@sanity/cli 8.10.0 → 8.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanity/cli",
-  "version": "8.10.0",
+  "version": "8.12.0",
   "description": "Sanity CLI tool for managing Sanity projects and organizations",
   "keywords": [
     "cli",
@@ -62,25 +62,25 @@
     "@oclif/core": "^4.11.14",
     "@oclif/plugin-help": "^6.2.53",
     "@oclif/plugin-not-found": "^3.2.88",
-    "@sanity/cli-build": "^6.3.1",
-    "@sanity/cli-core": "^3.7.0",
-    "@sanity/client": "^8.5.0",
+    "@sanity/cli-build": "^6.4.0",
+    "@sanity/cli-core": "^3.8.0",
+    "@sanity/client": "^8.6.2",
     "@sanity/codegen": "^8.1.0",
     "@sanity/descriptors": "^1.3.0",
     "@sanity/export": "^6.2.1",
     "@sanity/generate-help-url": "^4.0.0",
-    "@sanity/id-utils": "^1.0.0",
-    "@sanity/import": "^7.0.0",
-    "@sanity/migrate": "^8.0.2",
-    "@sanity/runtime-cli": "^17.12.0",
-    "@sanity/schema": "^6.12.0",
+    "@sanity/id-utils": "^1.1.0",
+    "@sanity/import": "^7.0.3",
+    "@sanity/migrate": "^8.0.3",
+    "@sanity/runtime-cli": "17.14.0",
+    "@sanity/schema": "^6.15.0",
     "@sanity/telemetry": "^1.1.0",
     "@sanity/template-validator": "^3.1.1",
-    "@sanity/types": "^6.12.0",
-    "@sanity/workbench-cli": "^2.4.3",
+    "@sanity/types": "^6.15.0",
+    "@sanity/workbench-cli": "^2.5.2",
     "@sanity/worker-channels": "^2.0.0",
-    "@sanity/workflow-cli": "0.31.0",
-    "@sanity/workflow-engine": "0.31.0",
+    "@sanity/workflow-cli": "0.32.0",
+    "@sanity/workflow-engine": "0.32.0",
     "@vercel/frameworks": "3.29.0",
     "chokidar": "^5.0.0",
     "console-table-printer": "^2.15.0",
@@ -96,7 +96,7 @@
     "jsonc-parser": "^3.3.1",
     "lodash-es": "^4.18.1",
     "minimist": "^1.2.8",
-    "obug": "^2.1.4",
+    "obug": "^3.0.0",
     "oneline": "^2.0.0",
     "open": "^11.0.0",
     "p-map": "^7.0.3",
@@ -116,7 +116,7 @@
     "tinyglobby": "^0.2.17",
     "typeid-js": "^1.2.0",
     "valibot": "^1.4.2",
-    "vite": "^8.2.2",
+    "vite": "^8.3.0",
     "which": "^6.0.1",
     "wrap-ansi": "^9.0.2",
     "yaml": "^2.9.0",
@@ -126,7 +126,7 @@
     "@eslint/compat": "^2.1.0",
     "@repo/package.config": "0.0.1",
     "@repo/tsconfig": "3.70.0",
-    "@sanity/cli-test": "17.0.0",
+    "@sanity/cli-test": "18.0.0",
     "@sanity/eslint-config-cli": "1.1.3",
     "@sanity/pkg-utils": "^12.3.4",
     "@swc/cli": "^0.8.1",
@@ -143,14 +143,14 @@
     "@vitest/coverage-istanbul": "^4.1.11",
     "babel-plugin-react-compiler": "^1.0.0",
     "eslint": "^10.7.0",
-    "get-it": "^9.5.2",
+    "get-it": "^9.5.4",
     "jsdom": "^29.1.1",
     "nock": "^14.0.15",
     "oclif": "^4.23.27",
     "oxc-transform-react": "^0.147.0",
     "publint": "^0.3.21",
     "rimraf": "^6.0.1",
-    "sanity": "^6.12.0",
+    "sanity": "^6.15.0",
     "tsx": "^4.23.12",
     "typescript": "^6.0.3",
     "vitest": "^4.1.11"

package/templates/app-quickstart/AGENTS.md

@@ -19,6 +19,24 @@ A React application built with the Sanity App SDK (`@sanity/sdk-react`). It is n
 
 Environment variables prefixed with `SANITY_APP_` are bundled into the app.
 
