@payloadcms/figma 0.0.1-alpha.1 → 0.0.1-alpha.11

package/dist/auth/refresh.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/refresh.ts"],"sourcesContent":["/* eslint-disable perfectionist/sort-objects */\nimport type { FigmaTokenResponse, FigmaTokens } from './types.js'\n\nimport { OAUTH_CONFIG } from '../config/oauth.js'\nimport { isDebug } from '../utils/is-debug.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Error thrown when token refresh fails\n */\nexport class TokenRefreshError extends Error {\n  constructor(\n    message: string,\n    public statusCode?: number,\n  ) {\n    super(message)\n    this.name = 'TokenRefreshError'\n  }\n}\n\n/**\n * Refresh an expired OAuth2 access token using a refresh token\n *\n * Makes a POST request to Figma's token endpoint with the refresh token\n * to obtain a new access token. Uses public client pattern (no client secret).\n *\n * @param refreshToken - The refresh token to use\n * @param clientId - OAuth2 client ID (defaults to config)\n * @returns Promise resolving to new tokens\n * @throws TokenRefreshError if refresh fails\n */\nexport async function refreshAccessToken(\n  refreshToken: string,\n  clientId: string = OAUTH_CONFIG.clientId,\n): Promise<FigmaTokens> {\n  // Prepare form data for token refresh request (public client)\n  const params = new URLSearchParams({\n    client_id: clientId,\n    grant_type: 'refresh_token',\n    refresh_token: refreshToken,\n  })\n\n  try {\n    const response = await fetch(OAUTH_CONFIG.refreshUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    })\n\n    if (!response.ok) {\n      const errorText = await response.text()\n      throw new TokenRefreshError(\n        `Token refresh failed: ${response.statusText}. ${errorText}`,\n        response.status,\n      )\n    }\n\n    const data = (await response.json()) as FigmaTokenResponse\n\n    // Validate response contains required fields\n    if (!data.access_token || !data.refresh_token || !data.expires_in) {\n      throw new TokenRefreshError('Invalid token response: missing required fields')\n    }\n\n    // Convert response to our internal token format\n    const expiresAt = Date.now() + data.expires_in * 1000\n\n    return {\n      accessToken: data.access_token,\n      refreshToken: data.refresh_token,\n      expiresAt,\n      userId: data.user_id_string,\n    }\n  } catch (error) {\n    if (error instanceof TokenRefreshError) {\n      throw error\n    }\n\n    // Handle network errors and other exceptions\n    throw new TokenRefreshError(\n      `Failed to refresh token: ${error instanceof Error ? error.message : 'Unknown error'}`,\n    )\n  }\n}\n\n/**\n * Exchange an authorization code for OAuth2 tokens\n *\n * This is used during the initial OAuth flow after the user authorizes the app.\n * Uses public client pattern with PKCE (code verifier is required).\n *\n * @param code - Authorization code from OAuth callback\n * @param codeVerifier - PKCE code verifier (required for public clients)\n * @param redirectUri - Redirect URI used in the authorization request\n * @param clientId - OAuth2 client ID (defaults to config)\n * @returns Promise resolving to tokens\n * @throws TokenRefreshError if exchange fails\n */\nexport async function exchangeCodeForTokens(\n  code: string,\n  codeVerifier: string,\n  redirectUri: string = OAUTH_CONFIG.redirectUri,\n  clientId: string = OAUTH_CONFIG.clientId,\n): Promise<FigmaTokens> {\n  // Prepare form data for token exchange (public client with PKCE)\n  const params = new URLSearchParams({\n    client_id: clientId,\n    code,\n    code_verifier: codeVerifier,\n    grant_type: 'authorization_code',\n    redirect_uri: redirectUri,\n  })\n\n  try {\n    // Public client - no client secret or Basic Auth header needed\n    // Security is provided by PKCE (code_verifier in the request body)\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/x-www-form-urlencoded',\n    }\n\n    // Debug logging\n    if (isDebug()) {\n      log.debug(\n        `Token exchange request: ${JSON.stringify({\n          url: OAUTH_CONFIG.tokenUrl,\n          headers,\n          body: params.toString(),\n        })}`,\n      )\n    }\n\n    const response = await fetch(OAUTH_CONFIG.tokenUrl, {\n      method: 'POST',\n      headers,\n      body: params.toString(),\n    })\n\n    if (isDebug()) {\n      log.debug(\n        `Token exchange response: ${JSON.stringify({\n          status: response.status,\n          statusText: response.statusText,\n          headers: Object.fromEntries(response.headers.entries()),\n        })}`,\n      )\n    }\n\n    if (!response.ok) {\n      const errorText = await response.text()\n      if (isDebug()) {\n        log.debug(`Error response body: ${errorText}`)\n      }\n      throw new TokenRefreshError(\n        `Token exchange failed: ${response.statusText}. ${errorText}`,\n        response.status,\n      )\n    }\n\n    const data = (await response.json()) as FigmaTokenResponse\n\n    if (isDebug()) {\n      log.debug(\n        `Token response: ${JSON.stringify({\n          access_token: data.access_token,\n          token_type: data.token_type,\n          expires_in: data.expires_in,\n          scope: data.scope,\n          user_id_string: data.user_id_string,\n          refresh_token: data.refresh_token?.substring(0, 10) + '...',\n        })}`,\n      )\n    }\n\n    // Validate response contains required fields\n    if (!data.access_token || !data.refresh_token || !data.expires_in) {\n      throw new TokenRefreshError('Invalid token response: missing required fields')\n    }\n\n    // Convert response to our internal token format\n    const expiresAt = Date.now() + data.expires_in * 1000\n\n    return {\n      accessToken: data.access_token,\n      refreshToken: data.refresh_token,\n      expiresAt,\n      userId: data.user_id_string,\n    }\n  } catch (error) {\n    if (error instanceof TokenRefreshError) {\n      throw error\n    }\n\n    // Handle network errors and other exceptions\n    throw new TokenRefreshError(\n      `Failed to exchange code for tokens: ${error instanceof Error ? error.message : 'Unknown error'}`,\n    )\n  }\n}\n"],"names":["OAUTH_CONFIG","isDebug","log","TokenRefreshError","Error","message","statusCode","name","refreshAccessToken","refreshToken","clientId","params","URLSearchParams","client_id","grant_type","refresh_token","response","fetch","refreshUrl","method","headers","body","toString","ok","errorText","text","statusText","status","data","json","access_token","expires_in","expiresAt","Date","now","accessToken","userId","user_id_string","error","exchangeCodeForTokens","code","codeVerifier","redirectUri","code_verifier","redirect_uri","debug","JSON","stringify","url","tokenUrl","Object","fromEntries","entries","token_type","scope","substring"],"mappings":"AAAA,6CAA6C,GAG7C,SAASA,YAAY,QAAQ,qBAAoB;AACjD,SAASC,OAAO,QAAQ,uBAAsB;AAC9C,YAAYC,SAAS,kBAAiB;AAEtC;;CAEC,GACD,OAAO,MAAMC,0BAA0BC;;IACrC,YACEC,OAAe,EACf,AAAOC,UAAmB,CAC1B;QACA,KAAK,CAACD,eAFCC,aAAAA;QAGP,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,mBACpBC,YAAoB,EACpBC,WAAmBV,aAAaU,QAAQ;IAExC,8DAA8D;IAC9D,MAAMC,SAAS,IAAIC,gBAAgB;QACjCC,WAAWH;QACXI,YAAY;QACZC,eAAeN;IACjB;IAEA,IAAI;QACF,MAAMO,WAAW,MAAMC,MAAMjB,aAAakB,UAAU,EAAE;YACpDC,QAAQ;YACRC,SAAS;gBACP,gBAAgB;YAClB;YACAC,MAAMV,OAAOW,QAAQ;QACvB;QAEA,IAAI,CAACN,SAASO,EAAE,EAAE;YAChB,MAAMC,YAAY,MAAMR,SAASS,IAAI;YACrC,MAAM,IAAItB,kBACR,CAAC,sBAAsB,EAAEa,SAASU,UAAU,CAAC,EAAE,EAAEF,WAAW,EAC5DR,SAASW,MAAM;QAEnB;QAEA,MAAMC,OAAQ,MAAMZ,SAASa,IAAI;QAEjC,6CAA6C;QAC7C,IAAI,CAACD,KAAKE,YAAY,IAAI,CAACF,KAAKb,aAAa,IAAI,CAACa,KAAKG,UAAU,EAAE;YACjE,MAAM,IAAI5B,kBAAkB;QAC9B;QAEA,gDAAgD;QAChD,MAAM6B,YAAYC,KAAKC,GAAG,KAAKN,KAAKG,UAAU,GAAG;QAEjD,OAAO;YACLI,aAAaP,KAAKE,YAAY;YAC9BrB,cAAcmB,KAAKb,aAAa;YAChCiB;YACAI,QAAQR,KAAKS,cAAc;QAC7B;IACF,EAAE,OAAOC,OAAO;QACd,IAAIA,iBAAiBnC,mBAAmB;YACtC,MAAMmC;QACR;QAEA,6CAA6C;QAC7C,MAAM,IAAInC,kBACR,CAAC,yBAAyB,EAAEmC,iBAAiBlC,QAAQkC,MAAMjC,OAAO,GAAG,iBAAiB;IAE1F;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,eAAekC,sBACpBC,IAAY,EACZC,YAAoB,EACpBC,cAAsB1C,aAAa0C,WAAW,EAC9ChC,WAAmBV,aAAaU,QAAQ;IAExC,iEAAiE;IACjE,MAAMC,SAAS,IAAIC,gBAAgB;QACjCC,WAAWH;QACX8B;QACAG,eAAeF;QACf3B,YAAY;QACZ8B,cAAcF;IAChB;IAEA,IAAI;QACF,+DAA+D;QAC/D,mEAAmE;QACnE,MAAMtB,UAAkC;YACtC,gBAAgB;QAClB;QAEA,gBAAgB;QAChB,IAAInB,WAAW;YACbC,IAAI2C,KAAK,CACP,CAAC,wBAAwB,EAAEC,KAAKC,SAAS,CAAC;gBACxCC,KAAKhD,aAAaiD,QAAQ;gBAC1B7B;gBACAC,MAAMV,OAAOW,QAAQ;YACvB,IAAI;QAER;QAEA,MAAMN,WAAW,MAAMC,MAAMjB,aAAaiD,QAAQ,EAAE;YAClD9B,QAAQ;YACRC;YACAC,MAAMV,OAAOW,QAAQ;QACvB;QAEA,IAAIrB,WAAW;YACbC,IAAI2C,KAAK,CACP,CAAC,yBAAyB,EAAEC,KAAKC,SAAS,CAAC;gBACzCpB,QAAQX,SAASW,MAAM;gBACvBD,YAAYV,SAASU,UAAU;gBAC/BN,SAAS8B,OAAOC,WAAW,CAACnC,SAASI,OAAO,CAACgC,OAAO;YACtD,IAAI;QAER;QAEA,IAAI,CAACpC,SAASO,EAAE,EAAE;YAChB,MAAMC,YAAY,MAAMR,SAASS,IAAI;YACrC,IAAIxB,WAAW;gBACbC,IAAI2C,KAAK,CAAC,CAAC,qBAAqB,EAAErB,WAAW;YAC/C;YACA,MAAM,IAAIrB,kBACR,CAAC,uBAAuB,EAAEa,SAASU,UAAU,CAAC,EAAE,EAAEF,WAAW,EAC7DR,SAASW,MAAM;QAEnB;QAEA,MAAMC,OAAQ,MAAMZ,SAASa,IAAI;QAEjC,IAAI5B,WAAW;YACbC,IAAI2C,KAAK,CACP,CAAC,gBAAgB,EAAEC,KAAKC,SAAS,CAAC;gBAChCjB,cAAcF,KAAKE,YAAY;gBAC/BuB,YAAYzB,KAAKyB,UAAU;gBAC3BtB,YAAYH,KAAKG,UAAU;gBAC3BuB,OAAO1B,KAAK0B,KAAK;gBACjBjB,gBAAgBT,KAAKS,cAAc;gBACnCtB,eAAea,KAAKb,aAAa,EAAEwC,UAAU,GAAG,MAAM;YACxD,IAAI;QAER;QAEA,6CAA6C;QAC7C,IAAI,CAAC3B,KAAKE,YAAY,IAAI,CAACF,KAAKb,aAAa,IAAI,CAACa,KAAKG,UAAU,EAAE;YACjE,MAAM,IAAI5B,kBAAkB;QAC9B;QAEA,gDAAgD;QAChD,MAAM6B,YAAYC,KAAKC,GAAG,KAAKN,KAAKG,UAAU,GAAG;QAEjD,OAAO;YACLI,aAAaP,KAAKE,YAAY;YAC9BrB,cAAcmB,KAAKb,aAAa;YAChCiB;YACAI,QAAQR,KAAKS,cAAc;QAC7B;IACF,EAAE,OAAOC,OAAO;QACd,IAAIA,iBAAiBnC,mBAAmB;YACtC,MAAMmC;QACR;QAEA,6CAA6C;QAC7C,MAAM,IAAInC,kBACR,CAAC,oCAAoC,EAAEmC,iBAAiBlC,QAAQkC,MAAMjC,OAAO,GAAG,iBAAiB;IAErG;AACF"}
