@sanity/workbench-cli 1.6.0 → 1.7.1

package/dist/_exports/build.d.ts

@@ -3,6 +3,15 @@ import { CliConfig } from "@sanity/cli-core";
 import { PluginOption } from "vite";
 import { z } from "zod/mini";
 
+/**
+ * The `build`/`start` id — a hash of the app's declared shape (its identity, not
+ * its code), so the bundle inlined by `sanity build` and the registry entry
+ * advertised by `sanity start` resolve to the same id. Hashed with the Web Crypto
+ * API rather than `node:crypto` for parity with `resolveAppId`'s browser-safe
+ * home. `sanity deploy` resolves its own id from the applications API.
+ */
+export declare function buildAppId(app: ResolvedWorkbenchApp): Promise<string>;
+
 /**
  * User-facing input for `unstable_defineApp`. Excludes the internal
  * `applicationType`, `isSingleton`, and `config` — validated by the
@@ -131,8 +140,12 @@ declare interface DefineAppResult extends DefineAppInput {
 declare interface ResolvedWorkbenchApp {
   /** The app's unique `name` from `unstable_defineApp`. */
   readonly name: string;
+  /** Organization that owns the app — part of its build-id identity. */
+  readonly organizationId: string;
   /** Background worker services the app declares. */
   readonly services: NonNullable<DefineAppInput["services"]>;
+  /** Hostname the application is created at on first deploy. */
+  readonly slug: string;
   /** Dock panel views the app declares. */
   readonly views: NonNullable<DefineAppInput["views"]>;
   /** Resolved app kind — `studio` or one of the SDK app types. */
@@ -145,8 +158,6 @@ declare interface ResolvedWorkbenchApp {
   readonly icon?: string;
   /** Explicit singleton flag (a Sanity-owned app); `undefined` when the app doesn't set it. */
   readonly isSingleton?: boolean;
-  /** Hostname the application is created at on first deploy. */
-  readonly slug?: string;
   /** Dashboard visibility declared by the app; `undefined` when unset. */
   readonly visibility?: AppVisibility;
 }

package/dist/_exports/build.js

@@ -5,6 +5,7 @@
 // view (`getWorkbench`) is the deploy entry's export.
 export { workbenchOptimizeDeps } from '../actions/build/vite/optimize-deps.js';
 export { workbenchVitePlugins } from '../actions/build/vite/workbench-vite-plugins.js';
+export { buildAppId } from '../appId.js';
 export { resolveWorkbenchApp } from '../resolveWorkbenchApp.js';
 
 //# sourceMappingURL=build.js.map

package/dist/_exports/build.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/_exports/build.ts"],"sourcesContent":["// Node-only build entry: the module-federation Vite plugins that\n// `@sanity/cli-build`'s `getViteConfig` swaps in for a workbench app, plus the\n// resolver the build reads declared views/services from. The build needs no\n// deploy-time guards, so it takes the bare `resolveWorkbenchApp` — the guarded\n// view (`getWorkbench`) is the deploy entry's export.\n\nexport {workbenchOptimizeDeps} from '../actions/build/vite/optimize-deps.js'\nexport {workbenchVitePlugins} from '../actions/build/vite/workbench-vite-plugins.js'\nexport {resolveWorkbenchApp, type WorkbenchExposes} from '../resolveWorkbenchApp.js'\n"],"names":["workbenchOptimizeDeps","workbenchVitePlugins","resolveWorkbenchApp"],"mappings":"AAAA,iEAAiE;AACjE,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,sDAAsD;AAEtD,SAAQA,qBAAqB,QAAO,yCAAwC;AAC5E,SAAQC,oBAAoB,QAAO,kDAAiD;AACpF,SAAQC,mBAAmB,QAA8B,4BAA2B"}
+{"version":3,"sources":["../../src/_exports/build.ts"],"sourcesContent":["// Node-only build entry: the module-federation Vite plugins that\n// `@sanity/cli-build`'s `getViteConfig` swaps in for a workbench app, plus the\n// resolver the build reads declared views/services from. The build needs no\n// deploy-time guards, so it takes the bare `resolveWorkbenchApp` — the guarded\n// view (`getWorkbench`) is the deploy entry's export.\n\nexport {workbenchOptimizeDeps} from '../actions/build/vite/optimize-deps.js'\nexport {workbenchVitePlugins} from '../actions/build/vite/workbench-vite-plugins.js'\nexport {buildAppId} from '../appId.js'\nexport {resolveWorkbenchApp, type WorkbenchExposes} from '../resolveWorkbenchApp.js'\n"],"names":["workbenchOptimizeDeps","workbenchVitePlugins","buildAppId","resolveWorkbenchApp"],"mappings":"AAAA,iEAAiE;AACjE,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,sDAAsD;AAEtD,SAAQA,qBAAqB,QAAO,yCAAwC;AAC5E,SAAQC,oBAAoB,QAAO,kDAAiD;AACpF,SAAQC,UAAU,QAAO,cAAa;AACtC,SAAQC,mBAAmB,QAA8B,4BAA2B"}

package/dist/_exports/deploy.d.ts

@@ -59,6 +59,8 @@ declare interface BrettInterfaceBase {
 export declare interface BrettWorkspace {
   dataset: string;
   projectId: string;
+  /** Lexicon schema descriptor id; Brett requires one per workspace. */
+  schemaDescriptorId: string;
   basePath?: string;
   icon?: string;
   name?: string;
@@ -93,6 +95,41 @@ declare interface BuildExposesContext {
  */
 export declare function checkBuiltOutput(sourceDir: string): Promise<void>;
 
+/**
+ * Create a coreApp record (no deployment), so the CLI can build with its id
+ * before shipping the first deployment. First deploy only.
+ * @internal
+ */
+export declare function createCoreApp(options: {
+  isSingleton?: boolean;
+  organizationId: string;
+  slug: string;
+  title: string;
+  visibility?: AppVisibility;
+}): Promise<CreatedApplication>;
+
+/**
+ * A freshly created application record: its id, plus a way to undo the creation.
+ * The caller builds and deploys with the id, and calls `rollback` if a later
+ * step fails so the record isn't stranded at its slug.
+ * @internal
+ */
+export declare interface CreatedApplication {
+  applicationId: string;
+  rollback: () => Promise<void>;
+}
+
+/**
+ * Create a studio record (no deployment).
+ * @internal
+ */
+export declare function createStudio(options: {
+  organizationId: string;
+  projectId: string | undefined;
+  slug: string;
+  title: string;
+}): Promise<CreatedApplication>;
+
 /**
  * User-facing input for `unstable_defineApp`. Excludes the internal
  * `applicationType`, `isSingleton`, and `config` — validated by the
@@ -253,28 +290,6 @@ export declare function deployConfig(options: {
   version: string;
 }): Promise<void>;
 
-/**
- * Deploy a workbench coreApp through Brett: redeploy when `appId` is set,
- * otherwise create the application at `slug`. Returns the application id for the
- * shell to report.
- * @internal
- */
-export declare function deployCoreApp(options: {
-  appId: string | undefined;
-  icon?: string;
-  interfaces: readonly BrettInterface[];
-  isAutoUpdating: boolean;
-  isSingleton?: boolean;
-  organizationId: string;
-  slug: string;
-  sourceDir: string;
-  title: string;
-  version: string;
-  visibility?: AppVisibility;
-}): Promise<{
-  applicationId: string;
-}>;
-
 /** A view or service as the deploy report and `--json` output surface it. */
 export declare interface DeployedExpose {
   name: string;
@@ -284,27 +299,29 @@ export declare interface DeployedExpose {
 }
 
 /**
- * Deploy a workbench studio through Brett: redeploy when `appId` is set,
- * otherwise create the studio at `studioHost`. Returns the application id for
- * the shell to report; a missing `studioHost` on create is a usage error.
+ * Ship a deployment to an already-created (or `deployment.appId`) application,
+ * then sync its mutable metadata (`title`, and `icon`/`visibility` when set)
+ * from config. The deploy endpoint ignores these, so a redeploy patches them
+ * here alongside the new deployment.
+ *
+ * `onDeployed` fires the instant the deployment is live, before the metadata
+ * sync — so a caller can disarm a create-time rollback that must not delete an
+ * application once it has an active deployment.
  * @internal
  */
-export declare function deployStudio(options: {
-  appId: string | undefined;
+export declare function deployWorkbenchApp(options: {
+  applicationId: string;
   icon?: string;
   interfaces: readonly BrettInterface[];
   isAutoUpdating: boolean;
-  organizationId: string;
-  output: Output;
-  projectId: string | undefined;
+  label?: string;
+  onDeployed?: () => void;
   sourceDir: string;
-  studioHost: string | undefined;
   title: string;
   version: string;
-  workspaces: readonly BrettWorkspace[];
-}): Promise<{
-  applicationId: string;
-}>;
+  visibility?: AppVisibility;
+  workspaces?: readonly BrettWorkspace[];
+}): Promise<void>;
 
 export declare function getApplication(
   applicationId: string,
@@ -325,8 +342,12 @@ export declare function getWorkbenchUrl(organizationId: string): string;
 declare interface ResolvedWorkbenchApp {
   /** The app's unique `name` from `unstable_defineApp`. */
   readonly name: string;
+  /** Organization that owns the app — part of its build-id identity. */
+  readonly organizationId: string;
   /** Background worker services the app declares. */
   readonly services: NonNullable<DefineAppInput["services"]>;
+  /** Hostname the application is created at on first deploy. */
+  readonly slug: string;
   /** Dock panel views the app declares. */
   readonly views: NonNullable<DefineAppInput["views"]>;
   /** Resolved app kind — `studio` or one of the SDK app types. */
@@ -339,8 +360,6 @@ declare interface ResolvedWorkbenchApp {
   readonly icon?: string;
   /** Explicit singleton flag (a Sanity-owned app); `undefined` when the app doesn't set it. */
   readonly isSingleton?: boolean;
-  /** Hostname the application is created at on first deploy. */
-  readonly slug?: string;
   /** Dashboard visibility declared by the app; `undefined` when unset. */
   readonly visibility?: AppVisibility;
 }

package/dist/_exports/deploy.js

@@ -1,7 +1,7 @@
 export { buildExposes, summarizeExposes } from '../actions/deploy/buildExposes.js';
 export { checkBuiltOutput } from '../actions/deploy/checkBuiltOutput.js';
 export { deployConfig, resolveInstallationId, summarizeConfig } from '../actions/deploy/deployConfig.js';
-export { deployCoreApp, deployStudio } from '../actions/deploy/deployWorkbenchApp.js';
+export { createCoreApp, createStudio, deployWorkbenchApp } from '../actions/deploy/deployWorkbenchApp.js';
 export { getWorkbench } from '../actions/deploy/getWorkbench.js';
 export { getApplication, getApplicationUrl, getWorkbenchUrl } from '../services/applications.js';
 

package/dist/_exports/deploy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/_exports/deploy.ts"],"sourcesContent":["export {\n  buildExposes,\n  type DeployedExpose,\n  summarizeExposes,\n} from '../actions/deploy/buildExposes.js'\nexport {checkBuiltOutput} from '../actions/deploy/checkBuiltOutput.js'\nexport {\n  deployConfig,\n  resolveInstallationId,\n  summarizeConfig,\n} from '../actions/deploy/deployConfig.js'\nexport {deployCoreApp, deployStudio} from '../actions/deploy/deployWorkbenchApp.js'\nexport {getWorkbench} from '../actions/deploy/getWorkbench.js'\nexport {\n  type Application,\n  type BrettInterface,\n  type BrettWorkspace,\n  getApplication,\n  getApplicationUrl,\n  getWorkbenchUrl,\n} from '../services/applications.js'\n"],"names":["buildExposes","summarizeExposes","checkBuiltOutput","deployConfig","resolveInstallationId","summarizeConfig","deployCoreApp","deployStudio","getWorkbench","getApplication","getApplicationUrl","getWorkbenchUrl"],"mappings":"AAAA,SACEA,YAAY,EAEZC,gBAAgB,QACX,oCAAmC;AAC1C,SAAQC,gBAAgB,QAAO,wCAAuC;AACtE,SACEC,YAAY,EACZC,qBAAqB,EACrBC,eAAe,QACV,oCAAmC;AAC1C,SAAQC,aAAa,EAAEC,YAAY,QAAO,0CAAyC;AACnF,SAAQC,YAAY,QAAO,oCAAmC;AAC9D,SAIEC,cAAc,EACdC,iBAAiB,EACjBC,eAAe,QACV,8BAA6B"}
+{"version":3,"sources":["../../src/_exports/deploy.ts"],"sourcesContent":["export {\n  buildExposes,\n  type DeployedExpose,\n  summarizeExposes,\n} from '../actions/deploy/buildExposes.js'\nexport {checkBuiltOutput} from '../actions/deploy/checkBuiltOutput.js'\nexport {\n  deployConfig,\n  resolveInstallationId,\n  summarizeConfig,\n} from '../actions/deploy/deployConfig.js'\nexport {\n  createCoreApp,\n  type CreatedApplication,\n  createStudio,\n  deployWorkbenchApp,\n} from '../actions/deploy/deployWorkbenchApp.js'\nexport {getWorkbench} from '../actions/deploy/getWorkbench.js'\nexport {\n  type Application,\n  type BrettInterface,\n  type BrettWorkspace,\n  getApplication,\n  getApplicationUrl,\n  getWorkbenchUrl,\n} from '../services/applications.js'\n"],"names":["buildExposes","summarizeExposes","checkBuiltOutput","deployConfig","resolveInstallationId","summarizeConfig","createCoreApp","createStudio","deployWorkbenchApp","getWorkbench","getApplication","getApplicationUrl","getWorkbenchUrl"],"mappings":"AAAA,SACEA,YAAY,EAEZC,gBAAgB,QACX,oCAAmC;AAC1C,SAAQC,gBAAgB,QAAO,wCAAuC;AACtE,SACEC,YAAY,EACZC,qBAAqB,EACrBC,eAAe,QACV,oCAAmC;AAC1C,SACEC,aAAa,EAEbC,YAAY,EACZC,kBAAkB,QACb,0CAAyC;AAChD,SAAQC,YAAY,QAAO,oCAAmC;AAC9D,SAIEC,cAAc,EACdC,iBAAiB,EACjBC,eAAe,QACV,8BAA6B"}

package/dist/_exports/dev.d.ts

@@ -162,8 +162,6 @@ export declare function startWorkbenchDev(
 }>;
 
 export declare interface StartWorkbenchDevOptions {
-  /** Resolved app id for the registry entry (the CLI owns id resolution). */
-  appId: string | undefined;
   /** Directory for the workbench Vite server's dependency cache. */
   cacheDir: string;
   /** CLI-domain `app.id`/`deployment.appId` deprecation check, run before registering. */

package/dist/_exports/index.d.ts

@@ -230,6 +230,17 @@ export declare type PanelViewProps = ViewComponentBaseProps<{
   type: "panel";
 }>;
 
+/**
+ * The dev id for a workbench app — the address the server bound. `sanity dev`
+ * keys on where the app is served so a running app can't collide with its
+ * deployed twin. Sync and dependency-free: it's re-exported from the package's
+ * browser-facing entry, so it must not pull in `node:crypto`.
+ */
+export declare function resolveAppId(source: {
+  host: string;
+  port: number;
+}): string;
+
 /** @internal */
 declare const SERVICE_CONTRACT_VERSION = 1;
 

package/dist/_exports/index.js

@@ -1,3 +1,4 @@
+export { resolveAppId } from '../appId.js';
 export { isWorkbenchApp, unstable_defineApp, unstable_defineMediaLibrary } from '../defineApp.js';
 export { unstable_defineService } from '../defineService.js';
 export { unstable_defineView } from '../defineView.js';

package/dist/_exports/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/_exports/index.ts"],"sourcesContent":["export type {InterfaceType, ServiceType} from '../contract.js'\nexport {isWorkbenchApp, unstable_defineApp, unstable_defineMediaLibrary} from '../defineApp.js'\nexport type {\n  DefineAppInput,\n  DefineAppResult,\n  DefineMediaLibraryInput,\n  DockGroup,\n  MediaLibraryField,\n  WorkbenchApp,\n} from '../defineApp.js'\nexport {unstable_defineService} from '../defineService.js'\nexport type {\n  DefinedService,\n  ServiceCallback,\n  ServiceContext,\n  ServiceInfo,\n} from '../defineService.js'\nexport {unstable_defineView} from '../defineView.js'\nexport type {\n  DefinedView,\n  PanelComponent,\n  PanelViewComponents,\n  PanelViewProps,\n  ViewComponentsByType,\n} from '../defineView.js'\n"],"names":["isWorkbenchApp","unstable_defineApp","unstable_defineMediaLibrary","unstable_defineService","unstable_defineView"],"mappings":"AACA,SAAQA,cAAc,EAAEC,kBAAkB,EAAEC,2BAA2B,QAAO,kBAAiB;AAS/F,SAAQC,sBAAsB,QAAO,sBAAqB;AAO1D,SAAQC,mBAAmB,QAAO,mBAAkB"}
+{"version":3,"sources":["../../src/_exports/index.ts"],"sourcesContent":["export {resolveAppId} from '../appId.js'\nexport type {InterfaceType, ServiceType} from '../contract.js'\nexport {isWorkbenchApp, unstable_defineApp, unstable_defineMediaLibrary} from '../defineApp.js'\nexport type {\n  DefineAppInput,\n  DefineAppResult,\n  DefineMediaLibraryInput,\n  DockGroup,\n  MediaLibraryField,\n  WorkbenchApp,\n} from '../defineApp.js'\nexport {unstable_defineService} from '../defineService.js'\nexport type {\n  DefinedService,\n  ServiceCallback,\n  ServiceContext,\n  ServiceInfo,\n} from '../defineService.js'\nexport {unstable_defineView} from '../defineView.js'\nexport type {\n  DefinedView,\n  PanelComponent,\n  PanelViewComponents,\n  PanelViewProps,\n  ViewComponentsByType,\n} from '../defineView.js'\n"],"names":["resolveAppId","isWorkbenchApp","unstable_defineApp","unstable_defineMediaLibrary","unstable_defineService","unstable_defineView"],"mappings":"AAAA,SAAQA,YAAY,QAAO,cAAa;AAExC,SAAQC,cAAc,EAAEC,kBAAkB,EAAEC,2BAA2B,QAAO,kBAAiB;AAS/F,SAAQC,sBAAsB,QAAO,sBAAqB;AAO1D,SAAQC,mBAAmB,QAAO,mBAAkB"}

package/dist/_exports/init.d.ts

@@ -1,12 +1,12 @@
 /** App scaffold — `entry` auto-declares the navigable app view. */
 export declare const workbenchAppConfigTemplate =
-  "\nimport {defineCliConfig, unstable_defineApp} from 'sanity/cli'\n\nexport default defineCliConfig({\n  app: unstable_defineApp({\n    name: '%name%',\n    title: '%title%',\n    organizationId: '%organizationId%',\n    entry: '%entry%',\n  }),\n})\n";
+  "\nimport {defineCliConfig, unstable_defineApp} from 'sanity/cli'\n\nexport default defineCliConfig({\n  app: unstable_defineApp({\n    name: '%name%',\n    title: '%title%',\n    slug: '%slug%',\n    organizationId: '%organizationId%',\n    entry: '%entry%',\n  }),\n})\n";
 
 /**
  * Studio scaffold — brands with name/title only, no `entry` (studio app views
  * aren't implemented yet).
  */
 export declare const workbenchStudioConfigTemplate =
-  "\nimport {defineCliConfig, unstable_defineApp} from 'sanity/cli'\n\nexport default defineCliConfig({\n  api: {\n    projectId: '%projectId%',\n    dataset: '%dataset%'\n  },\n  app: unstable_defineApp({\n    name: '%name%',\n    title: '%title%',\n    organizationId: '%organizationId%',\n  }),\n  deployment: {\n    /**\n     * Enable auto-updates for studios.\n     * Learn more at https://www.sanity.io/docs/studio/latest-version-of-sanity#k47faf43faf56\n     */\n    autoUpdates: __BOOL__autoUpdates__,\n  },\n})\n";
+  "\nimport {defineCliConfig, unstable_defineApp} from 'sanity/cli'\n\nexport default defineCliConfig({\n  api: {\n    projectId: '%projectId%',\n    dataset: '%dataset%'\n  },\n  app: unstable_defineApp({\n    name: '%name%',\n    title: '%title%',\n    slug: '%slug%',\n    organizationId: '%organizationId%',\n  }),\n  deployment: {\n    /**\n     * Enable auto-updates for studios.\n     * Learn more at https://www.sanity.io/docs/studio/latest-version-of-sanity#k47faf43faf56\n     */\n    autoUpdates: __BOOL__autoUpdates__,\n  },\n})\n";
 
 export {};

package/dist/_exports/undeploy.d.ts

@@ -175,8 +175,12 @@ declare interface DeployedExpose {
 declare interface ResolvedWorkbenchApp {
   /** The app's unique `name` from `unstable_defineApp`. */
   readonly name: string;
+  /** Organization that owns the app — part of its build-id identity. */
+  readonly organizationId: string;
   /** Background worker services the app declares. */
   readonly services: NonNullable<DefineAppInput["services"]>;
+  /** Hostname the application is created at on first deploy. */
+  readonly slug: string;
   /** Dock panel views the app declares. */
   readonly views: NonNullable<DefineAppInput["views"]>;
   /** Resolved app kind — `studio` or one of the SDK app types. */
@@ -189,8 +193,6 @@ declare interface ResolvedWorkbenchApp {
   readonly icon?: string;
   /** Explicit singleton flag (a Sanity-owned app); `undefined` when the app doesn't set it. */
   readonly isSingleton?: boolean;
-  /** Hostname the application is created at on first deploy. */
-  readonly slug?: string;
   /** Dashboard visibility declared by the app; `undefined` when unset. */
   readonly visibility?: AppVisibility;
 }

package/dist/actions/build/vite/plugins/plugin-sanity-app-id.js

@@ -1,13 +1,18 @@
+import { SANITY_APP_ID_FILE } from '../../../../appId.js';
 /**
- * Bake the app's bus identity into its bundle: `@sanity/runtime` reads
+ * Inline the app's bus identity into its bundle: `@sanity/runtime` reads
  * `__SANITY_APP_ID__` where it connects. `define` covers everything the
  * pipeline transforms (all of a production build, and dev-served source); the
  * rolldown define covers dev's pre-bundled dependencies, which skip Vite's
  * define transform.
+ *
+ * A build also writes the id to disk so `sanity start`, which serves the build
+ * without recompiling, can advertise the exact id the bundle uses.
  */ export function sanityAppId(appId) {
     const define = {
         __SANITY_APP_ID__: JSON.stringify(appId)
     };
+    let emitted = false;
     return {
         config: ()=>({
                 define,
@@ -19,6 +24,15 @@
                     }
                 }
             }),
+        generateBundle () {
+            if (emitted) return;
+            emitted = true;
+            this.emitFile({
+                fileName: SANITY_APP_ID_FILE,
+                source: appId,
+                type: 'asset'
+            });
+        },
         name: 'sanity/workbench/app-id'
     };
 }

