@sanity/sdk 3.0.0 → 3.1.0

package/src/presence/presenceStore.ts

@@ -38,6 +38,7 @@ import {
 import {defineStore, type StoreContext} from '../store/defineStore'
 import {type SanityUser} from '../users/types'
 import {getUserState} from '../users/usersStore'
+import {randomId} from '../utils/ids'
 import {createLogger} from '../utils/logger'
 import {createBifurTransport} from './bifurTransport'
 import {startsWithPath} from './paths'
@@ -198,7 +199,7 @@ export const presenceStore = defineStore<PresenceStoreState, BoundResourceKey>({
     // storage (`window.open`, or a same-origin iframe), making two live clients
     // filter each other out as self. Stale sessions are handled by the
     // disconnect on unload, with the expiry sweep above as the backstop.
-    const sessionId = crypto.randomUUID()
+    const sessionId = randomId(16)
 
     // Dataset resources must use the project hostname so the socket URL is project-specific.
     // Canvas resources use the global API endpoint via the resource config.
@@ -411,7 +412,7 @@ export const presenceStore = defineStore<PresenceStoreState, BoundResourceKey>({
       subscription.add(
         globalClient.observable
           .request<{organizationId: string}>({
-            uri: `/canvases/${resource.canvasId}`,
+            url: `/canvases/${resource.canvasId}`,
             tag: 'canvases.get',
           })
           .subscribe({

package/src/project/project.test.ts

@@ -36,7 +36,7 @@ describe('project', () => {
     const result = await project.resolveState(instance, {projectId: 'a'})
     expect(result).toEqual(detail)
     expect(request).toHaveBeenCalledWith({
-      uri: '/projects/a',
+      url: '/projects/a',
       query: {includeMembers: 'true', includeFeatures: 'true'},
       tag: 'projects.get',
     })
@@ -59,7 +59,7 @@ describe('project', () => {
     })
 
     expect(request).toHaveBeenCalledWith({
-      uri: '/projects/a',
+      url: '/projects/a',
       query: {
         includeMembers: 'false',
         includeFeatures: 'false',
@@ -80,7 +80,7 @@ describe('project', () => {
 
     await project.resolveState(instance)
     expect(request).toHaveBeenCalledWith({
-      uri: '/projects/p',
+      url: '/projects/p',
       query: {includeMembers: 'true', includeFeatures: 'true'},
       tag: 'projects.get',
     })

package/src/project/project.ts

@@ -130,7 +130,7 @@ export const project = defineFetcher<
     getClientState(instance, {apiVersion: API_VERSION, scope: 'global'}).observable.pipe(
       switchMap((client) =>
         client.observable.request<Project<boolean, boolean>>({
-          uri: `/projects/${resolveProjectId(instance, options)}`,
+          url: `/projects/${resolveProjectId(instance, options)}`,
           query: buildQuery(normalizeProjectOptions(options)),
           tag: 'projects.get',
         }),

package/src/projection/getProjectionState.test.ts

@@ -4,7 +4,7 @@ import {afterEach, beforeEach, describe, expect, it, vi} from 'vitest'
 import {createSanityInstance, type SanityInstance} from '../store/createSanityInstance'
 import {type StoreState} from '../store/createStoreState'
 import {hashString} from '../utils/hashString'
-import {insecureRandomId} from '../utils/ids'
+import {randomId} from '../utils/ids'
 import {getProjectionState} from './getProjectionState'
 import {subscribeToStateAndFetchBatches} from './subscribeToStateAndFetchBatches'
 import {type ProjectionStoreState} from './types'
@@ -19,7 +19,7 @@ vi.mock('../utils/ids', async (importOriginal) => {
   // Mock implementation uses the external counter
   return {
     ...util,
-    insecureRandomId: vi.fn(() => {
+    randomId: vi.fn(() => {
       const id = `testSubId_${++mockIdCounter}`
       return id
     }),
@@ -39,8 +39,7 @@ describe('getProjectionState', () => {
   let state: StoreState<ProjectionStoreState & {extra?: unknown}>
 
   beforeEach(() => {
-    mockIdCounter = 0
-    vi.mocked(insecureRandomId).mockClear()
+    vi.mocked(randomId).mockClear()
 
