@sanity/runtime-cli 15.1.2 → 15.1.3

package/README.md

@@ -20,7 +20,7 @@ $ npm install -g @sanity/runtime-cli
 $ sanity-run COMMAND
 running command...
 $ sanity-run (--version)
-@sanity/runtime-cli/15.1.2 linux-x64 node-v24.15.0
+@sanity/runtime-cli/15.1.3 linux-x64 node-v24.15.0
 $ sanity-run --help [COMMAND]
 USAGE
   $ sanity-run COMMAND
@@ -103,7 +103,7 @@ EXAMPLES
   $ sanity-run blueprints add function --name my-function --fn-type document-create --fn-type document-update --lang js
 ```
 
-_See code: [src/commands/blueprints/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/add.ts)_
+_See code: [src/commands/blueprints/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/add.ts)_
 
 ## `sanity-run blueprints config`
 
@@ -140,7 +140,7 @@ EXAMPLES
   $ sanity-run blueprints config --edit --project-id <projectId> --stack <name-or-id>
 ```
 
-_See code: [src/commands/blueprints/config.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/config.ts)_
+_See code: [src/commands/blueprints/config.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/config.ts)_
 
 ## `sanity-run blueprints deploy`
 
@@ -191,7 +191,7 @@ EXAMPLES
   $ sanity-run blueprints deploy --new-stack-name <new-name>
 ```
 
-_See code: [src/commands/blueprints/deploy.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/deploy.ts)_
+_See code: [src/commands/blueprints/deploy.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/deploy.ts)_
 
 ## `sanity-run blueprints destroy`
 
@@ -226,7 +226,7 @@ EXAMPLES
   $ sanity-run blueprints destroy --stack <name-or-id> --project-id <projectId> --force --no-wait
 ```
 
-_See code: [src/commands/blueprints/destroy.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/destroy.ts)_
+_See code: [src/commands/blueprints/destroy.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/destroy.ts)_
 
 ## `sanity-run blueprints doctor`
 
@@ -257,7 +257,7 @@ EXAMPLES
   $ sanity-run blueprints doctor --fix
 ```
 
-_See code: [src/commands/blueprints/doctor.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/doctor.ts)_
+_See code: [src/commands/blueprints/doctor.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/doctor.ts)_
 
 ## `sanity-run blueprints info`
 
@@ -294,7 +294,7 @@ EXAMPLES
   $ sanity-run blueprints info --organization-id <orgId> --stack <name-or-id>
 ```
 
-_See code: [src/commands/blueprints/info.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/info.ts)_
+_See code: [src/commands/blueprints/info.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/info.ts)_
 
 ## `sanity-run blueprints init [DIR]`
 
@@ -353,7 +353,7 @@ EXAMPLES
   $ sanity-run blueprints init old-stack --type <json|js|ts> --project-id <projectId> --stack-id <existingStackId>
 ```
 
-_See code: [src/commands/blueprints/init.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/init.ts)_
+_See code: [src/commands/blueprints/init.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/init.ts)_
 
 ## `sanity-run blueprints logs`
 
@@ -399,7 +399,7 @@ EXAMPLES
   $ sanity-run blueprints logs --before 2026-05-01T00:00:00Z
 ```
 
-_See code: [src/commands/blueprints/logs.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/logs.ts)_
+_See code: [src/commands/blueprints/logs.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/logs.ts)_
 
 ## `sanity-run blueprints mint-deploy-token`
 
@@ -444,7 +444,7 @@ EXAMPLES
   $ sanity-run blueprints mint-deploy-token --organization-id <orgId>
 ```
 
-_See code: [src/commands/blueprints/mint-deploy-token.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/mint-deploy-token.ts)_
+_See code: [src/commands/blueprints/mint-deploy-token.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/mint-deploy-token.ts)_
 
 ## `sanity-run blueprints plan`
 
@@ -477,7 +477,7 @@ EXAMPLES
   $ sanity-run blueprints plan --organization-id <orgId> --stack <name-or-id>
 ```
 
