@payloadcms/figma 0.0.1-alpha.0

package/dist/commands/init.spec.js

@@ -0,0 +1,283 @@
+import * as p from '@clack/prompts';
+import fs from 'fs/promises';
+import path from 'path';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import * as controlPlane from '../api/control-plane.js';
+import { getValidAccessToken } from '../auth/oauth-flow.js';
+import * as config from '../utils/config.js';
+import * as payloadConfigModifier from '../utils/payload-config-modifier.js';
+import * as project from '../utils/project.js';
+import { mockProcessExit } from './__tests__/test-utils.js';
+import { initCommand } from './init.js';
+// Mock dependencies
+vi.mock('@clack/prompts', ()=>{
+    const mockLog = {
+        error: vi.fn(),
+        info: vi.fn(),
+        step: vi.fn(),
+        success: vi.fn(),
+        warn: vi.fn()
+    };
+    return {
+        cancel: vi.fn(),
+        confirm: vi.fn(),
+        intro: vi.fn(),
+        isCancel: vi.fn((value)=>value === Symbol.for('clack.cancel')),
+        log: mockLog,
+        note: vi.fn(),
+        outro: vi.fn(),
+        select: vi.fn(),
+        spinner: vi.fn(()=>({
+                start: vi.fn(),
+                stop: vi.fn()
+            })),
+        text: vi.fn()
+    };
+});
+vi.mock('../auth/oauth-flow.js', ()=>({
+        getValidAccessToken: vi.fn()
+    }));
+vi.mock('../auth/token-store.js', ()=>({
+        TokenStore: vi.fn(()=>({
+                getAccessToken: vi.fn(()=>'cached-token'),
+                hasValidTokens: vi.fn(()=>false)
+            }))
+    }));
+vi.mock('./login.js', ()=>({
+        loginCommand: vi.fn().mockResolvedValue(undefined)
+    }));
+vi.mock('../utils/log.js', ()=>({
+        debug: vi.fn(),
+        error: vi.fn(),
+        info: vi.fn(),
+        log: vi.fn(),
+        warning: vi.fn()
+    }));
+// Mock file system operations
+vi.mock('../utils/config.js', async ()=>{
+    const actual = await vi.importActual('../utils/config.js');
+    return {
+        ...actual,
+        hasFigmaConfig: vi.fn(),
+        readFigmaConfig: vi.fn(),
+        writeFigmaConfig: vi.fn()
+    };
+});
+vi.mock('../utils/project.js', async ()=>{
+    const actual = await vi.importActual('../utils/project.js');
+    return {
+        ...actual,
+        detectPayloadProject: vi.fn(),
+        hasRequiredDependencies: vi.fn(),
+        installDependencies: vi.fn(),
+        isInProjectDirectory: vi.fn(),
+        scaffoldProject: vi.fn()
+    };
+});
+vi.mock('../api/control-plane.js', ()=>({
+        createTenant: vi.fn(),
+        getTenantDetails: vi.fn(),
+        listTenants: vi.fn()
+    }));
+vi.mock('../utils/payload-config-modifier.js', ()=>({
+        displayManualInstructions: vi.fn(),
+        ensurePayloadFigmaConfig: vi.fn()
+    }));
+describe('init command', ()=>{
+    let processExitMock;
+    let testDir;
+    beforeEach(async ()=>{
+        vi.clearAllMocks();
+        processExitMock = mockProcessExit();
+        // Create temp test directory
+        testDir = path.join(process.cwd(), '.test-tmp', `init-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`);
+        await fs.mkdir(testDir, {
+            recursive: true
+        });
+        // Default mocks
+        vi.mocked(config.writeFigmaConfig).mockResolvedValue();
+        vi.mocked(project.isInProjectDirectory).mockResolvedValue(true); // Default: existing project
+        vi.mocked(project.hasRequiredDependencies).mockResolvedValue(true); // Default: deps installed
+        vi.mocked(payloadConfigModifier.ensurePayloadFigmaConfig).mockResolvedValue({
+            changes: [],
+            modified: false,
+            success: true
+        });
+    });
+    afterEach(async ()=>{
+        processExitMock.restore();
+        // Clean up test directory
+        try {
+            await fs.rm(testDir, {
+                force: true,
+                recursive: true
+            });
+        } catch  {
+        // Ignore cleanup errors
+        }
+    });
+    describe('authentication check', ()=>{
+        it('should skip auth when --skip-auth flag is used', async ()=>{
+            vi.mocked(config.hasFigmaConfig).mockResolvedValue(false);
+            vi.mocked(project.detectPayloadProject).mockResolvedValue({
+                hasPayload: true,
+                path: testDir,
+                payloadVersion: '^3.54.0'
+            });
+            vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({
+                id: 'tenant_test',
+                domain: 'test.figmacms.com',
+                parentId: 'team_123',
+                parentType: 'team',
+                status: 'active'
+            });
+            await initCommand({
+                id: 'tenant_test',
+                skipAuth: true
+            });
+            expect(getValidAccessToken).not.toHaveBeenCalled();
+        });
+        it('should prompt and authenticate when user confirms', async ()=>{
+            // First call returns null (not authenticated), second call returns valid token (after auth)
+            vi.mocked(getValidAccessToken).mockResolvedValueOnce(null).mockResolvedValueOnce('valid-token');
+            vi.mocked(p.confirm).mockResolvedValue(true);
+            vi.mocked(config.hasFigmaConfig).mockResolvedValue(false);
+            vi.mocked(project.detectPayloadProject).mockResolvedValue({
+                hasPayload: true,
+                path: testDir,
+                payloadVersion: '^3.54.0'
+            });
+            vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({
+                id: 'tenant_test',
+                domain: 'test.figmacms.com',
+                parentId: 'team_123',
+                parentType: 'team',
+                status: 'active'
+            });
+            await initCommand({
+                id: 'tenant_test'
+            });
+            expect(p.confirm).toHaveBeenCalledWith(expect.objectContaining({
+                message: 'Would you like to authenticate now?'
+            }));
+            // Verify loginCommand was called
+            const { loginCommand } = await import('./login.js');
+            expect(loginCommand).toHaveBeenCalled();
+        });
+    });
+    describe('already initialized check', ()=>{
+        it('should exit if already initialized', async ()=>{
+            vi.mocked(config.hasFigmaConfig).mockResolvedValue(true);
+            vi.mocked(config.readFigmaConfig).mockResolvedValue({
+                domain: 'existing.figmacms.com',
+                tenantId: 'tenant_existing'
+            });
+            await expect(initCommand({
+                id: 'tenant_test',
+                skipAuth: true
+            })).rejects.toThrow('process.exit(0)');
+            expect(processExitMock.exitMock).toHaveBeenCalledWith(0);
+        });
+        it('should proceed if --force flag is used', async ()=>{
+            vi.mocked(config.hasFigmaConfig).mockResolvedValue(true);
+            vi.mocked(project.detectPayloadProject).mockResolvedValue({
+                hasPayload: true,
+                path: testDir,
+                payloadVersion: '^3.54.0'
+            });
+            vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({
+                id: 'tenant_new',
+                domain: 'test-cms.figmacms.com',
+                parentId: 'team_123',
+                parentType: 'team',
+                status: 'active'
+            });
+            await initCommand({
+                id: 'tenant_new',
+                force: true,
+                skipAuth: true
+            });
+            expect(config.readFigmaConfig).not.toHaveBeenCalled();
+            expect(controlPlane.getTenantDetails).toHaveBeenCalled();
+        });
+    });
+    describe('project validation', ()=>{
+        it('should reject invalid Payload version', async ()=>{
+            vi.mocked(config.hasFigmaConfig).mockResolvedValue(false);
+            vi.mocked(project.detectPayloadProject).mockResolvedValue({
+                hasPayload: true,
+                path: testDir,
+                payloadVersion: '^2.0.0'
+            });
+            await expect(initCommand({
+                id: 'tenant_test',
+                skipAuth: true
+            })).rejects.toThrow('process.exit(1)');
+            expect(processExitMock.exitMock).toHaveBeenCalledWith(1);
+        });
+        it('should exit if user declines to scaffold project', async ()=>{
+            vi.mocked(config.hasFigmaConfig).mockResolvedValue(false);
+            vi.mocked(project.detectPayloadProject).mockResolvedValue({
+                hasPayload: false,
+                path: testDir
+            });
+            vi.mocked(p.confirm).mockResolvedValue(false);
+            await expect(initCommand({
+                id: 'tenant_test',
+                skipAuth: true
+            })).rejects.toThrow('process.exit(1)');
+            expect(processExitMock.exitMock).toHaveBeenCalledWith(1);
+        });
+    });
+    describe('tenant configuration', ()=>{
+        it('should fetch tenant details and write config', async ()=>{
+            vi.mocked(config.hasFigmaConfig).mockResolvedValue(false);
+            vi.mocked(project.detectPayloadProject).mockResolvedValue({
+                hasPayload: true,
+                path: testDir,
+                payloadVersion: '^3.54.0'
+            });
+            vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({
+                id: 'tenant_abc',
+                domain: 'abc.figmacms.com',
+                parentId: 'team_123',
+                parentType: 'team',
+                status: 'active'
+            });
+            await initCommand({
+                id: 'tenant_abc',
+                skipAuth: true
+            });
+            expect(controlPlane.getTenantDetails).toHaveBeenCalledWith('mock-access-token', 'tenant_abc');
+            expect(config.writeFigmaConfig).toHaveBeenCalledWith({
+                domain: 'abc.figmacms.com',
+                tenantId: 'tenant_abc'
+            });
+        });
+    });
+    describe('Lambda setup verification', ()=>{
+        it('should verify scaffoldProject creates Lambda-ready files', async ()=>{
+            // This test verifies the integration between scaffoldProject and Lambda modifications
+            // by checking that the mocked scaffoldProject was called correctly
+            vi.mocked(config.hasFigmaConfig).mockResolvedValue(false);
+            vi.mocked(project.isInProjectDirectory).mockResolvedValue(false); // Trigger new project flow
+            vi.mocked(p.text).mockResolvedValue('test-project'); // Project path prompt
+            vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({
+                id: 'tenant_test',
+                domain: 'test.figmacms.com',
+                parentId: 'team_123',
+                parentType: 'team',
+                status: 'active'
+            });
+            await initCommand({
+                id: 'tenant_test',
+                skipAuth: true
+            });
+            // Verify scaffoldProject was called (which internally applies Lambda modifications)
+            expect(project.scaffoldProject).toHaveBeenCalled();
+            expect(project.installDependencies).toHaveBeenCalled();
+        });
+    });
+});
+
+//# sourceMappingURL=init.spec.js.map

