 'Query API reference'\n  },\n  {\n    defaultApiVersion: 'v2021-10-04',\n    host: 'global',\n    pathPatterns: [\n      'organizations/{organizationId}/acl',\n      'organizations/{organizationId}/acl/{sanityUserId}',\n      'organizations/{organizationId}/grants',\n      'organizations/{organizationId}/providers/{providerId}/projects/{projectId}/role-mappings',\n      'projects/{projectId}/acl',\n      'projects/{projectId}/acl/{userId}',\n      'projects/{projectId}/datasets/{datasetName}/acl',\n      'projects/{projectId}/datasets/{datasetName}/grants',\n      'projects/{projectId}/grants',\n      'projects/{projectId}/permissionResourceSchemas',\n      'projects/{projectId}/roles',\n      'projects/{projectId}/roles/{roleName}'\n    ],\n    slug: 'roles',\n    title: 'Roles API reference'\n  },\n  {\n    defaultApiVersion: 'v2022-04-01',\n    host: 'project',\n    pathPatterns: [\n      'publish/{projectId}/{dataset}',\n      'schedules/{projectId}/{dataset}',\n      'schedules/{projectId}/{dataset}/{scheduleId}',\n      'schedules/{projectId}/{dataset}/{scheduleId}/publish',\n      'unpublish/{projectId}/{dataset}'\n    ],\n    slug: 'scheduling',\n    title: 'Scheduling API reference'\n  },\n  {\n    defaultApiVersion: 'v2026-04-27',\n    host: 'global',\n    pathPatterns: [\n      'organizations/{organizationId}/attribute-definitions',\n      'organizations/{organizationId}/attribute-definitions/{key}',\n      'organizations/{organizationId}/users/me/attributes',\n      'organizations/{organizationId}/users/{sanityUserId}/attributes'\n    ],\n    slug: 'user-attributes',\n    title: 'User attributes API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'hooks/projects/{projectId}',\n      'hooks/projects/{projectId}/{id}',\n      'hooks/projects/{projectId}/{id}/attempts',\n      'hooks/{id}/messages'\n    ],\n    slug: 'webhooks',\n    title: 'Webhooks API reference'\n  }\n]\n"],"names":["apiRoutes","defaultApiVersion","host","pathPatterns","slug","title"],"mappings":"AAAA;;;;;;;CAOC,GAGD,OAAO,MAAMA,YAA6B;IACxC;QACEC,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEH,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEH,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEH,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;CACD,CAAA"}
+{"version":3,"sources":["../../src/generated/apiRoutes.ts"],"sourcesContent":["/**\n * GENERATED FILE - DO NOT EDIT\n *\n * Routing manifest for `sanity api`, distilled from the published OpenAPI\n * specifications at https://www.sanity.io/docs/api/openapi\n *\n * Regenerate with: pnpm generate:api-routes\n */\nimport {type ApiRouteEntry} from '../actions/api/types.js'\n\nexport const apiRoutes: ApiRouteEntry[] = [\n  {\n    defaultApiVersion: 'v2025-07-11',\n    host: 'global',\n    pathPatterns: [\n      'access/invites/me',\n      'access/organization/{resourceId}/users/roles/default',\n      'access/requests/me',\n      'access/robots/me',\n      'access/robots/me/rotate',\n      'access/{resourceType}/{resourceId}/invites',\n      'access/{resourceType}/{resourceId}/invites/token/{inviteToken}',\n      'access/{resourceType}/{resourceId}/invites/token/{inviteToken}/accept',\n      'access/{resourceType}/{resourceId}/invites/token/{inviteToken}/eligibility',\n      'access/{resourceType}/{resourceId}/invites/{inviteId}',\n      'access/{resourceType}/{resourceId}/permissions',\n      'access/{resourceType}/{resourceId}/permissions/{permissionName}',\n      'access/{resourceType}/{resourceId}/requests',\n      'access/{resourceType}/{resourceId}/requests/state',\n      'access/{resourceType}/{resourceId}/requests/{requestId}/accept',\n      'access/{resourceType}/{resourceId}/requests/{requestId}/decline',\n      'access/{resourceType}/{resourceId}/robots',\n      'access/{resourceType}/{resourceId}/robots/{robotId}',\n      'access/{resourceType}/{resourceId}/roles',\n      'access/{resourceType}/{resourceId}/roles/{roleName}',\n      'access/{resourceType}/{resourceId}/user-permissions/me',\n      'access/{resourceType}/{resourceId}/user-permissions/me/check',\n      'access/{resourceType}/{resourceId}/users',\n      'access/{resourceType}/{resourceId}/users/me',\n      'access/{resourceType}/{resourceId}/users/{sanityUserId}',\n      'access/{resourceType}/{resourceId}/users/{sanityUserId}/roles',\n      'access/{resourceType}/{resourceId}/users/{sanityUserId}/roles/{roleName}'\n    ],\n    slug: 'access-api',\n    title: 'Access API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/actions/{dataset}'\n    ],\n    slug: 'actions',\n    title: 'Actions API reference'\n  },\n  {\n    defaultApiVersion: 'v2021-02-01',\n    host: 'global',\n    pathPatterns: [\n      'activity',\n      'activity/export/csv'\n    ],\n    slug: 'activity-log',\n    title: 'Activity Log API Reference'\n  },\n  {\n    defaultApiVersion: 'vX',\n    host: 'project',\n    pathPatterns: [\n      'agent/action/generate/{dataset}',\n      'agent/action/patch/{dataset}',\n      'agent/action/prompt/{dataset}',\n      'agent/action/transform/{dataset}',\n      'agent/action/translate/{dataset}'\n    ],\n    slug: 'agent-actions',\n    title: 'Agent Actions'\n  },\n  {\n    host: 'global',\n    pathPatterns: [\n      'applications',\n      'applications/{applicationId}',\n      'applications/{applicationId}/access',\n      'applications/{applicationId}/deployments',\n      'applications/{applicationId}/installations',\n      'applications/{applicationId}/interfaces',\n      'applications/{applicationId}/workspaces',\n      'deploy',\n      'deploy/quickstart',\n      'installations',\n      'installations/catalog',\n      'installations/defaults',\n      'installations/{installationId}',\n      'installations/{installationId}/access',\n      'installations/{installationId}/configs',\n      'installations/{installationId}/configs/{configId}',\n      'installations/{installationId}/interfaces',\n      'projects/{projectId}/user-applications',\n      'projects/{projectId}/user-applications/{userApplicationId}',\n      'projects/{projectId}/user-applications/{userApplicationId}/config/{configKey}',\n      'projects/{projectId}/user-applications/{userApplicationId}/deployments',\n      