@sanity/cli 8.22.1 → 8.23.0

package/dist/commands/media/pull-aspects.js

@@ -0,0 +1,309 @@
+import { access, mkdir, readFile, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { styleText } from 'node:util';
+import { Flags } from '@oclif/core';
+import { exitCodes, ProjectRootNotFoundError, SanityCommand, subdebug } from '@sanity/cli-core';
+import { confirm, logSymbols, spinner } from '@sanity/cli-core/ux';
+import { resolveWorkbenchConfig } from '@sanity/workbench-cli/deploy';
+import { appendFieldEntries } from '../../actions/media/cliConfigFields.js';
+import { convertAspectDocuments, formatFieldEntries } from '../../actions/media/pullAspects.js';
+import { resolveMediaLibraryId } from '../../actions/media/resolveMediaLibraryId.js';
+import { getAspects } from '../../services/mediaLibraries.js';
+import { pluralize } from '../../util/pluralize.js';
+import { defineCommandTelemetry } from '../../util/telemetry/commandTelemetry.js';
+const pullAspectsDebug = subdebug('media:pull-aspects');
+const NOT_A_CONFIG_APP = 'This command must be run inside a Media Library config app — a project whose ' + '`sanity.cli.ts` declares `unstable_defineMediaLibrary(...)`. Scaffold one with ' + '`sanity init --template media-library-config`.';
+const flags = {
+    'media-library-id': Flags.string({
+        description: 'The id of the media library to pull from (defaults to the single active library of the configured organization)'
+    }),
+    'out-dir': Flags.string({
+        default: 'src/fields',
+        description: 'Directory to write the generated field modules to, relative to the project root'
+    }),
+    overwrite: Flags.boolean({
+        description: 'Overwrite existing field modules and re-generate fields already declared in the config'
+    }),
+    'update-config': Flags.boolean({
+        allowNo: true,
+        description: 'Declare the generated fields in sanity.cli.ts (--no-update-config to skip). Prompted when omitted; unattended runs only print the entries'
+    })
+};
+export class MediaPullAspectsCommand extends SanityCommand {
+    static description = "Generate field modules from a media library's stored aspect documents";
+    static examples = [
+        {
+            command: '<%= config.bin %> <%= command.id %>',
+            description: 'Generate src/fields/<name>.tsx modules from the stored aspects'
+        },
+        {
+            command: '<%= config.bin %> <%= command.id %> --media-library-id ml123 --overwrite',
+            description: 'Pull from a specific media library, overwriting existing modules'
+        }
+    ];
+    static flags = flags;
+    // Part of the beta config-app flow: only usable inside a config app (like
+    // the unlisted media-library-config init template, which points to it), and
+    // listing it next to the legacy aspect commands would mix the two
+    // paradigms. Unhide when the config app leaves beta.
+    static hidden = true;
+    // --out-dir is a local filesystem path.
+    static telemetry = defineCommandTelemetry(flags, {
+        redact: [
+            'out-dir'
+        ]
+    });
+    async run() {
+        const { 'media-library-id': mediaLibraryIdFlag, 'out-dir': outDir, overwrite = false } = this.flags;
+        let cliConfig;
+        try {
+            cliConfig = await this.getCliConfig();
+        } catch (err) {
+            if (err instanceof ProjectRootNotFoundError) {
+                this.error(NOT_A_CONFIG_APP, {
+                    exit: exitCodes.RUNTIME_ERROR
+                });
+            }
+            throw err;
+        }
+        const config = resolveWorkbenchConfig(cliConfig);
+        if (!config) {
+            this.error(NOT_A_CONFIG_APP, {
+                exit: exitCodes.RUNTIME_ERROR
+            });
+        }
+        const root = await this.getProjectRoot();
+        // The generated `src:` entries and the ownership story both assume the
+        // modules live inside the project; a path escaping the root is a mistake.
+        // `outDirRelative` (not the raw flag) feeds the report so an absolute
+        // --out-dir inside the root still prints proper relative `src:` entries.
+        const outDirAbsolute = path.resolve(root.directory, outDir);
+        const outDirRelative = path.relative(root.directory, outDirAbsolute);
+        if (path.isAbsolute(outDirRelative) || outDirRelative === '..' || outDirRelative.startsWith(`..${path.sep}`)) {
+            this.error(`--out-dir must stay inside the project root (got "${outDir}")`, {
+                exit: exitCodes.USAGE_ERROR
+            });
+        }
+        try {
+            const mediaLibraryId = await resolveMediaLibraryId({
+                mediaLibraryIdFlag,
+                organizationId: config.organizationId,
+                unattended: this.isUnattended()
+            });
+            const spin = spinner('Fetching stored aspect documents').start();
+            let documents;
+            try {
+                documents = await getAspects(mediaLibraryId);
+            } finally{
+                // Also on failure — a spinner left running garbles the error output.
+                spin.stop();
+            }
+            if (documents.length === 0) {
+                this.log(`Media library ${styleText('bold', mediaLibraryId)} has no stored aspects — nothing to pull.`);
+                return;
+            }
+            // Names already declared in the config are owned by existing field
+            // modules; pulling the stored mirror back over them would regress local
+            // edits, so they are skipped unless --overwrite says otherwise.
+            const configuredNames = new Set(config.fields.map((field)=>field.name));
+            const configuredSrcByName = new Map(config.fields.map((field)=>[
+                    field.name,
+                    field.src
+                ]));
+            // One module per field name; name collisions and invalid documents are skipped.
+            const { modules: winners, skipped } = convertAspectDocuments(documents);
+            const generated = [];
+            // Module name -> written path relative to the project root, so the
+            // report shows where each module actually landed.
+            const writtenPaths = new Map();
+            // Module name -> path of a module skipped because it already exists on
+            // disk. Those fields may still be undeclared and need registration.
+            const existingPaths = new Map();
+            for (const module of winners){
+                if (!overwrite && configuredNames.has(module.name)) {
+                    skipped.push({
+                        id: module.name,
+                        reasons: [
+                            'Already declared in sanity.cli.ts (pass --overwrite to re-generate)'
+                        ],
+                        status: 'skipped',
+                        validationErrors: []
+                    });
+                    continue;
+                }
+                const defaultDestination = path.join(outDirAbsolute, module.filename);
+                // The pull generates `.tsx`, but a hand-written module for the same
+                // field may be plain `.ts` — treat both as taken.
+                const existing = await firstExisting([
+                    defaultDestination,
+                    defaultDestination.replace(/\.tsx$/, '.ts')
+                ]);
+                if (!overwrite && existing) {
+                    // The file is left alone, but the field is undeclared (declared
+                    // names were skipped above) — so it still joins the registration
+                    // offer below. An on-disk module without a config entry is exactly
+                    // the state the next deploy punishes, however the file got there.
+                    existingPaths.set(module.name, path.relative(root.directory, existing));
+                    skipped.push({
+                        id: module.name,
+                        reasons: [
+                            `A file already exists at ${path.relative(root.directory, existing)} (pass --overwrite to replace it)`
+                        ],
+                        status: 'skipped',
+                        validationErrors: []
+                    });
+                    continue;
+                }
+                // When overwriting a field the config already declares, the module
+                // must land at the declared `src` path — writing <out-dir>/<name>.tsx
+                // instead would orphan the new file while deploy keeps evaluating the
+                // old one. Failing that, replace the module found on disk (which may
+                // be the .ts variant), and only then fall back to the default.
+                const declaredSrc = overwrite ? configuredSrcByName.get(module.name) : undefined;
+                const destination = declaredSrc ? await resolveDeclaredSrc(path.resolve(root.directory, declaredSrc), module.filename) : existing ?? defaultDestination;
+                await mkdir(path.dirname(destination), {
+                    recursive: true
+                });
+                await writeFile(destination, module.source);
+                writtenPaths.set(module.name, path.relative(root.directory, destination));
+                generated.push(module);
+            }
+            // Fields present locally — written this run or already on disk — but not
+            // declared get offered for registration: the deploy mirrors config to
+            // stored documents, so an undeclared stored aspect is deleted by the
+            // next deploy — leaving the entries unpasted is a data hazard, not just
+            // friction. Existing files count because a prior pull may have been
+            // declined (or edited by hand): the file being there does not make the
+            // field declared.
+            const entryPaths = new Map([
+                ...writtenPaths,
+                ...existingPaths
+            ]);
+            const newEntries = winners.filter((module)=>!configuredNames.has(module.name) && entryPaths.has(module.name));
+            const entryLines = newEntries.length > 0 ? formatFieldEntries(newEntries, outDirRelative, entryPaths).split('\n') : [];
+            const registration = newEntries.length > 0 ? await this.maybeRegisterFields({
+                configPath: root.path,
+                entryLines
+            }) : null;
+            this.report({
+                configuredNames,
+                entryLines,
+                generated,
+                newEntries,
+                outDir: outDirRelative,
+                registration,
+                skipped,
+                writtenPaths
+            });
+        } catch (error) {
+            // Ctrl+C on the library prompt and errors that already carry their exit
+            // code (`this.error` inside helpers) pass through to SanityCommand.catch.
+            if (error instanceof Error && error.name === 'ExitPromptError') throw error;
+            if (error && typeof error === 'object' && 'oclif' in error) throw error;
+            const err = error;
+            pullAspectsDebug('Failed to pull aspects', {
+                error: err,
+                mediaLibraryId: mediaLibraryIdFlag
+            });
+            this.error(styleText('bold', 'Failed to pull aspects') + `\n\n${styleText('red', err.message)}`, {
+                exit: exitCodes.RUNTIME_ERROR
+            });
+        }
+    }
+    /**
+   * Offer to declare the generated fields in `sanity.cli.ts`. `--update-config`
+   * / `--no-update-config` decide outright; otherwise an interactive run
+   * prompts (default yes) and an unattended run leaves the config alone.
+   */ async maybeRegisterFields({ configPath, entryLines }) {
+        const flag = this.flags['update-config'];
+        const shouldUpdate = flag ?? (this.isUnattended() ? false : await confirm({
+            default: true,
+            message: `Declare the ${entryLines.length} pulled ${pluralize('field', entryLines.length)} in sanity.cli.ts?`
+        }));
+        if (!shouldUpdate) return 'declined';
+        const source = await readFile(configPath, 'utf8');
+        const result = appendFieldEntries(source, entryLines);
+        if (!result.ok) return {
+            reason: result.reason
+        };
+        await writeFile(configPath, result.updated);
+        return 'added';
+    }
+    report({ configuredNames, entryLines, generated, newEntries, outDir, registration, skipped, writtenPaths }) {
+        if (skipped.length > 0) {
+            this.logToStderr('');
+            this.warn(styleText('bold', `Skipped ${skipped.length} ${pluralize('aspect', skipped.length)}`));
+            for (const aspect of skipped){
+                const errors = aspect.validationErrors.flatMap((group)=>group.map(({ message })=>message));
+                const reasons = [
+                    ...aspect.reasons,
+                    ...errors
+                ];
+                this.logToStderr(`  - ${aspect.id} ${styleText('dim', reasons.join('; '))}`);
+            }
+        }
+        // No modules written and nothing to declare: done. Skipped-but-undeclared
+        // fields keep the report alive — their registration outcome still matters.
+        if (generated.length === 0 && newEntries.length === 0) {
+            this.log('');
+            this.log('No field modules generated.');
+            return;
+        }
+        if (generated.length === 0) {
+            this.log('');
+            this.log('No field modules generated.');
+        } else {
+            this.log('');
+            this.log(`${logSymbols.success} ${styleText('bold', `Generated ${generated.length} field ${pluralize('module', generated.length)}`)}`);
+            for (const module of generated){
+                const location = writtenPaths.get(module.name) ?? path.join(outDir, module.filename);
+                this.log(`  - ${module.name} ${styleText('dim', location)}`);
+                for (const warning of module.warnings){
+                    this.log(`    ${logSymbols.warning} ${warning}`);
+                }
+            }
+        }
+        if (newEntries.length > 0 && registration === 'added') {
+            this.log('');
+            this.log(`${logSymbols.success} Declared ${newEntries.length} ${pluralize('field', newEntries.length)} in ${styleText('bold', 'sanity.cli.ts')}`);
+        } else if (newEntries.length > 0) {
+            if (registration !== null && typeof registration === 'object') {
+                this.warn(`Could not update sanity.cli.ts automatically: ${registration.reason}`);
+            }
+            this.log('');
+            this.log(configuredNames.size > 0 ? `Add the pulled ${pluralize('field', newEntries.length)} to the \`fields\` array in ${styleText('bold', 'sanity.cli.ts')}:` : `Declare the pulled ${pluralize('field', newEntries.length)} in ${styleText('bold', 'sanity.cli.ts')}:`);
+            this.log('');
+            this.log(entryLines.map((line)=>`  ${line}`).join('\n'));
+            // The deploy mirrors config into stored documents; a pulled-but-undeclared
+            // field reads as stale there, so leaving the entries out is destructive.