package/dist/actions/build/vite/plugins/plugin-sanity-app-id.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../src/actions/build/vite/plugins/plugin-sanity-app-id.ts"],"sourcesContent":["import {type Plugin} from 'vite'\n\n/**\n * Bake the app's bus identity into its bundle: `@sanity/runtime` reads\n * `__SANITY_APP_ID__` where it connects. `define` covers everything the\n * pipeline transforms (all of a production build, and dev-served source); the\n * rolldown define covers dev's pre-bundled dependencies, which skip Vite's\n * define transform.\n */\nexport function sanityAppId(appId: string): Plugin {\n  const define = {__SANITY_APP_ID__: JSON.stringify(appId)}\n  return {\n    config: () => ({define, optimizeDeps: {rolldownOptions: {transform: {define}}}}),\n    name: 'sanity/workbench/app-id',\n  }\n}\n"],"names":["sanityAppId","appId","define","__SANITY_APP_ID__","JSON","stringify","config","optimizeDeps","rolldownOptions","transform","name"],"mappings":"AAEA;;;;;;CAMC,GACD,OAAO,SAASA,YAAYC,KAAa;IACvC,MAAMC,SAAS;QAACC,mBAAmBC,KAAKC,SAAS,CAACJ;IAAM;IACxD,OAAO;QACLK,QAAQ,IAAO,CAAA;gBAACJ;gBAAQK,cAAc;oBAACC,iBAAiB;wBAACC,WAAW;4BAACP;wBAAM;oBAAC;gBAAC;YAAC,CAAA;QAC9EQ,MAAM;IACR;AACF"}
+{"version":3,"sources":["../../../../../src/actions/build/vite/plugins/plugin-sanity-app-id.ts"],"sourcesContent":["import {type Plugin} from 'vite'\n\nimport {SANITY_APP_ID_FILE} from '../../../../appId.js'\n\n/**\n * Inline the app's bus identity into its bundle: `@sanity/runtime` reads\n * `__SANITY_APP_ID__` where it connects. `define` covers everything the\n * pipeline transforms (all of a production build, and dev-served source); the\n * rolldown define covers dev's pre-bundled dependencies, which skip Vite's\n * define transform.\n *\n * A build also writes the id to disk so `sanity start`, which serves the build\n * without recompiling, can advertise the exact id the bundle uses.\n */\nexport function sanityAppId(appId: string): Plugin {\n  const define = {__SANITY_APP_ID__: JSON.stringify(appId)}\n  let emitted = false\n  return {\n    config: () => ({define, optimizeDeps: {rolldownOptions: {transform: {define}}}}),\n    generateBundle() {\n      if (emitted) return\n      emitted = true\n      this.emitFile({fileName: SANITY_APP_ID_FILE, source: appId, type: 'asset'})\n    },\n    name: 'sanity/workbench/app-id',\n  }\n}\n"],"names":["SANITY_APP_ID_FILE","sanityAppId","appId","define","__SANITY_APP_ID__","JSON","stringify","emitted","config","optimizeDeps","rolldownOptions","transform","generateBundle","emitFile","fileName","source","type","name"],"mappings":"AAEA,SAAQA,kBAAkB,QAAO,uBAAsB;AAEvD;;;;;;;;;CASC,GACD,OAAO,SAASC,YAAYC,KAAa;IACvC,MAAMC,SAAS;QAACC,mBAAmBC,KAAKC,SAAS,CAACJ;IAAM;IACxD,IAAIK,UAAU;IACd,OAAO;QACLC,QAAQ,IAAO,CAAA;gBAACL;gBAAQM,cAAc;oBAACC,iBAAiB;wBAACC,WAAW;4BAACR;wBAAM;oBAAC;gBAAC;YAAC,CAAA;QAC9ES;YACE,IAAIL,SAAS;YACbA,UAAU;YACV,IAAI,CAACM,QAAQ,CAAC;gBAACC,UAAUd;gBAAoBe,QAAQb;gBAAOc,MAAM;YAAO;QAC3E;QACAC,MAAM;IACR;AACF"}

package/dist/actions/deploy/deployWorkbenchApp.js

@@ -1,121 +1,89 @@
 import { basename, dirname } from 'node:path';
 import { createGzip } from 'node:zlib';
-import { exitCodes } from '@sanity/cli-core';
 import { spinner } from '@sanity/cli-core/ux';
 import { pack } from 'tar-fs';
-import { createApplication, createDeployment, updateApplication } from '../../services/applications.js';
+import { createApplication, createDeployment, deleteApplication, updateApplication } from '../../services/applications.js';
 /**
- * Deploy a workbench coreApp through Brett: redeploy when `appId` is set,
- * otherwise create the application at `slug`. Returns the application id for the
- * shell to report.
+ * Create a coreApp record (no deployment), so the CLI can build with its id
+ * before shipping the first deployment. First deploy only.
  * @internal
- */ export async function deployCoreApp(options) {
-    const { appId, icon, interfaces, isAutoUpdating, isSingleton, organizationId, slug, sourceDir, title, version, visibility } = options;
-    const tarball = pack(dirname(sourceDir), {
-        entries: [
-            basename(sourceDir)
-        ]
-    }).pipe(createGzip());
-    const spin = spinner('Deploying...').start();
+ */ export async function createCoreApp(options) {
+    const spin = spinner('Creating application...').start();
     try {
-        if (appId) {
-            await createDeployment({
-                applicationId: appId,
-                interfaces,
-                isAutoUpdating,
-                tarball,
-                version
-            });
-            await updateApplication(appId, {
-                title,
-                ...icon ? {
-                    icon
-                } : {}
-            });
-            spin.succeed();
-            return {
-                applicationId: appId
-            };
-        }
         const { id } = await createApplication({
-            icon,
-            interfaces,
-            isSingleton,
-            organizationId,
-            slug,
-            tarball,
-            title,
-            type: 'coreApp',
-            version,
-            visibility
+            ...options,
+            type: 'coreApp'
         });
         spin.succeed();
         return {
-            applicationId: id
+            applicationId: id,
+            rollback: ()=>deleteApplication(id)
         };
     } catch (error) {
-        spin.clear();
+        spin.fail();
         throw error;
     }
 }
 /**
- * Deploy a workbench studio through Brett: redeploy when `appId` is set,
- * otherwise create the studio at `studioHost`. Returns the application id for
- * the shell to report; a missing `studioHost` on create is a usage error.
+ * Create a studio record (no deployment).
  * @internal
- */ export async function deployStudio(options) {
-    const { appId, icon, interfaces, isAutoUpdating, organizationId, output, projectId, sourceDir, studioHost, title, version, workspaces } = options;
+ */ export async function createStudio(options) {
+    const spin = spinner('Creating studio...').start();
+    try {
+        const { id } = await createApplication({
+            ...options,
+            type: 'studio'
+        });
+        spin.succeed();
+        return {
+            applicationId: id,
+            rollback: ()=>deleteApplication(id)
+        };
+    } catch (error) {
+        spin.fail();
+        throw error;
+    }
+}
+/**
+ * Ship a deployment to an already-created (or `deployment.appId`) application,
+ * then sync its mutable metadata (`title`, and `icon`/`visibility` when set)
+ * from config. The deploy endpoint ignores these, so a redeploy patches them
+ * here alongside the new deployment.
+ *
+ * `onDeployed` fires the instant the deployment is live, before the metadata
+ * sync — so a caller can disarm a create-time rollback that must not delete an
+ * application once it has an active deployment.
+ * @internal
+ */ export async function deployWorkbenchApp(options) {
+    const { applicationId, icon, interfaces, isAutoUpdating, label = 'Deploying...', onDeployed, sourceDir, title, version, visibility, workspaces } = options;
     const tarball = pack(dirname(sourceDir), {
         entries: [
             basename(sourceDir)
         ]
     }).pipe(createGzip());
-    const spin = spinner('Deploying to sanity.studio').start();
+    const spin = spinner(label).start();
     try {
-        if (appId) {
-            await createDeployment({
-                applicationId: appId,
-                interfaces,
-                isAutoUpdating,
-                tarball,
-                version,
-                workspaces
-            });
-            await updateApplication(appId, {
-                title,
-                ...icon ? {
-                    icon
-                } : {}
-            });
-            spin.succeed();
-            return {
-                applicationId: appId
-            };
-        }
-        if (!studioHost) {
-            spin.fail();
-            return output.error('No studio hostname configured. Set `studioHost` in sanity.cli.ts to create a studio.', {
-                exit: exitCodes.USAGE_ERROR
-            });
-        }
-        const application = await createApplication({
-            icon,
+        await createDeployment({
+            applicationId,
             interfaces,
-            organizationId,
-            projectId,
-            slug: studioHost,
+            isAutoUpdating,
             tarball,
-            title,
-            type: 'studio',
             version,
             workspaces
         });
+        onDeployed?.();
+        await updateApplication(applicationId, {
+            title,
+            ...icon ? {
+                icon
+            } : {},
+            ...visibility ? {
+                visibility
+            } : {}
+        });
         spin.succeed();
-        return {
-            applicationId: application.id
-        };
     } catch (error) {
-        spin.fail();
+        spin.clear();
         throw error;
     }
 }

package/dist/actions/deploy/deployWorkbenchApp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/deploy/deployWorkbenchApp.ts"],"sourcesContent":["import {basename, dirname} from 'node:path'\nimport {createGzip} from 'node:zlib'\n\nimport {type AppVisibility, exitCodes, type Output} from '@sanity/cli-core'\nimport {spinner} from '@sanity/cli-core/ux'\nimport {pack} from 'tar-fs'\n\nimport {\n  type BrettInterface,\n  type BrettWorkspace,\n  createApplication,\n  createDeployment,\n  updateApplication,\n} from '../../services/applications.js'\n\n/**\n * Deploy a workbench coreApp through Brett: redeploy when `appId` is set,\n * otherwise create the application at `slug`. Returns the application id for the\n * shell to report.\n * @internal\n */\nexport async function deployCoreApp(options: {\n  appId: string | undefined\n  icon?: string\n  interfaces: readonly BrettInterface[]\n  isAutoUpdating: boolean\n  isSingleton?: boolean\n  organizationId: string\n  slug: string\n  sourceDir: string\n  title: string\n  version: string\n  visibility?: AppVisibility\n}): Promise<{applicationId: string}> {\n  const {\n    appId,\n    icon,\n    interfaces,\n    isAutoUpdating,\n    isSingleton,\n    organizationId,\n    slug,\n    sourceDir,\n    title,\n    version,\n    visibility,\n  } = options\n  const tarball = pack(dirname(sourceDir), {entries: [basename(sourceDir)]}).pipe(createGzip())\n\n  const spin = spinner('Deploying...').start()\n  try {\n    if (appId) {\n      await createDeployment({applicationId: appId, interfaces, isAutoUpdating, tarball, version})\n      await updateApplication(appId, {title, ...(icon ? {icon} : {})})\n      spin.succeed()\n      return {applicationId: appId}\n    }\n\n    const {id} = await createApplication({\n      icon,\n      interfaces,\n      isSingleton,\n      organizationId,\n      slug,\n      tarball,\n      title,\n      type: 'coreApp',\n      version,\n      visibility,\n    })\n    spin.succeed()\n    return {applicationId: id}\n  } catch (error) {\n    spin.clear()\n    throw error\n  }\n}\n\n/**\n * Deploy a workbench studio through Brett: redeploy when `appId` is set,\n * otherwise create the studio at `studioHost`. Returns the application id for\n * the shell to report; a missing `studioHost` on create is a usage error.\n * @internal\n */\nexport async function deployStudio(options: {\n  appId: string | undefined\n  icon?: string\n  interfaces: readonly BrettInterface[]\n  isAutoUpdating: boolean\n  organizationId: string\n  output: Output\n  projectId: string | undefined\n  sourceDir: string\n  studioHost: string | undefined\n  title: string\n  version: string\n  workspaces: readonly BrettWorkspace[]\n}): Promise<{applicationId: string}> {\n  const {\n    appId,\n    icon,\n    interfaces,\n    isAutoUpdating,\n    organizationId,\n    output,\n    projectId,\n    sourceDir,\n    studioHost,\n    title,\n    version,\n    workspaces,\n  } = options\n  const tarball = pack(dirname(sourceDir), {entries: [basename(sourceDir)]}).pipe(createGzip())\n\n  const spin = spinner('Deploying to sanity.studio').start()\n  try {\n    if (appId) {\n      await createDeployment({\n        applicationId: appId,\n        interfaces,\n        isAutoUpdating,\n        tarball,\n        version,\n        workspaces,\n      })\n      await updateApplication(appId, {title, ...(icon ? {icon} : {})})\n      spin.succeed()\n      return {applicationId: appId}\n    }\n\n    if (!studioHost) {\n      spin.fail()\n      return output.error(\n        'No studio hostname configured. Set `studioHost` in sanity.cli.ts to create a studio.',\n        {exit: exitCodes.USAGE_ERROR},\n      )\n    }\n\n    const application = await createApplication({\n      icon,\n      interfaces,\n      organizationId,\n      projectId,\n      slug: studioHost,\n      tarball,\n      title,\n      type: 'studio',\n      version,\n      workspaces,\n    })\n    spin.succeed()\n    return {applicationId: application.id}\n  } catch (error) {\n    spin.fail()\n    throw error\n  }\n}\n"],"names":["basename","dirname","createGzip","exitCodes","spinner","pack","createApplication","createDeployment","updateApplication","deployCoreApp","options","appId","icon","interfaces","isAutoUpdating","isSingleton","organizationId","slug","sourceDir","title","version","visibility","tarball","entries","pipe","spin","start","applicationId","succeed","id","type","error","clear","deployStudio","output","projectId","studioHost","workspaces","fail","exit","USAGE_ERROR","application"],"mappings":"AAAA,SAAQA,QAAQ,EAAEC,OAAO,QAAO,YAAW;AAC3C,SAAQC,UAAU,QAAO,YAAW;AAEpC,SAA4BC,SAAS,QAAoB,mBAAkB;AAC3E,SAAQC,OAAO,QAAO,sBAAqB;AAC3C,SAAQC,IAAI,QAAO,SAAQ;AAE3B,SAGEC,iBAAiB,EACjBC,gBAAgB,EAChBC,iBAAiB,QACZ,iCAAgC;AAEvC;;;;;CAKC,GACD,OAAO,eAAeC,cAAcC,OAYnC;IACC,MAAM,EACJC,KAAK,EACLC,IAAI,EACJC,UAAU,EACVC,cAAc,EACdC,WAAW,EACXC,cAAc,EACdC,IAAI,EACJC,SAAS,EACTC,KAAK,EACLC,OAAO,EACPC,UAAU,EACX,GAAGX;IACJ,MAAMY,UAAUjB,KAAKJ,QAAQiB,YAAY;QAACK,SAAS;YAACvB,SAASkB;SAAW;IAAA,GAAGM,IAAI,CAACtB;IAEhF,MAAMuB,OAAOrB,QAAQ,gBAAgBsB,KAAK;IAC1C,IAAI;QACF,IAAIf,OAAO;YACT,MAAMJ,iBAAiB;gBAACoB,eAAehB;gBAAOE;gBAAYC;gBAAgBQ;gBAASF;YAAO;YAC1F,MAAMZ,kBAAkBG,OAAO;gBAACQ;gBAAO,GAAIP,OAAO;oBAACA;gBAAI,IAAI,CAAC,CAAC;YAAC;YAC9Da,KAAKG,OAAO;YACZ,OAAO;gBAACD,eAAehB;YAAK;QAC9B;QAEA,MAAM,EAACkB,EAAE,EAAC,GAAG,MAAMvB,kBAAkB;YACnCM;YACAC;YACAE;YACAC;YACAC;YACAK;YACAH;YACAW,MAAM;YACNV;YACAC;QACF;QACAI,KAAKG,OAAO;QACZ,OAAO;YAACD,eAAeE;QAAE;IAC3B,EAAE,OAAOE,OAAO;QACdN,KAAKO,KAAK;QACV,MAAMD;IACR;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeE,aAAavB,OAalC;IACC,MAAM,EACJC,KAAK,EACLC,IAAI,EACJC,UAAU,EACVC,cAAc,EACdE,cAAc,EACdkB,MAAM,EACNC,SAAS,EACTjB,SAAS,EACTkB,UAAU,EACVjB,KAAK,EACLC,OAAO,EACPiB,UAAU,EACX,GAAG3B;IACJ,MAAMY,UAAUjB,KAAKJ,QAAQiB,YAAY;QAACK,SAAS;YAACvB,SAASkB;SAAW;IAAA,GAAGM,IAAI,CAACtB;IAEhF,MAAMuB,OAAOrB,QAAQ,8BAA8BsB,KAAK;IACxD,IAAI;QACF,IAAIf,OAAO;YACT,MAAMJ,iBAAiB;gBACrBoB,eAAehB;gBACfE;gBACAC;gBACAQ;gBACAF;gBACAiB;YACF;YACA,MAAM7B,kBAAkBG,OAAO;gBAACQ;gBAAO,GAAIP,OAAO;oBAACA;gBAAI,IAAI,CAAC,CAAC;YAAC;YAC9Da,KAAKG,OAAO;YACZ,OAAO;gBAACD,eAAehB;YAAK;QAC9B;QAEA,IAAI,CAACyB,YAAY;YACfX,KAAKa,IAAI;YACT,OAAOJ,OAAOH,KAAK,CACjB,wFACA;gBAACQ,MAAMpC,UAAUqC,WAAW;YAAA;QAEhC;QAEA,MAAMC,cAAc,MAAMnC,kBAAkB;YAC1CM;YACAC;YACAG;YACAmB;YACAlB,MAAMmB;YACNd;YACAH;YACAW,MAAM;YACNV;YACAiB;QACF;QACAZ,KAAKG,OAAO;QACZ,OAAO;YAACD,eAAec,YAAYZ,EAAE;QAAA;IACvC,EAAE,OAAOE,OAAO;QACdN,KAAKa,IAAI;QACT,MAAMP;IACR;AACF"}
+{"version":3,"sources":["../../../src/actions/deploy/deployWorkbenchApp.ts"],"sourcesContent":["import {basename, dirname} from 'node:path'\nimport {createGzip} from 'node:zlib'\n\nimport {type AppVisibility} from '@sanity/cli-core'\nimport {spinner} from '@sanity/cli-core/ux'\nimport {pack} from 'tar-fs'\n\nimport {\n  type BrettInterface,\n  type BrettWorkspace,\n  createApplication,\n  createDeployment,\n  deleteApplication,\n  updateApplication,\n} from '../../services/applications.js'\n\n/**\n * A freshly created application record: its id, plus a way to undo the creation.\n * The caller builds and deploys with the id, and calls `rollback` if a later\n * step fails so the record isn't stranded at its slug.\n * @internal\n */\nexport interface CreatedApplication {\n  applicationId: string\n  rollback: () => Promise<void>\n}\n\n/**\n * Create a coreApp record (no deployment), so the CLI can build with its id\n * before shipping the first deployment. First deploy only.\n * @internal\n */\nexport async function createCoreApp(options: {\n  isSingleton?: boolean\n  organizationId: string\n  slug: string\n  title: string\n  visibility?: AppVisibility\n}): Promise<CreatedApplication> {\n  const spin = spinner('Creating application...').start()\n  try {\n    const {id} = await createApplication({...options, type: 'coreApp'})\n    spin.succeed()\n    return {applicationId: id, rollback: () => deleteApplication(id)}\n  } catch (error) {\n    spin.fail()\n    throw error\n  }\n}\n\n/**\n * Create a studio record (no deployment).\n * @internal\n */\nexport async function createStudio(options: {\n  organizationId: string\n  projectId: string | undefined\n  slug: string\n  title: string\n}): Promise<CreatedApplication> {\n  const spin = spinner('Creating studio...').start()\n  try {\n    const {id} = await createApplication({...options, type: 'studio'})\n    spin.succeed()\n    return {applicationId: id, rollback: () => deleteApplication(id)}\n  } catch (error) {\n    spin.fail()\n    throw error\n  }\n}\n\n/**\n * Ship a deployment to an already-created (or `deployment.appId`) application,\n * then sync its mutable metadata (`title`, and `icon`/`visibility` when set)\n * from config. The deploy endpoint ignores these, so a redeploy patches them\n * here alongside the new deployment.\n *\n * `onDeployed` fires the instant the deployment is live, before the metadata\n * sync — so a caller can disarm a create-time rollback that must not delete an\n * application once it has an active deployment.\n * @internal\n */\nexport async function deployWorkbenchApp(options: {\n  applicationId: string\n  icon?: string\n  interfaces: readonly BrettInterface[]\n  isAutoUpdating: boolean\n  label?: string\n  onDeployed?: () => void\n  sourceDir: string\n  title: string\n  version: string\n  visibility?: AppVisibility\n  workspaces?: readonly BrettWorkspace[]\n}): Promise<void> {\n  const {\n    applicationId,\n    icon,\n    interfaces,\n    isAutoUpdating,\n    label = 'Deploying...',\n    onDeployed,\n    sourceDir,\n    title,\n    version,\n    visibility,\n    workspaces,\n  } = options\n  const tarball = pack(dirname(sourceDir), {entries: [basename(sourceDir)]}).pipe(createGzip())\n\n  const spin = spinner(label).start()\n  try {\n    await createDeployment({\n      applicationId,\n      interfaces,\n      isAutoUpdating,\n      tarball,\n      version,\n      workspaces,\n    })\n    onDeployed?.()\n    await updateApplication(applicationId, {\n      title,\n      ...(icon ? {icon} : {}),\n      ...(visibility ? {visibility} : {}),\n    })\n    spin.succeed()\n  } catch (error) {\n    spin.clear()\n    throw error\n  }\n}\n"],"names":["basename","dirname","createGzip","spinner","pack","createApplication","createDeployment","deleteApplication","updateApplication","createCoreApp","options","spin","start","id","type","succeed","applicationId","rollback","error","fail","createStudio","deployWorkbenchApp","icon","interfaces","isAutoUpdating","label","onDeployed","sourceDir","title","version","visibility","workspaces","tarball","entries","pipe","clear"],"mappings":"AAAA,SAAQA,QAAQ,EAAEC,OAAO,QAAO,YAAW;AAC3C,SAAQC,UAAU,QAAO,YAAW;AAGpC,SAAQC,OAAO,QAAO,sBAAqB;AAC3C,SAAQC,IAAI,QAAO,SAAQ;AAE3B,SAGEC,iBAAiB,EACjBC,gBAAgB,EAChBC,iBAAiB,EACjBC,iBAAiB,QACZ,iCAAgC;AAavC;;;;CAIC,GACD,OAAO,eAAeC,cAAcC,OAMnC;IACC,MAAMC,OAAOR,QAAQ,2BAA2BS,KAAK;IACrD,IAAI;QACF,MAAM,EAACC,EAAE,EAAC,GAAG,MAAMR,kBAAkB;YAAC,GAAGK,OAAO;YAAEI,MAAM;QAAS;QACjEH,KAAKI,OAAO;QACZ,OAAO;YAACC,eAAeH;YAAII,UAAU,IAAMV,kBAAkBM;QAAG;IAClE,EAAE,OAAOK,OAAO;QACdP,KAAKQ,IAAI;QACT,MAAMD;IACR;AACF;AAEA;;;CAGC,GACD,OAAO,eAAeE,aAAaV,OAKlC;IACC,MAAMC,OAAOR,QAAQ,sBAAsBS,KAAK;IAChD,IAAI;QACF,MAAM,EAACC,EAAE,EAAC,GAAG,MAAMR,kBAAkB;YAAC,GAAGK,OAAO;YAAEI,MAAM;QAAQ;QAChEH,KAAKI,OAAO;QACZ,OAAO;YAACC,eAAeH;YAAII,UAAU,IAAMV,kBAAkBM;QAAG;IAClE,EAAE,OAAOK,OAAO;QACdP,KAAKQ,IAAI;QACT,MAAMD;IACR;AACF;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeG,mBAAmBX,OAYxC;IACC,MAAM,EACJM,aAAa,EACbM,IAAI,EACJC,UAAU,EACVC,cAAc,EACdC,QAAQ,cAAc,EACtBC,UAAU,EACVC,SAAS,EACTC,KAAK,EACLC,OAAO,EACPC,UAAU,EACVC,UAAU,EACX,GAAGrB;IACJ,MAAMsB,UAAU5B,KAAKH,QAAQ0B,YAAY;QAACM,SAAS;YAACjC,SAAS2B;SAAW;IAAA,GAAGO,IAAI,CAAChC;IAEhF,MAAMS,OAAOR,QAAQsB,OAAOb,KAAK;IACjC,IAAI;QACF,MAAMN,iBAAiB;YACrBU;YACAO;YACAC;YACAQ;YACAH;YACAE;QACF;QACAL;QACA,MAAMlB,kBAAkBQ,eAAe;YACrCY;YACA,GAAIN,OAAO;gBAACA;YAAI,IAAI,CAAC,CAAC;YACtB,GAAIQ,aAAa;gBAACA;YAAU,IAAI,CAAC,CAAC;QACpC;QACAnB,KAAKI,OAAO;IACd,EAAE,OAAOG,OAAO;QACdP,KAAKwB,KAAK;QACV,MAAMjB;IACR;AACF"}

package/dist/actions/dev/deriveInterfaces.js

@@ -1,4 +1,3 @@
-import { hash } from 'node:crypto';
 import { interfaceModuleId, MEDIA_LIBRARY_CONFIG_CONTRACT_VERSION, SERVICE_CONTRACT_VERSION, VIEW_CONTRACT_VERSION } from '../../contract.js';
 import { isWorkbenchApp, readConfig } from '../../defineApp.js';
 /**
@@ -78,7 +77,7 @@ import { isWorkbenchApp, readConfig } from '../../defineApp.js';
  * installation-config id slot deployed apps get from the applications API,
  * and the workbench keys change detection on it. `version` is the config
  * contract version the generated module exports, known before the module runs.
- */ export function deriveConfigs(app) {
+ */ export async function deriveConfigs(app) {
     if (!isWorkbenchApp(app)) return [];
     const config = readConfig(app);
     if (!config) return [];
@@ -96,9 +95,18 @@ import { isWorkbenchApp, readConfig } from '../../defineApp.js';
     return [
         {
             ...entry,
-            id: hash('sha1', JSON.stringify(entry))
+            id: await contentHash(JSON.stringify(entry))
         }
     ];
 }
+/**
+ * SHA-256 of a string, as hex, via the Web Crypto API — available in both Node
+ * and the browser. `node:crypto` can't be used: the Vite dev server's dep scan
+ * pulls this module into the browser graph.
+ */ async function contentHash(input) {
+    // eslint-disable-next-line n/no-unsupported-features/node-builtins -- the Web Crypto global is available on our Node target and in the browser
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(input));
+    return Array.from(new Uint8Array(digest), (byte)=>byte.toString(16).padStart(2, '0')).join('');
+}
 