'studiohosts/{appHost}/availability',\n      'user-applications',\n      'user-applications/auto-update-version/{userApplicationId}',\n      'user-applications/resolve/application',\n      'user-applications/resolve/project',\n      'user-applications/workspaces',\n      'user-applications/{userApplicationId}',\n      'user-applications/{userApplicationId}/applicationData',\n      'user-applications/{userApplicationId}/config/{configKey}',\n      'user-applications/{userApplicationId}/deployments',\n      'user-applications/{userApplicationId}/workspaces'\n    ],\n    slug: 'applications-api',\n    title: 'Applications API Reference'\n  },\n  {\n    host: 'project',\n    pathPatterns: [\n      'applications',\n      'applications/{applicationId}',\n      'applications/{applicationId}/access',\n      'applications/{applicationId}/deployments',\n      'applications/{applicationId}/installations',\n      'applications/{applicationId}/interfaces',\n      'applications/{applicationId}/workspaces',\n      'deploy',\n      'deploy/quickstart',\n      'installations',\n      'installations/catalog',\n      'installations/defaults',\n      'installations/{installationId}',\n      'installations/{installationId}/access',\n      'installations/{installationId}/configs',\n      'installations/{installationId}/configs/{configId}',\n      'installations/{installationId}/interfaces',\n      'projects/{projectId}/user-applications',\n      'projects/{projectId}/user-applications/{userApplicationId}',\n      'projects/{projectId}/user-applications/{userApplicationId}/config/{configKey}',\n      'projects/{projectId}/user-applications/{userApplicationId}/deployments',\n      'studiohosts/{appHost}/availability',\n      'user-applications',\n      'user-applications/auto-update-version/{userApplicationId}',\n      'user-applications/resolve/application',\n      'user-applications/resolve/project',\n      'user-applications/workspaces',\n      'user-applications/{userApplicationId}',\n      'user-applications/{userApplicationId}/applicationData',\n      'user-applications/{userApplicationId}/config/{configKey}',\n      'user-applications/{userApplicationId}/deployments',\n      'user-applications/{userApplicationId}/workspaces'\n    ],\n    slug: 'applications-api',\n    title: 'Applications API Reference'\n  },\n  {\n    defaultApiVersion: 'v2024-06-24',\n    host: 'project',\n    pathPatterns: [\n      'assets/files/{dataset}',\n      'assets/files/{dataset}/from-url',\n      'assets/images/{dataset}',\n      'assets/images/{dataset}/from-url',\n      'assets/media-library-link/{dataset}'\n    ],\n    slug: 'assets',\n    title: 'Assets API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'global',\n    pathPatterns: [\n      'projects/{projectId}/datasets/{datasetName}/backups',\n      'projects/{projectId}/datasets/{datasetName}/backups/{backupId}',\n      'projects/{projectId}/datasets/{datasetName}/settings/backups'\n    ],\n    slug: 'backups',\n    title: 'Backups API reference'\n  },\n  {\n    defaultApiVersion: 'vX',\n    host: 'global',\n    pathPatterns: [\n      'agent/prompt',\n      'agent/{organizationId}/threads/{threadId}'\n    ],\n    slug: 'content-agent',\n    title: 'Content Agent API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'global',\n    pathPatterns: [\n      'projects/{projectId}/datasets/{dataset}/copy'\n    ],\n    slug: 'copy',\n    title: 'Copy API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/doc/{dataset}/{documentId}'\n    ],\n    slug: 'doc',\n    title: 'Doc API reference'\n  },\n  {\n    defaultApiVersion: 'vX',\n    host: 'project',\n    pathPatterns: [\n      'embeddings-index/query/{dataset}/{indexName}',\n      'embeddings-index/{dataset}',\n      'embeddings-index/{dataset}/{indexName}'\n    ],\n    slug: 'embeddings-index',\n    title: 'Embeddings Index API reference (deprecated)'\n  },\n  {\n    defaultApiVersion: 'v2021-03-25',\n    host: 'project',\n    pathPatterns: [\n      'data/export/{dataset}'\n    ],\n    slug: 'export',\n    title: 'Export API reference'\n  },\n  {\n    host: 'global',\n    pathPatterns: [\n      'functions',\n      'functions/{functionId}',\n      'functions/{functionId}/envvars',\n      'functions/{functionId}/envvars/{envVarKey}',\n      'functions/{functionId}/invoke',\n      'functions/{functionId}/logs',\n      'functions/{functionId}/logs/stream'\n    ],\n    slug: 'functions-api',\n    title: 'Functions API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/history/{dataset}/documents/{documentId}',\n      'data/history/{dataset}/transactions',\n      'data/history/{dataset}/transactions/{documentIds}'\n    ],\n    slug: 'history',\n    title: 'History API reference'\n  },\n  {\n    defaultApiVersion: 'v2021-06-07',\n    host: 'global',\n    pathPatterns: [\n      'jobs/{jobId}',\n      'jobs/{jobId}/listen'\n    ],\n    slug: 'jobs',\n    title: 'Jobs API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/listen/{dataset}'\n    ],\n    slug: 'listen',\n    title: 'Listen API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/live/events/{dataset}'\n    ],\n    slug: 'live',\n    title: 'Live Content API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'global',\n    pathPatterns: [\n      'media-libraries/{libraryId}/from-url',\n      'media-libraries/{libraryId}/mutate',\n      'media-libraries/{libraryId}/query',\n      'media-libraries/{libraryId}/references/documents/{assetId}/to',\n      'media-libraries/{libraryId}/refsearch',\n      'media-libraries/{libraryId}/signing-keys',\n      'media-libraries/{libraryId}/signing-keys/{keyId}',\n      'media-libraries/{libraryId}/upload',\n      'media-libraries/{libraryId}/video/{videoId}/playback-info',\n      'media-libraries/{libraryId}/video/{videoId}/playback/{type}',\n      'media-libraries/{libraryId}/video/{videoId}/renditions/{name}',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles/upload',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles/{subtitleId}'\n    ],\n    slug: 'media-library',\n    title: 'Media Library API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'media-libraries/{libraryId}/from-url',\n      'media-libraries/{libraryId}/mutate',\n      'media-libraries/{libraryId}/query',\n      