@sanity/vercel-protection-bypass 1.0.0

package/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## 1.0.0 (2025-01-10)
+
+
+### Features
+
+* add Vercel Protection Bypass tool ([#2479](https://github.com/sanity-io/visual-editing/issues/2479)) ([7e58143](https://github.com/sanity-io/visual-editing/commit/7e58143e3f70751dbd424641045b218d7e9085b4))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @sanity/preview-url-secret bumped to 2.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Sanity
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,46 @@
+# @sanity/vercel-protection-bypass
+
+[![npm stat](https://img.shields.io/npm/dm/@sanity/vercel-protection-bypass.svg?style=flat-square)](https://npm-stat.com/charts.html?package=@sanity/vercel-protection-bypass)
+[![npm version](https://img.shields.io/npm/v/@sanity/vercel-protection-bypass.svg?style=flat-square)](https://www.npmjs.com/package/@sanity/vercel-protection-bypass)
+[![gzip size][gzip-badge]][bundlephobia]
+[![size][size-badge]][bundlephobia]
+
+```sh
+npm install @sanity/vercel-protection-bypass
+```
+
+This package is used together with [`sanity/presentation`] to configure it to work with Vercel's [Deployment Protection](https://vercel.com/docs/security/deployment-protection) feature.
+The tool is only needed for setup, once it's configured you can safely uninstall it.
+
+Add the tool your `sanity.config.ts`:
+
+```ts
+// ./sanity.config.ts
+import {vercelProtectionBypassTool} from '@sanity/vercel-protection-bypass'
+import {defineConfig} from 'sanity'
+import {presentationTool} from 'sanity/presentation'
+
+export default defineConfig({
+  // ... other options
+  plugins: [
+    // ... other plugins
+    presentationTool({
+      previewUrl: {
+        // @TODO change to the URL of the application, or `location.origin` if it's an embedded Studio
+        origin: 'http://localhost:3000',
+        previewMode: {
+          enable: '/api/draft',
+        },
+      },
+    }),
+    vercelProtectionBypassTool(),
+  ],
+})
+```
+
+You should see a new `Vercel Protection Bypass` tab in the Studio's settings. Click it and follow the instructions to set up the tool.
+
+[`sanity/presentation`]: https://github.com/sanity-io/visual-editing/tree/main/packages/presentation#readme
+[gzip-badge]: https://img.shields.io/bundlephobia/minzip/@sanity/vercel-protection-bypass?label=gzip%20size&style=flat-square
+[size-badge]: https://img.shields.io/bundlephobia/min/@sanity/vercel-protection-bypass?label=size&style=flat-square
+[bundlephobia]: https://bundlephobia.com/package/@sanity/vercel-protection-bypass

package/dist/_chunks-cjs/VercelProtectionBypassTool.cjs

@@ -0,0 +1,188 @@
+"use strict";
+var jsxRuntime = require("react/jsx-runtime"), reactCompilerRuntime = require("react-compiler-runtime"), icons = require("@sanity/icons"), constants = require("@sanity/preview-url-secret/constants"), toggleVercelProtectionBypass = require("@sanity/preview-url-secret/toggle-vercel-protection-bypass"), ui = require("@sanity/ui"), react = require("react"), sanity = require("sanity");
+function reducer(prevState, action) {
+  switch (action.type) {
+    case "removed-secret":
+      return {
+        ...prevState,
+        status: "disabled"
+      };
+    case "remove-secret":
+      return {
+        ...prevState,
+        status: "removing-secret"
+      };
+    case "saved-secret":
+      return {
+        ...prevState,
+        status: "enabled"
+      };
+    case "save-secret":
+      return {
+        ...prevState,
+        status: "adding-secret"
+      };
+    case "cancel-add-secret":
+      return {
+        ...prevState,
+        status: "disabled"
+      };
+    case "add-secret":
+      return {
+        ...prevState,
+        status: "add-secret-dialog"
+      };
+    case "failed-remove-secret":
+      return {
+        ...prevState,
+        status: "enabled"
+      };
+    case "failed-add-secret":
+      return {
+        ...prevState,
+        status: "add-secret-dialog"
+      };
+    default:
+      return prevState;
+  }
+}
+function VercelProtectionBypassTool() {
+  const $ = reactCompilerRuntime.c(25);
+  let t0;
+  $[0] === Symbol.for("react.memo_cache_sentinel") ? (t0 = {
+    apiVersion: constants.apiVersion
+  }, $[0] = t0) : t0 = $[0];
+  const client = sanity.useClient(t0), {
+    push: pushToast
+  } = ui.useToast();
+  let t1;
+  $[1] === Symbol.for("react.memo_cache_sentinel") ? (t1 = {
+    status: "loading"
+  }, $[1] = t1) : t1 = $[1];
+  const [state, dispatch] = react.useReducer(reducer, t1), adding = state.status === "adding-secret", removing = state.status === "removing-secret";
+  let t2;
+  $[2] !== client || $[3] !== pushToast ? (t2 = (secret) => {
+    dispatch({
+      type: "save-secret"
+    }), toggleVercelProtectionBypass.enableVercelProtectionBypass(client, secret).then(() => {
+      dispatch({
+        type: "saved-secret"
+      }), pushToast({
+        status: "success",
+        title: "Protection bypass is now enabled"
+      });
+    }).catch((reason) => {
+      console.error(reason), pushToast({
+        status: "error",
+        title: "There was an error when trying to enable protection bypass. See the browser console for more information."
+      }), dispatch({
+        type: "failed-add-secret"
+      });
+    });
+  }, $[2] = client, $[3] = pushToast, $[4] = t2) : t2 = $[4];
+  const handleEnable = t2;
+  let t3, t4;
+  $[5] !== client ? (t3 = () => {
+    const unsubscribe = toggleVercelProtectionBypass.subcribeToVercelProtectionBypass(client, (secret_0) => dispatch({
+      type: secret_0 ? "saved-secret" : "removed-secret"
+    }));
+    return () => unsubscribe();
+  }, t4 = [client], $[5] = client, $[6] = t3, $[7] = t4) : (t3 = $[6], t4 = $[7]), react.useEffect(t3, t4);
+  const enabled = state.status === "enabled" || removing;
+  let t5;
+  $[8] === Symbol.for("react.memo_cache_sentinel") ? (t5 = {
+    height: "100%",
+    alignItems: "center",
+    justifyContent: "center",
+    flexDirection: "column"
+  }, $[8] = t5) : t5 = $[8];
+  let t6;
+  $[9] === Symbol.for("react.memo_cache_sentinel") ? (t6 = {
+    maxWidth: 640
+  }, $[9] = t6) : t6 = $[9];
+  let t7, t8;
+  $[10] === Symbol.for("react.memo_cache_sentinel") ? (t7 = {
+    justifyItems: "flex-start",
+    textWrap: "pretty"
+  }, t8 = /* @__PURE__ */ jsxRuntime.jsx(ui.Heading, { children: "Vercel Protection Bypass" }), $[10] = t7, $[11] = t8) : (t7 = $[10], t8 = $[11]);
+  let t9;
+  $[12] !== client || $[13] !== enabled || $[14] !== pushToast || $[15] !== removing || $[16] !== state.status ? (t9 = /* @__PURE__ */ jsxRuntime.jsx(ui.Box, { sizing: "border", display: "flex", style: t5, children: /* @__PURE__ */ jsxRuntime.jsx(ui.Stack, { space: 5, children: /* @__PURE__ */ jsxRuntime.jsx(ui.Card, { padding: 4, style: t6, children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Stack, { space: 4, style: t7, children: [
+    t8,
+    enabled ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Box, { children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { style: {
+        textWrap: "pretty"
+      }, children: [
+        "Sanity Presentation is setup to use",
+        " ",
+        /* @__PURE__ */ jsxRuntime.jsx("a", { href: "https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation", target: "_blank", rel: "noreferrer", children: "protection bypass for automation" }),
+        " ",
+        "in order to display protected deployments in its preview iframe for the current Sanity dataset."
+      ] }) }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Box, { children: /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { children: "You can turn off automatic protection bypass at any time by clicking the button below." }) }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { mode: "ghost", tone: "critical", icon: /* @__PURE__ */ jsxRuntime.jsx(icons.TrashIcon, {}), loading: removing, onClick: () => {
+        dispatch({
+          type: "remove-secret"
+        }), toggleVercelProtectionBypass.disableVercelProtectionBypass(client).then(() => {
+          pushToast({
+            status: "warning",
+            title: "Protection bypass is now disabled"
+          }), dispatch({
+            type: "removed-secret"
+          });
+        }).catch((reason_0) => {
+          console.error(reason_0), pushToast({
+            status: "error",
+            title: "There was an error when trying to disable protection bypass. See the browser console for more information."
+          }), dispatch({
+            type: "failed-remove-secret"
+          });
+        });
+      }, text: "Remove secret" }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { children: "Protection bypass remains enabled if this plugin is removed from your Sanity config." })
+    ] }) : /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Box, { children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { style: {
+        textWrap: "pretty"
+      }, children: [
+        "Follow the instructions on",
+        " ",
+        /* @__PURE__ */ jsxRuntime.jsx("a", { href: "https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation", target: "_blank", rel: "noreferrer", children: "how to enable protection bypass for automation" }),
+        "."
+      ] }) }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Box, { children: /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { children: "This will setup a secret that Vercel exposes as an environment variable called VERCEL_AUTOMATION_BYPASS_SECRET, its value is the secret you need." }) }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { mode: "ghost", icon: /* @__PURE__ */ jsxRuntime.jsx(icons.AddIcon, {}), loading: state.status === "loading", onClick: () => {
+        dispatch({
+          type: "add-secret"
+        });
+      }, text: "Add secret" }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { children: "If you're using Sanity Presentation Tool with multiple protected deployments ensure that they have the same secret set, as this tool will set a secret that is shared in your dataset with all instances of Presentation Tool." })
+    ] })
+  ] }) }) }) }), $[12] = client, $[13] = enabled, $[14] = pushToast, $[15] = removing, $[16] = state.status, $[17] = t9) : t9 = $[17];
+  let t10;
+  $[18] !== adding || $[19] !== handleEnable || $[20] !== state.status ? (t10 = (state.status === "add-secret-dialog" || state.status === "adding-secret") && /* @__PURE__ */ jsxRuntime.jsx(ui.Dialog, { animate: !0, id: "add-secret-dialog", onClickOutside: () => dispatch({
+    type: "cancel-add-secret"
+  }), children: /* @__PURE__ */ jsxRuntime.jsx(ui.Card, { padding: 3, children: /* @__PURE__ */ jsxRuntime.jsx("form", { onSubmit: (event) => {
+    event.preventDefault(), event.currentTarget.reportValidity();
+    const secret_1 = new FormData(event.currentTarget).get("secret");
+    secret_1 && handleEnable(secret_1);
+  }, children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Stack, { space: 3, children: [
+    /* @__PURE__ */ jsxRuntime.jsxs(ui.Stack, { space: 2, children: [
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { as: "label", weight: "semibold", size: 1, children: "Add bypass secret" }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { muted: !0, size: 1, children: "Make sure it's the same secret the Vercel deployment is using that's loaded in the preview iframe." }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.TextInput, { name: "secret", onFocus: _temp, onBlur: _temp2, minLength: 32, maxLength: 32, autoComplete: "off", autoCapitalize: "off", autoCorrect: "off", spellCheck: "false", disabled: adding })
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { type: "submit", loading: adding, text: adding ? "Saving\u2026" : "Save", tone: "positive" })
+  ] }) }) }) }), $[18] = adding, $[19] = handleEnable, $[20] = state.status, $[21] = t10) : t10 = $[21];
+  let t11;
+  return $[22] !== t10 || $[23] !== t9 ? (t11 = /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+    t9,
+    t10
+  ] }), $[22] = t10, $[23] = t9, $[24] = t11) : t11 = $[24], t11;
+}
+function _temp2(event_1) {
+  event_1.currentTarget.setCustomValidity(event_1.currentTarget.value.length == 32 ? "" : "Secret must be 32 characters long"), event_1.currentTarget.required = !0;
+}
+function _temp(event_0) {
+  event_0.currentTarget.setCustomValidity("");
+}
+exports.default = VercelProtectionBypassTool;
+//# sourceMappingURL=VercelProtectionBypassTool.cjs.map

