@payloadcms/figma 0.0.1-alpha.0

package/dist/api/control-plane.spec.js

@@ -0,0 +1,296 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { createDeployment, createTenant, getTenantDetails, listTenants, performDeployment } from './control-plane.js';
+describe('control-plane API (mocked)', ()=>{
+    beforeEach(()=>{
+        vi.clearAllMocks();
+    });
+    afterEach(()=>{
+        vi.restoreAllMocks();
+    });
+    describe('listTenants', ()=>{
+        it('should return array of tenant instances', async ()=>{
+            const tenants = await listTenants('mock-access-token');
+            expect(Array.isArray(tenants)).toBe(true);
+            expect(tenants.length).toBeGreaterThan(0);
+        });
+        it('should return tenants with required fields', async ()=>{
+            const tenants = await listTenants('mock-access-token');
+            tenants.forEach((tenant)=>{
+                expect(tenant).toHaveProperty('id');
+                expect(tenant).toHaveProperty('domain');
+                expect(tenant).toHaveProperty('status');
+                expect(tenant).toHaveProperty('parentType');
+                expect(tenant).toHaveProperty('parentId');
+                expect(tenant).toHaveProperty('createdAt');
+            });
+        });
+        it('should return tenants with valid status', async ()=>{
+            const tenants = await listTenants('mock-access-token');
+            tenants.forEach((tenant)=>{
+                expect([
+                    'active',
+                    'provisioning',
+                    'inactive'
+                ]).toContain(tenant.status);
+            });
+        });
+        it('should return tenants with valid parentType', async ()=>{
+            const tenants = await listTenants('mock-access-token');
+            tenants.forEach((tenant)=>{
+                expect([
+                    'team',
+                    'org',
+                    'workspace'
+                ]).toContain(tenant.parentType);
+            });
+        });
+        it('should handle different access tokens', async ()=>{
+            const tenants1 = await listTenants('token-1');
+            const tenants2 = await listTenants('token-2');
+            // Mock should return same structure regardless of token
+            expect(tenants1.length).toBe(tenants2.length);
+        });
+    });
+    describe('createTenant', ()=>{
+        it('should create tenant with name', async ()=>{
+            const tenant = await createTenant('mock-access-token', {
+                name: 'test-cms'
+            });
+            expect(tenant).toHaveProperty('id');
+            expect(tenant).toHaveProperty('domain');
+            expect(tenant.domain).toContain('test-cms');
+        });
+        it('should return tenant with provisioning status', async ()=>{
+            const tenant = await createTenant('mock-access-token', {
+                name: 'new-cms'
+            });
+            expect(tenant.status).toBe('provisioning');
+        });
+        it('should generate unique tenant IDs', async ()=>{
+            const tenant1 = await createTenant('mock-access-token', {
+                name: 'cms-1'
+            });
+            const tenant2 = await createTenant('mock-access-token', {
+                name: 'cms-2'
+            });
+            expect(tenant1.id).not.toBe(tenant2.id);
+        });
+        it('should handle names with special characters', async ()=>{
+            const tenant = await createTenant('mock-access-token', {
+                name: 'My Test CMS 123!'
+            });
+            // Should convert to slug format
+            expect(tenant.domain).toMatch(/^[a-z0-9-]+\.figmacms\.com$/);
+        });
+        it('should include optional parent fields', async ()=>{
+            const tenant = await createTenant('mock-access-token', {
+                name: 'test-cms',
+                parentId: 'org_custom',
+                parentType: 'org'
+            });
+            expect(tenant.parentType).toBe('org');
+            expect(tenant.parentId).toBe('org_custom');
+        });
+        it('should default to team parent type', async ()=>{
+            const tenant = await createTenant('mock-access-token', {
+                name: 'test-cms'
+            });
+            expect(tenant.parentType).toBe('team');
+        });
+        it('should include createdAt timestamp', async ()=>{
+            const tenant = await createTenant('mock-access-token', {
+                name: 'test-cms'
+            });
+            expect(tenant.createdAt).toBeDefined();
+            expect(new Date(tenant.createdAt).getTime()).toBeGreaterThan(0);
+        });
+    });
+    describe('getTenantDetails', ()=>{
+        it('should return tenant details for given ID', async ()=>{
+            const tenant = await getTenantDetails('mock-access-token', 'tenant_abc123');
+            expect(tenant).toHaveProperty('id');
+            expect(tenant.id).toBe('tenant_abc123');
+        });
+        it('should return tenant with all required fields', async ()=>{
+            const tenant = await getTenantDetails('mock-access-token', 'tenant_test');
+            expect(tenant).toHaveProperty('id');
+            expect(tenant).toHaveProperty('domain');
+            expect(tenant).toHaveProperty('status');
+            expect(tenant).toHaveProperty('parentType');
+            expect(tenant).toHaveProperty('parentId');
+            expect(tenant).toHaveProperty('createdAt');
+        });
+        it('should return active status for mock tenant', async ()=>{
+            const tenant = await getTenantDetails('mock-access-token', 'tenant_test');
+            expect(tenant.status).toBe('active');
+        });
+        it('should handle different tenant IDs', async ()=>{
+            const tenant1 = await getTenantDetails('mock-access-token', 'tenant_1');
+            const tenant2 = await getTenantDetails('mock-access-token', 'tenant_2');
+            expect(tenant1.id).toBe('tenant_1');
+            expect(tenant2.id).toBe('tenant_2');
+        });
+    });
+    describe('createDeployment', ()=>{
+        it('should return deployment ID and upload URLs', async ()=>{
+            const result = await createDeployment('mock-token', 'tenant_123', {
+                staticAssets: [
+                    '_next/static/abc.js',
+                    '_next/static/xyz.css'
+                ]
+            });
+            expect(result).toHaveProperty('deploymentId');
+            expect(result).toHaveProperty('codeUploadUrl');
+            expect(result).toHaveProperty('staticAssetUploadUrls');
+            expect(result.deploymentId).toMatch(/^deploy_/);
+        });
+        it('should include upload URL for each static asset', async ()=>{