package/dist/commands/init.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/commands/init.spec.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport fs from 'fs/promises'\nimport path from 'path'\nimport { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'\n\nimport * as controlPlane from '../api/control-plane.js'\nimport { getValidAccessToken } from '../auth/oauth-flow.js'\nimport * as config from '../utils/config.js'\nimport * as payloadConfigModifier from '../utils/payload-config-modifier.js'\nimport * as project from '../utils/project.js'\nimport { mockProcessExit } from './__tests__/test-utils.js'\nimport { initCommand } from './init.js'\n\n// Mock dependencies\nvi.mock('@clack/prompts', () => {\n  const mockLog = {\n    error: vi.fn(),\n    info: vi.fn(),\n    step: vi.fn(),\n    success: vi.fn(),\n    warn: vi.fn(),\n  }\n\n  return {\n    cancel: vi.fn(),\n    confirm: vi.fn(),\n    intro: vi.fn(),\n    isCancel: vi.fn((value) => value === Symbol.for('clack.cancel')),\n    log: mockLog,\n    note: vi.fn(),\n    outro: vi.fn(),\n    select: vi.fn(),\n    spinner: vi.fn(() => ({\n      start: vi.fn(),\n      stop: vi.fn(),\n    })),\n    text: vi.fn(),\n  }\n})\n\nvi.mock('../auth/oauth-flow.js', () => ({\n  getValidAccessToken: vi.fn(),\n}))\n\nvi.mock('../auth/token-store.js', () => ({\n  TokenStore: vi.fn(() => ({\n    getAccessToken: vi.fn(() => 'cached-token'),\n    hasValidTokens: vi.fn(() => false),\n  })),\n}))\n\nvi.mock('./login.js', () => ({\n  loginCommand: vi.fn().mockResolvedValue(undefined),\n}))\n\nvi.mock('../utils/log.js', () => ({\n  debug: vi.fn(),\n  error: vi.fn(),\n  info: vi.fn(),\n  log: vi.fn(),\n  warning: vi.fn(),\n}))\n\n// Mock file system operations\nvi.mock('../utils/config.js', async () => {\n  const actual = await vi.importActual<typeof config>('../utils/config.js')\n  return {\n    ...actual,\n    hasFigmaConfig: vi.fn(),\n    readFigmaConfig: vi.fn(),\n    writeFigmaConfig: vi.fn(),\n  }\n})\n\nvi.mock('../utils/project.js', async () => {\n  const actual = await vi.importActual<typeof project>('../utils/project.js')\n  return {\n    ...actual,\n    detectPayloadProject: vi.fn(),\n    hasRequiredDependencies: vi.fn(),\n    installDependencies: vi.fn(),\n    isInProjectDirectory: vi.fn(),\n    scaffoldProject: vi.fn(),\n  }\n})\n\nvi.mock('../api/control-plane.js', () => ({\n  createTenant: vi.fn(),\n  getTenantDetails: vi.fn(),\n  listTenants: vi.fn(),\n}))\n\nvi.mock('../utils/payload-config-modifier.js', () => ({\n  displayManualInstructions: vi.fn(),\n  ensurePayloadFigmaConfig: vi.fn(),\n}))\n\ndescribe('init command', () => {\n  let processExitMock: ReturnType<typeof mockProcessExit>\n  let testDir: string\n\n  beforeEach(async () => {\n    vi.clearAllMocks()\n    processExitMock = mockProcessExit()\n\n    // Create temp test directory\n    testDir = path.join(\n      process.cwd(),\n      '.test-tmp',\n      `init-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`,\n    )\n    await fs.mkdir(testDir, { recursive: true })\n\n    // Default mocks\n    vi.mocked(config.writeFigmaConfig).mockResolvedValue()\n    vi.mocked(project.isInProjectDirectory).mockResolvedValue(true) // Default: existing project\n    vi.mocked(project.hasRequiredDependencies).mockResolvedValue(true) // Default: deps installed\n    vi.mocked(payloadConfigModifier.ensurePayloadFigmaConfig).mockResolvedValue({\n      changes: [],\n      modified: false,\n      success: true,\n    })\n  })\n\n  afterEach(async () => {\n    processExitMock.restore()\n\n    // Clean up test directory\n    try {\n      await fs.rm(testDir, { force: true, recursive: true })\n    } catch {\n      // Ignore cleanup errors\n    }\n  })\n\n  describe('authentication check', () => {\n    it('should skip auth when --skip-auth flag is used', async () => {\n      vi.mocked(config.hasFigmaConfig).mockResolvedValue(false)\n      vi.mocked(project.detectPayloadProject).mockResolvedValue({\n        hasPayload: true,\n        path: testDir,\n        payloadVersion: '^3.54.0',\n      })\n      vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({\n        id: 'tenant_test',\n        domain: 'test.figmacms.com',\n        parentId: 'team_123',\n        parentType: 'team',\n        status: 'active',\n      })\n      await initCommand({ id: 'tenant_test', skipAuth: true })\n\n      expect(getValidAccessToken).not.toHaveBeenCalled()\n    })\n\n    it('should prompt and authenticate when user confirms', async () => {\n      // First call returns null (not authenticated), second call returns valid token (after auth)\n      vi.mocked(getValidAccessToken)\n        .mockResolvedValueOnce(null)\n        .mockResolvedValueOnce('valid-token')\n      vi.mocked(p.confirm).mockResolvedValue(true)\n      vi.mocked(config.hasFigmaConfig).mockResolvedValue(false)\n      vi.mocked(project.detectPayloadProject).mockResolvedValue({\n        hasPayload: true,\n        path: testDir,\n        payloadVersion: '^3.54.0',\n      })\n      vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({\n        id: 'tenant_test',\n        domain: 'test.figmacms.com',\n        parentId: 'team_123',\n        parentType: 'team',\n        status: 'active',\n      })\n\n      await initCommand({ id: 'tenant_test' })\n\n      expect(p.confirm).toHaveBeenCalledWith(\n        expect.objectContaining({\n          message: 'Would you like to authenticate now?',\n        }),\n      )\n      // Verify loginCommand was called\n      const { loginCommand } = await import('./login.js')\n      expect(loginCommand).toHaveBeenCalled()\n    })\n  })\n\n  describe('already initialized check', () => {\n    it('should exit if already initialized', async () => {\n      vi.mocked(config.hasFigmaConfig).mockResolvedValue(true)\n      vi.mocked(config.readFigmaConfig).mockResolvedValue({\n        domain: 'existing.figmacms.com',\n        