package/dist/_chunks-cjs/VercelProtectionBypassTool.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"VercelProtectionBypassTool.cjs","sources":["../../src/VercelProtectionBypassTool.tsx"],"sourcesContent":["import {AddIcon, TrashIcon} from '@sanity/icons'\nimport {apiVersion} from '@sanity/preview-url-secret/constants'\nimport {\n  disableVercelProtectionBypass,\n  enableVercelProtectionBypass,\n  subcribeToVercelProtectionBypass,\n} from '@sanity/preview-url-secret/toggle-vercel-protection-bypass'\nimport {Box, Button, Card, Dialog, Heading, Stack, Text, TextInput, useToast} from '@sanity/ui'\nimport {useEffect, useReducer} from 'react'\nimport {useClient} from 'sanity'\n\ninterface State {\n  status:\n    | 'loading'\n    | 'disabled'\n    | 'add-secret-dialog'\n    | 'adding-secret'\n    | 'enabled'\n    | 'removing-secret'\n}\ntype Action =\n  | {type: 'add-secret'}\n  | {type: 'save-secret'}\n  | {type: 'cancel-add-secret'}\n  | {type: 'failed-add-secret'}\n  | {type: 'saved-secret'}\n  | {type: 'remove-secret'}\n  | {type: 'failed-remove-secret'}\n  | {type: 'removed-secret'}\n\nfunction reducer(prevState: State, action: Action): State {\n  switch (action.type) {\n    case 'removed-secret':\n      return {...prevState, status: 'disabled'}\n    case 'remove-secret':\n      return {...prevState, status: 'removing-secret'}\n    case 'saved-secret':\n      return {...prevState, status: 'enabled'}\n    case 'save-secret':\n      return {...prevState, status: 'adding-secret'}\n    case 'cancel-add-secret':\n      return {...prevState, status: 'disabled'}\n    case 'add-secret':\n      return {...prevState, status: 'add-secret-dialog'}\n    case 'failed-remove-secret':\n      return {...prevState, status: 'enabled'}\n    case 'failed-add-secret':\n      return {...prevState, status: 'add-secret-dialog'}\n    default:\n      return prevState\n  }\n}\n\nexport default function VercelProtectionBypassTool(): React.JSX.Element {\n  const client = useClient({apiVersion: apiVersion})\n  const {push: pushToast} = useToast()\n  const [state, dispatch] = useReducer(reducer, {status: 'loading'})\n  const adding = state.status === 'adding-secret'\n  const removing = state.status === 'removing-secret'\n\n  const handleEnable = (secret: string) => {\n    dispatch({type: 'save-secret'})\n    enableVercelProtectionBypass(client, secret)\n      .then(() => {\n        dispatch({type: 'saved-secret'})\n        pushToast({\n          status: 'success',\n          title: 'Protection bypass is now enabled',\n        })\n      })\n      .catch((reason) => {\n        // eslint-disable-next-line no-console\n        console.error(reason)\n        pushToast({\n          status: 'error',\n          title:\n            'There was an error when trying to enable protection bypass. See the browser console for more information.',\n        })\n        dispatch({type: 'failed-add-secret'})\n      })\n  }\n\n  useEffect(() => {\n    const unsubscribe = subcribeToVercelProtectionBypass(client, (secret) =>\n      dispatch({type: secret ? 'saved-secret' : 'removed-secret'}),\n    )\n    return () => unsubscribe()\n  }, [client])\n\n  const enabled = state.status === 'enabled' || removing\n\n  return (\n    <>\n      <Box\n        sizing=\"border\"\n        display=\"flex\"\n        style={{\n          height: '100%',\n          alignItems: 'center',\n          justifyContent: 'center',\n          flexDirection: 'column',\n        }}\n      >\n        <Stack space={5}>\n          <Card padding={4} style={{maxWidth: 640}}>\n            <Stack space={4} style={{justifyItems: 'flex-start', textWrap: 'pretty'}}>\n              <Heading>Vercel Protection Bypass</Heading>\n              {enabled ? (\n                <>\n                  <Box>\n                    <Text style={{textWrap: 'pretty'}}>\n                      Sanity Presentation is setup to use{' '}\n                      <a\n                        href=\"https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation\"\n                        target=\"_blank\"\n                        rel=\"noreferrer\"\n                      >\n                        protection bypass for automation\n                      </a>{' '}\n                      in order to display protected deployments in its preview iframe for the\n                      current Sanity dataset.\n                    </Text>\n                  </Box>\n                  <Box>\n                    <Text>\n                      You can turn off automatic protection bypass at any time by clicking the\n                      button below.\n                    </Text>\n                  </Box>\n                  <Button\n                    mode=\"ghost\"\n                    tone=\"critical\"\n                    icon={<TrashIcon />}\n                    loading={removing}\n                    onClick={() => {\n                      dispatch({type: 'remove-secret'})\n                      disableVercelProtectionBypass(client)\n                        .then(() => {\n                          pushToast({\n                            status: 'warning',\n                            title: 'Protection bypass is now disabled',\n                          })\n                          dispatch({type: 'removed-secret'})\n                        })\n                        .catch((reason) => {\n                          // eslint-disable-next-line no-console\n                          console.error(reason)\n                          pushToast({\n                            status: 'error',\n                            title:\n                              'There was an error when trying to disable protection bypass. See the browser console for more information.',\n                          })\n                          dispatch({type: 'failed-remove-secret'})\n                        })\n                    }}\n                    text=\"Remove secret\"\n                  />\n                  <Text>\n                    Protection bypass remains enabled if this plugin is removed from your Sanity\n                    config.\n                  </Text>\n                </>\n              ) : (\n                <>\n                  <Box>\n                    <Text style={{textWrap: 'pretty'}}>\n                      Follow the instructions on{' '}\n                      <a\n                        href=\"https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation\"\n                        target=\"_blank\"\n                        rel=\"noreferrer\"\n                      >\n                        how to enable protection bypass for automation\n                      </a>\n                      .\n                    </Text>\n                  </Box>\n                  <Box>\n                    <Text>\n                      This will setup a secret that Vercel exposes as an environment variable called\n                      VERCEL_AUTOMATION_BYPASS_SECRET, its value is the secret you need.\n                    </Text>\n                  </Box>\n                  <Button\n                    mode=\"ghost\"\n                    icon={<AddIcon />}\n                    loading={state.status === 'loading'}\n                    onClick={() => {\n                      dispatch({type: 'add-secret'})\n                    }}\n                    text=\"Add secret\"\n                  />\n                  <Text>\n                    If you&apos;re using Sanity Presentation Tool with multiple protected\n                    deployments ensure that they have the same secret set, as this tool will set a\n                    secret that is shared in your dataset with all instances of Presentation Tool.\n                  </Text>\n                </>\n              )}\n            </Stack>\n          </Card>\n        </Stack>\n      </Box>\n      {(state.status === 'add-secret-dialog' || state.status === 'adding-secret') && (\n        <Dialog\n          animate\n          id=\"add-secret-dialog\"\n          onClickOutside={() => dispatch({type: 'cancel-add-secret'})}\n        >\n          <Card padding={3}>\n            <form\n              onSubmit={(event) => {\n                event.preventDefault()\n                event.currentTarget.reportValidity()\n                const formData = new FormData(event.currentTarget)\n                const secret = formData.get('secret') as string\n                if (secret) handleEnable(secret)\n              }}\n            >\n              <Stack space={3}>\n                <Stack space={2}>\n                  <Text as=\"label\" weight=\"semibold\" size={1}>\n                    Add bypass secret\n                  </Text>\n                  <Text muted size={1}>\n                    {`Make sure it's the same secret the Vercel deployment is using that's loaded in the preview iframe.