+            this.warn('`sanity deploy` deletes the stored definition of any field not declared in sanity.cli.ts.');
+        }
+        this.log('');
+        this.log('Once declared in sanity.cli.ts, the config app owns these definitions — deploying the');
+        this.log('config overwrites the stored documents this pull read from. Stored definitions');
+        this.log('not declared in sanity.cli.ts are deleted on deploy.');
+    }
+}
+/**
+ * The write target for a declared `src` path. A declared path may omit the
+ * extension — the bundler and jiti both resolve `./src/fields/notes` to
+ * `notes.ts(x)` — so writing it literally would create an extensionless file
+ * next to the module deploy actually evaluates. Resolve to the existing
+ * module file; if none exists, append the generated module's extension.
+ */ async function resolveDeclaredSrc(declaredPath, moduleFilename) {
+    if (path.extname(declaredPath) !== '') return declaredPath;
+    const existing = await firstExisting([
+        `${declaredPath}.ts`,
+        `${declaredPath}.tsx`
+    ]);
+    return existing ?? `${declaredPath}${path.extname(moduleFilename)}`;
+}
+/** The first path in `paths` that exists, or `undefined`. */ async function firstExisting(paths) {
+    for (const filePath of paths){
+        const exists = await access(filePath).then(()=>true, ()=>false);
+        if (exists) return filePath;
+    }
+    return undefined;
+}
+
+//# sourceMappingURL=pull-aspects.js.map

package/dist/commands/media/pull-aspects.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/commands/media/pull-aspects.ts"],"sourcesContent":["import {access, mkdir, readFile, writeFile} from 'node:fs/promises'\nimport path from 'node:path'\nimport {styleText} from 'node:util'\n\nimport {Flags} from '@oclif/core'\nimport {\n  type CliConfig,\n  exitCodes,\n  ProjectRootNotFoundError,\n  SanityCommand,\n  subdebug,\n} from '@sanity/cli-core'\nimport {confirm, logSymbols, spinner} from '@sanity/cli-core/ux'\nimport {resolveWorkbenchConfig} from '@sanity/workbench-cli/deploy'\n\nimport {appendFieldEntries} from '../../actions/media/cliConfigFields.js'\nimport {\n  convertAspectDocuments,\n  formatFieldEntries,\n  type GeneratedFieldModule,\n  type SkippedAspect,\n} from '../../actions/media/pullAspects.js'\nimport {resolveMediaLibraryId} from '../../actions/media/resolveMediaLibraryId.js'\nimport {getAspects} from '../../services/mediaLibraries.js'\nimport {pluralize} from '../../util/pluralize.js'\nimport {defineCommandTelemetry} from '../../util/telemetry/commandTelemetry.js'\n\nconst pullAspectsDebug = subdebug('media:pull-aspects')\n\nconst NOT_A_CONFIG_APP =\n  'This command must be run inside a Media Library config app — a project whose ' +\n  '`sanity.cli.ts` declares `unstable_defineMediaLibrary(...)`. Scaffold one with ' +\n  '`sanity init --template media-library-config`.'\n\nconst flags = {\n  'media-library-id': Flags.string({\n    description:\n      'The id of the media library to pull from (defaults to the single active library of the configured organization)',\n  }),\n  'out-dir': Flags.string({\n    default: 'src/fields',\n    description: 'Directory to write the generated field modules to, relative to the project root',\n  }),\n  overwrite: Flags.boolean({\n    description:\n      'Overwrite existing field modules and re-generate fields already declared in the config',\n  }),\n  'update-config': Flags.boolean({\n    allowNo: true,\n    description:\n      'Declare the generated fields in sanity.cli.ts (--no-update-config to skip). Prompted when omitted; unattended runs only print the entries',\n  }),\n}\n\n/**\n * The outcome of offering to declare the generated fields in `sanity.cli.ts`:\n * written, turned down (flag, prompt, or unattended), or not writable (the\n * config shape could not be edited safely — the `reason` says why).\n */\ntype Registration = 'added' | 'declined' | {reason: string}\n\nexport class MediaPullAspectsCommand extends SanityCommand<typeof MediaPullAspectsCommand> {\n  static override description =\n    \"Generate field modules from a media library's stored aspect documents\"\n\n  static override examples = [\n    {\n      command: '<%= config.bin %> <%= command.id %>',\n      description: 'Generate src/fields/<name>.tsx modules from the stored aspects',\n    },\n    {\n      command: '<%= config.bin %> <%= command.id %> --media-library-id ml123 --overwrite',\n      description: 'Pull from a specific media library, overwriting existing modules',\n    },\n  ]\n\n  static override flags = flags\n\n  // Part of the beta config-app flow: only usable inside a config app (like\n  // the unlisted media-library-config init template, which points to it), and\n  // listing it next to the legacy aspect commands would mix the two\n  // paradigms. Unhide when the config app leaves beta.\n  static override hidden = true\n\n  // --out-dir is a local filesystem path.\n  static telemetry = defineCommandTelemetry(flags, {redact: ['out-dir']})\n\n  public async run(): Promise<void> {\n    const {\n      'media-library-id': mediaLibraryIdFlag,\n      'out-dir': outDir,\n      overwrite = false,\n    } = this.flags\n\n    let cliConfig: CliConfig\n    try {\n      cliConfig = await this.getCliConfig()\n    } catch (err) {\n      if (err instanceof ProjectRootNotFoundError) {\n        this.error(NOT_A_CONFIG_APP, {exit: exitCodes.RUNTIME_ERROR})\n      }\n      throw err\n    }\n\n    const config = resolveWorkbenchConfig(cliConfig)\n    if (!config) {\n      this.error(NOT_A_CONFIG_APP, {exit: exitCodes.RUNTIME_ERROR})\n    }\n\n    const root = await this.getProjectRoot()\n    // The generated `src:` entries and the ownership story both assume the\n    // modules live inside the project; a path escaping the root is a mistake.\n    // `outDirRelative` (not the raw flag) feeds the report so an absolute\n    // --out-dir inside the root still prints proper relative `src:` entries.\n    const outDirAbsolute = path.resolve(root.directory, outDir)\n    const outDirRelative = path.relative(root.directory, outDirAbsolute)\n    if (\n      path.isAbsolute(outDirRelative) ||\n      outDirRelative === '..' ||\n      outDirRelative.startsWith(`..${path.sep}`)\n    ) {\n      this.error(`--out-dir must stay inside the project root (got \"${outDir}\")`, {\n        exit: exitCodes.USAGE_ERROR,\n      })\n    }\n\n    try {\n      const mediaLibraryId = await resolveMediaLibraryId({\n        mediaLibraryIdFlag,\n        organizationId: config.organizationId,\n        unattended: this.isUnattended(),\n      })\n\n      const spin = spinner('Fetching stored aspect documents').start()\n      let documents: Awaited<ReturnType<typeof getAspects>>\n      try {\n        documents = await getAspects(mediaLibraryId)\n      } finally {\n        // Also on failure — a spinner left running garbles the error output.\n        spin.stop()\n      }\n\n      if (documents.length === 0) {\n        this.log(\n          `Media library ${styleText('bold', mediaLibraryId)} has no stored aspects — nothing to pull.`,\n        )\n        return\n      }\n\n      // Names already declared in the config are owned by existing field\n      // modules; pulling the stored mirror back over them would regress local\n      // edits, so they are skipped unless --overwrite says otherwise.\n      const configuredNames = new Set(config.fields.map((field) => field.name))\n      const configuredSrcByName = new Map(config.fields.map((field) => [field.name, field.src]))\n\n      // One module per field name; name collisions and invalid documents are skipped.\n      const {modules: winners, skipped} = convertAspectDocuments(documents)\n\n      const generated: GeneratedFieldModule[] = []\n      // Module name -> written path relative to the project root, so the\n      // report shows where each module actually landed.\n      const writtenPaths = new Map<string, string>()\n      // Module name -> path of a module skipped because it already exists on\n      // disk. Those fields may still be undeclared and need registration.\n      const existingPaths = new Map<string, string>()\n      for (const module of winners) {\n        if (!overwrite && configuredNames.has(module.name)) {\n          skipped.push({\n            id: module.name,\n            reasons: ['Already declared in sanity.cli.ts (pass --overwrite to re-generate)'],\n            status: 'skipped',\n            validationErrors: [],\n          })\n          continue\n        }\n\n        const defaultDestination = path.join(outDirAbsolute, module.filename)\n        // The pull generates `.tsx`, but a hand-written module for the same\n        // field may be plain `.ts` — treat both as taken.\n        const existing = await firstExisting([\n          defaultDestination,\n          defaultDestination.replace(/\\.tsx$/, '.ts'),\n        ])\n        if (!overwrite && existing) {\n          // The file is left alone, but the field is undeclared (declared\n          // names were skipped above) — so it still joins the registration\n          // offer below. An on-disk module without a config entry is exactly\n          // the state the next deploy punishes, however the file got there.