 //# sourceMappingURL=deriveInterfaces.js.map

package/dist/actions/dev/deriveInterfaces.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/dev/deriveInterfaces.ts"],"sourcesContent":["import {hash} from 'node:crypto'\n\nimport {type CliConfig} from '@sanity/cli-core'\n\nimport {\n  interfaceModuleId,\n  MEDIA_LIBRARY_CONFIG_CONTRACT_VERSION,\n  SERVICE_CONTRACT_VERSION,\n  VIEW_CONTRACT_VERSION,\n} from '../../contract.js'\nimport {isWorkbenchApp, readConfig} from '../../defineApp.js'\nimport {type DevServerManifest} from './registry.js'\n\n/** One forwarded interface record on the dev-server registry entry. */\nexport type DevServerInterface = NonNullable<DevServerManifest['interfaces']>[number]\n\n/** One forwarded config on the dev-server registry entry. */\nexport type DevServerConfig = NonNullable<DevServerManifest['configs']>[number]\n\n/**\n * Map a workbench app's declarations to its registry interface records:\n * `views` → panels, `services` → workers, `entry` → the `app` view. Each mirrors\n * a deployed record so the workbench loads a local interface like a deployed one.\n * `undefined` for a non-branded app; a studio that declares `entry` is rejected\n * (studio app views aren't implemented yet).\n */\nexport function deriveInterfaces(\n  app: CliConfig['app'],\n  options: {isApp: boolean},\n): DevServerInterface[] | undefined {\n  if (!isWorkbenchApp(app)) return undefined\n\n  if (!options.isApp && app.entry !== undefined) {\n    throw new Error('App views for studios are not implemented yet')\n  }\n\n  const interfaceId = (type: string, name: string): string => `${app.name}-${type}-${name}`\n\n  const views = (app.views ?? []).map(\n    (view): DevServerInterface => ({\n      id: interfaceId('panel', view.name),\n      metadata: null,\n      moduleId: interfaceModuleId('panel', view.name),\n      name: view.name,\n      src: view.src,\n      title: view.title ?? view.name,\n      type: 'panel',\n      version: String(VIEW_CONTRACT_VERSION),\n    }),\n  )\n\n  const services = (app.services ?? []).map(\n    (service): DevServerInterface => ({\n      id: interfaceId('worker', service.name),\n      metadata: null,\n      moduleId: interfaceModuleId('worker', service.name),\n      name: service.name,\n      src: service.src,\n      title: service.title ?? service.name,\n      type: 'worker',\n      version: String(SERVICE_CONTRACT_VERSION),\n    }),\n  )\n\n  const appView: DevServerInterface[] =\n    app.entry === undefined\n      ? []\n      : [\n          {\n            id: interfaceId('app', app.name),\n            metadata: null,\n            moduleId: interfaceModuleId('app', app.name),\n            name: app.name,\n            src: app.entry,\n            title: app.title,\n            type: 'app',\n          },\n        ]\n\n  return [...views, ...services, ...appView]\n}\n\n/**\n * The named source files a config's generated module is built from, dispatched\n * per app type — the projection the exposes-set id keys on, so the generic HMR\n * tracker owns none of the per-type shape. Throws on an app type it can't\n * handle, so a new config family has to register its shape here.\n */\nexport function deriveConfigEntries(config: DevServerConfig): {name: string; src: string}[] {\n  switch (config.appType) {\n    case 'media-library': {\n      return config.fields.map((field) => ({name: field.name, src: field.src}))\n    }\n    default: {\n      throw new Error(`Cannot derive entries for unknown config appType: ${config.appType}`)\n    }\n  }\n}\n\n/**\n * The fields' schema *values* can't serialize — the workbench loads them from\n * the federation module. `src` stays on so the exposes-set id keys on it and a\n * repoint rebuilds. `appType` routes the config to the singleton (no app id to\n * key on). `id` is a content hash of the entry — it fills the\n * installation-config id slot deployed apps get from the applications API,\n * and the workbench keys change detection on it. `version` is the config\n * contract version the generated module exports, known before the module runs.\n */\nexport function deriveConfigs(app: CliConfig['app']): DevServerConfig[] {\n  if (!isWorkbenchApp(app)) return []\n  const config = readConfig(app)\n  if (!config) return []\n  const entry = {\n    appType: config.appType,\n    fields: config.fields.map((field) => ({\n      name: field.name,\n      public: field.public,\n      src: field.src,\n      title: field.title,\n    })),\n    moduleName: app.name,\n    version: MEDIA_LIBRARY_CONFIG_CONTRACT_VERSION,\n  }\n  return [{...entry, id: hash('sha1', JSON.stringify(entry))}]\n}\n"],"names":["hash","interfaceModuleId","MEDIA_LIBRARY_CONFIG_CONTRACT_VERSION","SERVICE_CONTRACT_VERSION","VIEW_CONTRACT_VERSION","isWorkbenchApp","readConfig","deriveInterfaces","app","options","undefined","isApp","entry","Error","interfaceId","type","name","views","map","view","id","metadata","moduleId","src","title","version","String","services","service","appView","deriveConfigEntries","config","appType","fields","field","deriveConfigs","public","moduleName","JSON","stringify"],"mappings":"AAAA,SAAQA,IAAI,QAAO,cAAa;AAIhC,SACEC,iBAAiB,EACjBC,qCAAqC,EACrCC,wBAAwB,EACxBC,qBAAqB,QAChB,oBAAmB;AAC1B,SAAQC,cAAc,EAAEC,UAAU,QAAO,qBAAoB;AAS7D;;;;;;CAMC,GACD,OAAO,SAASC,iBACdC,GAAqB,EACrBC,OAAyB;IAEzB,IAAI,CAACJ,eAAeG,MAAM,OAAOE;IAEjC,IAAI,CAACD,QAAQE,KAAK,IAAIH,IAAII,KAAK,KAAKF,WAAW;QAC7C,MAAM,IAAIG,MAAM;IAClB;IAEA,MAAMC,cAAc,CAACC,MAAcC,OAAyB,GAAGR,IAAIQ,IAAI,CAAC,CAAC,EAAED,KAAK,CAAC,EAAEC,MAAM;IAEzF,MAAMC,QAAQ,AAACT,CAAAA,IAAIS,KAAK,IAAI,EAAE,AAAD,EAAGC,GAAG,CACjC,CAACC,OAA8B,CAAA;YAC7BC,IAAIN,YAAY,SAASK,KAAKH,IAAI;YAClCK,UAAU;YACVC,UAAUrB,kBAAkB,SAASkB,KAAKH,IAAI;YAC9CA,MAAMG,KAAKH,IAAI;YACfO,KAAKJ,KAAKI,GAAG;YACbC,OAAOL,KAAKK,KAAK,IAAIL,KAAKH,IAAI;YAC9BD,MAAM;YACNU,SAASC,OAAOtB;QAClB,CAAA;IAGF,MAAMuB,WAAW,AAACnB,CAAAA,IAAImB,QAAQ,IAAI,EAAE,AAAD,EAAGT,GAAG,CACvC,CAACU,UAAiC,CAAA;YAChCR,IAAIN,YAAY,UAAUc,QAAQZ,IAAI;YACtCK,UAAU;YACVC,UAAUrB,kBAAkB,UAAU2B,QAAQZ,IAAI;YAClDA,MAAMY,QAAQZ,IAAI;YAClBO,KAAKK,QAAQL,GAAG;YAChBC,OAAOI,QAAQJ,KAAK,IAAII,QAAQZ,IAAI;YACpCD,MAAM;YACNU,SAASC,OAAOvB;QAClB,CAAA;IAGF,MAAM0B,UACJrB,IAAII,KAAK,KAAKF,YACV,EAAE,GACF;QACE;YACEU,IAAIN,YAAY,OAAON,IAAIQ,IAAI;YAC/BK,UAAU;YACVC,UAAUrB,kBAAkB,OAAOO,IAAIQ,IAAI;YAC3CA,MAAMR,IAAIQ,IAAI;YACdO,KAAKf,IAAII,KAAK;YACdY,OAAOhB,IAAIgB,KAAK;YAChBT,MAAM;QACR;KACD;IAEP,OAAO;WAAIE;WAAUU;WAAaE;KAAQ;AAC5C;AAEA;;;;;CAKC,GACD,OAAO,SAASC,oBAAoBC,MAAuB;IACzD,OAAQA,OAAOC,OAAO;QACpB,KAAK;YAAiB;gBACpB,OAAOD,OAAOE,MAAM,CAACf,GAAG,CAAC,CAACgB,QAAW,CAAA;wBAAClB,MAAMkB,MAAMlB,IAAI;wBAAEO,KAAKW,MAAMX,GAAG;oBAAA,CAAA;YACxE;QACA;YAAS;gBACP,MAAM,IAAIV,MAAM,CAAC,kDAAkD,EAAEkB,OAAOC,OAAO,EAAE;YACvF;IACF;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASG,cAAc3B,GAAqB;IACjD,IAAI,CAACH,eAAeG,MAAM,OAAO,EAAE;IACnC,MAAMuB,SAASzB,WAAWE;IAC1B,IAAI,CAACuB,QAAQ,OAAO,EAAE;IACtB,MAAMnB,QAAQ;QACZoB,SAASD,OAAOC,OAAO;QACvBC,QAAQF,OAAOE,MAAM,CAACf,GAAG,CAAC,CAACgB,QAAW,CAAA;gBACpClB,MAAMkB,MAAMlB,IAAI;gBAChBoB,QAAQF,MAAME,MAAM;gBACpBb,KAAKW,MAAMX,GAAG;gBACdC,OAAOU,MAAMV,KAAK;YACpB,CAAA;QACAa,YAAY7B,IAAIQ,IAAI;QACpBS,SAASvB;IACX;IACA,OAAO;QAAC;YAAC,GAAGU,KAAK;YAAEQ,IAAIpB,KAAK,QAAQsC,KAAKC,SAAS,CAAC3B;QAAO;KAAE;AAC9D"}
+{"version":3,"sources":["../../../src/actions/dev/deriveInterfaces.ts"],"sourcesContent":["import {type CliConfig} from '@sanity/cli-core'\n\nimport {\n  interfaceModuleId,\n  MEDIA_LIBRARY_CONFIG_CONTRACT_VERSION,\n  SERVICE_CONTRACT_VERSION,\n  VIEW_CONTRACT_VERSION,\n} from '../../contract.js'\nimport {isWorkbenchApp, readConfig} from '../../defineApp.js'\nimport {type DevServerManifest} from './registry.js'\n\n/** One forwarded interface record on the dev-server registry entry. */\nexport type DevServerInterface = NonNullable<DevServerManifest['interfaces']>[number]\n\n/** One forwarded config on the dev-server registry entry. */\nexport type DevServerConfig = NonNullable<DevServerManifest['configs']>[number]\n\n/**\n * Map a workbench app's declarations to its registry interface records:\n * `views` → panels, `services` → workers, `entry` → the `app` view. Each mirrors\n * a deployed record so the workbench loads a local interface like a deployed one.\n * `undefined` for a non-branded app; a studio that declares `entry` is rejected\n * (studio app views aren't implemented yet).\n */\nexport function deriveInterfaces(\n  app: CliConfig['app'],\n  options: {isApp: boolean},\n): DevServerInterface[] | undefined {\n  if (!isWorkbenchApp(app)) return undefined\n\n  if (!options.isApp && app.entry !== undefined) {\n    throw new Error('App views for studios are not implemented yet')\n  }\n\n  const interfaceId = (type: string, name: string): string => `${app.name}-${type}-${name}`\n\n  const views = (app.views ?? []).map(\n    (view): DevServerInterface => ({\n      id: interfaceId('panel', view.name),\n      metadata: null,\n      moduleId: interfaceModuleId('panel', view.name),\n      name: view.name,\n      src: view.src,\n      title: view.title ?? view.name,\n      type: 'panel',\n      version: String(VIEW_CONTRACT_VERSION),\n    }),\n  )\n\n  const services = (app.services ?? []).map(\n    (service): DevServerInterface => ({\n      id: interfaceId('worker', service.name),\n      metadata: null,\n      moduleId: interfaceModuleId('worker', service.name),\n      name: service.name,\n      src: service.src,\n      title: service.title ?? service.name,\n      type: 'worker',\n      version: String(SERVICE_CONTRACT_VERSION),\n    }),\n  )\n\n  const appView: DevServerInterface[] =\n    app.entry === undefined\n      ? []\n      : [\n          {\n            id: interfaceId('app', app.name),\n            metadata: null,\n            moduleId: interfaceModuleId('app', app.name),\n            name: app.name,\n            src: app.entry,\n            title: app.title,\n            type: 'app',\n          },\n        ]\n\n  return [...views, ...services, ...appView]\n}\n\n/**\n * The named source files a config's generated module is built from, dispatched\n * per app type — the projection the exposes-set id keys on, so the generic HMR\n * tracker owns none of the per-type shape. Throws on an app type it can't\n * handle, so a new config family has to register its shape here.\n */\nexport function deriveConfigEntries(config: DevServerConfig): {name: string; src: string}[] {\n  switch (config.appType) {\n    case 'media-library': {\n      return config.fields.map((field) => ({name: field.name, src: field.src}))\n    }\n    default: {\n      throw new Error(`Cannot derive entries for unknown config appType: ${config.appType}`)\n    }\n  }\n}\n\n/**\n * The fields' schema *values* can't serialize — the workbench loads them from\n * the federation module. `src` stays on so the exposes-set id keys on it and a\n * repoint rebuilds. `appType` routes the config to the singleton (no app id to\n * key on). `id` is a content hash of the entry — it fills the\n * installation-config id slot deployed apps get from the applications API,\n * and the workbench keys change detection on it. `version` is the config\n * contract version the generated module exports, known before the module runs.\n */\nexport async function deriveConfigs(app: CliConfig['app']): Promise<DevServerConfig[]> {\n  if (!isWorkbenchApp(app)) return []\n  const config = readConfig(app)\n  if (!config) return []\n  const entry = {\n    appType: config.appType,\n    fields: config.fields.map((field) => ({\n      name: field.name,\n      public: field.public,\n      src: field.src,\n      title: field.title,\n    })),\n    moduleName: app.name,\n    version: MEDIA_LIBRARY_CONFIG_CONTRACT_VERSION,\n  }\n  return [{...entry, id: await contentHash(JSON.stringify(entry))}]\n}\n\n/**\n * SHA-256 of a string, as hex, via the Web Crypto API — available in both Node\n * and the browser. `node:crypto` can't be used: the Vite dev server's dep scan\n * pulls this module into the browser graph.\n */\nasync function contentHash(input: string): Promise<string> {\n  // eslint-disable-next-line n/no-unsupported-features/node-builtins -- the Web Crypto global is available on our Node target and in the browser\n  const digest = await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(input))\n  return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, '0')).join('')\n}\n"],"names":["interfaceModuleId","MEDIA_LIBRARY_CONFIG_CONTRACT_VERSION","SERVICE_CONTRACT_VERSION","VIEW_CONTRACT_VERSION","isWorkbenchApp","readConfig","deriveInterfaces","app","options","undefined","isApp","entry","Error","interfaceId","type","name","views","map","view","id","metadata","moduleId","src","title","version","String","services","service","appView","deriveConfigEntries","config","appType","fields","field","deriveConfigs","public","moduleName","contentHash","JSON","stringify","input","digest","globalThis","crypto","subtle","TextEncoder","encode","Array","from","Uint8Array","byte","toString","padStart","join"],"mappings":"AAEA,SACEA,iBAAiB,EACjBC,qCAAqC,EACrCC,wBAAwB,EACxBC,qBAAqB,QAChB,oBAAmB;AAC1B,SAAQC,cAAc,EAAEC,UAAU,QAAO,qBAAoB;AAS7D;;;;;;CAMC,GACD,OAAO,SAASC,iBACdC,GAAqB,EACrBC,OAAyB;IAEzB,IAAI,CAACJ,eAAeG,MAAM,OAAOE;IAEjC,IAAI,CAACD,QAAQE,KAAK,IAAIH,IAAII,KAAK,KAAKF,WAAW;QAC7C,MAAM,IAAIG,MAAM;IAClB;IAEA,MAAMC,cAAc,CAACC,MAAcC,OAAyB,GAAGR,IAAIQ,IAAI,CAAC,CAAC,EAAED,KAAK,CAAC,EAAEC,MAAM;IAEzF,MAAMC,QAAQ,AAACT,CAAAA,IAAIS,KAAK,IAAI,EAAE,AAAD,EAAGC,GAAG,CACjC,CAACC,OAA8B,CAAA;YAC7BC,IAAIN,YAAY,SAASK,KAAKH,IAAI;YAClCK,UAAU;YACVC,UAAUrB,kBAAkB,SAASkB,KAAKH,IAAI;YAC9CA,MAAMG,KAAKH,IAAI;YACfO,KAAKJ,KAAKI,GAAG;YACbC,OAAOL,KAAKK,KAAK,IAAIL,KAAKH,IAAI;YAC9BD,MAAM;YACNU,SAASC,OAAOtB;QAClB,CAAA;IAGF,MAAMuB,WAAW,AAACnB,CAAAA,IAAImB,QAAQ,IAAI,EAAE,AAAD,EAAGT,GAAG,CACvC,CAACU,UAAiC,CAAA;YAChCR,IAAIN,YAAY,UAAUc,QAAQZ,IAAI;YACtCK,UAAU;YACVC,UAAUrB,kBAAkB,UAAU2B,QAAQZ,IAAI;YAClDA,MAAMY,QAAQZ,IAAI;YAClBO,KAAKK,QAAQL,GAAG;YAChBC,OAAOI,QAAQJ,KAAK,IAAII,QAAQZ,IAAI;YACpCD,MAAM;YACNU,SAASC,OAAOvB;QAClB,CAAA;IAGF,MAAM0B,UACJrB,IAAII,KAAK,KAAKF,YACV,EAAE,GACF;QACE;YACEU,IAAIN,YAAY,OAAON,IAAIQ,IAAI;YAC/BK,UAAU;YACVC,UAAUrB,kBAAkB,OAAOO,IAAIQ,IAAI;YAC3CA,MAAMR,IAAIQ,IAAI;YACdO,KAAKf,IAAII,KAAK;YACdY,OAAOhB,IAAIgB,KAAK;YAChBT,MAAM;QACR;KACD;IAEP,OAAO;WAAIE;WAAUU;WAAaE;KAAQ;AAC5C;AAEA;;;;;CAKC,GACD,OAAO,SAASC,oBAAoBC,MAAuB;IACzD,OAAQA,OAAOC,OAAO;QACpB,KAAK;YAAiB;gBACpB,OAAOD,OAAOE,MAAM,CAACf,GAAG,CAAC,CAACgB,QAAW,CAAA;wBAAClB,MAAMkB,MAAMlB,IAAI;wBAAEO,KAAKW,MAAMX,GAAG;oBAAA,CAAA;YACxE;QACA;YAAS;gBACP,MAAM,IAAIV,MAAM,CAAC,kDAAkD,EAAEkB,OAAOC,OAAO,EAAE;YACvF;IACF;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeG,cAAc3B,GAAqB;IACvD,IAAI,CAACH,eAAeG,MAAM,OAAO,EAAE;IACnC,MAAMuB,SAASzB,WAAWE;IAC1B,IAAI,CAACuB,QAAQ,OAAO,EAAE;IACtB,MAAMnB,QAAQ;QACZoB,SAASD,OAAOC,OAAO;QACvBC,QAAQF,OAAOE,MAAM,CAACf,GAAG,CAAC,CAACgB,QAAW,CAAA;gBACpClB,MAAMkB,MAAMlB,IAAI;gBAChBoB,QAAQF,MAAME,MAAM;gBACpBb,KAAKW,MAAMX,GAAG;gBACdC,OAAOU,MAAMV,KAAK;YACpB,CAAA;QACAa,YAAY7B,IAAIQ,IAAI;QACpBS,SAASvB;IACX;IACA,OAAO;QAAC;YAAC,GAAGU,KAAK;YAAEQ,IAAI,MAAMkB,YAAYC,KAAKC,SAAS,CAAC5B;QAAO;KAAE;AACnE;AAEA;;;;CAIC,GACD,eAAe0B,YAAYG,KAAa;IACtC,+IAA+I;IAC/I,MAAMC,SAAS,MAAMC,WAAWC,MAAM,CAACC,MAAM,CAACH,MAAM,CAAC,WAAW,IAAII,cAAcC,MAAM,CAACN;IACzF,OAAOO,MAAMC,IAAI,CAAC,IAAIC,WAAWR,SAAS,CAACS,OAASA,KAAKC,QAAQ,CAAC,IAAIC,QAAQ,CAAC,GAAG,MAAMC,IAAI,CAAC;AAC/F"}