-_See code: [src/commands/blueprints/plan.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/plan.ts)_
+_See code: [src/commands/blueprints/plan.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/plan.ts)_
 
 ## `sanity-run blueprints promote`
 
@@ -513,7 +513,7 @@ EXAMPLES
   $ sanity-run blueprints promote --new-stack-name <new-name>
 ```
 
-_See code: [src/commands/blueprints/promote.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/promote.ts)_
+_See code: [src/commands/blueprints/promote.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/promote.ts)_
 
 ## `sanity-run blueprints stacks`
 
@@ -549,7 +549,7 @@ EXAMPLES
   $ sanity-run blueprints stacks --organization-id <organizationId> --include-projects
 ```
 
-_See code: [src/commands/blueprints/stacks.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/stacks.ts)_
+_See code: [src/commands/blueprints/stacks.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/blueprints/stacks.ts)_
 
 ## `sanity-run functions add`
 
@@ -601,7 +601,7 @@ EXAMPLES
   $ sanity-run functions add --name my-function --type document-create --type document-update --lang js
 ```
 
-_See code: [src/commands/functions/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/add.ts)_
+_See code: [src/commands/functions/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/functions/add.ts)_
 
 ## `sanity-run functions dev`
 
@@ -636,7 +636,7 @@ EXAMPLES
   $ sanity-run functions dev --timeout 60
 ```
 
-_See code: [src/commands/functions/dev.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/dev.ts)_
+_See code: [src/commands/functions/dev.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/functions/dev.ts)_
 
 ## `sanity-run functions env add NAME KEY VALUE`
 
@@ -666,7 +666,7 @@ EXAMPLES
   $ sanity-run functions env add MyFunction API_URL https://api.example.com/
 ```
 
-_See code: [src/commands/functions/env/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/env/add.ts)_
+_See code: [src/commands/functions/env/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/functions/env/add.ts)_
 
 ## `sanity-run functions env list NAME`
 
@@ -693,7 +693,7 @@ EXAMPLES
   $ sanity-run functions env list MyFunction
 ```
 
-_See code: [src/commands/functions/env/list.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/env/list.ts)_
+_See code: [src/commands/functions/env/list.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/functions/env/list.ts)_
 
 ## `sanity-run functions env remove NAME KEY`
 
@@ -722,7 +722,7 @@ EXAMPLES
   $ sanity-run functions env remove MyFunction API_URL
 ```
 
-_See code: [src/commands/functions/env/remove.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/env/remove.ts)_
+_See code: [src/commands/functions/env/remove.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/functions/env/remove.ts)_
 
 ## `sanity-run functions logs [NAME]`
 
@@ -762,7 +762,7 @@ EXAMPLES
   $ sanity-run functions logs <name> --delete
 ```
 
-_See code: [src/commands/functions/logs.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/logs.ts)_
+_See code: [src/commands/functions/logs.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/functions/logs.ts)_
 
