feat(cli): add sanity assets upload command

[runeb]

Summary

Adds a new sanity assets upload command that uploads one or more files to the Sanity CDN and prints public URLs to stdout.

$ sanity assets upload screenshot.png diagram.pdf
https://cdn.sanity.io/images/abc123/production/hash-800x600.png
https://cdn.sanity.io/files/abc123/production/hash.pdf

Motivation

There's no CLI command to upload files to Sanity CDN and get back public URLs. This is useful for embedding images in GitHub PRs, Linear tickets, docs, or any context where you need a hosted URL.

What's included

packages/@sanity/cli/src/commands/assets/upload.ts

• New assets topic (separate from existing media topic which handles media library operations)
• Extends SanityCommand with strict = false for variadic file args (same pattern as exec.ts)
• --project and --dataset flags with env var support (SANITY_PROJECT_ID, SANITY_DATASET)
• Content type detection from file extension (.png, .jpg, .gif, .webp, .svg, .pdf)
• Routes images to /assets/images/ and other files to /assets/files/
• Auth via getProjectCliClient({ requireUser: true }) — token extracted with client.config().token
• Pipe-friendly output: one URL per line to stdout

packages/@sanity/cli/src/commands/assets/__tests__/upload.test.ts

• 4 tests using vitest + nock + @sanity/cli-test (testCommand, mockApi)
• Tests: image upload, PDF routing to files endpoint, API failure handling, missing project ID error

Resolution chains

• Project ID: --project flag → SANITY_PROJECT_ID env → this.getProjectId() (reads sanity.config.ts)
• Dataset: --dataset flag → SANITY_DATASET env → cliConfig.api.dataset → "production" fallback
• Auth: SANITY_AUTH_TOKEN env → ~/.config/sanity/config.json (via sanity login)

Build & test

cd packages/@sanity/cli
pnpm build   # ✅ SWC compiles, oclif manifest picks up assets:upload
pnpm test    # ✅ 4/4 tests pass

[claude]

Claude finished @runeb's task in 1m 18s —— View job

---

Code Review

• Read changed files
• Analyze for issues
• Post review

---

packages/@sanity/cli/src/commands/assets/upload.ts

1. Non-standard flag names (--project / --dataset)

The codebase has shared flag utilities in src/util/sharedFlags.ts that provide --project-id (with -p shorthand) and --dataset (with -d shorthand). Every other command with a project flag uses getProjectIdFlag() from that utility. This PR introduces a --project flag that's inconsistent with the established convention.

// upload.ts L41-50 — current
static override flags = {
  dataset: Flags.string({...env: 'SANITY_DATASET'}),
  project: Flags.string({...env: 'SANITY_PROJECT_ID'}),
}

Should use the shared helpers instead:

import {getDatasetFlag, getProjectIdFlag} from '../../util/sharedFlags.js'

static override flags = {
  ...getProjectIdFlag({env: 'SANITY_PROJECT_ID'}),
  ...getDatasetFlag({env: 'SANITY_DATASET'}),
}

Then update line 70 to use flags['project-id'] instead of flags.project. This makes the command consistent with backup enable, dataset list, etc., and gives users the -p/-d shorthands for free.

Fix this →

2. args definition is dead code

Lines 22–26 define static override args = { file: Args.string({...}) } but run() ignores args.file and reads from argv directly. The defined arg is never used. Either remove the args block or document why argv is preferred (e.g. to handle unlimited positional args when strict = false).

3. No test for multi-file upload

The multi-file upload path (the for loop at L91) has no test coverage. A test uploading two files and asserting both URLs are printed would cover the primary use case shown in the PR description.

4. Silent error suppression on getCliConfig()

// L64
const cliConfig = await this.getCliConfig().catch(() => {})

The empty catch silently swallows any error, including ones unrelated to "not in a Sanity project directory" (e.g. malformed config, I/O errors). Consider only suppressing known error types or at least logging to debug output so errors aren't completely invisible.

[github-actions]

Coverage Delta

File	Statements
packages/@sanity/cli/src/commands/assets/upload.ts	97.0% (new)

Comparing 1 changed file against main @ 73b0d6e1bf2d9017ed20ef978e0b4776bed46b40

Overall Coverage

Metric	Coverage
Statements	80.2% (+ 0.1%)
Branches	67.2% (+ 0.0%)
Functions	77.5% (- 0.0%)
Lines	80.5% (+ 0.1%)