'media-libraries/{libraryId}/references/documents/{assetId}/to',\n      'media-libraries/{libraryId}/refsearch',\n      'media-libraries/{libraryId}/signing-keys',\n      'media-libraries/{libraryId}/signing-keys/{keyId}',\n      'media-libraries/{libraryId}/upload',\n      'media-libraries/{libraryId}/video/{videoId}/playback-info',\n      'media-libraries/{libraryId}/video/{videoId}/playback/{type}',\n      'media-libraries/{libraryId}/video/{videoId}/renditions/{name}',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles/upload',\n      'media-libraries/{libraryId}/video/{videoId}/subtitles/{subtitleId}'\n    ],\n    slug: 'media-library',\n    title: 'Media Library API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/mutate/{dataset}'\n    ],\n    slug: 'mutation',\n    title: 'Mutation API reference'\n  },\n  {\n    defaultApiVersion: 'v2021-06-07',\n    host: 'global',\n    pathPatterns: [\n      'projects',\n      'projects/{projectId}',\n      'projects/{projectId}/cors',\n      'projects/{projectId}/cors/{id}',\n      'projects/{projectId}/datasets',\n      'projects/{projectId}/datasets/{datasetName}/tags/{tagIdentifier}',\n      'projects/{projectId}/datasets/{name}',\n      'projects/{projectId}/datasets/{name}/copy',\n      'projects/{projectId}/datasets/{name}/settings/embeddings',\n      'projects/{projectId}/datasets/{name}/tags',\n      'projects/{projectId}/features',\n      'projects/{projectId}/permissions',\n      'projects/{projectId}/tags',\n      'projects/{projectId}/tags/{tagIdentifier}',\n      'projects/{projectId}/tokens',\n      'projects/{projectId}/tokens/{tokenId}',\n      'projects/{projectId}/users/{userId}'\n    ],\n    slug: 'projects-api',\n    title: 'Projects API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'data/query/{dataset}'\n    ],\n    slug: 'query',\n    title: 'Query API reference'\n  },\n  {\n    defaultApiVersion: 'v2021-10-04',\n    host: 'global',\n    pathPatterns: [\n      'organizations/{organizationId}/acl',\n      'organizations/{organizationId}/acl/{sanityUserId}',\n      'organizations/{organizationId}/grants',\n      'organizations/{organizationId}/providers/{providerId}/projects/{projectId}/role-mappings',\n      'projects/{projectId}/acl',\n      'projects/{projectId}/acl/{userId}',\n      'projects/{projectId}/datasets/{datasetName}/acl',\n      'projects/{projectId}/datasets/{datasetName}/grants',\n      'projects/{projectId}/grants',\n      'projects/{projectId}/permissionResourceSchemas',\n      'projects/{projectId}/roles',\n      'projects/{projectId}/roles/{roleName}'\n    ],\n    slug: 'roles',\n    title: 'Roles API reference'\n  },\n  {\n    defaultApiVersion: 'v2022-04-01',\n    host: 'project',\n    pathPatterns: [\n      'publish/{projectId}/{dataset}',\n      'schedules/{projectId}/{dataset}',\n      'schedules/{projectId}/{dataset}/{scheduleId}',\n      'schedules/{projectId}/{dataset}/{scheduleId}/publish',\n      'unpublish/{projectId}/{dataset}'\n    ],\n    slug: 'scheduling',\n    title: 'Scheduling API reference'\n  },\n  {\n    defaultApiVersion: 'v2026-04-27',\n    host: 'global',\n    pathPatterns: [\n      'organizations/{organizationId}/attribute-definitions',\n      'organizations/{organizationId}/attribute-definitions/{key}',\n      'organizations/{organizationId}/users/me/attributes',\n      'organizations/{organizationId}/users/{sanityUserId}/attributes'\n    ],\n    slug: 'user-attributes',\n    title: 'User attributes API reference'\n  },\n  {\n    defaultApiVersion: 'v2025-02-19',\n    host: 'project',\n    pathPatterns: [\n      'hooks/projects/{projectId}',\n      'hooks/projects/{projectId}/{id}',\n      'hooks/projects/{projectId}/{id}/attempts',\n      'hooks/{id}/messages'\n    ],\n    slug: 'webhooks',\n    title: 'Webhooks API reference'\n  }\n]\n"],"names":["apiRoutes","defaultApiVersion","host","pathPatterns","slug","title"],"mappings":"AAAA;;;;;;;CAOC,GAGD,OAAO,MAAMA,YAA6B;IACxC;QACEC,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEH,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEH,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEH,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;IACA;QACEJ,mBAAmB;QACnBC,MAAM;QACNC,cAAc;YACZ;YACA;YACA;YACA;SACD;QACDC,MAAM;QACNC,OAAO;IACT;CACD,CAAA"}

package/dist/services/assets.js

@@ -2,13 +2,22 @@ import { Transform } from 'node:stream';
 import { getProjectCliClient } from '@sanity/cli-core';
 import { filter, lastValueFrom, map, Observable, race } from 'rxjs';
 export const ASSETS_API_VERSION = 'v2024-06-24';
+export const ASSET_UPLOAD_REQUEST_TAG_PREFIX = 'sanity.cli.assets.upload';
+/**
+ * Content Lake allows itself 300 seconds to fetch the source URL and a further
+ * budget to persist the asset, so this waits far longer than an ordinary API
+ * call before giving up on a request that may still be doing useful work.
+ */ export const URL_INGEST_TIMEOUT_MS = 370_000;
+function assetPathSegment(assetType) {
+    return assetType === 'image' ? 'images' : 'files';
+}
 export async function uploadAsset({ assetType, body, contentType, dataset, filename, fileSize, onProgress, projectId, signal }) {
     signal?.throwIfAborted();
     const client = await getProjectCliClient({
         apiVersion: ASSETS_API_VERSION,
         dataset,
         projectId,
-        requestTagPrefix: 'sanity.cli.assets.upload',
+        requestTagPrefix: ASSET_UPLOAD_REQUEST_TAG_PREFIX,
         requireUser: true
     });
     signal?.throwIfAborted();
@@ -42,5 +51,41 @@ export async function uploadAsset({ assetType, body, contentType, dataset, filen
     });
     return lastValueFrom(race(response$, abort$));
 }
+/**
+ * Create an asset from a URL that Content Lake fetches itself.
+ *
+ * The bytes never pass through this process, so unlike {@link uploadAsset}
+ * there is no stream to pipe and no progress to report — the request is a
+ * small JSON body and a long wait. The source must be reachable without
+ * authentication from Sanity's side; a presigned URL qualifies, a private one
+ * behind a login does not.
+ *
+ * `assets.upload()` always streams a body, so this calls the endpoint directly
+ * rather than going through the client's asset helper.