 ## `sanity-run functions test [NAME]`
 
@@ -819,7 +819,7 @@ EXAMPLES
   $ sanity-run functions test <name> --event update --data-before '{ "title": "before" }' --data-after '{ "title": "after" }'
 ```
 
-_See code: [src/commands/functions/test.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/test.ts)_
+_See code: [src/commands/functions/test.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.3/src/commands/functions/test.ts)_
 
 ## `sanity-run help [COMMAND]`
 

package/dist/actions/sanity/access.d.ts

@@ -35,4 +35,15 @@ export declare function createRobotToken({ auth, resourceType, resourceId, body,
     body: CreateRobotInput;
     logger: Logger;
 }): Promise<CreateRobotResponse>;
+export interface CheckUserPermissionResponse extends ActionResponse {
+    hasPermission: boolean;
+}
+/** Check whether the token's user holds a specific permission on a project or organization. */
+export declare function checkUserPermission({ auth, resourceType, resourceId, permission, logger, }: {
+    auth: AuthParams;
+    resourceType: ScopeType;
+    resourceId: string;
+    permission: string;
+    logger: Logger;
+}): Promise<CheckUserPermissionResponse>;
 export {};

package/dist/actions/sanity/access.js

@@ -1,4 +1,4 @@
-import config from '../../config.js';
+import config, { RUNTIME_CLI_USER_AGENT } from '../../config.js';
 import getHeaders from '../../utils/get-headers.js';
 import { createTracedFetch } from '../../utils/traced-fetch.js';
 const { apiUrl } = config;
@@ -21,3 +21,27 @@ export async function createRobotToken({ auth, resourceType, resourceId, body, l
     }
     return { ok: true, error: null, robot: raw };
 }
+/** Check whether the token's user holds a specific permission on a project or organization. */
+export async function checkUserPermission({ auth, resourceType, resourceId, permission, logger, }) {
+    const fetchFn = createTracedFetch(logger);
+    const url = `${accessApiPath}/${resourceType}/${encodeURIComponent(resourceId)}/user-permissions/me/check?permissions=${encodeURIComponent(permission)}`;
+    const response = await fetchFn(url, {
+        method: 'GET',
+        headers: {
+            Accept: 'application/json',
+            Authorization: `Bearer ${auth.token}`,
+            'User-Agent': RUNTIME_CLI_USER_AGENT,
+        },
+    });
+    const raw = await response.json().catch(() => null);
+    const body = (raw && typeof raw === 'object' ? raw : {});
+    if (!response.ok) {
+        const errMessage = body.message || body.error?.message || response.statusText;
+        return { ok: false, error: errMessage, hasPermission: false };
+    }
+    return {
+        ok: true,
+        error: null,
+        hasPermission: body.data?.[permission] === true,
+    };
+}

package/dist/commands/blueprints/deploy.js

@@ -61,6 +61,8 @@ Set SANITY_ASSET_TIMEOUT (seconds) to override the 60-second timeout for process
         });
         if (!result.success)
             this.coreError(result);
+        if (result.warnings)
+            this.renderWarnings(result.warnings);
         return result.json;
     }
 }

package/dist/config.d.ts

@@ -1,7 +1,9 @@
 export declare const BLUEPRINT_CONFIG_VERSION = "v2025-05-08";
 export declare const BLUEPRINT_CONFIG_DIR = ".sanity";
 export declare const BLUEPRINT_CONFIG_FILE = "blueprint.config.json";
+export declare const RUNTIME_CLI_NAME = "@sanity/runtime-cli";
 export declare let RUNTIME_CLI_VERSION: string | undefined;
+export declare const RUNTIME_CLI_USER_AGENT: string;
 declare const _default: {
     isTest: boolean;
     isLive: boolean;

package/dist/config.js

@@ -6,17 +6,21 @@ import getToken from './utils/get-token.js';
 export const BLUEPRINT_CONFIG_VERSION = 'v2025-05-08';
 export const BLUEPRINT_CONFIG_DIR = '.sanity';
 export const BLUEPRINT_CONFIG_FILE = 'blueprint.config.json';
+export const RUNTIME_CLI_NAME = '@sanity/runtime-cli';
 export let RUNTIME_CLI_VERSION;
 try {
     const packageJsonPath = pkg.up({ cwd: fileURLToPath(new URL('.', import.meta.url)) });
     if (packageJsonPath) {
