@sanity/runtime-cli 15.1.2 → 15.1.4

package/README.md

@@ -20,7 +20,7 @@ $ npm install -g @sanity/runtime-cli
 $ sanity-run COMMAND
 running command...
 $ sanity-run (--version)
-@sanity/runtime-cli/15.1.2 linux-x64 node-v24.15.0
+@sanity/runtime-cli/15.1.4 linux-x64 node-v24.16.0
 $ sanity-run --help [COMMAND]
 USAGE
   $ sanity-run COMMAND
@@ -103,7 +103,7 @@ EXAMPLES
   $ sanity-run blueprints add function --name my-function --fn-type document-create --fn-type document-update --lang js
 ```
 
-_See code: [src/commands/blueprints/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/add.ts)_
+_See code: [src/commands/blueprints/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/add.ts)_
 
 ## `sanity-run blueprints config`
 
@@ -140,7 +140,7 @@ EXAMPLES
   $ sanity-run blueprints config --edit --project-id <projectId> --stack <name-or-id>
 ```
 
-_See code: [src/commands/blueprints/config.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/config.ts)_
+_See code: [src/commands/blueprints/config.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/config.ts)_
 
 ## `sanity-run blueprints deploy`
 
@@ -191,7 +191,7 @@ EXAMPLES
   $ sanity-run blueprints deploy --new-stack-name <new-name>
 ```
 
-_See code: [src/commands/blueprints/deploy.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/deploy.ts)_
+_See code: [src/commands/blueprints/deploy.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/deploy.ts)_
 
 ## `sanity-run blueprints destroy`
 
@@ -226,7 +226,7 @@ EXAMPLES
   $ sanity-run blueprints destroy --stack <name-or-id> --project-id <projectId> --force --no-wait
 ```
 
-_See code: [src/commands/blueprints/destroy.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/destroy.ts)_
+_See code: [src/commands/blueprints/destroy.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/destroy.ts)_
 
 ## `sanity-run blueprints doctor`
 
@@ -257,7 +257,7 @@ EXAMPLES
   $ sanity-run blueprints doctor --fix
 ```
 
-_See code: [src/commands/blueprints/doctor.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/doctor.ts)_
+_See code: [src/commands/blueprints/doctor.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/doctor.ts)_
 
 ## `sanity-run blueprints info`
 
@@ -294,7 +294,7 @@ EXAMPLES
   $ sanity-run blueprints info --organization-id <orgId> --stack <name-or-id>
 ```
 
-_See code: [src/commands/blueprints/info.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/info.ts)_
+_See code: [src/commands/blueprints/info.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/info.ts)_
 
 ## `sanity-run blueprints init [DIR]`
 
@@ -353,7 +353,7 @@ EXAMPLES
   $ sanity-run blueprints init old-stack --type <json|js|ts> --project-id <projectId> --stack-id <existingStackId>
 ```
 
-_See code: [src/commands/blueprints/init.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/init.ts)_
+_See code: [src/commands/blueprints/init.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/init.ts)_
 
 ## `sanity-run blueprints logs`
 
@@ -399,7 +399,7 @@ EXAMPLES
   $ sanity-run blueprints logs --before 2026-05-01T00:00:00Z
 ```
 
-_See code: [src/commands/blueprints/logs.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/logs.ts)_
+_See code: [src/commands/blueprints/logs.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/logs.ts)_
 
 ## `sanity-run blueprints mint-deploy-token`
 
@@ -444,7 +444,7 @@ EXAMPLES
   $ sanity-run blueprints mint-deploy-token --organization-id <orgId>
 ```
 
-_See code: [src/commands/blueprints/mint-deploy-token.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/mint-deploy-token.ts)_
+_See code: [src/commands/blueprints/mint-deploy-token.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/mint-deploy-token.ts)_
 
 ## `sanity-run blueprints plan`
 
@@ -477,7 +477,7 @@ EXAMPLES
   $ sanity-run blueprints plan --organization-id <orgId> --stack <name-or-id>
 ```
 
-_See code: [src/commands/blueprints/plan.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/plan.ts)_
+_See code: [src/commands/blueprints/plan.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/plan.ts)_
 
 ## `sanity-run blueprints promote`
 
@@ -513,7 +513,7 @@ EXAMPLES
   $ sanity-run blueprints promote --new-stack-name <new-name>
 ```
 
-_See code: [src/commands/blueprints/promote.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/promote.ts)_
+_See code: [src/commands/blueprints/promote.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/promote.ts)_
 
 ## `sanity-run blueprints stacks`
 
@@ -549,7 +549,7 @@ EXAMPLES
   $ sanity-run blueprints stacks --organization-id <organizationId> --include-projects
 ```
 
-_See code: [src/commands/blueprints/stacks.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/blueprints/stacks.ts)_
+_See code: [src/commands/blueprints/stacks.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/blueprints/stacks.ts)_
 
 ## `sanity-run functions add`
 
@@ -601,7 +601,7 @@ EXAMPLES
   $ sanity-run functions add --name my-function --type document-create --type document-update --lang js
 ```
 
-_See code: [src/commands/functions/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/add.ts)_
+_See code: [src/commands/functions/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/functions/add.ts)_
 
 ## `sanity-run functions dev`
 
@@ -636,7 +636,7 @@ EXAMPLES
   $ sanity-run functions dev --timeout 60
 ```
 
-_See code: [src/commands/functions/dev.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/dev.ts)_
+_See code: [src/commands/functions/dev.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/functions/dev.ts)_
 
 ## `sanity-run functions env add NAME KEY VALUE`
 
@@ -666,7 +666,7 @@ EXAMPLES
   $ sanity-run functions env add MyFunction API_URL https://api.example.com/
 ```
 
-_See code: [src/commands/functions/env/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/env/add.ts)_
+_See code: [src/commands/functions/env/add.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/functions/env/add.ts)_
 
 ## `sanity-run functions env list NAME`
 
@@ -693,7 +693,7 @@ EXAMPLES
   $ sanity-run functions env list MyFunction
 ```
 