+{"version":3,"sources":["../../src/auth/refresh.ts"],"sourcesContent":["/* eslint-disable perfectionist/sort-objects */\nimport type { FigmaTokenResponse, FigmaTokens } from './types.js'\n\nimport { OAUTH_CONFIG } from '../config/oauth.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Error thrown when token refresh fails\n */\nexport class TokenRefreshError extends Error {\n  constructor(\n    message: string,\n    public statusCode?: number,\n  ) {\n    super(message)\n    this.name = 'TokenRefreshError'\n  }\n}\n\n/**\n * Refresh an expired OAuth2 access token using a refresh token\n *\n * Makes a POST request to Figma's token endpoint with the refresh token\n * to obtain a new access token. Uses public client pattern (no client secret).\n *\n * @param refreshToken - The refresh token to use\n * @param clientId - OAuth2 client ID (defaults to config)\n * @returns Promise resolving to new tokens\n * @throws TokenRefreshError if refresh fails\n */\nexport async function refreshAccessToken(\n  refreshToken: string,\n  clientId: string = OAUTH_CONFIG.clientId,\n): Promise<FigmaTokens> {\n  // Prepare form data for token refresh request (public client)\n  const params = new URLSearchParams({\n    client_id: clientId,\n    grant_type: 'refresh_token',\n    refresh_token: refreshToken,\n  })\n\n  try {\n    const response = await fetch(OAUTH_CONFIG.refreshUrl, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    })\n\n    if (!response.ok) {\n      const errorText = await response.text()\n      throw new TokenRefreshError(\n        `Token refresh failed: ${response.statusText}. ${errorText}`,\n        response.status,\n      )\n    }\n\n    const data = (await response.json()) as FigmaTokenResponse\n\n    // Validate response contains required fields\n    if (!data.access_token || !data.refresh_token || !data.expires_in) {\n      throw new TokenRefreshError('Invalid token response: missing required fields')\n    }\n\n    // Convert response to our internal token format\n    const expiresAt = Date.now() + data.expires_in * 1000\n\n    return {\n      accessToken: data.access_token,\n      refreshToken: data.refresh_token,\n      expiresAt,\n      userId: data.user_id_string,\n    }\n  } catch (error) {\n    if (error instanceof TokenRefreshError) {\n      throw error\n    }\n\n    // Handle network errors and other exceptions\n    throw new TokenRefreshError(\n      `Failed to refresh token: ${error instanceof Error ? error.message : 'Unknown error'}`,\n    )\n  }\n}\n\n/**\n * Exchange an authorization code for OAuth2 tokens\n *\n * This is used during the initial OAuth flow after the user authorizes the app.\n * Uses public client pattern with PKCE (code verifier is required).\n *\n * @param code - Authorization code from OAuth callback\n * @param codeVerifier - PKCE code verifier (required for public clients)\n * @param redirectUri - Redirect URI used in the authorization request\n * @param clientId - OAuth2 client ID (defaults to config)\n * @returns Promise resolving to tokens\n * @throws TokenRefreshError if exchange fails\n */\nexport async function exchangeCodeForTokens(\n  code: string,\n  codeVerifier: string,\n  redirectUri: string = OAUTH_CONFIG.redirectUri,\n  clientId: string = OAUTH_CONFIG.clientId,\n): Promise<FigmaTokens> {\n  // Prepare form data for token exchange (public client with PKCE)\n  const params = new URLSearchParams({\n    client_id: clientId,\n    code,\n    code_verifier: codeVerifier,\n    grant_type: 'authorization_code',\n    redirect_uri: redirectUri,\n  })\n\n  try {\n    // Public client - no client secret or Basic Auth header needed\n    // Security is provided by PKCE (code_verifier in the request body)\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/x-www-form-urlencoded',\n    }\n\n    // Debug logging\n    log.debug(\n      `Token exchange request: ${JSON.stringify({\n        url: OAUTH_CONFIG.tokenUrl,\n        headers,\n        body: params.toString(),\n      })}`,\n    )\n\n    const response = await fetch(OAUTH_CONFIG.tokenUrl, {\n      method: 'POST',\n      headers,\n      body: params.toString(),\n    })\n\n    log.debug(\n      `Token exchange response: ${JSON.stringify({\n        status: response.status,\n        statusText: response.statusText,\n        headers: Object.fromEntries(response.headers.entries()),\n      })}`,\n    )\n\n    if (!response.ok) {\n      const errorText = await response.text()\n      log.debug(`Error response body: ${errorText}`)\n\n      throw new TokenRefreshError(\n        `Token exchange failed: ${response.statusText}. ${errorText}`,\n        response.status,\n      )\n    }\n\n    const data = (await response.json()) as FigmaTokenResponse\n\n    log.debug(\n      `Token response: ${JSON.stringify({\n        access_token: data.access_token,\n        token_type: data.token_type,\n        expires_in: data.expires_in,\n        scope: data.scope,\n        user_id_string: data.user_id_string,\n        refresh_token: data.refresh_token?.substring(0, 10) + '...',\n      })}`,\n    )\n\n    // Validate response contains required fields\n    if (!data.access_token || !data.refresh_token || !data.expires_in) {\n      throw new TokenRefreshError('Invalid token response: missing required fields')\n    }\n\n    // Convert response to our internal token format\n    const expiresAt = Date.now() + data.expires_in * 1000\n\n    return {\n      accessToken: data.access_token,\n      refreshToken: data.refresh_token,\n      expiresAt,\n      userId: data.user_id_string,\n    }\n  } catch (error) {\n    if (error instanceof TokenRefreshError) {\n      throw error\n    }\n\n    // Handle network errors and other exceptions\n    throw new TokenRefreshError(\n      `Failed to exchange code for tokens: ${error instanceof Error ? error.message : 'Unknown error'}`,\n    )\n  }\n}\n"],"names":["OAUTH_CONFIG","log","TokenRefreshError","Error","message","statusCode","name","refreshAccessToken","refreshToken","clientId","params","URLSearchParams","client_id","grant_type","refresh_token","response","fetch","refreshUrl","method","headers","body","toString","ok","errorText","text","statusText","status","data","json","access_token","expires_in","expiresAt","Date","now","accessToken","userId","user_id_string","error","exchangeCodeForTokens","code","codeVerifier","redirectUri","code_verifier","redirect_uri","debug","JSON","stringify","url","tokenUrl","Object","fromEntries","entries","token_type","scope","substring"],"mappings":"AAAA,6CAA6C,GAG7C,SAASA,YAAY,QAAQ,qBAAoB;AACjD,YAAYC,SAAS,kBAAiB;AAEtC;;CAEC,GACD,OAAO,MAAMC,0BAA0BC;;IACrC,YACEC,OAAe,EACf,AAAOC,UAAmB,CAC1B;QACA,KAAK,CAACD,eAFCC,aAAAA;QAGP,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,mBACpBC,YAAoB,EACpBC,WAAmBT,aAAaS,QAAQ;IAExC,8DAA8D;IAC9D,MAAMC,SAAS,IAAIC,gBAAgB;QACjCC,WAAWH;QACXI,YAAY;QACZC,eAAeN;IACjB;IAEA,IAAI;QACF,MAAMO,WAAW,MAAMC,MAAMhB,aAAaiB,UAAU,EAAE;YACpDC,QAAQ;YACRC,SAAS;gBACP,gBAAgB;YAClB;YACAC,MAAMV,OAAOW,QAAQ;QACvB;QAEA,IAAI,CAACN,SAASO,EAAE,EAAE;YAChB,MAAMC,YAAY,MAAMR,SAASS,IAAI;YACrC,MAAM,IAAItB,kBACR,CAAC,sBAAsB,EAAEa,SAASU,UAAU,CAAC,EAAE,EAAEF,WAAW,EAC5DR,SAASW,MAAM;QAEnB;QAEA,MAAMC,OAAQ,MAAMZ,SAASa,IAAI;QAEjC,6CAA6C;QAC7C,IAAI,CAACD,KAAKE,YAAY,IAAI,CAACF,KAAKb,aAAa,IAAI,CAACa,KAAKG,UAAU,EAAE;YACjE,MAAM,IAAI5B,kBAAkB;QAC9B;QAEA,gDAAgD;QAChD,MAAM6B,YAAYC,KAAKC,GAAG,KAAKN,KAAKG,UAAU,GAAG;QAEjD,OAAO;YACLI,aAAaP,KAAKE,YAAY;YAC9BrB,cAAcmB,KAAKb,aAAa;YAChCiB;YACAI,QAAQR,KAAKS,cAAc;QAC7B;IACF,EAAE,OAAOC,OAAO;QACd,IAAIA,iBAAiBnC,mBAAmB;YACtC,MAAMmC;QACR;QAEA,6CAA6C;QAC7C,MAAM,IAAInC,kBACR,CAAC,yBAAyB,EAAEmC,iBAAiBlC,QAAQkC,MAAMjC,OAAO,GAAG,iBAAiB;IAE1F;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,eAAekC,sBACpBC,IAAY,EACZC,YAAoB,EACpBC,cAAsBzC,aAAayC,WAAW,EAC9ChC,WAAmBT,aAAaS,QAAQ;IAExC,iEAAiE;IACjE,MAAMC,SAAS,IAAIC,gBAAgB;QACjCC,WAAWH;QACX8B;QACAG,eAAeF;QACf3B,YAAY;QACZ8B,cAAcF;IAChB;IAEA,IAAI;QACF,+DAA+D;QAC/D,mEAAmE;QACnE,MAAMtB,UAAkC;YACtC,gBAAgB;QAClB;QAEA,gBAAgB;QAChBlB,IAAI2C,KAAK,CACP,CAAC,wBAAwB,EAAEC,KAAKC,SAAS,CAAC;YACxCC,KAAK/C,aAAagD,QAAQ;YAC1B7B;YACAC,MAAMV,OAAOW,QAAQ;QACvB,IAAI;QAGN,MAAMN,WAAW,MAAMC,MAAMhB,aAAagD,QAAQ,EAAE;YAClD9B,QAAQ;YACRC;YACAC,MAAMV,OAAOW,QAAQ;QACvB;QAEApB,IAAI2C,KAAK,CACP,CAAC,yBAAyB,EAAEC,KAAKC,SAAS,CAAC;YACzCpB,QAAQX,SAASW,MAAM;YACvBD,YAAYV,SAASU,UAAU;YAC/BN,SAAS8B,OAAOC,WAAW,CAACnC,SAASI,OAAO,CAACgC,OAAO;QACtD,IAAI;QAGN,IAAI,CAACpC,SAASO,EAAE,EAAE;YAChB,MAAMC,YAAY,MAAMR,SAASS,IAAI;YACrCvB,IAAI2C,KAAK,CAAC,CAAC,qBAAqB,EAAErB,WAAW;YAE7C,MAAM,IAAIrB,kBACR,CAAC,uBAAuB,EAAEa,SAASU,UAAU,CAAC,EAAE,EAAEF,WAAW,EAC7DR,SAASW,MAAM;QAEnB;QAEA,MAAMC,OAAQ,MAAMZ,SAASa,IAAI;QAEjC3B,IAAI2C,KAAK,CACP,CAAC,gBAAgB,EAAEC,KAAKC,SAAS,CAAC;YAChCjB,cAAcF,KAAKE,YAAY;YAC/BuB,YAAYzB,KAAKyB,UAAU;YAC3BtB,YAAYH,KAAKG,UAAU;YAC3BuB,OAAO1B,KAAK0B,KAAK;YACjBjB,gBAAgBT,KAAKS,cAAc;YACnCtB,eAAea,KAAKb,aAAa,EAAEwC,UAAU,GAAG,MAAM;QACxD,IAAI;QAGN,6CAA6C;QAC7C,IAAI,CAAC3B,KAAKE,YAAY,IAAI,CAACF,KAAKb,aAAa,IAAI,CAACa,KAAKG,UAAU,EAAE;YACjE,MAAM,IAAI5B,kBAAkB;QAC9B;QAEA,gDAAgD;QAChD,MAAM6B,YAAYC,KAAKC,GAAG,KAAKN,KAAKG,UAAU,GAAG;QAEjD,OAAO;YACLI,aAAaP,KAAKE,YAAY;YAC9BrB,cAAcmB,KAAKb,aAAa;YAChCiB;YACAI,QAAQR,KAAKS,cAAc;QAC7B;IACF,EAAE,OAAOC,OAAO;QACd,IAAIA,iBAAiBnC,mBAAmB;YACtC,MAAMmC;QACR;QAEA,6CAA6C;QAC7C,MAAM,IAAInC,kBACR,CAAC,oCAAoC,EAAEmC,iBAAiBlC,QAAQkC,MAAMjC,OAAO,GAAG,iBAAiB;IAErG;AACF"}

package/dist/auth/types.d.ts

@@ -174,7 +174,7 @@ export interface JWTPayload extends JoseJWTPayload {
  * Used by local Payload instances to make authenticated requests
  */
 export interface ProjectToken {
-    /** Validated JWT claims (populated after validation) */
+    /** Validated JWT claims */
     claims?: JWTPayload;
     /** Unix timestamp (milliseconds) when the token expires (from validated exp claim) */
     expiresAt: number;

package/dist/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kCAAkC,EAClC,oCAAoC,EACpC,IAAI,EACL,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,MAAM,CAAA;AAExD;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,mBAAmB,GACnB,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,GACnB,yBAAyB,GACzB,0BAA0B,GAC1B,oBAAoB,GACpB,qBAAqB,GACrB,sBAAsB,GACtB,oBAAoB,GACpB,YAAY,GACZ,wBAAwB,GACxB,qBAAqB,GACrB,sBAAsB,GACtB,eAAe,GACf,2BAA2B,GAC3B,eAAe,GACf,gBAAgB,CAAA;AAEpB;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,uBAAuB,CAAA;AAExD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,kBAAkB,CAAA;AAE7D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAA;IACjB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,MAAM,CAAC,EAAE,eAAe,EAAE,CAAA;IAC1B,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,2BAA2B;IAC3B,aAAa,EAAE,MAAM,CAAA;IACrB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2BAA2B;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB;IACjB,KAAK,EACD,gBAAgB,GAChB,eAAe,GACf,iBAAiB,GACjB,eAAe,GACf,qBAAqB,GACrB,wBAAwB,CAAA;IAC5B,uCAAuC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,8DAA8D;IAC9D,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAA;IACpB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAA;IACrB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,+CAA+C;IAC/C,UAAU,EAAE,oBAAoB,CAAA;IAChC,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,0CAA0C;IAC1C,UAAU,EAAE,eAAe,CAAA;IAC3B,oBAAoB;IACpB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAA;IACrB,0CAA0C;IAC1C,mBAAmB,EAAE,MAAM,CAAA;IAC3B,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,gBAAgB,EAAE,MAAM,CAAA;IACxB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,+BAA+B;IAC/B,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,YAAY,EAAE,kCAAkC,EAAE,oCAAoC,EAAE,IAAI,EAAE,CAAA;AAE9F;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAC1B,kCAAkC,GAClC,oCAAoC,CAAA;AAExC;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,IAAI,CAAA;AAE5B;;;GAGG;AACH,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;IACtB,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAA;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,IAAI,EAAE;QACJ,uBAAuB;QACvB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kCAAkC,EAClC,oCAAoC,EACpC,IAAI,EACL,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,MAAM,CAAA;AAExD;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,mBAAmB,GACnB,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,GACnB,yBAAyB,GACzB,0BAA0B,GAC1B,oBAAoB,GACpB,qBAAqB,GACrB,sBAAsB,GACtB,oBAAoB,GACpB,YAAY,GACZ,wBAAwB,GACxB,qBAAqB,GACrB,sBAAsB,GACtB,eAAe,GACf,2BAA2B,GAC3B,eAAe,GACf,gBAAgB,CAAA;AAEpB;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,uBAAuB,CAAA;AAExD;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,kBAAkB,CAAA;AAE7D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAA;IACjB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAA;IACpB,yCAAyC;IACzC,MAAM,CAAC,EAAE,eAAe,EAAE,CAAA;IAC1B,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,2BAA2B;IAC3B,aAAa,EAAE,MAAM,CAAA;IACrB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2BAA2B;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB;IACjB,KAAK,EACD,gBAAgB,GAChB,eAAe,GACf,iBAAiB,GACjB,eAAe,GACf,qBAAqB,GACrB,wBAAwB,CAAA;IAC5B,uCAAuC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,8DAA8D;IAC9D,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAA;IACpB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAA;IACrB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,+CAA+C;IAC/C,UAAU,EAAE,oBAAoB,CAAA;IAChC,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,0CAA0C;IAC1C,UAAU,EAAE,eAAe,CAAA;IAC3B,oBAAoB;IACpB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAA;IACrB,0CAA0C;IAC1C,mBAAmB,EAAE,MAAM,CAAA;IAC3B,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,gBAAgB,EAAE,MAAM,CAAA;IACxB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,+BAA+B;IAC/B,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,YAAY,EAAE,kCAAkC,EAAE,oCAAoC,EAAE,IAAI,EAAE,CAAA;AAE9F;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAC1B,kCAAkC,GAClC,oCAAoC,CAAA;AAExC;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,IAAI,CAAA;AAE5B;;;GAGG;AACH,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;IACtB,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,2BAA2B;IAC3B,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAA;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,IAAI,EAAE;QACJ,uBAAuB;QACvB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF"}

package/dist/auth/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/types.ts"],"sourcesContent":["import type {\n  ErrorResponsePayloadWithErrMessage,\n  ErrorResponsePayloadWithErrorBoolean,\n  User,\n} from '@figma/rest-api-spec'\nimport type { JWTPayload as JoseJWTPayload } from 'jose'\n\n/**\n * Standard OAuth2 scopes for user-level permissions\n * @see https://www.figma.com/developers/api#oauth2\n */\nexport type FigmaOAuthScope =\n  | 'current_user:read' // Read user name, email, profile image\n  | 'file_comments:read' // Read file comments\n  | 'file_comments:write' // Post/delete comments and reactions\n  | 'file_content:read' // Read file contents (nodes, editor type)\n  | 'file_dev_resources:read' // Read dev resources\n  | 'file_dev_resources:write' // Write dev resources\n  | 'file_metadata:read' // Read file metadata\n  | 'file_variables:read' // Read variables (Enterprise only)\n  | 'file_variables:write' // Write variables (Enterprise only)\n  | 'file_versions:read' // Read version history\n  | 'files:read' // @deprecated Read files, projects, users\n  | 'library_analytics:read' // Read library analytics\n  | 'library_assets:read' // Read published components/styles data\n  | 'library_content:read' // Read published components/styles\n  | 'projects:read' // List projects and files\n  | 'team_library_content:read' // Read team published content\n  | 'webhooks:read' // Read webhook metadata\n  | 'webhooks:write' // Create/manage webhooks\n\n/**\n * Organization-level OAuth2 scopes\n * Requires organization admin permissions\n */\nexport type FigmaOrgOAuthScope = 'org:activity_log_read' // Read organization activity logs\n\n/**\n * All valid Figma OAuth scopes\n */\nexport