         const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8'));
-        if (packageJson.name === '@sanity/runtime-cli') {
+        if (packageJson.name === RUNTIME_CLI_NAME) {
             RUNTIME_CLI_VERSION = packageJson.version;
         }
     }
 }
 catch { }
+export const RUNTIME_CLI_USER_AGENT = RUNTIME_CLI_VERSION
+    ? `${RUNTIME_CLI_NAME}@${RUNTIME_CLI_VERSION}`
+    : RUNTIME_CLI_NAME;
 const nodeEnv = env.NODE_ENV?.toLowerCase() ?? 'production';
 const isTest = nodeEnv === 'test';
 const sanityEnv = env.SANITY_INTERNAL_ENV?.toLowerCase() ?? 'production';

package/dist/cores/blueprints/deploy.js

@@ -2,6 +2,7 @@ import { setTimeout as sleep } from 'node:timers/promises';
 import { stashAsset } from '../../actions/blueprints/assets.js';
 import { setupLogPolling } from '../../actions/blueprints/logs-polling.js';
 import { getStack, updateStack } from '../../actions/blueprints/stacks.js';
+import { checkUserPermission } from '../../actions/sanity/access.js';
 import { createHintCollector } from '../../utils/blueprints/hints.js';
 import { niceId } from '../../utils/display/presenters.js';
 import { styleText } from '../../utils/style-text.js';
@@ -76,13 +77,23 @@ export async function blueprintDeployCore(options) {
             };
         }
         spinner.stop().clear();
+        const legacyPermissionsNoticePromise = CHECK_LEGACY_DEPLOY_PERMISSION
+            ? checkLegacyDeployPermission({
+                auth,
+                scopeType,
+                scopeId,
+                log,
+            })
+            : Promise.resolve(null);
         if (noWait) {
             log(styleText(['bold', 'green'], 'Stack deployment started!'));
             log(`Use \`npx ${bin} blueprints info\` to check status`);
+            const legacyWarning = await legacyPermissionsNoticePromise;
             return {
                 success: true,
                 json: { stackId: stack.id, resources },
                 data: { resources },
+                warnings: legacyWarning ? [legacyWarning] : undefined,
             };
         }
         log(styleText('dim', 'Stack deployment progress:'));
@@ -143,10 +154,12 @@ export async function blueprintDeployCore(options) {
                         logStreamCleanup();
                     log('');
                     log(styleText(['bold', 'green'], 'Stack deployment completed!'));
+                    const legacyWarning = await legacyPermissionsNoticePromise;
                     return {
                         success: true,
                         json: { stackId: stack.id, resources },
                         data: { resources },
+                        warnings: legacyWarning ? [legacyWarning] : undefined,
                     };
                 }
                 if (!idleMessageShown && Date.now() - lastLogAt > 60_000) {
@@ -215,3 +228,36 @@ async function preDeploy(resource, options) {
     fnSpinner.fail(errorMsg);
     return { success: false, error: result.error || 'Failed to process asset' };
 }
+const CHECK_LEGACY_DEPLOY_PERMISSION = false;
+const BLUEPRINTS_PERMISSION_ENFORCEMENT_DATE = 'July 1, 2026';
+async function checkLegacyDeployPermission({ auth, scopeType, scopeId, log, }) {
+    const requiredPermission = scopeType === 'organization' ? 'sanity.blueprints.deploy' : 'sanity.project.blueprints.deploy';
+    try {
+        const result = await checkUserPermission({
+            auth,
+            resourceType: scopeType,
+            resourceId: scopeId,
+            permission: requiredPermission,
+            logger: log,
+        });
+        if (!result.ok) {
+            log.verbose(`Failed to check ${requiredPermission}: ${result.error ?? 'unknown error'}`);
+            return null;
+        }
+        if (result.hasPermission)
+            return null;
+        return {
+            label: 'Legacy deploy permission',
+            suggestions: [
+                `This deploy used a legacy permission. Starting ${BLUEPRINTS_PERMISSION_ENFORCEMENT_DATE}, deploys will require the "${requiredPermission}" permission.`,