`}\n                  </Text>\n                  <TextInput\n                    name=\"secret\"\n                    onFocus={(event) => {\n                      event.currentTarget.setCustomValidity('')\n                    }}\n                    onBlur={(event) => {\n                      event.currentTarget.setCustomValidity(\n                        event.currentTarget.value.length == 32\n                          ? ''\n                          : 'Secret must be 32 characters long',\n                      )\n                      event.currentTarget.required = true\n                    }}\n                    minLength={32}\n                    maxLength={32}\n                    autoComplete=\"off\"\n                    autoCapitalize=\"off\"\n                    autoCorrect=\"off\"\n                    spellCheck=\"false\"\n                    disabled={adding}\n                  />\n                </Stack>\n                <Button\n                  type=\"submit\"\n                  loading={adding}\n                  text={adding ? 'Saving…' : 'Save'}\n                  tone=\"positive\"\n                />\n              </Stack>\n            </form>\n          </Card>\n        </Dialog>\n      )}\n    </>\n  )\n}\n"],"names":["reducer","prevState","action","type","status","VercelProtectionBypassTool","$","_c","t0","Symbol","for","apiVersion","client","useClient","push","pushToast","useToast","t1","state","dispatch","useReducer","adding","removing","t2","secret","enableVercelProtectionBypass","then","title","catch","reason","error","handleEnable","t3","t4","unsubscribe","subcribeToVercelProtectionBypass","secret_0","useEffect","enabled","t5","height","alignItems","justifyContent","flexDirection","t6","maxWidth","t7","t8","justifyItems","textWrap","jsx","Heading","t9","Box","Stack","Card","jsxs","Fragment","Text","Button","TrashIcon","disableVercelProtectionBypass","reason_0","AddIcon","t10","Dialog","event","preventDefault","currentTarget","reportValidity","secret_1","FormData","get","TextInput","_temp","_temp2","t11","event_1","setCustomValidity","value","length","required","event_0"],"mappings":";;AA8BA,SAASA,QAAQC,WAAkBC,QAAuB;AACxD,UAAQA,OAAOC,MAAI;AAAA,IACjB,KAAK;AACI,aAAA;AAAA,QAAC,GAAGF;AAAAA,QAAWG,QAAQ;AAAA,MAAU;AAAA,IAC1C,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAiB;AAAA,IACjD,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAS;AAAA,IACzC,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAe;AAAA,IAC/C,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAU;AAAA,IAC1C,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAmB;AAAA,IACnD,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAS;AAAA,IACzC,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAmB;AAAA,IACnD;AACSH,aAAAA;AAAAA,EAAAA;AAEb;AAEA,SAAeI,6BAAA;AAAAC,QAAAA,IAAAC,uBAAA,EAAA;AAAAC,MAAAA;AAAAF,IAAA,CAAA,MAAAG,OAAAC,IAAA,2BAAA,KACYF,KAAA;AAAA,IAAAG,YAAAA,UAAAA;AAAAA,EAAAA,GAAwBL,OAAAE,MAAAA,KAAAF,EAAA,CAAA;AAAjDM,QAAAA,SAAeC,iBAAUL,EAAwB,GACjD;AAAA,IAAAM,MAAAC;AAAAA,MAA0BC,YAAS;AAACC,MAAAA;AAAAX,IAAA,CAAA,MAAAG,OAAAC,IAAA,2BAAA,KACUO,KAAA;AAAA,IAAAb,QAAS;AAAA,EAAA,GAAUE,OAAAW,MAAAA,KAAAX,EAAA,CAAA;AAAjE,QAAAY,CAAAA,OAAAC,QAAA,IAA0BC,MAAAA,WAAApB,SAAoBiB,EAAmB,GACjEI,SAAeH,MAAKd,WAAY,iBAChCkB,WAAiBJ,MAAKd,WAAY;AAAiBmB,MAAAA;AAAAjB,IAAAM,CAAAA,MAAAA,UAAAN,SAAAS,aAE9BQ,KAAAC,CAAA,WAAA;AACX,aAAA;AAAA,MAAArB,MAAQ;AAAA,IAAc,CAAA,GAC9BsB,6BAAAA,6BAA6Bb,QAAQY,MAAM,EAACE,KAAA,MAAA;AAEhC,eAAA;AAAA,QAAAvB,MAAQ;AAAA,MAAe,CAAA,GAC/BY,UAAS;AAAA,QAAAX,QACC;AAAA,QAASuB,OACV;AAAA,MAAA,CACR;AAAA,IAAA,CACF,EAACC,MAAAC,CAAA,WAAA;AAGAC,cAAAA,MAAcD,MAAM,GACpBd,UAAS;AAAA,QAAAX,QACC;AAAA,QAAOuB,OAEb;AAAA,MACH,CAAA,GACDR,SAAQ;AAAA,QAAAhB,MAAQ;AAAA,MAAA,CAAoB;AAAA,IAAA,CACrC;AAAA,EACJG,GAAAA,OAAAM,QAAAN,OAAAS,WAAAT,OAAAiB,MAAAA,KAAAjB,EAAA,CAAA;AApBD,QAAAyB,eAAqBR;AAoBpB,MAAAS,IAAAC;AAAA3B,WAAAM,UAESoB,KAAAA,MAAA;AACR,UAAAE,cAAoBC,6BAAAA,iCAAiCvB,QAAMwB,CAAAA,aACzDjB,SAAQ;AAAA,MAAAhB,MAAQqB,WAAS,iBAAiB;AAAA,IAAA,CAAiB,CAC7D;AAAC,WACYU,MAAAA,YAAY;AAAA,EAAC,GACzBD,MAACrB,MAAM,GAACN,OAAAM,QAAAN,OAAA0B,IAAA1B,OAAA2B,OAAAD,KAAA1B,EAAA,CAAA,GAAA2B,KAAA3B,EAAA,CAAA,IALX+B,gBAAUL,IAKPC,EAAQ;AAEXK,QAAAA,UAAgBpB,MAAKd,WAAY,aAAakB;AAAQiB,MAAAA;AAAAjC,IAAA,CAAA,MAAAG,OAAAC,IAAA,2BAAA,KAOzC6B,KAAA;AAAA,IAAAC,QACG;AAAA,IAAMC,YACF;AAAA,IAAQC,gBACJ;AAAA,IAAQC,eACT;AAAA,EAAA,GAChBrC,OAAAiC,MAAAA,KAAAjC,EAAA,CAAA;AAAAsC,MAAAA;AAAAtC,IAAA,CAAA,MAAAG,OAAAC,IAAA,2BAAA,KAG0BkC,KAAA;AAAA,IAAAC,UAAA;AAAA,EAAA,GAAevC,OAAAsC,MAAAA,KAAAtC,EAAA,CAAA;AAAA,MAAAwC,IAAAC;AAAAzC,IAAA,EAAA,MAAAG,OAAAC,IAAA,2BAAA,KACdoC,KAAA;AAAA,IAAAE,cAAe;AAAA,IAAYC,UAAY;AAAA,EAAA,GAC7DF,KAACG,+BAAAC,GAAAA,SAAA,EAAQ,sCAAwB,GAAU7C,QAAAwC,IAAAxC,QAAAyC,OAAAD,KAAAxC,EAAA,EAAA,GAAAyC,KAAAzC,EAAA,EAAA;AAAA8C,MAAAA;AAAA9C,YAAAM,UAAAN,EAAAgC,EAAAA,MAAAA,WAAAhC,EAAA,EAAA,MAAAS,aAAAT,UAAAgB,YAAAhB,EAAAY,EAAAA,MAAAA,MAAAd,UAbnDgD,oCAACC,GAAAA,KACQ,EAAA,QAAA,UACC,SAAA,QACD,OAAAd,IAOP,UAAAW,+BAACI,GAAAA,SAAa,OAAC,GACb,yCAACC,GAAAA,MAAc,EAAA,SAAC,GAAS,OAAAX,IACvB,0CAACU,GAAAA,OAAa,EAAA,OAAA,GAAU,OAAAR,IACtBC,UAAAA;AAAAA,IAAAA;AAAAA,IACCT,UAEGkB,2BAAA,KAAAC,qBAAA,EAAA,UAAA;AAAA,MAACP,2BAAA,IAAAG,GAAA,KAAA,EACC,UAACG,2BAAAA,KAAAE,GAAAA,MAAA,EAAY,OAAA;AAAA,QAAAT,UAAW;AAAA,MAAW,GAAA,UAAA;AAAA,QAAA;AAAA,QACK;AAAA,QACtCC,2BAAAA,WACO,MAAA,+HACE,QAAA,UACH,KAAA,cACL,UAED,mCAAA,CAAA;AAAA;QAAS;AAAA,MAAA,EAAA,CAGX,EACF,CAAA;AAAA,MACCA,+BAAAG,GAAAA,KAAA,EACC,UAACH,2BAAA,IAAAQ,GAAA,MAAA,EAAK,mGAGN,CAAA,GACF;AAAA,MACCR,2BAAA,IAAAS,GAAA,QAAA,EACM,MAAA,SACA,MAAA,YACC,MAAAT,2BAAAA,IAACU,MAAAA,WAAW,CAAA,CAAA,GACTtC,SAAAA,UACA,SAAA,MAAA;AACC,iBAAA;AAAA,UAAAnB,MAAQ;AAAA,QAAgB,CAAA,GAChC0D,6BAAAA,8BAA8BjD,MAAM,EAACc,KAAA,MAAA;AAExB,oBAAA;AAAA,YAAAtB,QACC;AAAA,YAASuB,OACV;AAAA,UACR,CAAA,GACDR,SAAQ;AAAA,YAAAhB,MAAQ;AAAA,UAAA,CAAiB;AAAA,QAAA,CAClC,EAACyB,MAAAkC,CAAA,aAAA;AAGAhC,kBAAAA,MAAcD,QAAM,GACpBd,UAAS;AAAA,YAAAX,QACC;AAAA,YAAOuB,OAEb;AAAA,UACH,CAAA,GACDR,SAAQ;AAAA,YAAAhB,MAAQ;AAAA,UAAA,CAAuB;AAAA,QAAA,CACxC;AAAA,MAAA,GAEA,MAAA,iBAEP;AAAA,MAAA+C,2BAAAA,IAACQ,WAAK,UAGN,uFAAA,CAAA;AAAA,IAAA,EAAA,CAAO,IAIPF,2BAAAA,KAAAC,WAAA,UAAA,EAAA,UAAA;AAAA,MAACP,2BAAA,IAAAG,GAAA,KAAA,EACC,UAACG,2BAAAA,KAAAE,GAAAA,MAAA,EAAY,OAAA;AAAA,QAAAT,UAAW;AAAA,MAAW,GAAA,UAAA;AAAA,QAAA;AAAA,QACJ;AAAA,QAC7BC,2BAAAA,IAMI,OALG,MAAA,+HACE,QAAA,UACH,KAAA,cACL,UAED,iDAAA,CAAA;AAAA;SAEF,EACF,CAAA;AAAA,MACCA,+BAAAG,GAAAA,KAAA,EACC,UAACH,2BAAA,IAAAQ,GAAA,MAAA,EAAK,8JAGN,CAAA,GACF;AAAA,MACCR,2BAAA,IAAAS,GAAA,QAAA,EACM,MAAA,SACC,MAACT,2BAAAA,IAAAa,MAAAA,SAAS,CAAA,CAAA,GACP,SAAA7C,MAAKd,WAAY,WACjB,SAAA,MAAA;AACC,iBAAA;AAAA,UAAAD,MAAQ;AAAA,QAAA,CAAa;AAAA,MAAA,GAE1B,MAAA,cAEP;AAAA,MAAA+C,2BAAAA,IAACQ,WAAK,UAIN,iOAAA,CAAA;AAAA,IAAA,EAAO,CAAA;AAAA,EAAA,EAAA,CAGb,EACF,CAAA,EAAA,CACF,EACF,CAAA,GAAMpD,QAAAM,QAAAN,QAAAgC,SAAAhC,QAAAS,WAAAT,QAAAgB,UAAAhB,EAAA,EAAA,IAAAY,MAAAd,QAAAE,QAAA8C,MAAAA,KAAA9C,EAAA,EAAA;AAAA0D,MAAAA;AAAA1D,IAAA,EAAA,MAAAe,UAAAf,EAAA,EAAA,MAAAyB,gBAAAzB,EAAA,EAAA,MAAAY,MAAAd,UACL4D,OAAC9C,MAAKd,WAAY,uBAAuBc,MAAKd,WAAY,oBACxD8C,2BAAA,IAAAe,GAAA,QAAA,EACC,SAAM,IACH,IAAA,qBACa,gBAAA,MAAM9C,SAAQ;AAAA,IAAAhB,MAAQ;AAAA,EAAoB,CAAA,GAE1D,UAAC+C,2BAAAA,IAAAK,GAAA,MAAA,EAAc,SAAC,GACd,UAAAL,2BAAA,IA8CO,QA7CK,EAAA,UAAAgB,CAAA,UAAA;AACRA,UAAKC,eAAgB,GACrBD,MAAKE,cAAAC,eAA8B;AAEnC,UAAAC,WADAC,IAAAA,SAA8BL,MAAKE,aAAA,EACZI,IAAK,QAAQ;AAChChD,gBAAQO,aAAaP,QAAM;AAAA,EAAA,GAGjC,UAAAgC,2BAAAA,KAACF,GAAAA,OAAa,EAAA,OAAC,GACb,UAAA;AAAA,IAACE,2BAAAA,KAAAF,GAAAA,OAAA,EAAa,OAAC,GACb,UAAA;AAAA,MAAAJ,2BAAAA,IAACQ,WAAQ,IAAA,SAAe,QAAA,YAAiB,MAAC,GAAE,UAE5C,oBAAA,CAAA;AAAA,qCACCA,GAAAA,MAAK,EAAA,WAAY,MAAC,GACmF,UACtG,sGAAA;AAAA,MACAR,2BAAAA,IAACuB,gBACM,MAAA,UACI,SAAAC,OAGD,QAAAC,QAQG,WAAC,IACD,WAAC,IACC,cAAA,OACE,gBAAA,OACH,aAAA,OACD,YAAA,SACDtD,UAAAA,OAAM,CAAA;AAAA,IAAA,GAEpB;AAAA,IACA6B,2BAAAA,IAACS,GAAAA,QACM,EAAA,MAAA,UACItC,SAAK,QACR,MAAAA,SAAS,iBAAY,QACtB,MAAA,WAAU,CAAA;AAAA,EAEnB,EAAA,CAAA,EACF,CAAA,GACF,EACF,CAAA,GACDf,QAAAe,QAAAf,QAAAyB,cAAAzB,EAAA,EAAA,IAAAY,MAAAd,QAAAE,QAAA0D,OAAAA,MAAA1D,EAAA,EAAA;AAAAsE,MAAAA;AAAAtE,SAAAA,EAAA0D,EAAAA,MAAAA,OAAA1D,UAAA8C,MAvKHwB,MACExB,2BAAAA,KAAAA,WAAAA,UAAAA,EAAAA,UAAAA;AAAAA,IAAAA;AAAAA,IA8GCY;AAAAA,EAAAA,EAwDA,CAAA,GACA1D,QAAA0D,KAAA1D,QAAA8C,IAAA9C,QAAAsE,OAAAA,MAAAtE,EAAA,EAAA,GAxKHsE;AAwKG;AA/MQ,SAAAD,OAAAE,SAAA;AAoLOX,UAAKE,cAAAU,kBACHZ,QAAKE,cAAAW,MAAAC,UAAA,KACD,KACA,mCACN,GACAd,QAAKE,cAAAa,WAAA;AAAA;AAzLZ,SAAAP,MAAAQ,SAAA;AAiLYd,UAAAA,cAAAU,kBAAiC,EAAE;AAAC;;"}