-_See code: [src/commands/functions/env/list.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/env/list.ts)_
+_See code: [src/commands/functions/env/list.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/functions/env/list.ts)_
 
 ## `sanity-run functions env remove NAME KEY`
 
@@ -722,7 +722,7 @@ EXAMPLES
   $ sanity-run functions env remove MyFunction API_URL
 ```
 
-_See code: [src/commands/functions/env/remove.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/env/remove.ts)_
+_See code: [src/commands/functions/env/remove.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/functions/env/remove.ts)_
 
 ## `sanity-run functions logs [NAME]`
 
@@ -762,7 +762,7 @@ EXAMPLES
   $ sanity-run functions logs <name> --delete
 ```
 
-_See code: [src/commands/functions/logs.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/logs.ts)_
+_See code: [src/commands/functions/logs.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/functions/logs.ts)_
 
 ## `sanity-run functions test [NAME]`
 
@@ -819,7 +819,7 @@ EXAMPLES
   $ sanity-run functions test <name> --event update --data-before '{ "title": "before" }' --data-after '{ "title": "after" }'
 ```
 
-_See code: [src/commands/functions/test.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.2/src/commands/functions/test.ts)_
+_See code: [src/commands/functions/test.ts](https://github.com/sanity-io/runtime-cli/blob/v15.1.4/src/commands/functions/test.ts)_
 
 ## `sanity-run help [COMMAND]`
 

package/dist/actions/blueprints/blueprint.js

@@ -6,7 +6,7 @@ import blueprintParserValidator from '@sanity/blueprints-parser';
 import * as find from 'empathic/find';
 import { createJiti } from 'jiti';
 import { SANITY_FUNCTION_DOCUMENT, SANITY_FUNCTION_MEDIA_LIBRARY_ASSET, SANITY_FUNCTION_SCHEDULED, } from '../../constants.js';
-import { validateResources } from '../../utils/validate/index.js';
+import { validateResources } from '../../utils/blueprints/validate-resources.js';
 import { backfillProjectBasedStackId, readConfigFile, } from './config.js';
 import { resolveIds } from './resolve.js';
 const SUPPORTED_FILE_EXTENSIONS = ['.json', '.js', '.mjs', '.ts'];

package/dist/actions/functions/test.js

@@ -1,4 +1,4 @@
-import invoke from '../../utils/invoke-local.js';
+import invoke from '../../utils/functions/invoke-local.js';
 export async function testAction(resource, payload, context, options) {
     try {
         const { json, logs, error } = await invoke(resource, payload, context, options);

package/dist/actions/node.js

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, extname, join } from 'node:path';
-import { getLatestNpmVersion } from '../utils/other/npmjs.js';
+import { getLatestNpmVersion } from '../utils/external/npmjs.js';
 export async function writeOrUpdateNodeDependency(nearFilePath, dependency, logger) {
     const dir = dirname(nearFilePath);
     const extension = extname(nearFilePath);

package/dist/actions/sanity/access.d.ts

@@ -35,4 +35,15 @@ export declare function createRobotToken({ auth, resourceType, resourceId, body,
     body: CreateRobotInput;
     logger: Logger;
 }): Promise<CreateRobotResponse>;
+export interface CheckUserPermissionResponse extends ActionResponse {
+    hasPermission: boolean;
+}
+/** Check whether the token's user holds a specific permission on a project or organization. */
+export declare function checkUserPermission({ auth, resourceType, resourceId, permission, logger, }: {
+    auth: AuthParams;
+    resourceType: ScopeType;
+    resourceId: string;
+    permission: string;
+    logger: Logger;
+}): Promise<CheckUserPermissionResponse>;
 export {};

package/dist/actions/sanity/access.js

@@ -1,4 +1,4 @@
-import config from '../../config.js';
+import config, { RUNTIME_CLI_USER_AGENT } from '../../config.js';
 import getHeaders from '../../utils/get-headers.js';
 import { createTracedFetch } from '../../utils/traced-fetch.js';
 const { apiUrl } = config;
@@ -21,3 +21,27 @@ export async function createRobotToken({ auth, resourceType, resourceId, body, l
     }
     return { ok: true, error: null, robot: raw };
 }
+/** Check whether the token's user holds a specific permission on a project or organization. */
+export async function checkUserPermission({ auth, resourceType, resourceId, permission, logger, }) {
+    const fetchFn = createTracedFetch(logger);
+    const url = `${accessApiPath}/${resourceType}/${encodeURIComponent(resourceId)}/user-permissions/me/check?permissions=${encodeURIComponent(permission)}`;
+    const response = await fetchFn(url, {
+        method: 'GET',
+        headers: {
+            Accept: 'application/json',
+            Authorization: `Bearer ${auth.token}`,
+            'User-Agent': RUNTIME_CLI_USER_AGENT,
+        },
+    });
+    const raw = await response.json().catch(() => null);
+    const body = (raw && typeof raw === 'object' ? raw : {});
+    if (!response.ok) {
+        const errMessage = body.message || body.error?.message || response.statusText;
+        return { ok: false, error: errMessage, hasPermission: false };
+    }
+    return {
+        ok: true,
+        error: null,
+        hasPermission: body.data?.[permission] === true,
+    };
+}

package/dist/actions/sanity/examples.js

@@ -4,7 +4,7 @@ import { dirname, join } from 'node:path';
 import { pipeline } from 'node:stream/promises';
 import { createGunzip } from 'node:zlib';
 import { extract } from 'tar-stream';
-import { gitHubRequest } from '../../utils/other/github.js';
+import { gitHubRequest } from '../../utils/external/github.js';
 export const EXAMPLES_CACHE_DIR = join(tmpdir(), 'sanity-examples');
 const EXAMPLE_TYPES = {
     blueprint: { repo: 'sanity-io/sanity', dir: 'examples/blueprints' },