     // Capture state
     vi.mocked(subscribeToStateAndFetchBatches).mockImplementation((context) => {
@@ -49,6 +48,9 @@ describe('getProjectionState', () => {
     })
 
     instance = createSanityInstance({projectId: 'exampleProject', dataset: 'exampleDataset'})
+    // Reset after instance creation: the instanceId also comes from randomId,
+    // but the test ids should only count subscription-related calls
+    mockIdCounter = 0
     vi.useFakeTimers() // Enable fake timers for each test
   })
 

package/src/projection/getProjectionState.ts

@@ -10,7 +10,7 @@ import {
   type StateSource,
 } from '../store/createStateSourceAction'
 import {hashString} from '../utils/hashString'
-import {insecureRandomId} from '../utils/ids'
+import {randomId} from '../utils/ids'
 import {omitProperty} from '../utils/object'
 import {setCleanupTimeout} from '../utils/setCleanupTimeout'
 import {projectionStore} from './projectionStore'
@@ -85,7 +85,7 @@ export const _getProjectionState = bindActionByResourceAndPerspective(
     },
     onSubscribe: ({state}, options: ProjectionOptions<string, string, string, string>) => {
       const {projection, ...docHandle} = options
-      const subscriptionId = insecureRandomId()
+      const subscriptionId = randomId(16)
       const documentId = getPublishedId(DocumentId(docHandle.documentId))
       const validProjection = validateProjection(projection)
       const projectionHash = hashString(validProjection)

package/src/projects/projects.test.ts

@@ -35,7 +35,7 @@ describe('projects', () => {
     const result = await projects.resolveState(instance)
     expect(result).toEqual(list)
     expect(request).toHaveBeenCalledWith({
-      uri: '/projects',
+      url: '/projects',
       query: {includeMembers: 'false', includeFeatures: 'true', onlyExplicitMembership: 'false'},
       tag: 'projects.list',
     })
@@ -58,7 +58,7 @@ describe('projects', () => {
     })
 
     expect(request).toHaveBeenCalledWith({
-      uri: '/projects',
+      url: '/projects',
       query: {
         organizationId: 'org123',
         includeMembers: 'true',

package/src/projects/projects.ts

@@ -58,7 +58,7 @@ export const projects = defineFetcher<
     getClientState(instance, {apiVersion: API_VERSION, scope: 'global'}).observable.pipe(
       switchMap((client) =>
         client.observable.request<Project<boolean, boolean>[]>({
-          uri: '/projects',
+          url: '/projects',
           query: buildQuery(normalizeProjectsOptions(options)),
           tag: 'projects.list',
         }),

package/src/query/queryStore.ts

@@ -36,7 +36,7 @@ import {
 } from '../store/createStateSourceAction'
 import {type StoreState} from '../store/createStoreState'
 import {defineStore, type StoreContext} from '../store/defineStore'
-import {insecureRandomId} from '../utils/ids'
+import {randomId} from '../utils/ids'
 import {setCleanupTimeout} from '../utils/setCleanupTimeout'
 import {
   QUERY_STATE_CLEAR_DELAY,
@@ -309,7 +309,7 @@ const _getQueryState = bindActionByResource(
       return queryState?.result
     },
     onSubscribe: ({state, instance}, options: QueryOptions) => {
-      const subscriptionId = insecureRandomId()
+      const subscriptionId = randomId(16)
       const key = getQueryKey(instance, options)
 
       state.set('addSubscriber', addSubscriber(key, subscriptionId))
@@ -370,7 +370,7 @@ const _resolveQuery = bindActionByResource(
     // while a component is suspended leaves a subscriber-less key behind — the
     // component never commits, so no other subscriber exists — and its stored
     // error would be rethrown on every future mount without ever refetching.
-    const subscriptionId = insecureRandomId()
+    const subscriptionId = randomId(16)
     state.set('addSubscriber', addSubscriber(key, subscriptionId))
 
     const aborted$ = signal

package/src/store/createSanityInstance.test.ts

@@ -6,7 +6,7 @@ import {createSanityInstance} from './createSanityInstance'
 describe('createSanityInstance', () => {
   it('should create an instance with a unique instanceId and given config', () => {
     const instance = createSanityInstance({projectId: 'proj1', dataset: 'ds1'})
-    expect(typeof instance.instanceId).toBe('string')
+    expect(instance.instanceId).toMatch(/^[a-zA-Z0-9]{16}$/)
     expect(instance.config).toEqual({projectId: 'proj1', dataset: 'ds1'})
     expect(instance.isDisposed()).toBe(false)
   })

package/src/store/createSanityInstance.ts

@@ -1,5 +1,5 @@
 import {type SanityConfig} from '../config/sanityConfig'
-import {insecureRandomId} from '../utils/ids'
+import {randomId} from '../utils/ids'
 import {createLogger, type InstanceContext} from '../utils/logger'
 
 /**
@@ -10,7 +10,7 @@ import {createLogger, type InstanceContext} from '../utils/logger'
 export interface SanityInstance {
   /**
    * Unique identifier for this instance
-   * @remarks Generated using crypto.randomUUID()
+   * @remarks Generated as a random 16-character alphanumeric ID
    */
   readonly instanceId: string
 
@@ -47,7 +47,7 @@ export interface SanityInstance {
  * @public
  */
 export function createSanityInstance(config: SanityConfig = {}): SanityInstance {
-  const instanceId = crypto.randomUUID()
+  const instanceId = randomId(16)
   const disposeListeners = new Map<string, () => void>()
   const disposed = {current: false}
 