package/dist/actions/dev/startDevServerRegistration.js

@@ -1,4 +1,5 @@
 import { getCliConfigUncached } from '@sanity/cli-core';
+import { resolveAppId } from '../../appId.js';
 import { deriveConfigs, deriveInterfaces } from './deriveInterfaces.js';
 import { trackExposesSet } from './exposesSetId.js';
 import { registerDevServer } from './registry.js';
@@ -16,18 +17,24 @@ import { startDevManifestWatcher } from './startDevManifestWatcher.js';
  * interface changes. The workbench reads the entry to locate and render the
  * server; the watcher keeps it current as `sanity.cli.ts` is edited.
  */ export async function startDevServerRegistration(options) {
-    const { appId, cliConfig, extractManifest, isApp, onInterfaceSetChange, output, server, workDir } = options;
+    const { cliConfig, extractManifest, isApp, onInterfaceSetChange, output, server, workDir } = options;
     const { host: appHost, port: appPort } = serverAddress(server);
     // Forwarded alongside (not inside) the manifest so the workbench renders local
     // panels/workers and reads the configs without a deploy.
     const interfaces = deriveInterfaces(cliConfig.app, {
         isApp
     });
-    const configs = deriveConfigs(cliConfig.app);
+    const configs = await deriveConfigs(cliConfig.app);
     const registration = registerDevServer({
         configs,
         host: appHost,
-        id: appId,
+        // Keyed by where it's served (not the deployment id), so a running app can't
+        // collide with its deployed twin — on the configured port, not the bound one,
+        // to match `__SANITY_APP_ID__`, compiled before any non-strict shift.
+        id: resolveAppId({
+            host: appHost,
+            port: server.config.server.port ?? appPort
+        }),
         interfaces,
         port: appPort,
         projectId: cliConfig?.api?.projectId,
@@ -44,7 +51,7 @@ import { startDevManifestWatcher } from './startDevManifestWatcher.js';
         extract: async (params)=>{
             const app = (await getCliConfigUncached(params.workDir)).app;
             return {
-                configs: deriveConfigs(app),
+                configs: await deriveConfigs(app),
                 interfaces: deriveInterfaces(app, {
                     isApp
                 }),

package/dist/actions/dev/startDevServerRegistration.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/dev/startDevServerRegistration.ts"],"sourcesContent":["import {type CliConfig, getCliConfigUncached, type Output} from '@sanity/cli-core'\nimport {type ViteDevServer} from 'vite'\n\nimport {deriveConfigs, deriveInterfaces} from './deriveInterfaces.js'\nimport {trackExposesSet} from './exposesSetId.js'\nimport {type DevServerManifest, registerDevServer} from './registry.js'\nimport {startDevManifestWatcher} from './startDevManifestWatcher.js'\n\ninterface DevServerRegistrationOptions {\n  /** Resolved app id for the registry entry; the caller owns id resolution and the deprecation check. */\n  appId: string | undefined\n  cliConfig: CliConfig\n  /**\n   * Extract the project manifest to inline into the registry. The caller owns the\n   * studio-vs-app split (manifest formats are CLI-domain); registration re-derives\n   * the interface set alongside it.\n   */\n  extractManifest: (params: {\n    configPath: string\n    workDir: string\n  }) => Promise<DevServerManifest['manifest']>\n  isApp: boolean\n  output: Output\n  server: ViteDevServer\n  workDir: string\n\n  /**\n   * Rebuild the app's federation remote when its interface set changes, awaited\n   * *before* the registry patch — the patch reloads the workbench page, which must\n   * re-fetch a remote that already exposes the new interface. Resolves with the\n   * recreated server so the entry gets its actual address (non-strict ports may\n   * shift it); must reject if the restart produces no server, so the set stays\n   * uncommitted and the next save retries instead of advertising a dead port.\n   */\n  onInterfaceSetChange?: () => Promise<ViteDevServer>\n}\n\ninterface DevServerRegistrationHandle {\n  close: () => Promise<void>\n}\n\n/** The address the server actually bound — the live socket, which can differ from the configured port under non-strict ports. */\nfunction serverAddress(server: ViteDevServer) {\n  const resolvedHost = server.config.server.host\n  const addr = server.httpServer?.address()\n  return {\n    host: typeof resolvedHost === 'string' ? resolvedHost : 'localhost',\n    port: typeof addr === 'object' && addr ? addr.port : server.config.server.port,\n  }\n}\n\n/**\n * Register the dev server in the registry and watch its config for manifest +\n * interface changes. The workbench reads the entry to locate and render the\n * server; the watcher keeps it current as `sanity.cli.ts` is edited.\n */\nexport async function startDevServerRegistration(\n  options: DevServerRegistrationOptions,\n): Promise<DevServerRegistrationHandle> {\n  const {appId, cliConfig, extractManifest, isApp, onInterfaceSetChange, output, server, workDir} =\n    options\n\n  const {host: appHost, port: appPort} = serverAddress(server)\n\n  // Forwarded alongside (not inside) the manifest so the workbench renders local\n  // panels/workers and reads the configs without a deploy.\n  const interfaces = deriveInterfaces(cliConfig.app, {isApp})\n  const configs = deriveConfigs(cliConfig.app)\n\n  const registration = registerDevServer({\n    configs,\n    host: appHost,\n    id: appId,\n    interfaces,\n    port: appPort,\n    projectId: cliConfig?.api?.projectId,\n    type: isApp ? 'coreApp' : 'studio',\n    workDir,\n  })\n\n  const exposesSet = trackExposesSet({configs, interfaces})\n\n  const watcher = await startDevManifestWatcher({\n    // Re-derive every pass (don't omit): the registry patch is a shallow merge,\n    // so omitting would wipe the registered set.\n    extract: async (params) => {\n      const app = (await getCliConfigUncached(params.workDir)).app\n      return {\n        configs: deriveConfigs(app),\n        interfaces: deriveInterfaces(app, {isApp}),\n        manifest: await extractManifest(params),\n      }\n    },\n    // A studio's root resolves to `sanity.config.*` but its interfaces live in\n    // `sanity.cli.*` — watch that too. Apps already root at `sanity.cli.*`.\n    extraWatchFilenames: isApp ? undefined : ['sanity.cli.js', 'sanity.cli.ts'],\n    output,\n    update: async (patch) => {\n      if (\n        !exposesSet.changed({\n          configs: patch.configs,\n          interfaces: patch.interfaces,\n        })\n      ) {\n        registration.update(patch)\n        return\n      }\n      // Rebuild the remote *before* patching the registry — the patch reloads the\n      // page, which must re-fetch a remote that already exposes the new interface.\n      const rebuiltServer = await onInterfaceSetChange?.()\n      // Commit only after a successful rebuild, so a thrown one retries next pass.\n      exposesSet.commit({\n        configs: patch.configs,\n        interfaces: patch.interfaces,\n      })\n      // The recreated server can bind a different port (non-strict ports).\n      registration.update(rebuiltServer ? {...patch, ...serverAddress(rebuiltServer)} : patch)\n    },\n    workDir,\n  })\n\n  return {\n    close: async () => {\n      registration.release()\n      await watcher.close()\n    },\n  }\n}\n"],"names":["getCliConfigUncached","deriveConfigs","deriveInterfaces","trackExposesSet","registerDevServer","startDevManifestWatcher","serverAddress","server","resolvedHost","config","host","addr","httpServer","address","port","startDevServerRegistration","options","appId","cliConfig","extractManifest","isApp","onInterfaceSetChange","output","workDir","appHost","appPort","interfaces","app","configs","registration","id","projectId","api","type","exposesSet","watcher","extract","params","manifest","extraWatchFilenames","undefined","update","patch","changed","rebuiltServer","commit","close","release"],"mappings":"AAAA,SAAwBA,oBAAoB,QAAoB,mBAAkB;AAGlF,SAAQC,aAAa,EAAEC,gBAAgB,QAAO,wBAAuB;AACrE,SAAQC,eAAe,QAAO,oBAAmB;AACjD,SAAgCC,iBAAiB,QAAO,gBAAe;AACvE,SAAQC,uBAAuB,QAAO,+BAA8B;AAmCpE,+HAA+H,GAC/H,SAASC,cAAcC,MAAqB;IAC1C,MAAMC,eAAeD,OAAOE,MAAM,CAACF,MAAM,CAACG,IAAI;IAC9C,MAAMC,OAAOJ,OAAOK,UAAU,EAAEC;IAChC,OAAO;QACLH,MAAM,OAAOF,iBAAiB,WAAWA,eAAe;QACxDM,MAAM,OAAOH,SAAS,YAAYA,OAAOA,KAAKG,IAAI,GAAGP,OAAOE,MAAM,CAACF,MAAM,CAACO,IAAI;IAChF;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,2BACpBC,OAAqC;IAErC,MAAM,EAACC,KAAK,EAAEC,SAAS,EAAEC,eAAe,EAAEC,KAAK,EAAEC,oBAAoB,EAAEC,MAAM,EAAEf,MAAM,EAAEgB,OAAO,EAAC,GAC7FP;IAEF,MAAM,EAACN,MAAMc,OAAO,EAAEV,MAAMW,OAAO,EAAC,GAAGnB,cAAcC;IAErD,+EAA+E;IAC/E,yDAAyD;IACzD,MAAMmB,aAAaxB,iBAAiBgB,UAAUS,GAAG,EAAE;QAACP;IAAK;IACzD,MAAMQ,UAAU3B,cAAciB,UAAUS,GAAG;IAE3C,MAAME,eAAezB,kBAAkB;QACrCwB;QACAlB,MAAMc;QACNM,IAAIb;QACJS;QACAZ,MAAMW;QACNM,WAAWb,WAAWc,KAAKD;QAC3BE,MAAMb,QAAQ,YAAY;QAC1BG;IACF;IAEA,MAAMW,aAAa/B,gBAAgB;QAACyB;QAASF;IAAU;IAEvD,MAAMS,UAAU,MAAM9B,wBAAwB;QAC5C,4EAA4E;QAC5E,6CAA6C;QAC7C+B,SAAS,OAAOC;YACd,MAAMV,MAAM,AAAC,CAAA,MAAM3B,qBAAqBqC,OAAOd,OAAO,CAAA,EAAGI,GAAG;YAC5D,OAAO;gBACLC,SAAS3B,cAAc0B;gBACvBD,YAAYxB,iBAAiByB,KAAK;oBAACP;gBAAK;gBACxCkB,UAAU,MAAMnB,gBAAgBkB;YAClC;QACF;QACA,2EAA2E;QAC3E,wEAAwE;QACxEE,qBAAqBnB,QAAQoB,YAAY;YAAC;YAAiB;SAAgB;QAC3ElB;QACAmB,QAAQ,OAAOC;YACb,IACE,CAACR,WAAWS,OAAO,CAAC;gBAClBf,SAASc,MAAMd,OAAO;gBACtBF,YAAYgB,MAAMhB,UAAU;YAC9B,IACA;gBACAG,aAAaY,MAAM,CAACC;gBACpB;YACF;YACA,4EAA4E;YAC5E,6EAA6E;YAC7E,MAAME,gBAAgB,MAAMvB;YAC5B,6EAA6E;YAC7Ea,WAAWW,MAAM,CAAC;gBAChBjB,SAASc,MAAMd,OAAO;gBACtBF,YAAYgB,MAAMhB,UAAU;YAC9B;YACA,qEAAqE;YACrEG,aAAaY,MAAM,CAACG,gBAAgB;gBAAC,GAAGF,KAAK;gBAAE,GAAGpC,cAAcsC,cAAc;YAAA,IAAIF;QACpF;QACAnB;IACF;IAEA,OAAO;QACLuB,OAAO;YACLjB,aAAakB,OAAO;YACpB,MAAMZ,QAAQW,KAAK;QACrB;IACF;AACF"}
+{"version":3,"sources":["../../../src/actions/dev/startDevServerRegistration.ts"],"sourcesContent":["import {type CliConfig, getCliConfigUncached, type Output} from '@sanity/cli-core'\nimport {type ViteDevServer} from 'vite'\n\nimport {resolveAppId} from '../../appId.js'\nimport {deriveConfigs, deriveInterfaces} from './deriveInterfaces.js'\nimport {trackExposesSet} from './exposesSetId.js'\nimport {type DevServerManifest, registerDevServer} from './registry.js'\nimport {startDevManifestWatcher} from './startDevManifestWatcher.js'\n\ninterface DevServerRegistrationOptions {\n  cliConfig: CliConfig\n  /**\n   * Extract the project manifest to inline into the registry. The caller owns the\n   * studio-vs-app split (manifest formats are CLI-domain); registration re-derives\n   * the interface set alongside it.\n   */\n  extractManifest: (params: {\n    configPath: string\n    workDir: string\n  }) => Promise<DevServerManifest['manifest']>\n  isApp: boolean\n  output: Output\n  server: ViteDevServer\n  workDir: string\n\n  /**\n   * Rebuild the app's federation remote when its interface set changes, awaited\n   * *before* the registry patch — the patch reloads the workbench page, which must\n   * re-fetch a remote that already exposes the new interface. Resolves with the\n   * recreated server so the entry gets its actual address (non-strict ports may\n   * shift it); must reject if the restart produces no server, so the set stays\n   * uncommitted and the next save retries instead of advertising a dead port.\n   */\n  onInterfaceSetChange?: () => Promise<ViteDevServer>\n}\n\ninterface DevServerRegistrationHandle {\n  close: () => Promise<void>\n}\n\n/** The address the server actually bound — the live socket, which can differ from the configured port under non-strict ports. */\nfunction serverAddress(server: ViteDevServer) {\n  const resolvedHost = server.config.server.host\n  const addr = server.httpServer?.address()\n  return {\n    host: typeof resolvedHost === 'string' ? resolvedHost : 'localhost',\n    port: typeof addr === 'object' && addr ? addr.port : server.config.server.port,\n  }\n}\n\n/**\n * Register the dev server in the registry and watch its config for manifest +\n * interface changes. The workbench reads the entry to locate and render the\n * server; the watcher keeps it current as `sanity.cli.ts` is edited.\n */\nexport async function startDevServerRegistration(\n  options: DevServerRegistrationOptions,\n): Promise<DevServerRegistrationHandle> {\n  const {cliConfig, extractManifest, isApp, onInterfaceSetChange, output, server, workDir} = options\n\n  const {host: appHost, port: appPort} = serverAddress(server)\n\n  // Forwarded alongside (not inside) the manifest so the workbench renders local\n  // panels/workers and reads the configs without a deploy.\n  const interfaces = deriveInterfaces(cliConfig.app, {isApp})\n  const configs = await deriveConfigs(cliConfig.app)\n\n  const registration = registerDevServer({\n    configs,\n    host: appHost,\n    // Keyed by where it's served (not the deployment id), so a running app can't\n    // collide with its deployed twin — on the configured port, not the bound one,\n    // to match `__SANITY_APP_ID__`, compiled before any non-strict shift.\n    id: resolveAppId({host: appHost, port: server.config.server.port ?? appPort}),\n    interfaces,\n    port: appPort,\n    projectId: cliConfig?.api?.projectId,\n    type: isApp ? 'coreApp' : 'studio',\n    workDir,\n  })\n\n  const exposesSet = trackExposesSet({configs, interfaces})\n\n  const watcher = await startDevManifestWatcher({\n    // Re-derive every pass (don't omit): the registry patch is a shallow merge,\n    // so omitting would wipe the registered set.\n    extract: async (params) => {\n      const app = (await getCliConfigUncached(params.workDir)).app\n      return {\n        configs: await deriveConfigs(app),\n        interfaces: deriveInterfaces(app, {isApp}),\n        manifest: await extractManifest(params),\n      }\n    },\n    // A studio's root resolves to `sanity.config.*` but its interfaces live in\n    // `sanity.cli.*` — watch that too. Apps already root at `sanity.cli.*`.\n    extraWatchFilenames: isApp ? undefined : ['sanity.cli.js', 'sanity.cli.ts'],\n    output,\n    update: async (patch) => {\n      if (\n        !exposesSet.changed({\n          configs: patch.configs,\n          interfaces: patch.interfaces,\n        })\n      ) {\n        registration.update(patch)\n        return\n      }\n      // Rebuild the remote *before* patching the registry — the patch reloads the\n      // page, which must re-fetch a remote that already exposes the new interface.\n      const rebuiltServer = await onInterfaceSetChange?.()\n      // Commit only after a successful rebuild, so a thrown one retries next pass.\n      exposesSet.commit({\n        configs: patch.configs,\n        interfaces: patch.interfaces,\n      })\n      // The recreated server can bind a different port (non-strict ports).\n      registration.update(rebuiltServer ? {...patch, ...serverAddress(rebuiltServer)} : patch)\n    },\n    workDir,\n  })\n\n  return {\n    close: async () => {\n      registration.release()\n      await watcher.close()\n    },\n  }\n}\n"],"names":["getCliConfigUncached","resolveAppId","deriveConfigs","deriveInterfaces","trackExposesSet","registerDevServer","startDevManifestWatcher","serverAddress","server","resolvedHost","config","host","addr","httpServer","address","port","startDevServerRegistration","options","cliConfig","extractManifest","isApp","onInterfaceSetChange","output","workDir","appHost","appPort","interfaces","app","configs","registration","id","projectId","api","type","exposesSet","watcher","extract","params","manifest","extraWatchFilenames","undefined","update","patch","changed","rebuiltServer","commit","close","release"],"mappings":"AAAA,SAAwBA,oBAAoB,QAAoB,mBAAkB;AAGlF,SAAQC,YAAY,QAAO,iBAAgB;AAC3C,SAAQC,aAAa,EAAEC,gBAAgB,QAAO,wBAAuB;AACrE,SAAQC,eAAe,QAAO,oBAAmB;AACjD,SAAgCC,iBAAiB,QAAO,gBAAe;AACvE,SAAQC,uBAAuB,QAAO,+BAA8B;AAiCpE,+HAA+H,GAC/H,SAASC,cAAcC,MAAqB;IAC1C,MAAMC,eAAeD,OAAOE,MAAM,CAACF,MAAM,CAACG,IAAI;IAC9C,MAAMC,OAAOJ,OAAOK,UAAU,EAAEC;IAChC,OAAO;QACLH,MAAM,OAAOF,iBAAiB,WAAWA,eAAe;QACxDM,MAAM,OAAOH,SAAS,YAAYA,OAAOA,KAAKG,IAAI,GAAGP,OAAOE,MAAM,CAACF,MAAM,CAACO,IAAI;IAChF;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,2BACpBC,OAAqC;IAErC,MAAM,EAACC,SAAS,EAAEC,eAAe,EAAEC,KAAK,EAAEC,oBAAoB,EAAEC,MAAM,EAAEd,MAAM,EAAEe,OAAO,EAAC,GAAGN;IAE3F,MAAM,EAACN,MAAMa,OAAO,EAAET,MAAMU,OAAO,EAAC,GAAGlB,cAAcC;IAErD,+EAA+E;IAC/E,yDAAyD;IACzD,MAAMkB,aAAavB,iBAAiBe,UAAUS,GAAG,EAAE;QAACP;IAAK;IACzD,MAAMQ,UAAU,MAAM1B,cAAcgB,UAAUS,GAAG;IAEjD,MAAME,eAAexB,kBAAkB;QACrCuB;QACAjB,MAAMa;QACN,6EAA6E;QAC7E,8EAA8E;QAC9E,sEAAsE;QACtEM,IAAI7B,aAAa;YAACU,MAAMa;YAAST,MAAMP,OAAOE,MAAM,CAACF,MAAM,CAACO,IAAI,IAAIU;QAAO;QAC3EC;QACAX,MAAMU;QACNM,WAAWb,WAAWc,KAAKD;QAC3BE,MAAMb,QAAQ,YAAY;QAC1BG;IACF;IAEA,MAAMW,aAAa9B,gBAAgB;QAACwB;QAASF;IAAU;IAEvD,MAAMS,UAAU,MAAM7B,wBAAwB;QAC5C,4EAA4E;QAC5E,6CAA6C;QAC7C8B,SAAS,OAAOC;YACd,MAAMV,MAAM,AAAC,CAAA,MAAM3B,qBAAqBqC,OAAOd,OAAO,CAAA,EAAGI,GAAG;YAC5D,OAAO;gBACLC,SAAS,MAAM1B,cAAcyB;gBAC7BD,YAAYvB,iBAAiBwB,KAAK;oBAACP;gBAAK;gBACxCkB,UAAU,MAAMnB,gBAAgBkB;YAClC;QACF;QACA,2EAA2E;QAC3E,wEAAwE;QACxEE,qBAAqBnB,QAAQoB,YAAY;YAAC;YAAiB;SAAgB;QAC3ElB;QACAmB,QAAQ,OAAOC;YACb,IACE,CAACR,WAAWS,OAAO,CAAC;gBAClBf,SAASc,MAAMd,OAAO;gBACtBF,YAAYgB,MAAMhB,UAAU;YAC9B,IACA;gBACAG,aAAaY,MAAM,CAACC;gBACpB;YACF;YACA,4EAA4E;YAC5E,6EAA6E;YAC7E,MAAME,gBAAgB,MAAMvB;YAC5B,6EAA6E;YAC7Ea,WAAWW,MAAM,CAAC;gBAChBjB,SAASc,MAAMd,OAAO;gBACtBF,YAAYgB,MAAMhB,UAAU;YAC9B;YACA,qEAAqE;YACrEG,aAAaY,MAAM,CAACG,gBAAgB;gBAAC,GAAGF,KAAK;gBAAE,GAAGnC,cAAcqC,cAAc;YAAA,IAAIF;QACpF;QACAnB;IACF;IAEA,OAAO;QACLuB,OAAO;YACLjB,aAAakB,OAAO;YACpB,MAAMZ,QAAQW,KAAK;QACrB;IACF;AACF"}

package/dist/actions/dev/startWorkbenchDev.js

@@ -13,7 +13,7 @@ import { startWorkbenchDevServer, startWorkbenchRemoteCoordinator } from './star
  * server falls back to the configured port and announces its own URL, exactly as
  * a plain `sanity dev` would.
  */ export async function startWorkbenchDev(options) {
-    const { appId, cacheDir, checkForDeprecatedAppId, cliConfig, extractManifest, httpHost, httpPort, isApp, output, reactStrictMode, startAppServer, workDir } = options;
+    const { cacheDir, checkForDeprecatedAppId, cliConfig, extractManifest, httpHost, httpPort, isApp, output, reactStrictMode, startAppServer, workDir } = options;
     // The remote can't render itself, so it runs as a plain app server (not the
     // shell) that still claims the lock and bridges the registry, so app
     // `sanity dev`s register into it.
@@ -83,7 +83,6 @@ import { startWorkbenchDevServer, startWorkbenchRemoteCoordinator } from './star
         // The deprecated-id check and manifest extractor are CLI-domain, injected here.
         checkForDeprecatedAppId();
         const registration = await startDevServerRegistration({
-            appId,
             cliConfig,
             extractManifest,
             isApp,