package/dist/commands/blueprints/deploy.js

@@ -61,6 +61,8 @@ Set SANITY_ASSET_TIMEOUT (seconds) to override the 60-second timeout for process
         });
         if (!result.success)
             this.coreError(result);
+        if (result.warnings)
+            this.renderWarnings(result.warnings);
         return result.json;
     }
 }

package/dist/config.d.ts

@@ -1,7 +1,9 @@
 export declare const BLUEPRINT_CONFIG_VERSION = "v2025-05-08";
 export declare const BLUEPRINT_CONFIG_DIR = ".sanity";
 export declare const BLUEPRINT_CONFIG_FILE = "blueprint.config.json";
+export declare const RUNTIME_CLI_NAME = "@sanity/runtime-cli";
 export declare let RUNTIME_CLI_VERSION: string | undefined;
+export declare const RUNTIME_CLI_USER_AGENT: string;
 declare const _default: {
     isTest: boolean;
     isLive: boolean;

package/dist/config.js

@@ -6,17 +6,21 @@ import getToken from './utils/get-token.js';
 export const BLUEPRINT_CONFIG_VERSION = 'v2025-05-08';
 export const BLUEPRINT_CONFIG_DIR = '.sanity';
 export const BLUEPRINT_CONFIG_FILE = 'blueprint.config.json';
+export const RUNTIME_CLI_NAME = '@sanity/runtime-cli';
 export let RUNTIME_CLI_VERSION;
 try {
     const packageJsonPath = pkg.up({ cwd: fileURLToPath(new URL('.', import.meta.url)) });
     if (packageJsonPath) {
         const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8'));
-        if (packageJson.name === '@sanity/runtime-cli') {
+        if (packageJson.name === RUNTIME_CLI_NAME) {
             RUNTIME_CLI_VERSION = packageJson.version;
         }
     }
 }
 catch { }
+export const RUNTIME_CLI_USER_AGENT = RUNTIME_CLI_VERSION
+    ? `${RUNTIME_CLI_NAME}@${RUNTIME_CLI_VERSION}`
+    : RUNTIME_CLI_NAME;
 const nodeEnv = env.NODE_ENV?.toLowerCase() ?? 'production';
 const isTest = nodeEnv === 'test';
 const sanityEnv = env.SANITY_INTERNAL_ENV?.toLowerCase() ?? 'production';

package/dist/cores/blueprints/deploy.js

@@ -2,6 +2,7 @@ import { setTimeout as sleep } from 'node:timers/promises';
 import { stashAsset } from '../../actions/blueprints/assets.js';
 import { setupLogPolling } from '../../actions/blueprints/logs-polling.js';
 import { getStack, updateStack } from '../../actions/blueprints/stacks.js';
+import { checkUserPermission } from '../../actions/sanity/access.js';
 import { createHintCollector } from '../../utils/blueprints/hints.js';
 import { niceId } from '../../utils/display/presenters.js';
 import { styleText } from '../../utils/style-text.js';
@@ -76,13 +77,23 @@ export async function blueprintDeployCore(options) {
             };
         }
         spinner.stop().clear();
+        const legacyPermissionsNoticePromise = CHECK_LEGACY_DEPLOY_PERMISSION
+            ? checkLegacyDeployPermission({
+                auth,
+                scopeType,
+                scopeId,
+                log,
+            })
+            : Promise.resolve(null);
         if (noWait) {
             log(styleText(['bold', 'green'], 'Stack deployment started!'));
             log(`Use \`npx ${bin} blueprints info\` to check status`);
+            const legacyWarning = await legacyPermissionsNoticePromise;
             return {
                 success: true,
                 json: { stackId: stack.id, resources },
                 data: { resources },
+                warnings: legacyWarning ? [legacyWarning] : undefined,
             };
         }
         log(styleText('dim', 'Stack deployment progress:'));
@@ -143,10 +154,12 @@ export async function blueprintDeployCore(options) {
                         logStreamCleanup();
                     log('');
                     log(styleText(['bold', 'green'], 'Stack deployment completed!'));
+                    const legacyWarning = await legacyPermissionsNoticePromise;
                     return {
                         success: true,
                         json: { stackId: stack.id, resources },
                         data: { resources },
+                        warnings: legacyWarning ? [legacyWarning] : undefined,
                     };
                 }
                 if (!idleMessageShown && Date.now() - lastLogAt > 60_000) {
@@ -215,3 +228,36 @@ async function preDeploy(resource, options) {
     fnSpinner.fail(errorMsg);
     return { success: false, error: result.error || 'Failed to process asset' };
 }
+const CHECK_LEGACY_DEPLOY_PERMISSION = false;
+const BLUEPRINTS_PERMISSION_ENFORCEMENT_DATE = 'July 1, 2026';
+async function checkLegacyDeployPermission({ auth, scopeType, scopeId, log, }) {
+    const requiredPermission = scopeType === 'organization' ? 'sanity.blueprints.deploy' : 'sanity.project.blueprints.deploy';
+    try {
+        const result = await checkUserPermission({
+            auth,
+            resourceType: scopeType,
+            resourceId: scopeId,
+            permission: requiredPermission,
+            logger: log,
+        });
+        if (!result.ok) {
+            log.verbose(`Failed to check ${requiredPermission}: ${result.error ?? 'unknown error'}`);
+            return null;
+        }
+        if (result.hasPermission)
+            return null;
+        return {
+            label: 'Legacy deploy permission',
+            suggestions: [
+                `This deploy used a legacy permission. Starting ${BLUEPRINTS_PERMISSION_ENFORCEMENT_DATE}, deploys will require the "${requiredPermission}" permission.`,
+                scopeType === 'project'
+                    ? 'Ask a project administrator to add you to a role with Blueprint deploy access: Administrator, Developer, or Blueprints Deployer. For CI, use a Blueprints Deployer API token.'