@@ -99,7 +99,7 @@ export function createSanityInstance(config: SanityConfig = {}): SanityInstance
       logger.info('Instance disposed')
     },
     onDispose: (cb) => {
-      const listenerId = insecureRandomId()
+      const listenerId = randomId(16)
       disposeListeners.set(listenerId, cb)
       return () => {
         disposeListeners.delete(listenerId)

package/src/store/createStoreInstance.test.ts

@@ -8,11 +8,6 @@ describe('createStoreInstance', () => {
   let instance: ReturnType<typeof createSanityInstance>
 
   beforeEach(() => {
-    // Mock crypto for predictable instance IDs
-    vi.stubGlobal('crypto', {
-      randomUUID: () => 'test-uuid-1234',
-    })
-
     instance = createSanityInstance({projectId: 'test', dataset: 'test'})
   })
 

package/src/telemetry/telemetryManager.test.ts

@@ -280,7 +280,7 @@ describe('createTelemetryManager', () => {
       const result = await manager.checkConsent()
       expect(result).toBe(true)
       expect(mockClient.request).toHaveBeenCalledWith(
-        expect.objectContaining({uri: '/intake/telemetry-status'}),
+        expect.objectContaining({url: '/intake/telemetry-status'}),
       )
     })
 

package/src/telemetry/telemetryManager.ts

@@ -86,7 +86,7 @@ export function createTelemetryManager(options: TelemetryManagerOptions): Teleme
     try {
       const client = getClient()
       const result = await client.request<{status: ConsentStatus}>({
-        uri: '/intake/telemetry-status',
+        url: '/intake/telemetry-status',
         tag: CONSENT_TAG,
       })
       cachedConsent = result
@@ -120,7 +120,7 @@ export function createTelemetryManager(options: TelemetryManagerOptions): Teleme
     const client = getClient()
     log.debug('sending event batch', {batchSize: batch.length, environment})
     return client.request({
-      uri: '/intake/batch',
+      url: '/intake/batch',
       method: 'POST',
       body: {projectId, batch: enrichBatch(batch)},
       tag: BATCH_TAG,

package/src/users/usersStore.test.ts

@@ -450,7 +450,7 @@ describe('usersStore', () => {
       )
       expect(specificRequest).toHaveBeenCalledWith({
         method: 'GET',
-        uri: `/users/${projectUserId}`,
+        url: `/users/${projectUserId}`,
         tag: 'users.get',
       })
 

package/src/users/usersStore.ts

@@ -30,7 +30,7 @@ import {bindActionGlobally} from '../store/createActionBinder'
 import {createStateSourceAction, type SelectorContext} from '../store/createStateSourceAction'
 import {type StoreState} from '../store/createStoreState'
 import {defineStore, type StoreContext} from '../store/defineStore'
-import {insecureRandomId} from '../utils/ids'
+import {randomId} from '../utils/ids'
 import {setCleanupTimeout} from '../utils/setCleanupTimeout'
 import {
   addSubscription,
@@ -130,7 +130,7 @@ const listenForLoadMoreAndFetch = ({state, instance}: StoreContext<UsersStoreSta
                 return client.observable
                   .request<PatchedSanityUserFromClient>({
                     method: 'GET',
-                    uri: `/users/${userId}`,
+                    url: `/users/${userId}`,
                     tag: 'users.get',
                   })
                   .pipe(
@@ -184,7 +184,7 @@ const listenForLoadMoreAndFetch = ({state, instance}: StoreContext<UsersStoreSta
               return client.observable
                 .request<SanityUser | SanityUserResponse>({
                   method: 'GET',
-                  uri: `access/${resourceType}/${resourceId}/users/${userId}`,
+                  url: `access/${resourceType}/${resourceId}/users/${userId}`,
                   tag: 'users.get',
                 })
                 .pipe(
@@ -253,7 +253,7 @@ const listenForLoadMoreAndFetch = ({state, instance}: StoreContext<UsersStoreSta
               switchMap(([[resource, client], cursor]) =>
                 client.observable.request<SanityUserResponse>({
                   method: 'GET',
-                  uri: `access/${resource.type}/${resource.id}/users`,
+                  url: `access/${resource.type}/${resource.id}/users`,
                   tag: 'users.list',
                   query: cursor
                     ? {nextCursor: cursor, limit: batchSize.toString()}
@@ -310,7 +310,7 @@ export const getUsersState = bindActionGlobally(
       },
     ),
     onSubscribe: ({instance, state}, options?: GetUsersOptions) => {
-      const subscriptionId = insecureRandomId()
+      const subscriptionId = randomId(16)
       const key = getUsersKey(instance, options)
       state.set('addSubscription', addSubscription(subscriptionId, key))
       return () => {

package/src/utils/ids.test.ts

@@ -1,26 +1,51 @@
-import {describe, expect, it} from 'vitest'
+import {afterEach, describe, expect, it, vi} from 'vitest'
 