package/dist/actions/dev/startWorkbenchDev.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/dev/startWorkbenchDev.ts"],"sourcesContent":["import {styleText} from 'node:util'\n\nimport {type CliConfig, type Output} from '@sanity/cli-core'\n\nimport {createServerLifecycle, toDisplayHost} from '../../util/serverOrchestration.js'\nimport {type AppServerResult, startAppServerSupervisor} from './appServerSupervisor.js'\nimport {type DevServerManifest} from './registry.js'\nimport {startDevServerRegistration} from './startDevServerRegistration.js'\nimport {\n  startWorkbenchDevServer,\n  startWorkbenchRemoteCoordinator,\n} from './startWorkbenchDevServer.js'\n\nexport interface StartWorkbenchDevOptions {\n  /** Resolved app id for the registry entry (the CLI owns id resolution). */\n  appId: string | undefined\n  /** Directory for the workbench Vite server's dependency cache. */\n  cacheDir: string\n  /** CLI-domain `app.id`/`deployment.appId` deprecation check, run before registering. */\n  checkForDeprecatedAppId: () => void\n  cliConfig: CliConfig\n  /** Extract the project manifest to inline into the registry (studio-vs-app handled by the CLI). */\n  extractManifest: (params: {\n    configPath: string\n    workDir: string\n  }) => Promise<DevServerManifest['manifest']>\n  httpHost: string | undefined\n  httpPort: number\n  isApp: boolean\n  output: Output\n  reactStrictMode: boolean\n  /** Start the app/studio dev server — the CLI owns the server, this orchestrates it. */\n  startAppServer: (params: {\n    announceUrl: boolean\n    cliConfig: CliConfig\n    httpPort: number\n  }) => Promise<AppServerResult>\n  workDir: string\n}\n\n/**\n * Orchestrate the dev servers a workbench project needs: a singleton workbench\n * Vite server plus the app/studio dev server it renders, wired to the dev-server\n * registry so view/service edits re-sync live.\n *\n * A running workbench claims the configured port, so the app server binds the\n * next one. If the workbench can't start (package or port unavailable), the app\n * server falls back to the configured port and announces its own URL, exactly as\n * a plain `sanity dev` would.\n */\nexport async function startWorkbenchDev(\n  options: StartWorkbenchDevOptions,\n): Promise<{close: () => Promise<void>}> {\n  const {\n    appId,\n    cacheDir,\n    checkForDeprecatedAppId,\n    cliConfig,\n    extractManifest,\n    httpHost,\n    httpPort,\n    isApp,\n    output,\n    reactStrictMode,\n    startAppServer,\n    workDir,\n  } = options\n\n  // The remote can't render itself, so it runs as a plain app server (not the\n  // shell) that still claims the lock and bridges the registry, so app\n  // `sanity dev`s register into it.\n  if (process.env.SANITY_INTERNAL_IS_WORKBENCH_REMOTE === 'true') {\n    const remote = await startAppServer({announceUrl: true, cliConfig, httpPort})\n    if (!remote.started) return {close: async () => {}}\n\n    const addr = remote.server.httpServer?.address()\n    const port =\n      (typeof addr === 'object' && addr ? addr.port : remote.server.config.server.port) ?? httpPort\n    const coordinator = startWorkbenchRemoteCoordinator({httpHost, port, server: remote.server})\n\n    return {\n      close: async () => {\n        await coordinator.close()\n        await remote.close()\n      },\n    }\n  }\n\n  // Unwound in reverse on any failure or on close(): the watcher stops before\n  // the app server, and the supervisor waits out an in-flight rebuild.\n  const {close, closers, installSignalHandlers} = createServerLifecycle()\n\n  const workbench = await startWorkbenchDevServer({\n    cacheDir,\n    cliConfig,\n    httpHost,\n    httpPort,\n    mode: 'development',\n    output,\n    reactStrictMode,\n    workDir,\n  })\n  closers.push(workbench.close)\n\n  // A running workbench owns the configured port; the app server takes the next.\n  // Without one it claims the configured port and announces its own URL.\n  const appPort = workbench.workbenchAvailable ? workbench.workbenchPort + 1 : httpPort\n  const announceUrl = !workbench.workbenchAvailable\n\n  const supervised = await startAppServerSupervisor({\n    cliConfig,\n    start: (config) => startAppServer({announceUrl, cliConfig: config, httpPort: appPort}),\n    workDir,\n  }).catch(async (err) => {\n    await close()\n    throw err\n  })\n\n  if (!supervised.started) {\n    // The app server already reported why (e.g. missing organization id). Hand\n    // back a close that releases the workbench lock; nothing else came up.\n    return {close}\n  }\n  const {supervisor} = supervised\n  closers.push(supervisor.close)\n\n  try {\n    // The deprecated-id check and manifest extractor are CLI-domain, injected here.\n    checkForDeprecatedAppId()\n    const registration = await startDevServerRegistration({\n      appId,\n      cliConfig,\n      extractManifest,\n      isApp,\n      onInterfaceSetChange: () => supervisor.rebuild(),\n      output,\n      server: supervisor.server,\n      workDir,\n    })\n    closers.push(registration.close)\n  } catch (err) {\n    // Registration runs after both servers are up; a failure here would leak the\n    // workbench lock and dev servers without this teardown.\n    await close()\n    throw err\n  }\n\n  if (workbench.workbenchAvailable) {\n    const workbenchUrl = `http://${toDisplayHost(workbench.httpHost)}:${workbench.workbenchPort}`\n    const addr = supervisor.server.httpServer?.address()\n    const port = typeof addr === 'object' && addr ? addr.port : supervisor.server.config.server.port\n    output.log(\n      `Workbench dev server started at ${styleText(['blue', 'underline'], workbenchUrl)} (app on port ${port})`,\n    )\n  }\n\n  installSignalHandlers()\n\n  return {close}\n}\n"],"names":["styleText","createServerLifecycle","toDisplayHost","startAppServerSupervisor","startDevServerRegistration","startWorkbenchDevServer","startWorkbenchRemoteCoordinator","startWorkbenchDev","options","appId","cacheDir","checkForDeprecatedAppId","cliConfig","extractManifest","httpHost","httpPort","isApp","output","reactStrictMode","startAppServer","workDir","process","env","SANITY_INTERNAL_IS_WORKBENCH_REMOTE","remote","announceUrl","started","close","addr","server","httpServer","address","port","config","coordinator","closers","installSignalHandlers","workbench","mode","push","appPort","workbenchAvailable","workbenchPort","supervised","start","catch","err","supervisor","registration","onInterfaceSetChange","rebuild","workbenchUrl","log"],"mappings":"AAAA,SAAQA,SAAS,QAAO,YAAW;AAInC,SAAQC,qBAAqB,EAAEC,aAAa,QAAO,oCAAmC;AACtF,SAA8BC,wBAAwB,QAAO,2BAA0B;AAEvF,SAAQC,0BAA0B,QAAO,kCAAiC;AAC1E,SACEC,uBAAuB,EACvBC,+BAA+B,QAC1B,+BAA8B;AA6BrC;;;;;;;;;CASC,GACD,OAAO,eAAeC,kBACpBC,OAAiC;IAEjC,MAAM,EACJC,KAAK,EACLC,QAAQ,EACRC,uBAAuB,EACvBC,SAAS,EACTC,eAAe,EACfC,QAAQ,EACRC,QAAQ,EACRC,KAAK,EACLC,MAAM,EACNC,eAAe,EACfC,cAAc,EACdC,OAAO,EACR,GAAGZ;IAEJ,4EAA4E;IAC5E,qEAAqE;IACrE,kCAAkC;IAClC,IAAIa,QAAQC,GAAG,CAACC,mCAAmC,KAAK,QAAQ;QAC9D,MAAMC,SAAS,MAAML,eAAe;YAACM,aAAa;YAAMb;YAAWG;QAAQ;QAC3E,IAAI,CAACS,OAAOE,OAAO,EAAE,OAAO;YAACC,OAAO,WAAa;QAAC;QAElD,MAAMC,OAAOJ,OAAOK,MAAM,CAACC,UAAU,EAAEC;QACvC,MAAMC,OACJ,AAAC,CAAA,OAAOJ,SAAS,YAAYA,OAAOA,KAAKI,IAAI,GAAGR,OAAOK,MAAM,CAACI,MAAM,CAACJ,MAAM,CAACG,IAAI,AAAD,KAAMjB;QACvF,MAAMmB,cAAc5B,gCAAgC;YAACQ;YAAUkB;YAAMH,QAAQL,OAAOK,MAAM;QAAA;QAE1F,OAAO;YACLF,OAAO;gBACL,MAAMO,YAAYP,KAAK;gBACvB,MAAMH,OAAOG,KAAK;YACpB;QACF;IACF;IAEA,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,EAACA,KAAK,EAAEQ,OAAO,EAAEC,qBAAqB,EAAC,GAAGnC;IAEhD,MAAMoC,YAAY,MAAMhC,wBAAwB;QAC9CK;QACAE;QACAE;QACAC;QACAuB,MAAM;QACNrB;QACAC;QACAE;IACF;IACAe,QAAQI,IAAI,CAACF,UAAUV,KAAK;IAE5B,+EAA+E;IAC/E,uEAAuE;IACvE,MAAMa,UAAUH,UAAUI,kBAAkB,GAAGJ,UAAUK,aAAa,GAAG,IAAI3B;IAC7E,MAAMU,cAAc,CAACY,UAAUI,kBAAkB;IAEjD,MAAME,aAAa,MAAMxC,yBAAyB;QAChDS;QACAgC,OAAO,CAACX,SAAWd,eAAe;gBAACM;gBAAab,WAAWqB;gBAAQlB,UAAUyB;YAAO;QACpFpB;IACF,GAAGyB,KAAK,CAAC,OAAOC;QACd,MAAMnB;QACN,MAAMmB;IACR;IAEA,IAAI,CAACH,WAAWjB,OAAO,EAAE;QACvB,2EAA2E;QAC3E,uEAAuE;QACvE,OAAO;YAACC;QAAK;IACf;IACA,MAAM,EAACoB,UAAU,EAAC,GAAGJ;IACrBR,QAAQI,IAAI,CAACQ,WAAWpB,KAAK;IAE7B,IAAI;QACF,gFAAgF;QAChFhB;QACA,MAAMqC,eAAe,MAAM5C,2BAA2B;YACpDK;YACAG;YACAC;YACAG;YACAiC,sBAAsB,IAAMF,WAAWG,OAAO;YAC9CjC;YACAY,QAAQkB,WAAWlB,MAAM;YACzBT;QACF;QACAe,QAAQI,IAAI,CAACS,aAAarB,KAAK;IACjC,EAAE,OAAOmB,KAAK;QACZ,6EAA6E;QAC7E,wDAAwD;QACxD,MAAMnB;QACN,MAAMmB;IACR;IAEA,IAAIT,UAAUI,kBAAkB,EAAE;QAChC,MAAMU,eAAe,CAAC,OAAO,EAAEjD,cAAcmC,UAAUvB,QAAQ,EAAE,CAAC,EAAEuB,UAAUK,aAAa,EAAE;QAC7F,MAAMd,OAAOmB,WAAWlB,MAAM,CAACC,UAAU,EAAEC;QAC3C,MAAMC,OAAO,OAAOJ,SAAS,YAAYA,OAAOA,KAAKI,IAAI,GAAGe,WAAWlB,MAAM,CAACI,MAAM,CAACJ,MAAM,CAACG,IAAI;QAChGf,OAAOmC,GAAG,CACR,CAAC,gCAAgC,EAAEpD,UAAU;YAAC;YAAQ;SAAY,EAAEmD,cAAc,cAAc,EAAEnB,KAAK,CAAC,CAAC;IAE7G;IAEAI;IAEA,OAAO;QAACT;IAAK;AACf"}
+{"version":3,"sources":["../../../src/actions/dev/startWorkbenchDev.ts"],"sourcesContent":["import {styleText} from 'node:util'\n\nimport {type CliConfig, type Output} from '@sanity/cli-core'\n\nimport {createServerLifecycle, toDisplayHost} from '../../util/serverOrchestration.js'\nimport {type AppServerResult, startAppServerSupervisor} from './appServerSupervisor.js'\nimport {type DevServerManifest} from './registry.js'\nimport {startDevServerRegistration} from './startDevServerRegistration.js'\nimport {\n  startWorkbenchDevServer,\n  startWorkbenchRemoteCoordinator,\n} from './startWorkbenchDevServer.js'\n\nexport interface StartWorkbenchDevOptions {\n  /** Directory for the workbench Vite server's dependency cache. */\n  cacheDir: string\n  /** CLI-domain `app.id`/`deployment.appId` deprecation check, run before registering. */\n  checkForDeprecatedAppId: () => void\n  cliConfig: CliConfig\n  /** Extract the project manifest to inline into the registry (studio-vs-app handled by the CLI). */\n  extractManifest: (params: {\n    configPath: string\n    workDir: string\n  }) => Promise<DevServerManifest['manifest']>\n  httpHost: string | undefined\n  httpPort: number\n  isApp: boolean\n  output: Output\n  reactStrictMode: boolean\n  /** Start the app/studio dev server — the CLI owns the server, this orchestrates it. */\n  startAppServer: (params: {\n    announceUrl: boolean\n    cliConfig: CliConfig\n    httpPort: number\n  }) => Promise<AppServerResult>\n  workDir: string\n}\n\n/**\n * Orchestrate the dev servers a workbench project needs: a singleton workbench\n * Vite server plus the app/studio dev server it renders, wired to the dev-server\n * registry so view/service edits re-sync live.\n *\n * A running workbench claims the configured port, so the app server binds the\n * next one. If the workbench can't start (package or port unavailable), the app\n * server falls back to the configured port and announces its own URL, exactly as\n * a plain `sanity dev` would.\n */\nexport async function startWorkbenchDev(\n  options: StartWorkbenchDevOptions,\n): Promise<{close: () => Promise<void>}> {\n  const {\n    cacheDir,\n    checkForDeprecatedAppId,\n    cliConfig,\n    extractManifest,\n    httpHost,\n    httpPort,\n    isApp,\n    output,\n    reactStrictMode,\n    startAppServer,\n    workDir,\n  } = options\n\n  // The remote can't render itself, so it runs as a plain app server (not the\n  // shell) that still claims the lock and bridges the registry, so app\n  // `sanity dev`s register into it.\n  if (process.env.SANITY_INTERNAL_IS_WORKBENCH_REMOTE === 'true') {\n    const remote = await startAppServer({announceUrl: true, cliConfig, httpPort})\n    if (!remote.started) return {close: async () => {}}\n\n    const addr = remote.server.httpServer?.address()\n    const port =\n      (typeof addr === 'object' && addr ? addr.port : remote.server.config.server.port) ?? httpPort\n    const coordinator = startWorkbenchRemoteCoordinator({httpHost, port, server: remote.server})\n\n    return {\n      close: async () => {\n        await coordinator.close()\n        await remote.close()\n      },\n    }\n  }\n\n  // Unwound in reverse on any failure or on close(): the watcher stops before\n  // the app server, and the supervisor waits out an in-flight rebuild.\n  const {close, closers, installSignalHandlers} = createServerLifecycle()\n\n  const workbench = await startWorkbenchDevServer({\n    cacheDir,\n    cliConfig,\n    httpHost,\n    httpPort,\n    mode: 'development',\n    output,\n    reactStrictMode,\n    workDir,\n  })\n  closers.push(workbench.close)\n\n  // A running workbench owns the configured port; the app server takes the next.\n  // Without one it claims the configured port and announces its own URL.\n  const appPort = workbench.workbenchAvailable ? workbench.workbenchPort + 1 : httpPort\n  const announceUrl = !workbench.workbenchAvailable\n\n  const supervised = await startAppServerSupervisor({\n    cliConfig,\n    start: (config) => startAppServer({announceUrl, cliConfig: config, httpPort: appPort}),\n    workDir,\n  }).catch(async (err) => {\n    await close()\n    throw err\n  })\n\n  if (!supervised.started) {\n    // The app server already reported why (e.g. missing organization id). Hand\n    // back a close that releases the workbench lock; nothing else came up.\n    return {close}\n  }\n  const {supervisor} = supervised\n  closers.push(supervisor.close)\n\n  try {\n    // The deprecated-id check and manifest extractor are CLI-domain, injected here.\n    checkForDeprecatedAppId()\n    const registration = await startDevServerRegistration({\n      cliConfig,\n      extractManifest,\n      isApp,\n      onInterfaceSetChange: () => supervisor.rebuild(),\n      output,\n      server: supervisor.server,\n      workDir,\n    })\n    closers.push(registration.close)\n  } catch (err) {\n    // Registration runs after both servers are up; a failure here would leak the\n    // workbench lock and dev servers without this teardown.\n    await close()\n    throw err\n  }\n\n  if (workbench.workbenchAvailable) {\n    const workbenchUrl = `http://${toDisplayHost(workbench.httpHost)}:${workbench.workbenchPort}`\n    const addr = supervisor.server.httpServer?.address()\n    const port = typeof addr === 'object' && addr ? addr.port : supervisor.server.config.server.port\n    output.log(\n      `Workbench dev server started at ${styleText(['blue', 'underline'], workbenchUrl)} (app on port ${port})`,\n    )\n  }\n\n  installSignalHandlers()\n\n  return {close}\n}\n"],"names":["styleText","createServerLifecycle","toDisplayHost","startAppServerSupervisor","startDevServerRegistration","startWorkbenchDevServer","startWorkbenchRemoteCoordinator","startWorkbenchDev","options","cacheDir","checkForDeprecatedAppId","cliConfig","extractManifest","httpHost","httpPort","isApp","output","reactStrictMode","startAppServer","workDir","process","env","SANITY_INTERNAL_IS_WORKBENCH_REMOTE","remote","announceUrl","started","close","addr","server","httpServer","address","port","config","coordinator","closers","installSignalHandlers","workbench","mode","push","appPort","workbenchAvailable","workbenchPort","supervised","start","catch","err","supervisor","registration","onInterfaceSetChange","rebuild","workbenchUrl","log"],"mappings":"AAAA,SAAQA,SAAS,QAAO,YAAW;AAInC,SAAQC,qBAAqB,EAAEC,aAAa,QAAO,oCAAmC;AACtF,SAA8BC,wBAAwB,QAAO,2BAA0B;AAEvF,SAAQC,0BAA0B,QAAO,kCAAiC;AAC1E,SACEC,uBAAuB,EACvBC,+BAA+B,QAC1B,+BAA8B;AA2BrC;;;;;;;;;CASC,GACD,OAAO,eAAeC,kBACpBC,OAAiC;IAEjC,MAAM,EACJC,QAAQ,EACRC,uBAAuB,EACvBC,SAAS,EACTC,eAAe,EACfC,QAAQ,EACRC,QAAQ,EACRC,KAAK,EACLC,MAAM,EACNC,eAAe,EACfC,cAAc,EACdC,OAAO,EACR,GAAGX;IAEJ,4EAA4E;IAC5E,qEAAqE;IACrE,kCAAkC;IAClC,IAAIY,QAAQC,GAAG,CAACC,mCAAmC,KAAK,QAAQ;QAC9D,MAAMC,SAAS,MAAML,eAAe;YAACM,aAAa;YAAMb;YAAWG;QAAQ;QAC3E,IAAI,CAACS,OAAOE,OAAO,EAAE,OAAO;YAACC,OAAO,WAAa;QAAC;QAElD,MAAMC,OAAOJ,OAAOK,MAAM,CAACC,UAAU,EAAEC;QACvC,MAAMC,OACJ,AAAC,CAAA,OAAOJ,SAAS,YAAYA,OAAOA,KAAKI,IAAI,GAAGR,OAAOK,MAAM,CAACI,MAAM,CAACJ,MAAM,CAACG,IAAI,AAAD,KAAMjB;QACvF,MAAMmB,cAAc3B,gCAAgC;YAACO;YAAUkB;YAAMH,QAAQL,OAAOK,MAAM;QAAA;QAE1F,OAAO;YACLF,OAAO;gBACL,MAAMO,YAAYP,KAAK;gBACvB,MAAMH,OAAOG,KAAK;YACpB;QACF;IACF;IAEA,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,EAACA,KAAK,EAAEQ,OAAO,EAAEC,qBAAqB,EAAC,GAAGlC;IAEhD,MAAMmC,YAAY,MAAM/B,wBAAwB;QAC9CI;QACAE;QACAE;QACAC;QACAuB,MAAM;QACNrB;QACAC;QACAE;IACF;IACAe,QAAQI,IAAI,CAACF,UAAUV,KAAK;IAE5B,+EAA+E;IAC/E,uEAAuE;IACvE,MAAMa,UAAUH,UAAUI,kBAAkB,GAAGJ,UAAUK,aAAa,GAAG,IAAI3B;IAC7E,MAAMU,cAAc,CAACY,UAAUI,kBAAkB;IAEjD,MAAME,aAAa,MAAMvC,yBAAyB;QAChDQ;QACAgC,OAAO,CAACX,SAAWd,eAAe;gBAACM;gBAAab,WAAWqB;gBAAQlB,UAAUyB;YAAO;QACpFpB;IACF,GAAGyB,KAAK,CAAC,OAAOC;QACd,MAAMnB;QACN,MAAMmB;IACR;IAEA,IAAI,CAACH,WAAWjB,OAAO,EAAE;QACvB,2EAA2E;QAC3E,uEAAuE;QACvE,OAAO;YAACC;QAAK;IACf;IACA,MAAM,EAACoB,UAAU,EAAC,GAAGJ;IACrBR,QAAQI,IAAI,CAACQ,WAAWpB,KAAK;IAE7B,IAAI;QACF,gFAAgF;QAChFhB;QACA,MAAMqC,eAAe,MAAM3C,2BAA2B;YACpDO;YACAC;YACAG;YACAiC,sBAAsB,IAAMF,WAAWG,OAAO;YAC9CjC;YACAY,QAAQkB,WAAWlB,MAAM;YACzBT;QACF;QACAe,QAAQI,IAAI,CAACS,aAAarB,KAAK;IACjC,EAAE,OAAOmB,KAAK;QACZ,6EAA6E;QAC7E,wDAAwD;QACxD,MAAMnB;QACN,MAAMmB;IACR;IAEA,IAAIT,UAAUI,kBAAkB,EAAE;QAChC,MAAMU,eAAe,CAAC,OAAO,EAAEhD,cAAckC,UAAUvB,QAAQ,EAAE,CAAC,EAAEuB,UAAUK,aAAa,EAAE;QAC7F,MAAMd,OAAOmB,WAAWlB,MAAM,CAACC,UAAU,EAAEC;QAC3C,MAAMC,OAAO,OAAOJ,SAAS,YAAYA,OAAOA,KAAKI,IAAI,GAAGe,WAAWlB,MAAM,CAACI,MAAM,CAACJ,MAAM,CAACG,IAAI;QAChGf,OAAOmC,GAAG,CACR,CAAC,gCAAgC,EAAEnD,UAAU;YAAC;YAAQ;SAAY,EAAEkD,cAAc,cAAc,EAAEnB,KAAK,CAAC,CAAC;IAE7G;IAEAI;IAEA,OAAO;QAACT;IAAK;AACf"}

package/dist/actions/init/cliConfig.js

@@ -11,6 +11,7 @@ export default defineCliConfig({
   app: unstable_defineApp({
     name: '%name%',
     title: '%title%',
+    slug: '%slug%',
     organizationId: '%organizationId%',
     entry: '%entry%',
   }),
@@ -30,6 +31,7 @@ export default defineCliConfig({
   app: unstable_defineApp({
     name: '%name%',
     title: '%title%',
+    slug: '%slug%',
     organizationId: '%organizationId%',
   }),
   deployment: {