+                    : 'Ask an organization administrator to grant you the Administrator role. For CI, use a Blueprints Deployer API token created by someone with access to this organization.',
+            ],
+        };
+    }
+    catch (err) {
+        log.verbose(`Failed to check ${requiredPermission}: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}

package/dist/cores/functions/add.js

@@ -7,8 +7,8 @@ import { createFunctionResource } from '../../actions/blueprints/resources.js';
 import { verifyExampleExists, writeExample } from '../../actions/sanity/examples.js';
 import { EVENT_DOCUMENT_CREATE, EVENT_DOCUMENT_DELETE, EVENT_DOCUMENT_UPDATE, EVENT_MEDIA_LIBRARY_ASSET_CREATE, EVENT_MEDIA_LIBRARY_ASSET_DELETE, EVENT_MEDIA_LIBRARY_ASSET_UPDATE, EVENT_SCHEDULED, EVENT_SYNC_TAG_INVALIDATE, FUNCTION_TYPES, LABEL_DOCUMENT_CREATE, LABEL_DOCUMENT_DELETE, LABEL_DOCUMENT_UPDATE, LABEL_MEDIA_LIBRARY_ASSET_CREATE, LABEL_MEDIA_LIBRARY_ASSET_DELETE, LABEL_MEDIA_LIBRARY_ASSET_UPDATE, LABEL_SCHEDULED, LABEL_SYNC_TAG_INVALIDATE, MAP_EVENT_TO_FUNCTION_TYPE, SANITY_FUNCTION_DOCUMENT, SANITY_FUNCTION_MEDIA_LIBRARY_ASSET, SANITY_FUNCTION_SCHEDULED, SANITY_FUNCTION_SYNC_TAG_INVALIDATE, } from '../../constants.js';
 import { check, indent, warn } from '../../utils/display/presenters.js';
+import { validateFunctionName } from '../../utils/functions/validate-name.js';
 import { styleText } from '../../utils/style-text.js';
-import { validateFunctionName } from '../../utils/validate/resource.js';
 export const generateFunctionBlueprintResourceTemplate = (fnName, eventNames) => {
     const functionType = MAP_EVENT_TO_FUNCTION_TYPE[eventNames[0]];
     let definer = '';

package/dist/cores/functions/build.js

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { pathToZip } from '../../actions/blueprints/assets.js';
-import { findFunctionInResources } from '../../utils/find-function.js';
+import { findFunctionInResources } from '../../utils/functions/find.js';
 import { prepareAsset } from '../../utils/functions/prepare-asset.js';
 import { isLocalFunctionResource } from '../../utils/types.js';
 export async function functionBuildCore(options) {

package/dist/cores/functions/env/add.js

@@ -1,6 +1,6 @@
 import { update } from '../../../actions/functions/env/update.js';
-import { findFunctionInStack } from '../../../utils/find-function.js';
-import { resolveFunctionAuth } from '../../../utils/functions/resolve-function-auth.js';
+import { findFunctionInStack } from '../../../utils/functions/find.js';
+import { resolveFunctionAuth } from '../../../utils/functions/resolve-auth.js';
 import { styleText } from '../../../utils/style-text.js';
 export async function functionEnvAddCore(options) {
     const { args, log } = options;

package/dist/cores/functions/env/list.js

@@ -1,6 +1,6 @@
 import { list } from '../../../actions/functions/env/list.js';
-import { findFunctionInStack } from '../../../utils/find-function.js';
-import { resolveFunctionAuth } from '../../../utils/functions/resolve-function-auth.js';
+import { findFunctionInStack } from '../../../utils/functions/find.js';
+import { resolveFunctionAuth } from '../../../utils/functions/resolve-auth.js';
 export async function functionEnvListCore(options) {
     const { args, log } = options;
     const spinner = log.ora(`Listing environment variables for "${args.name}"`).start();

package/dist/cores/functions/env/remove.js

@@ -1,6 +1,6 @@
 import { remove } from '../../../actions/functions/env/remove.js';
-import { findFunctionInStack } from '../../../utils/find-function.js';
-import { resolveFunctionAuth } from '../../../utils/functions/resolve-function-auth.js';
+import { findFunctionInStack } from '../../../utils/functions/find.js';
+import { resolveFunctionAuth } from '../../../utils/functions/resolve-auth.js';
 import { styleText } from '../../../utils/style-text.js';
 export async function functionEnvRemoveCore(options) {
     const { args, log } = options;

package/dist/cores/functions/logs.js

@@ -2,8 +2,8 @@ import { confirm } from '@inquirer/prompts';
 import { deleteLogs as deleteLogsAction, logs as getLogsAction, streamLogs as streamLogsAction, } from '../../actions/functions/logs.js';
 import { formatTitle } from '../../utils/display/blueprints-formatting.js';
 import { niceId } from '../../utils/display/presenters.js';
-import { findFunctionInStack, getFunctionNames } from '../../utils/find-function.js';
-import { resolveFunctionAuth } from '../../utils/functions/resolve-function-auth.js';
+import { findFunctionInStack, getFunctionNames } from '../../utils/functions/find.js';
+import { resolveFunctionAuth } from '../../utils/functions/resolve-auth.js';
 import { styleText } from '../../utils/style-text.js';
 export async function functionLogsCore(options) {
     const { args, flags, log, error, deployedStack, blueprint, helpText } = options;

package/dist/cores/functions/test.js

@@ -4,9 +4,10 @@ import { cwd } from 'node:process';
 import { testAction } from '../../actions/functions/test.js';
 import config from '../../config.js';
 import { SANITY_FUNCTION_DOCUMENT, SANITY_FUNCTION_MEDIA_LIBRARY_ASSET } from '../../constants.js';
-import buildPayload from '../../utils/build-payload.js';
-import { findFunctionInResources, getFunctionNames } from '../../utils/find-function.js';
+import { resolveDeployedResources } from '../../utils/blueprints/resolve-deployed-resources.js';
+import buildPayload from '../../utils/functions/build-payload.js';
 import { fetchAsset, fetchDocument } from '../../utils/functions/fetch-document.js';
+import { findFunctionInResources, getFunctionNames } from '../../utils/functions/find.js';
 import { parseJsonObject } from '../../utils/parse-json-object.js';