tenantId: 'tenant_existing',\n      })\n\n      await expect(initCommand({ id: 'tenant_test', skipAuth: true })).rejects.toThrow(\n        'process.exit(0)',\n      )\n\n      expect(processExitMock.exitMock).toHaveBeenCalledWith(0)\n    })\n\n    it('should proceed if --force flag is used', async () => {\n      vi.mocked(config.hasFigmaConfig).mockResolvedValue(true)\n      vi.mocked(project.detectPayloadProject).mockResolvedValue({\n        hasPayload: true,\n        path: testDir,\n        payloadVersion: '^3.54.0',\n      })\n      vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({\n        id: 'tenant_new',\n        domain: 'test-cms.figmacms.com',\n        parentId: 'team_123',\n        parentType: 'team',\n        status: 'active',\n      })\n\n      await initCommand({ id: 'tenant_new', force: true, skipAuth: true })\n\n      expect(config.readFigmaConfig).not.toHaveBeenCalled()\n      expect(controlPlane.getTenantDetails).toHaveBeenCalled()\n    })\n  })\n\n  describe('project validation', () => {\n    it('should reject invalid Payload version', async () => {\n      vi.mocked(config.hasFigmaConfig).mockResolvedValue(false)\n      vi.mocked(project.detectPayloadProject).mockResolvedValue({\n        hasPayload: true,\n        path: testDir,\n        payloadVersion: '^2.0.0',\n      })\n\n      await expect(initCommand({ id: 'tenant_test', skipAuth: true })).rejects.toThrow(\n        'process.exit(1)',\n      )\n\n      expect(processExitMock.exitMock).toHaveBeenCalledWith(1)\n    })\n\n    it('should exit if user declines to scaffold project', async () => {\n      vi.mocked(config.hasFigmaConfig).mockResolvedValue(false)\n      vi.mocked(project.detectPayloadProject).mockResolvedValue({\n        hasPayload: false,\n        path: testDir,\n      })\n      vi.mocked(p.confirm).mockResolvedValue(false)\n\n      await expect(initCommand({ id: 'tenant_test', skipAuth: true })).rejects.toThrow(\n        'process.exit(1)',\n      )\n\n      expect(processExitMock.exitMock).toHaveBeenCalledWith(1)\n    })\n  })\n\n  describe('tenant configuration', () => {\n    it('should fetch tenant details and write config', async () => {\n      vi.mocked(config.hasFigmaConfig).mockResolvedValue(false)\n      vi.mocked(project.detectPayloadProject).mockResolvedValue({\n        hasPayload: true,\n        path: testDir,\n        payloadVersion: '^3.54.0',\n      })\n      vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({\n        id: 'tenant_abc',\n        domain: 'abc.figmacms.com',\n        parentId: 'team_123',\n        parentType: 'team',\n        status: 'active',\n      })\n\n      await initCommand({ id: 'tenant_abc', skipAuth: true })\n\n      expect(controlPlane.getTenantDetails).toHaveBeenCalledWith('mock-access-token', 'tenant_abc')\n      expect(config.writeFigmaConfig).toHaveBeenCalledWith({\n        domain: 'abc.figmacms.com',\n        tenantId: 'tenant_abc',\n      })\n    })\n  })\n\n  describe('Lambda setup verification', () => {\n    it('should verify scaffoldProject creates Lambda-ready files', async () => {\n      // This test verifies the integration between scaffoldProject and Lambda modifications\n      // by checking that the mocked scaffoldProject was called correctly\n      vi.mocked(config.hasFigmaConfig).mockResolvedValue(false)\n      vi.mocked(project.isInProjectDirectory).mockResolvedValue(false) // Trigger new project flow\n      vi.mocked(p.text).mockResolvedValue('test-project') // Project path prompt\n      vi.mocked(controlPlane.getTenantDetails).mockResolvedValue({\n        id: 'tenant_test',\n        domain: 'test.figmacms.com',\n        parentId: 'team_123',\n        parentType: 'team',\n        status: 'active',\n      })\n\n      await initCommand({ id: 'tenant_test', skipAuth: true })\n\n      // Verify scaffoldProject was called (which internally applies Lambda modifications)\n      expect(project.scaffoldProject).toHaveBeenCalled()\n      expect(project.installDependencies).toHaveBeenCalled()\n    })\n  })\n})\n"],"names":["p","fs","path","afterEach","beforeEach","describe","expect","it","vi","controlPlane","getValidAccessToken","config","payloadConfigModifier","project","mockProcessExit","initCommand","mock","mockLog","error","fn","info","step","success","warn","cancel","confirm","intro","isCancel","value","Symbol","for","log","note","outro","select","spinner","start","stop","text","TokenStore","getAccessToken","hasValidTokens","loginCommand","mockResolvedValue","undefined","debug","warning","actual","importActual","hasFigmaConfig","readFigmaConfig","writeFigmaConfig","detectPayloadProject","hasRequiredDependencies","installDependencies","isInProjectDirectory","scaffoldProject","createTenant","getTenantDetails","listTenants","displayManualInstructions","ensurePayloadFigmaConfig","processExitMock","testDir","clearAllMocks","join","process","cwd","Date","now","Math","random","toString","substring","mkdir","recursive","mocked","changes","modified","restore","rm","force","hasPayload","payloadVersion","id","domain","parentId","parentType","status","skipAuth","not","toHaveBeenCalled","mockResolvedValueOnce","toHaveBeenCalledWith","objectContaining","message","tenantId","rejects","toThrow","exitMock"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,cAAa;AAC5B,OAAOC,UAAU,OAAM;AACvB,SAASC,SAAS,EAAEC,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAExE,YAAYC,kBAAkB,0BAAyB;AACvD,SAASC,mBAAmB,QAAQ,wBAAuB;AAC3D,YAAYC,YAAY,qBAAoB;AAC5C,YAAYC,2BAA2B,sCAAqC;AAC5E,YAAYC,aAAa,sBAAqB;AAC9C,SAASC,eAAe,QAAQ,4BAA2B;AAC3D,SAASC,WAAW,QAAQ,YAAW;AAEvC,oBAAoB;AACpBP,GAAGQ,IAAI,CAAC,kBAAkB;IACxB,MAAMC,UAAU;QACdC,OAAOV,GAAGW,EAAE;QACZC,MAAMZ,GAAGW,EAAE;QACXE,MAAMb,GAAGW,EAAE;QACXG,SAASd,GAAGW,EAAE;QACdI,MAAMf,GAAGW,EAAE;IACb;IAEA,OAAO;QACLK,QAAQhB,GAAGW,EAAE;QACbM,SAASjB,GAAGW,EAAE;QACdO,OAAOlB,GAAGW,EAAE;QACZQ,UAAUnB,GAAGW,EAAE,CAAC,CAACS,QAAUA,UAAUC,OAAOC,GAAG,CAAC;QAChDC,KAAKd;QACLe,MAAMxB,GAAGW,EAAE;QACXc,OAAOzB,GAAGW,EAAE;QACZe,QAAQ1B,GAAGW,EAAE;QACbgB,SAAS3B,GAAGW,EAAE,CAAC,IAAO,CAAA;gBACpBiB,OAAO5B,GAAGW,EAAE;gBACZkB,MAAM7B,GAAGW,EAAE;YACb,CAAA;QACAmB,MAAM9B,GAAGW,EAAE;IACb;AACF;AAEAX,GAAGQ,IAAI,CAAC,yBAAyB,IAAO,CAAA;QACtCN,qBAAqBF,GAAGW,EAAE;IAC5B,CAAA;AAEAX,GAAGQ,IAAI,CAAC,0BAA0B,IAAO,CAAA;QACvCuB,YAAY/B,GAAGW,EAAE,CAAC,IAAO,CAAA;gBACvBqB,gBAAgBhC,GAAGW,EAAE,CAAC,IAAM;gBAC5BsB,gBAAgBjC,GAAGW,EAAE,CAAC,IAAM;YAC9B,CAAA;IACF,CAAA;AAEAX,GAAGQ,IAAI,CAAC,cAAc,IAAO,CAAA;QAC3B0B,cAAclC,GAAGW,EAAE,GAAGwB,iBAAiB,CAACC;IAC1C,CAAA;AAEApC,GAAGQ,IAAI,CAAC,mBAAmB,IAAO,CAAA;QAChC6B,OAAOrC,GAAGW,EAAE;QACZD,OAAOV,GAAGW,EAAE;QACZC,MAAMZ,GAAGW,EAAE;QACXY,KAAKvB,GAAGW,EAAE;QACV2B,SAAStC,GAAGW,EAAE;IAChB,CAAA;AAEA,8BAA8B;AAC9BX,GAAGQ,IAAI,CAAC,sBAAsB;IAC5B,MAAM+B,SAAS,MAAMvC,GAAGwC,YAAY,CAAgB;IACpD,OAAO;QACL,GAAGD,MAAM;QACTE,gBAAgBzC,GAAGW,EAAE;QACrB+B,iBAAiB1C,GAAGW,EAAE;QACtBgC,kBAAkB3C,GAAGW,EAAE;IACzB;AACF;AAEAX,GAAGQ,IAAI,CAAC,uBAAuB;IAC7B,MAAM+B,SAAS,MAAMvC,GAAGwC,YAAY,CAAiB;IACrD,OAAO;QACL,GAAGD,MAAM;QACTK,sBAAsB5C,GAAGW,EAAE;QAC3BkC,yBAAyB7C,GAAGW,EAAE;QAC9BmC,qBAAqB9C,GAAGW,EAAE;QAC1BoC,sBAAsB/C,GAAGW,EAAE;QAC3BqC,iBAAiBhD,GAAGW,EAAE;IACxB;AACF;AAEAX,GAAGQ,IAAI,CAAC,2BAA2B,IAAO,CAAA;QACxCyC,cAAcjD,GAAGW,EAAE;QACnBuC,kBAAkBlD,GAAGW,EAAE;QACvBwC,aAAanD,GAAGW,EAAE;IACpB,CAAA;AAEAX,GAAGQ,IAAI,CAAC,uCAAuC,IAAO,CAAA;QACpD4C,2BAA2BpD,GAAGW,EAAE;QAChC0C,0BAA0BrD,GAAGW,EAAE;IACjC,CAAA;AAEAd,SAAS,gBAAgB;IACvB,IAAIyD;IACJ,IAAIC;IAEJ3D,WAAW;QACTI,GAAGwD,aAAa;QAChBF,kBAAkBhD;QAElB,6BAA6B;QAC7BiD,UAAU7D,KAAK+D,IAAI,CACjBC,QAAQC,GAAG,IACX,aACA,CAAC,KAAK,EAAEC,KAAKC,GAAG,GAAG,CAAC,EAAEC,KAAKC,MAAM,GAAGC,QAAQ,CAAC,IAAIC,SAAS,CAAC,GAAG,IAAI;QAEpE,MAAMxE,GAAGyE,KAAK,CAACX,SAAS;YAAEY,WAAW;QAAK;QAE1C,gBAAgB;QAChBnE,GAAGoE,MAAM,CAACjE,OAAOwC,gBAAgB,EAAER,iBAAiB;QACpDnC,GAAGoE,MAAM,CAAC/D,QAAQ0C,oBAAoB,EAAEZ,iBAAiB,CAAC,OAAM,4BAA4B;QAC5FnC,GAAGoE,MAAM,CAAC/D,QAAQwC,uBAAuB,EAAEV,iBAAiB,CAAC,OAAM,0BAA0B;QAC7FnC,GAAGoE,MAAM,CAAChE,sBAAsBiD,wBAAwB,EAAElB,iBAAiB,CAAC;YAC1EkC,SAAS,EAAE;YACXC,UAAU;YACVxD,SAAS;QACX;IACF;IAEAnB,UAAU;QACR2D,gBAAgBiB,OAAO;QAEvB,0BAA0B;QAC1B,IAAI;YACF,MAAM9E,GAAG+E,EAAE,CAACjB,SAAS;gBAAEkB,OAAO;gBAAMN,WAAW;YAAK;QACtD,EAAE,OAAM;QACN,wBAAwB;QAC1B;IACF;IAEAtE,SAAS,wBAAwB;QAC/BE,GAAG,kDAAkD;YACnDC,GAAGoE,MAAM,CAACjE,OAAOsC,cAAc,EAAEN,iBAAiB,CAAC;YACnDnC,GAAGoE,MAAM,CAAC/D,QAAQuC,oBAAoB,EAAET,iBAAiB,CAAC;gBACxDuC,YAAY;gBACZhF,MAAM6D;gBACNoB,gBAAgB;YAClB;YACA3E,GAAGoE,MAAM,CAACnE,aAAaiD,gBAAgB,EAAEf,iBAAiB,CAAC;gBACzDyC,IAAI;gBACJC,QAAQ;gBACRC,UAAU;gBACVC,YAAY;gBACZC,QAAQ;YACV;YACA,MAAMzE,YAAY;gBAAEqE,IAAI;gBAAeK,UAAU;YAAK;YAEtDnF,OAAOI,qBAAqBgF,GAAG,CAACC,gBAAgB;QAClD;QAEApF,GAAG,qDAAqD;YACtD,4FAA4F;YAC5FC,GAAGoE,MAAM,CAAClE,qBACPkF,qBAAqB,CAAC,MACtBA,qBAAqB,CAAC;YACzBpF,GAAGoE,MAAM,CAAC5E,EAAEyB,OAAO,EAAEkB,iBAAiB,CAAC;YACvCnC,GAAGoE,MAAM,CAACjE,OAAOsC,cAAc,EAAEN,iBAAiB,CAAC;YACnDnC,GAAGoE,MAAM,CAAC/D,QAAQuC,oBAAoB,EAAET,iBAAiB,CAAC;gBACxDuC,YAAY;gBACZhF,MAAM6D;gBACNoB,gBAAgB;YAClB;YACA3E,GAAGoE,MAAM,CAACnE,aAAaiD,gBAAgB,EAAEf,iBAAiB,CAAC;gBACzDyC,IAAI;gBACJC,QAAQ;gBACRC,UAAU;gBACVC,YAAY;gBACZC,QAAQ;YACV;YAEA,MAAMzE,YAAY;gBAAEqE,IAAI;YAAc;YAEtC9E,OAAON,EAAEyB,OAAO,EAAEoE,oBAAoB,CACpCvF,OAAOwF,gBAAgB,CAAC;gBACtBC,SAAS;YACX;YAEF,iCAAiC;YACjC,MAAM,EAAErD,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC;YACtCpC,OAAOoC,cAAciD,gBAAgB;QACvC;IACF;IAEAtF,SAAS,6BAA6B;QACpCE,GAAG,sCAAsC;YACvCC,GAAGoE,MAAM,CAACjE,OAAOsC,cAAc,EAAEN,iBAAiB,CAAC;YACnDnC,GAAGoE,MAAM,CAACjE,OAAOuC,eAAe,EAAEP,iBAAiB,CAAC;gBAClD0C,QAAQ;gBACRW,UAAU;YACZ;YAEA,MAAM1F,OAAOS,YAAY;gBAAEqE,IAAI;gBAAeK,UAAU;YAAK,IAAIQ,OAAO,CAACC,OAAO,CAC9E;YAGF5F,OAAOwD,gBAAgBqC,QAAQ,EAAEN,oBAAoB,CAAC;QACxD;QAEAtF,GAAG,0CAA0C;YAC3CC,GAAGoE,MAAM,CAACjE,OAAOsC,cAAc,EAAEN,iBAAiB,CAAC;YACnDnC,GAAGoE,MAAM,CAAC/D,QAAQuC,oBAAoB,EAAET,iBAAiB,CAAC;gBACxDuC,YAAY;gBACZhF,MAAM6D;gBACNoB,gBAAgB;YAClB;YACA3E,GAAGoE,MAAM,CAACnE,aAAaiD,gBAAgB,EAAEf,iBAAiB,CAAC;gBACzDyC,IAAI;gBACJC,QAAQ;gBACRC,UAAU;gBACVC,YAAY;gBACZC,QAAQ;YACV;YAEA,MAAMzE,YAAY;gBAAEqE,IAAI;gBAAcH,OAAO;gBAAMQ,UAAU;YAAK;YAElEnF,OAAOK,OAAOuC,eAAe,EAAEwC,GAAG,CAACC,gBAAgB;YACnDrF,OAAOG,aAAaiD,gBAAgB,EAAEiC,gBAAgB;QACxD;IACF;IAEAtF,SAAS,sBAAsB;QAC7BE,GAAG,yCAAyC;YAC1CC,GAAGoE,MAAM,CAACjE,OAAOsC,cAAc,EAAEN,iBAAiB,CAAC;YACnDnC,GAAGoE,MAAM,CAAC/D,QAAQuC,oBAAoB,EAAET,iBAAiB,CAAC;gBACxDuC,YAAY;gBACZhF,MAAM6D;gBACNoB,gBAAgB;YAClB;YAEA,MAAM7E,OAAOS,YAAY;gBAAEqE,IAAI;gBAAeK,UAAU;YAAK,IAAIQ,OAAO,CAACC,OAAO,CAC9E;YAGF5F,OAAOwD,gBAAgBqC,QAAQ,EAAEN,oBAAoB,CAAC;QACxD;QAEAtF,GAAG,oDAAoD;YACrDC,GAAGoE,MAAM,CAACjE,OAAOsC,cAAc,EAAEN,iBAAiB,CAAC;YACnDnC,GAAGoE,MAAM,CAAC/D,QAAQuC,oBAAoB,EAAET,iBAAiB,CAAC;gBACxDuC,YAAY;gBACZhF,MAAM6D;YACR;YACAvD,GAAGoE,MAAM,CAAC5E,EAAEyB,OAAO,EAAEkB,iBAAiB,CAAC;YAEvC,MAAMrC,OAAOS,YAAY;gBAAEqE,IAAI;gBAAeK,UAAU;YAAK,IAAIQ,OAAO,CAACC,OAAO,CAC9E;YAGF5F,OAAOwD,gBAAgBqC,QAAQ,EAAEN,oBAAoB,CAAC;QACxD;IACF;IAEAxF,SAAS,wBAAwB;QAC/BE,GAAG,gDAAgD;YACjDC,GAAGoE,MAAM,CAACjE,OAAOsC,cAAc,EAAEN,iBAAiB,CAAC;YACnDnC,GAAGoE,MAAM,CAAC/D,QAAQuC,oBAAoB,EAAET,iBAAiB,CAAC;gBACxDuC,YAAY;gBACZhF,MAAM6D;gBACNoB,gBAAgB;YAClB;YACA3E,GAAGoE,MAAM,CAACnE,aAAaiD,gBAAgB,EAAEf,iBAAiB,CAAC;gBACzDyC,IAAI;gBACJC,QAAQ;gBACRC,UAAU;gBACVC,YAAY;gBACZC,QAAQ;YACV;YAEA,MAAMzE,YAAY;gBAAEqE,IAAI;gBAAcK,UAAU;YAAK;YAErDnF,OAAOG,aAAaiD,gBAAgB,EAAEmC,oBAAoB,CAAC,qBAAqB;YAChFvF,OAAOK,OAAOwC,gBAAgB,EAAE0C,oBAAoB,CAAC;gBACnDR,QAAQ;gBACRW,UAAU;YACZ;QACF;IACF;IAEA3F,SAAS,6BAA6B;QACpCE,GAAG,4DAA4D;YAC7D,sFAAsF;YACtF,mEAAmE;YACnEC,GAAGoE,MAAM,CAACjE,OAAOsC,cAAc,EAAEN,iBAAiB,CAAC;YACnDnC,GAAGoE,MAAM,CAAC/D,QAAQ0C,oBAAoB,EAAEZ,iBAAiB,CAAC,QAAO,2BAA2B;YAC5FnC,GAAGoE,MAAM,CAAC5E,EAAEsC,IAAI,EAAEK,iBAAiB,CAAC,iBAAgB,sBAAsB;YAC1EnC,GAAGoE,MAAM,CAACnE,aAAaiD,gBAAgB,EAAEf,iBAAiB,CAAC;gBACzDyC,IAAI;gBACJC,QAAQ;gBACRC,UAAU;gBACVC,YAAY;gBACZC,QAAQ;YACV;YAEA,MAAMzE,YAAY;gBAAEqE,IAAI;gBAAeK,UAAU;YAAK;YAEtD,oFAAoF;YACpFnF,OAAOO,QAAQ2C,eAAe,EAAEmC,gBAAgB;YAChDrF,OAAOO,QAAQyC,mBAAmB,EAAEqC,gBAAgB;QACtD;IACF;AACF"}