\n          existingPaths.set(module.name, path.relative(root.directory, existing))\n          skipped.push({\n            id: module.name,\n            reasons: [\n              `A file already exists at ${path.relative(root.directory, existing)} (pass --overwrite to replace it)`,\n            ],\n            status: 'skipped',\n            validationErrors: [],\n          })\n          continue\n        }\n\n        // When overwriting a field the config already declares, the module\n        // must land at the declared `src` path — writing <out-dir>/<name>.tsx\n        // instead would orphan the new file while deploy keeps evaluating the\n        // old one. Failing that, replace the module found on disk (which may\n        // be the .ts variant), and only then fall back to the default.\n        const declaredSrc = overwrite ? configuredSrcByName.get(module.name) : undefined\n        const destination = declaredSrc\n          ? await resolveDeclaredSrc(path.resolve(root.directory, declaredSrc), module.filename)\n          : (existing ?? defaultDestination)\n\n        await mkdir(path.dirname(destination), {recursive: true})\n        await writeFile(destination, module.source)\n        writtenPaths.set(module.name, path.relative(root.directory, destination))\n        generated.push(module)\n      }\n\n      // Fields present locally — written this run or already on disk — but not\n      // declared get offered for registration: the deploy mirrors config to\n      // stored documents, so an undeclared stored aspect is deleted by the\n      // next deploy — leaving the entries unpasted is a data hazard, not just\n      // friction. Existing files count because a prior pull may have been\n      // declined (or edited by hand): the file being there does not make the\n      // field declared.\n      const entryPaths = new Map([...writtenPaths, ...existingPaths])\n      const newEntries = winners.filter(\n        (module) => !configuredNames.has(module.name) && entryPaths.has(module.name),\n      )\n      const entryLines =\n        newEntries.length > 0\n          ? formatFieldEntries(newEntries, outDirRelative, entryPaths).split('\\n')\n          : []\n      const registration =\n        newEntries.length > 0\n          ? await this.maybeRegisterFields({configPath: root.path, entryLines})\n          : null\n\n      this.report({\n        configuredNames,\n        entryLines,\n        generated,\n        newEntries,\n        outDir: outDirRelative,\n        registration,\n        skipped,\n        writtenPaths,\n      })\n    } catch (error) {\n      // Ctrl+C on the library prompt and errors that already carry their exit\n      // code (`this.error` inside helpers) pass through to SanityCommand.catch.\n      if (error instanceof Error && error.name === 'ExitPromptError') throw error\n      if (error && typeof error === 'object' && 'oclif' in error) throw error\n      const err = error as Error\n      pullAspectsDebug('Failed to pull aspects', {error: err, mediaLibraryId: mediaLibraryIdFlag})\n      this.error(\n        styleText('bold', 'Failed to pull aspects') + `\\n\\n${styleText('red', err.message)}`,\n        {exit: exitCodes.RUNTIME_ERROR},\n      )\n    }\n  }\n\n  /**\n   * Offer to declare the generated fields in `sanity.cli.ts`. `--update-config`\n   * / `--no-update-config` decide outright; otherwise an interactive run\n   * prompts (default yes) and an unattended run leaves the config alone.\n   */\n  private async maybeRegisterFields({\n    configPath,\n    entryLines,\n  }: {\n    configPath: string\n    entryLines: string[]\n  }): Promise<Registration> {\n    const flag = this.flags['update-config']\n    const shouldUpdate =\n      flag ??\n      (this.isUnattended()\n        ? false\n        : await confirm({\n            default: true,\n            message: `Declare the ${entryLines.length} pulled ${pluralize('field', entryLines.length)} in sanity.cli.ts?`,\n          }))\n    if (!shouldUpdate) return 'declined'\n\n    const source = await readFile(configPath, 'utf8')\n    const result = appendFieldEntries(source, entryLines)\n    if (!result.ok) return {reason: result.reason}\n    await writeFile(configPath, result.updated)\n    return 'added'\n  }\n\n  private report({\n    configuredNames,\n    entryLines,\n    generated,\n    newEntries,\n    outDir,\n    registration,\n    skipped,\n    writtenPaths,\n  }: {\n    configuredNames: Set<string>\n    entryLines: string[]\n    generated: GeneratedFieldModule[]\n    newEntries: GeneratedFieldModule[]\n    outDir: string\n    registration: Registration | null\n    skipped: SkippedAspect[]\n    writtenPaths: Map<string, string>\n  }): void {\n    if (skipped.length > 0) {\n      this.logToStderr('')\n      this.warn(\n        styleText('bold', `Skipped ${skipped.length} ${pluralize('aspect', skipped.length)}`),\n      )\n      for (const aspect of skipped) {\n        const errors = aspect.validationErrors.flatMap((group) => group.map(({message}) => message))\n        const reasons = [...aspect.reasons, ...errors]\n        this.logToStderr(`  - ${aspect.id} ${styleText('dim', reasons.join('; '))}`)\n      }\n    }\n\n    // No modules written and nothing to declare: done. Skipped-but-undeclared\n    // fields keep the report alive — their registration outcome still matters.\n    if (generated.length === 0 && newEntries.length === 0) {\n      this.log('')\n      this.log('No field modules generated.')\n      return\n    }\n\n    if (generated.length === 0) {\n      this.log('')\n      this.log('No field modules generated.')\n    } else {\n      this.log('')\n      this.log(\n        `${logSymbols.success} ${styleText('bold', `Generated ${generated.length} field ${pluralize('module', generated.length)}`)}`,\n      )\n      for (const module of generated) {\n        const location = writtenPaths.get(module.name) ?? path.join(outDir, module.filename)\n        this.log(`  - ${module.name} ${styleText('dim', location)}`)\n        for (const warning of module.warnings) {\n          this.log(`    ${logSymbols.warning} ${warning}`)\n        }\n      }\n    }\n\n    if (newEntries.length > 0 && registration === 'added') {\n      this.log('')\n      this.log(\n        `${logSymbols.success} Declared ${newEntries.length} ${pluralize('field', newEntries.length)} in ${styleText('bold', 'sanity.cli.ts')}`,\n      )\n    } else if (newEntries.length > 0) {\n      if (registration !== null && typeof registration === 'object') {\n        this.warn(`Could not update sanity.cli.ts automatically: ${registration.reason}`)\n      }\n      this.log('')\n      this.log(\n        configuredNames.size > 0\n          ? `Add the pulled ${pluralize('field', newEntries.length)} to the \\`fields\\` array in ${styleText('bold', 'sanity.cli.ts')}:`\n          : `Declare the pulled ${pluralize('field', newEntries.length)} in ${styleText('bold', 'sanity.cli.ts')}:`,\n      )\n      this.log('')\n      this.log(entryLines.map((line) => `  ${line}`).join('\\n'))\n      // The deploy mirrors config into stored documents; a pulled-but-undeclared\n      // field reads as stale there, so leaving the entries out is destructive.\n      this.warn(\n        '`sanity deploy` deletes the stored definition of any field not declared in sanity.cli.ts.',\n      )\n    }\n\n    this.log('')\n    this.log(\n      'Once declared in sanity.cli.ts, the config app owns these definitions — deploying the',\n    )\n    this.log('config overwrites the stored documents this pull read from. Stored definitions')\n    this.log('not declared in sanity.cli.ts are deleted on deploy.')\n  }\n}\n\n/**\n * The write target for a declared `src` path. A declared path may omit the\n * extension — the bundler and jiti both resolve `./src/fields/notes` to\n * `notes.ts(x)` — so writing it literally would create an extensionless file\n * next to the module deploy actually evaluates. Resolve to the existing\n * module file; if none exists, append the generated module's extension.\n */\nasync function resolveDeclaredSrc(declaredPath: string, moduleFilename: string): Promise<string> {\n  if (path.extname(declaredPath) !== '') return declaredPath\n  const existing = await firstExisting([`${declaredPath}.ts`, `${declaredPath}.tsx`])\n  return existing ?? `${declaredPath}${path.extname(moduleFilename)}`\n}\n\n/** The first path in `paths` that exists, or `undefined`. */\nasync function firstExisting(paths: string[]): Promise<string | undefined> {\n  for (const filePath of paths) {\n    const exists = await access(filePath).then(\n      () => true,\n      () => false,\n    )\n    if (exists) return filePath\n  }\n  return