type FigmaScope = FigmaOAuthScope | FigmaOrgOAuthScope\n\n/**\n * OAuth tokens returned from Figma API (internal format)\n */\nexport interface FigmaTokens {\n  /** OAuth2 access token for making authenticated API requests */\n  accessToken: string\n  /** Unix timestamp (milliseconds) when the access token expires */\n  expiresAt: number\n  /** OAuth2 refresh token for obtaining new access tokens */\n  refreshToken: string\n  /** OAuth scopes granted to this token */\n  scopes?: FigmaOAuthScope[]\n  /** Token type (typically \"Bearer\") */\n  tokenType?: string\n  /** Figma user ID string */\n  userId?: string\n}\n\n/**\n * Raw token response from Figma OAuth2 token endpoint\n * Response from POST https://api.figma.com/v1/oauth/token\n */\nexport interface FigmaTokenResponse {\n  /** OAuth2 access token */\n  access_token: string\n  /** Token expiration time in seconds */\n  expires_in: number\n  /** OAuth2 refresh token */\n  refresh_token: string\n  /** Space-separated list of granted scopes */\n  scope?: string\n  /** Token type (typically \"Bearer\") */\n  token_type?: string\n  /** Figma user ID string */\n  user_id_string?: string\n}\n\n/**\n * OAuth2 error response\n * @see https://datatracker.ietf.org/doc/html/rfc6749#section-5.2\n */\nexport interface OAuthErrorResponse {\n  /** Error code */\n  error:\n    | 'invalid_client'\n    | 'invalid_grant'\n    | 'invalid_request'\n    | 'invalid_scope'\n    | 'unauthorized_client'\n    | 'unsupported_grant_type'\n  /** Human-readable error description */\n  error_description?: string\n  /** URI with error information */\n  error_uri?: string\n}\n\n/**\n * Parameters for OAuth2 authorization URL\n */\nexport interface OAuthAuthorizationParams {\n  /** OAuth2 client ID */\n  client_id: string\n  /** PKCE code challenge (optional but recommended) */\n  code_challenge?: string\n  /** PKCE code challenge method (must be S256 if using PKCE) */\n  code_challenge_method?: 'S256'\n  /** Redirect URI for callback */\n  redirect_uri: string\n  /** Response type (always \"code\" for authorization code flow) */\n  response_type: 'code'\n  /** Requested scopes (space-separated) */\n  scope: string\n  /** State parameter for CSRF protection */\n  state: string\n}\n\n/**\n * Parameters for OAuth2 token exchange\n */\nexport interface OAuthTokenExchangeParams {\n  /** Authorization code from callback */\n  code: string\n  /** PKCE code verifier (if PKCE was used) */\n  code_verifier?: string\n  /** Grant type (always \"authorization_code\") */\n  grant_type: 'authorization_code'\n  /** Redirect URI (must match authorization request) */\n  redirect_uri: string\n}\n\n/**\n * Parameters for OAuth2 token refresh\n */\nexport interface OAuthTokenRefreshParams {\n  /** Grant type (always \"refresh_token\") */\n  grant_type: 'refresh_token'\n  /** Refresh token */\n  refresh_token: string\n}\n\n/**\n * Configuration for token storage\n */\nexport interface TokenStoreConfig {\n  /** Custom config name (defaults to 'payloadcms-figma') */\n  configName?: string\n  /** Enable encryption (defaults to true) */\n  encryptionKey?: string\n}\n\n/**\n * PKCE (Proof Key for Code Exchange) pair for OAuth2 public clients\n * @see https://datatracker.ietf.org/doc/html/rfc7636\n */\nexport interface PKCEPair {\n  /** Code challenge derived from code verifier */\n  codeChallenge: string\n  /** Code challenge method (always S256) */\n  codeChallengeMethod: 'S256'\n  /** Code verifier - random string used to generate challenge */\n  codeVerifier: string\n}\n\n/**\n * OAuth configuration for Figma API (public client with PKCE)\n *\n * This configuration is for a PUBLIC OAuth client that uses PKCE\n * (Proof Key for Code Exchange) instead of a client secret.\n * Public clients (like CLIs) cannot securely store client secrets.\n */\nexport interface OAuthConfig {\n  /** Figma OAuth authorization URL */\n  authorizationUrl: string\n  /** OAuth2 client ID (public client) */\n  clientId: string\n  /** OAuth2 redirect URI for callback */\n  redirectUri: string\n  /** Figma OAuth token refresh URL */\n  refreshUrl: string\n  /** OAuth2 scopes to request */\n  scopes: FigmaOAuthScope[]\n  /** Figma OAuth token exchange URL */\n  tokenUrl: string\n}\n\n/**\n * Re-export Figma's official types for convenience\n */\nexport type { ErrorResponsePayloadWithErrMessage, ErrorResponsePayloadWithErrorBoolean, User }\n\n/**\n * Type alias for Figma API error responses\n * Combines both error response formats from Figma's REST API\n */\nexport type FigmaErrorResponse =\n  | ErrorResponsePayloadWithErrMessage\n  | ErrorResponsePayloadWithErrorBoolean\n\n/**\n * Figma user information\n * Re-exported from @figma/rest-api-spec\n */\nexport type FigmaUser = User\n\n/**\n * JWT payload structure from Figma project tokens\n * Extends jose's standard JWTPayload with Figma-specific claims\n */\nexport interface JWTPayload extends JoseJWTPayload {\n  [key: string]: unknown\n  /** User email address */\n  email?: string\n  /** Tenant/CMS ID this token is scoped to */\n  tenant_id?: string\n}\n\n/**\n * Project token (JWT) for authenticating to Content API\n * Used by local Payload instances to make authenticated requests\n */\nexport interface ProjectToken {\n  /** Validated JWT claims (populated after validation) */\n  claims?: JWTPayload\n  /** Unix timestamp (milliseconds) when the token expires (from validated exp claim) */\n  expiresAt: number\n  /** Tenant/CMS ID this token is scoped to */\n  tenantId: string\n  /** JWT token string signed by Figma API */\n  token: string\n}\n\n/**\n * Raw project token response from Figma API\n * Response from GET https://api.figma.com/v1/cms/:id/token/\n */\nexport interface ProjectTokenResponse {\n  /** Response metadata containing the JWT token */\n  meta: {\n    /** JWT token string */\n    token: string\n  }\n}\n"],"names":[],"mappings":"AAyOA;;;CAGC,GACD,WAMC"}
+{"version":3,"sources":["../../src/auth/types.ts"],"sourcesContent":["import type {\n  ErrorResponsePayloadWithErrMessage,\n  ErrorResponsePayloadWithErrorBoolean,\n  User,\n} from '@figma/rest-api-spec'\nimport type { JWTPayload as JoseJWTPayload } from 'jose'\n\n/**\n * Standard OAuth2 scopes for user-level permissions\n * @see https://www.figma.com/developers/api#oauth2\n */\nexport type FigmaOAuthScope =\n  | 'current_user:read' // Read user name, email, profile image\n  | 'file_comments:read' // Read file comments\n  | 'file_comments:write' // Post/delete comments and reactions\n  | 'file_content:read' // Read file contents (nodes, editor type)\n  | 'file_dev_resources:read' // Read dev resources\n  | 'file_dev_resources:write' // Write dev resources\n  | 'file_metadata:read' // Read file metadata\n  | 'file_variables:read' // Read variables (Enterprise only)\n  | 'file_variables:write' // Write variables (Enterprise only)\n  | 'file_versions:read' // Read version history\n  | 'files:read' // @deprecated Read files, projects, users\n  | 'library_analytics:read' // Read library analytics\n  | 'library_assets:read' // Read published components/styles data\n  | 'library_content:read' // Read published components/styles\n  | 'projects:read' // List projects and files\n  | 'team_library_content:read' // Read team published content\n  | 'webhooks:read' // Read webhook metadata\n  | 'webhooks:write' // Create/manage webhooks\n\n/**\n * Organization-level OAuth2 scopes\n * Requires organization admin permissions\n */\nexport type FigmaOrgOAuthScope = 'org:activity_log_read' // Read organization activity logs\n\n/**\n * All valid Figma OAuth scopes\n */\nexport type FigmaScope = FigmaOAuthScope | FigmaOrgOAuthScope\n\n/**\n * OAuth tokens returned from Figma API (internal format)\n */\nexport interface FigmaTokens {\n  /** OAuth2 access token for making authenticated API requests */\n  accessToken: string\n  /** Unix timestamp (milliseconds) when the access token expires */\n  expiresAt: number\n  /** OAuth2 refresh token for obtaining new access tokens */\n  refreshToken: string\n  /** OAuth scopes granted to this token */\n  scopes?: FigmaOAuthScope[]\n  /** Token type (typically \"Bearer\") */\n  tokenType?: string\n  /** Figma user ID string */\n  userId?: string\n}\n\n/**\n * Raw token response from Figma OAuth2 token endpoint\n * Response from POST https://api.figma.com/v1/oauth/token\n */\nexport interface FigmaTokenResponse {\n  /** OAuth2 access token */\n  access_token: string\n  /** Token expiration time in seconds */\n  expires_in: number\n  /** OAuth2 refresh token */\n  refresh_token: string\n  /** Space-separated list of