+            const result = await createDeployment('mock-token', 'tenant_456', {
+                staticAssets: [
+                    '_next/static/abc.js',
+                    '_next/static/xyz.css'
+                ]
+            });
+            expect(result.staticAssetUploadUrls).toHaveProperty('_next/static/abc.js');
+            expect(result.staticAssetUploadUrls).toHaveProperty('_next/static/xyz.css');
+            expect(result.staticAssetUploadUrls['_next/static/abc.js']).toContain('https://');
+        });
+        it('should return S3 upload URL format', async ()=>{
+            const result = await createDeployment('mock-token', 'tenant_789', {
+                staticAssets: [
+                    '_next/static/test.js'
+                ]
+            });
+            expect(result.codeUploadUrl).toMatch(/^https:\/\/.*\.s3\..*\.amazonaws\.com\//);
+            expect(result.staticAssetUploadUrls['_next/static/test.js']).toMatch(/^https:\/\/.*\.s3\..*\.amazonaws\.com\//);
+        });
+        it('should handle empty static assets array', async ()=>{
+            const result = await createDeployment('mock-token', 'tenant_empty', {
+                staticAssets: []
+            });
+            expect(result.deploymentId).toBeDefined();
+            expect(result.codeUploadUrl).toBeDefined();
+            expect(Object.keys(result.staticAssetUploadUrls)).toHaveLength(0);
+        });
+        it('should generate unique deployment IDs', async ()=>{
+            const result1 = await createDeployment('mock-token', 'tenant_abc', {
+                staticAssets: []
+            });
+            const result2 = await createDeployment('mock-token', 'tenant_abc', {
+                staticAssets: []
+            });
+            expect(result1.deploymentId).not.toBe(result2.deploymentId);
+        });
+    });
+    describe('performDeployment', ()=>{
+        it('should deploy using deployment ID', async ()=>{
+            const result = await performDeployment('mock-token', 'tenant_123', {
+                deploymentId: 'deploy_abc123'
+            });
+            expect(result).toHaveProperty('deploymentId');
+            expect(result).toHaveProperty('message');
+            expect(result.deploymentId).toBe('deploy_abc123');
+        });
+        it('should return success message', async ()=>{
+            const result = await performDeployment('mock-token', 'tenant_456', {
+                deploymentId: 'deploy_xyz789'
+            });
+            expect(result.message).toBeDefined();
+            expect(result.message).toBe('Deployment initiated successfully');
+            expect(result.message.length).toBeGreaterThan(0);
+        });
+        it('should handle different tenant IDs', async ()=>{
+            const result1 = await performDeployment('mock-token', 'tenant_aaa', {
+                deploymentId: 'deploy_1'
+            });
+            const result2 = await performDeployment('mock-token', 'tenant_bbb', {
+                deploymentId: 'deploy_2'
+            });
+            expect(result1.deploymentId).toBe('deploy_1');
+            expect(result2.deploymentId).toBe('deploy_2');
+        });
+    });
+    describe('error handling', ()=>{
+        beforeEach(()=>{
+            // Force real API mode for error testing
+            process.env.FIGMA_MOCK_CONTROL_PLANE = 'false';
+        });
+        afterEach(()=>{
+            // Restore mock mode
+            delete process.env.FIGMA_MOCK_CONTROL_PLANE;
+        });
+        it('createDeployment should throw ControlPlaneError on API failure', async ()=>{
+            // Mock fetch to return error
+            global.fetch = vi.fn().mockResolvedValue({
+                ok: false,
+                status: 500,
+                statusText: 'Internal Server Error'
+            });
+            await expect(createDeployment('bad-token', 'tenant_fail', {
+                staticAssets: []
+            })).rejects.toThrow('Failed to create deployment: 500 Internal Server Error');
+        });
+        it('performDeployment should throw ControlPlaneError on API failure', async ()=>{
+            // Mock fetch to return error
+            global.fetch = vi.fn().mockResolvedValue({
+                ok: false,
+                status: 404,
+                statusText: 'Not Found'
+            });
+            await expect(performDeployment('bad-token', 'tenant_missing', {
+                deploymentId: 'deploy_notfound'
+            })).rejects.toThrow('Failed to perform deployment: 404 Not Found');
+        });
+        it('createDeployment should map snake_case API response to camelCase', async ()=>{
+            // Mock fetch to return successful API response with snake_case
+            global.fetch = vi.fn().mockResolvedValue({
+                json: ()=>({
+                        error: false,
+                        meta: {
+                            code_upload_url: 'https://s3.amazonaws.com/code/upload',
+                            deployment_id: 'deploy_test123',
+                            static_asset_upload_urls: {
+                                '_next/static/test.js': 'https://s3.amazonaws.com/static/test.js'
+                            }
+                        },
+                        status: 200
+                    }),
+                ok: true
+            });
+            const result = await createDeployment('token', 'tenant_123', {
+                staticAssets: [
+                    '_next/static/test.js'
+                ]
+            });
+            // Verify response is mapped to camelCase
+            expect(result.deploymentId).toBe('deploy_test123');
+            expect(result.codeUploadUrl).toBe('https://s3.amazonaws.com/code/upload');
+            expect(result.staticAssetUploadUrls).toEqual({
+                '_next/static/test.js': 'https://s3.amazonaws.com/static/test.js'
+            });
+        });
+        it('performDeployment should map snake_case API response to camelCase', async ()=>{
+            // Mock fetch to return successful API response with snake_case
+            global.fetch = vi.fn().mockResolvedValue({
+                json: ()=>({
+                        error: false,
+                        meta: {
+                            deployment_id: 'deploy_abc456',
+                            message: 'Deployment successful',
+                            status: 'deployed'
+                        },
+                        status: 200
+                    }),
+                ok: true
+            });
+            const result = await performDeployment('token', 'tenant_456', {
+                deploymentId: 'deploy_abc456'
+            });
+            // Verify response is mapped to camelCase