package/dist/_chunks-es/VercelProtectionBypassTool.js

@@ -0,0 +1,196 @@
+import { jsx, jsxs, Fragment } from "react/jsx-runtime";
+import { c } from "react-compiler-runtime";
+import { TrashIcon, AddIcon } from "@sanity/icons";
+import { apiVersion } from "@sanity/preview-url-secret/constants";
+import { enableVercelProtectionBypass, subcribeToVercelProtectionBypass, disableVercelProtectionBypass } from "@sanity/preview-url-secret/toggle-vercel-protection-bypass";
+import { useToast, Heading, Box, Stack, Card, Text, Button, Dialog, TextInput } from "@sanity/ui";
+import { useReducer, useEffect } from "react";
+import { useClient } from "sanity";
+function reducer(prevState, action) {
+  switch (action.type) {
+    case "removed-secret":
+      return {
+        ...prevState,
+        status: "disabled"
+      };
+    case "remove-secret":
+      return {
+        ...prevState,
+        status: "removing-secret"
+      };
+    case "saved-secret":
+      return {
+        ...prevState,
+        status: "enabled"
+      };
+    case "save-secret":
+      return {
+        ...prevState,
+        status: "adding-secret"
+      };
+    case "cancel-add-secret":
+      return {
+        ...prevState,
+        status: "disabled"
+      };
+    case "add-secret":
+      return {
+        ...prevState,
+        status: "add-secret-dialog"
+      };
+    case "failed-remove-secret":
+      return {
+        ...prevState,
+        status: "enabled"
+      };
+    case "failed-add-secret":
+      return {
+        ...prevState,
+        status: "add-secret-dialog"
+      };
+    default:
+      return prevState;
+  }
+}
+function VercelProtectionBypassTool() {
+  const $ = c(25);
+  let t0;
+  $[0] === Symbol.for("react.memo_cache_sentinel") ? (t0 = {
+    apiVersion
+  }, $[0] = t0) : t0 = $[0];
+  const client = useClient(t0), {
+    push: pushToast
+  } = useToast();
+  let t1;
+  $[1] === Symbol.for("react.memo_cache_sentinel") ? (t1 = {
+    status: "loading"
+  }, $[1] = t1) : t1 = $[1];
+  const [state, dispatch] = useReducer(reducer, t1), adding = state.status === "adding-secret", removing = state.status === "removing-secret";
+  let t2;
+  $[2] !== client || $[3] !== pushToast ? (t2 = (secret) => {
+    dispatch({
+      type: "save-secret"
+    }), enableVercelProtectionBypass(client, secret).then(() => {
+      dispatch({
+        type: "saved-secret"
+      }), pushToast({
+        status: "success",
+        title: "Protection bypass is now enabled"
+      });
+    }).catch((reason) => {
+      console.error(reason), pushToast({
+        status: "error",
+        title: "There was an error when trying to enable protection bypass. See the browser console for more information."
+      }), dispatch({
+        type: "failed-add-secret"
+      });
+    });
+  }, $[2] = client, $[3] = pushToast, $[4] = t2) : t2 = $[4];
+  const handleEnable = t2;
+  let t3, t4;
+  $[5] !== client ? (t3 = () => {
+    const unsubscribe = subcribeToVercelProtectionBypass(client, (secret_0) => dispatch({
+      type: secret_0 ? "saved-secret" : "removed-secret"
+    }));
+    return () => unsubscribe();
+  }, t4 = [client], $[5] = client, $[6] = t3, $[7] = t4) : (t3 = $[6], t4 = $[7]), useEffect(t3, t4);
+  const enabled = state.status === "enabled" || removing;
+  let t5;
+  $[8] === Symbol.for("react.memo_cache_sentinel") ? (t5 = {
+    height: "100%",
+    alignItems: "center",
+    justifyContent: "center",
+    flexDirection: "column"
+  }, $[8] = t5) : t5 = $[8];
+  let t6;
+  $[9] === Symbol.for("react.memo_cache_sentinel") ? (t6 = {
+    maxWidth: 640
+  }, $[9] = t6) : t6 = $[9];
+  let t7, t8;
+  $[10] === Symbol.for("react.memo_cache_sentinel") ? (t7 = {
+    justifyItems: "flex-start",
+    textWrap: "pretty"
+  }, t8 = /* @__PURE__ */ jsx(Heading, { children: "Vercel Protection Bypass" }), $[10] = t7, $[11] = t8) : (t7 = $[10], t8 = $[11]);
+  let t9;
+  $[12] !== client || $[13] !== enabled || $[14] !== pushToast || $[15] !== removing || $[16] !== state.status ? (t9 = /* @__PURE__ */ jsx(Box, { sizing: "border", display: "flex", style: t5, children: /* @__PURE__ */ jsx(Stack, { space: 5, children: /* @__PURE__ */ jsx(Card, { padding: 4, style: t6, children: /* @__PURE__ */ jsxs(Stack, { space: 4, style: t7, children: [
+    t8,
+    enabled ? /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsx(Box, { children: /* @__PURE__ */ jsxs(Text, { style: {
+        textWrap: "pretty"
+      }, children: [
+        "Sanity Presentation is setup to use",
+        " ",
+        /* @__PURE__ */ jsx("a", { href: "https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation", target: "_blank", rel: "noreferrer", children: "protection bypass for automation" }),
+        " ",
+        "in order to display protected deployments in its preview iframe for the current Sanity dataset."
+      ] }) }),
+      /* @__PURE__ */ jsx(Box, { children: /* @__PURE__ */ jsx(Text, { children: "You can turn off automatic protection bypass at any time by clicking the button below." }) }),
+      /* @__PURE__ */ jsx(Button, { mode: "ghost", tone: "critical", icon: /* @__PURE__ */ jsx(TrashIcon, {}), loading: removing, onClick: () => {
+        dispatch({
+          type: "remove-secret"
+        }), disableVercelProtectionBypass(client).then(() => {
+          pushToast({
+            status: "warning",
+            title: "Protection bypass is now disabled"
+          }), dispatch({
+            type: "removed-secret"
+          });
+        }).catch((reason_0) => {
+          console.error(reason_0), pushToast({
+            status: "error",
+            title: "There was an error when trying to disable protection bypass. See the browser console for more information."
+          }), dispatch({
+            type: "failed-remove-secret"
+          });
+        });
+      }, text: "Remove secret" }),
+      /* @__PURE__ */ jsx(Text, { children: "Protection bypass remains enabled if this plugin is removed from your Sanity config." })
+    ] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsx(Box, { children: /* @__PURE__ */ jsxs(Text, { style: {
+        textWrap: "pretty"
+      }, children: [
+        "Follow the instructions on",
+        " ",
+        /* @__PURE__ */ jsx("a", { href: "https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation", target: "_blank", rel: "noreferrer", children: "how to enable protection bypass for automation" }),
+        "."
+      ] }) }),
+      /* @__PURE__ */ jsx(Box, { children: /* @__PURE__ */ jsx(Text, { children: "This will setup a secret that Vercel exposes as an environment variable called VERCEL_AUTOMATION_BYPASS_SECRET, its value is the secret you need." }) }),
+      /* @__PURE__ */ jsx(Button, { mode: "ghost", icon: /* @__PURE__ */ jsx(AddIcon, {}), loading: state.status === "loading", onClick: () => {
+        dispatch({
+          type: "add-secret"
+        });
+      }, text: "Add secret" }),
+      /* @__PURE__ */ jsx(Text, { children: "If you're using Sanity Presentation Tool with multiple protected deployments ensure that they have the same secret set, as this tool will set a secret that is shared in your dataset with all instances of Presentation Tool." })
+    ] })
+  ] }) }) }) }), $[12] = client, $[13] = enabled, $[14] = pushToast, $[15] = removing, $[16] = state.status, $[17] = t9) : t9 = $[17];
+  let t10;
+  $[18] !== adding || $[19] !== handleEnable || $[20] !== state.status ? (t10 = (state.status === "add-secret-dialog" || state.status === "adding-secret") && /* @__PURE__ */ jsx(Dialog, { animate: !0, id: "add-secret-dialog", onClickOutside: () => dispatch({
+    type: "cancel-add-secret"
+  }), children: /* @__PURE__ */ jsx(Card, { padding: 3, children: /* @__PURE__ */ jsx("form", { onSubmit: (event) => {
+    event.preventDefault(), event.currentTarget.reportValidity();
+    const secret_1 = new FormData(event.currentTarget).get("secret");
+    secret_1 && handleEnable(secret_1);
+  }, children: /* @__PURE__ */ jsxs(Stack, { space: 3, children: [
+    /* @__PURE__ */ jsxs(Stack, { space: 2, children: [
+      /* @__PURE__ */ jsx(Text, { as: "label", weight: "semibold", size: 1, children: "Add bypass secret" }),
+      /* @__PURE__ */ jsx(Text, { muted: !0, size: 1, children: "Make sure it's the same secret the Vercel deployment is using that's loaded in the preview iframe." }),
+      /* @__PURE__ */ jsx(TextInput, { name: "secret", onFocus: _temp, onBlur: _temp2, minLength: 32, maxLength: 32, autoComplete: "off", autoCapitalize: "off", autoCorrect: "off", spellCheck: "false", disabled: adding })
+    ] }),
+    /* @__PURE__ */ jsx(Button, { type: "submit", loading: adding, text: adding ? "Saving\u2026" : "Save", tone: "positive" })
+  ] }) }) }) }), $[18] = adding, $[19] = handleEnable, $[20] = state.status, $[21] = t10) : t10 = $[21];
+  let t11;
+  return $[22] !== t10 || $[23] !== t9 ? (t11 = /* @__PURE__ */ jsxs(Fragment, { children: [
+    t9,
+    t10
+  ] }), $[22] = t10, $[23] = t9, $[24] = t11) : t11 = $[24], t11;
+}
+function _temp2(event_1) {
+  event_1.currentTarget.setCustomValidity(event_1.currentTarget.value.length == 32 ? "" : "Secret must be 32 characters long"), event_1.currentTarget.required = !0;
+}
+function _temp(event_0) {
+  event_0.currentTarget.setCustomValidity("");
+}
+export {
+  VercelProtectionBypassTool as default
+};
+//# sourceMappingURL=VercelProtectionBypassTool.js.map