granted scopes */\n  scope?: string\n  /** Token type (typically \"Bearer\") */\n  token_type?: string\n  /** Figma user ID string */\n  user_id_string?: string\n}\n\n/**\n * OAuth2 error response\n * @see https://datatracker.ietf.org/doc/html/rfc6749#section-5.2\n */\nexport interface OAuthErrorResponse {\n  /** Error code */\n  error:\n    | 'invalid_client'\n    | 'invalid_grant'\n    | 'invalid_request'\n    | 'invalid_scope'\n    | 'unauthorized_client'\n    | 'unsupported_grant_type'\n  /** Human-readable error description */\n  error_description?: string\n  /** URI with error information */\n  error_uri?: string\n}\n\n/**\n * Parameters for OAuth2 authorization URL\n */\nexport interface OAuthAuthorizationParams {\n  /** OAuth2 client ID */\n  client_id: string\n  /** PKCE code challenge (optional but recommended) */\n  code_challenge?: string\n  /** PKCE code challenge method (must be S256 if using PKCE) */\n  code_challenge_method?: 'S256'\n  /** Redirect URI for callback */\n  redirect_uri: string\n  /** Response type (always \"code\" for authorization code flow) */\n  response_type: 'code'\n  /** Requested scopes (space-separated) */\n  scope: string\n  /** State parameter for CSRF protection */\n  state: string\n}\n\n/**\n * Parameters for OAuth2 token exchange\n */\nexport interface OAuthTokenExchangeParams {\n  /** Authorization code from callback */\n  code: string\n  /** PKCE code verifier (if PKCE was used) */\n  code_verifier?: string\n  /** Grant type (always \"authorization_code\") */\n  grant_type: 'authorization_code'\n  /** Redirect URI (must match authorization request) */\n  redirect_uri: string\n}\n\n/**\n * Parameters for OAuth2 token refresh\n */\nexport interface OAuthTokenRefreshParams {\n  /** Grant type (always \"refresh_token\") */\n  grant_type: 'refresh_token'\n  /** Refresh token */\n  refresh_token: string\n}\n\n/**\n * Configuration for token storage\n */\nexport interface TokenStoreConfig {\n  /** Custom config name (defaults to 'payloadcms-figma') */\n  configName?: string\n  /** Enable encryption (defaults to true) */\n  encryptionKey?: string\n}\n\n/**\n * PKCE (Proof Key for Code Exchange) pair for OAuth2 public clients\n * @see https://datatracker.ietf.org/doc/html/rfc7636\n */\nexport interface PKCEPair {\n  /** Code challenge derived from code verifier */\n  codeChallenge: string\n  /** Code challenge method (always S256) */\n  codeChallengeMethod: 'S256'\n  /** Code verifier - random string used to generate challenge */\n  codeVerifier: string\n}\n\n/**\n * OAuth configuration for Figma API (public client with PKCE)\n *\n * This configuration is for a PUBLIC OAuth client that uses PKCE\n * (Proof Key for Code Exchange) instead of a client secret.\n * Public clients (like CLIs) cannot securely store client secrets.\n */\nexport interface OAuthConfig {\n  /** Figma OAuth authorization URL */\n  authorizationUrl: string\n  /** OAuth2 client ID (public client) */\n  clientId: string\n  /** OAuth2 redirect URI for callback */\n  redirectUri: string\n  /** Figma OAuth token refresh URL */\n  refreshUrl: string\n  /** OAuth2 scopes to request */\n  scopes: FigmaOAuthScope[]\n  /** Figma OAuth token exchange URL */\n  tokenUrl: string\n}\n\n/**\n * Re-export Figma's official types for convenience\n */\nexport type { ErrorResponsePayloadWithErrMessage, ErrorResponsePayloadWithErrorBoolean, User }\n\n/**\n * Type alias for Figma API error responses\n * Combines both error response formats from Figma's REST API\n */\nexport type FigmaErrorResponse =\n  | ErrorResponsePayloadWithErrMessage\n  | ErrorResponsePayloadWithErrorBoolean\n\n/**\n * Figma user information\n * Re-exported from @figma/rest-api-spec\n */\nexport type FigmaUser = User\n\n/**\n * JWT payload structure from Figma project tokens\n * Extends jose's standard JWTPayload with Figma-specific claims\n */\nexport interface JWTPayload extends JoseJWTPayload {\n  [key: string]: unknown\n  /** User email address */\n  email?: string\n  /** Tenant/CMS ID this token is scoped to */\n  tenant_id?: string\n}\n\n/**\n * Project token (JWT) for authenticating to Content API\n * Used by local Payload instances to make authenticated requests\n */\nexport interface ProjectToken {\n  /** Validated JWT claims */\n  claims?: JWTPayload\n  /** Unix timestamp (milliseconds) when the token expires (from validated exp claim) */\n  expiresAt: number\n  /** Tenant/CMS ID this token is scoped to */\n  tenantId: string\n  /** JWT token string signed by Figma API */\n  token: string\n}\n\n/**\n * Raw project token response from Figma API\n * Response from GET https://api.figma.com/v1/cms/:id/token/\n */\nexport interface ProjectTokenResponse {\n  /** Response metadata containing the JWT token */\n  meta: {\n    /** JWT token string */\n    token: string\n  }\n}\n"],"names":[],"mappings":"AAyOA;;;CAGC,GACD,WAMC"}

package/dist/cli.js

@@ -77,9 +77,7 @@ class Main {
                     });
                     break;
                 case 'login':
-                    await loginCommand({
-                        debug: this.args['--debug']
-                    });
+                    await loginCommand();
                     break;
                 case 'logout':
                     await logoutCommand({

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport arg from 'arg'\nimport pc from 'picocolors'\n\nimport type { CliArgs } from './types.js'\n\nimport { deployCommand } from './commands/deploy.js'\nimport { initCommand } from './commands/init.js'\nimport { listTokensCommand } from './commands/list-tokens.js'\nimport { loginCommand } from './commands/login.js'\nimport { logoutCommand } from './commands/logout.js'\nimport { feedbackOutro, helpMessage } from './utils/messages.js'\n\n/**\n * Entrypoint for bin/cli.js\n */\nexport async function main(): Promise<void> {\n  try {\n    await new Main().init()\n  } catch (e) {\n    if (e instanceof Error) {\n      // eslint-disable-next-line no-console\n      console.error(e.message)\n    }\n  }\n}\n\nclass Main {\n  args: CliArgs\n\n  constructor() {\n    // @ts-expect-error bad typings\n    this.args = arg(\n      {\n        '--debug': Boolean,\n        '--force': Boolean,\n        '--help': Boolean,\n        '--id': String,\n        '--name': String,\n        '--skip-auth': Boolean,\n        '--yes': Boolean,\n\n        // Aliases\n        '-f': '--force',\n        '-h': '--help',\n        '-y': '--yes',\n      },\n      { permissive: true },\n    )\n\n    // Set debug flag globally\n    if (this.args['--debug']) {\n      process.env.DEBUG = 'true'\n    }\n  }\n\n  async init(): Promise<void> {\n    try {\n      if (this.args['--help']) {\n        helpMessage()\n        process.exit(0)\n      }\n\n      // Get the subcommand (first non-flag argument)\n      const subcommand = this.args._[0]\n\n      // eslint-disable-next-line no-console\n      console.log('\\n')\n      p.intro(pc.bgCyan(pc.black(' @payloadcms/figma ')))\n\n      // Route to appropriate command handler\n      switch (subcommand) {\n        case 'deploy':\n          await deployCommand({\n            debug: this.args['--debug'],\n            yes: this.args['--yes'],\n          })\n          break\n\n        case 'init':\n          await initCommand({\n            id: this.args['--id'],\n            name: this.args['--name'],\n            debug: this.args['--debug'],\n            force: this.args['--force'],\n            skipAuth: this.args['--skip-auth'],\n          })\n          break\n\n        case 'list-tokens':\n          listTokensCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case 'login':\n          await loginCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case 'logout':\n          await logoutCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case undefined:\n          // No subcommand - show default message\n          p.note(\"Let's create a new CMS!