package/dist/actions/init/cliConfig.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/init/cliConfig.ts"],"sourcesContent":["// `sanity.cli.ts` templates for workbench (`unstable_defineApp`) projects,\n// consumed by the CLI's `init` scaffolding. The branded `unstable_defineApp`\n// result is the sole workbench (module-federation) opt-in, so its config shape\n// is workbench's to own; the CLI keeps the non-workbench templates and the\n// `%placeholder%` substitution. `%name%`/`%title%`/etc. are filled in by the\n// CLI's template processor.\n\n/** App scaffold — `entry` auto-declares the navigable app view. */\nexport const workbenchAppConfigTemplate = `\nimport {defineCliConfig, unstable_defineApp} from 'sanity/cli'\n\nexport default defineCliConfig({\n  app: unstable_defineApp({\n    name: '%name%',\n    title: '%title%',\n    organizationId: '%organizationId%',\n    entry: '%entry%',\n  }),\n})\n`\n\n/**\n * Studio scaffold — brands with name/title only, no `entry` (studio app views\n * aren't implemented yet).\n */\nexport const workbenchStudioConfigTemplate = `\nimport {defineCliConfig, unstable_defineApp} from 'sanity/cli'\n\nexport default defineCliConfig({\n  api: {\n    projectId: '%projectId%',\n    dataset: '%dataset%'\n  },\n  app: unstable_defineApp({\n    name: '%name%',\n    title: '%title%',\n    organizationId: '%organizationId%',\n  }),\n  deployment: {\n    /**\n     * Enable auto-updates for studios.\n     * Learn more at https://www.sanity.io/docs/studio/latest-version-of-sanity#k47faf43faf56\n     */\n    autoUpdates: __BOOL__autoUpdates__,\n  },\n})\n`\n"],"names":["workbenchAppConfigTemplate","workbenchStudioConfigTemplate"],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,4BAA4B;AAE5B,iEAAiE,GACjE,OAAO,MAAMA,6BAA6B,CAAC;;;;;;;;;;;AAW3C,CAAC,CAAA;AAED;;;CAGC,GACD,OAAO,MAAMC,gCAAgC,CAAC;;;;;;;;;;;;;;;;;;;;;AAqB9C,CAAC,CAAA"}
+{"version":3,"sources":["../../../src/actions/init/cliConfig.ts"],"sourcesContent":["// `sanity.cli.ts` templates for workbench (`unstable_defineApp`) projects,\n// consumed by the CLI's `init` scaffolding. The branded `unstable_defineApp`\n// result is the sole workbench (module-federation) opt-in, so its config shape\n// is workbench's to own; the CLI keeps the non-workbench templates and the\n// `%placeholder%` substitution. `%name%`/`%title%`/etc. are filled in by the\n// CLI's template processor.\n\n/** App scaffold — `entry` auto-declares the navigable app view. */\nexport const workbenchAppConfigTemplate = `\nimport {defineCliConfig, unstable_defineApp} from 'sanity/cli'\n\nexport default defineCliConfig({\n  app: unstable_defineApp({\n    name: '%name%',\n    title: '%title%',\n    slug: '%slug%',\n    organizationId: '%organizationId%',\n    entry: '%entry%',\n  }),\n})\n`\n\n/**\n * Studio scaffold — brands with name/title only, no `entry` (studio app views\n * aren't implemented yet).\n */\nexport const workbenchStudioConfigTemplate = `\nimport {defineCliConfig, unstable_defineApp} from 'sanity/cli'\n\nexport default defineCliConfig({\n  api: {\n    projectId: '%projectId%',\n    dataset: '%dataset%'\n  },\n  app: unstable_defineApp({\n    name: '%name%',\n    title: '%title%',\n    slug: '%slug%',\n    organizationId: '%organizationId%',\n  }),\n  deployment: {\n    /**\n     * Enable auto-updates for studios.\n     * Learn more at https://www.sanity.io/docs/studio/latest-version-of-sanity#k47faf43faf56\n     */\n    autoUpdates: __BOOL__autoUpdates__,\n  },\n})\n`\n"],"names":["workbenchAppConfigTemplate","workbenchStudioConfigTemplate"],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,4BAA4B;AAE5B,iEAAiE,GACjE,OAAO,MAAMA,6BAA6B,CAAC;;;;;;;;;;;;AAY3C,CAAC,CAAA;AAED;;;CAGC,GACD,OAAO,MAAMC,gCAAgC,CAAC;;;;;;;;;;;;;;;;;;;;;;AAsB9C,CAAC,CAAA"}

package/dist/actions/preview/startWorkbenchPreview.js

@@ -1,5 +1,9 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
 import { styleText } from 'node:util';
 import { findProjectRoot } from '@sanity/cli-core';
+import { buildAppId, SANITY_APP_ID_FILE } from '../../appId.js';
+import { resolveWorkbenchApp } from '../../resolveWorkbenchApp.js';
 import { createServerLifecycle, toDisplayHost } from '../../util/serverOrchestration.js';
 import { deriveConfigs, deriveInterfaces } from '../dev/deriveInterfaces.js';
 import { registerDevServer } from '../dev/registry.js';
@@ -46,11 +50,18 @@ import { serveBuiltApplication } from './serveBuiltApplication.js';
         // out of workbench-cli.
         checkForDeprecatedAppId();
         const configPath = (await findProjectRoot(workDir)).path;
+        const workbench = resolveWorkbenchApp(cliConfig);
+        // Read the id the build inlined so start matches it even for a deploy build
+        // (which carries the API id, not the shape hash); fall back for older builds.
+        const inlinedId = await readInlinedAppId(outDir);
+        const configs = await deriveConfigs(cliConfig.app);
+        // `start` serves a build, so it advertises the build's inlined id (matching
+        // the bundle's `__SANITY_APP_ID__`), not the dev host-port.
+        const id = workbench ? inlinedId ?? await buildAppId(workbench) : `${remote.host}-${remote.port}`;
         const registration = registerDevServer({
-            configs: deriveConfigs(cliConfig.app),
+            configs,
             host: remote.host,
-            // A local app is identified by where it's served, matching `sanity dev`.
-            id: `${remote.host}-${remote.port}`,
+            id,
             interfaces: deriveInterfaces(cliConfig.app, {
                 isApp
             }),
@@ -87,5 +98,12 @@ import { serveBuiltApplication } from './serveBuiltApplication.js';
         close
     };
 }
+/** The id the build inlined into its bundle, or undefined when absent. */ async function readInlinedAppId(outDir) {
+    try {
+        return (await readFile(path.join(outDir, SANITY_APP_ID_FILE), 'utf8')).trim() || undefined;
+    } catch  {
+        return undefined;
+    }
+}
 
 //# sourceMappingURL=startWorkbenchPreview.js.map

package/dist/actions/preview/startWorkbenchPreview.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/actions/preview/startWorkbenchPreview.ts"],"sourcesContent":["import {styleText} from 'node:util'\n\nimport {type CliConfig, findProjectRoot, type Output} from '@sanity/cli-core'\n\nimport {createServerLifecycle, toDisplayHost} from '../../util/serverOrchestration.js'\nimport {deriveConfigs, deriveInterfaces} from '../dev/deriveInterfaces.js'\nimport {type DevServerManifest, registerDevServer} from '../dev/registry.js'\nimport {startWorkbenchDevServer} from '../dev/startWorkbenchDevServer.js'\nimport {serveBuiltApplication} from './serveBuiltApplication.js'\n\nexport interface StartWorkbenchPreviewOptions {\n  /** Directory for the workbench Vite server's dependency cache. */\n  cacheDir: string\n  /** CLI-domain `app.id`/`deployment.appId` deprecation check, run before registering. */\n  checkForDeprecatedAppId: () => void\n  cliConfig: CliConfig\n  /** Extract the project manifest to inline into the registry (studio-vs-app handled by the CLI). */\n  extractManifest: (params: {\n    configPath: string\n    workDir: string\n  }) => Promise<DevServerManifest['manifest']>\n  httpHost: string\n  httpPort: number\n  isApp: boolean\n  /** The built `dist` directory to serve as the federation remote. */\n  outDir: string\n  output: Output\n  reactStrictMode: boolean\n  workDir: string\n}\n\n/**\n * `sanity start` for a workbench app: serve a production build the way dev serves\n * a live one. The same singleton workbench shell renders it and the same registry\n * advertises it — only the remote differs, static files from the build output\n * instead of a live Vite dev server. There's no config watcher or rebuild: a\n * build is fixed, so nothing re-syncs.\n *\n * A running workbench claims the configured port, so the built remote binds the\n * next one. Without one the remote takes the configured port and announces its\n * own URL.\n */\nexport async function startWorkbenchPreview(\n  options: StartWorkbenchPreviewOptions,\n): Promise<{close: () => Promise<void>}> {\n  const {\n    cacheDir,\n    checkForDeprecatedAppId,\n    cliConfig,\n    extractManifest,\n    httpHost,\n    httpPort,\n    isApp,\n    outDir,\n    output,\n    reactStrictMode,\n    workDir,\n  } = options\n\n  const {close, closers, installSignalHandlers} = createServerLifecycle()\n\n  const workbench = await startWorkbenchDevServer({\n    cacheDir,\n    cliConfig,\n    httpHost,\n    httpPort,\n    mode: 'preview',\n    output,\n    reactStrictMode,\n    workDir,\n  })\n  closers.push(workbench.close)\n\n  const remotePort = workbench.workbenchAvailable ? workbench.workbenchPort + 1 : httpPort\n\n  const remote = await serveBuiltApplication({\n    cacheDir,\n    httpHost,\n    httpPort: remotePort,\n    outDir,\n    workDir,\n  }).catch(async (err) => {\n    await close()\n    throw err\n  })\n  closers.push(remote.close)\n\n  try {\n    // Callers provide CLI-only validation and manifest extraction to keep them\n    // out of workbench-cli.\n    checkForDeprecatedAppId()\n    const configPath = (await findProjectRoot(workDir)).path\n    const registration = registerDevServer({\n      configs: deriveConfigs(cliConfig.app),\n      host: remote.host,\n      // A local app is identified by where it's served, matching `sanity dev`.\n      id: `${remote.host}-${remote.port}`,\n      interfaces: deriveInterfaces(cliConfig.app, {isApp}),\n      manifest: await extractManifest({configPath, workDir}),\n      manifestUpdatedAt: new Date().toISOString(),\n      port: remote.port,\n      projectId: cliConfig?.api?.projectId,\n      type: isApp ? 'coreApp' : 'studio',\n      workDir,\n    })\n    closers.push(async () => registration.release())\n  } catch (err) {\n    await close()\n    throw err\n  }\n\n  if (workbench.workbenchAvailable) {\n    const workbenchUrl = `http://${toDisplayHost(workbench.httpHost)}:${workbench.workbenchPort}`\n    output.log(\n      `Workbench preview server started at ${styleText(['blue', 'underline'], workbenchUrl)} (serving build on port ${remote.port})`,\n    )\n  } else {\n    const remoteUrl = `http://${toDisplayHost(remote.host)}:${remote.port}`\n    output.log(`Serving build at ${styleText(['blue', 'underline'], remoteUrl)}`)\n  }\n\n  installSignalHandlers()\n\n  return {close}\n}\n"],"names":["styleText","findProjectRoot","createServerLifecycle","toDisplayHost","deriveConfigs","deriveInterfaces","registerDevServer","startWorkbenchDevServer","serveBuiltApplication","startWorkbenchPreview","options","cacheDir","checkForDeprecatedAppId","cliConfig","extractManifest","httpHost","httpPort","isApp","outDir","output","reactStrictMode","workDir","close","closers","installSignalHandlers","workbench","mode","push","remotePort","workbenchAvailable","workbenchPort","remote","catch","err","configPath","path","registration","configs","app","host","id","port","interfaces","manifest","manifestUpdatedAt","Date","toISOString","projectId","api","type","release","workbenchUrl","log","remoteUrl"],"mappings":"AAAA,SAAQA,SAAS,QAAO,YAAW;AAEnC,SAAwBC,eAAe,QAAoB,mBAAkB;AAE7E,SAAQC,qBAAqB,EAAEC,aAAa,QAAO,oCAAmC;AACtF,SAAQC,aAAa,EAAEC,gBAAgB,QAAO,6BAA4B;AAC1E,SAAgCC,iBAAiB,QAAO,qBAAoB;AAC5E,SAAQC,uBAAuB,QAAO,oCAAmC;AACzE,SAAQC,qBAAqB,QAAO,6BAA4B;AAuBhE;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,sBACpBC,OAAqC;IAErC,MAAM,EACJC,QAAQ,EACRC,uBAAuB,EACvBC,SAAS,EACTC,eAAe,EACfC,QAAQ,EACRC,QAAQ,EACRC,KAAK,EACLC,MAAM,EACNC,MAAM,EACNC,eAAe,EACfC,OAAO,EACR,GAAGX;IAEJ,MAAM,EAACY,KAAK,EAAEC,OAAO,EAAEC,qBAAqB,EAAC,GAAGtB;IAEhD,MAAMuB,YAAY,MAAMlB,wBAAwB;QAC9CI;QACAE;QACAE;QACAC;QACAU,MAAM;QACNP;QACAC;QACAC;IACF;IACAE,QAAQI,IAAI,CAACF,UAAUH,KAAK;IAE5B,MAAMM,aAAaH,UAAUI,kBAAkB,GAAGJ,UAAUK,aAAa,GAAG,IAAId;IAEhF,MAAMe,SAAS,MAAMvB,sBAAsB;QACzCG;QACAI;QACAC,UAAUY;QACVV;QACAG;IACF,GAAGW,KAAK,CAAC,OAAOC;QACd,MAAMX;QACN,MAAMW;IACR;IACAV,QAAQI,IAAI,CAACI,OAAOT,KAAK;IAEzB,IAAI;QACF,2EAA2E;QAC3E,wBAAwB;QACxBV;QACA,MAAMsB,aAAa,AAAC,CAAA,MAAMjC,gBAAgBoB,QAAO,EAAGc,IAAI;QACxD,MAAMC,eAAe9B,kBAAkB;YACrC+B,SAASjC,cAAcS,UAAUyB,GAAG;YACpCC,MAAMR,OAAOQ,IAAI;YACjB,yEAAyE;YACzEC,IAAI,GAAGT,OAAOQ,IAAI,CAAC,CAAC,EAAER,OAAOU,IAAI,EAAE;YACnCC,YAAYrC,iBAAiBQ,UAAUyB,GAAG,EAAE;gBAACrB;YAAK;YAClD0B,UAAU,MAAM7B,gBAAgB;gBAACoB;gBAAYb;YAAO;YACpDuB,mBAAmB,IAAIC,OAAOC,WAAW;YACzCL,MAAMV,OAAOU,IAAI;YACjBM,WAAWlC,WAAWmC,KAAKD;YAC3BE,MAAMhC,QAAQ,YAAY;YAC1BI;QACF;QACAE,QAAQI,IAAI,CAAC,UAAYS,aAAac,OAAO;IAC/C,EAAE,OAAOjB,KAAK;QACZ,MAAMX;QACN,MAAMW;IACR;IAEA,IAAIR,UAAUI,kBAAkB,EAAE;QAChC,MAAMsB,eAAe,CAAC,OAAO,EAAEhD,cAAcsB,UAAUV,QAAQ,EAAE,CAAC,EAAEU,UAAUK,aAAa,EAAE;QAC7FX,OAAOiC,GAAG,CACR,CAAC,oCAAoC,EAAEpD,UAAU;YAAC;YAAQ;SAAY,EAAEmD,cAAc,wBAAwB,EAAEpB,OAAOU,IAAI,CAAC,CAAC,CAAC;IAElI,OAAO;QACL,MAAMY,YAAY,CAAC,OAAO,EAAElD,cAAc4B,OAAOQ,IAAI,EAAE,CAAC,EAAER,OAAOU,IAAI,EAAE;QACvEtB,OAAOiC,GAAG,CAAC,CAAC,iBAAiB,EAAEpD,UAAU;YAAC;YAAQ;SAAY,EAAEqD,YAAY;IAC9E;IAEA7B;IAEA,OAAO;QAACF;IAAK;AACf"}
+{"version":3,"sources":["../../../src/actions/preview/startWorkbenchPreview.ts"],"sourcesContent":["import {readFile} from 'node:fs/promises'\nimport path from 'node:path'\nimport {styleText} from 'node:util'\n\nimport {type CliConfig, findProjectRoot, type Output} from '@sanity/cli-core'\n\nimport {buildAppId, SANITY_APP_ID_FILE} from '../../appId.js'\nimport {resolveWorkbenchApp} from '../../resolveWorkbenchApp.js'\nimport {createServerLifecycle, toDisplayHost} from '../../util/serverOrchestration.js'\nimport {deriveConfigs, deriveInterfaces} from '../dev/deriveInterfaces.js'\nimport {type DevServerManifest, registerDevServer} from '../dev/registry.js'\nimport {startWorkbenchDevServer} from '../dev/startWorkbenchDevServer.js'\nimport {serveBuiltApplication} from './serveBuiltApplication.js'\n\nexport interface StartWorkbenchPreviewOptions {\n  /** Directory for the workbench Vite server's dependency cache. */\n  cacheDir: string\n  /** CLI-domain `app.id`/`deployment.appId` deprecation check, run before registering. */\n  checkForDeprecatedAppId: () => void\n  cliConfig: CliConfig\n  /** Extract the project manifest to inline into the registry (studio-vs-app handled by the CLI). */\n  extractManifest: (params: {\n    configPath: string\n    workDir: string\n  }) => Promise<DevServerManifest['manifest']>\n  httpHost: string\n  httpPort: number\n  isApp: boolean\n  /** The built `dist` directory to serve as the federation remote. */\n  outDir: string\n  output: Output\n  reactStrictMode: boolean\n  workDir: string\n}\n\n/**\n * `sanity start` for a workbench app: serve a production build the way dev serves\n * a live one. The same singleton workbench shell renders it and the same registry\n * advertises it — only the remote differs, static files from the build output\n * instead of a live Vite dev server. There's no config watcher or rebuild: a\n * build is fixed, so nothing re-syncs.\n *\n * A running workbench claims the configured port, so the built remote binds the\n * next one. Without one the remote takes the configured port and announces its\n * own URL.\n */\nexport async function startWorkbenchPreview(\n  options: StartWorkbenchPreviewOptions,\n): Promise<{close: () => Promise<void>}> {\n  const {\n    cacheDir,\n    checkForDeprecatedAppId,\n    cliConfig,\n    extractManifest,\n    httpHost,\n    httpPort,\n    isApp,\n    outDir,\n    output,\n    reactStrictMode,\n    workDir,\n  } = options\n\n  const {close, closers, installSignalHandlers} = createServerLifecycle()\n\n  const workbench = await startWorkbenchDevServer({\n    cacheDir,\n    cliConfig,\n    httpHost,\n    httpPort,\n    mode: 'preview',\n    output,\n    reactStrictMode,\n    workDir,\n  })\n  closers.push(workbench.close)\n\n  const remotePort = workbench.workbenchAvailable ? workbench.workbenchPort + 1 : httpPort\n\n  const remote = await serveBuiltApplication({\n    cacheDir,\n    httpHost,\n    httpPort: remotePort,\n    outDir,\n    workDir,\n  }).catch(async (err) => {\n    await close()\n    throw err\n  })\n  closers.push(remote.close)\n\n  try {\n    // Callers provide CLI-only validation and manifest extraction to keep them\n    // out of workbench-cli.\n    checkForDeprecatedAppId()\n    const configPath = (await findProjectRoot(workDir)).path\n    const workbench = resolveWorkbenchApp(cliConfig)\n    // Read the id the build inlined so start matches it even for a deploy build\n    // (which carries the API id, not the shape hash); fall back for older builds.\n    const inlinedId = await readInlinedAppId(outDir)\n    const configs = await deriveConfigs(cliConfig.app)\n    // `start` serves a build, so it advertises the build's inlined id (matching\n    // the bundle's `__SANITY_APP_ID__`), not the dev host-port.\n    const id = workbench\n      ? (inlinedId ?? (await buildAppId(workbench)))\n      : `${remote.host}-${remote.port}`\n    const registration = registerDevServer({\n      configs,\n      host: remote.host,\n      id,\n      interfaces: deriveInterfaces(cliConfig.app, {isApp}),\n      manifest: await extractManifest({configPath, workDir}),\n      manifestUpdatedAt: new Date().toISOString(),\n      port: remote.port,\n      projectId: cliConfig?.api?.projectId,\n      type: isApp ? 'coreApp' : 'studio',\n      workDir,\n    })\n    closers.push(async () => registration.release())\n  } catch (err) {\n    await close()\n    throw err\n  }\n\n  if (workbench.workbenchAvailable) {\n    const workbenchUrl = `http://${toDisplayHost(workbench.httpHost)}:${workbench.workbenchPort}`\n    output.log(\n      `Workbench preview server started at ${styleText(['blue', 'underline'], workbenchUrl)} (serving build on port ${remote.port})`,\n    )\n  } else {\n    const remoteUrl = `http://${toDisplayHost(remote.host)}:${remote.port}`\n    output.log(`Serving build at ${styleText(['blue', 'underline'], remoteUrl)}`)\n  }\n\n  installSignalHandlers()\n\n  return {close}\n}\n\n/** The id the build inlined into its bundle, or undefined when absent. */\nasync function readInlinedAppId(outDir: string): Promise<string | undefined> {\n  try {\n    return (await readFile(path.join(outDir, SANITY_APP_ID_FILE), 'utf8')).trim() || undefined\n  } catch {\n    return undefined\n  }\n}\n"],"names":["readFile","path","styleText","findProjectRoot","buildAppId","SANITY_APP_ID_FILE","resolveWorkbenchApp","createServerLifecycle","toDisplayHost","deriveConfigs","deriveInterfaces","registerDevServer","startWorkbenchDevServer","serveBuiltApplication","startWorkbenchPreview","options","cacheDir","checkForDeprecatedAppId","cliConfig","extractManifest","httpHost","httpPort","isApp","outDir","output","reactStrictMode","workDir","close","closers","installSignalHandlers","workbench","mode","push","remotePort","workbenchAvailable","workbenchPort","remote","catch","err","configPath","inlinedId","readInlinedAppId","configs","app","id","host","port","registration","interfaces","manifest","manifestUpdatedAt","Date","toISOString","projectId","api","type","release","workbenchUrl","log","remoteUrl","join","trim","undefined"],"mappings":"AAAA,SAAQA,QAAQ,QAAO,mBAAkB;AACzC,OAAOC,UAAU,YAAW;AAC5B,SAAQC,SAAS,QAAO,YAAW;AAEnC,SAAwBC,eAAe,QAAoB,mBAAkB;AAE7E,SAAQC,UAAU,EAAEC,kBAAkB,QAAO,iBAAgB;AAC7D,SAAQC,mBAAmB,QAAO,+BAA8B;AAChE,SAAQC,qBAAqB,EAAEC,aAAa,QAAO,oCAAmC;AACtF,SAAQC,aAAa,EAAEC,gBAAgB,QAAO,6BAA4B;AAC1E,SAAgCC,iBAAiB,QAAO,qBAAoB;AAC5E,SAAQC,uBAAuB,QAAO,oCAAmC;AACzE,SAAQC,qBAAqB,QAAO,6BAA4B;AAuBhE;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,sBACpBC,OAAqC;IAErC,MAAM,EACJC,QAAQ,EACRC,uBAAuB,EACvBC,SAAS,EACTC,eAAe,EACfC,QAAQ,EACRC,QAAQ,EACRC,KAAK,EACLC,MAAM,EACNC,MAAM,EACNC,eAAe,EACfC,OAAO,EACR,GAAGX;IAEJ,MAAM,EAACY,KAAK,EAAEC,OAAO,EAAEC,qBAAqB,EAAC,GAAGtB;IAEhD,MAAMuB,YAAY,MAAMlB,wBAAwB;QAC9CI;QACAE;QACAE;QACAC;QACAU,MAAM;QACNP;QACAC;QACAC;IACF;IACAE,QAAQI,IAAI,CAACF,UAAUH,KAAK;IAE5B,MAAMM,aAAaH,UAAUI,kBAAkB,GAAGJ,UAAUK,aAAa,GAAG,IAAId;IAEhF,MAAMe,SAAS,MAAMvB,sBAAsB;QACzCG;QACAI;QACAC,UAAUY;QACVV;QACAG;IACF,GAAGW,KAAK,CAAC,OAAOC;QACd,MAAMX;QACN,MAAMW;IACR;IACAV,QAAQI,IAAI,CAACI,OAAOT,KAAK;IAEzB,IAAI;QACF,2EAA2E;QAC3E,wBAAwB;QACxBV;QACA,MAAMsB,aAAa,AAAC,CAAA,MAAMpC,gBAAgBuB,QAAO,EAAGzB,IAAI;QACxD,MAAM6B,YAAYxB,oBAAoBY;QACtC,4EAA4E;QAC5E,8EAA8E;QAC9E,MAAMsB,YAAY,MAAMC,iBAAiBlB;QACzC,MAAMmB,UAAU,MAAMjC,cAAcS,UAAUyB,GAAG;QACjD,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAMC,KAAKd,YACNU,aAAc,MAAMpC,WAAW0B,aAChC,GAAGM,OAAOS,IAAI,CAAC,CAAC,EAAET,OAAOU,IAAI,EAAE;QACnC,MAAMC,eAAepC,kBAAkB;YACrC+B;YACAG,MAAMT,OAAOS,IAAI;YACjBD;YACAI,YAAYtC,iBAAiBQ,UAAUyB,GAAG,EAAE;gBAACrB;YAAK;YAClD2B,UAAU,MAAM9B,gBAAgB;gBAACoB;gBAAYb;YAAO;YACpDwB,mBAAmB,IAAIC,OAAOC,WAAW;YACzCN,MAAMV,OAAOU,IAAI;YACjBO,WAAWnC,WAAWoC,KAAKD;YAC3BE,MAAMjC,QAAQ,YAAY;YAC1BI;QACF;QACAE,QAAQI,IAAI,CAAC,UAAYe,aAAaS,OAAO;IAC/C,EAAE,OAAOlB,KAAK;QACZ,MAAMX;QACN,MAAMW;IACR;IAEA,IAAIR,UAAUI,kBAAkB,EAAE;QAChC,MAAMuB,eAAe,CAAC,OAAO,EAAEjD,cAAcsB,UAAUV,QAAQ,EAAE,CAAC,EAAEU,UAAUK,aAAa,EAAE;QAC7FX,OAAOkC,GAAG,CACR,CAAC,oCAAoC,EAAExD,UAAU;YAAC;YAAQ;SAAY,EAAEuD,cAAc,wBAAwB,EAAErB,OAAOU,IAAI,CAAC,CAAC,CAAC;IAElI,OAAO;QACL,MAAMa,YAAY,CAAC,OAAO,EAAEnD,cAAc4B,OAAOS,IAAI,EAAE,CAAC,EAAET,OAAOU,IAAI,EAAE;QACvEtB,OAAOkC,GAAG,CAAC,CAAC,iBAAiB,EAAExD,UAAU;YAAC;YAAQ;SAAY,EAAEyD,YAAY;IAC9E;IAEA9B;IAEA,OAAO;QAACF;IAAK;AACf;AAEA,wEAAwE,GACxE,eAAec,iBAAiBlB,MAAc;IAC5C,IAAI;QACF,OAAO,AAAC,CAAA,MAAMvB,SAASC,KAAK2D,IAAI,CAACrC,QAAQlB,qBAAqB,OAAM,EAAGwD,IAAI,MAAMC;IACnF,EAAE,OAAM;QACN,OAAOA;IACT;AACF"}