package/dist/_chunks-es/VercelProtectionBypassTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VercelProtectionBypassTool.js","sources":["../../src/VercelProtectionBypassTool.tsx"],"sourcesContent":["import {AddIcon, TrashIcon} from '@sanity/icons'\nimport {apiVersion} from '@sanity/preview-url-secret/constants'\nimport {\n  disableVercelProtectionBypass,\n  enableVercelProtectionBypass,\n  subcribeToVercelProtectionBypass,\n} from '@sanity/preview-url-secret/toggle-vercel-protection-bypass'\nimport {Box, Button, Card, Dialog, Heading, Stack, Text, TextInput, useToast} from '@sanity/ui'\nimport {useEffect, useReducer} from 'react'\nimport {useClient} from 'sanity'\n\ninterface State {\n  status:\n    | 'loading'\n    | 'disabled'\n    | 'add-secret-dialog'\n    | 'adding-secret'\n    | 'enabled'\n    | 'removing-secret'\n}\ntype Action =\n  | {type: 'add-secret'}\n  | {type: 'save-secret'}\n  | {type: 'cancel-add-secret'}\n  | {type: 'failed-add-secret'}\n  | {type: 'saved-secret'}\n  | {type: 'remove-secret'}\n  | {type: 'failed-remove-secret'}\n  | {type: 'removed-secret'}\n\nfunction reducer(prevState: State, action: Action): State {\n  switch (action.type) {\n    case 'removed-secret':\n      return {...prevState, status: 'disabled'}\n    case 'remove-secret':\n      return {...prevState, status: 'removing-secret'}\n    case 'saved-secret':\n      return {...prevState, status: 'enabled'}\n    case 'save-secret':\n      return {...prevState, status: 'adding-secret'}\n    case 'cancel-add-secret':\n      return {...prevState, status: 'disabled'}\n    case 'add-secret':\n      return {...prevState, status: 'add-secret-dialog'}\n    case 'failed-remove-secret':\n      return {...prevState, status: 'enabled'}\n    case 'failed-add-secret':\n      return {...prevState, status: 'add-secret-dialog'}\n    default:\n      return prevState\n  }\n}\n\nexport default function VercelProtectionBypassTool(): React.JSX.Element {\n  const client = useClient({apiVersion: apiVersion})\n  const {push: pushToast} = useToast()\n  const [state, dispatch] = useReducer(reducer, {status: 'loading'})\n  const adding = state.status === 'adding-secret'\n  const removing = state.status === 'removing-secret'\n\n  const handleEnable = (secret: string) => {\n    dispatch({type: 'save-secret'})\n    enableVercelProtectionBypass(client, secret)\n      .then(() => {\n        dispatch({type: 'saved-secret'})\n        pushToast({\n          status: 'success',\n          title: 'Protection bypass is now enabled',\n        })\n      })\n      .catch((reason) => {\n        // eslint-disable-next-line no-console\n        console.error(reason)\n        pushToast({\n          status: 'error',\n          title:\n            'There was an error when trying to enable protection bypass. See the browser console for more information.',\n        })\n        dispatch({type: 'failed-add-secret'})\n      })\n  }\n\n  useEffect(() => {\n    const unsubscribe = subcribeToVercelProtectionBypass(client, (secret) =>\n      dispatch({type: secret ? 'saved-secret' : 'removed-secret'}),\n    )\n    return () => unsubscribe()\n  }, [client])\n\n  const enabled = state.status === 'enabled' || removing\n\n  return (\n    <>\n      <Box\n        sizing=\"border\"\n        display=\"flex\"\n        style={{\n          height: '100%',\n          alignItems: 'center',\n          justifyContent: 'center',\n          flexDirection: 'column',\n        }}\n      >\n        <Stack space={5}>\n          <Card padding={4} style={{maxWidth: 640}}>\n            <Stack space={4} style={{justifyItems: 'flex-start', textWrap: 'pretty'}}>\n              <Heading>Vercel Protection Bypass</Heading>\n              {enabled ? (\n                <>\n                  <Box>\n                    <Text style={{textWrap: 'pretty'}}>\n                      Sanity Presentation is setup to use{' '}\n                      <a\n                        href=\"https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation\"\n                        target=\"_blank\"\n                        rel=\"noreferrer\"\n                      >\n                        protection bypass for automation\n                      </a>{' '}\n                      in order to display protected deployments in its preview iframe for the\n                      current Sanity dataset.\n                    </Text>\n                  </Box>\n                  <Box>\n                    <Text>\n                      You can turn off automatic protection bypass at any time by clicking the\n                      button below.\n                    </Text>\n                  </Box>\n                  <Button\n                    mode=\"ghost\"\n                    tone=\"critical\"\n                    icon={<TrashIcon />}\n                    loading={removing}\n                    onClick={() => {\n                      dispatch({type: 'remove-secret'})\n                      disableVercelProtectionBypass(client)\n                        .then(() => {\n                          pushToast({\n                            status: 'warning',\n                            title: 'Protection bypass is now disabled',\n                          })\n                          dispatch({type: 'removed-secret'})\n                        })\n                        .catch((reason) => {\n                          // eslint-disable-next-line no-console\n                          console.error(reason)\n                          pushToast({\n                            status: 'error',\n                            title:\n                              'There was an error when trying to disable protection bypass. See the browser console for more information.',\n                          })\n                          dispatch({type: 'failed-remove-secret'})\n                        })\n                    }}\n                    text=\"Remove secret\"\n                  />\n                  <Text>\n                    Protection bypass remains enabled if this plugin is removed from your Sanity\n                    config.\n                  </Text>\n                </>\n              ) : (\n                <>\n                  <Box>\n                    <Text style={{textWrap: 'pretty'}}>\n                      Follow the instructions on{' '}\n                      <a\n                        href=\"https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation\"\n                        target=\"_blank\"\n                        rel=\"noreferrer\"\n                      >\n                        how to enable protection bypass for automation\n                      </a>\n                      .\n                    </Text>\n                  </Box>\n                  <Box>\n                    <Text>\n                      This will setup a secret that Vercel exposes as an environment variable called\n                      VERCEL_AUTOMATION_BYPASS_SECRET, its value is the secret you need.\n                    </Text>\n                  </Box>\n                  <Button\n                    mode=\"ghost\"\n                    icon={<AddIcon />}\n                    loading={state.status === 'loading'}\n                    onClick={() => {\n                      dispatch({type: 'add-secret'})\n                    }}\n                    text=\"Add secret\"\n                  />\n                  <Text>\n                    If you&apos;re using Sanity Presentation Tool with multiple protected\n                    deployments ensure that they have the same secret set, as this tool will set a\n                    secret that is shared in your dataset with all instances of Presentation Tool.\n                  </Text>\n                </>\n              )}\n            </Stack>\n          </Card>\n        </Stack>\n      </Box>\n      {(state.status === 'add-secret-dialog' || state.status === 'adding-secret') && (\n        <Dialog\n          animate\n          id=\"add-secret-dialog\"\n          onClickOutside={() => dispatch({type: 'cancel-add-secret'})}\n        >\n          <Card padding={3}>\n            <form\n              onSubmit={(event) => {\n                event.preventDefault()\n                event.currentTarget.reportValidity()\n                const formData = new FormData(event.currentTarget)\n                const secret = formData.get('secret') as string\n                if (secret) handleEnable(secret)\n              }}\n            >\n              <Stack space={3}>\n                <Stack space={2}>\n                  <Text as=\"label\" weight=\"semibold\" size={1}>\n                    Add bypass secret\n                  </Text>\n                  <Text muted size={1}>\n                    {`Make sure it's the same secret the Vercel deployment is using that's loaded in the preview iframe.