+                scopeType === 'project'
+                    ? 'Ask a project administrator to add you to a role with Blueprint deploy access: Administrator, Developer, or Blueprints Deployer. For CI, use a Blueprints Deployer API token.'
+                    : 'Ask an organization administrator to grant you the Administrator role. For CI, use a Blueprints Deployer API token created by someone with access to this organization.',
+            ],
+        };
+    }
+    catch (err) {
+        log.verbose(`Failed to check ${requiredPermission}: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}

package/dist/utils/display/logs-formatting.js

@@ -8,11 +8,15 @@ const GUTTER_LEVEL_WIDTH = 6;
 function isNewOperation(log, previousLog) {
     return !!previousLog && log.operationId !== previousLog.operationId;
 }
-function logGutter(log, verbose, previousLog) {
+function isErrorLevel(log) {
+    const level = log.level?.toUpperCase();
+    return level === 'ERROR' || level === 'FATAL';
+}
+function logGutter(log, useLevel, previousLog) {
     const operationIsNew = isNewOperation(log, previousLog);
     const level = log.level.toUpperCase();
-    const isError = level === 'ERROR' || level === 'FATAL';
-    if (verbose) {
+    const isError = isErrorLevel(log);
+    if (useLevel) {
         const color = isError ? errorStyle : operationIsNew ? newOperationStyle : 'dim';
         return styleText(color, level.padEnd(GUTTER_LEVEL_WIDTH));
     }
@@ -49,12 +53,23 @@ export function formatLogEntry(log, verbose = false, previousLog) {
     const date = new Date(log.timestamp);
     const time = formatTime(date);
     const day = formatDate(date);
-    const gutter = logGutter(log, verbose, previousLog);
+    const errorLog = isErrorLevel(log);
+    // error/fatal auto-expand details; verbose expands everything
+    const showDetails = verbose || errorLog;
+    // only verbose swaps the compact gutter for a level label
+    const useLevelGutter = verbose;
+    const gutter = logGutter(log, useLevelGutter, previousLog);
     let line = `${day} ${time} ${gutter}${singleLine(log.message)}`;
-    if (verbose) {
+    if (showDetails) {
         const timestampWidth = `${day} ${time} `.length;
-        const pad = ' '.repeat(timestampWidth + (verbose ? GUTTER_LEVEL_WIDTH : GUTTER_SYMBOL_WIDTH));
-        for (const metaLine of formatMetadataLines(log)) {
+        const gutterWidth = useLevelGutter ? GUTTER_LEVEL_WIDTH : GUTTER_SYMBOL_WIDTH;
+        const pad = ' '.repeat(timestampWidth + gutterWidth);
+        const detailLines = formatMetadataLines(log);
+        // auto-expanded error/fatal: show the level above the metadata since the gutter is just a symbol
+        if (errorLog && !verbose) {
+            detailLines.unshift(`${styleText('dim', 'level:')} ${styleText(errorStyle, log.level.toUpperCase())}`);
+        }
+        for (const metaLine of detailLines) {
             line += `\n${pad}${metaLine}`;
         }
     }

package/dist/utils/get-headers.js

@@ -1,5 +1,4 @@
-import pkg from '../../package.json' with { type: 'json' };
-const userAgent = `${pkg.name}@${pkg.version}`;
+import { RUNTIME_CLI_USER_AGENT } from '../config.js';
 export default function getHeaders({ token, scopeId, scopeType }) {
     return {
         Accept: 'application/json',
@@ -7,6 +6,6 @@ export default function getHeaders({ token, scopeId, scopeType }) {
         Authorization: `Bearer ${token}`,
         'X-Sanity-Scope-Type': scopeType,
         'X-Sanity-Scope-Id': scopeId,
-        'User-Agent': userAgent,
+        'User-Agent': RUNTIME_CLI_USER_AGENT,
     };
 }

package/oclif.manifest.json

@@ -2998,5 +2998,5 @@
       ]
     }
   },
-  "version": "15.1.2"
+  "version": "15.1.3"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sanity/runtime-cli",
   "description": "Sanity's Runtime CLI for Blueprints and Functions",
-  "version": "15.1.2",
+  "version": "15.1.3",
   "author": "Sanity Runtime Team",
   "type": "module",
   "license": "MIT",