package/dist/appId.js

@@ -0,0 +1,39 @@
+/**
+ * File the build writes into its output, carrying the id compiled into the
+ * bundle. `sanity start` serves a build without recompiling, so it reads this
+ * instead of recomputing — a deploy inlines the API id, not the shape hash.
+ */ export const SANITY_APP_ID_FILE = 'sanity-app-id.txt';
+/**
+ * The dev id for a workbench app — the address the server bound. `sanity dev`
+ * keys on where the app is served so a running app can't collide with its
+ * deployed twin. Sync and dependency-free: it's re-exported from the package's
+ * browser-facing entry, so it must not pull in `node:crypto`.
+ */ export function resolveAppId(source) {
+    return `${source.host}-${source.port}`;
+}
+/**
+ * The `build`/`start` id — a hash of the app's declared shape (its identity, not
+ * its code), so the bundle inlined by `sanity build` and the registry entry
+ * advertised by `sanity start` resolve to the same id. Hashed with the Web Crypto
+ * API rather than `node:crypto` for parity with `resolveAppId`'s browser-safe
+ * home. `sanity deploy` resolves its own id from the applications API.
+ */ export async function buildAppId(app) {
+    const canonical = (interfaces)=>(interfaces ?? []).map((i)=>[
+                i.type,
+                i.name,
+                i.src
+            ]).toSorted();
+    const shape = JSON.stringify({
+        config: app.config ?? null,
+        entry: app.entry ?? null,
+        name: app.name,
+        organizationId: app.organizationId,
+        services: canonical(app.services),
+        views: canonical(app.views)
+    });
+    // eslint-disable-next-line n/no-unsupported-features/node-builtins -- the Web Crypto global is available on our Node target and in the browser
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(shape));
+    return Array.from(new Uint8Array(digest), (byte)=>byte.toString(16).padStart(2, '0')).join('');
+}
+
+//# sourceMappingURL=appId.js.map

package/dist/appId.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/appId.ts"],"sourcesContent":["import {type ResolvedWorkbenchApp} from './resolveWorkbenchApp.js'\n\n/**\n * File the build writes into its output, carrying the id compiled into the\n * bundle. `sanity start` serves a build without recompiling, so it reads this\n * instead of recomputing — a deploy inlines the API id, not the shape hash.\n */\nexport const SANITY_APP_ID_FILE = 'sanity-app-id.txt'\n\n/**\n * The dev id for a workbench app — the address the server bound. `sanity dev`\n * keys on where the app is served so a running app can't collide with its\n * deployed twin. Sync and dependency-free: it's re-exported from the package's\n * browser-facing entry, so it must not pull in `node:crypto`.\n */\nexport function resolveAppId(source: {host: string; port: number}): string {\n  return `${source.host}-${source.port}`\n}\n\n/**\n * The `build`/`start` id — a hash of the app's declared shape (its identity, not\n * its code), so the bundle inlined by `sanity build` and the registry entry\n * advertised by `sanity start` resolve to the same id. Hashed with the Web Crypto\n * API rather than `node:crypto` for parity with `resolveAppId`'s browser-safe\n * home. `sanity deploy` resolves its own id from the applications API.\n */\nexport async function buildAppId(app: ResolvedWorkbenchApp): Promise<string> {\n  const canonical = (\n    interfaces: ReadonlyArray<{name: string; src: string; type: string}> | undefined,\n  ): Array<[string, string, string]> =>\n    (interfaces ?? []).map((i): [string, string, string] => [i.type, i.name, i.src]).toSorted()\n  const shape = JSON.stringify({\n    config: app.config ?? null,\n    entry: app.entry ?? null,\n    name: app.name,\n    organizationId: app.organizationId,\n    services: canonical(app.services),\n    views: canonical(app.views),\n  })\n  // eslint-disable-next-line n/no-unsupported-features/node-builtins -- the Web Crypto global is available on our Node target and in the browser\n  const digest = await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(shape))\n  return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, '0')).join('')\n}\n"],"names":["SANITY_APP_ID_FILE","resolveAppId","source","host","port","buildAppId","app","canonical","interfaces","map","i","type","name","src","toSorted","shape","JSON","stringify","config","entry","organizationId","services","views","digest","globalThis","crypto","subtle","TextEncoder","encode","Array","from","Uint8Array","byte","toString","padStart","join"],"mappings":"AAEA;;;;CAIC,GACD,OAAO,MAAMA,qBAAqB,oBAAmB;AAErD;;;;;CAKC,GACD,OAAO,SAASC,aAAaC,MAAoC;IAC/D,OAAO,GAAGA,OAAOC,IAAI,CAAC,CAAC,EAAED,OAAOE,IAAI,EAAE;AACxC;AAEA;;;;;;CAMC,GACD,OAAO,eAAeC,WAAWC,GAAyB;IACxD,MAAMC,YAAY,CAChBC,aAEA,AAACA,CAAAA,cAAc,EAAE,AAAD,EAAGC,GAAG,CAAC,CAACC,IAAgC;gBAACA,EAAEC,IAAI;gBAAED,EAAEE,IAAI;gBAAEF,EAAEG,GAAG;aAAC,EAAEC,QAAQ;IAC3F,MAAMC,QAAQC,KAAKC,SAAS,CAAC;QAC3BC,QAAQZ,IAAIY,MAAM,IAAI;QACtBC,OAAOb,IAAIa,KAAK,IAAI;QACpBP,MAAMN,IAAIM,IAAI;QACdQ,gBAAgBd,IAAIc,cAAc;QAClCC,UAAUd,UAAUD,IAAIe,QAAQ;QAChCC,OAAOf,UAAUD,IAAIgB,KAAK;IAC5B;IACA,+IAA+I;IAC/I,MAAMC,SAAS,MAAMC,WAAWC,MAAM,CAACC,MAAM,CAACH,MAAM,CAAC,WAAW,IAAII,cAAcC,MAAM,CAACb;IACzF,OAAOc,MAAMC,IAAI,CAAC,IAAIC,WAAWR,SAAS,CAACS,OAASA,KAAKC,QAAQ,CAAC,IAAIC,QAAQ,CAAC,GAAG,MAAMC,IAAI,CAAC;AAC/F"}

package/dist/resolveWorkbenchApp.js

@@ -17,6 +17,7 @@ import { isWorkbenchApp, readConfig } from './defineApp.js';
         icon: app.icon,
         isSingleton: app.isSingleton,
         name: app.name,
+        organizationId: app.organizationId,
         services: app.services ?? [],
         slug: app.slug,
         views: app.views ?? [],

package/dist/resolveWorkbenchApp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/resolveWorkbenchApp.ts"],"sourcesContent":["// Package-internal shared resolver: turn a CLI config's branded\n// `unstable_defineApp` app into its declared interfaces, or `null` for a plain\n// project. The build and deploy accessors (actions/build, actions/deploy) each\n// build their command-specific view on top of this one brand-check +\n// extraction, so the discrimination lives in exactly one place.\n\nimport {type AppVisibility, type CliConfig} from '@sanity/cli-core'\n\nimport {type DefineAppInput, isWorkbenchApp, readConfig, type WorkbenchApp} from './defineApp.js'\n\n/**\n * Bundled so adding a declaration family touches this type and the artifact\n * expanders, not every hop of build/dev plumbing in between.\n * @internal\n */\nexport interface WorkbenchExposes {\n  config?: WorkbenchApp['config']\n  services?: DefineAppInput['services']\n  views?: DefineAppInput['views']\n}\n\n/** @public */\nexport interface ResolvedWorkbenchApp {\n  /** The app's unique `name` from `unstable_defineApp`. */\n  readonly name: string\n  /** Background worker services the app declares. */\n  readonly services: NonNullable<DefineAppInput['services']>\n\n  /** Dock panel views the app declares. */\n  readonly views: NonNullable<DefineAppInput['views']>\n\n  /** Resolved app kind — `studio` or one of the SDK app types. */\n  readonly applicationType?: string\n  /** Deploys on its own path, separate from the interfaces. */\n  readonly config?: WorkbenchApp['config']\n  /** SDK app-view entrypoint, when declared. */\n  readonly entry?: string\n  /** Path to the app's icon SVG, resolved and shipped to Brett on deploy. */\n  readonly icon?: string\n  /** Explicit singleton flag (a Sanity-owned app); `undefined` when the app doesn't set it. */\n  readonly isSingleton?: boolean\n  /** Hostname the application is created at on first deploy. */\n  readonly slug?: string\n  /** Dashboard visibility declared by the app; `undefined` when unset. */\n  readonly visibility?: AppVisibility\n}\n\n/**\n * Resolve the workbench app for a CLI config, or `null` for a plain project.\n * @public\n */\nexport function resolveWorkbenchApp(\n  cliConfig: CliConfig | null | undefined,\n): ResolvedWorkbenchApp | null {\n  const app = cliConfig?.app\n  if (!isWorkbenchApp(app)) return null\n\n  return {\n    applicationType: app.applicationType,\n    config: readConfig(app),\n    entry: app.entry,\n    icon: app.icon,\n    isSingleton: app.isSingleton,\n    name: app.name,\n    services: app.services ?? [],\n    slug: app.slug,\n    views: app.views ?? [],\n    visibility: app.visibility,\n  }\n}\n"],"names":["isWorkbenchApp","readConfig","resolveWorkbenchApp","cliConfig","app","applicationType","config","entry","icon","isSingleton","name","services","slug","views","visibility"],"mappings":"AAAA,gEAAgE;AAChE,+EAA+E;AAC/E,+EAA+E;AAC/E,qEAAqE;AACrE,gEAAgE;AAIhE,SAA6BA,cAAc,EAAEC,UAAU,QAA0B,iBAAgB;AAuCjG;;;CAGC,GACD,OAAO,SAASC,oBACdC,SAAuC;IAEvC,MAAMC,MAAMD,WAAWC;IACvB,IAAI,CAACJ,eAAeI,MAAM,OAAO;IAEjC,OAAO;QACLC,iBAAiBD,IAAIC,eAAe;QACpCC,QAAQL,WAAWG;QACnBG,OAAOH,IAAIG,KAAK;QAChBC,MAAMJ,IAAII,IAAI;QACdC,aAAaL,IAAIK,WAAW;QAC5BC,MAAMN,IAAIM,IAAI;QACdC,UAAUP,IAAIO,QAAQ,IAAI,EAAE;QAC5BC,MAAMR,IAAIQ,IAAI;QACdC,OAAOT,IAAIS,KAAK,IAAI,EAAE;QACtBC,YAAYV,IAAIU,UAAU;IAC5B;AACF"}
+{"version":3,"sources":["../src/resolveWorkbenchApp.ts"],"sourcesContent":["// Package-internal shared resolver: turn a CLI config's branded\n// `unstable_defineApp` app into its declared interfaces, or `null` for a plain\n// project. The build and deploy accessors (actions/build, actions/deploy) each\n// build their command-specific view on top of this one brand-check +\n// extraction, so the discrimination lives in exactly one place.\n\nimport {type AppVisibility, type CliConfig} from '@sanity/cli-core'\n\nimport {type DefineAppInput, isWorkbenchApp, readConfig, type WorkbenchApp} from './defineApp.js'\n\n/**\n * Bundled so adding a declaration family touches this type and the artifact\n * expanders, not every hop of build/dev plumbing in between.\n * @internal\n */\nexport interface WorkbenchExposes {\n  config?: WorkbenchApp['config']\n  services?: DefineAppInput['services']\n  views?: DefineAppInput['views']\n}\n\n/** @public */\nexport interface ResolvedWorkbenchApp {\n  /** The app's unique `name` from `unstable_defineApp`. */\n  readonly name: string\n  /** Organization that owns the app — part of its build-id identity. */\n  readonly organizationId: string\n  /** Background worker services the app declares. */\n  readonly services: NonNullable<DefineAppInput['services']>\n\n  /** Hostname the application is created at on first deploy. */\n  readonly slug: string\n\n  /** Dock panel views the app declares. */\n  readonly views: NonNullable<DefineAppInput['views']>\n\n  /** Resolved app kind — `studio` or one of the SDK app types. */\n  readonly applicationType?: string\n  /** Deploys on its own path, separate from the interfaces. */\n  readonly config?: WorkbenchApp['config']\n  /** SDK app-view entrypoint, when declared. */\n  readonly entry?: string\n  /** Path to the app's icon SVG, resolved and shipped to Brett on deploy. */\n  readonly icon?: string\n  /** Explicit singleton flag (a Sanity-owned app); `undefined` when the app doesn't set it. */\n  readonly isSingleton?: boolean\n  /** Dashboard visibility declared by the app; `undefined` when unset. */\n  readonly visibility?: AppVisibility\n}\n\n/**\n * Resolve the workbench app for a CLI config, or `null` for a plain project.\n * @public\n */\nexport function resolveWorkbenchApp(\n  cliConfig: CliConfig | null | undefined,\n): ResolvedWorkbenchApp | null {\n  const app = cliConfig?.app\n  if (!isWorkbenchApp(app)) return null\n\n  return {\n    applicationType: app.applicationType,\n    config: readConfig(app),\n    entry: app.entry,\n    icon: app.icon,\n    isSingleton: app.isSingleton,\n    name: app.name,\n    organizationId: app.organizationId,\n    services: app.services ?? [],\n    slug: app.slug,\n    views: app.views ?? [],\n    visibility: app.visibility,\n  }\n}\n"],"names":["isWorkbenchApp","readConfig","resolveWorkbenchApp","cliConfig","app","applicationType","config","entry","icon","isSingleton","name","organizationId","services","slug","views","visibility"],"mappings":"AAAA,gEAAgE;AAChE,+EAA+E;AAC/E,+EAA+E;AAC/E,qEAAqE;AACrE,gEAAgE;AAIhE,SAA6BA,cAAc,EAAEC,UAAU,QAA0B,iBAAgB;AA0CjG;;;CAGC,GACD,OAAO,SAASC,oBACdC,SAAuC;IAEvC,MAAMC,MAAMD,WAAWC;IACvB,IAAI,CAACJ,eAAeI,MAAM,OAAO;IAEjC,OAAO;QACLC,iBAAiBD,IAAIC,eAAe;QACpCC,QAAQL,WAAWG;QACnBG,OAAOH,IAAIG,KAAK;QAChBC,MAAMJ,IAAII,IAAI;QACdC,aAAaL,IAAIK,WAAW;QAC5BC,MAAMN,IAAIM,IAAI;QACdC,gBAAgBP,IAAIO,cAAc;QAClCC,UAAUR,IAAIQ,QAAQ,IAAI,EAAE;QAC5BC,MAAMT,IAAIS,IAAI;QACdC,OAAOV,IAAIU,KAAK,IAAI,EAAE;QACtBC,YAAYX,IAAIW,UAAU;IAC5B;AACF"}

package/dist/services/applications.js

@@ -27,35 +27,39 @@ export async function getApplication(applicationId) {
         throw err;
     }
 }
-/** Create an application and its first deployment in one call. */ export async function createApplication(options) {
-    const { icon, interfaces, isSingleton, organizationId, projectId, slug, tarball, title, type, version, visibility, workspaces } = options;
-    const formData = new FormData();
-    formData.append('type', type);
-    formData.append('title', title);
-    formData.append('organizationId', organizationId);
-    formData.append('slug', slug);
-    if (isSingleton !== undefined) formData.append('isSingleton', String(isSingleton));
-    if (visibility) formData.append('visibility', visibility);
-    // Studio config is set once, at create — it's immutable on redeploy.
-    if (projectId) appendJson(formData, 'config', {
-        studio: {
-            projectId
-        }
-    });
-    // Application-level JSON part, independent of the deployment.
-    if (icon) appendJson(formData, 'icon', icon);
-    appendDeploymentParts(formData, {
-        interfaces,
-        tarball,
-        version,
-        workspaces
+/**
+ * Create an application record (no deployment), so the CLI can build with the
+ * returned id, then ship it via {@link createDeployment}.
+ */ export async function createApplication(options) {
+    const { isSingleton, organizationId, projectId, slug, title, type, visibility } = options;
+    const client = await getClient();
+    return client.request({
+        body: {
+            organizationId,
+            slug,
+            title,
+            type,
+            ...isSingleton === undefined ? {} : {
+                isSingleton
+            },
+            ...visibility ? {
+                visibility
+            } : {},
+            // Studio config is set once, at create — it's immutable on redeploy.
+            ...projectId ? {
+                config: {
+                    studio: {
+                        projectId
+                    }
+                }
+            } : {}
+        },
+        method: 'POST',
+        uri: `/applications`
     });
-    return request(`/applications`, formData);
 }
-/**
- * Patch an application's mutable fields. The deploy endpoint ignores these, so a
- * redeploy syncs the title (and icon) from config here alongside the new deployment.
- */ export async function updateApplication(applicationId, update) {
+// Patch an application's mutable fields.
+export async function updateApplication(applicationId, update) {
     const client = await getClient();
     await client.request({
         body: update,