`}\n                  </Text>\n                  <TextInput\n                    name=\"secret\"\n                    onFocus={(event) => {\n                      event.currentTarget.setCustomValidity('')\n                    }}\n                    onBlur={(event) => {\n                      event.currentTarget.setCustomValidity(\n                        event.currentTarget.value.length == 32\n                          ? ''\n                          : 'Secret must be 32 characters long',\n                      )\n                      event.currentTarget.required = true\n                    }}\n                    minLength={32}\n                    maxLength={32}\n                    autoComplete=\"off\"\n                    autoCapitalize=\"off\"\n                    autoCorrect=\"off\"\n                    spellCheck=\"false\"\n                    disabled={adding}\n                  />\n                </Stack>\n                <Button\n                  type=\"submit\"\n                  loading={adding}\n                  text={adding ? 'Saving…' : 'Save'}\n                  tone=\"positive\"\n                />\n              </Stack>\n            </form>\n          </Card>\n        </Dialog>\n      )}\n    </>\n  )\n}\n"],"names":["reducer","prevState","action","type","status","VercelProtectionBypassTool","$","_c","t0","Symbol","for","apiVersion","client","useClient","push","pushToast","useToast","t1","state","dispatch","useReducer","adding","removing","t2","secret","enableVercelProtectionBypass","then","title","catch","reason","error","handleEnable","t3","t4","unsubscribe","subcribeToVercelProtectionBypass","secret_0","useEffect","enabled","t5","height","alignItems","justifyContent","flexDirection","t6","maxWidth","t7","t8","justifyItems","textWrap","t9","disableVercelProtectionBypass","reason_0","t10","event","preventDefault","currentTarget","reportValidity","secret_1","FormData","get","_temp","_temp2","t11","event_1","setCustomValidity","value","length","required","event_0"],"mappings":";;;;;;;;AA8BA,SAASA,QAAQC,WAAkBC,QAAuB;AACxD,UAAQA,OAAOC,MAAI;AAAA,IACjB,KAAK;AACI,aAAA;AAAA,QAAC,GAAGF;AAAAA,QAAWG,QAAQ;AAAA,MAAU;AAAA,IAC1C,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAiB;AAAA,IACjD,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAS;AAAA,IACzC,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAe;AAAA,IAC/C,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAU;AAAA,IAC1C,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAmB;AAAA,IACnD,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAS;AAAA,IACzC,KAAK;AACI,aAAA;AAAA,QAAC,GAAGH;AAAAA,QAAWG,QAAQ;AAAA,MAAmB;AAAA,IACnD;AACSH,aAAAA;AAAAA,EAAAA;AAEb;AAEA,SAAeI,6BAAA;AAAAC,QAAAA,IAAAC,EAAA,EAAA;AAAAC,MAAAA;AAAAF,IAAA,CAAA,MAAAG,OAAAC,IAAA,2BAAA,KACYF,KAAA;AAAA,IAAAG;AAAAA,EAAAA,GAAwBL,OAAAE,MAAAA,KAAAF,EAAA,CAAA;AAAjDM,QAAAA,SAAeC,UAAUL,EAAwB,GACjD;AAAA,IAAAM,MAAAC;AAAAA,MAA0BC,SAAS;AAACC,MAAAA;AAAAX,IAAA,CAAA,MAAAG,OAAAC,IAAA,2BAAA,KACUO,KAAA;AAAA,IAAAb,QAAS;AAAA,EAAA,GAAUE,OAAAW,MAAAA,KAAAX,EAAA,CAAA;AAAjE,QAAAY,CAAAA,OAAAC,QAAA,IAA0BC,WAAApB,SAAoBiB,EAAmB,GACjEI,SAAeH,MAAKd,WAAY,iBAChCkB,WAAiBJ,MAAKd,WAAY;AAAiBmB,MAAAA;AAAAjB,IAAAM,CAAAA,MAAAA,UAAAN,SAAAS,aAE9BQ,KAAAC,CAAA,WAAA;AACX,aAAA;AAAA,MAAArB,MAAQ;AAAA,IAAc,CAAA,GAC9BsB,6BAA6Bb,QAAQY,MAAM,EAACE,KAAA,MAAA;AAEhC,eAAA;AAAA,QAAAvB,MAAQ;AAAA,MAAe,CAAA,GAC/BY,UAAS;AAAA,QAAAX,QACC;AAAA,QAASuB,OACV;AAAA,MAAA,CACR;AAAA,IAAA,CACF,EAACC,MAAAC,CAAA,WAAA;AAGAC,cAAAA,MAAcD,MAAM,GACpBd,UAAS;AAAA,QAAAX,QACC;AAAA,QAAOuB,OAEb;AAAA,MACH,CAAA,GACDR,SAAQ;AAAA,QAAAhB,MAAQ;AAAA,MAAA,CAAoB;AAAA,IAAA,CACrC;AAAA,EACJG,GAAAA,OAAAM,QAAAN,OAAAS,WAAAT,OAAAiB,MAAAA,KAAAjB,EAAA,CAAA;AApBD,QAAAyB,eAAqBR;AAoBpB,MAAAS,IAAAC;AAAA3B,WAAAM,UAESoB,KAAAA,MAAA;AACR,UAAAE,cAAoBC,iCAAiCvB,QAAMwB,CAAAA,aACzDjB,SAAQ;AAAA,MAAAhB,MAAQqB,WAAS,iBAAiB;AAAA,IAAA,CAAiB,CAC7D;AAAC,WACYU,MAAAA,YAAY;AAAA,EAAC,GACzBD,MAACrB,MAAM,GAACN,OAAAM,QAAAN,OAAA0B,IAAA1B,OAAA2B,OAAAD,KAAA1B,EAAA,CAAA,GAAA2B,KAAA3B,EAAA,CAAA,IALX+B,UAAUL,IAKPC,EAAQ;AAEXK,QAAAA,UAAgBpB,MAAKd,WAAY,aAAakB;AAAQiB,MAAAA;AAAAjC,IAAA,CAAA,MAAAG,OAAAC,IAAA,2BAAA,KAOzC6B,KAAA;AAAA,IAAAC,QACG;AAAA,IAAMC,YACF;AAAA,IAAQC,gBACJ;AAAA,IAAQC,eACT;AAAA,EAAA,GAChBrC,OAAAiC,MAAAA,KAAAjC,EAAA,CAAA;AAAAsC,MAAAA;AAAAtC,IAAA,CAAA,MAAAG,OAAAC,IAAA,2BAAA,KAG0BkC,KAAA;AAAA,IAAAC,UAAA;AAAA,EAAA,GAAevC,OAAAsC,MAAAA,KAAAtC,EAAA,CAAA;AAAA,MAAAwC,IAAAC;AAAAzC,IAAA,EAAA,MAAAG,OAAAC,IAAA,2BAAA,KACdoC,KAAA;AAAA,IAAAE,cAAe;AAAA,IAAYC,UAAY;AAAA,EAAA,GAC7DF,KAAC,oBAAA,SAAA,EAAQ,sCAAwB,GAAUzC,QAAAwC,IAAAxC,QAAAyC,OAAAD,KAAAxC,EAAA,EAAA,GAAAyC,KAAAzC,EAAA,EAAA;AAAA4C,MAAAA;AAAA5C,YAAAM,UAAAN,EAAAgC,EAAAA,MAAAA,WAAAhC,EAAA,EAAA,MAAAS,aAAAT,UAAAgB,YAAAhB,EAAAY,EAAAA,MAAAA,MAAAd,UAbnD8C,yBAAC,KACQ,EAAA,QAAA,UACC,SAAA,QACD,OAAAX,IAOP,UAAA,oBAAC,SAAa,OAAC,GACb,8BAAC,MAAc,EAAA,SAAC,GAAS,OAAAK,IACvB,+BAAC,OAAa,EAAA,OAAA,GAAU,OAAAE,IACtBC,UAAAA;AAAAA,IAAAA;AAAAA,IACCT,UAEG,qBAAA,UAAA,EAAA,UAAA;AAAA,MAAC,oBAAA,KAAA,EACC,UAAC,qBAAA,MAAA,EAAY,OAAA;AAAA,QAAAW,UAAW;AAAA,MAAW,GAAA,UAAA;AAAA,QAAA;AAAA,QACK;AAAA,QACtC,2BACO,MAAA,+HACE,QAAA,UACH,KAAA,cACL,UAED,mCAAA,CAAA;AAAA;QAAS;AAAA,MAAA,EAAA,CAGX,EACF,CAAA;AAAA,MACC,oBAAA,KAAA,EACC,UAAC,oBAAA,MAAA,EAAK,mGAGN,CAAA,GACF;AAAA,MACC,oBAAA,QAAA,EACM,MAAA,SACA,MAAA,YACC,MAAA,oBAAC,WAAW,CAAA,CAAA,GACT3B,SAAAA,UACA,SAAA,MAAA;AACC,iBAAA;AAAA,UAAAnB,MAAQ;AAAA,QAAgB,CAAA,GAChCgD,8BAA8BvC,MAAM,EAACc,KAAA,MAAA;AAExB,oBAAA;AAAA,YAAAtB,QACC;AAAA,YAASuB,OACV;AAAA,UACR,CAAA,GACDR,SAAQ;AAAA,YAAAhB,MAAQ;AAAA,UAAA,CAAiB;AAAA,QAAA,CAClC,EAACyB,MAAAwB,CAAA,aAAA;AAGAtB,kBAAAA,MAAcD,QAAM,GACpBd,UAAS;AAAA,YAAAX,QACC;AAAA,YAAOuB,OAEb;AAAA,UACH,CAAA,GACDR,SAAQ;AAAA,YAAAhB,MAAQ;AAAA,UAAA,CAAuB;AAAA,QAAA,CACxC;AAAA,MAAA,GAEA,MAAA,iBAEP;AAAA,MAAA,oBAAC,QAAK,UAGN,uFAAA,CAAA;AAAA,IAAA,EAAA,CAAO,IAIP,qBAAA,UAAA,EAAA,UAAA;AAAA,MAAC,oBAAA,KAAA,EACC,UAAC,qBAAA,MAAA,EAAY,OAAA;AAAA,QAAA8C,UAAW;AAAA,MAAW,GAAA,UAAA;AAAA,QAAA;AAAA,QACJ;AAAA,QAC7B,oBAMI,OALG,MAAA,+HACE,QAAA,UACH,KAAA,cACL,UAED,iDAAA,CAAA;AAAA;SAEF,EACF,CAAA;AAAA,MACC,oBAAA,KAAA,EACC,UAAC,oBAAA,MAAA,EAAK,8JAGN,CAAA,GACF;AAAA,MACC,oBAAA,QAAA,EACM,MAAA,SACC,MAAC,oBAAA,SAAS,CAAA,CAAA,GACP,SAAA/B,MAAKd,WAAY,WACjB,SAAA,MAAA;AACC,iBAAA;AAAA,UAAAD,MAAQ;AAAA,QAAA,CAAa;AAAA,MAAA,GAE1B,MAAA,cAEP;AAAA,MAAA,oBAAC,QAAK,UAIN,iOAAA,CAAA;AAAA,IAAA,EAAO,CAAA;AAAA,EAAA,EAAA,CAGb,EACF,CAAA,EAAA,CACF,EACF,CAAA,GAAMG,QAAAM,QAAAN,QAAAgC,SAAAhC,QAAAS,WAAAT,QAAAgB,UAAAhB,EAAA,EAAA,IAAAY,MAAAd,QAAAE,QAAA4C,MAAAA,KAAA5C,EAAA,EAAA;AAAA+C,MAAAA;AAAA/C,IAAA,EAAA,MAAAe,UAAAf,EAAA,EAAA,MAAAyB,gBAAAzB,EAAA,EAAA,MAAAY,MAAAd,UACLiD,OAACnC,MAAKd,WAAY,uBAAuBc,MAAKd,WAAY,oBACxD,oBAAA,QAAA,EACC,SAAM,IACH,IAAA,qBACa,gBAAA,MAAMe,SAAQ;AAAA,IAAAhB,MAAQ;AAAA,EAAoB,CAAA,GAE1D,UAAC,oBAAA,MAAA,EAAc,SAAC,GACd,UAAA,oBA8CO,QA7CK,EAAA,UAAAmD,CAAA,UAAA;AACRA,UAAKC,eAAgB,GACrBD,MAAKE,cAAAC,eAA8B;AAEnC,UAAAC,WADAC,IAAAA,SAA8BL,MAAKE,aAAA,EACZI,IAAK,QAAQ;AAChCpC,gBAAQO,aAAaP,QAAM;AAAA,EAAA,GAGjC,UAAA,qBAAC,OAAa,EAAA,OAAC,GACb,UAAA;AAAA,IAAC,qBAAA,OAAA,EAAa,OAAC,GACb,UAAA;AAAA,MAAA,oBAAC,QAAQ,IAAA,SAAe,QAAA,YAAiB,MAAC,GAAE,UAE5C,oBAAA,CAAA;AAAA,0BACC,MAAK,EAAA,WAAY,MAAC,GACmF,UACtG,sGAAA;AAAA,MACA,oBAAC,aACM,MAAA,UACI,SAAAqC,OAGD,QAAAC,QAQG,WAAC,IACD,WAAC,IACC,cAAA,OACE,gBAAA,OACH,aAAA,OACD,YAAA,SACDzC,UAAAA,OAAM,CAAA;AAAA,IAAA,GAEpB;AAAA,IACA,oBAAC,QACM,EAAA,MAAA,UACIA,SAAK,QACR,MAAAA,SAAS,iBAAY,QACtB,MAAA,WAAU,CAAA;AAAA,EAEnB,EAAA,CAAA,EACF,CAAA,GACF,EACF,CAAA,GACDf,QAAAe,QAAAf,QAAAyB,cAAAzB,EAAA,EAAA,IAAAY,MAAAd,QAAAE,QAAA+C,OAAAA,MAAA/C,EAAA,EAAA;AAAAyD,MAAAA;AAAAzD,SAAAA,EAAA+C,EAAAA,MAAAA,OAAA/C,UAAA4C,MAvKHa,MACEb,qBAAAA,UAAAA,EAAAA,UAAAA;AAAAA,IAAAA;AAAAA,IA8GCG;AAAAA,EAAAA,EAwDA,CAAA,GACA/C,QAAA+C,KAAA/C,QAAA4C,IAAA5C,QAAAyD,OAAAA,MAAAzD,EAAA,EAAA,GAxKHyD;AAwKG;AA/MQ,SAAAD,OAAAE,SAAA;AAoLOV,UAAKE,cAAAS,kBACHX,QAAKE,cAAAU,MAAAC,UAAA,KACD,KACA,mCACN,GACAb,QAAKE,cAAAY,WAAA;AAAA;AAzLZ,SAAAP,MAAAQ,SAAA;AAiLYb,UAAAA,cAAAS,kBAAiC,EAAE;AAAC;"}