+            expect(result.deploymentId).toBe('deploy_abc456');
+            expect(result.message).toBe('Deployment successful');
+        });
+    });
+});
+
+//# sourceMappingURL=control-plane.spec.js.map

package/dist/api/control-plane.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/control-plane.spec.ts"],"sourcesContent":["import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'\n\nimport {\n  createDeployment,\n  createTenant,\n  getTenantDetails,\n  listTenants,\n  performDeployment,\n} from './control-plane.js'\n\ndescribe('control-plane API (mocked)', () => {\n  beforeEach(() => {\n    vi.clearAllMocks()\n  })\n\n  afterEach(() => {\n    vi.restoreAllMocks()\n  })\n\n  describe('listTenants', () => {\n    it('should return array of tenant instances', async () => {\n      const tenants = await listTenants('mock-access-token')\n\n      expect(Array.isArray(tenants)).toBe(true)\n      expect(tenants.length).toBeGreaterThan(0)\n    })\n\n    it('should return tenants with required fields', async () => {\n      const tenants = await listTenants('mock-access-token')\n\n      tenants.forEach((tenant) => {\n        expect(tenant).toHaveProperty('id')\n        expect(tenant).toHaveProperty('domain')\n        expect(tenant).toHaveProperty('status')\n        expect(tenant).toHaveProperty('parentType')\n        expect(tenant).toHaveProperty('parentId')\n        expect(tenant).toHaveProperty('createdAt')\n      })\n    })\n\n    it('should return tenants with valid status', async () => {\n      const tenants = await listTenants('mock-access-token')\n\n      tenants.forEach((tenant) => {\n        expect(['active', 'provisioning', 'inactive']).toContain(tenant.status)\n      })\n    })\n\n    it('should return tenants with valid parentType', async () => {\n      const tenants = await listTenants('mock-access-token')\n\n      tenants.forEach((tenant) => {\n        expect(['team', 'org', 'workspace']).toContain(tenant.parentType)\n      })\n    })\n\n    it('should handle different access tokens', async () => {\n      const tenants1 = await listTenants('token-1')\n      const tenants2 = await listTenants('token-2')\n\n      // Mock should return same structure regardless of token\n      expect(tenants1.length).toBe(tenants2.length)\n    })\n  })\n\n  describe('createTenant', () => {\n    it('should create tenant with name', async () => {\n      const tenant = await createTenant('mock-access-token', {\n        name: 'test-cms',\n      })\n\n      expect(tenant).toHaveProperty('id')\n      expect(tenant).toHaveProperty('domain')\n      expect(tenant.domain).toContain('test-cms')\n    })\n\n    it('should return tenant with provisioning status', async () => {\n      const tenant = await createTenant('mock-access-token', {\n        name: 'new-cms',\n      })\n\n      expect(tenant.status).toBe('provisioning')\n    })\n\n    it('should generate unique tenant IDs', async () => {\n      const tenant1 = await createTenant('mock-access-token', {\n        name: 'cms-1',\n      })\n      const tenant2 = await createTenant('mock-access-token', {\n        name: 'cms-2',\n      })\n\n      expect(tenant1.id).not.toBe(tenant2.id)\n    })\n\n    it('should handle names with special characters', async () => {\n      const tenant = await createTenant('mock-access-token', {\n        name: 'My Test CMS 123!',\n      })\n\n      // Should convert to slug format\n      expect(tenant.domain).toMatch(/^[a-z0-9-]+\\.figmacms\\.com$/)\n    })\n\n    it('should include optional parent fields', async () => {\n      const tenant = await createTenant('mock-access-token', {\n        name: 'test-cms',\n        parentId: 'org_custom',\n        parentType: 'org',\n      })\n\n      expect(tenant.parentType).toBe('org')\n      expect(tenant.parentId).toBe('org_custom')\n    })\n\n    it('should default to team parent type', async () => {\n      const tenant = await createTenant('mock-access-token', {\n        name: 'test-cms',\n      })\n\n      expect(tenant.parentType).toBe('team')\n    })\n\n    it('should include createdAt timestamp', async () => {\n      const tenant = await createTenant('mock-access-token', {\n        name: 'test-cms',\n      })\n\n      expect(tenant.createdAt).toBeDefined()\n      expect(new Date(tenant.createdAt!).getTime()).toBeGreaterThan(0)\n    })\n  })\n\n  describe('getTenantDetails', () => {\n    it('should return tenant details for given ID', async () => {\n      const tenant = await getTenantDetails('mock-access-token', 'tenant_abc123')\n\n      expect(tenant).toHaveProperty('id')\n      expect(tenant.id).toBe('tenant_abc123')\n    })\n\n    it('should return tenant with all required fields', async () => {\n      const tenant = await getTenantDetails('mock-access-token', 'tenant_test')\n\n      expect(tenant).toHaveProperty('id')\n      expect(tenant).toHaveProperty('domain')\n      expect(tenant).toHaveProperty('status')\n      expect(tenant).toHaveProperty('parentType')\n      expect(tenant).toHaveProperty('parentId')\n      expect(tenant).toHaveProperty('createdAt')\n    })\n\n    it('should return active status for mock tenant', async () => {\n      const tenant = await getTenantDetails('mock-access-token', 'tenant_test')\n\n      expect(tenant.status).toBe('active')\n    })\n\n    it('should handle different tenant IDs', async () => {\n      const tenant1 = await getTenantDetails('mock-access-token', 'tenant_1')\n      const tenant2 = await getTenantDetails('mock-access-token', 'tenant_2')\n\n      expect(tenant1.id).toBe('tenant_1')\n      expect(tenant2.id).toBe('tenant_2')\n    })\n  })\n\n  describe('createDeployment', () => {\n    it('should return deployment ID and upload URLs', async () => {\n      const result = await createDeployment('mock-token', 'tenant_123', {\n        staticAssets: ['_next/static/abc.js', '_next/static/xyz.css'],\n      })\n\n      expect(result).toHaveProperty('deploymentId')\n      expect(result).toHaveProperty('codeUploadUrl')\n      expect(result).toHaveProperty('staticAssetUploadUrls')\n      expect(result.deploymentId).toMatch(/^deploy_/)\n    })\n\n    it('should include upload URL for each static asset', async () => {\n      const result = await createDeployment('mock-token', 'tenant_456', {\n        staticAssets: ['_next/static/abc.js', '_next/static/xyz.css'],\n      })\n\n      expect(result.staticAssetUploadUrls).toHaveProperty('_next/static/abc.js')\n      expect(result.staticAssetUploadUrls).toHaveProperty('_next/static/xyz.css')\n      expect(result.staticAssetUploadUrls['_next/static/abc.js']).toContain('https://')\n    })\n\n    it('should return S3 upload URL format', async () => {\n      const result = await createDeployment('mock-token', 'tenant_789', {\n        staticAssets: ['_next/static/test.js'],\n      })\n\n      expect(result.codeUploadUrl).toMatch(/^https:\\/\\/.