package/dist/services/applications.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/services/applications.ts"],"sourcesContent":["import {PassThrough} from 'node:stream'\nimport {type Gzip} from 'node:zlib'\n\nimport {type AppVisibility, getGlobalCliClient} from '@sanity/cli-core'\nimport {isStaging} from '@sanity/cli-core/util'\nimport FormData from 'form-data'\n\nimport {type AppInterfaceMetadata} from '../contract.js'\nimport {APP_WORKBENCH_API_VERSION} from './apiVersion.js'\n\nexport type ApplicationType = 'coreApp' | 'studio'\n\nexport interface Application {\n  id: string\n  organizationId: string\n  slug: string | null\n  title: string\n  type: ApplicationType\n}\n\ninterface BrettInterfaceBase {\n  moduleId: string\n  name: string\n  title: string\n  version: string\n}\n\n/**\n * An interface as Brett stores it, discriminated on `type`. `moduleId` is\n * remote-relative — the host prepends the app's id. Brett assigns the id.\n * @internal\n */\nexport type BrettInterface =\n  | (BrettInterfaceBase & {metadata: AppInterfaceMetadata | null; type: 'app'})\n  | (BrettInterfaceBase & {metadata: null; type: 'panel'})\n  | (BrettInterfaceBase & {metadata: null; type: 'worker'})\n\n/** A studio workspace as Brett stores it. */\nexport interface BrettWorkspace {\n  dataset: string\n  projectId: string\n\n  basePath?: string\n  icon?: string\n  name?: string\n  subtitle?: string\n  title?: string\n}\n\nexport function getWorkbenchUrl(organizationId: string): string {\n  return `https://${organizationId}.${isStaging() ? 'run.sanity.work' : 'sanity.run'}`\n}\n\n/** Where a deployed application is served on its organization's workbench. */\nexport function getApplicationUrl(\n  application: Pick<Application, 'id' | 'organizationId' | 'type'>,\n): string {\n  const segment = application.type === 'studio' ? 'studio' : 'application'\n  return `${getWorkbenchUrl(application.organizationId)}/${segment}/${application.id}`\n}\n\nasync function getClient() {\n  return getGlobalCliClient({apiVersion: APP_WORKBENCH_API_VERSION, requireUser: true})\n}\n\nexport async function getApplication(applicationId: string): Promise<Application | null> {\n  const client = await getClient()\n  try {\n    return await client.request({uri: `/applications/${applicationId}`})\n  } catch (err) {\n    if ((err as {statusCode?: number})?.statusCode === 404) return null\n    throw err\n  }\n}\n\n/** Create an application and its first deployment in one call. */\nexport async function createApplication(options: {\n  icon?: string\n  interfaces: readonly BrettInterface[]\n  isSingleton?: boolean\n  organizationId: string\n  projectId?: string\n  slug: string\n  tarball: Gzip\n  title: string\n  type: ApplicationType\n  version: string\n  visibility?: AppVisibility\n  workspaces?: readonly BrettWorkspace[]\n}): Promise<Application> {\n  const {\n    icon,\n    interfaces,\n    isSingleton,\n    organizationId,\n    projectId,\n    slug,\n    tarball,\n    title,\n    type,\n    version,\n    visibility,\n    workspaces,\n  } = options\n  const formData = new FormData()\n  formData.append('type', type)\n  formData.append('title', title)\n  formData.append('organizationId', organizationId)\n  formData.append('slug', slug)\n  if (isSingleton !== undefined) formData.append('isSingleton', String(isSingleton))\n  if (visibility) formData.append('visibility', visibility)\n  // Studio config is set once, at create — it's immutable on redeploy.\n  if (projectId) appendJson(formData, 'config', {studio: {projectId}})\n  // Application-level JSON part, independent of the deployment.\n  if (icon) appendJson(formData, 'icon', icon)\n  appendDeploymentParts(formData, {interfaces, tarball, version, workspaces})\n  return request(`/applications`, formData)\n}\n\n/** Mutable application fields the deploy flow patches after create. */\nexport interface ApplicationUpdate {\n  icon?: string | null\n  title?: string\n}\n\n/**\n * Patch an application's mutable fields. The deploy endpoint ignores these, so a\n * redeploy syncs the title (and icon) from config here alongside the new deployment.\n */\nexport async function updateApplication(\n  applicationId: string,\n  update: ApplicationUpdate,\n): Promise<void> {\n  const client = await getClient()\n  await client.request({body: update, method: 'PATCH', uri: `/applications/${applicationId}`})\n}\n\n/** Deploy a new active version to an existing application. */\nexport async function createDeployment(options: {\n  applicationId: string\n  interfaces: readonly BrettInterface[]\n  isAutoUpdating: boolean\n  tarball: Gzip\n  version: string\n  workspaces?: readonly BrettWorkspace[]\n}): Promise<{id: string}> {\n  const {applicationId, interfaces, isAutoUpdating, tarball, version, workspaces} = options\n  const formData = new FormData()\n  formData.append('isAutoUpdating', isAutoUpdating.toString())\n  appendDeploymentParts(formData, {interfaces, tarball, version, workspaces})\n  return request(`/applications/${applicationId}/deployments`, formData)\n}\n\n/** Soft-deletes the application and all its deployments; already deleted counts as done. */\nexport async function deleteApplication(applicationId: string): Promise<void> {\n  const client = await getClient()\n  try {\n    await client.request({method: 'DELETE', uri: `/applications/${applicationId}`})\n  } catch (err) {\n    if ((err as {statusCode?: number})?.statusCode !== 404) throw err\n  }\n}\n\nfunction appendDeploymentParts(\n  formData: FormData,\n  {\n    interfaces,\n    tarball,\n    version,\n    workspaces,\n  }: {\n    interfaces: readonly BrettInterface[]\n    tarball: Gzip\n    version: string\n    workspaces?: readonly BrettWorkspace[]\n  },\n): void {\n  formData.append('version', version)\n  appendJson(formData, 'interfaces', interfaces)\n  // Studio-only — the server rejects a workspaces part on non-studio types.\n  if (workspaces?.length) appendJson(formData, 'workspaces', workspaces)\n  formData.append('tarball', tarball, {contentType: 'application/gzip', filename: 'app.tar.gz'})\n}\n\n/** Structured parts must arrive as JSON so the server parses them. */\nfunction appendJson(formData: FormData, name: string, value: unknown): void {\n  formData.append(name, JSON.stringify(value), {contentType: 'application/json'})\n}\n\nasync function request<T>(uri: string, formData: FormData): Promise<T> {\n  const client = await getClient()\n  return client.request({\n    body: formData.pipe(new PassThrough()),\n    headers: formData.getHeaders(),\n    method: 'POST',\n    uri,\n  })\n}\n"],"names":["PassThrough","getGlobalCliClient","isStaging","FormData","APP_WORKBENCH_API_VERSION","getWorkbenchUrl","organizationId","getApplicationUrl","application","segment","type","id","getClient","apiVersion","requireUser","getApplication","applicationId","client","request","uri","err","statusCode","createApplication","options","icon","interfaces","isSingleton","projectId","slug","tarball","title","version","visibility","workspaces","formData","append","undefined","String","appendJson","studio","appendDeploymentParts","updateApplication","update","body","method","createDeployment","isAutoUpdating","toString","deleteApplication","length","contentType","filename","name","value","JSON","stringify","pipe","headers","getHeaders"],"mappings":"AAAA,SAAQA,WAAW,QAAO,cAAa;AAGvC,SAA4BC,kBAAkB,QAAO,mBAAkB;AACvE,SAAQC,SAAS,QAAO,wBAAuB;AAC/C,OAAOC,cAAc,YAAW;AAGhC,SAAQC,yBAAyB,QAAO,kBAAiB;AAyCzD,OAAO,SAASC,gBAAgBC,cAAsB;IACpD,OAAO,CAAC,QAAQ,EAAEA,eAAe,CAAC,EAAEJ,cAAc,oBAAoB,cAAc;AACtF;AAEA,4EAA4E,GAC5E,OAAO,SAASK,kBACdC,WAAgE;IAEhE,MAAMC,UAAUD,YAAYE,IAAI,KAAK,WAAW,WAAW;IAC3D,OAAO,GAAGL,gBAAgBG,YAAYF,cAAc,EAAE,CAAC,EAAEG,QAAQ,CAAC,EAAED,YAAYG,EAAE,EAAE;AACtF;AAEA,eAAeC;IACb,OAAOX,mBAAmB;QAACY,YAAYT;QAA2BU,aAAa;IAAI;AACrF;AAEA,OAAO,eAAeC,eAAeC,aAAqB;IACxD,MAAMC,SAAS,MAAML;IACrB,IAAI;QACF,OAAO,MAAMK,OAAOC,OAAO,CAAC;YAACC,KAAK,CAAC,cAAc,EAAEH,eAAe;QAAA;IACpE,EAAE,OAAOI,KAAK;QACZ,IAAI,AAACA,KAA+BC,eAAe,KAAK,OAAO;QAC/D,MAAMD;IACR;AACF;AAEA,gEAAgE,GAChE,OAAO,eAAeE,kBAAkBC,OAavC;IACC,MAAM,EACJC,IAAI,EACJC,UAAU,EACVC,WAAW,EACXpB,cAAc,EACdqB,SAAS,EACTC,IAAI,EACJC,OAAO,EACPC,KAAK,EACLpB,IAAI,EACJqB,OAAO,EACPC,UAAU,EACVC,UAAU,EACX,GAAGV;IACJ,MAAMW,WAAW,IAAI/B;IACrB+B,SAASC,MAAM,CAAC,QAAQzB;IACxBwB,SAASC,MAAM,CAAC,SAASL;IACzBI,SAASC,MAAM,CAAC,kBAAkB7B;IAClC4B,SAASC,MAAM,CAAC,QAAQP;IACxB,IAAIF,gBAAgBU,WAAWF,SAASC,MAAM,CAAC,eAAeE,OAAOX;IACrE,IAAIM,YAAYE,SAASC,MAAM,CAAC,cAAcH;IAC9C,qEAAqE;IACrE,IAAIL,WAAWW,WAAWJ,UAAU,UAAU;QAACK,QAAQ;YAACZ;QAAS;IAAC;IAClE,8DAA8D;IAC9D,IAAIH,MAAMc,WAAWJ,UAAU,QAAQV;IACvCgB,sBAAsBN,UAAU;QAACT;QAAYI;QAASE;QAASE;IAAU;IACzE,OAAOf,QAAQ,CAAC,aAAa,CAAC,EAAEgB;AAClC;AAQA;;;CAGC,GACD,OAAO,eAAeO,kBACpBzB,aAAqB,EACrB0B,MAAyB;IAEzB,MAAMzB,SAAS,MAAML;IACrB,MAAMK,OAAOC,OAAO,CAAC;QAACyB,MAAMD;QAAQE,QAAQ;QAASzB,KAAK,CAAC,cAAc,EAAEH,eAAe;IAAA;AAC5F;AAEA,4DAA4D,GAC5D,OAAO,eAAe6B,iBAAiBtB,OAOtC;IACC,MAAM,EAACP,aAAa,EAAES,UAAU,EAAEqB,cAAc,EAAEjB,OAAO,EAAEE,OAAO,EAAEE,UAAU,EAAC,GAAGV;IAClF,MAAMW,WAAW,IAAI/B;IACrB+B,SAASC,MAAM,CAAC,kBAAkBW,eAAeC,QAAQ;IACzDP,sBAAsBN,UAAU;QAACT;QAAYI;QAASE;QAASE;IAAU;IACzE,OAAOf,QAAQ,CAAC,cAAc,EAAEF,cAAc,YAAY,CAAC,EAAEkB;AAC/D;AAEA,0FAA0F,GAC1F,OAAO,eAAec,kBAAkBhC,aAAqB;IAC3D,MAAMC,SAAS,MAAML;IACrB,IAAI;QACF,MAAMK,OAAOC,OAAO,CAAC;YAAC0B,QAAQ;YAAUzB,KAAK,CAAC,cAAc,EAAEH,eAAe;QAAA;IAC/E,EAAE,OAAOI,KAAK;QACZ,IAAI,AAACA,KAA+BC,eAAe,KAAK,MAAMD;IAChE;AACF;AAEA,SAASoB,sBACPN,QAAkB,EAClB,EACET,UAAU,EACVI,OAAO,EACPE,OAAO,EACPE,UAAU,EAMX;IAEDC,SAASC,MAAM,CAAC,WAAWJ;IAC3BO,WAAWJ,UAAU,cAAcT;IACnC,0EAA0E;IAC1E,IAAIQ,YAAYgB,QAAQX,WAAWJ,UAAU,cAAcD;IAC3DC,SAASC,MAAM,CAAC,WAAWN,SAAS;QAACqB,aAAa;QAAoBC,UAAU;IAAY;AAC9F;AAEA,oEAAoE,GACpE,SAASb,WAAWJ,QAAkB,EAAEkB,IAAY,EAAEC,KAAc;IAClEnB,SAASC,MAAM,CAACiB,MAAME,KAAKC,SAAS,CAACF,QAAQ;QAACH,aAAa;IAAkB;AAC/E;AAEA,eAAehC,QAAWC,GAAW,EAAEe,QAAkB;IACvD,MAAMjB,SAAS,MAAML;IACrB,OAAOK,OAAOC,OAAO,CAAC;QACpByB,MAAMT,SAASsB,IAAI,CAAC,IAAIxD;QACxByD,SAASvB,SAASwB,UAAU;QAC5Bd,QAAQ;QACRzB;IACF;AACF"}
+{"version":3,"sources":["../../src/services/applications.ts"],"sourcesContent":["import {PassThrough} from 'node:stream'\nimport {type Gzip} from 'node:zlib'\n\nimport {type AppVisibility, getGlobalCliClient} from '@sanity/cli-core'\nimport {isStaging} from '@sanity/cli-core/util'\nimport FormData from 'form-data'\n\nimport {type AppInterfaceMetadata} from '../contract.js'\nimport {APP_WORKBENCH_API_VERSION} from './apiVersion.js'\n\nexport type ApplicationType = 'coreApp' | 'studio'\n\nexport interface Application {\n  id: string\n  organizationId: string\n  slug: string | null\n  title: string\n  type: ApplicationType\n}\n\ninterface BrettInterfaceBase {\n  moduleId: string\n  name: string\n  title: string\n  version: string\n}\n\n/**\n * An interface as Brett stores it, discriminated on `type`. `moduleId` is\n * remote-relative — the host prepends the app's id. Brett assigns the id.\n * @internal\n */\nexport type BrettInterface =\n  | (BrettInterfaceBase & {metadata: AppInterfaceMetadata | null; type: 'app'})\n  | (BrettInterfaceBase & {metadata: null; type: 'panel'})\n  | (BrettInterfaceBase & {metadata: null; type: 'worker'})\n\n/** A studio workspace as Brett stores it. */\nexport interface BrettWorkspace {\n  dataset: string\n  projectId: string\n  /** Lexicon schema descriptor id; Brett requires one per workspace. */\n  schemaDescriptorId: string\n\n  basePath?: string\n  icon?: string\n  name?: string\n  subtitle?: string\n  title?: string\n}\n\nexport function getWorkbenchUrl(organizationId: string): string {\n  return `https://${organizationId}.${isStaging() ? 'run.sanity.work' : 'sanity.run'}`\n}\n\n/** Where a deployed application is served on its organization's workbench. */\nexport function getApplicationUrl(\n  application: Pick<Application, 'id' | 'organizationId' | 'type'>,\n): string {\n  const segment = application.type === 'studio' ? 'studio' : 'application'\n  return `${getWorkbenchUrl(application.organizationId)}/${segment}/${application.id}`\n}\n\nasync function getClient() {\n  return getGlobalCliClient({apiVersion: APP_WORKBENCH_API_VERSION, requireUser: true})\n}\n\nexport async function getApplication(applicationId: string): Promise<Application | null> {\n  const client = await getClient()\n  try {\n    return await client.request({uri: `/applications/${applicationId}`})\n  } catch (err) {\n    if ((err as {statusCode?: number})?.statusCode === 404) return null\n    throw err\n  }\n}\n\n/**\n * Create an application record (no deployment), so the CLI can build with the\n * returned id, then ship it via {@link createDeployment}.\n */\nexport async function createApplication(options: {\n  isSingleton?: boolean\n  organizationId: string\n  projectId?: string\n  slug: string\n  title: string\n  type: ApplicationType\n  visibility?: AppVisibility\n}): Promise<Application> {\n  const {isSingleton, organizationId, projectId, slug, title, type, visibility} = options\n  const client = await getClient()\n  return client.request({\n    body: {\n      organizationId,\n      slug,\n      title,\n      type,\n      ...(isSingleton === undefined ? {} : {isSingleton}),\n      ...(visibility ? {visibility} : {}),\n      // Studio config is set once, at create — it's immutable on redeploy.\n      ...(projectId ? {config: {studio: {projectId}}} : {}),\n    },\n    method: 'POST',\n    uri: `/applications`,\n  })\n}\n\n/** Mutable application fields the deploy flow patches after create. */\nexport interface ApplicationUpdate {\n  icon?: string | null\n  title?: string\n  visibility?: AppVisibility\n}\n\n// Patch an application's mutable fields.\nexport async function updateApplication(\n  applicationId: string,\n  update: ApplicationUpdate,\n): Promise<void> {\n  const client = await getClient()\n  await client.request({body: update, method: 'PATCH', uri: `/applications/${applicationId}`})\n}\n\n/** Deploy a new active version to an existing application. */\nexport async function createDeployment(options: {\n  applicationId: string\n  interfaces: readonly BrettInterface[]\n  isAutoUpdating: boolean\n  tarball: Gzip\n  version: string\n  workspaces?: readonly BrettWorkspace[]\n}): Promise<{id: string}> {\n  const {applicationId, interfaces, isAutoUpdating, tarball, version, workspaces} = options\n  const formData = new FormData()\n  formData.append('isAutoUpdating', isAutoUpdating.toString())\n  appendDeploymentParts(formData, {interfaces, tarball, version, workspaces})\n  return request(`/applications/${applicationId}/deployments`, formData)\n}\n\n/** Soft-deletes the application and all its deployments; already deleted counts as done. */\nexport async function deleteApplication(applicationId: string): Promise<void> {\n  const client = await getClient()\n  try {\n    await client.request({method: 'DELETE', uri: `/applications/${applicationId}`})\n  } catch (err) {\n    if ((err as {statusCode?: number})?.statusCode !== 404) throw err\n  }\n}\n\nfunction appendDeploymentParts(\n  formData: FormData,\n  {\n    interfaces,\n    tarball,\n    version,\n    workspaces,\n  }: {\n    interfaces: readonly BrettInterface[]\n    tarball: Gzip\n    version: string\n    workspaces?: readonly BrettWorkspace[]\n  },\n): void {\n  formData.append('version', version)\n  appendJson(formData, 'interfaces', interfaces)\n  // Studio-only — the server rejects a workspaces part on non-studio types.\n  if (workspaces?.length) appendJson(formData, 'workspaces', workspaces)\n  formData.append('tarball', tarball, {contentType: 'application/gzip', filename: 'app.tar.gz'})\n}\n\n/** Structured parts must arrive as JSON so the server parses them. */\nfunction appendJson(formData: FormData, name: string, value: unknown): void {\n  formData.append(name, JSON.stringify(value), {contentType: 'application/json'})\n}\n\nasync function request<T>(uri: string, formData: FormData): Promise<T> {\n  const client = await getClient()\n  return client.request({\n    body: formData.pipe(new PassThrough()),\n    headers: formData.getHeaders(),\n    method: 'POST',\n    uri,\n  })\n}\n"],"names":["PassThrough","getGlobalCliClient","isStaging","FormData","APP_WORKBENCH_API_VERSION","getWorkbenchUrl","organizationId","getApplicationUrl","application","segment","type","id","getClient","apiVersion","requireUser","getApplication","applicationId","client","request","uri","err","statusCode","createApplication","options","isSingleton","projectId","slug","title","visibility","body","undefined","config","studio","method","updateApplication","update","createDeployment","interfaces","isAutoUpdating","tarball","version","workspaces","formData","append","toString","appendDeploymentParts","deleteApplication","appendJson","length","contentType","filename","name","value","JSON","stringify","pipe","headers","getHeaders"],"mappings":"AAAA,SAAQA,WAAW,QAAO,cAAa;AAGvC,SAA4BC,kBAAkB,QAAO,mBAAkB;AACvE,SAAQC,SAAS,QAAO,wBAAuB;AAC/C,OAAOC,cAAc,YAAW;AAGhC,SAAQC,yBAAyB,QAAO,kBAAiB;AA2CzD,OAAO,SAASC,gBAAgBC,cAAsB;IACpD,OAAO,CAAC,QAAQ,EAAEA,eAAe,CAAC,EAAEJ,cAAc,oBAAoB,cAAc;AACtF;AAEA,4EAA4E,GAC5E,OAAO,SAASK,kBACdC,WAAgE;IAEhE,MAAMC,UAAUD,YAAYE,IAAI,KAAK,WAAW,WAAW;IAC3D,OAAO,GAAGL,gBAAgBG,YAAYF,cAAc,EAAE,CAAC,EAAEG,QAAQ,CAAC,EAAED,YAAYG,EAAE,EAAE;AACtF;AAEA,eAAeC;IACb,OAAOX,mBAAmB;QAACY,YAAYT;QAA2BU,aAAa;IAAI;AACrF;AAEA,OAAO,eAAeC,eAAeC,aAAqB;IACxD,MAAMC,SAAS,MAAML;IACrB,IAAI;QACF,OAAO,MAAMK,OAAOC,OAAO,CAAC;YAACC,KAAK,CAAC,cAAc,EAAEH,eAAe;QAAA;IACpE,EAAE,OAAOI,KAAK;QACZ,IAAI,AAACA,KAA+BC,eAAe,KAAK,OAAO;QAC/D,MAAMD;IACR;AACF;AAEA;;;CAGC,GACD,OAAO,eAAeE,kBAAkBC,OAQvC;IACC,MAAM,EAACC,WAAW,EAAElB,cAAc,EAAEmB,SAAS,EAAEC,IAAI,EAAEC,KAAK,EAAEjB,IAAI,EAAEkB,UAAU,EAAC,GAAGL;IAChF,MAAMN,SAAS,MAAML;IACrB,OAAOK,OAAOC,OAAO,CAAC;QACpBW,MAAM;YACJvB;YACAoB;YACAC;YACAjB;YACA,GAAIc,gBAAgBM,YAAY,CAAC,IAAI;gBAACN;YAAW,CAAC;YAClD,GAAII,aAAa;gBAACA;YAAU,IAAI,CAAC,CAAC;YAClC,qEAAqE;YACrE,GAAIH,YAAY;gBAACM,QAAQ;oBAACC,QAAQ;wBAACP;oBAAS;gBAAC;YAAC,IAAI,CAAC,CAAC;QACtD;QACAQ,QAAQ;QACRd,KAAK,CAAC,aAAa,CAAC;IACtB;AACF;AASA,yCAAyC;AACzC,OAAO,eAAee,kBACpBlB,aAAqB,EACrBmB,MAAyB;IAEzB,MAAMlB,SAAS,MAAML;IACrB,MAAMK,OAAOC,OAAO,CAAC;QAACW,MAAMM;QAAQF,QAAQ;QAASd,KAAK,CAAC,cAAc,EAAEH,eAAe;IAAA;AAC5F;AAEA,4DAA4D,GAC5D,OAAO,eAAeoB,iBAAiBb,OAOtC;IACC,MAAM,EAACP,aAAa,EAAEqB,UAAU,EAAEC,cAAc,EAAEC,OAAO,EAAEC,OAAO,EAAEC,UAAU,EAAC,GAAGlB;IAClF,MAAMmB,WAAW,IAAIvC;IACrBuC,SAASC,MAAM,CAAC,kBAAkBL,eAAeM,QAAQ;IACzDC,sBAAsBH,UAAU;QAACL;QAAYE;QAASC;QAASC;IAAU;IACzE,OAAOvB,QAAQ,CAAC,cAAc,EAAEF,cAAc,YAAY,CAAC,EAAE0B;AAC/D;AAEA,0FAA0F,GAC1F,OAAO,eAAeI,kBAAkB9B,aAAqB;IAC3D,MAAMC,SAAS,MAAML;IACrB,IAAI;QACF,MAAMK,OAAOC,OAAO,CAAC;YAACe,QAAQ;YAAUd,KAAK,CAAC,cAAc,EAAEH,eAAe;QAAA;IAC/E,EAAE,OAAOI,KAAK;QACZ,IAAI,AAACA,KAA+BC,eAAe,KAAK,MAAMD;IAChE;AACF;AAEA,SAASyB,sBACPH,QAAkB,EAClB,EACEL,UAAU,EACVE,OAAO,EACPC,OAAO,EACPC,UAAU,EAMX;IAEDC,SAASC,MAAM,CAAC,WAAWH;IAC3BO,WAAWL,UAAU,cAAcL;IACnC,0EAA0E;IAC1E,IAAII,YAAYO,QAAQD,WAAWL,UAAU,cAAcD;IAC3DC,SAASC,MAAM,CAAC,WAAWJ,SAAS;QAACU,aAAa;QAAoBC,UAAU;IAAY;AAC9F;AAEA,oEAAoE,GACpE,SAASH,WAAWL,QAAkB,EAAES,IAAY,EAAEC,KAAc;IAClEV,SAASC,MAAM,CAACQ,MAAME,KAAKC,SAAS,CAACF,QAAQ;QAACH,aAAa;IAAkB;AAC/E;AAEA,eAAe/B,QAAWC,GAAW,EAAEuB,QAAkB;IACvD,MAAMzB,SAAS,MAAML;IACrB,OAAOK,OAAOC,OAAO,CAAC;QACpBW,MAAMa,SAASa,IAAI,CAAC,IAAIvD;QACxBwD,SAASd,SAASe,UAAU;QAC5BxB,QAAQ;QACRd;IACF;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanity/workbench-cli",
-  "version": "1.6.0",
+  "version": "1.7.1",
   "description": "Internal implementation detail of the Sanity CLI's unstable workbench support. Not intended for direct use.",
   "homepage": "https://github.com/sanity-io/cli",
   "bugs": "https://github.com/sanity-io/cli/issues",