package/dist/index.cjs

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: !0 });
+var react = require("react"), sanity = require("sanity");
+const id = "vercel-protection-bypass", vercelProtectionBypassTool = sanity.definePlugin((options) => {
+  const {
+    name,
+    title,
+    icon,
+    ...config
+  } = options || {};
+  return {
+    name: `@sanity/preview-url-secret/${id}`,
+    tools: [{
+      name: name || "vercel-protection-bypass",
+      title: title || "Vercel Protection Bypass",
+      icon,
+      component: react.lazy(() => Promise.resolve().then(function() {
+        return require("./_chunks-cjs/VercelProtectionBypassTool.cjs");
+      })),
+      options: config,
+      __internalApplicationType: `sanity/${id}`
+    }]
+  };
+});
+exports.vercelProtectionBypassTool = vercelProtectionBypassTool;
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sources":["../src/index.ts"],"sourcesContent":["import {lazy} from 'react'\nimport {definePlugin} from 'sanity'\n\nconst id = 'vercel-protection-bypass'\n\nexport interface VercelProtectionBypassConfig {\n  name?: string\n  title?: string\n  icon?: React.ComponentType\n}\n\nexport const vercelProtectionBypassTool = definePlugin<VercelProtectionBypassConfig | void>(\n  (options) => {\n    const {name, title, icon, ...config} = options || {}\n    return {\n      name: `@sanity/preview-url-secret/${id}`,\n      tools: [\n        {\n          name: name || 'vercel-protection-bypass',\n          title: title || 'Vercel Protection Bypass',\n          icon: icon,\n          component: lazy(() => import('./VercelProtectionBypassTool')),\n          options: config,\n          __internalApplicationType: `sanity/${id}`,\n        },\n      ],\n    }\n  },\n)\n"],"names":["id","vercelProtectionBypassTool","definePlugin","options","name","title","icon","config","tools","component","lazy","__internalApplicationType"],"mappings":";;;AAGA,MAAMA,KAAK,4BAQEC,6BAA6BC,OAAAA,aACvCC,CAAY,YAAA;AACL,QAAA;AAAA,IAACC;AAAAA,IAAMC;AAAAA,IAAOC;AAAAA,IAAM,GAAGC;AAAAA,EAAM,IAAIJ,WAAW,CAAC;AAC5C,SAAA;AAAA,IACLC,MAAM,8BAA8BJ,EAAE;AAAA,IACtCQ,OAAO,CACL;AAAA,MACEJ,MAAMA,QAAQ;AAAA,MACdC,OAAOA,SAAS;AAAA,MAChBC;AAAAA,MACAG,WAAWC,MAAAA,KAAK,MAAM,QAAO,QAAA,EAAA,KAAA,WAAA;AAAA,eAAA,QAAA,8CAA8B;AAAA,QAAC;AAAA,MAC5DP,SAASI;AAAAA,MACTI,2BAA2B,UAAUX,EAAE;AAAA,IACxC,CAAA;AAAA,EAEL;AACF,CACF;;"}

package/dist/index.d.cts

@@ -0,0 +1,11 @@
+import {Plugin as Plugin_2} from 'sanity'
+
+export declare interface VercelProtectionBypassConfig {
+  name?: string
+  title?: string
+  icon?: React.ComponentType
+}
+
+export declare const vercelProtectionBypassTool: Plugin_2<void | VercelProtectionBypassConfig>
+
+export {}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+import {Plugin as Plugin_2} from 'sanity'
+
+export declare interface VercelProtectionBypassConfig {
+  name?: string
+  title?: string
+  icon?: React.ComponentType
+}
+
+export declare const vercelProtectionBypassTool: Plugin_2<void | VercelProtectionBypassConfig>
+
+export {}

package/dist/index.js

@@ -0,0 +1,25 @@
+import { lazy } from "react";
+import { definePlugin } from "sanity";
+const id = "vercel-protection-bypass", vercelProtectionBypassTool = definePlugin((options) => {
+  const {
+    name,
+    title,
+    icon,
+    ...config
+  } = options || {};
+  return {
+    name: `@sanity/preview-url-secret/${id}`,
+    tools: [{
+      name: name || "vercel-protection-bypass",
+      title: title || "Vercel Protection Bypass",
+      icon,
+      component: lazy(() => import("./_chunks-es/VercelProtectionBypassTool.js")),
+      options: config,
+      __internalApplicationType: `sanity/${id}`
+    }]
+  };
+});
+export {
+  vercelProtectionBypassTool
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../src/index.ts"],"sourcesContent":["import {lazy} from 'react'\nimport {definePlugin} from 'sanity'\n\nconst id = 'vercel-protection-bypass'\n\nexport interface VercelProtectionBypassConfig {\n  name?: string\n  title?: string\n  icon?: React.ComponentType\n}\n\nexport const vercelProtectionBypassTool = definePlugin<VercelProtectionBypassConfig | void>(\n  (options) => {\n    const {name, title, icon, ...config} = options || {}\n    return {\n      name: `@sanity/preview-url-secret/${id}`,\n      tools: [\n        {\n          name: name || 'vercel-protection-bypass',\n          title: title || 'Vercel Protection Bypass',\n          icon: icon,\n          component: lazy(() => import('./VercelProtectionBypassTool')),\n          options: config,\n          __internalApplicationType: `sanity/${id}`,\n        },\n      ],\n    }\n  },\n)\n"],"names":["id","vercelProtectionBypassTool","definePlugin","options","name","title","icon","config","tools","component","lazy","__internalApplicationType"],"mappings":";;AAGA,MAAMA,KAAK,4BAQEC,6BAA6BC,aACvCC,CAAY,YAAA;AACL,QAAA;AAAA,IAACC;AAAAA,IAAMC;AAAAA,IAAOC;AAAAA,IAAM,GAAGC;AAAAA,EAAM,IAAIJ,WAAW,CAAC;AAC5C,SAAA;AAAA,IACLC,MAAM,8BAA8BJ,EAAE;AAAA,IACtCQ,OAAO,CACL;AAAA,MACEJ,MAAMA,QAAQ;AAAA,MACdC,OAAOA,SAAS;AAAA,MAChBC;AAAAA,MACAG,WAAWC,KAAK,MAAM,OAAO,4CAA8B,CAAC;AAAA,MAC5DP,SAASI;AAAAA,MACTI,2BAA2B,UAAUX,EAAE;AAAA,IACxC,CAAA;AAAA,EAEL;AACF,CACF;"}