undefined\n}\n"],"names":["access","mkdir","readFile","writeFile","path","styleText","Flags","exitCodes","ProjectRootNotFoundError","SanityCommand","subdebug","confirm","logSymbols","spinner","resolveWorkbenchConfig","appendFieldEntries","convertAspectDocuments","formatFieldEntries","resolveMediaLibraryId","getAspects","pluralize","defineCommandTelemetry","pullAspectsDebug","NOT_A_CONFIG_APP","flags","string","description","default","overwrite","boolean","allowNo","MediaPullAspectsCommand","examples","command","hidden","telemetry","redact","run","mediaLibraryIdFlag","outDir","cliConfig","getCliConfig","err","error","exit","RUNTIME_ERROR","config","root","getProjectRoot","outDirAbsolute","resolve","directory","outDirRelative","relative","isAbsolute","startsWith","sep","USAGE_ERROR","mediaLibraryId","organizationId","unattended","isUnattended","spin","start","documents","stop","length","log","configuredNames","Set","fields","map","field","name","configuredSrcByName","Map","src","modules","winners","skipped","generated","writtenPaths","existingPaths","module","has","push","id","reasons","status","validationErrors","defaultDestination","join","filename","existing","firstExisting","replace","set","declaredSrc","get","undefined","destination","resolveDeclaredSrc","dirname","recursive","source","entryPaths","newEntries","filter","entryLines","split","registration","maybeRegisterFields","configPath","report","Error","message","flag","shouldUpdate","result","ok","reason","updated","logToStderr","warn","aspect","errors","flatMap","group","success","location","warning","warnings","size","line","declaredPath","moduleFilename","extname","paths","filePath","exists","then"],"mappings":"AAAA,SAAQA,MAAM,EAAEC,KAAK,EAAEC,QAAQ,EAAEC,SAAS,QAAO,mBAAkB;AACnE,OAAOC,UAAU,YAAW;AAC5B,SAAQC,SAAS,QAAO,YAAW;AAEnC,SAAQC,KAAK,QAAO,cAAa;AACjC,SAEEC,SAAS,EACTC,wBAAwB,EACxBC,aAAa,EACbC,QAAQ,QACH,mBAAkB;AACzB,SAAQC,OAAO,EAAEC,UAAU,EAAEC,OAAO,QAAO,sBAAqB;AAChE,SAAQC,sBAAsB,QAAO,+BAA8B;AAEnE,SAAQC,kBAAkB,QAAO,yCAAwC;AACzE,SACEC,sBAAsB,EACtBC,kBAAkB,QAGb,qCAAoC;AAC3C,SAAQC,qBAAqB,QAAO,+CAA8C;AAClF,SAAQC,UAAU,QAAO,mCAAkC;AAC3D,SAAQC,SAAS,QAAO,0BAAyB;AACjD,SAAQC,sBAAsB,QAAO,2CAA0C;AAE/E,MAAMC,mBAAmBZ,SAAS;AAElC,MAAMa,mBACJ,kFACA,oFACA;AAEF,MAAMC,QAAQ;IACZ,oBAAoBlB,MAAMmB,MAAM,CAAC;QAC/BC,aACE;IACJ;IACA,WAAWpB,MAAMmB,MAAM,CAAC;QACtBE,SAAS;QACTD,aAAa;IACf;IACAE,WAAWtB,MAAMuB,OAAO,CAAC;QACvBH,aACE;IACJ;IACA,iBAAiBpB,MAAMuB,OAAO,CAAC;QAC7BC,SAAS;QACTJ,aACE;IACJ;AACF;AASA,OAAO,MAAMK,gCAAgCtB;IAC3C,OAAgBiB,cACd,wEAAuE;IAEzE,OAAgBM,WAAW;QACzB;YACEC,SAAS;YACTP,aAAa;QACf;QACA;YACEO,SAAS;YACTP,aAAa;QACf;KACD,CAAA;IAED,OAAgBF,QAAQA,MAAK;IAE7B,0EAA0E;IAC1E,4EAA4E;IAC5E,kEAAkE;IAClE,qDAAqD;IACrD,OAAgBU,SAAS,KAAI;IAE7B,wCAAwC;IACxC,OAAOC,YAAYd,uBAAuBG,OAAO;QAACY,QAAQ;YAAC;SAAU;IAAA,GAAE;IAEvE,MAAaC,MAAqB;QAChC,MAAM,EACJ,oBAAoBC,kBAAkB,EACtC,WAAWC,MAAM,EACjBX,YAAY,KAAK,EAClB,GAAG,IAAI,CAACJ,KAAK;QAEd,IAAIgB;QACJ,IAAI;YACFA,YAAY,MAAM,IAAI,CAACC,YAAY;QACrC,EAAE,OAAOC,KAAK;YACZ,IAAIA,eAAelC,0BAA0B;gBAC3C,IAAI,CAACmC,KAAK,CAACpB,kBAAkB;oBAACqB,MAAMrC,UAAUsC,aAAa;gBAAA;YAC7D;YACA,MAAMH;QACR;QAEA,MAAMI,SAAShC,uBAAuB0B;QACtC,IAAI,CAACM,QAAQ;YACX,IAAI,CAACH,KAAK,CAACpB,kBAAkB;gBAACqB,MAAMrC,UAAUsC,aAAa;YAAA;QAC7D;QAEA,MAAME,OAAO,MAAM,IAAI,CAACC,cAAc;QACtC,uEAAuE;QACvE,0EAA0E;QAC1E,sEAAsE;QACtE,yEAAyE;QACzE,MAAMC,iBAAiB7C,KAAK8C,OAAO,CAACH,KAAKI,SAAS,EAAEZ;QACpD,MAAMa,iBAAiBhD,KAAKiD,QAAQ,CAACN,KAAKI,SAAS,EAAEF;QACrD,IACE7C,KAAKkD,UAAU,CAACF,mBAChBA,mBAAmB,QACnBA,eAAeG,UAAU,CAAC,CAAC,EAAE,EAAEnD,KAAKoD,GAAG,EAAE,GACzC;YACA,IAAI,CAACb,KAAK,CAAC,CAAC,kDAAkD,EAAEJ,OAAO,EAAE,CAAC,EAAE;gBAC1EK,MAAMrC,UAAUkD,WAAW;YAC7B;QACF;QAEA,IAAI;YACF,MAAMC,iBAAiB,MAAMxC,sBAAsB;gBACjDoB;gBACAqB,gBAAgBb,OAAOa,cAAc;gBACrCC,YAAY,IAAI,CAACC,YAAY;YAC/B;YAEA,MAAMC,OAAOjD,QAAQ,oCAAoCkD,KAAK;YAC9D,IAAIC;YACJ,IAAI;gBACFA,YAAY,MAAM7C,WAAWuC;YAC/B,SAAU;gBACR,qEAAqE;gBACrEI,KAAKG,IAAI;YACX;YAEA,IAAID,UAAUE,MAAM,KAAK,GAAG;gBAC1B,IAAI,CAACC,GAAG,CACN,CAAC,cAAc,EAAE9D,UAAU,QAAQqD,gBAAgB,yCAAyC,CAAC;gBAE/F;YACF;YAEA,mEAAmE;YACnE,wEAAwE;YACxE,gEAAgE;YAChE,MAAMU,kBAAkB,IAAIC,IAAIvB,OAAOwB,MAAM,CAACC,GAAG,CAAC,CAACC,QAAUA,MAAMC,IAAI;YACvE,MAAMC,sBAAsB,IAAIC,IAAI7B,OAAOwB,MAAM,CAACC,GAAG,CAAC,CAACC,QAAU;oBAACA,MAAMC,IAAI;oBAAED,MAAMI,GAAG;iBAAC;YAExF,gFAAgF;YAChF,MAAM,EAACC,SAASC,OAAO,EAAEC,OAAO,EAAC,GAAG/D,uBAAuBgD;YAE3D,MAAMgB,YAAoC,EAAE;YAC5C,mEAAmE;YACnE,kDAAkD;YAClD,MAAMC,eAAe,IAAIN;YACzB,uEAAuE;YACvE,oEAAoE;YACpE,MAAMO,gBAAgB,IAAIP;YAC1B,KAAK,MAAMQ,UAAUL,QAAS;gBAC5B,IAAI,CAAClD,aAAawC,gBAAgBgB,GAAG,CAACD,OAAOV,IAAI,GAAG;oBAClDM,QAAQM,IAAI,CAAC;wBACXC,IAAIH,OAAOV,IAAI;wBACfc,SAAS;4BAAC;yBAAsE;wBAChFC,QAAQ;wBACRC,kBAAkB,EAAE;oBACtB;oBACA;gBACF;gBAEA,MAAMC,qBAAqBtF,KAAKuF,IAAI,CAAC1C,gBAAgBkC,OAAOS,QAAQ;gBACpE,oEAAoE;gBACpE,kDAAkD;gBAClD,MAAMC,WAAW,MAAMC,cAAc;oBACnCJ;oBACAA,mBAAmBK,OAAO,CAAC,UAAU;iBACtC;gBACD,IAAI,CAACnE,aAAaiE,UAAU;oBAC1B,gEAAgE;oBAChE,iEAAiE;oBACjE,mEAAmE;oBACnE,kEAAkE;oBAClEX,cAAcc,GAAG,CAACb,OAAOV,IAAI,EAAErE,KAAKiD,QAAQ,CAACN,KAAKI,SAAS,EAAE0C;oBAC7Dd,QAAQM,IAAI,CAAC;wBACXC,IAAIH,OAAOV,IAAI;wBACfc,SAAS;4BACP,CAAC,yBAAyB,EAAEnF,KAAKiD,QAAQ,CAACN,KAAKI,SAAS,EAAE0C,UAAU,iCAAiC,CAAC;yBACvG;wBACDL,QAAQ;wBACRC,kBAAkB,EAAE;oBACtB;oBACA;gBACF;gBAEA,mEAAmE;gBACnE,sEAAsE;gBACtE,sEAAsE;gBACtE,qEAAqE;gBACrE,+DAA+D;gBAC/D,MAAMQ,cAAcrE,YAAY8C,oBAAoBwB,GAAG,CAACf,OAAOV,IAAI,IAAI0B;gBACvE,MAAMC,cAAcH,cAChB,MAAMI,mBAAmBjG,KAAK8C,OAAO,CAACH,KAAKI,SAAS,EAAE8C,cAAcd,OAAOS,QAAQ,IAClFC,YAAYH;gBAEjB,MAAMzF,MAAMG,KAAKkG,OAAO,CAACF,cAAc;oBAACG,WAAW;gBAAI;gBACvD,MAAMpG,UAAUiG,aAAajB,OAAOqB,MAAM;gBAC1CvB,aAAae,GAAG,CAACb,OAAOV,IAAI,EAAErE,KAAKiD,QAAQ,CAACN,KAAKI,SAAS,EAAEiD;gBAC5DpB,UAAUK,IAAI,CAACF;YACjB;YAEA,yEAAyE;YACzE,sEAAsE;YACtE,qEAAqE;YACrE,wEAAwE;YACxE,oEAAoE;YACpE,uEAAuE;YACvE,kBAAkB;YAClB,MAAMsB,aAAa,IAAI9B,IAAI;mBAAIM;mBAAiBC;aAAc;YAC9D,MAAMwB,aAAa5B,QAAQ6B,MAAM,CAC/B,CAACxB,SAAW,CAACf,gBAAgBgB,GAAG,CAACD,OAAOV,IAAI,KAAKgC,WAAWrB,GAAG,CAACD,OAAOV,IAAI;YAE7E,MAAMmC,aACJF,WAAWxC,MAAM,GAAG,IAChBjD,mBAAmByF,YAAYtD,gBAAgBqD,YAAYI,KAAK,CAAC,QACjE,EAAE;YACR,MAAMC,eACJJ,WAAWxC,MAAM,GAAG,IAChB,MAAM,IAAI,CAAC6C,mBAAmB,CAAC;gBAACC,YAAYjE,KAAK3C,IAAI;gBAAEwG;YAAU,KACjE;YAEN,IAAI,CAACK,MAAM,CAAC;gBACV7C;gBACAwC;gBACA5B;gBACA0B;gBACAnE,QAAQa;gBACR0D;gBACA/B;gBACAE;YACF;QACF,EAAE,OAAOtC,OAAO;YACd,wEAAwE;YACxE,0EAA0E;YAC1E,IAAIA,iBAAiBuE,SAASvE,MAAM8B,IAAI,KAAK,mBAAmB,MAAM9B;YACtE,IAAIA,SAAS,OAAOA,UAAU,YAAY,WAAWA,OAAO,MAAMA;YAClE,MAAMD,MAAMC;YACZrB,iBAAiB,0BAA0B;gBAACqB,OAAOD;gBAAKgB,gBAAgBpB;YAAkB;YAC1F,IAAI,CAACK,KAAK,CACRtC,UAAU,QAAQ,4BAA4B,CAAC,IAAI,EAAEA,UAAU,OAAOqC,IAAIyE,OAAO,GAAG,EACpF;gBAACvE,MAAMrC,UAAUsC,aAAa;YAAA;QAElC;IACF;IAEA;;;;GAIC,GACD,MAAckE,oBAAoB,EAChCC,UAAU,EACVJ,UAAU,EAIX,EAAyB;QACxB,MAAMQ,OAAO,IAAI,CAAC5F,KAAK,CAAC,gBAAgB;QACxC,MAAM6F,eACJD,QACC,CAAA,IAAI,CAACvD,YAAY,KACd,QACA,MAAMlD,QAAQ;YACZgB,SAAS;YACTwF,SAAS,CAAC,YAAY,EAAEP,WAAW1C,MAAM,CAAC,QAAQ,EAAE9C,UAAU,SAASwF,WAAW1C,MAAM,EAAE,kBAAkB,CAAC;QAC/G,EAAC;QACP,IAAI,CAACmD,cAAc,OAAO;QAE1B,MAAMb,SAAS,MAAMtG,SAAS8G,YAAY;QAC1C,MAAMM,SAASvG,mBAAmByF,QAAQI;QAC1C,IAAI,CAACU,OAAOC,EAAE,EAAE,OAAO;YAACC,QAAQF,OAAOE,MAAM;QAAA;QAC7C,MAAMrH,UAAU6G,YAAYM,OAAOG,OAAO;QAC1C,OAAO;IACT;IAEQR,OAAO,EACb7C,eAAe,EACfwC,UAAU,EACV5B,SAAS,EACT0B,UAAU,EACVnE,MAAM,EACNuE,YAAY,EACZ/B,OAAO,EACPE,YAAY,EAUb,EAAQ;QACP,IAAIF,QAAQb,MAAM,GAAG,GAAG;YACtB,IAAI,CAACwD,WAAW,CAAC;YACjB,IAAI,CAACC,IAAI,CACPtH,UAAU,QAAQ,CAAC,QAAQ,EAAE0E,QAAQb,MAAM,CAAC,CAAC,EAAE9C,UAAU,UAAU2D,QAAQb,MAAM,GAAG;YAEtF,KAAK,MAAM0D,UAAU7C,QAAS;gBAC5B,MAAM8C,SAASD,OAAOnC,gBAAgB,CAACqC,OAAO,CAAC,CAACC,QAAUA,MAAMxD,GAAG,CAAC,CAAC,EAAC4C,OAAO,EAAC,GAAKA;gBACnF,MAAM5B,UAAU;uBAAIqC,OAAOrC,OAAO;uBAAKsC;iBAAO;gBAC9C,IAAI,CAACH,WAAW,CAAC,CAAC,IAAI,EAAEE,OAAOtC,EAAE,CAAC,CAAC,EAAEjF,UAAU,OAAOkF,QAAQI,IAAI,CAAC,QAAQ;YAC7E;QACF;QAEA,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAIX,UAAUd,MAAM,KAAK,KAAKwC,WAAWxC,MAAM,KAAK,GAAG;YACrD,IAAI,CAACC,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;YACT;QACF;QAEA,IAAIa,UAAUd,MAAM,KAAK,GAAG;YAC1B,IAAI,CAACC,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAAC;QACX,OAAO;YACL,IAAI,CAACA,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CACN,GAAGvD,WAAWoH,OAAO,CAAC,CAAC,EAAE3H,UAAU,QAAQ,CAAC,UAAU,EAAE2E,UAAUd,MAAM,CAAC,OAAO,EAAE9C,UAAU,UAAU4D,UAAUd,MAAM,GAAG,GAAG;YAE9H,KAAK,MAAMiB,UAAUH,UAAW;gBAC9B,MAAMiD,WAAWhD,aAAaiB,GAAG,CAACf,OAAOV,IAAI,KAAKrE,KAAKuF,IAAI,CAACpD,QAAQ4C,OAAOS,QAAQ;gBACnF,IAAI,CAACzB,GAAG,CAAC,CAAC,IAAI,EAAEgB,OAAOV,IAAI,CAAC,CAAC,EAAEpE,UAAU,OAAO4H,WAAW;gBAC3D,KAAK,MAAMC,WAAW/C,OAAOgD,QAAQ,CAAE;oBACrC,IAAI,CAAChE,GAAG,CAAC,CAAC,IAAI,EAAEvD,WAAWsH,OAAO,CAAC,CAAC,EAAEA,SAAS;gBACjD;YACF;QACF;QAEA,IAAIxB,WAAWxC,MAAM,GAAG,KAAK4C,iBAAiB,SAAS;YACrD,IAAI,CAAC3C,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CACN,GAAGvD,WAAWoH,OAAO,CAAC,UAAU,EAAEtB,WAAWxC,MAAM,CAAC,CAAC,EAAE9C,UAAU,SAASsF,WAAWxC,MAAM,EAAE,IAAI,EAAE7D,UAAU,QAAQ,kBAAkB;QAE3I,OAAO,IAAIqG,WAAWxC,MAAM,GAAG,GAAG;YAChC,IAAI4C,iBAAiB,QAAQ,OAAOA,iBAAiB,UAAU;gBAC7D,IAAI,CAACa,IAAI,CAAC,CAAC,8CAA8C,EAAEb,aAAaU,MAAM,EAAE;YAClF;YACA,IAAI,CAACrD,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CACNC,gBAAgBgE,IAAI,GAAG,IACnB,CAAC,eAAe,EAAEhH,UAAU,SAASsF,WAAWxC,MAAM,EAAE,4BAA4B,EAAE7D,UAAU,QAAQ,iBAAiB,CAAC,CAAC,GAC3H,CAAC,mBAAmB,EAAEe,UAAU,SAASsF,WAAWxC,MAAM,EAAE,IAAI,EAAE7D,UAAU,QAAQ,iBAAiB,CAAC,CAAC;YAE7G,IAAI,CAAC8D,GAAG,CAAC;YACT,IAAI,CAACA,GAAG,CAACyC,WAAWrC,GAAG,CAAC,CAAC8D,OAAS,CAAC,EAAE,EAAEA,MAAM,EAAE1C,IAAI,CAAC;YACpD,2EAA2E;YAC3E,yEAAyE;YACzE,IAAI,CAACgC,IAAI,CACP;QAEJ;QAEA,IAAI,CAACxD,GAAG,CAAC;QACT,IAAI,CAACA,GAAG,CACN;QAEF,IAAI,CAACA,GAAG,CAAC;QACT,IAAI,CAACA,GAAG,CAAC;IACX;AACF;AAEA;;;;;;CAMC,GACD,eAAekC,mBAAmBiC,YAAoB,EAAEC,cAAsB;IAC5E,IAAInI,KAAKoI,OAAO,CAACF,kBAAkB,IAAI,OAAOA;IAC9C,MAAMzC,WAAW,MAAMC,cAAc;QAAC,GAAGwC,aAAa,GAAG,CAAC;QAAE,GAAGA,aAAa,IAAI,CAAC;KAAC;IAClF,OAAOzC,YAAY,GAAGyC,eAAelI,KAAKoI,OAAO,CAACD,iBAAiB;AACrE;AAEA,2DAA2D,GAC3D,eAAezC,cAAc2C,KAAe;IAC1C,KAAK,MAAMC,YAAYD,MAAO;QAC5B,MAAME,SAAS,MAAM3I,OAAO0I,UAAUE,IAAI,CACxC,IAAM,MACN,IAAM;QAER,IAAID,QAAQ,OAAOD;IACrB;IACA,OAAOvC;AACT"}

package/dist/exports/invokeSanityCli/commandPolicies/mcpPolicy.js

@@ -71,6 +71,10 @@ function apiValidator({ args, flags }) {
     'context:build': conditionalDenyFlags('watch'),
     'context:create': allow,
     'context:delete': allow,
+    'context:entries:get': allow,
+    'context:entries:list': allow,
+    // See context:build — --watch has no deadline and would hang the MCP tool call.