-import {insecureRandomId} from './ids'
+import {randomId, randomUuid} from './ids'
 
-describe('insecureRandomId', () => {
-  it('should generate 16-character string', () => {
-    expect(insecureRandomId()).toHaveLength(16)
+describe('randomId', () => {
+  it('should generate an 8-character base62 id by default', () => {
+    expect(randomId()).toMatch(/^[a-zA-Z0-9]{8}$/)
   })
 
-  it('should generate hex string', () => {
-    expect(insecureRandomId()).toMatch(/^[0-9a-f]{16}$/)
+  it('should generate an id of the given length', () => {
+    expect(randomId(16)).toMatch(/^[a-zA-Z0-9]{16}$/)
   })
 
   it('should generate different ids on each call', () => {
-    const id1 = insecureRandomId()
-    const id2 = insecureRandomId()
-    expect(id1).not.toBe(id2)
+    expect(randomId()).not.toBe(randomId())
+  })
+})
+
+describe('randomUuid', () => {
+  const uuidV4Pattern = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/
+
+  afterEach(() => {
+    vi.unstubAllGlobals()
+  })
+
+  it('should generate a v4 UUID', () => {
+    expect(randomUuid()).toMatch(uuidV4Pattern)
+  })
+
+  it('should use crypto.randomUUID when available', () => {
+    vi.stubGlobal('crypto', {randomUUID: () => 'native-uuid'})
+    expect(randomUuid()).toBe('native-uuid')
+  })
+
+  it('should generate a v4 UUID when crypto.randomUUID is unavailable (insecure contexts)', () => {
+    const originalCrypto = globalThis.crypto
+    vi.stubGlobal('crypto', {
+      getRandomValues: (array: Uint8Array<ArrayBuffer>) => originalCrypto.getRandomValues(array),
+    })
+    expect(randomUuid()).toMatch(uuidV4Pattern)
   })
 
-  it('should generate properly formatted strings multiple times', () => {
-    for (let i = 0; i < 100; i++) {
-      const id = insecureRandomId()
-      expect(id).toMatch(/^[0-9a-f]{16}$/)
-    }
+  it('should generate unique ids when crypto.randomUUID is unavailable', () => {
+    const originalCrypto = globalThis.crypto
+    vi.stubGlobal('crypto', {
+      getRandomValues: (array: Uint8Array<ArrayBuffer>) => originalCrypto.getRandomValues(array),
+    })
+    const ids = new Set(Array.from({length: 100}, () => randomUuid()))
+    expect(ids.size).toBe(100)
   })
 })

package/src/utils/ids.ts

@@ -1,3 +1,48 @@
-export function insecureRandomId(): string {
-  return Array.from({length: 16}, () => Math.floor(Math.random() * 16).toString(16)).join('')
+const ID_ALPHABET = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'
+
+/**
+ * Generates a random ID of the given length from the alphabet `[a-zA-Z0-9]`, the same shape
+ * `@sanity/client` and Sanity Studio use for short IDs such as release IDs.
+ *
+ * Ported from `@sanity/client`'s `generateReleaseId`, which uses rejection sampling to keep
+ * the output unbiased. Uses `crypto.getRandomValues`, which unlike `crypto.randomUUID` is
+ * also available on insecure origins (plain http).
+ *
+ * @internal
+ */
+export function randomId(length: number = 8): string {
+  let id = ''
+  while (id.length < length) {
+    const bytes = crypto.getRandomValues(new Uint8Array(length - id.length))
+    for (const byte of bytes) {
+      const index = byte & 63
+      if (index < ID_ALPHABET.length) id += ID_ALPHABET.charAt(index)
+    }
+  }
+  return id
+}
+
+/**
+ * Generates a random v4 UUID.
+ *
+ * Prefers the native `crypto.randomUUID`, which is only available in secure contexts
+ * (https, localhost). Falls back to deriving the UUID from `crypto.getRandomValues`,
+ * which has no such restriction, so ID generation also works when an app is served over
+ * plain http, e.g. when testing from a phone on a local network.
+ *
+ * @internal
+ */
+export function randomUuid(): string {
+  // eslint-disable-next-line no-restricted-properties -- this is the sanctioned wrapper around crypto.randomUUID
+  if (typeof crypto.randomUUID === 'function') return crypto.randomUUID()
+
+  const bytes = crypto.getRandomValues(new Uint8Array(16))
+  const hex = Array.from(bytes, (byte, index) => {
+    // Set the version (4) and variant (RFC 4122) bits
+    if (index === 6) byte = (byte & 0x0f) | 0x40
+    if (index === 8) byte = (byte & 0x3f) | 0x80
+    return byte.toString(16).padStart(2, '0')
+  }).join('')
+
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`
 }