*\\.s3\\..*\\.amazonaws\\.com\\//)\n      expect(result.staticAssetUploadUrls['_next/static/test.js']).toMatch(\n        /^https:\\/\\/.*\\.s3\\..*\\.amazonaws\\.com\\//,\n      )\n    })\n\n    it('should handle empty static assets array', async () => {\n      const result = await createDeployment('mock-token', 'tenant_empty', {\n        staticAssets: [],\n      })\n\n      expect(result.deploymentId).toBeDefined()\n      expect(result.codeUploadUrl).toBeDefined()\n      expect(Object.keys(result.staticAssetUploadUrls)).toHaveLength(0)\n    })\n\n    it('should generate unique deployment IDs', async () => {\n      const result1 = await createDeployment('mock-token', 'tenant_abc', {\n        staticAssets: [],\n      })\n      const result2 = await createDeployment('mock-token', 'tenant_abc', {\n        staticAssets: [],\n      })\n\n      expect(result1.deploymentId).not.toBe(result2.deploymentId)\n    })\n  })\n\n  describe('performDeployment', () => {\n    it('should deploy using deployment ID', async () => {\n      const result = await performDeployment('mock-token', 'tenant_123', {\n        deploymentId: 'deploy_abc123',\n      })\n\n      expect(result).toHaveProperty('deploymentId')\n      expect(result).toHaveProperty('message')\n      expect(result.deploymentId).toBe('deploy_abc123')\n    })\n\n    it('should return success message', async () => {\n      const result = await performDeployment('mock-token', 'tenant_456', {\n        deploymentId: 'deploy_xyz789',\n      })\n\n      expect(result.message).toBeDefined()\n      expect(result.message).toBe('Deployment initiated successfully')\n      expect(result.message.length).toBeGreaterThan(0)\n    })\n\n    it('should handle different tenant IDs', async () => {\n      const result1 = await performDeployment('mock-token', 'tenant_aaa', {\n        deploymentId: 'deploy_1',\n      })\n      const result2 = await performDeployment('mock-token', 'tenant_bbb', {\n        deploymentId: 'deploy_2',\n      })\n\n      expect(result1.deploymentId).toBe('deploy_1')\n      expect(result2.deploymentId).toBe('deploy_2')\n    })\n  })\n\n  describe('error handling', () => {\n    beforeEach(() => {\n      // Force real API mode for error testing\n      process.env.FIGMA_MOCK_CONTROL_PLANE = 'false'\n    })\n\n    afterEach(() => {\n      // Restore mock mode\n      delete process.env.FIGMA_MOCK_CONTROL_PLANE\n    })\n\n    it('createDeployment should throw ControlPlaneError on API failure', async () => {\n      // Mock fetch to return error\n      global.fetch = vi.fn().mockResolvedValue({\n        ok: false,\n        status: 500,\n        statusText: 'Internal Server Error',\n      })\n\n      await expect(\n        createDeployment('bad-token', 'tenant_fail', { staticAssets: [] }),\n      ).rejects.toThrow('Failed to create deployment: 500 Internal Server Error')\n    })\n\n    it('performDeployment should throw ControlPlaneError on API failure', async () => {\n      // Mock fetch to return error\n      global.fetch = vi.fn().mockResolvedValue({\n        ok: false,\n        status: 404,\n        statusText: 'Not Found',\n      })\n\n      await expect(\n        performDeployment('bad-token', 'tenant_missing', {\n          deploymentId: 'deploy_notfound',\n        }),\n      ).rejects.toThrow('Failed to perform deployment: 404 Not Found')\n    })\n\n    it('createDeployment should map snake_case API response to camelCase', async () => {\n      // Mock fetch to return successful API response with snake_case\n      global.fetch = vi.fn().mockResolvedValue({\n        json: () => ({\n          error: false,\n          meta: {\n            code_upload_url: 'https://s3.amazonaws.com/code/upload',\n            deployment_id: 'deploy_test123',\n            static_asset_upload_urls: {\n              '_next/static/test.js': 'https://s3.amazonaws.com/static/test.js',\n            },\n          },\n          status: 200,\n        }),\n        ok: true,\n      })\n\n      const result = await createDeployment('token', 'tenant_123', {\n        staticAssets: ['_next/static/test.js'],\n      })\n\n      // Verify response is mapped to camelCase\n      expect(result.deploymentId).toBe('deploy_test123')\n      expect(result.codeUploadUrl).toBe('https://s3.amazonaws.com/code/upload')\n      expect(result.staticAssetUploadUrls).toEqual({\n        '_next/static/test.js': 'https://s3.amazonaws.com/static/test.js',\n      })\n    })\n\n    it('performDeployment should map snake_case API response to camelCase', async () => {\n      // Mock fetch to return successful API response with snake_case\n      global.fetch = vi.fn().mockResolvedValue({\n        json: () => ({\n          error: false,\n          meta: {\n            deployment_id: 'deploy_abc456',\n            message: 'Deployment successful',\n            status: 'deployed',\n          },\n          status: 200,\n        }),\n        ok: true,\n      })\n\n      const result = await performDeployment('token', 'tenant_456', {\n        deploymentId: 'deploy_abc456',\n      })\n\n      // Verify response is mapped to camelCase\n      expect(result.deploymentId).toBe('deploy_abc456')\n      expect(result.message).toBe('Deployment successful')\n    })\n  })\n})\n"],"names":["afterEach","beforeEach","describe","expect","it","vi","createDeployment","createTenant","getTenantDetails","listTenants","performDeployment","clearAllMocks","restoreAllMocks","tenants","Array","isArray","toBe","length","toBeGreaterThan","forEach","tenant","toHaveProperty","toContain","status","parentType","tenants1","tenants2","name","domain","tenant1","tenant2","id","not","toMatch","parentId","createdAt","toBeDefined","Date","getTime","result","staticAssets","deploymentId","staticAssetUploadUrls","codeUploadUrl","Object","keys","toHaveLength","result1","result2","message","process","env","FIGMA_MOCK_CONTROL_PLANE","global","fetch","fn","mockResolvedValue","ok","statusText","rejects","toThrow","json","error","meta","code_upload_url","deployment_id","static_asset_upload_urls","toEqual"],"mappings":"AAAA,SAASA,SAAS,EAAEC,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAExE,SACEC,gBAAgB,EAChBC,YAAY,EACZC,gBAAgB,EAChBC,WAAW,EACXC,iBAAiB,QACZ,qBAAoB;AAE3BR,SAAS,8BAA8B;IACrCD,WAAW;QACTI,GAAGM,aAAa;IAClB;IAEAX,UAAU;QACRK,GAAGO,eAAe;IACpB;IAEAV,SAAS,eAAe;QACtBE,GAAG,2CAA2C;YAC5C,MAAMS,UAAU,MAAMJ,YAAY;YAElCN,OAAOW,MAAMC,OAAO,CAACF,UAAUG,IAAI,CAAC;YACpCb,OAAOU,QAAQI,MAAM,EAAEC,eAAe,CAAC;QACzC;QAEAd,GAAG,8CAA8C;YAC/C,MAAMS,UAAU,MAAMJ,YAAY;YAElCI,QAAQM,OAAO,CAAC,CAACC;gBACfjB,OAAOiB,QAAQC,cAAc,CAAC;gBAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;gBAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;gBAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;gBAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;gBAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;YAChC;QACF;QAEAjB,GAAG,2CAA2C;YAC5C,MAAMS,UAAU,MAAMJ,YAAY;YAElCI,QAAQM,OAAO,CAAC,CAACC;gBACfjB,OAAO;oBAAC;oBAAU;oBAAgB;iBAAW,EAAEmB,SAAS,CAACF,OAAOG,MAAM;YACxE;QACF;QAEAnB,GAAG,+CAA+C;YAChD,MAAMS,UAAU,MAAMJ,YAAY;YAElCI,QAAQM,OAAO,CAAC,CAACC;gBACfjB,OAAO;oBAAC;oBAAQ;oBAAO;iBAAY,EAAEmB,SAAS,CAACF,OAAOI,UAAU;YAClE;QACF;QAEApB,GAAG,yCAAyC;YAC1C,MAAMqB,WAAW,MAAMhB,YAAY;YACnC,MAAMiB,WAAW,MAAMjB,YAAY;YAEnC,wDAAwD;YACxDN,OAAOsB,SAASR,MAAM,EAAED,IAAI,CAACU,SAAST,MAAM;QAC9C;IACF;IAEAf,SAAS,gBAAgB;QACvBE,GAAG,kCAAkC;YACnC,MAAMgB,SAAS,MAAMb,aAAa,qBAAqB;gBACrDoB,MAAM;YACR;YAEAxB,OAAOiB,QAAQC,cAAc,CAAC;YAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;YAC9BlB,OAAOiB,OAAOQ,MAAM,EAAEN,SAAS,CAAC;QAClC;QAEAlB,GAAG,iDAAiD;YAClD,MAAMgB,SAAS,MAAMb,aAAa,qBAAqB;gBACrDoB,MAAM;YACR;YAEAxB,OAAOiB,OAAOG,MAAM,EAAEP,IAAI,CAAC;QAC7B;QAEAZ,GAAG,qCAAqC;YACtC,MAAMyB,UAAU,MAAMtB,aAAa,qBAAqB;gBACtDoB,MAAM;YACR;YACA,MAAMG,UAAU,MAAMvB,aAAa,qBAAqB;gBACtDoB,MAAM;YACR;YAEAxB,OAAO0B,QAAQE,EAAE,EAAEC,GAAG,CAAChB,IAAI,CAACc,QAAQC,EAAE;QACxC;QAEA3B,GAAG,+CAA+C;YAChD,MAAMgB,SAAS,MAAMb,aAAa,qBAAqB;gBACrDoB,MAAM;YACR;YAEA,gCAAgC;YAChCxB,OAAOiB,OAAOQ,MAAM,EAAEK,OAAO,CAAC;QAChC;QAEA7B,GAAG,yCAAyC;YAC1C,MAAMgB,SAAS,MAAMb,aAAa,qBAAqB;gBACrDoB,MAAM;gBACNO,UAAU;gBACVV,YAAY;YACd;YAEArB,OAAOiB,OAAOI,UAAU,EAAER,IAAI,CAAC;YAC/Bb,OAAOiB,OAAOc,QAAQ,EAAElB,IAAI,CAAC;QAC/B;QAEAZ,GAAG,sCAAsC;YACvC,MAAMgB,SAAS,MAAMb,aAAa,qBAAqB;gBACrDoB,MAAM;YACR;YAEAxB,OAAOiB,OAAOI,UAAU,EAAER,IAAI,CAAC;QACjC;QAEAZ,GAAG,sCAAsC;YACvC,MAAMgB,SAAS,MAAMb,aAAa,qBAAqB;gBACrDoB,MAAM;YACR;YAEAxB,OAAOiB,OAAOe,SAAS,EAAEC,WAAW;YACpCjC,OAAO,IAAIkC,KAAKjB,OAAOe,SAAS,EAAGG,OAAO,IAAIpB,eAAe,CAAC;QAChE;IACF;IAEAhB,SAAS,oBAAoB;QAC3BE,GAAG,6CAA6C;YAC9C,MAAMgB,SAAS,MAAMZ,iBAAiB,qBAAqB;YAE3DL,OAAOiB,QAAQC,cAAc,CAAC;YAC9BlB,OAAOiB,OAAOW,EAAE,EAAEf,IAAI,CAAC;QACzB;QAEAZ,GAAG,iDAAiD;YAClD,MAAMgB,SAAS,MAAMZ,iBAAiB,qBAAqB;YAE3DL,OAAOiB,QAAQC,cAAc,CAAC;YAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;YAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;YAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;YAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;YAC9BlB,OAAOiB,QAAQC,cAAc,CAAC;QAChC;QAEAjB,GAAG,+CAA+C;YAChD,MAAMgB,SAAS,MAAMZ,iBAAiB,qBAAqB;YAE3DL,OAAOiB,OAAOG,MAAM,EAAEP,IAAI,CAAC;QAC7B;QAEAZ,GAAG,sCAAsC;YACvC,MAAMyB,UAAU,MAAMrB,iBAAiB,qBAAqB;YAC5D,MAAMsB,UAAU,MAAMtB,iBAAiB,qBAAqB;YAE5DL,OAAO0B,QAAQE,EAAE,EAAEf,IAAI,CAAC;YACxBb,OAAO2B,QAAQC,EAAE,EAAEf,IAAI,CAAC;QAC1B;IACF;IAEAd,SAAS,oBAAoB;QAC3BE,GAAG,+CAA+C;YAChD,MAAMmC,SAAS,MAAMjC,iBAAiB,cAAc,cAAc;gBAChEkC,cAAc;oBAAC;oBAAuB;iBAAuB;YAC/D;YAEArC,OAAOoC,QAAQlB,cAAc,CAAC;YAC9BlB,OAAOoC,QAAQlB,cAAc,CAAC;YAC9BlB,OAAOoC,QAAQlB,cAAc,CAAC;YAC9BlB,OAAOoC,OAAOE,YAAY,EAAER,OAAO,CAAC;QACtC;QAEA7B,GAAG,mDAAmD;YACpD,MAAMmC,SAAS,MAAMjC,iBAAiB,cAAc,cAAc;gBAChEkC,cAAc;oBAAC;oBAAuB;iBAAuB;YAC/D;YAEArC,OAAOoC,OAAOG,qBAAqB,EAAErB,cAAc,CAAC;YACpDlB,OAAOoC,OAAOG,qBAAqB,EAAErB,cAAc,CAAC;YACpDlB,OAAOoC,OAAOG,qBAAqB,CAAC,sBAAsB,EAAEpB,SAAS,CAAC;QACxE;QAEAlB,GAAG,sCAAsC;YACvC,MAAMmC,SAAS,MAAMjC,iBAAiB,cAAc,cAAc;gBAChEkC,cAAc;oBAAC;iBAAuB;YACxC;YAEArC,OAAOoC,OAAOI,aAAa,EAAEV,OAAO,CAAC;YACrC9B,OAAOoC,OAAOG,qBAAqB,CAAC,uBAAuB,EAAET,OAAO,CAClE;QAEJ;QAEA7B,GAAG,2CAA2C;YAC5C,MAAMmC,SAAS,MAAMjC,iBAAiB,cAAc,gBAAgB;gBAClEkC,cAAc,EAAE;YAClB;YAEArC,OAAOoC,OAAOE,YAAY,EAAEL,WAAW;YACvCjC,OAAOoC,OAAOI,aAAa,EAAEP,WAAW;YACxCjC,OAAOyC,OAAOC,IAAI,CAACN,OAAOG,qBAAqB,GAAGI,YAAY,CAAC;QACjE;QAEA1C,GAAG,yCAAyC;YAC1C,MAAM2C,UAAU,MAAMzC,iBAAiB,cAAc,cAAc;gBACjEkC,cAAc,EAAE;YAClB;YACA,MAAMQ,UAAU,MAAM1C,iBAAiB,cAAc,cAAc;gBACjEkC,cAAc,EAAE;YAClB;YAEArC,OAAO4C,QAAQN,YAAY,EAAET,GAAG,CAAChB,IAAI,CAACgC,QAAQP,YAAY;QAC5D;IACF;IAEAvC,SAAS,qBAAqB;QAC5BE,GAAG,qCAAqC;YACtC,MAAMmC,SAAS,MAAM7B,kBAAkB,cAAc,cAAc;gBACjE+B,cAAc;YAChB;YAEAtC,OAAOoC,QAAQlB,cAAc,CAAC;YAC9BlB,OAAOoC,QAAQlB,cAAc,CAAC;YAC9BlB,OAAOoC,OAAOE,YAAY,EAAEzB,IAAI,CAAC;QACnC;QAEAZ,GAAG,iCAAiC;YAClC,MAAMmC,SAAS,MAAM7B,kBAAkB,cAAc,cAAc;gBACjE+B,cAAc;YAChB;YAEAtC,OAAOoC,OAAOU,OAAO,EAAEb,WAAW;YAClCjC,OAAOoC,OAAOU,OAAO,EAAEjC,IAAI,CAAC;YAC5Bb,OAAOoC,OAAOU,OAAO,CAAChC,MAAM,EAAEC,eAAe,CAAC;QAChD;QAEAd,GAAG,sCAAsC;YACvC,MAAM2C,UAAU,MAAMrC,kBAAkB,cAAc,cAAc;gBAClE+B,cAAc;YAChB;YACA,MAAMO,UAAU,MAAMtC,kBAAkB,cAAc,cAAc;gBAClE+B,cAAc;YAChB;YAEAtC,OAAO4C,QAAQN,YAAY,EAAEzB,IAAI,CAAC;YAClCb,OAAO6C,QAAQP,YAAY,EAAEzB,IAAI,CAAC;QACpC;IACF;IAEAd,SAAS,kBAAkB;QACzBD,WAAW;YACT,wCAAwC;YACxCiD,QAAQC,GAAG,CAACC,wBAAwB,GAAG;QACzC;QAEApD,UAAU;YACR,oBAAoB;YACpB,OAAOkD,QAAQC,GAAG,CAACC,wBAAwB;QAC7C;QAEAhD,GAAG,kEAAkE;YACnE,6BAA6B;YAC7BiD,OAAOC,KAAK,GAAGjD,GAAGkD,EAAE,GAAGC,iBAAiB,CAAC;gBACvCC,IAAI;gBACJlC,QAAQ;gBACRmC,YAAY;YACd;YAEA,MAAMvD,OACJG,iBAAiB,aAAa,eAAe;gBAAEkC,cAAc,EAAE;YAAC,IAChEmB,OAAO,CAACC,OAAO,CAAC;QACpB;QAEAxD,GAAG,mEAAmE;YACpE,6BAA6B;YAC7BiD,OAAOC,KAAK,GAAGjD,GAAGkD,EAAE,GAAGC,iBAAiB,CAAC;gBACvCC,IAAI;gBACJlC,QAAQ;gBACRmC,YAAY;YACd;YAEA,MAAMvD,OACJO,kBAAkB,aAAa,kBAAkB;gBAC/C+B,cAAc;YAChB,IACAkB,OAAO,CAACC,OAAO,CAAC;QACpB;QAEAxD,GAAG,oEAAoE;YACrE,+DAA+D;YAC/DiD,OAAOC,KAAK,GAAGjD,GAAGkD,EAAE,GAAGC,iBAAiB,CAAC;gBACvCK,MAAM,IAAO,CAAA;wBACXC,OAAO;wBACPC,MAAM;4BACJC,iBAAiB;4BACjBC,eAAe;4BACfC,0BAA0B;gCACxB,wBAAwB;4BAC1B;wBACF;wBACA3C,QAAQ;oBACV,CAAA;gBACAkC,IAAI;YACN;YAEA,MAAMlB,SAAS,MAAMjC,iBAAiB,SAAS,cAAc;gBAC3DkC,cAAc;oBAAC;iBAAuB;YACxC;YAEA,yCAAyC;YACzCrC,OAAOoC,OAAOE,YAAY,EAAEzB,IAAI,CAAC;YACjCb,OAAOoC,OAAOI,aAAa,EAAE3B,IAAI,CAAC;YAClCb,OAAOoC,OAAOG,qBAAqB,EAAEyB,OAAO,CAAC;gBAC3C,wBAAwB;YAC1B;QACF;QAEA/D,GAAG,qEAAqE;YACtE,+DAA+D;YAC/DiD,OAAOC,KAAK,GAAGjD,GAAGkD,EAAE,GAAGC,iBAAiB,CAAC;gBACvCK,MAAM,IAAO,CAAA;wBACXC,OAAO;wBACPC,MAAM;4BACJE,eAAe;4BACfhB,SAAS;4BACT1B,QAAQ;wBACV;wBACAA,QAAQ;oBACV,CAAA;gBACAkC,IAAI;YACN;YAEA,MAAMlB,SAAS,MAAM7B,kBAAkB,SAAS,cAAc;gBAC5D+B,cAAc;YAChB;YAEA,yCAAyC;YACzCtC,OAAOoC,OAAOE,YAAY,EAAEzB,IAAI,CAAC;YACjCb,OAAOoC,OAAOU,OAAO,EAAEjC,IAAI,CAAC;QAC9B;IACF;AACF"}

package/dist/api/figma-api.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Figma API Client
+ *
+ * Client for Figma REST API (Pixie) endpoints
+ * Handles project token generation and other CMS-related API calls
+ */
+import type { ProjectToken } from '../auth/types.js';
+/**
+ * Error thrown when Figma API calls fail
+ */
+export declare class FigmaApiError extends Error {
+    statusCode?: number | undefined;
+    cause?: Error | undefined;
+    constructor(message: string, statusCode?: number | undefined, cause?: Error | undefined);
+}
+/**
+ * Get a project token (JWT) for a specific tenant/CMS
+ *
+ * This token is used by local Payload instances to authenticate
+ * requests to the Content API. The token contains the CMS ID and
+ * user identifying information in its claims.