+## Deploying without prompts
+
+For the standard App SDK config, create the app explicitly on the first deploy:
+
+```bash
+npm run deploy -- --create --title "My App" --yes --json
+```
+
+If `app` uses `defineApplication`, omit `--create`; that deployment flow already creates the app on its first run.
+
+For the standard config, `--create` works even when the organization already has other apps. `app.title` in `sanity.cli.ts` can supply the title instead of `--title`. Add `--dry-run` to preview the deployment without creating or uploading anything.
+
+Save `application.id` from the JSON response as `deployment.appId` in `sanity.cli.ts`. For later deploys, omit `--create` and run `npm run deploy -- --yes --json`. `--create` rejects a config that already has an app ID.
+
+Agent terminals may disable interactive prompts even with a PTY (`TERM=dumb`). Use these flags rather than changing terminal settings or calling the applications API directly. Run `npm run deploy -- --help` to check which flags the installed CLI supports.
+
+This app is not a Studio. For a Studio's first hosted deployment, use `sanity deploy --url <hostname> --yes`; `studioHost`, if used in config, belongs at the top level, not inside `deployment`.
+
 ## Working with the App SDK
 
 If the Sanity MCP server is available, call its `get_sanity_rules` tool with the `app-sdk` rule before writing SDK code. That rule is the maintained guide and supersedes the notes below.

package/templates/app-sanity-ui/AGENTS.md

@@ -20,6 +20,24 @@ A React application built with the Sanity App SDK (`@sanity/sdk-react`) and Sani
 
 Environment variables prefixed with `SANITY_APP_` are bundled into the app.
 
+## Deploying without prompts
+
+For the standard App SDK config, create the app explicitly on the first deploy:
+
+```bash
+npm run deploy -- --create --title "My App" --yes --json
+```
+
+If `app` uses `defineApplication`, omit `--create`; that deployment flow already creates the app on its first run.
+
+For the standard config, `--create` works even when the organization already has other apps. `app.title` in `sanity.cli.ts` can supply the title instead of `--title`. Add `--dry-run` to preview the deployment without creating or uploading anything.
+
+Save `application.id` from the JSON response as `deployment.appId` in `sanity.cli.ts`. For later deploys, omit `--create` and run `npm run deploy -- --yes --json`. `--create` rejects a config that already has an app ID.
+
+Agent terminals may disable interactive prompts even with a PTY (`TERM=dumb`). Use these flags rather than changing terminal settings or calling the applications API directly. Run `npm run deploy -- --help` to check which flags the installed CLI supports.
+
+This app is not a Studio. For a Studio's first hosted deployment, use `sanity deploy --url <hostname> --yes`; `studioHost`, if used in config, belongs at the top level, not inside `deployment`.
+
 ## Working with the App SDK
 
 If the Sanity MCP server is available, call its `get_sanity_rules` tool with the `app-sdk` rule before writing SDK code. That rule is the maintained guide and supersedes the notes below.

package/templates/shopify/.gitignore

@@ -0,0 +1,26 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# Dependencies
+/node_modules
+/.pnp
+.pnp.js
+
+# Compiled Sanity Studio
+/dist
+
+# Temporary Sanity runtime, generated by the CLI on every dev server start
+/.sanity
+
+# Logs
+/logs
+*.log
+
+# Coverage directory used by testing tools
+/coverage
+
+# Misc
+.DS_Store
+*.pem
+
+# Typescript
+*.tsbuildinfo

package/dist/exports/invokeSanityCli/commandPolicies/policy.js

@@ -1,46 +0,0 @@
-/**
- * Per-source command policies for programmatic CLI invocation.
- *
- * A policy decides, for one invocation source (e.g. the remote MCP server),
- * which commands may be invoked and — for conditional entries — which parsed
- * invocations of those commands are acceptable. Policies are exhaustive:
- * every command in this package's oclif manifest has exactly one entry, so a
- * newly added CLI command cannot slip into (or ambiguously stay out of) the
- * invokable surface. A unit test enforces this; at runtime an uncategorized
- * command id fails closed (treated as deny).
- */ /** The parsed command invocation a conditional policy is evaluated against. */ /** Every valid invocation of the command is safe. */ export const allow = {
-    kind: 'allow',
-    validate: ()=>true
-};
-/** No invocation of the command is safe. Behaves like an unknown command. */ export const deny = {
-    kind: 'deny',
-    validate: ()=>false
-};
-/**
- * Conditional policies to deny flags. The flags are also hidden
- * from rendered help, so hosts are never told about surface they cannot use.
- */ export function conditionalDenyFlags(...names) {
-    return {
-        deniedFlags: names,
-        kind: 'conditional',
-        validate: ({ flags })=>names.every((name)=>flags[name] === undefined || flags[name] === false)
-    };
-}
-/**
- * Conditional policy combining {@link conditionalDenyFlags} with an extra
- * predicate on the parsed invocation, for conditions a flag name alone
- * cannot express — e.g. flag values that would read from the host machine.
- * `deniedFlags` are hidden from rendered help; the predicate is not
- * expressible there, so flags it constrains stay advertised.
- */ export function conditionalPolicy(options) {
-    const denyFlags = conditionalDenyFlags(...options.deniedFlags ?? []);
-    return {
-        ...denyFlags,
-        validate: (invocation)=>denyFlags.validate(invocation) && options.validate(invocation)
-    };
-}
-export function isConditionalInvocationPolicy(policy) {
-    return policy.kind === 'conditional';
-}
-
-//# sourceMappingURL=policy.js.map