\")\n          p.outro(feedbackOutro())\n          break\n\n        default:\n          p.log.error(pc.red(`Unknown command: ${subcommand}`))\n          p.note('Use --help to see available commands', 'Tip')\n          process.exit(1)\n      }\n\n      process.exit(0)\n    } catch (err: unknown) {\n      // eslint-disable-next-line no-console\n      console.error(err instanceof Error ? err.message : 'An error occurred')\n      process.exit(1)\n    }\n  }\n}\n"],"names":["p","arg","pc","deployCommand","initCommand","listTokensCommand","loginCommand","logoutCommand","feedbackOutro","helpMessage","main","Main","init","e","Error","console","error","message","args","Boolean","String","permissive","process","env","DEBUG","exit","subcommand","_","log","intro","bgCyan","black","debug","yes","id","name","force","skipAuth","undefined","note","outro","red","err"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,SAAS,MAAK;AACrB,OAAOC,QAAQ,aAAY;AAI3B,SAASC,aAAa,QAAQ,uBAAsB;AACpD,SAASC,WAAW,QAAQ,qBAAoB;AAChD,SAASC,iBAAiB,QAAQ,4BAA2B;AAC7D,SAASC,YAAY,QAAQ,sBAAqB;AAClD,SAASC,aAAa,QAAQ,uBAAsB;AACpD,SAASC,aAAa,EAAEC,WAAW,QAAQ,sBAAqB;AAEhE;;CAEC,GACD,OAAO,eAAeC;IACpB,IAAI;QACF,MAAM,IAAIC,OAAOC,IAAI;IACvB,EAAE,OAAOC,GAAG;QACV,IAAIA,aAAaC,OAAO;YACtB,sCAAsC;YACtCC,QAAQC,KAAK,CAACH,EAAEI,OAAO;QACzB;IACF;AACF;AAEA,MAAMN;IACJO,KAAa;IAEb,aAAc;QACZ,+BAA+B;QAC/B,IAAI,CAACA,IAAI,GAAGjB,IACV;YACE,WAAWkB;YACX,WAAWA;YACX,UAAUA;YACV,QAAQC;YACR,UAAUA;YACV,eAAeD;YACf,SAASA;YAET,UAAU;YACV,MAAM;YACN,MAAM;YACN,MAAM;QACR,GACA;YAAEE,YAAY;QAAK;QAGrB,0BAA0B;QAC1B,IAAI,IAAI,CAACH,IAAI,CAAC,UAAU,EAAE;YACxBI,QAAQC,GAAG,CAACC,KAAK,GAAG;QACtB;IACF;IAEA,MAAMZ,OAAsB;QAC1B,IAAI;YACF,IAAI,IAAI,CAACM,IAAI,CAAC,SAAS,EAAE;gBACvBT;gBACAa,QAAQG,IAAI,CAAC;YACf;YAEA,+CAA+C;YAC/C,MAAMC,aAAa,IAAI,CAACR,IAAI,CAACS,CAAC,CAAC,EAAE;YAEjC,sCAAsC;YACtCZ,QAAQa,GAAG,CAAC;YACZ5B,EAAE6B,KAAK,CAAC3B,GAAG4B,MAAM,CAAC5B,GAAG6B,KAAK,CAAC;YAE3B,uCAAuC;YACvC,OAAQL;gBACN,KAAK;oBACH,MAAMvB,cAAc;wBAClB6B,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;wBAC3Be,KAAK,IAAI,CAACf,IAAI,CAAC,QAAQ;oBACzB;oBACA;gBAEF,KAAK;oBACH,MAAMd,YAAY;wBAChB8B,IAAI,IAAI,CAAChB,IAAI,CAAC,OAAO;wBACrBiB,MAAM,IAAI,CAACjB,IAAI,CAAC,SAAS;wBACzBc,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;wBAC3BkB,OAAO,IAAI,CAAClB,IAAI,CAAC,UAAU;wBAC3BmB,UAAU,IAAI,CAACnB,IAAI,CAAC,cAAc;oBACpC;oBACA;gBAEF,KAAK;oBACHb,kBAAkB;wBAChB2B,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAK;oBACH,MAAMZ,aAAa;wBACjB0B,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAK;oBACH,MAAMX,cAAc;wBAClByB,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAKoB;oBACH,uCAAuC;oBACvCtC,EAAEuC,IAAI,CAAC;oBACPvC,EAAEwC,KAAK,CAAChC;oBACR;gBAEF;oBACER,EAAE4B,GAAG,CAACZ,KAAK,CAACd,GAAGuC,GAAG,CAAC,CAAC,iBAAiB,EAAEf,YAAY;oBACnD1B,EAAEuC,IAAI,CAAC,wCAAwC;oBAC/CjB,QAAQG,IAAI,CAAC;YACjB;YAEAH,QAAQG,IAAI,CAAC;QACf,EAAE,OAAOiB,KAAc;YACrB,sCAAsC;YACtC3B,QAAQC,KAAK,CAAC0B,eAAe5B,QAAQ4B,IAAIzB,OAAO,GAAG;YACnDK,QAAQG,IAAI,CAAC;QACf;IACF;AACF"}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport arg from 'arg'\nimport pc from 'picocolors'\n\nimport type { CliArgs } from './types.js'\n\nimport { deployCommand } from './commands/deploy.js'\nimport { initCommand } from './commands/init.js'\nimport { listTokensCommand } from './commands/list-tokens.js'\nimport { loginCommand } from './commands/login.js'\nimport { logoutCommand } from './commands/logout.js'\nimport { feedbackOutro, helpMessage } from './utils/messages.js'\n\n/**\n * Entrypoint for bin/cli.js\n */\nexport async function main(): Promise<void> {\n  try {\n    await new Main().init()\n  } catch (e) {\n    if (e instanceof Error) {\n      // eslint-disable-next-line no-console\n      console.error(e.message)\n    }\n  }\n}\n\nclass Main {\n  args: CliArgs\n\n  constructor() {\n    // @ts-expect-error bad typings\n    this.args = arg(\n      {\n        '--debug': Boolean,\n        '--force': Boolean,\n        '--help': Boolean,\n        '--id': String,\n        '--name': String,\n        '--skip-auth': Boolean,\n        '--yes': Boolean,\n\n        // Aliases\n        '-f': '--force',\n        '-h': '--help',\n        '-y': '--yes',\n      },\n      { permissive: true },\n    )\n\n    // Set debug flag globally\n    if (this.args['--debug']) {\n      process.env.DEBUG = 'true'\n    }\n  }\n\n  async init(): Promise<void> {\n    try {\n      if (this.args['--help']) {\n        helpMessage()\n        process.exit(0)\n      }\n\n      // Get the subcommand (first non-flag argument)\n      const subcommand = this.args._[0]\n\n      // eslint-disable-next-line no-console\n      console.log('\\n')\n      p.intro(pc.bgCyan(pc.black(' @payloadcms/figma ')))\n\n      // Route to appropriate command handler\n      switch (subcommand) {\n        case 'deploy':\n          await deployCommand({\n            debug: this.args['--debug'],\n            yes: this.args['--yes'],\n          })\n          break\n\n        case 'init':\n          await initCommand({\n            id: this.args['--id'],\n            name: this.args['--name'],\n            debug: this.args['--debug'],\n            force: this.args['--force'],\n            skipAuth: this.args['--skip-auth'],\n          })\n          break\n\n        case 'list-tokens':\n          listTokensCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case 'login':\n          await loginCommand()\n          break\n\n        case 'logout':\n          await logoutCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case undefined:\n          // No subcommand - show default message\n          p.note(\"Let's create a new CMS!\")\n          p.outro(feedbackOutro())\n          break\n\n        default:\n          p.log.error(pc.red(`Unknown command: ${subcommand}`))\n          p.note('Use --help to see available commands', 'Tip')\n          process.exit(1)\n      }\n\n      process.exit(0)\n    } catch (err: unknown) {\n      // eslint-disable-next-line no-console\n      console.error(err instanceof Error ? err.message : 'An error occurred')\n      process.exit(1)\n    }\n  }\n}\n"],"names":["p","arg","pc","deployCommand","initCommand","listTokensCommand","loginCommand","logoutCommand","feedbackOutro","helpMessage","main","Main","init","e","Error","console","error","message","args","Boolean","String","permissive","process","env","DEBUG","exit","subcommand","_","log","intro","bgCyan","black","debug","yes","id","name","force","skipAuth","undefined","note","outro","red","err"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,SAAS,MAAK;AACrB,OAAOC,QAAQ,aAAY;AAI3B,SAASC,aAAa,QAAQ,uBAAsB;AACpD,SAASC,WAAW,QAAQ,qBAAoB;AAChD,SAASC,iBAAiB,QAAQ,4BAA2B;AAC7D,SAASC,YAAY,QAAQ,sBAAqB;AAClD,SAASC,aAAa,QAAQ,uBAAsB;AACpD,SAASC,aAAa,EAAEC,WAAW,QAAQ,sBAAqB;AAEhE;;CAEC,GACD,OAAO,eAAeC;IACpB,IAAI;QACF,MAAM,IAAIC,OAAOC,IAAI;IACvB,EAAE,OAAOC,GAAG;QACV,IAAIA,aAAaC,OAAO;YACtB,sCAAsC;YACtCC,QAAQC,KAAK,CAACH,EAAEI,OAAO;QACzB;IACF;AACF;AAEA,MAAMN;IACJO,KAAa;IAEb,aAAc;QACZ,+BAA+B;QAC/B,IAAI,CAACA,IAAI,GAAGjB,IACV;YACE,WAAWkB;YACX,WAAWA;YACX,UAAUA;YACV,QAAQC;YACR,UAAUA;YACV,eAAeD;YACf,SAASA;YAET,UAAU;YACV,MAAM;YACN,MAAM;YACN,MAAM;QACR,GACA;YAAEE,YAAY;QAAK;QAGrB,0BAA0B;QAC1B,IAAI,IAAI,CAACH,IAAI,CAAC,UAAU,EAAE;YACxBI,QAAQC,GAAG,CAACC,KAAK,GAAG;QACtB;IACF;IAEA,MAAMZ,OAAsB;QAC1B,IAAI;YACF,IAAI,IAAI,CAACM,IAAI,CAAC,SAAS,EAAE;gBACvBT;gBACAa,QAAQG,IAAI,CAAC;YACf;YAEA,+CAA+C;YAC/C,MAAMC,aAAa,IAAI,CAACR,IAAI,CAACS,CAAC,CAAC,EAAE;YAEjC,sCAAsC;YACtCZ,QAAQa,GAAG,CAAC;YACZ5B,EAAE6B,KAAK,CAAC3B,GAAG4B,MAAM,CAAC5B,GAAG6B,KAAK,CAAC;YAE3B,uCAAuC;YACvC,OAAQL;gBACN,KAAK;oBACH,MAAMvB,cAAc;wBAClB6B,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;wBAC3Be,KAAK,IAAI,CAACf,IAAI,CAAC,QAAQ;oBACzB;oBACA;gBAEF,KAAK;oBACH,MAAMd,YAAY;wBAChB8B,IAAI,IAAI,CAAChB,IAAI,CAAC,OAAO;wBACrBiB,MAAM,IAAI,CAACjB,IAAI,CAAC,SAAS;wBACzBc,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;wBAC3BkB,OAAO,IAAI,CAAClB,IAAI,CAAC,UAAU;wBAC3BmB,UAAU,IAAI,CAACnB,IAAI,CAAC,cAAc;oBACpC;oBACA;gBAEF,KAAK;oBACHb,kBAAkB;wBAChB2B,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAK;oBACH,MAAMZ;oBACN;gBAEF,KAAK;oBACH,MAAMC,cAAc;wBAClByB,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAKoB;oBACH,uCAAuC;oBACvCtC,EAAEuC,IAAI,CAAC;oBACPvC,EAAEwC,KAAK,CAAChC;oBACR;gBAEF;oBACER,EAAE4B,GAAG,CAACZ,KAAK,CAACd,GAAGuC,GAAG,CAAC,CAAC,iBAAiB,EAAEf,YAAY;oBACnD1B,EAAEuC,IAAI,CAAC,wCAAwC;oBAC/CjB,QAAQG,IAAI,CAAC;YACjB;YAEAH,QAAQG,IAAI,CAAC;QACf,EAAE,OAAOiB,KAAc;YACrB,sCAAsC;YACtC3B,QAAQC,KAAK,CAAC0B,eAAe5B,QAAQ4B,IAAIzB,OAAO,GAAG;YACnDK,QAAQG,IAAI,CAAC;QACf;IACF;AACF"}

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAkBA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gCAAgC;IAChC,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AA6BD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmThF"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAoBA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gCAAgC;IAChC,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AA6BD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyThF"}

package/dist/commands/deploy.js

@@ -2,15 +2,17 @@ import * as p from '@clack/prompts';
 import { spawn } from 'child_process';
 import path from 'path';
 import pc from 'picocolors';
+import { Project } from 'ts-morph';