+ *
+ * Endpoint: GET https://api.figma.com/v1/cms/:id/token/
+ *
+ * @param accessToken - OAuth access token for authentication
+ * @param tenantId - The tenant/CMS ID
+ * @returns ProjectToken with JWT and expiry information
+ * @throws {FigmaApiError} If the API call fails
+ */
+export declare function getProjectToken(accessToken: string, tenantId: string): Promise<ProjectToken>;
+//# sourceMappingURL=figma-api.d.ts.map

package/dist/api/figma-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"figma-api.d.ts","sourceRoot":"","sources":["../../src/api/figma-api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAwB,MAAM,kBAAkB,CAAA;AAI1E;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,UAAU,CAAC,EAAE,MAAM;IACnB,KAAK,CAAC,EAAE,KAAK;gBAFpB,OAAO,EAAE,MAAM,EACR,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,KAAK,CAAC,EAAE,KAAK,YAAA;CAKvB;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC,CAuFvB"}

package/dist/api/figma-api.js

@@ -0,0 +1,169 @@
+/**
+ * Figma API Client
+ *
+ * Client for Figma REST API (Pixie) endpoints
+ * Handles project token generation and other CMS-related API calls
+ */ import * as log from '../utils/log.js';
+/**
+ * Error thrown when Figma API calls fail
+ */ export class FigmaApiError extends Error {
+    statusCode;
+    cause;
+    constructor(message, statusCode, cause){
+        super(message), this.statusCode = statusCode, this.cause = cause;
+        this.name = 'FigmaApiError';
+    }
+}
+/**
+ * Base URLs for Figma API
+ */ const API_BASE_URLS = {
+    prod: 'https://api.figma.com',
+    staging: 'https://api.staging.figma.com'
+};
+/**
+ * Get the Figma API base URL based on environment
+ * TODO: Use this once real API endpoints are available
+ */ function _getApiBaseUrl() {
+    // For now, default to staging to match OAuth config
+    return process.env.FIGMA_API_BASE_URL || API_BASE_URLS.staging;
+}
+/**
+ * Get a project token (JWT) for a specific tenant/CMS
+ *
+ * This token is used by local Payload instances to authenticate
+ * requests to the Content API. The token contains the CMS ID and
+ * user identifying information in its claims.
+ *
+ * Endpoint: GET https://api.figma.com/v1/cms/:id/token/
+ *
+ * @param accessToken - OAuth access token for authentication
+ * @param tenantId - The tenant/CMS ID
+ * @returns ProjectToken with JWT and expiry information
+ * @throws {FigmaApiError} If the API call fails
+ */ export async function getProjectToken(accessToken, tenantId) {
+    // Check if project token API should be mocked
+    // Default to true until real API is available
+    const shouldMock = process.env.FIGMA_MOCK_PROJECT_TOKEN !== 'false';
+    try {
+        if (shouldMock) {
+            // MOCK IMPLEMENTATION: Generate a mock JWT token for testing
+            log.debug('Using mock project token API for getProjectToken (FIGMA_MOCK_PROJECT_TOKEN != "false")');
+            const mockToken = createMockJWT(tenantId, 25) // 25 minutes expiry
+            ;
+            // Mock response data
+            const data = {
+                meta: {
+                    token: mockToken
+                }
+            };
+            if (!data.meta?.token) {
+                throw new FigmaApiError('Invalid response: missing token in meta');
+            }
+            // Parse the JWT to extract expiry (it's in the payload)
+            const expiresAt = parseJwtExpiry(data.meta.token);
+            return {
+                expiresAt,
+                tenantId,
+                token: data.meta.token
+            };
+        }
+        // REAL API IMPLEMENTATION
+        const baseUrl = _getApiBaseUrl();
+        const url = `${baseUrl}/v1/cms/${tenantId}/token/`;
+        const response = await fetch(url, {
+            headers: {
+                Authorization: `Bearer ${accessToken}`
+            },
+            method: 'POST'
+        });
+        if (!response.ok) {
+            // Handle error responses
+            let errorMessage = `Failed to get project token: ${response.status} ${response.statusText}`;
+            try {
+                const errorBody = await response.json();
+                if (errorBody.error || errorBody.message) {
+                    errorMessage = errorBody.error || errorBody.message;
+                }
+            } catch  {
+            // Ignore JSON parse errors for error body
+            }
+            throw new FigmaApiError(errorMessage, response.status);
+        }
+        const data = await response.json();
+        if (!data.meta?.token) {
+            throw new FigmaApiError('Invalid response: missing token in meta');
+        }
+        // Parse the JWT to extract expiry (it's in the payload)
+        const expiresAt = parseJwtExpiry(data.meta.token);
+        return {
+            expiresAt,
+            tenantId,
+            token: data.meta.token
+        };
+    } catch (error) {
+        if (error instanceof FigmaApiError) {
+            throw error;
+        }
+        // Handle network errors and other unexpected errors
+        throw new FigmaApiError(`Failed to get project token: ${error instanceof Error ? error.message : 'Unknown error'}`, undefined, error instanceof Error ? error : undefined);
+    }
+}
+/**
+ * Create a mock JWT token for testing
+ * TODO: Remove this when real API is available
+ */ function createMockJWT(tenantId, expiresInMinutes) {
+    const header = {
+        alg: 'RS256',
+        typ: 'JWT'
+    };
+    const now = Math.floor(Date.now() / 1000) // Current time in seconds
+    ;
+    const exp = now + expiresInMinutes * 60 // Expiry in seconds
+    ;
+    const payload = {
+        aud: tenantId,
+        email: 'developer@example.com',
+        exp,
+        iat: now,
+        sub: 'user123'
+    };
+    // Base64url encode
+    const encodeBase64Url = (obj)=>{
+        return Buffer.from(JSON.stringify(obj)).toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+    };
+    const headerEncoded = encodeBase64Url(header);
+    const payloadEncoded = encodeBase64Url(payload);
+    const signature = 'mock_signature_' + Math.random().toString(36).substring(2, 15);
+    return `${headerEncoded}.${payloadEncoded}.${signature}`;
+}
+/**
+ * Parse JWT expiry from token
+ * JWTs contain an 'exp' claim in the payload (second part)
+ *
+ * @param token - JWT token string