package/dist/commands/list-tokens.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Options for list-tokens command
+ */
+export interface ListTokensCommandOptions {
+    /** Enable debug mode */
+    debug?: boolean;
+}
+/**
+ * Handle the `payloadcms-figma list-tokens` command
+ *
+ * Displays stored token information including OAuth and project tokens.
+ *
+ * @param _options - Command options (unused)
+ */
+export declare function listTokensCommand(_options?: ListTokensCommandOptions): void;
+//# sourceMappingURL=list-tokens.d.ts.map

package/dist/commands/list-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-tokens.d.ts","sourceRoot":"","sources":["../../src/commands/list-tokens.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,GAAE,wBAA6B,GAAG,IAAI,CA6C/E"}

package/dist/commands/list-tokens.js

@@ -0,0 +1,44 @@
+import * as p from '@clack/prompts';
+import pc from 'picocolors';
+import { TokenStore } from '../auth/token-store.js';
+import { formatTimestamp, maskToken, showProjectTokens } from '../utils/token-display.js';
+/**
+ * Handle the `payloadcms-figma list-tokens` command
+ *
+ * Displays stored token information including OAuth and project tokens.
+ *
+ * @param _options - Command options (unused)
+ */ export function listTokensCommand(_options = {}) {
+    const tokenStore = new TokenStore();
+    const tokens = tokenStore.getTokens();
+    if (!tokens) {
+        p.log.warn(pc.yellow('No tokens found. Not authenticated.'));
+        p.note(`Run ${pc.cyan('payloadcms-figma login')} to authenticate`, 'Tip');
+        return;
+    }
+    const isValid = tokenStore.hasValidTokens();
+    const status = isValid ? pc.green('✓ Valid') : pc.red('✗ Expired');
+    p.log.step(pc.bold('Stored Tokens'));
+    // Build OAuth token info display
+    const lines = [
+        `Status:         ${status}`,
+        `Access Token:   ${maskToken(tokens.accessToken)}`,
+        `Refresh Token:  ${maskToken(tokens.refreshToken)}`,
+        `Expires:        ${formatTimestamp(tokens.expiresAt)}`
+    ];
+    if (tokens.userId) {
+        lines.push(`User ID:        ${tokens.userId}`);
+    }
+    if (tokens.scopes && tokens.scopes.length > 0) {
+        lines.push(`Scopes:         ${tokens.scopes.join(', ')}`);
+    }
+    lines.push(`Storage Path:   ${pc.dim(tokenStore.getStoragePath())}`);
+    p.note(lines.join('\n'), 'OAuth Tokens');
+    if (!isValid) {
+        p.note(`Tokens have expired. Run ${pc.cyan('payloadcms-figma login')} to re-authenticate`, 'Action Required');
+    }
+    // Show project tokens if any exist
+    showProjectTokens(tokenStore);
+}
+
+//# sourceMappingURL=list-tokens.js.map