package/dist/clientStore-BtE2-q2i.js

@@ -1,90 +0,0 @@
-import { t as __exportAll } from "./rolldown-runtime-vyAXikos.js";
-import { a as defineStore, c as isDatasetResource, i as bindActionGlobally, l as isMediaLibraryResource, s as isCanvasResource, t as createStateSourceAction } from "./createStateSourceAction-BOKtqFNm.js";
-import { T as getStagingApiHost, l as getTokenState, r as getAuthMethodState } from "./authStore-CtE9bLHW.js";
-import { i as pickProperties } from "./object-CxXlSVg7.js";
-import { createClient } from "@sanity/client";
-var clientStore_exports = /* @__PURE__ */ __exportAll({
-	getClient: () => getClient,
-	getClientState: () => getClientState
-});
-const allowedKeys = Object.keys({
-	apiHost: null,
-	useCdn: null,
-	token: null,
-	perspective: null,
-	proxy: null,
-	withCredentials: null,
-	timeout: null,
-	maxRetries: null,
-	dataset: null,
-	projectId: null,
-	scope: null,
-	apiVersion: null,
-	requestTagPrefix: null,
-	useProjectHostname: null,
-	resource: null
-}), DEFAULT_CLIENT_CONFIG = {
-	apiVersion: "2024-11-12",
-	useCdn: !1,
-	ignoreBrowserTokenWarning: !0,
-	allowReconfigure: !1,
-	requestTagPrefix: "sanity.sdk"
-}, clientStore = defineStore({
-	name: "clientStore",
-	getInitialState: (instance) => ({
-		clients: {},
-		token: getTokenState(instance).getCurrent()
-	}),
-	initialize(context) {
-		let subscription = listenToToken(context), authMethodSubscription = listenToAuthMethod(context);
-		return () => {
-			subscription.unsubscribe(), authMethodSubscription.unsubscribe();
-		};
-	}
-}), listenToToken = ({ instance, state }) => getTokenState(instance).observable.subscribe((token) => {
-	state.set("setTokenAndResetClients", {
-		token,
-		clients: {}
-	});
-}), listenToAuthMethod = ({ instance, state }) => getAuthMethodState(instance).observable.subscribe((authMethod) => {
-	state.set("setAuthMethod", { authMethod });
-}), getClientConfigKey = (options) => JSON.stringify(pickProperties(options, allowedKeys)), getClient = bindActionGlobally(clientStore, ({ state, instance }, options) => {
-	if (!options || typeof options != "object") throw Error("getClient() requires a configuration object with at least an \"apiVersion\" property. Example: getClient(instance, { apiVersion: \"2024-11-12\" })");
-	let disallowedKeys = Object.keys(options).filter((key) => !allowedKeys.includes(key));
-	if (disallowedKeys.length > 0) {
-		let listFormatter = new Intl.ListFormat("en", {
-			style: "long",
-			type: "conjunction"
-		});
-		throw Error(`The client options provided contains unsupported properties: ${listFormatter.format(disallowedKeys)}. Allowed keys are: ${listFormatter.format(allowedKeys)}.`);
-	}
-	let tokenFromState = state.get().token, { clients, authMethod } = state.get(), projectId = options.projectId ?? instance.config.projectId, dataset = options.dataset ?? instance.config.dataset, resource;
-	options.resource && (isMediaLibraryResource(options.resource) ? resource = {
-		type: "media-library",
-		id: options.resource.mediaLibraryId
-	} : isCanvasResource(options.resource) ? resource = {
-		type: "canvas",
-		id: options.resource.canvasId
-	} : isDatasetResource(options.resource) && (projectId = options.resource.projectId, dataset = options.resource.dataset));
-	let apiHost = options.apiHost ?? instance.config.auth?.apiHost ?? getStagingApiHost(), effectiveOptions = {
-		...DEFAULT_CLIENT_CONFIG,
-		...(options.scope === "global" || !projectId || resource) && { useProjectHostname: !1 },
-		token: authMethod === "cookie" ? void 0 : tokenFromState ?? void 0,
-		...options,
-		...projectId && { projectId },
-		...dataset && { dataset },
-		...resource ? { resource } : { resource: void 0 },
-		...apiHost && { apiHost }
-	};
-	resource && (delete effectiveOptions.projectId, delete effectiveOptions.dataset), effectiveOptions.token === null || effectiveOptions.token === void 0 ? (delete effectiveOptions.token, authMethod === "cookie" && (effectiveOptions.withCredentials = !0)) : delete effectiveOptions.withCredentials;
-	let key = getClientConfigKey(effectiveOptions);
-	if (clients[key]) return clients[key];
-	let client = createClient(effectiveOptions);
-	return state.set("addClient", (prev) => ({ clients: {
-		...prev.clients,
-		[key]: client
-	} })), client;
-}), getClientState = bindActionGlobally(clientStore, createStateSourceAction(({ instance }, options) => getClient(instance, options)));
-export { getClient as n, getClientState as r, clientStore_exports as t };
-
-//# sourceMappingURL=clientStore-BtE2-q2i.js.map