 import { isEventType, } from '../../utils/types.js';
 export async function functionTestCore(options) {
@@ -40,6 +41,14 @@ export async function functionTestCore(options) {
         const resource = findFunctionInResources(blueprint.resources, fnName); // throws if not found
         const docFunction = resource.type === SANITY_FUNCTION_DOCUMENT;
         const mediaFunction = resource.type === SANITY_FUNCTION_MEDIA_LIBRARY_ASSET;
+        const resolvedResources = await resolveDeployedResources({
+            resources: blueprint.resources,
+            stackId: blueprint.stackId,
+            auth: config.token && blueprint.scopeType && blueprint.scopeId
+                ? { token: config.token, scopeType: blueprint.scopeType, scopeId: blueprint.scopeId }
+                : undefined,
+            logger: log,
+        });
         const contextOptions = docFunction || mediaFunction
             ? {
                 clientOptions: {
@@ -52,8 +61,9 @@ export async function functionTestCore(options) {
                 eventResourceId: (docFunction ? `${projectId}.${dataset}` : mediaLibraryId) || '',
                 functionResourceType: 'project',
                 functionResourceId: projectId || '',
+                resources: resolvedResources,
             }
-            : { clientOptions: {} };
+            : { clientOptions: {}, resources: resolvedResources };
         // If the user sets the flag to use the real token set it in our options
         if (withUserToken) {
             contextOptions.clientOptions.token = config.token || undefined;

package/dist/server/handlers/invoke.js

@@ -1,16 +1,28 @@
-import { loadAndParseBlueprint } from '../../actions/blueprints/blueprint.js';
-import { findFunctionInResources } from '../../utils/find-function.js';
-import invoke from '../../utils/invoke-local.js';
+import { readLocalBlueprint } from '../../actions/blueprints/blueprint.js';
+import config from '../../config.js';
+import { resolveDeployedResources } from '../../utils/blueprints/resolve-deployed-resources.js';
+import { findFunctionInResources } from '../../utils/functions/find.js';
+import invoke from '../../utils/functions/invoke-local.js';
+import { Logger } from '../../utils/logger.js';
+const silentLogger = Logger(() => { });
 export async function handleInvokeRequest(functionName, event, metadata, context, validateResources, executionOptions) {
     const start = performance.now();
-    const { resources } = await loadAndParseBlueprint(undefined, { validateResources });
+    const { resources, stackId, scopeType, scopeId } = await readLocalBlueprint(silentLogger, {
+        resources: validateResources,
+    });
     const resource = findFunctionInResources(resources, functionName);
     const readBlueprintTime = performance.now() - start;
+    const resolvedResources = await resolveDeployedResources({
+        resources,
+        stackId,
+        auth: config.token && scopeType && scopeId ? { token: config.token, scopeType, scopeId } : undefined,
+        logger: silentLogger,
+    });
     const payload = {
         payload: event,
         ...metadata,
     };
-    const response = await invoke(resource, payload, context, {
+    const response = await invoke(resource, payload, { ...context, resources: resolvedResources }, {
         forceColor: executionOptions?.forceColor ?? false,
         timeout: executionOptions?.timeout ?? resource.timeout,
     });

package/dist/utils/blueprints/group-resources.d.ts

@@ -0,0 +1,8 @@
+import type { BlueprintResource } from '@sanity/blueprints';
+export type GroupedBlueprintResource = {
+    id: string;
+    name: string;
+    type: string;
+};
+export type GroupedBlueprintResources = Record<string, GroupedBlueprintResource[]>;
+export declare function groupBlueprintResources(blueprintResources: BlueprintResource[]): GroupedBlueprintResources;

package/dist/utils/blueprints/group-resources.js

@@ -0,0 +1,29 @@
+const BLUEPRINT_TYPE_TO_KEY = {
+    'sanity.project.webhook': 'webhook',
+    'sanity.project.cors': 'cors',
+    'sanity.project.origin': 'cors',
+    'sanity.access.role': 'role',
+    'sanity.project.dataset': 'dataset',
+    'sanity.project': 'project',
+};
+export function groupBlueprintResources(blueprintResources) {
+    const grouped = {};
+    for (const resource of blueprintResources) {
+        if (resource.type === 'sanity.access.robot')
+            continue;
+        const key = (resource.type?.startsWith('sanity.function.')
+            ? 'function'
+            : BLUEPRINT_TYPE_TO_KEY[resource.type]) ?? resource.type?.split('.').pop();
+        if (!key)
+            continue;
+        if (!grouped[key])
+            grouped[key] = [];
+        const externalId = resource.externalId;
+        grouped[key].push({
+            id: externalId || 'not-deployed',
+            name: resource.name,
+            type: resource.type,
+        });
+    }
+    return grouped;
+}

package/dist/utils/blueprints/resolve-deployed-resources.d.ts

@@ -0,0 +1,17 @@
+import type { BlueprintResource } from '@sanity/blueprints';
+import type { Logger } from '../logger.js';
+import type { AuthParams } from '../types.js';
+interface ResolveOptions {
+    resources: BlueprintResource[];
+    stackId?: string;
+    auth?: AuthParams;
+    logger: Logger;
+}
+/**
+ * Returns the local blueprint resources, annotated with externalIds from the
+ * deployed stack where a match is found (by name + type). Locally-added
+ * resources that aren't yet deployed are preserved without an externalId.
+ * Any failure to fetch the stack falls back to the raw local resources.
+ */