package/dist/commands/list-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/commands/list-tokens.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport { TokenStore } from '../auth/token-store.js'\nimport { formatTimestamp, maskToken, showProjectTokens } from '../utils/token-display.js'\n\n/**\n * Options for list-tokens command\n */\nexport interface ListTokensCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n}\n\n/**\n * Handle the `payloadcms-figma list-tokens` command\n *\n * Displays stored token information including OAuth and project tokens.\n *\n * @param _options - Command options (unused)\n */\nexport function listTokensCommand(_options: ListTokensCommandOptions = {}): void {\n  const tokenStore = new TokenStore()\n\n  const tokens = tokenStore.getTokens()\n\n  if (!tokens) {\n    p.log.warn(pc.yellow('No tokens found. Not authenticated.'))\n    p.note(`Run ${pc.cyan('payloadcms-figma login')} to authenticate`, 'Tip')\n    return\n  }\n\n  const isValid = tokenStore.hasValidTokens()\n  const status = isValid ? pc.green('✓ Valid') : pc.red('✗ Expired')\n\n  p.log.step(pc.bold('Stored Tokens'))\n\n  // Build OAuth token info display\n  const lines = [\n    `Status:         ${status}`,\n    `Access Token:   ${maskToken(tokens.accessToken)}`,\n    `Refresh Token:  ${maskToken(tokens.refreshToken)}`,\n    `Expires:        ${formatTimestamp(tokens.expiresAt)}`,\n  ]\n\n  if (tokens.userId) {\n    lines.push(`User ID:        ${tokens.userId}`)\n  }\n\n  if (tokens.scopes && tokens.scopes.length > 0) {\n    lines.push(`Scopes:         ${tokens.scopes.join(', ')}`)\n  }\n\n  lines.push(`Storage Path:   ${pc.dim(tokenStore.getStoragePath())}`)\n\n  p.note(lines.join('\\n'), 'OAuth Tokens')\n\n  if (!isValid) {\n    p.note(\n      `Tokens have expired. Run ${pc.cyan('payloadcms-figma login')} to re-authenticate`,\n      'Action Required',\n    )\n  }\n\n  // Show project tokens if any exist\n  showProjectTokens(tokenStore)\n}\n"],"names":["p","pc","TokenStore","formatTimestamp","maskToken","showProjectTokens","listTokensCommand","_options","tokenStore","tokens","getTokens","log","warn","yellow","note","cyan","isValid","hasValidTokens","status","green","red","step","bold","lines","accessToken","refreshToken","expiresAt","userId","push","scopes","length","join","dim","getStoragePath"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAE3B,SAASC,UAAU,QAAQ,yBAAwB;AACnD,SAASC,eAAe,EAAEC,SAAS,EAAEC,iBAAiB,QAAQ,4BAA2B;AAUzF;;;;;;CAMC,GACD,OAAO,SAASC,kBAAkBC,WAAqC,CAAC,CAAC;IACvE,MAAMC,aAAa,IAAIN;IAEvB,MAAMO,SAASD,WAAWE,SAAS;IAEnC,IAAI,CAACD,QAAQ;QACXT,EAAEW,GAAG,CAACC,IAAI,CAACX,GAAGY,MAAM,CAAC;QACrBb,EAAEc,IAAI,CAAC,CAAC,IAAI,EAAEb,GAAGc,IAAI,CAAC,0BAA0B,gBAAgB,CAAC,EAAE;QACnE;IACF;IAEA,MAAMC,UAAUR,WAAWS,cAAc;IACzC,MAAMC,SAASF,UAAUf,GAAGkB,KAAK,CAAC,aAAalB,GAAGmB,GAAG,CAAC;IAEtDpB,EAAEW,GAAG,CAACU,IAAI,CAACpB,GAAGqB,IAAI,CAAC;IAEnB,iCAAiC;IACjC,MAAMC,QAAQ;QACZ,CAAC,gBAAgB,EAAEL,QAAQ;QAC3B,CAAC,gBAAgB,EAAEd,UAAUK,OAAOe,WAAW,GAAG;QAClD,CAAC,gBAAgB,EAAEpB,UAAUK,OAAOgB,YAAY,GAAG;QACnD,CAAC,gBAAgB,EAAEtB,gBAAgBM,OAAOiB,SAAS,GAAG;KACvD;IAED,IAAIjB,OAAOkB,MAAM,EAAE;QACjBJ,MAAMK,IAAI,CAAC,CAAC,gBAAgB,EAAEnB,OAAOkB,MAAM,EAAE;IAC/C;IAEA,IAAIlB,OAAOoB,MAAM,IAAIpB,OAAOoB,MAAM,CAACC,MAAM,GAAG,GAAG;QAC7CP,MAAMK,IAAI,CAAC,CAAC,gBAAgB,EAAEnB,OAAOoB,MAAM,CAACE,IAAI,CAAC,OAAO;IAC1D;IAEAR,MAAMK,IAAI,CAAC,CAAC,gBAAgB,EAAE3B,GAAG+B,GAAG,CAACxB,WAAWyB,cAAc,KAAK;IAEnEjC,EAAEc,IAAI,CAACS,MAAMQ,IAAI,CAAC,OAAO;IAEzB,IAAI,CAACf,SAAS;QACZhB,EAAEc,IAAI,CACJ,CAAC,yBAAyB,EAAEb,GAAGc,IAAI,CAAC,0BAA0B,mBAAmB,CAAC,EAClF;IAEJ;IAEA,mCAAmC;IACnCV,kBAAkBG;AACpB"}

package/dist/commands/login.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Options for login command
+ */
+export interface LoginCommandOptions {
+    /** Enable debug mode */
+    debug?: boolean;
+}
+/**
+ * Handle the `payloadcms-figma login` command
+ *
+ * Authenticates the user with Figma OAuth2 and stores tokens locally.
+ * If valid tokens already exist, shows an error message.
+ *
+ * @param options - Command options
+ */
+export declare function loginCommand(options?: LoginCommandOptions): Promise<void>;
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BnF"}