+ */ export async function ingestAssetFromUrl({ assetType, dataset, filename, projectId, signal, url }) {
+    signal?.throwIfAborted();
+    const client = await getProjectCliClient({
+        apiVersion: ASSETS_API_VERSION,
+        dataset,
+        projectId,
+        requestTagPrefix: ASSET_UPLOAD_REQUEST_TAG_PREFIX,
+        requireUser: true
+    });
+    signal?.throwIfAborted();
+    const response = await client.request({
+        body: {
+            url,
+            ...filename ? {
+                filename
+            } : {}
+        },
+        method: 'POST',
+        signal,
+        tag: 'asset.upload.from-url',
+        timeout: URL_INGEST_TIMEOUT_MS,
+        url: `/assets/${assetPathSegment(assetType)}/${dataset}/from-url`
+    });
+    return response.document;
+}
 
 //# sourceMappingURL=assets.js.map

package/dist/services/assets.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/services/assets.ts"],"sourcesContent":["import {type Readable, Transform} from 'node:stream'\n\nimport {getProjectCliClient} from '@sanity/cli-core'\nimport {filter, lastValueFrom, map, Observable, race} from 'rxjs'\n\nexport const ASSETS_API_VERSION = 'v2024-06-24'\n\nexport type AssetType = 'file' | 'image'\n\ninterface UploadAssetOptions {\n  assetType: AssetType\n  body: Readable\n  dataset: string\n  filename: string\n  fileSize: number\n  projectId: string\n\n  contentType?: string\n  onProgress?: (percent: number) => void\n  signal?: AbortSignal\n}\n\nexport async function uploadAsset({\n  assetType,\n  body,\n  contentType,\n  dataset,\n  filename,\n  fileSize,\n  onProgress,\n  projectId,\n  signal,\n}: UploadAssetOptions) {\n  signal?.throwIfAborted()\n\n  const client = await getProjectCliClient({\n    apiVersion: ASSETS_API_VERSION,\n    dataset,\n    projectId,\n    requestTagPrefix: 'sanity.cli.assets.upload',\n    requireUser: true,\n  })\n  signal?.throwIfAborted()\n\n  let uploadedBytes = 0\n  const uploadStream = new Transform({\n    transform(chunk: Buffer, _encoding, callback) {\n      uploadedBytes += chunk.length\n      onProgress?.((uploadedBytes / fileSize) * 100)\n      callback(null, chunk)\n    },\n  })\n  body.on('error', (error) => uploadStream.destroy(error)).pipe(uploadStream)\n\n  const response$ = client.observable.assets\n    .upload(assetType, uploadStream, {\n      ...(contentType ? {contentType} : {}),\n      filename,\n      tag: 'asset.upload',\n    })\n    .pipe(\n      filter((event) => event.type === 'response'),\n      map((event) => event.body.document),\n    )\n\n  if (!signal) return lastValueFrom(response$)\n\n  const abort$ = new Observable<never>((subscriber) => {\n    const abortUpload = () => {\n      body.destroy()\n      uploadStream.destroy()\n      subscriber.error(signal.reason instanceof Error ? signal.reason : new Error('SIGINT'))\n    }\n\n    signal.addEventListener('abort', abortUpload, {once: true})\n    return () => signal.removeEventListener('abort', abortUpload)\n  })\n\n  return lastValueFrom(race(response$, abort$))\n}\n"],"names":["Transform","getProjectCliClient","filter","lastValueFrom","map","Observable","race","ASSETS_API_VERSION","uploadAsset","assetType","body","contentType","dataset","filename","fileSize","onProgress","projectId","signal","throwIfAborted","client","apiVersion","requestTagPrefix","requireUser","uploadedBytes","uploadStream","transform","chunk","_encoding","callback","length","on","error","destroy","pipe","response$","observable","assets","upload","tag","event","type","document","abort$","subscriber","abortUpload","reason","Error","addEventListener","once","removeEventListener"],"mappings":"AAAA,SAAuBA,SAAS,QAAO,cAAa;AAEpD,SAAQC,mBAAmB,QAAO,mBAAkB;AACpD,SAAQC,MAAM,EAAEC,aAAa,EAAEC,GAAG,EAAEC,UAAU,EAAEC,IAAI,QAAO,OAAM;AAEjE,OAAO,MAAMC,qBAAqB,cAAa;AAiB/C,OAAO,eAAeC,YAAY,EAChCC,SAAS,EACTC,IAAI,EACJC,WAAW,EACXC,OAAO,EACPC,QAAQ,EACRC,QAAQ,EACRC,UAAU,EACVC,SAAS,EACTC,MAAM,EACa;IACnBA,QAAQC;IAER,MAAMC,SAAS,MAAMlB,oBAAoB;QACvCmB,YAAYb;QACZK;QACAI;QACAK,kBAAkB;QAClBC,aAAa;IACf;IACAL,QAAQC;IAER,IAAIK,gBAAgB;IACpB,MAAMC,eAAe,IAAIxB,UAAU;QACjCyB,WAAUC,KAAa,EAAEC,SAAS,EAAEC,QAAQ;YAC1CL,iBAAiBG,MAAMG,MAAM;YAC7Bd,aAAa,AAACQ,gBAAgBT,WAAY;YAC1Cc,SAAS,MAAMF;QACjB;IACF;IACAhB,KAAKoB,EAAE,CAAC,SAAS,CAACC,QAAUP,aAAaQ,OAAO,CAACD,QAAQE,IAAI,CAACT;IAE9D,MAAMU,YAAYf,OAAOgB,UAAU,CAACC,MAAM,CACvCC,MAAM,CAAC5B,WAAWe,cAAc;QAC/B,GAAIb,cAAc;YAACA;QAAW,IAAI,CAAC,CAAC;QACpCE;QACAyB,KAAK;IACP,GACCL,IAAI,CACH/B,OAAO,CAACqC,QAAUA,MAAMC,IAAI,KAAK,aACjCpC,IAAI,CAACmC,QAAUA,MAAM7B,IAAI,CAAC+B,QAAQ;IAGtC,IAAI,CAACxB,QAAQ,OAAOd,cAAc+B;IAElC,MAAMQ,SAAS,IAAIrC,WAAkB,CAACsC;QACpC,MAAMC,cAAc;YAClBlC,KAAKsB,OAAO;YACZR,aAAaQ,OAAO;YACpBW,WAAWZ,KAAK,CAACd,OAAO4B,MAAM,YAAYC,QAAQ7B,OAAO4B,MAAM,GAAG,IAAIC,MAAM;QAC9E;QAEA7B,OAAO8B,gBAAgB,CAAC,SAASH,aAAa;YAACI,MAAM;QAAI;QACzD,OAAO,IAAM/B,OAAOgC,mBAAmB,CAAC,SAASL;IACnD;IAEA,OAAOzC,cAAcG,KAAK4B,WAAWQ;AACvC"}