package/dist/clientStore-BtE2-q2i.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"clientStore-BtE2-q2i.js","names":[],"sources":["../src/client/clientStore.ts"],"sourcesContent":["import {type ClientConfig, createClient, type SanityClient} from '@sanity/client'\n\nimport {getAuthMethodState, getTokenState} from '../auth/authStore'\nimport {\n  type DocumentResource,\n  isCanvasResource,\n  isDatasetResource,\n  isMediaLibraryResource,\n} from '../config/sanityConfig'\nimport {bindActionGlobally} from '../store/createActionBinder'\nimport {createStateSourceAction} from '../store/createStateSourceAction'\nimport {defineStore, type StoreContext} from '../store/defineStore'\nimport {getStagingApiHost} from '../utils/getStagingApiHost'\nimport {pickProperties} from '../utils/object'\n\nconst DEFAULT_API_VERSION = '2024-11-12'\nconst DEFAULT_REQUEST_TAG_PREFIX = 'sanity.sdk'\n\ntype AllowedClientConfigKey =\n  | 'useCdn'\n  | 'token'\n  | 'perspective'\n  | 'apiHost'\n  | 'proxy'\n  | 'withCredentials'\n  | 'timeout'\n  | 'maxRetries'\n  | 'dataset'\n  | 'projectId'\n  | 'requestTagPrefix'\n  | 'useProjectHostname'\n\nconst allowedKeys = Object.keys({\n  apiHost: null,\n  useCdn: null,\n  token: null,\n  perspective: null,\n  proxy: null,\n  withCredentials: null,\n  timeout: null,\n  maxRetries: null,\n  dataset: null,\n  projectId: null,\n  scope: null,\n  apiVersion: null,\n  requestTagPrefix: null,\n  useProjectHostname: null,\n  resource: null,\n} satisfies Record<keyof ClientOptions, null>) as (keyof ClientOptions)[]\n\nconst DEFAULT_CLIENT_CONFIG: ClientConfig = {\n  apiVersion: DEFAULT_API_VERSION,\n  useCdn: false,\n  ignoreBrowserTokenWarning: true,\n  allowReconfigure: false,\n  requestTagPrefix: DEFAULT_REQUEST_TAG_PREFIX,\n}\n\n/**\n * States tracked by the client store\n * @public\n */\nexport interface ClientStoreState {\n  token: string | null\n  clients: {[TKey in string]?: SanityClient}\n  authMethod?: 'localstorage' | 'cookie'\n}\n\n/**\n * Options used when retrieving a client instance from the client store.\n *\n * This interface extends the base {@link ClientConfig} and adds:\n *\n * - **apiVersion:** A required string indicating the API version for the client.\n * - **scope:** An optional flag to choose between the project-specific client\n *   ('project') and the global client ('global'). When set to `'global'`, the\n *   global client is used.\n *\n * These options are utilized by `getClient` and `getClientState` to configure and\n * return appropriate client instances that automatically handle authentication\n * updates and configuration changes.\n *\n * @public\n */\nexport interface ClientOptions extends Pick<ClientConfig, AllowedClientConfigKey> {\n  /**\n   * An optional flag to choose between the default client (typically project-level)\n   * and the global client ('global'). When set to `'global'`, the global client\n   * is used.\n   */\n  scope?: 'default' | 'global'\n  /**\n   * A required string indicating the API version for the client.\n   */\n  apiVersion: string\n\n  /**\n   * @internal\n   * The SDK resource to use for the client -- this will get transformed into a ClientConfig resource.\n   */\n  resource?: DocumentResource\n}\n\nconst clientStore = defineStore<ClientStoreState>({\n  name: 'clientStore',\n\n  getInitialState: (instance) => ({\n    clients: {},\n    token: getTokenState(instance).getCurrent(),\n  }),\n\n  initialize(context) {\n    const subscription = listenToToken(context)\n    const authMethodSubscription = listenToAuthMethod(context)\n    return () => {\n      subscription.unsubscribe()\n      authMethodSubscription.unsubscribe()\n    }\n  },\n})\n\n/**\n * Updates the client store state when a token is received.