+    'context:entries:rebuild': conditionalDenyFlags('watch'),
     'context:get': allow,
     // --file reads the import payload from the local filesystem; text, URL and
     // dataset imports are remote-only.
@@ -80,8 +84,17 @@ function apiValidator({ args, flags }) {
     'context:imports:get': allow,
     'context:imports:list': allow,
     // See context:build — --watch has no deadline and would hang the MCP tool call.
+    'context:issues:apply': conditionalDenyFlags('watch'),
+    'context:issues:dismiss': allow,
+    'context:issues:get': allow,
+    'context:issues:list': allow,
+    'context:issues:reopen': allow,
+    // See context:build — --watch has no deadline and would hang the MCP tool call.
+    'context:issues:resolve': conditionalDenyFlags('watch'),
+    // See context:build — --watch has no deadline and would hang the MCP tool call.
     'context:jobs:get': conditionalDenyFlags('watch'),
     'context:list': allow,
+    'context:query': allow,
     'context:refresh': allow,
     'context:update': allow,
     'cors:add': allow,
@@ -170,6 +183,10 @@ function apiValidator({ args, flags }) {
         ],
         validate: ({ args })=>typeof args.source === 'string' && isRemoteAssetSource(args.source)
     }),
+    // media:pull-aspects and media:prune-aspect-data are hidden while the
+    // config app is in beta, so they take the deny-by-default path like any
+    // unlisted command. The exhaustiveness test forces explicit entries when
+    // they are unhidden.
     // Creates migration source files in the local project.
     'migrations:create': deny,
     // Reads and loads migration definitions from the local project.

package/dist/exports/invokeSanityCli/commandPolicies/mcpPolicy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/exports/invokeSanityCli/commandPolicies/mcpPolicy.ts"],"sourcesContent":["import {\n  allow,\n  type CommandPolicySet,\n  conditionalDenyFlags,\n  conditionalPolicy,\n  deny,\n} from '@sanity/cli-core/commandPolicy'\n\nimport {isRemoteAssetSource} from '../../../util/isRemoteAssetSource.js'\n\nfunction apiValidator({\n  args,\n  flags,\n}: {\n  args: Readonly<Record<string, unknown>>\n  flags: Readonly<Record<string, unknown>>\n}): boolean {\n  const fields: unknown[] = Array.isArray(flags.field) ? flags.field : []\n\n  const fieldReadsFromHost = fields.some((field) => {\n    if (typeof field !== 'string') return false\n    const separatorIndex = field.indexOf('=')\n    return separatorIndex > 0 && field[separatorIndex + 1] === '@'\n  })\n  if (fieldReadsFromHost) return false\n\n  const headers: unknown[] = Array.isArray(flags.header) ? flags.header : []\n\n  const headerOverridesAuthentication = headers.some((header) => {\n    if (typeof header !== 'string') return false\n    const separatorIndex = header.indexOf(':')\n    if (separatorIndex <= 0) return false\n\n    const name = header.slice(0, separatorIndex).trim().toLowerCase()\n    return name === 'authorization' || name === 'cookie'\n  })\n\n  if (headerOverridesAuthentication) return false\n\n  const endpoint = typeof args.endpoint === 'string' ? URL.parse(args.endpoint) : null\n  const urlEmbedsCredentials =\n    endpoint !== null && (endpoint.username !== '' || endpoint.password !== '')\n\n  return !urlEmbedsCredentials\n}\n\n/**\n * MCP programmatic mode disables local project/config discovery (see the CLI\n * execution context). Missing project or dataset values may therefore produce\n * a usage error, but cannot cause local filesystem access. Destructive remote\n * operations are allowed and do not by themselves make a command unsafe.\n *\n * Every command this package contributes must have exactly one policy here:\n * - allow: every valid invocation is safe\n * - conditional: safety depends on parsed arguments or flags\n * - deny: no invocation is safe\n *\n * Commands contributed by plugins are not listed here. Each plugin declares\n * policies for its own commands (see `PluginInvocationPolicies` in\n * `@sanity/cli-core/commandPolicy`).\n */\nexport const mcpPolicy: CommandPolicySet = {\n  // Special exception, this can be very dangerous but is also super useful\n  // to expose. Refuse authentication overrides and host input channels:\n  // `--token`, Authorization, and Cookie headers replace the MCP user's authentication,\n  // URL-embedded credentials replace it with Basic authentication,\n  // `--input` reads the request body from the host's filesystem or stdin, and\n  // `-F key=@<file>` / `-F key=@-` field values do the same.\n  api: conditionalPolicy({\n    deniedFlags: ['input', 'token'],\n    validate: apiValidator,\n  }),\n\n  // --file reads from the machine running the command and must only run locally.\n  'assets:upload': conditionalPolicy({\n    deniedFlags: ['content-type', 'file'],\n    validate: ({flags}) => typeof flags['from-url'] === 'string' && flags['from-url'].length > 0,\n  }),\n\n  'backups:disable': allow,\n  // Writes a downloaded backup to the local filesystem.\n  'backups:download': deny,\n  'backups:enable': allow,\n  'backups:list': allow,\n\n  // Requires a local Studio project and writes build output to disk.\n  build: deny,\n\n  // Reads and rewrites local source code.\n  codemod: deny,\n\n  // --watch polls a job with no deadline; a stuck job would hang the MCP tool\n  // call indefinitely. Non-watch invocations are single remote requests.\n  'context:build': conditionalDenyFlags('watch'),\n  'context:create': allow,\n  'context:delete': allow,\n  'context:get': allow,\n  // --file reads the import payload from the local filesystem; text, URL and\n  // dataset imports are remote-only.\n  'context:imports:create': conditionalDenyFlags('file'),\n  'context:imports:delete': allow,\n  'context:imports:download': allow,\n  'context:imports:get': allow,\n  'context:imports:list': allow,\n  // See context:build — --watch has no deadline and would hang the MCP tool call.\n  'context:jobs:get': conditionalDenyFlags('watch'),\n  'context:list': allow,\n  'context:refresh': allow,\n  'context:update': allow,\n\n  'cors:add': allow,\n  'cors:delete': allow,\n  'cors:list': allow,\n\n  'datasets:alias:create': allow,\n  'datasets:alias:delete': allow,\n  'datasets:alias:link': allow,\n  'datasets:alias:unlink': allow,\n  'datasets:copy': allow,\n  'datasets:create': allow,\n  'datasets:delete': allow,\n  'datasets:embeddings:disable': allow,\n  'datasets:embeddings:enable': allow,\n  'datasets:embeddings:status': allow,\n  // Writes dataset contents and assets to the local filesystem.\n  'datasets:export': deny,\n  // Reads import data from the local filesystem and may replace documents.\n  'datasets:import': deny,\n  'datasets:list': allow,\n  'datasets:visibility:get': allow,\n  'datasets:visibility:set': allow,\n\n  // Inspects local project files and can print authentication secrets.\n  debug: deny,\n\n  // Reads, builds, and deploys a local Studio project.\n  deploy: deny,\n\n  // Loads a local Studio project and starts a development server.\n  dev: deny,\n\n  // Opens a browser on the machine running the MCP server.\n  'docs:browse': deny,\n  // --web opens a browser on the machine running the MCP server.\n  'docs:read': conditionalDenyFlags('web'),\n  'docs:search': allow,\n\n  // Reads and executes local project configuration for diagnostics.\n  doctor: deny,\n\n  // Reads document input from disk or launches a local editor.\n  'documents:create': deny,\n  'documents:delete': allow,\n  'documents:get': allow,\n  'documents:query': allow,\n  // Loads a local Studio schema to validate documents.\n  'documents:validate': deny,\n\n  // Executes arbitrary code in the local Studio context.\n  exec: deny,\n\n  // Loads a local schema and deploys a GraphQL API.\n  'graphql:deploy': deny,\n  'graphql:list': allow,\n  // --api loads GraphQL definitions from the local project; explicit project/dataset flags are safe.\n  'graphql:undeploy': conditionalDenyFlags('api'),\n\n  'hooks:attempt': allow,\n  'hooks:create': allow,\n  'hooks:delete': allow,\n  'hooks:list': allow,\n  'hooks:logs': allow,\n\n  // Creates or modifies a local project and may install dependencies.\n  init: deny,\n\n  // Installs packages into the local project.\n  install: deny,\n\n  // Opens a browser on the machine running the MCP server.\n  learn: deny,\n\n  // Performs an authentication flow.\n  login: deny,\n\n  // Performs an authentication operation and clears local credentials.\n  logout: deny,\n\n  // Reads local project configuration and opens a browser.\n  manage: deny,\n\n  // Loads local Studio configuration and writes manifest files.\n  'manifest:extract': deny,\n\n  // Reads and writes local MCP client configuration.\n  'mcp:configure': deny,\n\n  // Writes an aspect definition to the local filesystem.\n  'media:create-aspect': deny,\n  'media:delete-aspect': allow,\n  // Reads a local aspect definition before deploying it.\n  'media:deploy-aspect': deny,\n  // Writes media assets to the local filesystem.\n  'media:export': deny,\n  // A directory or archive source reads media assets from the local\n  // filesystem. A URL source does not: Sanity fetches the asset itself, so the\n  // only local input is the URL. `--replace-aspects` is meaningless for a URL\n  // source (the command rejects the combination), so it is hidden here rather\n  // than advertised as usable surface.