+{"version":3,"sources":["../../src/services/assets.ts"],"sourcesContent":["import {type Readable, Transform} from 'node:stream'\n\nimport {getProjectCliClient} from '@sanity/cli-core'\nimport {type SanityAssetDocument, type SanityImageAssetDocument} from '@sanity/client'\nimport {filter, lastValueFrom, map, Observable, race} from 'rxjs'\n\nexport const ASSETS_API_VERSION = 'v2024-06-24'\n\nexport const ASSET_UPLOAD_REQUEST_TAG_PREFIX = 'sanity.cli.assets.upload'\n\n/**\n * Content Lake allows itself 300 seconds to fetch the source URL and a further\n * budget to persist the asset, so this waits far longer than an ordinary API\n * call before giving up on a request that may still be doing useful work.\n */\nexport const URL_INGEST_TIMEOUT_MS = 370_000\n\nexport type AssetType = 'file' | 'image'\n\nfunction assetPathSegment(assetType: AssetType): string {\n  return assetType === 'image' ? 'images' : 'files'\n}\n\ninterface UploadAssetOptions {\n  assetType: AssetType\n  body: Readable\n  dataset: string\n  filename: string\n  fileSize: number\n  projectId: string\n\n  contentType?: string\n  onProgress?: (percent: number) => void\n  signal?: AbortSignal\n}\n\nexport async function uploadAsset({\n  assetType,\n  body,\n  contentType,\n  dataset,\n  filename,\n  fileSize,\n  onProgress,\n  projectId,\n  signal,\n}: UploadAssetOptions) {\n  signal?.throwIfAborted()\n\n  const client = await getProjectCliClient({\n    apiVersion: ASSETS_API_VERSION,\n    dataset,\n    projectId,\n    requestTagPrefix: ASSET_UPLOAD_REQUEST_TAG_PREFIX,\n    requireUser: true,\n  })\n  signal?.throwIfAborted()\n\n  let uploadedBytes = 0\n  const uploadStream = new Transform({\n    transform(chunk: Buffer, _encoding, callback) {\n      uploadedBytes += chunk.length\n      onProgress?.((uploadedBytes / fileSize) * 100)\n      callback(null, chunk)\n    },\n  })\n  body.on('error', (error) => uploadStream.destroy(error)).pipe(uploadStream)\n\n  const response$ = client.observable.assets\n    .upload(assetType, uploadStream, {\n      ...(contentType ? {contentType} : {}),\n      filename,\n      tag: 'asset.upload',\n    })\n    .pipe(\n      filter((event) => event.type === 'response'),\n      map((event) => event.body.document),\n    )\n\n  if (!signal) return lastValueFrom(response$)\n\n  const abort$ = new Observable<never>((subscriber) => {\n    const abortUpload = () => {\n      body.destroy()\n      uploadStream.destroy()\n      subscriber.error(signal.reason instanceof Error ? signal.reason : new Error('SIGINT'))\n    }\n\n    signal.addEventListener('abort', abortUpload, {once: true})\n    return () => signal.removeEventListener('abort', abortUpload)\n  })\n\n  return lastValueFrom(race(response$, abort$))\n}\n\ninterface IngestAssetFromUrlOptions {\n  assetType: AssetType\n  dataset: string\n  projectId: string\n  url: string\n\n  filename?: string\n  signal?: AbortSignal\n}\n\n/**\n * Create an asset from a URL that Content Lake fetches itself.\n *\n * The bytes never pass through this process, so unlike {@link uploadAsset}\n * there is no stream to pipe and no progress to report — the request is a\n * small JSON body and a long wait. The source must be reachable without\n * authentication from Sanity's side; a presigned URL qualifies, a private one\n * behind a login does not.\n *\n * `assets.upload()` always streams a body, so this calls the endpoint directly\n * rather than going through the client's asset helper.\n */\nexport async function ingestAssetFromUrl({\n  assetType,\n  dataset,\n  filename,\n  projectId,\n  signal,\n  url,\n}: IngestAssetFromUrlOptions): Promise<SanityAssetDocument | SanityImageAssetDocument> {\n  signal?.throwIfAborted()\n\n  const client = await getProjectCliClient({\n    apiVersion: ASSETS_API_VERSION,\n    dataset,\n    projectId,\n    requestTagPrefix: ASSET_UPLOAD_REQUEST_TAG_PREFIX,\n    requireUser: true,\n  })\n  signal?.throwIfAborted()\n\n  const response = await client.request<{\n    document: SanityAssetDocument | SanityImageAssetDocument\n  }>({\n    body: {url, ...(filename ? {filename} : {})},\n    method: 'POST',\n    signal,\n    tag: 'asset.upload.from-url',\n    timeout: URL_INGEST_TIMEOUT_MS,\n    url: `/assets/${assetPathSegment(assetType)}/${dataset}/from-url`,\n  })\n\n  return response.document\n}\n"],"names":["Transform","getProjectCliClient","filter","lastValueFrom","map","Observable","race","ASSETS_API_VERSION","ASSET_UPLOAD_REQUEST_TAG_PREFIX","URL_INGEST_TIMEOUT_MS","assetPathSegment","assetType","uploadAsset","body","contentType","dataset","filename","fileSize","onProgress","projectId","signal","throwIfAborted","client","apiVersion","requestTagPrefix","requireUser","uploadedBytes","uploadStream","transform","chunk","_encoding","callback","length","on","error","destroy","pipe","response$","observable","assets","upload","tag","event","type","document","abort$","subscriber","abortUpload","reason","Error","addEventListener","once","removeEventListener","ingestAssetFromUrl","url","response","request","method","timeout"],"mappings":"AAAA,SAAuBA,SAAS,QAAO,cAAa;AAEpD,SAAQC,mBAAmB,QAAO,mBAAkB;AAEpD,SAAQC,MAAM,EAAEC,aAAa,EAAEC,GAAG,EAAEC,UAAU,EAAEC,IAAI,QAAO,OAAM;AAEjE,OAAO,MAAMC,qBAAqB,cAAa;AAE/C,OAAO,MAAMC,kCAAkC,2BAA0B;AAEzE;;;;CAIC,GACD,OAAO,MAAMC,wBAAwB,QAAO;AAI5C,SAASC,iBAAiBC,SAAoB;IAC5C,OAAOA,cAAc,UAAU,WAAW;AAC5C;AAeA,OAAO,eAAeC,YAAY,EAChCD,SAAS,EACTE,IAAI,EACJC,WAAW,EACXC,OAAO,EACPC,QAAQ,EACRC,QAAQ,EACRC,UAAU,EACVC,SAAS,EACTC,MAAM,EACa;IACnBA,QAAQC;IAER,MAAMC,SAAS,MAAMrB,oBAAoB;QACvCsB,YAAYhB;QACZQ;QACAI;QACAK,kBAAkBhB;QAClBiB,aAAa;IACf;IACAL,QAAQC;IAER,IAAIK,gBAAgB;IACpB,MAAMC,eAAe,IAAI3B,UAAU;QACjC4B,WAAUC,KAAa,EAAEC,SAAS,EAAEC,QAAQ;YAC1CL,iBAAiBG,MAAMG,MAAM;YAC7Bd,aAAa,AAACQ,gBAAgBT,WAAY;YAC1Cc,SAAS,MAAMF;QACjB;IACF;IACAhB,KAAKoB,EAAE,CAAC,SAAS,CAACC,QAAUP,aAAaQ,OAAO,CAACD,QAAQE,IAAI,CAACT;IAE9D,MAAMU,YAAYf,OAAOgB,UAAU,CAACC,MAAM,CACvCC,MAAM,CAAC7B,WAAWgB,cAAc;QAC/B,GAAIb,cAAc;YAACA;QAAW,IAAI,CAAC,CAAC;QACpCE;QACAyB,KAAK;IACP,GACCL,IAAI,CACHlC,OAAO,CAACwC,QAAUA,MAAMC,IAAI,KAAK,aACjCvC,IAAI,CAACsC,QAAUA,MAAM7B,IAAI,CAAC+B,QAAQ;IAGtC,IAAI,CAACxB,QAAQ,OAAOjB,cAAckC;IAElC,MAAMQ,SAAS,IAAIxC,WAAkB,CAACyC;QACpC,MAAMC,cAAc;YAClBlC,KAAKsB,OAAO;YACZR,aAAaQ,OAAO;YACpBW,WAAWZ,KAAK,CAACd,OAAO4B,MAAM,YAAYC,QAAQ7B,OAAO4B,MAAM,GAAG,IAAIC,MAAM;QAC9E;QAEA7B,OAAO8B,gBAAgB,CAAC,SAASH,aAAa;YAACI,MAAM;QAAI;QACzD,OAAO,IAAM/B,OAAOgC,mBAAmB,CAAC,SAASL;IACnD;IAEA,OAAO5C,cAAcG,KAAK+B,WAAWQ;AACvC;AAYA;;;;;;;;;;;CAWC,GACD,OAAO,eAAeQ,mBAAmB,EACvC1C,SAAS,EACTI,OAAO,EACPC,QAAQ,EACRG,SAAS,EACTC,MAAM,EACNkC,GAAG,EACuB;IAC1BlC,QAAQC;IAER,MAAMC,SAAS,MAAMrB,oBAAoB;QACvCsB,YAAYhB;QACZQ;QACAI;QACAK,kBAAkBhB;QAClBiB,aAAa;IACf;IACAL,QAAQC;IAER,MAAMkC,WAAW,MAAMjC,OAAOkC,OAAO,CAElC;QACD3C,MAAM;YAACyC;YAAK,GAAItC,WAAW;gBAACA;YAAQ,IAAI,CAAC,CAAC;QAAC;QAC3CyC,QAAQ;QACRrC;QACAqB,KAAK;QACLiB,SAASjD;QACT6C,KAAK,CAAC,QAAQ,EAAE5C,iBAAiBC,WAAW,CAAC,EAAEI,QAAQ,SAAS,CAAC;IACnE;IAEA,OAAOwC,SAASX,QAAQ;AAC1B"}

package/dist/services/mediaLibraries.js

@@ -1,9 +1,14 @@
 import { getGlobalCliClient } from '@sanity/cli-core';
 import { MEDIA_LIBRARY_ASSET_ASPECT_TYPE_NAME } from '@sanity/types';
+import { ASSET_UPLOAD_REQUEST_TAG_PREFIX, URL_INGEST_TIMEOUT_MS } from './assets.js';
 export const MEDIA_LIBRARY_API_VERSION = 'v2025-02-19';
-async function getMediaLibraryClient() {
+async function getMediaLibraryClient(options = {}) {
+    const { requestTagPrefix } = options;
     return getGlobalCliClient({
         apiVersion: MEDIA_LIBRARY_API_VERSION,
+        ...requestTagPrefix ? {
+            requestTagPrefix
+        } : {},
         requireUser: true
     });
 }
@@ -70,5 +75,38 @@ async function getMediaLibraryClient() {
         url: `/media-libraries/${mediaLibraryId}/mutate`
     });
 }
+/**
+ * Create a media library asset from a URL that Sanity fetches itself.
+ *
+ * Unlike the dataset equivalent in `./assets.ts`, the asset type is not part of
+ * the request — the library derives it from the fetched content — and aspects
+ * are set inline here rather than patched on afterwards.
+ *
+ * The source must be reachable without authentication from Sanity's side; a
+ * presigned URL qualifies, a private one behind a login does not.
+ *
+ * @internal
+ */ export async function ingestMediaLibraryAssetFromUrl({ aspects, filename, mediaLibraryId, signal, url }) {
+    signal?.throwIfAborted();
+    const client = await getMediaLibraryClient({
+        requestTagPrefix: ASSET_UPLOAD_REQUEST_TAG_PREFIX
+    });
+    return client.request({
+        body: {
+            url,
+            ...filename ? {
+                filename
+            } : {},
+            ...aspects ? {
+                aspects
+            } : {}
+        },
+        method: 'POST',
+        signal,
+        tag: 'asset.upload.from-url',
+        timeout: URL_INGEST_TIMEOUT_MS,
+        url: `/media-libraries/${mediaLibraryId}/from-url`
+    });
+}
 
 //# sourceMappingURL=mediaLibraries.js.map

package/dist/services/mediaLibraries.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/services/mediaLibraries.ts"],"sourcesContent":["import {getGlobalCliClient} from '@sanity/cli-core'\nimport {\n  MEDIA_LIBRARY_ASSET_ASPECT_TYPE_NAME,\n  type MediaLibraryAssetAspectDocument,\n} from '@sanity/types'\n\nexport const MEDIA_LIBRARY_API_VERSION = 'v2025-02-19'\n\nasync function getMediaLibraryClient() {\n  return getGlobalCliClient({\n    apiVersion: MEDIA_LIBRARY_API_VERSION,\n    requireUser: true,\n  })\n}\n\ninterface DeleteAspectOptions {\n  aspectName: string\n  mediaLibraryId: string\n  projectId: string\n}\n\ninterface DeleteAspectResponse {\n  results: Array<{id: string}>\n}\n\n/**\n * Delete an aspect from a media library\n * @param options - The options for deleting an aspect\n * @returns A promise that resolves to the deletion response\n *\n * @internal\n */\nexport async function deleteAspect(options: DeleteAspectOptions): Promise<DeleteAspectResponse> {\n  const {aspectName, mediaLibraryId} = options\n\n  const client = await getMediaLibraryClient()\n\n  return client.request<DeleteAspectResponse>({\n    body: {\n      mutations: [\n        {\n          delete: {\n            params: {\n              id: aspectName,\n              type: MEDIA_LIBRARY_ASSET_ASPECT_TYPE_NAME,\n            },\n            query: `*[_type == $type && _id == $id]`,\n          },\n        },\n      ],\n    },\n    method: 'POST',\n    url: `/media-libraries/${mediaLibraryId}/mutate`,\n  })\n}\n\nexport interface MediaLibrary {\n  id: string\n  organizationId: string\n  