+ * @returns Unix timestamp in milliseconds when token expires
+ * @throws {FigmaApiError} If JWT cannot be parsed
+ */ function parseJwtExpiry(token) {
+    try {
+        // JWT format: header.payload.signature
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            throw new Error('Invalid JWT format');
+        }
+        // Decode the payload (second part)
+        const payload = parts[1];
+        // Use atob for base64url decoding (handle padding and URL-safe characters)
+        const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');
+        const paddedBase64 = base64.padEnd(base64.length + (4 - base64.length % 4) % 4, '=');
+        const decodedPayload = JSON.parse(Buffer.from(paddedBase64, 'base64').toString('utf-8'));
+        if (!decodedPayload.exp || typeof decodedPayload.exp !== 'number') {
+            throw new Error('JWT payload missing exp claim');
+        }
+        // JWT exp claim is in seconds, convert to milliseconds
+        return decodedPayload.exp * 1000;
+    } catch (error) {
+        throw new FigmaApiError(`Failed to parse JWT expiry: ${error instanceof Error ? error.message : 'Unknown error'}`, undefined, error instanceof Error ? error : undefined);
+    }
+}
+
+//# sourceMappingURL=figma-api.js.map

package/dist/api/figma-api.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/figma-api.ts"],"sourcesContent":["/**\n * Figma API Client\n *\n * Client for Figma REST API (Pixie) endpoints\n * Handles project token generation and other CMS-related API calls\n */\n\nimport type { ProjectToken, ProjectTokenResponse } from '../auth/types.js'\n\nimport * as log from '../utils/log.js'\n\n/**\n * Error thrown when Figma API calls fail\n */\nexport class FigmaApiError extends Error {\n  constructor(\n    message: string,\n    public statusCode?: number,\n    public cause?: Error,\n  ) {\n    super(message)\n    this.name = 'FigmaApiError'\n  }\n}\n\n/**\n * Base URLs for Figma API\n */\nconst API_BASE_URLS = {\n  prod: 'https://api.figma.com',\n  staging: 'https://api.staging.figma.com',\n}\n\n/**\n * Get the Figma API base URL based on environment\n * TODO: Use this once real API endpoints are available\n */\nfunction _getApiBaseUrl(): string {\n  // For now, default to staging to match OAuth config\n  return process.env.FIGMA_API_BASE_URL || API_BASE_URLS.staging\n}\n\n/**\n * Get a project token (JWT) for a specific tenant/CMS\n *\n * This token is used by local Payload instances to authenticate\n * requests to the Content API. The token contains the CMS ID and\n * user identifying information in its claims.\n *\n * Endpoint: GET https://api.figma.com/v1/cms/:id/token/\n *\n * @param accessToken - OAuth access token for authentication\n * @param tenantId - The tenant/CMS ID\n * @returns ProjectToken with JWT and expiry information\n * @throws {FigmaApiError} If the API call fails\n */\nexport async function getProjectToken(\n  accessToken: string,\n  tenantId: string,\n): Promise<ProjectToken> {\n  // Check if project token API should be mocked\n  // Default to true until real API is available\n  const shouldMock = process.env.FIGMA_MOCK_PROJECT_TOKEN !== 'false'\n\n  try {\n    if (shouldMock) {\n      // MOCK IMPLEMENTATION: Generate a mock JWT token for testing\n      log.debug(\n        'Using mock project token API for getProjectToken (FIGMA_MOCK_PROJECT_TOKEN != \"false\")',\n      )\n      const mockToken = createMockJWT(tenantId, 25) // 25 minutes expiry\n\n      // Mock response data\n      const data: ProjectTokenResponse = {\n        meta: {\n          token: mockToken,\n        },\n      }\n\n      if (!data.meta?.token) {\n        throw new FigmaApiError('Invalid response: missing token in meta')\n      }\n\n      // Parse the JWT to extract expiry (it's in the payload)\n      const expiresAt = parseJwtExpiry(data.meta.token)\n\n      return {\n        expiresAt,\n        tenantId,\n        token: data.meta.token,\n      }\n    }\n\n    // REAL API IMPLEMENTATION\n    const baseUrl = _getApiBaseUrl()\n    const url = `${baseUrl}/v1/cms/${tenantId}/token/`\n\n    const response = await fetch(url, {\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n      },\n      method: 'POST',\n    })\n\n    if (!response.ok) {\n      // Handle error responses\n      let errorMessage = `Failed to get project token: ${response.status} ${response.statusText}`\n\n      try {\n        const errorBody = await response.json()\n        if (errorBody.error || errorBody.message) {\n          errorMessage = errorBody.error || errorBody.message\n        }\n      } catch {\n        // Ignore JSON parse errors for error body\n      }\n\n      throw new FigmaApiError(errorMessage, response.status)\n    }\n\n    const data: ProjectTokenResponse = await response.json()\n\n    if (!data.meta?.token) {\n      throw new FigmaApiError('Invalid response: missing token in meta')\n    }\n\n    // Parse the JWT to extract expiry (it's in the payload)\n    const expiresAt = parseJwtExpiry(data.meta.token)\n\n    return {\n      expiresAt,\n      tenantId,\n      token: data.meta.token,\n    }\n  } catch (error) {\n    if (error instanceof FigmaApiError) {\n      throw error\n    }\n\n    // Handle network errors and other unexpected errors\n    throw new FigmaApiError(\n      `Failed to get project token: ${error instanceof Error ? error.message : 'Unknown error'}`,\n      undefined,\n      error instanceof Error ? error : undefined,\n    )\n  }\n}\n\n/**\n * Create a mock JWT token for testing\n * TODO: Remove this when real API is available\n */\nfunction createMockJWT(tenantId: string, expiresInMinutes: number): string {\n  const header = {\n    alg: 'RS256',\n    typ: 'JWT',\n  }\n\n  const now = Math.floor(Date.now() / 1000) // Current time in seconds\n  const exp = now + expiresInMinutes * 60 // Expiry in seconds\n\n  const payload = {\n    aud: tenantId, // Audience claim contains the CMS ID\n    email: 'developer@example.com',\n    exp,\n    iat: now,\n    sub: 'user123',\n  }\n\n  // Base64url encode\n  const encodeBase64Url = (obj: object): string => {\n    return Buffer.from(JSON.stringify(obj))\n      .toString('base64')\n      .replace(/\\+/g, '-')\n      .replace(/\\//g, '_')\n      .replace(/=/g, '')\n  }\n\n  const headerEncoded = encodeBase64Url(header)\n  const payloadEncoded = encodeBase64Url(payload)\n  const signature = 'mock_signature_' + Math.random().toString(36).substring(2, 15)\n\n  return `${headerEncoded}.