\n  'media:import': conditionalPolicy({\n    deniedFlags: ['replace-aspects'],\n    validate: ({args}) => typeof args.source === 'string' && isRemoteAssetSource(args.source),\n  }),\n\n  // Creates migration source files in the local project.\n  'migrations:create': deny,\n  // Reads and loads migration definitions from the local project.\n  'migrations:list': deny,\n  // Executes local migration code that may perform arbitrary document mutations.\n  'migrations:run': deny,\n\n  // Writes project setup values and scaffolds local applications.\n  new: deny,\n\n  // --web opens a browser on the machine running the MCP server.\n  'openapi:get': conditionalDenyFlags('web'),\n  'openapi:list': conditionalDenyFlags('web'),\n\n  'organizations:create': allow,\n  'organizations:delete': allow,\n  'organizations:get': allow,\n  'organizations:list': allow,\n  'organizations:update': allow,\n\n  // Serves a local production build.\n  preview: deny,\n\n  'projects:create': allow,\n  'projects:list': allow,\n  // Reads locally stored claim URLs and robot tokens.\n  'projects:unclaimed': deny,\n\n  // Loads the local Studio configuration to resolve the datasets containing each schema.\n  'schemas:delete': deny,\n  // Loads local schema files before deploying them.\n  'schemas:deploy': deny,\n  // Loads local Studio configuration and writes an extracted schema to disk.\n  'schemas:extract': deny,\n  // Requires a local project and loads its schema configuration.\n  'schemas:list': deny,\n  // Loads and executes a local Studio schema.\n  'schemas:validate': deny,\n\n  // Installs skills into local editor configuration directories.\n  'skills:install': deny,\n\n  // Changes account telemetry preferences and mutates local cached configuration.\n  'telemetry:disable': deny,\n  // Changes account telemetry preferences and mutates local cached configuration.\n  'telemetry:enable': deny,\n  'telemetry:status': allow,\n\n  // Creates authentication credentials.\n  'tokens:create': deny,\n  // Deletes authentication credentials.\n  'tokens:delete': deny,\n  // Exposes authentication credential metadata.\n  'tokens:list': deny,\n  // Replaces authentication credentials and exposes the new secret.\n  'tokens:rotate': deny,\n\n  // Reads the local schema and source files and writes generated types to the project.\n  'typegen:generate': deny,\n\n  // Loads local CLI and workbench configuration to identify the deployed Studio or application.\n  undeploy: deny,\n\n  // Grants a user access to a project.\n  'users:invite': deny,\n  'users:list': allow,\n\n  // Reads the local project and installed package tree.\n  versions: deny,\n\n  // Reads the authenticated user from the API using the execution context token.\n  whoami: allow,\n}\n"],"names":["allow","conditionalDenyFlags","conditionalPolicy","deny","isRemoteAssetSource","apiValidator","args","flags","fields","Array","isArray","field","fieldReadsFromHost","some","separatorIndex","indexOf","headers","header","headerOverridesAuthentication","name","slice","trim","toLowerCase","endpoint","URL","parse","urlEmbedsCredentials","username","password","mcpPolicy","api","deniedFlags","validate","length","build","codemod","debug","deploy","dev","doctor","exec","init","install","learn","login","logout","manage","source","new","preview","undeploy","versions","whoami"],"mappings":"AAAA,SACEA,KAAK,EAELC,oBAAoB,EACpBC,iBAAiB,EACjBC,IAAI,QACC,iCAAgC;AAEvC,SAAQC,mBAAmB,QAAO,uCAAsC;AAExE,SAASC,aAAa,EACpBC,IAAI,EACJC,KAAK,EAIN;IACC,MAAMC,SAAoBC,MAAMC,OAAO,CAACH,MAAMI,KAAK,IAAIJ,MAAMI,KAAK,GAAG,EAAE;IAEvE,MAAMC,qBAAqBJ,OAAOK,IAAI,CAAC,CAACF;QACtC,IAAI,OAAOA,UAAU,UAAU,OAAO;QACtC,MAAMG,iBAAiBH,MAAMI,OAAO,CAAC;QACrC,OAAOD,iBAAiB,KAAKH,KAAK,CAACG,iBAAiB,EAAE,KAAK;IAC7D;IACA,IAAIF,oBAAoB,OAAO;IAE/B,MAAMI,UAAqBP,MAAMC,OAAO,CAACH,MAAMU,MAAM,IAAIV,MAAMU,MAAM,GAAG,EAAE;IAE1E,MAAMC,gCAAgCF,QAAQH,IAAI,CAAC,CAACI;QAClD,IAAI,OAAOA,WAAW,UAAU,OAAO;QACvC,MAAMH,iBAAiBG,OAAOF,OAAO,CAAC;QACtC,IAAID,kBAAkB,GAAG,OAAO;QAEhC,MAAMK,OAAOF,OAAOG,KAAK,CAAC,GAAGN,gBAAgBO,IAAI,GAAGC,WAAW;QAC/D,OAAOH,SAAS,mBAAmBA,SAAS;IAC9C;IAEA,IAAID,+BAA+B,OAAO;IAE1C,MAAMK,WAAW,OAAOjB,KAAKiB,QAAQ,KAAK,WAAWC,IAAIC,KAAK,CAACnB,KAAKiB,QAAQ,IAAI;IAChF,MAAMG,uBACJH,aAAa,QAASA,CAAAA,SAASI,QAAQ,KAAK,MAAMJ,SAASK,QAAQ,KAAK,EAAC;IAE3E,OAAO,CAACF;AACV;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,MAAMG,YAA8B;IACzC,yEAAyE;IACzE,sEAAsE;IACtE,sFAAsF;IACtF,iEAAiE;IACjE,4EAA4E;IAC5E,2DAA2D;IAC3DC,KAAK5B,kBAAkB;QACrB6B,aAAa;YAAC;YAAS;SAAQ;QAC/BC,UAAU3B;IACZ;IAEA,+EAA+E;IAC/E,iBAAiBH,kBAAkB;QACjC6B,aAAa;YAAC;YAAgB;SAAO;QACrCC,UAAU,CAAC,EAACzB,KAAK,EAAC,GAAK,OAAOA,KAAK,CAAC,WAAW,KAAK,YAAYA,KAAK,CAAC,WAAW,CAAC0B,MAAM,GAAG;IAC7F;IAEA,mBAAmBjC;IACnB,sDAAsD;IACtD,oBAAoBG;IACpB,kBAAkBH;IAClB,gBAAgBA;IAEhB,mEAAmE;IACnEkC,OAAO/B;IAEP,wCAAwC;IACxCgC,SAAShC;IAET,4EAA4E;IAC5E,uEAAuE;IACvE,iBAAiBF,qBAAqB;IACtC,kBAAkBD;IAClB,kBAAkBA;IAClB,eAAeA;IACf,2EAA2E;IAC3E,mCAAmC;IACnC,0BAA0BC,qBAAqB;IAC/C,0BAA0BD;IAC1B,4BAA4BA;IAC5B,uBAAuBA;IACvB,wBAAwBA;IACxB,gFAAgF;IAChF,oBAAoBC,qBAAqB;IACzC,gBAAgBD;IAChB,mBAAmBA;IACnB,kBAAkBA;IAElB,YAAYA;IACZ,eAAeA;IACf,aAAaA;IAEb,yBAAyBA;IACzB,yBAAyBA;IACzB,uBAAuBA;IACvB,yBAAyBA;IACzB,iBAAiBA;IACjB,mBAAmBA;IACnB,mBAAmBA;IACnB,+BAA+BA;IAC/B,8BAA8BA;IAC9B,8BAA8BA;IAC9B,8DAA8D;IAC9D,mBAAmBG;IACnB,yEAAyE;IACzE,mBAAmBA;IACnB,iBAAiBH;IACjB,2BAA2BA;IAC3B,2BAA2BA;IAE3B,qEAAqE;IACrEoC,OAAOjC;IAEP,qDAAqD;IACrDkC,QAAQlC;IAER,gEAAgE;IAChEmC,KAAKnC;IAEL,yDAAyD;IACzD,eAAeA;IACf,+DAA+D;IAC/D,aAAaF,qBAAqB;IAClC,eAAeD;IAEf,kEAAkE;IAClEuC,QAAQpC;IAER,6DAA6D;IAC7D,oBAAoBA;IACpB,oBAAoBH;IACpB,iBAAiBA;IACjB,mBAAmBA;IACnB,qDAAqD;IACrD,sBAAsBG;IAEtB,uDAAuD;IACvDqC,MAAMrC;IAEN,kDAAkD;IAClD,kBAAkBA;IAClB,gBAAgBH;IAChB,mGAAmG;IACnG,oBAAoBC,qBAAqB;IAEzC,iBAAiBD;IACjB,gBAAgBA;IAChB,gBAAgBA;IAChB,cAAcA;IACd,cAAcA;IAEd,oEAAoE;IACpEyC,MAAMtC;IAEN,4CAA4C;IAC5CuC,SAASvC;IAET,yDAAyD;IACzDwC,OAAOxC;IAEP,mCAAmC;IACnCyC,OAAOzC;IAEP,qEAAqE;IACrE0C,QAAQ1C;IAER,yDAAyD;IACzD2C,QAAQ3C;IAER,8DAA8D;IAC9D,oBAAoBA;IAEpB,mDAAmD;IACnD,iBAAiBA;IAEjB,uDAAuD;IACvD,uBAAuBA;IACvB,uBAAuBH;IACvB,uDAAuD;IACvD,uBAAuBG;IACvB,+CAA+C;IAC/C,gBAAgBA;IAChB,kEAAkE;IAClE,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,qCAAqC;IACrC,gBAAgBD,kBAAkB;QAChC6B,aAAa;YAAC;SAAkB;QAChCC,UAAU,CAAC,EAAC1B,IAAI,EAAC,GAAK,OAAOA,KAAKyC,MAAM,KAAK,YAAY3C,oBAAoBE,KAAKyC,MAAM;IAC1F;IAEA,uDAAuD;IACvD,qBAAqB5C;IACrB,gEAAgE;IAChE,mBAAmBA;IACnB,+EAA+E;IAC/E,kBAAkBA;IAElB,gEAAgE;IAChE6C,KAAK7C;IAEL,+DAA+D;IAC/D,eAAeF,qBAAqB;IACpC,gBAAgBA,qBAAqB;IAErC,wBAAwBD;IACxB,wBAAwBA;IACxB,qBAAqBA;IACrB,sBAAsBA;IACtB,wBAAwBA;IAExB,mCAAmC;IACnCiD,SAAS9C;IAET,mBAAmBH;IACnB,iBAAiBA;IACjB,oDAAoD;IACpD,sBAAsBG;IAEtB,uFAAuF;IACvF,kBAAkBA;IAClB,kDAAkD;IAClD,kBAAkBA;IAClB,2EAA2E;IAC3E,mBAAmBA;IACnB,+DAA+D;IAC/D,gBAAgBA;IAChB,4CAA4C;IAC5C,oBAAoBA;IAEpB,+DAA+D;IAC/D,kBAAkBA;IAElB,gFAAgF;IAChF,qBAAqBA;IACrB,gFAAgF;IAChF,oBAAoBA;IACpB,oBAAoBH;IAEpB,sCAAsC;IACtC,iBAAiBG;IACjB,sCAAsC;IACtC,iBAAiBA;IACjB,8CAA8C;IAC9C,eAAeA;IACf,kEAAkE;IAClE,iBAAiBA;IAEjB,qFAAqF;IACrF,oBAAoBA;IAEpB,8FAA8F;IAC9F+C,UAAU/C;IAEV,qCAAqC;IACrC,gBAAgBA;IAChB,cAAcH;IAEd,sDAAsD;IACtDmD,UAAUhD;IAEV,+EAA+E;IAC/EiD,QAAQpD;AACV,EAAC"}
+{"version":3,"sources":["../../../../src/exports/invokeSanityCli/commandPolicies/mcpPolicy.ts"],"sourcesContent":["import {\n  allow,\n  type CommandPolicySet,\n  conditionalDenyFlags,\n  conditionalPolicy,\n  deny,\n} from '@sanity/cli-core/commandPolicy'\n\nimport {isRemoteAssetSource} from '../../../util/isRemoteAssetSource.js'\n\nfunction apiValidator({\n  args,\n  flags,\n}: {\n  args: Readonly<Record<string, unknown>>\n  flags: Readonly<Record<string, unknown>>\n}): boolean {\n  const fields: unknown[] = Array.isArray(flags.field) ? flags.field : []\n\n  const fieldReadsFromHost = fields.some((field) => {\n    if (typeof field !== 'string') return false\n    const separatorIndex = field.indexOf('=')\n    return separatorIndex > 0 && field[separatorIndex + 1] === '@'\n  })\n  if (fieldReadsFromHost) return false\n\n  const headers: unknown[] = Array.isArray(flags.header) ? flags.header : []\n\n  const headerOverridesAuthentication = headers.some((header) => {\n    if (typeof header !== 'string') return false\n    const separatorIndex = header.indexOf(':')\n    if (separatorIndex <= 0) return false\n\n    const name = header.slice(0, separatorIndex).trim().toLowerCase()\n    return name === 'authorization' || name === 'cookie'\n  })\n\n  if (headerOverridesAuthentication) return false\n\n  const endpoint = typeof args.endpoint === 'string' ? URL.parse(args.endpoint) : null\n  const urlEmbedsCredentials =\n    endpoint !== null && (endpoint.username !== '' || endpoint.password !== '')\n\n  return !urlEmbedsCredentials\n}\n\n/**\n * MCP programmatic mode disables local project/config discovery (see the CLI\n * execution context). Missing project or dataset values may therefore produce\n * a usage error, but cannot cause local filesystem access. Destructive remote\n * operations are allowed and do not by themselves make a command unsafe.