package/dist/exports/invokeSanityCli/commandPolicies/policy.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/exports/invokeSanityCli/commandPolicies/policy.ts"],"sourcesContent":["/**\n * Per-source command policies for programmatic CLI invocation.\n *\n * A policy decides, for one invocation source (e.g. the remote MCP server),\n * which commands may be invoked and — for conditional entries — which parsed\n * invocations of those commands are acceptable. Policies are exhaustive:\n * every command in this package's oclif manifest has exactly one entry, so a\n * newly added CLI command cannot slip into (or ambiguously stay out of) the\n * invokable surface. A unit test enforces this; at runtime an uncategorized\n * command id fails closed (treated as deny).\n */\n\n/** The parsed command invocation a conditional policy is evaluated against. */\ninterface Invocation {\n  args: Readonly<Record<string, unknown>>\n  flags: Readonly<Record<string, unknown>>\n}\n\ntype InvocationPolicy = (invocation: Invocation) => boolean\n\ntype ConditionalInvocationPolicy = CommandPolicy & {\n  /**\n   * Flag names this policy refuses. Declarative so the help renderer can\n   * omit them (and examples using them) from the advertised command surface.\n   */\n  deniedFlags: readonly string[]\n\n  kind: 'conditional'\n}\n\nexport interface CommandPolicy {\n  kind: 'allow' | 'conditional' | 'deny'\n  validate: InvocationPolicy\n}\n\n/** Every valid invocation of the command is safe. */\nexport const allow: CommandPolicy = {kind: 'allow', validate: () => true}\n\n/** No invocation of the command is safe. Behaves like an unknown command. */\nexport const deny: CommandPolicy = {kind: 'deny', validate: () => false}\n\n/**\n * Conditional policies to deny flags. The flags are also hidden\n * from rendered help, so hosts are never told about surface they cannot use.\n */\nexport function conditionalDenyFlags(...names: string[]): ConditionalInvocationPolicy {\n  return {\n    deniedFlags: names,\n    kind: 'conditional',\n    validate: ({flags}) =>\n      names.every((name) => flags[name] === undefined || flags[name] === false),\n  }\n}\n\n/**\n * Conditional policy combining {@link conditionalDenyFlags} with an extra\n * predicate on the parsed invocation, for conditions a flag name alone\n * cannot express — e.g. flag values that would read from the host machine.\n * `deniedFlags` are hidden from rendered help; the predicate is not\n * expressible there, so flags it constrains stay advertised.\n */\nexport function conditionalPolicy(options: {\n  deniedFlags?: string[]\n  validate: InvocationPolicy\n}): ConditionalInvocationPolicy {\n  const denyFlags = conditionalDenyFlags(...(options.deniedFlags ?? []))\n  return {\n    ...denyFlags,\n    validate: (invocation) => denyFlags.validate(invocation) && options.validate(invocation),\n  }\n}\n\nexport function isConditionalInvocationPolicy(\n  policy: CommandPolicy,\n): policy is ConditionalInvocationPolicy {\n  return policy.kind === 'conditional'\n}\n\n/** A complete policy table, keyed by oclif command id. */\nexport type CommandPolicySet = Readonly<Record<string, CommandPolicy>>\n\n/** Where an invocation originates; selects the policy to enforce. */\nexport type InvocationSource = 'mcp'\n"],"names":["allow","kind","validate","deny","conditionalDenyFlags","names","deniedFlags","flags","every","name","undefined","conditionalPolicy","options","denyFlags","invocation","isConditionalInvocationPolicy","policy"],"mappings":"AAAA;;;;;;;;;;CAUC,GAED,6EAA6E,GAuB7E,mDAAmD,GACnD,OAAO,MAAMA,QAAuB;IAACC,MAAM;IAASC,UAAU,IAAM;AAAI,EAAC;AAEzE,2EAA2E,GAC3E,OAAO,MAAMC,OAAsB;IAACF,MAAM;IAAQC,UAAU,IAAM;AAAK,EAAC;AAExE;;;CAGC,GACD,OAAO,SAASE,qBAAqB,GAAGC,KAAe;IACrD,OAAO;QACLC,aAAaD;QACbJ,MAAM;QACNC,UAAU,CAAC,EAACK,KAAK,EAAC,GAChBF,MAAMG,KAAK,CAAC,CAACC,OAASF,KAAK,CAACE,KAAK,KAAKC,aAAaH,KAAK,CAACE,KAAK,KAAK;IACvE;AACF;AAEA;;;;;;CAMC,GACD,OAAO,SAASE,kBAAkBC,OAGjC;IACC,MAAMC,YAAYT,wBAAyBQ,QAAQN,WAAW,IAAI,EAAE;IACpE,OAAO;QACL,GAAGO,SAAS;QACZX,UAAU,CAACY,aAAeD,UAAUX,QAAQ,CAACY,eAAeF,QAAQV,QAAQ,CAACY;IAC/E;AACF;AAEA,OAAO,SAASC,8BACdC,MAAqB;IAErB,OAAOA,OAAOf,IAAI,KAAK;AACzB"}