package/dist/commands/login.js

@@ -0,0 +1,69 @@
+import * as p from '@clack/prompts';
+import pc from 'picocolors';
+import { executeOAuthFlow, getValidAccessToken, OAuthFlowError } from '../auth/oauth-flow.js';
+import { TokenStore } from '../auth/token-store.js';
+import { OAUTH_CONFIG } from '../config/oauth.js';
+import * as log from '../utils/log.js';
+/**
+ * Handle the `payloadcms-figma login` command
+ *
+ * Authenticates the user with Figma OAuth2 and stores tokens locally.
+ * If valid tokens already exist, shows an error message.
+ *
+ * @param options - Command options
+ */ export async function loginCommand(options = {}) {
+    const tokenStore = new TokenStore();
+    // Check for existing valid tokens
+    try {
+        const existingToken = await getValidAccessToken(tokenStore);
+        if (existingToken) {
+            const tokens = tokenStore.getTokens();
+            p.log.warn(pc.yellow('Already logged in'));
+            if (tokens?.userId) {
+                log.info(`User ID: ${tokens.userId}`);
+            }
+            log.info(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`);
+            p.note(`To re-authenticate, first run ${pc.cyan('payloadcms-figma logout')}`, 'Tip');
+            return;
+        }
+    } catch  {
+        // Token refresh failed - continue with new auth flow
+        log.warning('Existing tokens are invalid. Starting new authentication...');
+    }
+    // Start OAuth flow
+    await handleAuthentication({
+        debug: options.debug,
+        tokenStore
+    });
+}
+/**
+ * Handle authentication flow
+ */ async function handleAuthentication({ debug, tokenStore }) {
+    try {
+        // Execute OAuth flow
+        const result = await executeOAuthFlow(tokenStore, {
+            clientId: OAUTH_CONFIG.clientId,
+            redirectUri: OAUTH_CONFIG.redirectUri,
+            scopes: OAUTH_CONFIG.scopes
+        });
+        p.log.success(pc.green('✓ You are now authenticated with Figma'));
+        if (result.userId) {
+            log.debug(`User ID: ${result.userId}`);
+        }
+        log.debug(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`);
+        // Show next steps
+        p.note(`  ${pc.cyan('@payloadcms/figma init')}  Create a new CMS instance`, 'Next Steps');
+    } catch (error) {
+        if (error instanceof OAuthFlowError) {
+            log.error(error.message);
+            if (error.cause) {
+                log.debug(`Cause: ${error.cause.message}`);
+            }
+        } else {
+            log.error(error instanceof Error ? error.message : 'Unknown error');
+        }
+        process.exit(1);
+    }
+}
+
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/commands/login.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport { executeOAuthFlow, getValidAccessToken, OAuthFlowError } from '../auth/oauth-flow.js'\nimport { TokenStore } from '../auth/token-store.js'\nimport { OAUTH_CONFIG } from '../config/oauth.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Options for login command\n */\nexport interface LoginCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n}\n\n/**\n * Handle the `payloadcms-figma login` command\n *\n * Authenticates the user with Figma OAuth2 and stores tokens locally.\n * If valid tokens already exist, shows an error message.\n *\n * @param options - Command options\n */\nexport async function loginCommand(options: LoginCommandOptions = {}): Promise<void> {\n  const tokenStore = new TokenStore()\n\n  // Check for existing valid tokens\n  try {\n    const existingToken = await getValidAccessToken(tokenStore)\n    if (existingToken) {\n      const tokens = tokenStore.getTokens()\n      p.log.warn(pc.yellow('Already logged in'))\n      if (tokens?.userId) {\n        log.info(`User ID: ${tokens.userId}`)\n      }\n      log.info(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`)\n      p.note(`To re-authenticate, first run ${pc.cyan('payloadcms-figma logout')}`, 'Tip')\n      return\n    }\n  } catch {\n    // Token refresh failed - continue with new auth flow\n    log.warning('Existing tokens are invalid. Starting new authentication...')\n  }\n\n  // Start OAuth flow\n  await handleAuthentication({\n    debug: options.debug,\n    tokenStore,\n  })\n}\n\n/**\n * Handle authentication flow\n */\nasync function handleAuthentication({\n  debug,\n  tokenStore,\n}: {\n  debug?: boolean\n  tokenStore: TokenStore\n}): Promise<void> {\n  try {\n    // Execute OAuth flow\n    const result = await executeOAuthFlow(tokenStore, {\n      clientId: OAUTH_CONFIG.clientId,\n      redirectUri: OAUTH_CONFIG.redirectUri,\n      scopes: OAUTH_CONFIG.scopes,\n    })\n\n    p.log.success(pc.green('✓ You are now authenticated with Figma'))\n\n    if (result.userId) {\n      log.debug(`User ID: ${result.userId}`)\n    }\n\n    log.debug(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`)\n\n    // Show next steps\n    p.note(`  ${pc.cyan('@payloadcms/figma init')}  Create a new CMS instance`, 'Next Steps')\n  } catch (error) {\n    if (error instanceof OAuthFlowError) {\n      log.error(error.message)\n\n      if (error.cause) {\n        log.debug(`Cause: ${error.cause.message}`)\n      }\n    } else {\n      log.error(error instanceof Error ? error.message : 'Unknown error')\n    }\n\n    process.exit(1)\n  }\n}\n"],"names":["p","pc","executeOAuthFlow","getValidAccessToken","OAuthFlowError","TokenStore","OAUTH_CONFIG","log","loginCommand","options","tokenStore","existingToken","tokens","getTokens","warn","yellow","userId","info","dim","getStoragePath","note","cyan","warning","handleAuthentication","debug","result","clientId","redirectUri","scopes","success","green","error","message","cause","Error","process","exit"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAE3B,SAASC,gBAAgB,EAAEC,mBAAmB,EAAEC,cAAc,QAAQ,wBAAuB;AAC7F,SAASC,UAAU,QAAQ,yBAAwB;AACnD,SAASC,YAAY,QAAQ,qBAAoB;AACjD,YAAYC,SAAS,kBAAiB;AAUtC;;;;;;;CAOC,GACD,OAAO,eAAeC,aAAaC,UAA+B,CAAC,CAAC;IAClE,MAAMC,aAAa,IAAIL;IAEvB,kCAAkC;IAClC,IAAI;QACF,MAAMM,gBAAgB,MAAMR,oBAAoBO;QAChD,IAAIC,eAAe;YACjB,MAAMC,SAASF,WAAWG,SAAS;YACnCb,EAAEO,GAAG,CAACO,IAAI,CAACb,GAAGc,MAAM,CAAC;YACrB,IAAIH,QAAQI,QAAQ;gBAClBT,IAAIU,IAAI,CAAC,CAAC,SAAS,EAAEL,OAAOI,MAAM,EAAE;YACtC;YACAT,IAAIU,IAAI,CAAC,CAAC,eAAe,EAAEhB,GAAGiB,GAAG,CAACR,WAAWS,cAAc,KAAK;YAChEnB,EAAEoB,IAAI,CAAC,CAAC,8BAA8B,EAAEnB,GAAGoB,IAAI,CAAC,4BAA4B,EAAE;YAC9E;QACF;IACF,EAAE,OAAM;QACN,qDAAqD;QACrDd,IAAIe,OAAO,CAAC;IACd;IAEA,mBAAmB;IACnB,MAAMC,qBAAqB;QACzBC,OAAOf,QAAQe,KAAK;QACpBd;IACF;AACF;AAEA;;CAEC,GACD,eAAea,qBAAqB,EAClCC,KAAK,EACLd,UAAU,EAIX;IACC,IAAI;QACF,qBAAqB;QACrB,MAAMe,SAAS,MAAMvB,iBAAiBQ,YAAY;YAChDgB,UAAUpB,aAAaoB,QAAQ;YAC/BC,aAAarB,aAAaqB,WAAW;YACrCC,QAAQtB,aAAasB,MAAM;QAC7B;QAEA5B,EAAEO,GAAG,CAACsB,OAAO,CAAC5B,GAAG6B,KAAK,CAAC;QAEvB,IAAIL,OAAOT,MAAM,EAAE;YACjBT,IAAIiB,KAAK,CAAC,CAAC,SAAS,EAAEC,OAAOT,MAAM,EAAE;QACvC;QAEAT,IAAIiB,KAAK,CAAC,CAAC,eAAe,EAAEvB,GAAGiB,GAAG,CAACR,WAAWS,cAAc,KAAK;QAEjE,kBAAkB;QAClBnB,EAAEoB,IAAI,CAAC,CAAC,EAAE,EAAEnB,GAAGoB,IAAI,CAAC,0BAA0B,2BAA2B,CAAC,EAAE;IAC9E,EAAE,OAAOU,OAAO;QACd,IAAIA,iBAAiB3B,gBAAgB;YACnCG,IAAIwB,KAAK,CAACA,MAAMC,OAAO;YAEvB,IAAID,MAAME,KAAK,EAAE;gBACf1B,IAAIiB,KAAK,CAAC,CAAC,OAAO,EAAEO,MAAME,KAAK,CAACD,OAAO,EAAE;YAC3C;QACF,OAAO;YACLzB,IAAIwB,KAAK,CAACA,iBAAiBG,QAAQH,MAAMC,OAAO,GAAG;QACrD;QAEAG,QAAQC,IAAI,CAAC;IACf;AACF"}

package/dist/commands/logout.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Options for logout command
+ */
+export interface LogoutCommandOptions {
+    /** Enable debug mode */
+    debug?: boolean;
+}
+/**
+ * Handle the `payloadcms-figma logout` command
+ *
+ * Clears all stored tokens (OAuth and project tokens) after confirmation.
+ *
+ * @param _options - Command options (unused)
+ */
+export declare function logoutCommand(_options?: LogoutCommandOptions): Promise<void>;
+//# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,QAAQ,GAAE,oBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCtF"}