\n *\n * Every command this package contributes must have exactly one policy here:\n * - allow: every valid invocation is safe\n * - conditional: safety depends on parsed arguments or flags\n * - deny: no invocation is safe\n *\n * Commands contributed by plugins are not listed here. Each plugin declares\n * policies for its own commands (see `PluginInvocationPolicies` in\n * `@sanity/cli-core/commandPolicy`).\n */\nexport const mcpPolicy: CommandPolicySet = {\n  // Special exception, this can be very dangerous but is also super useful\n  // to expose. Refuse authentication overrides and host input channels:\n  // `--token`, Authorization, and Cookie headers replace the MCP user's authentication,\n  // URL-embedded credentials replace it with Basic authentication,\n  // `--input` reads the request body from the host's filesystem or stdin, and\n  // `-F key=@<file>` / `-F key=@-` field values do the same.\n  api: conditionalPolicy({\n    deniedFlags: ['input', 'token'],\n    validate: apiValidator,\n  }),\n\n  // --file reads from the machine running the command and must only run locally.\n  'assets:upload': conditionalPolicy({\n    deniedFlags: ['content-type', 'file'],\n    validate: ({flags}) => typeof flags['from-url'] === 'string' && flags['from-url'].length > 0,\n  }),\n\n  'backups:disable': allow,\n  // Writes a downloaded backup to the local filesystem.\n  'backups:download': deny,\n  'backups:enable': allow,\n  'backups:list': allow,\n\n  // Requires a local Studio project and writes build output to disk.\n  build: deny,\n\n  // Reads and rewrites local source code.\n  codemod: deny,\n\n  // --watch polls a job with no deadline; a stuck job would hang the MCP tool\n  // call indefinitely. Non-watch invocations are single remote requests.\n  'context:build': conditionalDenyFlags('watch'),\n  'context:create': allow,\n  'context:delete': allow,\n  'context:entries:get': allow,\n  'context:entries:list': allow,\n  // See context:build — --watch has no deadline and would hang the MCP tool call.\n  'context:entries:rebuild': conditionalDenyFlags('watch'),\n  'context:get': allow,\n  // --file reads the import payload from the local filesystem; text, URL and\n  // dataset imports are remote-only.\n  'context:imports:create': conditionalDenyFlags('file'),\n  'context:imports:delete': allow,\n  'context:imports:download': allow,\n  'context:imports:get': allow,\n  'context:imports:list': allow,\n  // See context:build — --watch has no deadline and would hang the MCP tool call.\n  'context:issues:apply': conditionalDenyFlags('watch'),\n  'context:issues:dismiss': allow,\n  'context:issues:get': allow,\n  'context:issues:list': allow,\n  'context:issues:reopen': allow,\n  // See context:build — --watch has no deadline and would hang the MCP tool call.\n  'context:issues:resolve': conditionalDenyFlags('watch'),\n  // See context:build — --watch has no deadline and would hang the MCP tool call.\n  'context:jobs:get': conditionalDenyFlags('watch'),\n  'context:list': allow,\n  'context:query': allow,\n  'context:refresh': allow,\n  'context:update': allow,\n\n  'cors:add': allow,\n  'cors:delete': allow,\n  'cors:list': allow,\n\n  'datasets:alias:create': allow,\n  'datasets:alias:delete': allow,\n  'datasets:alias:link': allow,\n  'datasets:alias:unlink': allow,\n  'datasets:copy': allow,\n  'datasets:create': allow,\n  'datasets:delete': allow,\n  'datasets:embeddings:disable': allow,\n  'datasets:embeddings:enable': allow,\n  'datasets:embeddings:status': allow,\n  // Writes dataset contents and assets to the local filesystem.\n  'datasets:export': deny,\n  // Reads import data from the local filesystem and may replace documents.\n  'datasets:import': deny,\n  'datasets:list': allow,\n  'datasets:visibility:get': allow,\n  'datasets:visibility:set': allow,\n\n  // Inspects local project files and can print authentication secrets.\n  debug: deny,\n\n  // Reads, builds, and deploys a local Studio project.\n  deploy: deny,\n\n  // Loads a local Studio project and starts a development server.\n  dev: deny,\n\n  // Opens a browser on the machine running the MCP server.\n  'docs:browse': deny,\n  // --web opens a browser on the machine running the MCP server.\n  'docs:read': conditionalDenyFlags('web'),\n  'docs:search': allow,\n\n  // Reads and executes local project configuration for diagnostics.\n  doctor: deny,\n\n  // Reads document input from disk or launches a local editor.\n  'documents:create': deny,\n  'documents:delete': allow,\n  'documents:get': allow,\n  'documents:query': allow,\n  // Loads a local Studio schema to validate documents.\n  'documents:validate': deny,\n\n  // Executes arbitrary code in the local Studio context.\n  exec: deny,\n\n  // Loads a local schema and deploys a GraphQL API.\n  'graphql:deploy': deny,\n  'graphql:list': allow,\n  // --api loads GraphQL definitions from the local project; explicit project/dataset flags are safe.\n  'graphql:undeploy': conditionalDenyFlags('api'),\n\n  'hooks:attempt': allow,\n  'hooks:create': allow,\n  'hooks:delete': allow,\n  'hooks:list': allow,\n  'hooks:logs': allow,\n\n  // Creates or modifies a local project and may install dependencies.\n  init: deny,\n\n  // Installs packages into the local project.\n  install: deny,\n\n  // Opens a browser on the machine running the MCP server.\n  learn: deny,\n\n  // Performs an authentication flow.\n  login: deny,\n\n  // Performs an authentication operation and clears local credentials.\n  logout: deny,\n\n  // Reads local project configuration and opens a browser.\n  manage: deny,\n\n  // Loads local Studio configuration and writes manifest files.\n  'manifest:extract': deny,\n\n  // Reads and writes local MCP client configuration.\n  'mcp:configure': deny,\n\n  // Writes an aspect definition to the local filesystem.\n  'media:create-aspect': deny,\n  'media:delete-aspect': allow,\n  // Reads a local aspect definition before deploying it.\n  'media:deploy-aspect': deny,\n  // Writes media assets to the local filesystem.\n  'media:export': deny,\n  // A directory or archive source reads media assets from the local\n  // filesystem. A URL source does not: Sanity fetches the asset itself, so the\n  // only local input is the URL. `--replace-aspects` is meaningless for a URL\n  // source (the command rejects the combination), so it is hidden here rather\n  // than advertised as usable surface.\n  'media:import': conditionalPolicy({\n    deniedFlags: ['replace-aspects'],\n    validate: ({args}) => typeof args.source === 'string' && isRemoteAssetSource(args.source),\n  }),\n  // media:pull-aspects and media:prune-aspect-data are hidden while the\n  // config app is in beta, so they take the deny-by-default path like any\n  // unlisted command. The exhaustiveness test forces explicit entries when\n  // they are unhidden.\n\n  // Creates migration source files in the local project.\n  'migrations:create': deny,\n  // Reads and loads migration definitions from the local project.\n  'migrations:list': deny,\n  // Executes local migration code that may perform arbitrary document mutations.\n  'migrations:run': deny,\n\n  // Writes project setup values and scaffolds local applications.\n  new: deny,\n\n  // --web opens a browser on the machine running the MCP server.\n  'openapi:get': conditionalDenyFlags('web'),\n  'openapi:list': conditionalDenyFlags('web'),\n\n  'organizations:create': allow,\n  'organizations:delete': allow,\n  'organizations:get': allow,\n  'organizations:list': allow,\n  'organizations:update': allow,\n\n  // Serves a local production build.\n  preview: deny,\n\n  'projects:create': allow,\n  'projects:list': allow,\n  // Reads locally stored claim URLs and robot tokens.\n  'projects:unclaimed': deny,\n\n  // Loads the local Studio configuration to resolve the datasets containing each schema.\n  'schemas:delete': deny,\n  // Loads local schema files before deploying them.\n  'schemas:deploy': deny,\n  // Loads local Studio configuration and writes an extracted schema to disk.\n  'schemas:extract': deny,\n  // Requires a local project and loads its schema configuration.\n  'schemas:list': deny,\n  // Loads and executes a local Studio schema.\n  'schemas:validate': deny,\n\n  // Installs skills into local editor configuration directories.\n  'skills:install': deny,\n\n  // Changes account telemetry preferences and mutates local cached configuration.\n  'telemetry:disable': deny,\n  // Changes account telemetry preferences and mutates local cached configuration.\n  'telemetry:enable': deny,\n  'telemetry:status': allow,\n\n  // Creates authentication credentials.\n  'tokens:create': deny,\n  // Deletes authentication credentials.\n  'tokens:delete': deny,\n  // Exposes authentication credential metadata.\n  'tokens:list': deny,\n  // Replaces authentication credentials and exposes the new secret.\n  'tokens:rotate': deny,\n\n  // Reads the local schema and source files and writes generated types to the project.\n  'typegen:generate': deny,\n\n  // Loads local CLI and workbench configuration to identify the deployed Studio or application.\n  undeploy: deny,\n\n  // Grants a user access to a project.\n  'users:invite': deny,\n  'users:list': allow,\n\n  // Reads the local project and installed package tree.\n  versions: deny,\n\n  // Reads the authenticated user from the API using the execution context token.