${payloadEncoded}.${signature}`\n}\n\n/**\n * Parse JWT expiry from token\n * JWTs contain an 'exp' claim in the payload (second part)\n *\n * @param token - JWT token string\n * @returns Unix timestamp in milliseconds when token expires\n * @throws {FigmaApiError} If JWT cannot be parsed\n */\nfunction parseJwtExpiry(token: string): number {\n  try {\n    // JWT format: header.payload.signature\n    const parts = token.split('.')\n    if (parts.length !== 3) {\n      throw new Error('Invalid JWT format')\n    }\n\n    // Decode the payload (second part)\n    const payload = parts[1]\n    // Use atob for base64url decoding (handle padding and URL-safe characters)\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/')\n    const paddedBase64 = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=')\n\n    const decodedPayload = JSON.parse(Buffer.from(paddedBase64, 'base64').toString('utf-8')) as {\n      exp?: number\n    }\n\n    if (!decodedPayload.exp || typeof decodedPayload.exp !== 'number') {\n      throw new Error('JWT payload missing exp claim')\n    }\n\n    // JWT exp claim is in seconds, convert to milliseconds\n    return decodedPayload.exp * 1000\n  } catch (error) {\n    throw new FigmaApiError(\n      `Failed to parse JWT expiry: ${error instanceof Error ? error.message : 'Unknown error'}`,\n      undefined,\n      error instanceof Error ? error : undefined,\n    )\n  }\n}\n"],"names":["log","FigmaApiError","Error","message","statusCode","cause","name","API_BASE_URLS","prod","staging","_getApiBaseUrl","process","env","FIGMA_API_BASE_URL","getProjectToken","accessToken","tenantId","shouldMock","FIGMA_MOCK_PROJECT_TOKEN","debug","mockToken","createMockJWT","data","meta","token","expiresAt","parseJwtExpiry","baseUrl","url","response","fetch","headers","Authorization","method","ok","errorMessage","status","statusText","errorBody","json","error","undefined","expiresInMinutes","header","alg","typ","now","Math","floor","Date","exp","payload","aud","email","iat","sub","encodeBase64Url","obj","Buffer","from","JSON","stringify","toString","replace","headerEncoded","payloadEncoded","signature","random","substring","parts","split","length","base64","paddedBase64","padEnd","decodedPayload","parse"],"mappings":"AAAA;;;;;CAKC,GAID,YAAYA,SAAS,kBAAiB;AAEtC;;CAEC,GACD,OAAO,MAAMC,sBAAsBC;;;IACjC,YACEC,OAAe,EACf,AAAOC,UAAmB,EAC1B,AAAOC,KAAa,CACpB;QACA,KAAK,CAACF,eAHCC,aAAAA,iBACAC,QAAAA;QAGP,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;CAEC,GACD,MAAMC,gBAAgB;IACpBC,MAAM;IACNC,SAAS;AACX;AAEA;;;CAGC,GACD,SAASC;IACP,oDAAoD;IACpD,OAAOC,QAAQC,GAAG,CAACC,kBAAkB,IAAIN,cAAcE,OAAO;AAChE;AAEA;;;;;;;;;;;;;CAaC,GACD,OAAO,eAAeK,gBACpBC,WAAmB,EACnBC,QAAgB;IAEhB,8CAA8C;IAC9C,8CAA8C;IAC9C,MAAMC,aAAaN,QAAQC,GAAG,CAACM,wBAAwB,KAAK;IAE5D,IAAI;QACF,IAAID,YAAY;YACd,6DAA6D;YAC7DjB,IAAImB,KAAK,CACP;YAEF,MAAMC,YAAYC,cAAcL,UAAU,IAAI,oBAAoB;;YAElE,qBAAqB;YACrB,MAAMM,OAA6B;gBACjCC,MAAM;oBACJC,OAAOJ;gBACT;YACF;YAEA,IAAI,CAACE,KAAKC,IAAI,EAAEC,OAAO;gBACrB,MAAM,IAAIvB,cAAc;YAC1B;YAEA,wDAAwD;YACxD,MAAMwB,YAAYC,eAAeJ,KAAKC,IAAI,CAACC,KAAK;YAEhD,OAAO;gBACLC;gBACAT;gBACAQ,OAAOF,KAAKC,IAAI,CAACC,KAAK;YACxB;QACF;QAEA,0BAA0B;QAC1B,MAAMG,UAAUjB;QAChB,MAAMkB,MAAM,GAAGD,QAAQ,QAAQ,EAAEX,SAAS,OAAO,CAAC;QAElD,MAAMa,WAAW,MAAMC,MAAMF,KAAK;YAChCG,SAAS;gBACPC,eAAe,CAAC,OAAO,EAAEjB,aAAa;YACxC;YACAkB,QAAQ;QACV;QAEA,IAAI,CAACJ,SAASK,EAAE,EAAE;YAChB,yBAAyB;YACzB,IAAIC,eAAe,CAAC,6BAA6B,EAAEN,SAASO,MAAM,CAAC,CAAC,EAAEP,SAASQ,UAAU,EAAE;YAE3F,IAAI;gBACF,MAAMC,YAAY,MAAMT,SAASU,IAAI;gBACrC,IAAID,UAAUE,KAAK,IAAIF,UAAUnC,OAAO,EAAE;oBACxCgC,eAAeG,UAAUE,KAAK,IAAIF,UAAUnC,OAAO;gBACrD;YACF,EAAE,OAAM;YACN,0CAA0C;YAC5C;YAEA,MAAM,IAAIF,cAAckC,cAAcN,SAASO,MAAM;QACvD;QAEA,MAAMd,OAA6B,MAAMO,SAASU,IAAI;QAEtD,IAAI,CAACjB,KAAKC,IAAI,EAAEC,OAAO;YACrB,MAAM,IAAIvB,cAAc;QAC1B;QAEA,wDAAwD;QACxD,MAAMwB,YAAYC,eAAeJ,KAAKC,IAAI,CAACC,KAAK;QAEhD,OAAO;YACLC;YACAT;YACAQ,OAAOF,KAAKC,IAAI,CAACC,KAAK;QACxB;IACF,EAAE,OAAOgB,OAAO;QACd,IAAIA,iBAAiBvC,eAAe;YAClC,MAAMuC;QACR;QAEA,oDAAoD;QACpD,MAAM,IAAIvC,cACR,CAAC,6BAA6B,EAAEuC,iBAAiBtC,QAAQsC,MAAMrC,OAAO,GAAG,iBAAiB,EAC1FsC,WACAD,iBAAiBtC,QAAQsC,QAAQC;IAErC;AACF;AAEA;;;CAGC,GACD,SAASpB,cAAcL,QAAgB,EAAE0B,gBAAwB;IAC/D,MAAMC,SAAS;QACbC,KAAK;QACLC,KAAK;IACP;IAEA,MAAMC,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK,MAAM,0BAA0B;;IACpE,MAAMI,MAAMJ,MAAMJ,mBAAmB,GAAG,oBAAoB;;IAE5D,MAAMS,UAAU;QACdC,KAAKpC;QACLqC,OAAO;QACPH;QACAI,KAAKR;QACLS,KAAK;IACP;IAEA,mBAAmB;IACnB,MAAMC,kBAAkB,CAACC;QACvB,OAAOC,OAAOC,IAAI,CAACC,KAAKC,SAAS,CAACJ,MAC/BK,QAAQ,CAAC,UACTC,OAAO,CAAC,OAAO,KACfA,OAAO,CAAC,OAAO,KACfA,OAAO,CAAC,MAAM;IACnB;IAEA,MAAMC,gBAAgBR,gBAAgBb;IACtC,MAAMsB,iBAAiBT,gBAAgBL;IACvC,MAAMe,YAAY,oBAAoBnB,KAAKoB,MAAM,GAAGL,QAAQ,CAAC,IAAIM,SAAS,CAAC,GAAG;IAE9E,OAAO,GAAGJ,cAAc,CAAC,EAAEC,eAAe,CAAC,EAAEC,WAAW;AAC1D;AAEA;;;;;;;CAOC,GACD,SAASxC,eAAeF,KAAa;IACnC,IAAI;QACF,uCAAuC;QACvC,MAAM6C,QAAQ7C,MAAM8C,KAAK,CAAC;QAC1B,IAAID,MAAME,MAAM,KAAK,GAAG;YACtB,MAAM,IAAIrE,MAAM;QAClB;QAEA,mCAAmC;QACnC,MAAMiD,UAAUkB,KAAK,CAAC,EAAE;QACxB,2EAA2E;QAC3E,MAAMG,SAASrB,QAAQY,OAAO,CAAC,MAAM,KAAKA,OAAO,CAAC,MAAM;QACxD,MAAMU,eAAeD,OAAOE,MAAM,CAACF,OAAOD,MAAM,GAAI,AAAC,CAAA,IAAKC,OAAOD,MAAM,GAAG,CAAC,IAAK,GAAI;QAEpF,MAAMI,iBAAiBf,KAAKgB,KAAK,CAAClB,OAAOC,IAAI,CAACc,cAAc,UAAUX,QAAQ,CAAC;QAI/E,IAAI,CAACa,eAAezB,GAAG,IAAI,OAAOyB,eAAezB,GAAG,KAAK,UAAU;YACjE,MAAM,IAAIhD,MAAM;QAClB;QAEA,uDAAuD;QACvD,OAAOyE,eAAezB,GAAG,GAAG;IAC9B,EAAE,OAAOV,OAAO;QACd,MAAM,IAAIvC,cACR,CAAC,4BAA4B,EAAEuC,iBAAiBtC,QAAQsC,MAAMrC,OAAO,GAAG,iBAAiB,EACzFsC,WACAD,iBAAiBtC,QAAQsC,QAAQC;IAErC;AACF"}

package/dist/api/figma-api.spec.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Tests JWT parsing helpers and validates mock API contract.
+ *
+ * NOTE: The Figma API is currently mocked for development.
+ *
+ * These tests verify:
+ * 1. JWT parsing helper functions (our code)
+ * 2. JWT structure matches expected Figma API contract
+ * 3. Mock responses are consistent for development
+ *
+ * TODO: Replace with integration tests when real API is available
+ */
+export {};
+//# sourceMappingURL=figma-api.spec.d.ts.map

package/dist/api/figma-api.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"figma-api.spec.d.ts","sourceRoot":"","sources":["../../src/api/figma-api.spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}