package/dist/commands/logout.js

@@ -0,0 +1,43 @@
+import * as p from '@clack/prompts';
+import pc from 'picocolors';
+import { TokenStore } from '../auth/token-store.js';
+import * as log from '../utils/log.js';
+/**
+ * Handle the `payloadcms-figma logout` command
+ *
+ * Clears all stored tokens (OAuth and project tokens) after confirmation.
+ *
+ * @param _options - Command options (unused)
+ */ export async function logoutCommand(_options = {}) {
+    const tokenStore = new TokenStore();
+    const hasTokens = tokenStore.getTokens() !== null;
+    if (!hasTokens) {
+        p.log.warn(pc.yellow('No tokens found. Already logged out.'));
+        return;
+    }
+    // Confirm logout
+    const confirmed = await p.confirm({
+        initialValue: false,
+        message: 'This will clear all OAuth and project tokens. Continue?'
+    });
+    if (p.isCancel(confirmed) || !confirmed) {
+        p.log.info('Logout cancelled');
+        return;
+    }
+    const s = p.spinner();
+    s.start('Clearing tokens...');
+    try {
+        // Clear OAuth tokens
+        tokenStore.clearTokens();
+        // Clear all project tokens
+        tokenStore.clearAllProjectTokens();
+        s.stop(pc.green('✓ Logged out successfully'));
+        p.log.step('All OAuth and project tokens have been cleared');
+    } catch (error) {
+        s.stop(pc.red('✗ Failed to clear tokens'));
+        log.error(error instanceof Error ? error.message : 'Unknown error');
+        process.exit(1);
+    }
+}
+
+//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/commands/logout.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport { TokenStore } from '../auth/token-store.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Options for logout command\n */\nexport interface LogoutCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n}\n\n/**\n * Handle the `payloadcms-figma logout` command\n *\n * Clears all stored tokens (OAuth and project tokens) after confirmation.\n *\n * @param _options - Command options (unused)\n */\nexport async function logoutCommand(_options: LogoutCommandOptions = {}): Promise<void> {\n  const tokenStore = new TokenStore()\n\n  const hasTokens = tokenStore.getTokens() !== null\n\n  if (!hasTokens) {\n    p.log.warn(pc.yellow('No tokens found. Already logged out.'))\n    return\n  }\n\n  // Confirm logout\n  const confirmed = await p.confirm({\n    initialValue: false,\n    message: 'This will clear all OAuth and project tokens. Continue?',\n  })\n\n  if (p.isCancel(confirmed) || !confirmed) {\n    p.log.info('Logout cancelled')\n    return\n  }\n\n  const s = p.spinner()\n  s.start('Clearing tokens...')\n\n  try {\n    // Clear OAuth tokens\n    tokenStore.clearTokens()\n    // Clear all project tokens\n    tokenStore.clearAllProjectTokens()\n    s.stop(pc.green('✓ Logged out successfully'))\n    p.log.step('All OAuth and project tokens have been cleared')\n  } catch (error) {\n    s.stop(pc.red('✗ Failed to clear tokens'))\n    log.error(error instanceof Error ? error.message : 'Unknown error')\n    process.exit(1)\n  }\n}\n"],"names":["p","pc","TokenStore","log","logoutCommand","_options","tokenStore","hasTokens","getTokens","warn","yellow","confirmed","confirm","initialValue","message","isCancel","info","s","spinner","start","clearTokens","clearAllProjectTokens","stop","green","step","error","red","Error","process","exit"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAE3B,SAASC,UAAU,QAAQ,yBAAwB;AACnD,YAAYC,SAAS,kBAAiB;AAUtC;;;;;;CAMC,GACD,OAAO,eAAeC,cAAcC,WAAiC,CAAC,CAAC;IACrE,MAAMC,aAAa,IAAIJ;IAEvB,MAAMK,YAAYD,WAAWE,SAAS,OAAO;IAE7C,IAAI,CAACD,WAAW;QACdP,EAAEG,GAAG,CAACM,IAAI,CAACR,GAAGS,MAAM,CAAC;QACrB;IACF;IAEA,iBAAiB;IACjB,MAAMC,YAAY,MAAMX,EAAEY,OAAO,CAAC;QAChCC,cAAc;QACdC,SAAS;IACX;IAEA,IAAId,EAAEe,QAAQ,CAACJ,cAAc,CAACA,WAAW;QACvCX,EAAEG,GAAG,CAACa,IAAI,CAAC;QACX;IACF;IAEA,MAAMC,IAAIjB,EAAEkB,OAAO;IACnBD,EAAEE,KAAK,CAAC;IAER,IAAI;QACF,qBAAqB;QACrBb,WAAWc,WAAW;QACtB,2BAA2B;QAC3Bd,WAAWe,qBAAqB;QAChCJ,EAAEK,IAAI,CAACrB,GAAGsB,KAAK,CAAC;QAChBvB,EAAEG,GAAG,CAACqB,IAAI,CAAC;IACb,EAAE,OAAOC,OAAO;QACdR,EAAEK,IAAI,CAACrB,GAAGyB,GAAG,CAAC;QACdvB,IAAIsB,KAAK,CAACA,iBAAiBE,QAAQF,MAAMX,OAAO,GAAG;QACnDc,QAAQC,IAAI,CAAC;IACf;AACF"}

package/dist/config/oauth.d.ts

@@ -0,0 +1,19 @@
+import type { OAuthConfig } from '../auth/types.js';
+export declare const URLS: Record<'prod' | 'staging', Pick<OAuthConfig, 'authorizationUrl' | 'refreshUrl' | 'tokenUrl'>>;
+/**
+ * Figma OAuth2 configuration for public CLI client
+ *
+ * This is a PUBLIC OAuth client using PKCE (Proof Key for Code Exchange).
+ * No client secret is used because CLIs cannot securely store secrets.
+ * PKCE provides security through the code_verifier/code_challenge mechanism.
+ *
+ * For production use, register a public OAuth app with Figma.
+ * To register an OAuth app, visit: https://www.figma.com/developers/api#oauth2
+ */
+export declare const OAUTH_CONFIG: OAuthConfig;
+/**
+ * Buffer time (in seconds) before token expiration to consider token as expired
+ * This helps avoid using tokens that are about to expire
+ */
+export declare const TOKEN_EXPIRY_BUFFER_SECONDS = 300;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/config/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/config/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAInD,eAAO,MAAM,IAAI,EAAE,MAAM,CACvB,MAAM,GAAG,SAAS,EAClB,IAAI,CAAC,WAAW,EAAE,kBAAkB,GAAG,YAAY,GAAG,UAAU,CAAC,CAYlE,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,EAAE,WAe1B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAA"}

package/dist/config/oauth.js

@@ -0,0 +1,43 @@
+import { FIGMA_CLIENT_IDS } from '../constants.js';
+export const URLS = {
+    prod: {
+        authorizationUrl: 'https://www.figma.com/oauth',
+        refreshUrl: 'https://api.figma.com/v1/oauth/refresh',
+        tokenUrl: 'https://api.figma.com/v1/oauth/token'
+    },
+    staging: {
+        authorizationUrl: 'https://staging.figma.com/oauth',
+        refreshUrl: 'https://api.staging.figma.com/v1/oauth/refresh',
+        tokenUrl: 'https://api.staging.figma.com/v1/oauth/token'
+    }
+};
+/**
+ * Figma OAuth2 configuration for public CLI client
+ *
+ * This is a PUBLIC OAuth client using PKCE (Proof Key for Code Exchange).
+ * No client secret is used because CLIs cannot securely store secrets.
+ * PKCE provides security through the code_verifier/code_challenge mechanism.
+ *
+ * For production use, register a public OAuth app with Figma.
+ * To register an OAuth app, visit: https://www.figma.com/developers/api#oauth2
+ */ export const OAUTH_CONFIG = {
+    // OAuth client ID (public client)
+    // Uses staging client ID by default since we use staging endpoints
+    clientId: process.env.FIGMA_CLIENT_ID || FIGMA_CLIENT_IDS.staging,
+    // No client secret - this is a public OAuth client using PKCE
+    // Public clients cannot securely store secrets in CLI environments
+    redirectUri: process.env.FIGMA_REDIRECT_URI || 'http://localhost:3000/callback',
+    // Only current_user:read scope is needed for basic user info
+    scopes: [
+        'current_user:read'
+    ],
+    // TODO: Dynamically choose between prod and staging based on environment
+    ...URLS.staging
+};
+/**
+ * Buffer time (in seconds) before token expiration to consider token as expired
+ * This helps avoid using tokens that are about to expire
+ */ export const TOKEN_EXPIRY_BUFFER_SECONDS = 300 // 5 minutes
+;
+
+//# sourceMappingURL=oauth.js.map