 import { createDeployment, getTenantDetails, performDeployment } from '../api/control-plane.js';
 import { getValidAccessToken } from '../auth/oauth-flow.js';
 import { getValidProjectToken } from '../auth/project-token.js';
 import { TokenStore } from '../auth/token-store.js';
 import { collectStaticAssets, createLambdaZip, getFileSize } from '../utils/asset-collection.js';
 import { detectBuild, getBuildCommand } from '../utils/build-detection.js';
-import { hasFigmaConfig, readFigmaConfig } from '../utils/config.js';
 import * as log from '../utils/log.js';
 import { getPackageManager } from '../utils/package-manager.js';
+import { readFigmaConfig } from '../utils/payload-config-ast.js';
+import { findPayloadConfig } from '../utils/payload-config-finder.js';
 import { isInProjectDirectory } from '../utils/project.js';
 import { uploadLambdaZip, uploadStaticAssets } from '../utils/s3-upload.js';
 import { loginCommand } from './login.js';
@@ -57,16 +59,23 @@ import { loginCommand } from './login.js';
             p.note('Create a project or connect an existing one to Figma: npx @payloadcms/figma init', 'Tip');
             process.exit(1);
         }
-        // Check if project connected to Figma
-        if (!await hasFigmaConfig(projectPath)) {
-            p.log.error(pc.red('✗ Your project is not connected to a Figma CMS ID.'));
+        // Find and read payload config
+        const configPath = await findPayloadConfig(projectPath);
+        if (!configPath) {
+            p.log.error(pc.red('✗ payload.config.ts not found'));
             p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip');
             process.exit(1);
         }
-        // Get tenant configuration
-        const config = await readFigmaConfig(projectPath);
+        // Parse config with ts-morph
+        const project = new Project({
+            skipAddingFilesFromTsConfig: true
+        });
+        const sourceFile = project.addSourceFileAtPath(configPath);
+        // Read figma configuration from buildConfig
+        const config = readFigmaConfig(sourceFile);
         if (!config || !config.tenantId) {
-            p.log.error(pc.red('✗ No tenant ID found in figma.config.json'));
+            p.log.error(pc.red('✗ No figma configuration found in payload.config.ts'));
+            p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip');
             process.exit(1);
         }
         // Check authentication
@@ -74,9 +83,7 @@ import { loginCommand } from './login.js';
         let accessToken = await getValidAccessToken(tokenStore);
         if (!accessToken) {
             p.log.message('Please log in to continue');
-            await loginCommand({
-                debug: options.debug
-            });
+            await loginCommand();
             accessToken = await getValidAccessToken(tokenStore);
             if (!accessToken) {
                 p.log.error(pc.red('✗ Authentication failed'));

package/dist/commands/deploy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/commands/deploy.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport { spawn } from 'child_process'\nimport path from 'path'\nimport pc from 'picocolors'\n\nimport { createDeployment, getTenantDetails, performDeployment } from '../api/control-plane.js'\nimport { getValidAccessToken } from '../auth/oauth-flow.js'\nimport { getValidProjectToken } from '../auth/project-token.js'\nimport { TokenStore } from '../auth/token-store.js'\nimport { collectStaticAssets, createLambdaZip, getFileSize } from '../utils/asset-collection.js'\nimport { detectBuild, getBuildCommand } from '../utils/build-detection.js'\nimport { hasFigmaConfig, readFigmaConfig } from '../utils/config.js'\nimport * as log from '../utils/log.js'\nimport { getPackageManager } from '../utils/package-manager.js'\nimport { isInProjectDirectory } from '../utils/project.js'\nimport { uploadLambdaZip, uploadStaticAssets } from '../utils/s3-upload.js'\nimport { loginCommand } from './login.js'\n\n/**\n * Options for deploy command\n */\nexport interface DeployCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n  /** Skip confirmation prompts */\n  yes?: boolean\n}\n\n/**\n * Format bytes to human-readable string\n */\nfunction formatBytes(bytes: number): string {\n  if (bytes === 0) {\n    return '0 B'\n  }\n  const k = 1024\n  const sizes = ['B', 'KB', 'MB', 'GB']\n  const i = Math.floor(Math.log(bytes) / Math.log(k))\n  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(2))} ${sizes[i]}`\n}\n\n/**\n * Format date to human-readable string in local time\n */\nfunction formatDate(date: Date): string {\n  return date.toLocaleString('en-US', {\n    day: 'numeric',\n    hour: 'numeric',\n    minute: 'numeric',\n    month: 'long',\n    timeZoneName: 'short',\n    year: 'numeric',\n  })\n}\n\n/**\n * Execute the deploy command\n *\n * @param options - Command options\n */\nexport async function deployCommand(options: DeployCommandOptions): Promise<void> {\n  const projectPath = process.cwd()\n  const spinner = p.spinner()\n\n  try {\n    // ===== PRE-FLIGHT CHECKS =====\n\n    // Check if in project directory\n    if (!(await isInProjectDirectory(projectPath))) {\n      p.log.error(pc.red(\"✗ 'deploy' command is not available outside of a Payload project.\"))\n      p.note(\n        'Create a project or connect an existing one to Figma: npx @payloadcms/figma init',\n        'Tip',\n      )\n      process.exit(1)\n    }\n\n    // Check if project connected to Figma\n    if (!(await hasFigmaConfig(projectPath))) {\n      p.log.error(pc.red('✗ Your project is not connected to a Figma CMS ID.'))\n      p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip')\n      process.exit(1)\n    }\n\n    // Get tenant configuration\n    const config = await readFigmaConfig(projectPath)\n    if (!config || !config.tenantId) {\n      p.log.error(pc.red('✗ No tenant ID found in figma.config.json'))\n      process.exit(1)\n    }\n\n    // Check authentication\n    const tokenStore = new TokenStore()\n\n    let accessToken = await getValidAccessToken(tokenStore)\n    if (!accessToken) {\n      p.log.message('Please log in to continue')\n      await loginCommand({ debug: options.debug })\n      accessToken = await getValidAccessToken(tokenStore)\n      if (!accessToken) {\n        p.log.error(pc.red('✗ Authentication failed'))\n        process.exit(1)\n      }\n    }\n\n    // Get project token\n    try {\n      await getValidProjectToken(tokenStore, config.tenantId)\n    } catch (error) {\n      p.log.error(pc.yellow('⚠ Project token invalid'))\n      throw error\n    }\n\n    // ===== BUILD VALIDATION =====\n\n    spinner.start('Checking for build...')\n    let buildInfo = await detectBuild(projectPath)\n\n    if (!buildInfo) {\n      spinner.stop(pc.yellow('⚠ No build found for this project.'))\n\n      // Try to find build command\n      const buildCmd = await getBuildCommand(projectPath)\n\n      if (!buildCmd) {\n        p.log.error('No build script found in package.json')\n        p.note('Add a build script to package.json: \"build\": \"next build\"', 'Tip')\n        process.exit(1)\n      }\n\n      // Prompt to run build\n      if (!options.yes) {\n        const shouldBuild = await p.confirm({\n          initialValue: true,\n          message: `Build command found in package.json. Run it?`,\n        })\n\n        if (p.isCancel(shouldBuild) || !shouldBuild) {\n          p.log.message('Cancelling deployment...')\n          process.exit(0)\n        }\n      }\n\n      // Run build\n      const packageManager = await getPackageManager(projectPath)\n      const buildCommand = `${packageManager} run build`\n      spinner.stop(`Running ${buildCommand}...\\n`)\n\n      try {\n        // Stream build output to user with formatting\n        const buildProcess = spawn(packageManager, ['run', 'build'], {\n          cwd: projectPath,\n          stdio: ['ignore', 'pipe', 'pipe'],\n        })\n\n        // Indent and dim output\n        buildProcess.stdout?.on('data', (data) => {\n          const lines = data.toString().split('\\n')\n          lines.forEach((line: string) => {\n            if (line.trim()) {\n              // eslint-disable-next-line no-console\n              console.log(pc.dim(`      ${line}`)) // Standard output\n            }\n          })\n        })\n\n        buildProcess.stderr?.on('data', (data) => {\n          const lines = data.toString().split('\\n')\n          lines.forEach((line: string) => {\n            if (line.trim()) {\n              // eslint-disable-next-line no-console\n              console.log(pc.dim(`      ${line}`)) // Standard error\n            }\n          })\n        })\n\n        const exitCode = await new Promise<number>((resolve) => {\n          buildProcess.on('close', resolve)\n        })\n\n        if (exitCode !