+export declare function resolveDeployedResources({ resources, stackId, auth, logger, }: ResolveOptions): Promise<BlueprintResource[]>;
+export {};

package/dist/utils/blueprints/resolve-deployed-resources.js

@@ -0,0 +1,29 @@
+import { getStack } from '../../actions/blueprints/stacks.js';
+/**
+ * Returns the local blueprint resources, annotated with externalIds from the
+ * deployed stack where a match is found (by name + type). Locally-added
+ * resources that aren't yet deployed are preserved without an externalId.
+ * Any failure to fetch the stack falls back to the raw local resources.
+ */
+export async function resolveDeployedResources({ resources, stackId, auth, logger, }) {
+    if (!stackId || !auth?.token || !auth.scopeType || !auth.scopeId)
+        return resources;
+    try {
+        const response = await getStack({ stackId, auth, logger });
+        if (!response.ok || !Array.isArray(response.stack?.resources))
+            return resources;
+        const deployedByKey = new Map();
+        for (const deployed of response.stack.resources) {
+            if (deployed.externalId) {
+                deployedByKey.set(`${deployed.type}:${deployed.name}`, deployed.externalId);
+            }
+        }
+        return resources.map((resource) => {
+            const externalId = deployedByKey.get(`${resource.type}:${resource.name}`);
+            return externalId ? { ...resource, externalId } : resource;
+        });
+    }
+    catch {
+        return resources;
+    }
+}

package/dist/utils/{validate/index.d.ts → blueprints/validate-resources.d.ts}

@@ -1,4 +1,3 @@
 import { type BlueprintResource } from '@sanity/blueprints';
 import type { BlueprintParserError } from '../types.js';
-export * as validate from './resource.js';
 export declare function validateResources(resources: BlueprintResource[]): BlueprintParserError[];

package/dist/utils/{validate/index.js → blueprints/validate-resources.js}

@@ -1,6 +1,5 @@
 import { validateCorsOrigin, validateDataset, validateDocumentFunction, validateDocumentWebhook, validateMediaLibraryAssetFunction, validateProject, validateRole, validateScheduledFunction, } from '@sanity/blueprints';
 import { SANITY_ACCESS_ROLE, SANITY_FUNCTION_DOCUMENT, SANITY_FUNCTION_MEDIA_LIBRARY_ASSET, SANITY_FUNCTION_SCHEDULED, SANITY_PROJECT, SANITY_PROJECT_CORS, SANITY_PROJECT_DATASET, SANITY_PROJECT_WEBHOOK, } from '../../constants.js';
-export * as validate from './resource.js';
 const RESOURCE_VALIDATORS = {
     [SANITY_ACCESS_ROLE]: {
         validate: validateRole,

package/dist/utils/display/logs-formatting.js

@@ -8,11 +8,15 @@ const GUTTER_LEVEL_WIDTH = 6;
 function isNewOperation(log, previousLog) {
     return !!previousLog && log.operationId !== previousLog.operationId;
 }
-function logGutter(log, verbose, previousLog) {
+function isErrorLevel(log) {
+    const level = log.level?.toUpperCase();
+    return level === 'ERROR' || level === 'FATAL';
+}
+function logGutter(log, useLevel, previousLog) {
     const operationIsNew = isNewOperation(log, previousLog);
     const level = log.level.toUpperCase();
-    const isError = level === 'ERROR' || level === 'FATAL';
-    if (verbose) {
+    const isError = isErrorLevel(log);
+    if (useLevel) {
         const color = isError ? errorStyle : operationIsNew ? newOperationStyle : 'dim';
         return styleText(color, level.padEnd(GUTTER_LEVEL_WIDTH));
     }
@@ -49,12 +53,23 @@ export function formatLogEntry(log, verbose = false, previousLog) {
     const date = new Date(log.timestamp);
     const time = formatTime(date);
     const day = formatDate(date);
-    const gutter = logGutter(log, verbose, previousLog);
+    const errorLog = isErrorLevel(log);
+    // error/fatal auto-expand details; verbose expands everything
+    const showDetails = verbose || errorLog;
+    // only verbose swaps the compact gutter for a level label
+    const useLevelGutter = verbose;
+    const gutter = logGutter(log, useLevelGutter, previousLog);
     let line = `${day} ${time} ${gutter}${singleLine(log.message)}`;
-    if (verbose) {
+    if (showDetails) {
         const timestampWidth = `${day} ${time} `.length;
-        const pad = ' '.repeat(timestampWidth + (verbose ? GUTTER_LEVEL_WIDTH : GUTTER_SYMBOL_WIDTH));
-        for (const metaLine of formatMetadataLines(log)) {
+        const gutterWidth = useLevelGutter ? GUTTER_LEVEL_WIDTH : GUTTER_SYMBOL_WIDTH;
+        const pad = ' '.repeat(timestampWidth + gutterWidth);
+        const detailLines = formatMetadataLines(log);
+        // auto-expanded error/fatal: show the level above the metadata since the gutter is just a symbol
+        if (errorLog && !verbose) {
+            detailLines.unshift(`${styleText('dim', 'level:')} ${styleText(errorStyle, log.level.toUpperCase())}`);
+        }
+        for (const metaLine of detailLines) {
             line += `\n${pad}${metaLine}`;
         }
     }

package/dist/utils/{build-payload.d.ts → functions/build-payload.d.ts}

@@ -1,2 +1,2 @@
-import type { BuildPayloadOptions } from './types.js';
+import type { BuildPayloadOptions } from '../types.js';
 export default function buildPayload(options: BuildPayloadOptions): Record<string, unknown>;

package/dist/utils/{build-payload.js → functions/build-payload.js}

@@ -1,7 +1,7 @@
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { cwd } from 'node:process';
-import { parseJsonObject } from './parse-json-object.js';
+import { parseJsonObject } from '../parse-json-object.js';
 export default function buildPayload(options) {
     const { data, file } = options;
     let payload = {};

package/dist/utils/{child-process-wrapper.js → functions/child-process-wrapper.js}

@@ -117,6 +117,9 @@ process.on('message', async (data) => {