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "@sanity/vercel-protection-bypass",
+  "version": "1.0.0",
+  "homepage": "https://github.com/sanity-io/visual-editing/tree/main/packages/vercel-protection-bypass#readme",
+  "bugs": {
+    "url": "https://github.com/sanity-io/visual-editing/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+ssh://git@github.com/sanity-io/visual-editing.git",
+    "directory": "packages/vercel-protection-bypass"
+  },
+  "license": "MIT",
+  "author": "Sanity.io <hello@sanity.io>",
+  "sideEffects": false,
+  "type": "module",
+  "exports": {
+    ".": {
+      "source": "./src/index.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "src",
+    "!src/**/*.test.ts",
+    "!src/**/*.test-d.ts",
+    "CHANGELOG.md"
+  ],
+  "browserslist": "extends @sanity/browserslist-config",
+  "prettier": "@repo/prettier-config",
+  "eslintConfig": {
+    "extends": [
+      "@repo/eslint-config"
+    ],
+    "root": true
+  },
+  "dependencies": {
+    "@sanity/icons": "^3.5.7",
+    "@sanity/ui": "^2.11.1",
+    "react-compiler-runtime": "19.0.0-beta-55955c9-20241229",
+    "@sanity/preview-url-secret": "^2.1.0"
+  },
+  "devDependencies": {
+    "@sanity/pkg-utils": "6.13.4",
+    "babel-plugin-react-compiler": "19.0.0-beta-63e3235-20250105",
+    "eslint": "^8.57.1",
+    "react": "^19.0.0",
+    "sanity": "3.69.0",
+    "typescript": "5.7.2",
+    "vitest": "^2.1.8",
+    "@repo/eslint-config": "0.0.0",
+    "@repo/package.config": "0.0.0",
+    "@repo/prettier-config": "0.0.0"
+  },
+  "peerDependencies": {
+    "react": "^18.3 || ^19",
+    "sanity": "^3.69.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "pkg build --strict --check --clean",
+    "dev": "pkg build --strict",
+    "lint": "eslint --cache .",
+    "test": "vitest --pass-with-no-tests --typecheck"
+  }
+}

package/src/VercelProtectionBypassTool.tsx

@@ -0,0 +1,263 @@
+import {AddIcon, TrashIcon} from '@sanity/icons'
+import {apiVersion} from '@sanity/preview-url-secret/constants'
+import {
+  disableVercelProtectionBypass,
+  enableVercelProtectionBypass,
+  subcribeToVercelProtectionBypass,
+} from '@sanity/preview-url-secret/toggle-vercel-protection-bypass'
+import {Box, Button, Card, Dialog, Heading, Stack, Text, TextInput, useToast} from '@sanity/ui'
+import {useEffect, useReducer} from 'react'
+import {useClient} from 'sanity'
+
+interface State {
+  status:
+    | 'loading'
+    | 'disabled'
+    | 'add-secret-dialog'
+    | 'adding-secret'
+    | 'enabled'
+    | 'removing-secret'
+}
+type Action =
+  | {type: 'add-secret'}
+  | {type: 'save-secret'}
+  | {type: 'cancel-add-secret'}
+  | {type: 'failed-add-secret'}
+  | {type: 'saved-secret'}
+  | {type: 'remove-secret'}
+  | {type: 'failed-remove-secret'}
+  | {type: 'removed-secret'}
+
+function reducer(prevState: State, action: Action): State {
+  switch (action.type) {
+    case 'removed-secret':
+      return {...prevState, status: 'disabled'}
+    case 'remove-secret':
+      return {...prevState, status: 'removing-secret'}
+    case 'saved-secret':
+      return {...prevState, status: 'enabled'}
+    case 'save-secret':
+      return {...prevState, status: 'adding-secret'}
+    case 'cancel-add-secret':
+      return {...prevState, status: 'disabled'}
+    case 'add-secret':
+      return {...prevState, status: 'add-secret-dialog'}
+    case 'failed-remove-secret':
+      return {...prevState, status: 'enabled'}
+    case 'failed-add-secret':
+      return {...prevState, status: 'add-secret-dialog'}
+    default:
+      return prevState
+  }
+}
+
+export default function VercelProtectionBypassTool(): React.JSX.Element {
+  const client = useClient({apiVersion: apiVersion})
+  const {push: pushToast} = useToast()
+  const [state, dispatch] = useReducer(reducer, {status: 'loading'})
+  const adding = state.status === 'adding-secret'
+  const removing = state.status === 'removing-secret'
+
+  const handleEnable = (secret: string) => {
+    dispatch({type: 'save-secret'})
+    enableVercelProtectionBypass(client, secret)
+      .then(() => {
+        dispatch({type: 'saved-secret'})
+        pushToast({
+          status: 'success',
+          title: 'Protection bypass is now enabled',
+        })
+      })
+      .catch((reason) => {
+        // eslint-disable-next-line no-console
+        console.error(reason)
+        pushToast({
+          status: 'error',
+          title:
+            'There was an error when trying to enable protection bypass. See the browser console for more information.',
+        })
+        dispatch({type: 'failed-add-secret'})
+      })
+  }
+
+  useEffect(() => {
+    const unsubscribe = subcribeToVercelProtectionBypass(client, (secret) =>
+      dispatch({type: secret ? 'saved-secret' : 'removed-secret'}),
+    )
+    return () => unsubscribe()
+  }, [client])
+
+  const enabled = state.status === 'enabled' || removing
+
+  return (
+    <>
+      <Box
+        sizing="border"
+        display="flex"
+        style={{
+          height: '100%',
+          alignItems: 'center',
+          justifyContent: 'center',
+          flexDirection: 'column',
+        }}
+      >
+        <Stack space={5}>
+          <Card padding={4} style={{maxWidth: 640}}>
+            <Stack space={4} style={{justifyItems: 'flex-start', textWrap: 'pretty'}}>
+              <Heading>Vercel Protection Bypass</Heading>
+              {enabled ? (
+                <>
+                  <Box>
+                    <Text style={{textWrap: 'pretty'}}>
+                      Sanity Presentation is setup to use{' '}
+                      <a
+                        href="https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation"
+                        target="_blank"
+                        rel="noreferrer"
+                      >
+                        protection bypass for automation
+                      </a>{' '}
+                      in order to display protected deployments in its preview iframe for the
+                      current Sanity dataset.
+                    </Text>
+                  </Box>
+                  <Box>
+                    <Text>
+                      You can turn off automatic protection bypass at any time by clicking the
+                      button below.
+                    </Text>
+                  </Box>
+                  <Button
+                    mode="ghost"
+                    tone="critical"
+                    icon={<TrashIcon />}
+                    loading={removing}
+                    onClick={() => {
+                      dispatch({type: 'remove-secret'})
+                      disableVercelProtectionBypass(client)
+                        .then(() => {
+                          pushToast({
+                            status: 'warning',
+                            title: 'Protection bypass is now disabled',
+                          })
+                          dispatch({type: 'removed-secret'})
+                        })
+                        .catch((reason) => {
+                          // eslint-disable-next-line no-console
+                          console.error(reason)
+                          pushToast({
+                            status: 'error',
+                            title:
+                              'There was an error when trying to disable protection bypass. See the browser console for more information.',
+                          })
+                          dispatch({type: 'failed-remove-secret'})
+                        })
+                    }}
+                    text="Remove secret"
+                  />
+                  <Text>
+                    Protection bypass remains enabled if this plugin is removed from your Sanity
+                    config.
+                  </Text>
+                </>
+              ) : (
+                <>
+                  <Box>
+                    <Text style={{textWrap: 'pretty'}}>
+                      Follow the instructions on{' '}
+                      <a
+                        href="https://vercel.com/docs/security/deployment-protection/methods-to-bypass-deployment-protection/protection-bypass-automation"
+                        target="_blank"
+                        rel="noreferrer"
+                      >
+                        how to enable protection bypass for automation
+                      </a>
+                      .
+                    </Text>
+                  </Box>
+                  <Box>
+                    <Text>
+                      This will setup a secret that Vercel exposes as an environment variable called
+                      VERCEL_AUTOMATION_BYPASS_SECRET, its value is the secret you need.
+                    </Text>
+                  </Box>
+                  <Button
+                    mode="ghost"
+                    icon={<AddIcon />}
+                    loading={state.status === 'loading'}
+                    onClick={() => {
+                      dispatch({type: 'add-secret'})
+                    }}
+                    text="Add secret"
+                  />
+                  <Text>
+                    If you&apos;re using Sanity Presentation Tool with multiple protected
+                    deployments ensure that they have the same secret set, as this tool will set a
+                    secret that is shared in your dataset with all instances of Presentation Tool.
+                  </Text>
+                </>
+              )}
+            </Stack>
+          </Card>
+        </Stack>
+      </Box>
+      {(state.status === 'add-secret-dialog' || state.status === 'adding-secret') && (
+        <Dialog
+          animate
+          id="add-secret-dialog"
+          onClickOutside={() => dispatch({type: 'cancel-add-secret'})}
+        >
+          <Card padding={3}>
+            <form
+              onSubmit={(event) => {
+                event.preventDefault()
+                event.currentTarget.reportValidity()
+                const formData = new FormData(event.currentTarget)
+                const secret = formData.get('secret') as string
+                if (secret) handleEnable(secret)
+              }}
+            >
+              <Stack space={3}>
+                <Stack space={2}>
+                  <Text as="label" weight="semibold" size={1}>
+                    Add bypass secret
+                  </Text>
+                  <Text muted size={1}>
+                    {`Make sure it's the same secret the Vercel deployment is using that's loaded in the preview iframe.`}
+                  </Text>
+                  <TextInput
+                    name="secret"
+                    onFocus={(event) => {
+                      event.currentTarget.setCustomValidity('')
+                    }}
+                    onBlur={(event) => {
+                      event.currentTarget.setCustomValidity(
+                        event.currentTarget.value.length == 32
+                          ? ''
+                          : 'Secret must be 32 characters long',
+                      )
+                      event.currentTarget.required = true
+                    }}
+                    minLength={32}
+                    maxLength={32}
+                    autoComplete="off"
+                    autoCapitalize="off"
+                    autoCorrect="off"
+                    spellCheck="false"
+                    disabled={adding}
+                  />
+                </Stack>
+                <Button
+                  type="submit"
+                  loading={adding}
+                  text={adding ? 'Saving…' : 'Save'}
+                  tone="positive"
+                />
+              </Stack>
+            </form>
+          </Card>
+        </Dialog>
+      )}
+    </>
+  )
+}

package/src/index.ts

@@ -0,0 +1,29 @@
+import {lazy} from 'react'
+import {definePlugin} from 'sanity'
+
+const id = 'vercel-protection-bypass'
+
+export interface VercelProtectionBypassConfig {
+  name?: string
+  title?: string
+  icon?: React.ComponentType
+}
+
+export const vercelProtectionBypassTool = definePlugin<VercelProtectionBypassConfig | void>(
+  (options) => {
+    const {name, title, icon, ...config} = options || {}
+    return {
+      name: `@sanity/preview-url-secret/${id}`,
+      tools: [
+        {
+          name: name || 'vercel-protection-bypass',
+          title: title || 'Vercel Protection Bypass',
+          icon: icon,
+          component: lazy(() => import('./VercelProtectionBypassTool')),
+          options: config,
+          __internalApplicationType: `sanity/${id}`,
+        },
+      ],
+    }
+  },
+)