status: 'active' | 'inactive'\n}\n\ninterface MediaLibrariesResponse {\n  data: MediaLibrary[]\n}\n\n/**\n * Get a list of media libraries for a project\n * @param projectId - The project ID\n * @returns A promise that resolves to the media libraries\n *\n * @internal\n */\nexport async function getMediaLibraries(projectId: string): Promise<MediaLibrary[]> {\n  const client = await getMediaLibraryClient()\n\n  const response = await client.request<MediaLibrariesResponse>({\n    method: 'GET',\n    query: {\n      projectId,\n    },\n    url: `/media-libraries`,\n  })\n\n  return response.data.filter((library) => library.status === 'active')\n}\n\ninterface DeployAspectsOptions {\n  aspects: MediaLibraryAssetAspectDocument[]\n  mediaLibraryId: string\n}\n\ninterface DeployAspectsResponse {\n  results: Array<{id: string; operation: string}>\n}\n\n/**\n * Deploy one or more aspects to a media library\n * @param options - The options for deploying aspects\n * @returns A promise that resolves to the deployment response\n *\n * @internal\n */\nexport async function deployAspects(options: DeployAspectsOptions): Promise<DeployAspectsResponse> {\n  const {aspects, mediaLibraryId} = options\n\n  const client = await getMediaLibraryClient()\n\n  return client.request<DeployAspectsResponse>({\n    body: {\n      mutations: aspects.map((aspect) => ({\n        createOrReplace: aspect,\n      })),\n    },\n    method: 'POST',\n    url: `/media-libraries/${mediaLibraryId}/mutate`,\n  })\n}\n"],"names":["getGlobalCliClient","MEDIA_LIBRARY_ASSET_ASPECT_TYPE_NAME","MEDIA_LIBRARY_API_VERSION","getMediaLibraryClient","apiVersion","requireUser","deleteAspect","options","aspectName","mediaLibraryId","client","request","body","mutations","delete","params","id","type","query","method","url","getMediaLibraries","projectId","response","data","filter","library","status","deployAspects","aspects","map","aspect","createOrReplace"],"mappings":"AAAA,SAAQA,kBAAkB,QAAO,mBAAkB;AACnD,SACEC,oCAAoC,QAE/B,gBAAe;AAEtB,OAAO,MAAMC,4BAA4B,cAAa;AAEtD,eAAeC;IACb,OAAOH,mBAAmB;QACxBI,YAAYF;QACZG,aAAa;IACf;AACF;AAYA;;;;;;CAMC,GACD,OAAO,eAAeC,aAAaC,OAA4B;IAC7D,MAAM,EAACC,UAAU,EAAEC,cAAc,EAAC,GAAGF;IAErC,MAAMG,SAAS,MAAMP;IAErB,OAAOO,OAAOC,OAAO,CAAuB;QAC1CC,MAAM;YACJC,WAAW;gBACT;oBACEC,QAAQ;wBACNC,QAAQ;4BACNC,IAAIR;4BACJS,MAAMhB;wBACR;wBACAiB,OAAO,CAAC,+BAA+B,CAAC;oBAC1C;gBACF;aACD;QACH;QACAC,QAAQ;QACRC,KAAK,CAAC,iBAAiB,EAAEX,eAAe,OAAO,CAAC;IAClD;AACF;AAYA;;;;;;CAMC,GACD,OAAO,eAAeY,kBAAkBC,SAAiB;IACvD,MAAMZ,SAAS,MAAMP;IAErB,MAAMoB,WAAW,MAAMb,OAAOC,OAAO,CAAyB;QAC5DQ,QAAQ;QACRD,OAAO;YACLI;QACF;QACAF,KAAK,CAAC,gBAAgB,CAAC;IACzB;IAEA,OAAOG,SAASC,IAAI,CAACC,MAAM,CAAC,CAACC,UAAYA,QAAQC,MAAM,KAAK;AAC9D;AAWA;;;;;;CAMC,GACD,OAAO,eAAeC,cAAcrB,OAA6B;IAC/D,MAAM,EAACsB,OAAO,EAAEpB,cAAc,EAAC,GAAGF;IAElC,MAAMG,SAAS,MAAMP;IAErB,OAAOO,OAAOC,OAAO,CAAwB;QAC3CC,MAAM;YACJC,WAAWgB,QAAQC,GAAG,CAAC,CAACC,SAAY,CAAA;oBAClCC,iBAAiBD;gBACnB,CAAA;QACF;QACAZ,QAAQ;QACRC,KAAK,CAAC,iBAAiB,EAAEX,eAAe,OAAO,CAAC;IAClD;AACF"}
+{"version":3,"sources":["../../src/services/mediaLibraries.ts"],"sourcesContent":["import {getGlobalCliClient} from '@sanity/cli-core'\nimport {\n  type FileAsset,\n  type ImageAsset,\n  MEDIA_LIBRARY_ASSET_ASPECT_TYPE_NAME,\n  type MediaLibraryAssetAspectDocument,\n  type SanityDocument,\n} from '@sanity/types'\n\nimport {ASSET_UPLOAD_REQUEST_TAG_PREFIX, URL_INGEST_TIMEOUT_MS} from './assets.js'\n\nexport const MEDIA_LIBRARY_API_VERSION = 'v2025-02-19'\n\nasync function getMediaLibraryClient(options: {requestTagPrefix?: string} = {}) {\n  const {requestTagPrefix} = options\n\n  return getGlobalCliClient({\n    apiVersion: MEDIA_LIBRARY_API_VERSION,\n    ...(requestTagPrefix ? {requestTagPrefix} : {}),\n    requireUser: true,\n  })\n}\n\ninterface DeleteAspectOptions {\n  aspectName: string\n  mediaLibraryId: string\n  projectId: string\n}\n\ninterface DeleteAspectResponse {\n  results: Array<{id: string}>\n}\n\n/**\n * Delete an aspect from a media library\n * @param options - The options for deleting an aspect\n * @returns A promise that resolves to the deletion response\n *\n * @internal\n */\nexport async function deleteAspect(options: DeleteAspectOptions): Promise<DeleteAspectResponse> {\n  const {aspectName, mediaLibraryId} = options\n\n  const client = await getMediaLibraryClient()\n\n  return client.request<DeleteAspectResponse>({\n    body: {\n      mutations: [\n        {\n          delete: {\n            params: {\n              id: aspectName,\n              type: MEDIA_LIBRARY_ASSET_ASPECT_TYPE_NAME,\n            },\n            query: `*[_type == $type && _id == $id]`,\n          },\n        },\n      ],\n    },\n    method: 'POST',\n    url: `/media-libraries/${mediaLibraryId}/mutate`,\n  })\n}\n\nexport interface MediaLibrary {\n  id: string\n  organizationId: string\n  status: 'active' | 'inactive'\n}\n\ninterface MediaLibrariesResponse {\n  data: MediaLibrary[]\n}\n\n/**\n * Get a list of media libraries for a project\n * @param projectId - The project ID\n * @returns A promise that resolves to the media libraries\n *\n * @internal\n */\nexport async function getMediaLibraries(projectId: string): Promise<MediaLibrary[]> {\n  const client = await getMediaLibraryClient()\n\n  const response = await client.request<MediaLibrariesResponse>({\n    method: 'GET',\n    query: {\n      projectId,\n    },\n    url: `/media-libraries`,\n  })\n\n  return response.data.filter((library) => library.status === 'active')\n}\n\ninterface DeployAspectsOptions {\n  aspects: MediaLibraryAssetAspectDocument[]\n  mediaLibraryId: string\n}\n\ninterface DeployAspectsResponse {\n  results: Array<{id: string; operation: string}>\n}\n\n/**\n * Deploy one or more aspects to a media library\n * @param options - The options for deploying aspects\n * @returns A promise that resolves to the deployment response\n *\n * @internal\n */\nexport async function deployAspects(options: DeployAspectsOptions): Promise<DeployAspectsResponse> {\n  const {aspects, mediaLibraryId} = options\n\n  const client = await getMediaLibraryClient()\n\n  return client.request<DeployAspectsResponse>({\n    body: {\n      mutations: aspects.map((aspect) => ({\n        createOrReplace: aspect,\n      })),\n    },\n    method: 'POST',\n    url: `/media-libraries/${mediaLibraryId}/mutate`,\n  })\n}\n\n/**\n * The pair of documents a media library creates for one asset: the\n * `sanity.asset` document that carries aspects, and the asset instance holding\n * the file metadata.\n *\n * @internal\n */\nexport interface MediaLibraryAsset {\n  asset: SanityDocument & {\n    _type: 'sanity.asset'\n    aspects: unknown\n    assetType: FileAsset['_type'] | ImageAsset['_type']\n  }\n  assetInstance: FileAsset | ImageAsset\n}\n\ninterface IngestMediaLibraryAssetFromUrlOptions {\n  mediaLibraryId: string\n  url: string\n\n  aspects?: Record<string, unknown>\n  filename?: string\n  signal?: AbortSignal\n}\n\n/**\n * Create a media library asset from a URL that Sanity fetches itself.\n *\n * Unlike the dataset equivalent in `./assets.ts`, the asset type is not part of\n * the request — the library derives it from the fetched content — and aspects\n * are set inline here rather than patched on afterwards.\n *\n * The source must be reachable without authentication from Sanity's side; a\n * presigned URL qualifies, a private one behind a login does not.\n *\n * @internal\n */\nexport async function ingestMediaLibraryAssetFromUrl({\n  aspects,\n  filename,\n  mediaLibraryId,\n  signal,\n  url,\n}: IngestMediaLibraryAssetFromUrlOptions): Promise<MediaLibraryAsset> {\n  signal?.throwIfAborted()\n\n  const client = await getMediaLibraryClient({\n    requestTagPrefix: ASSET_UPLOAD_REQUEST_TAG_PREFIX,\n  })\n\n  return client.request<MediaLibraryAsset>({\n    body: {\n      url,\n      ...(filename ? {filename} : {}),\n      ...(aspects ? {aspects} : {}),\n    },\n    method: 'POST',\n    signal,\n    tag: 'asset.upload.from-url',\n    timeout: URL_INGEST_TIMEOUT_MS,\n    url: `/media-libraries/${mediaLibraryId}/from-url`,\n  })\n}\n"],"names":["getGlobalCliClient","MEDIA_LIBRARY_ASSET_ASPECT_TYPE_NAME","ASSET_UPLOAD_REQUEST_TAG_PREFIX","URL_INGEST_TIMEOUT_MS","MEDIA_LIBRARY_API_VERSION","getMediaLibraryClient","options","requestTagPrefix","apiVersion","requireUser","deleteAspect","aspectName","mediaLibraryId","client","request","body","mutations","delete","params","id","type","query","method","url","getMediaLibraries","projectId","response","data","filter","library","status","deployAspects","aspects","map","aspect","createOrReplace","ingestMediaLibraryAssetFromUrl","filename","signal","throwIfAborted","tag","timeout"],"mappings":"AAAA,SAAQA,kBAAkB,QAAO,mBAAkB;AACnD,SAGEC,oCAAoC,QAG/B,gBAAe;AAEtB,SAAQC,+BAA+B,EAAEC,qBAAqB,QAAO,cAAa;AAElF,OAAO,MAAMC,4BAA4B,cAAa;AAEtD,eAAeC,sBAAsBC,UAAuC,CAAC,CAAC;IAC5E,MAAM,EAACC,gBAAgB,EAAC,GAAGD;IAE3B,OAAON,mBAAmB;QACxBQ,YAAYJ;QACZ,GAAIG,mBAAmB;YAACA;QAAgB,IAAI,CAAC,CAAC;QAC9CE,aAAa;IACf;AACF;AAYA;;;;;;CAMC,GACD,OAAO,eAAeC,aAAaJ,OAA4B;IAC7D,MAAM,EAACK,UAAU,EAAEC,cAAc,EAAC,GAAGN;IAErC,MAAMO,SAAS,MAAMR;IAErB,OAAOQ,OAAOC,OAAO,CAAuB;QAC1CC,MAAM;YACJC,WAAW;gBACT;oBACEC,QAAQ;wBACNC,QAAQ;4BACNC,IAAIR;4BACJS,MAAMnB;wBACR;wBACAoB,OAAO,CAAC,+BAA+B,CAAC;oBAC1C;gBACF;aACD;QACH;QACAC,QAAQ;QACRC,KAAK,CAAC,iBAAiB,EAAEX,eAAe,OAAO,CAAC;IAClD;AACF;AAYA;;;;;;CAMC,GACD,OAAO,eAAeY,kBAAkBC,SAAiB;IACvD,MAAMZ,SAAS,MAAMR;IAErB,MAAMqB,WAAW,MAAMb,OAAOC,OAAO,CAAyB;QAC5DQ,QAAQ;QACRD,OAAO;YACLI;QACF;QACAF,KAAK,CAAC,gBAAgB,CAAC;IACzB;IAEA,OAAOG,SAASC,IAAI,CAACC,MAAM,CAAC,CAACC,UAAYA,QAAQC,MAAM,KAAK;AAC9D;AAWA;;;;;;CAMC,GACD,OAAO,eAAeC,cAAczB,OAA6B;IAC/D,MAAM,EAAC0B,OAAO,EAAEpB,cAAc,EAAC,GAAGN;IAElC,MAAMO,SAAS,MAAMR;IAErB,OAAOQ,OAAOC,OAAO,CAAwB;QAC3CC,MAAM;YACJC,WAAWgB,QAAQC,GAAG,CAAC,CAACC,SAAY,CAAA;oBAClCC,iBAAiBD;gBACnB,CAAA;QACF;QACAZ,QAAQ;QACRC,KAAK,CAAC,iBAAiB,EAAEX,eAAe,OAAO,CAAC;IAClD;AACF;AA2BA;;;;;;;;;;;CAWC,GACD,OAAO,eAAewB,+BAA+B,EACnDJ,OAAO,EACPK,QAAQ,EACRzB,cAAc,EACd0B,MAAM,EACNf,GAAG,EACmC;IACtCe,QAAQC;IAER,MAAM1B,SAAS,MAAMR,sBAAsB;QACzCE,kBAAkBL;IACpB;IAEA,OAAOW,OAAOC,OAAO,CAAoB;QACvCC,MAAM;YACJQ;YACA,GAAIc,WAAW;gBAACA;YAAQ,IAAI,CAAC,CAAC;YAC9B,GAAIL,UAAU;gBAACA;YAAO,IAAI,CAAC,CAAC;QAC9B;QACAV,QAAQ;QACRgB;QACAE,KAAK;QACLC,SAAStC;QACToB,KAAK,CAAC,iBAAiB,EAAEX,eAAe,SAAS,CAAC;IACpD;AACF"}