       )
     }
 
+    // Replace resources JSON with Resources API
+    context.resources = createResourcesApi(context.resources)
+
     json = await eventHandler({
       context,
       event,
@@ -149,3 +152,63 @@ process.on('message', async (data) => {
     process.exit(1)
   }
 })
+
+/**
+ * The returned proxy wraps a function so the API itself is callable.
+ * @param {Record<string, ResourceEntry[]>} resources
+ * @returns {ResourcesApi}
+ */
+export function createResourcesApi(resources) {
+  const findByName = (name) => {
+    for (const group of Object.values(resources)) {
+      const found = group.find((r) => r.name === name)
+      if (found) return found
+    }
+    return undefined
+  }
+  let allCache
+  const all = () => (allCache ??= Object.values(resources).flat())
+
+  return /** @type {ResourcesApi} */ (
+    /** @type {unknown} */ (
+      /*
+       * The Proxy target is `findByName`, so invoking the API as a function —
+       * `context.resources('my-proj')` — bypasses the `get` trap entirely and
+       * calls `findByName` directly for a cross-type lookup by name.
+       */
+      new Proxy(findByName, {
+        get: (_target, prop) => {
+          // context.resources.all() — flat array of every resource across types
+          if (prop === 'all') return all
+          // [...context.resources] / for (const r of context.resources) — iterate all
+          if (prop === Symbol.iterator) {
+            return function* () {
+              yield* all()
+            }
+          }
+
+          /**
+           * Symbol property access (other than iterator above) and `then`
+           * lookups return undefined. The `then` guard prevents the API from
+           * looking like a thenable, so `await context.resources` resolves to
+           * the proxy itself rather than hanging or unwrapping unexpectedly.
+           */
+          if (typeof prop !== 'string' || prop === 'then') {
+            return undefined
+          }
+
+          /**
+           * context.resources.<type>(name) — per-type lookup,
+           * e.g. context.resources.project('my-proj').
+           * Returns a function so the caller supplies the name;
+           * unknown types yield a function that always returns undefined.
+           */
+          return (/** @type {string} */ name) =>
+            Object.hasOwn(resources, prop)
+              ? resources[prop].find((r) => r.name === name)
+              : undefined
+        },
+      })
+    )
+  )
+}

package/dist/utils/{find-function.d.ts → functions/find.d.ts}

@@ -1,5 +1,5 @@
 import type { BlueprintResource } from '@sanity/blueprints';
-import { type DeployedResource, type FunctionResource, type Stack } from './types.js';
+import { type DeployedResource, type FunctionResource, type Stack } from '../types.js';
 export declare function getFunctionNames(resources: BlueprintResource[] | undefined): string[];
 export declare function findFunctionInResources(resources: BlueprintResource[], name: string): FunctionResource;
 /** @deprecated Use findFunctionInResources instead */

package/dist/utils/{find-function.js → functions/find.js}

@@ -1,5 +1,5 @@
-import { SANITY_FUNCTION_PREFIX } from '../constants.js';
-import { isLocalFunctionResource, } from './types.js';
+import { SANITY_FUNCTION_PREFIX } from '../../constants.js';
+import { isLocalFunctionResource, } from '../types.js';
 export function getFunctionNames(resources) {
     return (resources
         ?.filter((r) => r.type.startsWith(SANITY_FUNCTION_PREFIX))

package/dist/utils/{invoke-local.d.ts → functions/invoke-local.d.ts}

@@ -1,4 +1,4 @@
-import { type FunctionGroqResource, type FunctionResource, type InvocationResponse, type InvokeContextOptions, type InvokeExecutionOptions, type InvokeGroqPayloadOptions, type InvokePayloadOptions } from './types.js';
+import { type FunctionGroqResource, type FunctionResource, type InvocationResponse, type InvokeContextOptions, type InvokeExecutionOptions, type InvokeGroqPayloadOptions, type InvokePayloadOptions } from '../types.js';
 export declare function sanitizeLogs(logs: string): string;
 export declare function applyGroqRule(resource: FunctionGroqResource, payload: InvokeGroqPayloadOptions, projectId: string | undefined, dataset: string | undefined): Promise<any>;
 export default function invoke(resource: FunctionResource, payload: InvokePayloadOptions, context: InvokeContextOptions, options: InvokeExecutionOptions): Promise<InvocationResponse>;

package/dist/utils/{invoke-local.js → functions/invoke-local.js}

@@ -4,14 +4,15 @@ import { cwd } from 'node:process';
 import { setTimeout } from 'node:timers';
 import { fileURLToPath } from 'node:url';
 import * as groq from 'groq-js';
-import config from '../config.js';
-import { findFunctionEntryPoint } from './functions/find-entry-point.js';
-import { cleanupTempPackageJson, createTempPackageJson, doesPackageJsonExists, } from './functions/packageJsonUtils.js';
-import { resolveResourceDependencies } from './functions/resolve-dependencies.js';
-import { shouldAutoResolveDependencies } from './functions/should-auto-resolve-deps.js';
-import { shouldTranspileFunction } from './functions/should-transpile.js';
-import { transpileFunction } from './transpile/transpile-function.js';
-import { isGroqContextOptions, } from './types.js';
+import config from '../../config.js';
+import { groupBlueprintResources } from '../blueprints/group-resources.js';
+import { isGroqContextOptions, } from '../types.js';
+import { findFunctionEntryPoint } from './find-entry-point.js';
+import { cleanupTempPackageJson, createTempPackageJson, doesPackageJsonExists, } from './package-json.js';