\n * @internal\n */\nconst listenToToken = ({instance, state}: StoreContext<ClientStoreState>) => {\n  return getTokenState(instance).observable.subscribe((token) => {\n    state.set('setTokenAndResetClients', {token, clients: {}})\n  })\n}\n\nconst listenToAuthMethod = ({instance, state}: StoreContext<ClientStoreState>) => {\n  return getAuthMethodState(instance).observable.subscribe((authMethod) => {\n    state.set('setAuthMethod', {authMethod})\n  })\n}\n\ntype ClientInstanceCacheKeyInput = ClientConfig &\n  Partial<Pick<ClientOptions, 'scope'>> & {\n    apiVersion: string\n  }\n\nconst getClientConfigKey = (options: ClientInstanceCacheKeyInput) =>\n  JSON.stringify(pickProperties(options, allowedKeys))\n\n/**\n * Retrieves a Sanity client instance configured with the provided options.\n *\n * This function returns a client instance configured for the project or as a\n * global client based on the options provided. It ensures efficient reuse of\n * client instances by returning the same instance for the same options.\n * For automatic handling of authentication token updates, consider using\n * `getClientState`.\n *\n * @public\n */\nexport const getClient = bindActionGlobally(\n  clientStore,\n  ({state, instance}, options: ClientOptions) => {\n    if (!options || typeof options !== 'object') {\n      throw new Error(\n        'getClient() requires a configuration object with at least an \"apiVersion\" property. ' +\n          'Example: getClient(instance, { apiVersion: \"2024-11-12\" })',\n      )\n    }\n\n    // Check for disallowed keys\n    const providedKeys = Object.keys(options) as (keyof ClientOptions)[]\n    const disallowedKeys = providedKeys.filter((key) => !allowedKeys.includes(key))\n\n    if (disallowedKeys.length > 0) {\n      const listFormatter = new Intl.ListFormat('en', {style: 'long', type: 'conjunction'})\n      throw new Error(\n        `The client options provided contains unsupported properties: ${listFormatter.format(disallowedKeys)}. ` +\n          `Allowed keys are: ${listFormatter.format(allowedKeys)}.`,\n      )\n    }\n\n    const tokenFromState = state.get().token\n    const {clients, authMethod} = state.get()\n    let projectId = options.projectId ?? instance.config.projectId\n    let dataset = options.dataset ?? instance.config.dataset\n\n    let resource: ClientConfig['resource'] | undefined\n\n    if (options.resource) {\n      if (isMediaLibraryResource(options.resource)) {\n        resource = {type: 'media-library', id: options.resource.mediaLibraryId}\n      } else if (isCanvasResource(options.resource)) {\n        resource = {type: 'canvas', id: options.resource.canvasId}\n      } else if (isDatasetResource(options.resource)) {\n        // use project-based routes for datasets to avoid existing CORS and Studio auth cookie issues\n        projectId = options.resource.projectId\n        dataset = options.resource.dataset\n      }\n    }\n\n    const apiHost = options.apiHost ?? instance.config.auth?.apiHost ?? getStagingApiHost()\n\n    const effectiveOptions: ClientConfig & {apiVersion: string} = {\n      ...DEFAULT_CLIENT_CONFIG,\n      ...((options.scope === 'global' || !projectId || resource) && {useProjectHostname: false}),\n      token: authMethod === 'cookie' ? undefined : (tokenFromState ?? undefined),\n      ...options,\n      ...(projectId && {projectId}),\n      ...(dataset && {dataset}),\n      ...(resource ? {resource} : {resource: undefined}),\n      ...(apiHost && {apiHost}),\n    }\n\n    // When a resource is provided, don't use projectId/dataset - the client should be \"projectless\"\n    // The client code itself will ignore the non-resource config, so we do this to prevent confusing the user.