\n  whoami: allow,\n}\n"],"names":["allow","conditionalDenyFlags","conditionalPolicy","deny","isRemoteAssetSource","apiValidator","args","flags","fields","Array","isArray","field","fieldReadsFromHost","some","separatorIndex","indexOf","headers","header","headerOverridesAuthentication","name","slice","trim","toLowerCase","endpoint","URL","parse","urlEmbedsCredentials","username","password","mcpPolicy","api","deniedFlags","validate","length","build","codemod","debug","deploy","dev","doctor","exec","init","install","learn","login","logout","manage","source","new","preview","undeploy","versions","whoami"],"mappings":"AAAA,SACEA,KAAK,EAELC,oBAAoB,EACpBC,iBAAiB,EACjBC,IAAI,QACC,iCAAgC;AAEvC,SAAQC,mBAAmB,QAAO,uCAAsC;AAExE,SAASC,aAAa,EACpBC,IAAI,EACJC,KAAK,EAIN;IACC,MAAMC,SAAoBC,MAAMC,OAAO,CAACH,MAAMI,KAAK,IAAIJ,MAAMI,KAAK,GAAG,EAAE;IAEvE,MAAMC,qBAAqBJ,OAAOK,IAAI,CAAC,CAACF;QACtC,IAAI,OAAOA,UAAU,UAAU,OAAO;QACtC,MAAMG,iBAAiBH,MAAMI,OAAO,CAAC;QACrC,OAAOD,iBAAiB,KAAKH,KAAK,CAACG,iBAAiB,EAAE,KAAK;IAC7D;IACA,IAAIF,oBAAoB,OAAO;IAE/B,MAAMI,UAAqBP,MAAMC,OAAO,CAACH,MAAMU,MAAM,IAAIV,MAAMU,MAAM,GAAG,EAAE;IAE1E,MAAMC,gCAAgCF,QAAQH,IAAI,CAAC,CAACI;QAClD,IAAI,OAAOA,WAAW,UAAU,OAAO;QACvC,MAAMH,iBAAiBG,OAAOF,OAAO,CAAC;QACtC,IAAID,kBAAkB,GAAG,OAAO;QAEhC,MAAMK,OAAOF,OAAOG,KAAK,CAAC,GAAGN,gBAAgBO,IAAI,GAAGC,WAAW;QAC/D,OAAOH,SAAS,mBAAmBA,SAAS;IAC9C;IAEA,IAAID,+BAA+B,OAAO;IAE1C,MAAMK,WAAW,OAAOjB,KAAKiB,QAAQ,KAAK,WAAWC,IAAIC,KAAK,CAACnB,KAAKiB,QAAQ,IAAI;IAChF,MAAMG,uBACJH,aAAa,QAASA,CAAAA,SAASI,QAAQ,KAAK,MAAMJ,SAASK,QAAQ,KAAK,EAAC;IAE3E,OAAO,CAACF;AACV;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,MAAMG,YAA8B;IACzC,yEAAyE;IACzE,sEAAsE;IACtE,sFAAsF;IACtF,iEAAiE;IACjE,4EAA4E;IAC5E,2DAA2D;IAC3DC,KAAK5B,kBAAkB;QACrB6B,aAAa;YAAC;YAAS;SAAQ;QAC/BC,UAAU3B;IACZ;IAEA,+EAA+E;IAC/E,iBAAiBH,kBAAkB;QACjC6B,aAAa;YAAC;YAAgB;SAAO;QACrCC,UAAU,CAAC,EAACzB,KAAK,EAAC,GAAK,OAAOA,KAAK,CAAC,WAAW,KAAK,YAAYA,KAAK,CAAC,WAAW,CAAC0B,MAAM,GAAG;IAC7F;IAEA,mBAAmBjC;IACnB,sDAAsD;IACtD,oBAAoBG;IACpB,kBAAkBH;IAClB,gBAAgBA;IAEhB,mEAAmE;IACnEkC,OAAO/B;IAEP,wCAAwC;IACxCgC,SAAShC;IAET,4EAA4E;IAC5E,uEAAuE;IACvE,iBAAiBF,qBAAqB;IACtC,kBAAkBD;IAClB,kBAAkBA;IAClB,uBAAuBA;IACvB,wBAAwBA;IACxB,gFAAgF;IAChF,2BAA2BC,qBAAqB;IAChD,eAAeD;IACf,2EAA2E;IAC3E,mCAAmC;IACnC,0BAA0BC,qBAAqB;IAC/C,0BAA0BD;IAC1B,4BAA4BA;IAC5B,uBAAuBA;IACvB,wBAAwBA;IACxB,gFAAgF;IAChF,wBAAwBC,qBAAqB;IAC7C,0BAA0BD;IAC1B,sBAAsBA;IACtB,uBAAuBA;IACvB,yBAAyBA;IACzB,gFAAgF;IAChF,0BAA0BC,qBAAqB;IAC/C,gFAAgF;IAChF,oBAAoBA,qBAAqB;IACzC,gBAAgBD;IAChB,iBAAiBA;IACjB,mBAAmBA;IACnB,kBAAkBA;IAElB,YAAYA;IACZ,eAAeA;IACf,aAAaA;IAEb,yBAAyBA;IACzB,yBAAyBA;IACzB,uBAAuBA;IACvB,yBAAyBA;IACzB,iBAAiBA;IACjB,mBAAmBA;IACnB,mBAAmBA;IACnB,+BAA+BA;IAC/B,8BAA8BA;IAC9B,8BAA8BA;IAC9B,8DAA8D;IAC9D,mBAAmBG;IACnB,yEAAyE;IACzE,mBAAmBA;IACnB,iBAAiBH;IACjB,2BAA2BA;IAC3B,2BAA2BA;IAE3B,qEAAqE;IACrEoC,OAAOjC;IAEP,qDAAqD;IACrDkC,QAAQlC;IAER,gEAAgE;IAChEmC,KAAKnC;IAEL,yDAAyD;IACzD,eAAeA;IACf,+DAA+D;IAC/D,aAAaF,qBAAqB;IAClC,eAAeD;IAEf,kEAAkE;IAClEuC,QAAQpC;IAER,6DAA6D;IAC7D,oBAAoBA;IACpB,oBAAoBH;IACpB,iBAAiBA;IACjB,mBAAmBA;IACnB,qDAAqD;IACrD,sBAAsBG;IAEtB,uDAAuD;IACvDqC,MAAMrC;IAEN,kDAAkD;IAClD,kBAAkBA;IAClB,gBAAgBH;IAChB,mGAAmG;IACnG,oBAAoBC,qBAAqB;IAEzC,iBAAiBD;IACjB,gBAAgBA;IAChB,gBAAgBA;IAChB,cAAcA;IACd,cAAcA;IAEd,oEAAoE;IACpEyC,MAAMtC;IAEN,4CAA4C;IAC5CuC,SAASvC;IAET,yDAAyD;IACzDwC,OAAOxC;IAEP,mCAAmC;IACnCyC,OAAOzC;IAEP,qEAAqE;IACrE0C,QAAQ1C;IAER,yDAAyD;IACzD2C,QAAQ3C;IAER,8DAA8D;IAC9D,oBAAoBA;IAEpB,mDAAmD;IACnD,iBAAiBA;IAEjB,uDAAuD;IACvD,uBAAuBA;IACvB,uBAAuBH;IACvB,uDAAuD;IACvD,uBAAuBG;IACvB,+CAA+C;IAC/C,gBAAgBA;IAChB,kEAAkE;IAClE,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,qCAAqC;IACrC,gBAAgBD,kBAAkB;QAChC6B,aAAa;YAAC;SAAkB;QAChCC,UAAU,CAAC,EAAC1B,IAAI,EAAC,GAAK,OAAOA,KAAKyC,MAAM,KAAK,YAAY3C,oBAAoBE,KAAKyC,MAAM;IAC1F;IACA,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,qBAAqB;IAErB,uDAAuD;IACvD,qBAAqB5C;IACrB,gEAAgE;IAChE,mBAAmBA;IACnB,+EAA+E;IAC/E,kBAAkBA;IAElB,gEAAgE;IAChE6C,KAAK7C;IAEL,+DAA+D;IAC/D,eAAeF,qBAAqB;IACpC,gBAAgBA,qBAAqB;IAErC,wBAAwBD;IACxB,wBAAwBA;IACxB,qBAAqBA;IACrB,sBAAsBA;IACtB,wBAAwBA;IAExB,mCAAmC;IACnCiD,SAAS9C;IAET,mBAAmBH;IACnB,iBAAiBA;IACjB,oDAAoD;IACpD,sBAAsBG;IAEtB,uFAAuF;IACvF,kBAAkBA;IAClB,kDAAkD;IAClD,kBAAkBA;IAClB,2EAA2E;IAC3E,mBAAmBA;IACnB,+DAA+D;IAC/D,gBAAgBA;IAChB,4CAA4C;IAC5C,oBAAoBA;IAEpB,+DAA+D;IAC/D,kBAAkBA;IAElB,gFAAgF;IAChF,qBAAqBA;IACrB,gFAAgF;IAChF,oBAAoBA;IACpB,oBAAoBH;IAEpB,sCAAsC;IACtC,iBAAiBG;IACjB,sCAAsC;IACtC,iBAAiBA;IACjB,8CAA8C;IAC9C,eAAeA;IACf,kEAAkE;IAClE,iBAAiBA;IAEjB,qFAAqF;IACrF,oBAAoBA;IAEpB,8FAA8F;IAC9F+C,UAAU/C;IAEV,qCAAqC;IACrC,gBAAgBA;IAChB,cAAcH;IAEd,sDAAsD;IACtDmD,UAAUhD;IAEV,+EAA+E;IAC/EiD,QAAQpD;AACV,EAAC"}

package/dist/services/context.js

@@ -1,10 +1,11 @@
 import { getGlobalCliClient } from '@sanity/cli-core';
 const CONTEXT_API_VERSION = 'v2026-08-25';
 /**
- * Knowledge-base-scoped methods on `client.context` (imports, builds, jobs)
- * operate on the client's configured `resource`; collection-level methods
+ * Knowledge-base-scoped methods on `client.context` operate on the client's
+ * configured `resource`; collection-level methods
  * (`client.context.knowledgeBases.*`) are addressed per call and need none.
- */ async function getContextClient(knowledgeBaseId) {
+ * GROQ-backed reads also need `context.organizationId`.
+ */ async function getContextClient(knowledgeBaseId, organizationId) {
     return getGlobalCliClient({
         apiVersion: CONTEXT_API_VERSION,
         requireUser: true,
@@ -13,9 +14,22 @@ const CONTEXT_API_VERSION = 'v2026-08-25';
                 id: knowledgeBaseId,
                 type: 'knowledge-base'
             }
+        },
+        ...organizationId === undefined ? {} : {
+            context: {
+                organizationId
+            }
         }
     });
 }
+/**
+ * GROQ-backed reads (issues, entries) query the organization's
+ * document store, where documents are keyed by the knowledge base's public ID.
+ * Fetching the knowledge base resolves both, whichever of its IDs was passed.
+ */ async function getContextStoreClient(knowledgeBaseId) {
+    const { organizationId, publicId } = await getKnowledgeBase(knowledgeBaseId);
+    return getContextClient(publicId, organizationId);
+}
 /**
  * Create a knowledge base in an organization
  */ export async function createKnowledgeBase(params) {
@@ -128,5 +142,84 @@ const CONTEXT_API_VERSION = 'v2026-08-25';
         jobId
     });
 }
+/**
+ * List all issues for a knowledge base, optionally narrowed to one status
+ */ export async function listIssues(knowledgeBaseId, status) {
+    const client = await getContextStoreClient(knowledgeBaseId);
+    return client.context.issues.list({
+        status
+    });
+}
+/**
+ * Get a single issue by ID, or `null` when it does not exist
+ */ export async function getIssue(knowledgeBaseId, issueId) {
+    const client = await getContextStoreClient(knowledgeBaseId);
+    return client.context.issues.get({
+        issueId
+    });
+}
+/**
+ * Resolve a conflict issue by choosing one of its sides (by index). Choosing
+ * a side other than the entry's current content starts a rewrite job.
+ */ export async function resolveIssue(knowledgeBaseId, issueId, resolution) {
+    const client = await getContextClient(knowledgeBaseId);
+    return client.context.issues.resolve({
+        issueId,
+        resolution
+    });
+}
+/**
+ * Dismiss an issue
+ */ export async function dismissIssue(knowledgeBaseId, issueId) {
+    const client = await getContextClient(knowledgeBaseId);
+    return client.context.issues.dismiss({
+        issueId
+    });
+}
+/**
+ * Reopen a resolved conflict issue
+ */ export async function reopenIssue(knowledgeBaseId, issueId) {
+    const client = await getContextClient(knowledgeBaseId);
+    return client.context.issues.reopen({
+        issueId
+    });
+}
+/**
+ * Apply accepted issues to a knowledge base in one batch
+ */ export async function applyIssues(knowledgeBaseId, issueIds) {
+    const client = await getContextClient(knowledgeBaseId);
+    return client.context.issues.apply({
+        issueIds
+    });
+}
+/**
+ * List all entries for a knowledge base, path-ordered, without bodies
+ */ export async function listEntries(knowledgeBaseId) {
+    const client = await getContextStoreClient(knowledgeBaseId);
+    return client.context.entries.list();
+}
+/**
+ * Get a single entry with its body and citations by outline path, or `null`
+ * when no entry sits at that path
+ */ export async function getEntry(knowledgeBaseId, path) {
+    const client = await getContextStoreClient(knowledgeBaseId);
+    return client.context.entries.get({
+        path
+    });
+}
+/**
+ * Rebuild one entry from its sources by outline path
+ */ export async function rebuildEntry(knowledgeBaseId, path) {
+    const client = await getContextClient(knowledgeBaseId);
+    return client.context.entries.rebuild({
+        path
+    });
+}
+/**
+ * Run a GROQ query against an organization's Context documents
+ */ export async function queryContext(organizationId, query, params) {
+    const client = await getContextClient(undefined, organizationId);
+    return client.context.fetch(query, params);
+}
 
 //# sourceMappingURL=context.js.map