+import { resolveResourceDependencies } from './resolve-dependencies.js';
+import { shouldAutoResolveDependencies } from './should-auto-resolve-deps.js';
+import { shouldTranspileFunction } from './should-transpile.js';
+import { transpileFunction } from './transpile/function.js';
 function getChildProcessWrapperPath() {
     return fileURLToPath(new URL('./child-process-wrapper.js', import.meta.url));
 }
@@ -157,6 +158,7 @@ export default async function invoke(resource, payload, context, options) {
                 context: {
                     ...context,
                     local: true,
+                    resources: groupBlueprintResources(context.resources ?? []),
                     ...(isGroqContextOptions(context) && {
                         clientOptions: {
                             ...context.clientOptions,

package/dist/utils/functions/prepare-asset.js

@@ -3,12 +3,12 @@ import { rm, stat } from 'node:fs/promises';
 import path from 'node:path';
 import { cwd } from 'node:process';
 import { MAX_ASSET_SIZE } from '../../constants.js';
-import { transpileFunction } from '../transpile/transpile-function.js';
 import { detectNativeModules, errorMessage } from './detect-native-modules.js';
-import { getFolderSize } from './getFolderSize.js';
+import { getFolderSize } from './get-folder-size.js';
 import { resolveResourceDependencies } from './resolve-dependencies.js';
 import { shouldAutoResolveDependencies } from './should-auto-resolve-deps.js';
 import { shouldTranspileFunction } from './should-transpile.js';
+import { transpileFunction } from './transpile/function.js';
 export async function prepareAsset({ resource, }, { installer } = {}) {
     if (!resource.src)
         throw new Error('Resource src is required');

package/dist/utils/{transpile/transpile-function.d.ts → functions/transpile/function.d.ts}

@@ -1,4 +1,4 @@
-import type { FunctionResource, InstallerType } from '../types.js';
+import type { FunctionResource, InstallerType } from '../../types.js';
 export declare const resolveViteRoot: (entry: string) => string;
 export declare function transpileFunction(resource: FunctionResource, { installer }?: {
     installer?: InstallerType;

package/dist/utils/{transpile/transpile-function.js → functions/transpile/function.js}

@@ -5,10 +5,10 @@ import { cwd } from 'node:process';
 import * as find from 'empathic/find';
 import { build as viteBuild } from 'vite';
 import tsConfigPaths from 'vite-tsconfig-paths';
-import { detectNativeModulesPlugin } from '../functions/detect-native-modules.js';
-import { findFunctionEntryPoint } from '../functions/find-entry-point.js';
-import { createPnpmRequire } from '../pnpm.js';
+import { detectNativeModulesPlugin } from '../detect-native-modules.js';
+import { findFunctionEntryPoint } from '../find-entry-point.js';
 import { cleanupSourceMaps } from './cleanup-source-maps.js';
+import { createPnpmRequire } from './pnpm.js';
 import { verifyHandler } from './verify-handler.js';
 export const resolveViteRoot = (entry) => {
     const nodeModulesDir = find.dir('node_modules', { cwd: entry });

package/dist/utils/get-headers.js

@@ -1,5 +1,4 @@
-import pkg from '../../package.json' with { type: 'json' };
-const userAgent = `${pkg.name}@${pkg.version}`;
+import { RUNTIME_CLI_USER_AGENT } from '../config.js';
 export default function getHeaders({ token, scopeId, scopeType }) {
     return {
         Accept: 'application/json',
@@ -7,6 +6,6 @@ export default function getHeaders({ token, scopeId, scopeType }) {
         Authorization: `Bearer ${token}`,
         'X-Sanity-Scope-Type': scopeType,
         'X-Sanity-Scope-Id': scopeId,
-        'User-Agent': userAgent,
+        'User-Agent': RUNTIME_CLI_USER_AGENT,
     };
 }

package/dist/utils/types.d.ts

@@ -123,12 +123,16 @@ export interface InvokeGroqContextOptions {
     functionResourceType: string;
     /** The resource ID of the function container; resource ID that houses the function. */
     functionResourceId: string;
+    /** All resources declared by the blueprint, used to populate `context.resources` at invoke time. */
+    resources?: BlueprintResource[];
 }
 /** @internal */
 export interface InvokeScheduleContextOptions {
     clientOptions: {
         token?: string;
     };
+    /** All resources declared by the blueprint, used to populate `context.resources` at invoke time. */
+    resources?: BlueprintResource[];
 }
 export type InvokeContextOptions = InvokeGroqContextOptions | InvokeScheduleContextOptions;
 export declare function isGroqContextOptions(context: InvokeContextOptions): context is InvokeGroqContextOptions;

package/oclif.manifest.json

@@ -2998,5 +2998,5 @@
       ]
     }
   },
-  "version": "15.1.2"
+  "version": "15.1.4"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sanity/runtime-cli",
   "description": "Sanity's Runtime CLI for Blueprints and Functions",
-  "version": "15.1.2",
+  "version": "15.1.4",
   "author": "Sanity Runtime Team",
   "type": "module",
   "license": "MIT",
@@ -40,7 +40,7 @@
     "clean": "shx rm -rf dist oclif.manifest.json",
     "copy:design-tokens": "shx rm -rf ./src/server/static/vendor/design-tokens && shx cp -r ./node_modules/@sanity-labs/design-tokens/dist/css ./src/server/static/vendor/design-tokens",
     "copy:server": "shx cp -r ./src/server/static ./dist/server",
-    "copy:wrapper": "shx cp ./src/utils/child-process-wrapper.js ./dist/utils/child-process-wrapper.js",
+    "copy:wrapper": "shx cp ./src/utils/functions/child-process-wrapper.js ./dist/utils/functions/child-process-wrapper.js",
     "lint": "biome ci",
     "lint:write": "biome check --write",
     "lint:fix": "npm run lint:write",