\n    // (ref: https://github.com/sanity-io/client/blob/5c23f81f5ab93a53f5b22b39845c867988508d84/src/data/dataMethods.ts#L691)\n    if (resource) {\n      delete effectiveOptions.projectId\n      delete effectiveOptions.dataset\n    }\n\n    if (effectiveOptions.token === null || typeof effectiveOptions.token === 'undefined') {\n      delete effectiveOptions.token\n      if (authMethod === 'cookie') {\n        effectiveOptions.withCredentials = true\n      }\n    } else {\n      delete effectiveOptions.withCredentials\n    }\n\n    const key = getClientConfigKey(effectiveOptions)\n\n    if (clients[key]) return clients[key]\n\n    const client = createClient(effectiveOptions)\n    state.set('addClient', (prev) => ({clients: {...prev.clients, [key]: client}}))\n\n    return client\n  },\n)\n\n/**\n * Returns a state source for the Sanity client instance.\n *\n * This function provides a subscribable state source that emits updated client\n * instances whenever relevant configurations change (such as authentication tokens).\n * Use this when you need to react to client configuration changes in your application.\n *\n * @public\n */\nexport const getClientState = bindActionGlobally(\n  clientStore,\n  createStateSourceAction(({instance}, options: ClientOptions) => getClient(instance, options)),\n)\n"],"mappings":";;;;;;;;;AAeA,MAiBM,cAAc,OAAO,KAAK;CAC9B,SAAS;CACT,QAAQ;CACR,OAAO;CACP,aAAa;CACb,OAAO;CACP,iBAAiB;CACjB,SAAS;CACT,YAAY;CACZ,SAAS;CACT,WAAW;CACX,OAAO;CACP,YAAY;CACZ,kBAAkB;CAClB,oBAAoB;CACpB,UAAU;AACZ,CAA6C,GAEvC,wBAAsC;CAC1C,YAAY;CACZ,QAAQ;CACR,2BAA2B;CAC3B,kBAAkB;CAClB,kBAAkB;AACpB,GA+CM,cAAc,YAA8B;CAChD,MAAM;CAEN,kBAAkB,cAAc;EAC9B,SAAS,CAAC;EACV,OAAO,cAAc,QAAQ,CAAC,CAAC,WAAW;CAC5C;CAEA,WAAW,SAAS;EAClB,IAAM,eAAe,cAAc,OAAO,GACpC,yBAAyB,mBAAmB,OAAO;EACzD,aAAa;GAEX,AADA,aAAa,YAAY,GACzB,uBAAuB,YAAY;EACrC;CACF;AACF,CAAC,GAMK,iBAAiB,EAAC,UAAU,YACzB,cAAc,QAAQ,CAAC,CAAC,WAAW,WAAW,UAAU;CAC7D,MAAM,IAAI,2BAA2B;EAAC;EAAO,SAAS,CAAC;CAAC,CAAC;AAC3D,CAAC,GAGG,sBAAsB,EAAC,UAAU,YAC9B,mBAAmB,QAAQ,CAAC,CAAC,WAAW,WAAW,eAAe;CACvE,MAAM,IAAI,iBAAiB,EAAC,WAAU,CAAC;AACzC,CAAC,GAQG,sBAAsB,YAC1B,KAAK,UAAU,eAAe,SAAS,WAAW,CAAC,GAaxC,YAAY,mBACvB,cACC,EAAC,OAAO,YAAW,YAA2B;CAC7C,IAAI,CAAC,WAAW,OAAO,WAAY,UACjC,MAAU,MACR,oJAEF;CAKF,IAAM,iBADe,OAAO,KAAK,OACC,CAAC,CAAC,QAAQ,QAAQ,CAAC,YAAY,SAAS,GAAG,CAAC;CAE9E,IAAI,eAAe,SAAS,GAAG;EAC7B,IAAM,gBAAgB,IAAI,KAAK,WAAW,MAAM;GAAC,OAAO;GAAQ,MAAM;EAAa,CAAC;EACpF,MAAU,MACR,gEAAgE,cAAc,OAAO,cAAc,EAAE,sBAC9E,cAAc,OAAO,WAAW,EAAE,EAC3D;CACF;CAEA,IAAM,iBAAiB,MAAM,IAAI,CAAC,CAAC,OAC7B,EAAC,SAAS,eAAc,MAAM,IAAI,GACpC,YAAY,QAAQ,aAAa,SAAS,OAAO,WACjD,UAAU,QAAQ,WAAW,SAAS,OAAO,SAE7C;CAEJ,AAAI,QAAQ,aACN,uBAAuB,QAAQ,QAAQ,IACzC,WAAW;EAAC,MAAM;EAAiB,IAAI,QAAQ,SAAS;CAAc,IAC7D,iBAAiB,QAAQ,QAAQ,IAC1C,WAAW;EAAC,MAAM;EAAU,IAAI,QAAQ,SAAS;CAAQ,IAChD,kBAAkB,QAAQ,QAAQ,MAE3C,YAAY,QAAQ,SAAS,WAC7B,UAAU,QAAQ,SAAS;CAI/B,IAAM,UAAU,QAAQ,WAAW,SAAS,OAAO,MAAM,WAAW,kBAAkB,GAEhF,mBAAwD;EAC5D,GAAG;EACH,IAAK,QAAQ,UAAU,YAAY,CAAC,aAAa,aAAa,EAAC,oBAAoB,GAAK;EACxF,OAAO,eAAe,WAAW,KAAA,IAAa,kBAAkB,KAAA;EAChE,GAAG;EACH,GAAI,aAAa,EAAC,UAAS;EAC3B,GAAI,WAAW,EAAC,QAAO;EACvB,GAAI,WAAW,EAAC,SAAQ,IAAI,EAAC,UAAU,KAAA,EAAS;EAChD,GAAI,WAAW,EAAC,QAAO;CACzB;CAUA,AALI,aACF,OAAO,iBAAiB,WACxB,OAAO,iBAAiB,UAGtB,iBAAiB,UAAU,QAAe,iBAAiB,UAAU,UACvE,OAAO,iBAAiB,OACpB,eAAe,aACjB,iBAAiB,kBAAkB,OAGrC,OAAO,iBAAiB;CAG1B,IAAM,MAAM,mBAAmB,gBAAgB;CAE/C,IAAI,QAAQ,MAAM,OAAO,QAAQ;CAEjC,IAAM,SAAS,aAAa,gBAAgB;CAG5C,OAFA,MAAM,IAAI,cAAc,UAAU,EAAC,SAAS;EAAC,GAAG,KAAK;GAAU,MAAM;CAAM,EAAC,EAAE,GAEvE;AACT,CACF,GAWa,iBAAiB,mBAC5B,aACA,yBAAyB,EAAC,YAAW,YAA2B,UAAU,UAAU,OAAO,CAAC,CAC9F"}