== 0) {\n          throw new Error(`Build process exited with code ${exitCode}`)\n        }\n\n        p.log.success(pc.green('✓ Build completed'))\n      } catch (error) {\n        p.log.error(pc.red('✗ Build failed'))\n        if (error instanceof Error && options.debug) {\n          log.error(`Build error: ${error.message}`)\n        }\n        process.exit(1)\n      }\n\n      // Re-check for build\n      buildInfo = await detectBuild(projectPath)\n      if (!buildInfo) {\n        p.log.error(pc.red('✗ Build completed but standalone build not found'))\n        p.note('Ensure next.config.js has output: \"standalone\"', 'Check Lambda Configuration')\n        process.exit(1)\n      }\n    } else {\n      spinner.stop(pc.green('✓ Build found'))\n      p.note(\n        [\n          `${pc.cyan('Build ID:')} ${buildInfo.buildId}`,\n          `${pc.cyan('Date:')} ${formatDate(buildInfo.timestamp)}`,\n        ].join('\\n'),\n        'Build Details',\n      )\n    }\n\n    // ===== DEPLOYMENT PREPARATION =====\n\n    // Create Lambda zip\n    spinner.start('Creating deployment package...')\n    try {\n      await createLambdaZip(projectPath)\n      spinner.stop(pc.green('✓ Deployment package created'))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to create deployment package'))\n      throw error\n    }\n\n    // Collect static assets\n    spinner.start('Collecting static assets...')\n    const staticAssets = await collectStaticAssets(projectPath)\n    const zipPath = path.join(projectPath, 'lambda.zip')\n    const zipSize = await getFileSize(zipPath)\n    spinner.stop(pc.green(`✓ ${staticAssets.length} static assets detected`))\n\n    log.debug(`Lambda zip size: ${formatBytes(zipSize)}`)\n    log.debug(`Static assets: ${staticAssets.length} files`)\n\n    // ===== DEPLOYMENT CONFIRMATION =====\n\n    if (!options.yes) {\n      p.note(\n        [\n          `${pc.cyan('Build ID:')} ${buildInfo.buildId}`,\n          `${pc.cyan('Date:')} ${formatDate(buildInfo.timestamp)}`,\n          `${pc.cyan('Code size:')} ${formatBytes(zipSize)}`,\n          `${pc.cyan('Static assets:')} ${staticAssets.length} files`,\n        ].join('\\n'),\n        'Details',\n      )\n\n      const shouldDeploy = await p.confirm({\n        initialValue: true,\n        message: 'Deploy this build to Figma?',\n      })\n\n      if (p.isCancel(shouldDeploy) || !shouldDeploy) {\n        p.log.message('Cancelling deployment...')\n        process.exit(0)\n      }\n    }\n\n    // ===== DEPLOYMENT EXECUTION =====\n\n    // Step 1: Create deployment\n    spinner.start('Creating deployment...')\n    let deploymentId: string\n    let codeUploadUrl: string\n    let staticAssetUploadUrls: Record<string, string>\n\n    try {\n      const createResponse = await createDeployment(accessToken, config.tenantId, {\n        staticAssets,\n      })\n\n      deploymentId = createResponse.deploymentId\n      codeUploadUrl = createResponse.codeUploadUrl\n      staticAssetUploadUrls = createResponse.staticAssetUploadUrls\n\n      log.debug(`Deployment ID: ${deploymentId}`)\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to create deployment'))\n      throw error\n    }\n\n    // Step 2: Upload code\n    spinner.message(`Uploading code (${formatBytes(zipSize)})...`)\n    try {\n      await uploadLambdaZip(zipPath, codeUploadUrl)\n      spinner.stop(pc.green(`✓ Code uploaded (${formatBytes(zipSize)})`))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to upload code'))\n      throw error\n    }\n\n    // Step 3: Upload static assets\n    if (staticAssets.length > 0) {\n      spinner.start('Uploading static assets...')\n\n      try {\n        const uploadResults = await uploadStaticAssets(\n          projectPath,\n          staticAssetUploadUrls,\n          (uploaded, total) => {\n            spinner.message(`Uploading static assets (${uploaded}/${total})...`)\n          },\n        )\n\n        if (uploadResults.assetsFailed > 0) {\n          spinner.stop(\n            pc.yellow(\n              `⚠ ${uploadResults.assetsUploaded}/${staticAssets.length} assets uploaded (${uploadResults.assetsFailed} failed)`,\n            ),\n          )\n          p.log.warning(\n            `${uploadResults.assetsFailed} assets failed to upload. Deployment may be incomplete.`,\n          )\n        } else {\n          spinner.stop(\n            pc.green(\n              `✓ Static assets uploaded (${uploadResults.assetsUploaded} files, ${formatBytes(uploadResults.totalBytesUploaded)})`,\n            ),\n          )\n        }\n      } catch (error) {\n        spinner.stop(pc.red('✗ Failed to upload assets'))\n        throw error\n      }\n    }\n\n    // Step 4: Perform deployment\n    spinner.start('Performing deployment...')\n    try {\n      await performDeployment(accessToken, config.tenantId, {\n        deploymentId,\n      })\n      spinner.stop(pc.green('✓ Deployment initiated'))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to perform deployment'))\n      throw error\n    }\n\n    // TODO: Add deployment progress tracking\n    // Future: Poll deployment status and show progress\n    // API endpoint: GET /v1/tenant/{tenant_id}/deploy/{deployment_id}/status\n\n    // Success output\n    p.log.message('This usually takes 2-3 minutes to complete.')\n\n    // Get tenant details for URL\n    try {\n      const tenant = await getTenantDetails(accessToken, config.tenantId)\n      if (tenant.domain) {\n        p.log.message(`View: ${pc.cyan(`https://${tenant.domain}/`)}`)\n      }\n    } catch {\n      // Non-critical - just skip URL display\n    }\n\n    p.note(\n      `Manage your deployment at:\\n${pc.cyan(`https://cms.figma.com/manage/tenants/${config.tenantId}`)}`,\n      'Next Steps',\n    )\n  } catch (error) {\n    spinner.stop(pc.red('✗ Failed'))\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    p.log.error(pc.red(`✗ ${message}`))\n    if (options.debug && error instanceof Error && error.stack) {\n      log.error(`Stack trace: ${error.stack}`)\n    }\n    process.exit(1)\n  }\n}\n"],"names":["p","spawn","path","pc","createDeployment","getTenantDetails","performDeployment","getValidAccessToken","getValidProjectToken","TokenStore","collectStaticAssets","createLambdaZip","getFileSize","detectBuild","getBuildCommand","hasFigmaConfig","readFigmaConfig","log","getPackageManager","isInProjectDirectory","uploadLambdaZip","uploadStaticAssets","loginCommand","formatBytes","bytes","k","sizes","i","Math","floor","parseFloat","pow","toFixed","formatDate","date","toLocaleString","day","hour","minute","month","timeZoneName","year","deployCommand","options","projectPath","process","cwd","spinner","error","red","note","exit","config","tenantId","tokenStore","accessToken","message","debug","yellow","start","buildInfo","stop","buildCmd","yes","shouldBuild","confirm","initialValue","isCancel","packageManager","buildCommand","buildProcess","stdio","stdout","on","data","lines","toString","split","forEach","line","trim","console","dim","stderr","exitCode","Promise","resolve","Error","success","green","cyan","buildId","timestamp","join","staticAssets","zipPath","zipSize","length","shouldDeploy","deploymentId","codeUploadUrl","staticAssetUploadUrls","createResponse","uploadResults","uploaded","total","assetsFailed","assetsUploaded","warning","totalBytesUploaded","tenant","domain","stack"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,SAASC,KAAK,QAAQ,gBAAe;AACrC,OAAOC,UAAU,OAAM;AACvB,OAAOC,QAAQ,aAAY;AAE3B,SAASC,gBAAgB,EAAEC,gBAAgB,EAAEC,iBAAiB,QAAQ,0BAAyB;AAC/F,SAASC,mBAAmB,QAAQ,wBAAuB;AAC3D,SAASC,oBAAoB,QAAQ,2BAA0B;AAC/D,SAASC,UAAU,QAAQ,yBAAwB;AACnD,SAASC,mBAAmB,EAAEC,eAAe,EAAEC,WAAW,QAAQ,+BAA8B;AAChG,SAASC,WAAW,EAAEC,eAAe,QAAQ,8BAA6B;AAC1E,SAASC,cAAc,EAAEC,eAAe,QAAQ,qBAAoB;AACpE,YAAYC,SAAS,kBAAiB;AACtC,SAASC,iBAAiB,QAAQ,8BAA6B;AAC/D,SAASC,oBAAoB,QAAQ,sBAAqB;AAC1D,SAASC,eAAe,EAAEC,kBAAkB,QAAQ,wBAAuB;AAC3E,SAASC,YAAY,QAAQ,aAAY;AAYzC;;CAEC,GACD,SAASC,YAAYC,KAAa;IAChC,IAAIA,UAAU,GAAG;QACf,OAAO;IACT;IACA,MAAMC,IAAI;IACV,MAAMC,QAAQ;QAAC;QAAK;QAAM;QAAM;KAAK;IACrC,MAAMC,IAAIC,KAAKC,KAAK,CAACD,KAAKX,GAAG,CAACO,SAASI,KAAKX,GAAG,CAACQ;IAChD,OAAO,GAAGK,WAAW,AAACN,CAAAA,QAAQI,KAAKG,GAAG,CAACN,GAAGE,EAAC,EAAGK,OAAO,CAAC,IAAI,CAAC,EAAEN,KAAK,CAACC,EAAE,EAAE;AACzE;AAEA;;CAEC,GACD,SAASM,WAAWC,IAAU;IAC5B,OAAOA,KAAKC,cAAc,CAAC,SAAS;QAClCC,KAAK;QACLC,MAAM;QACNC,QAAQ;QACRC,OAAO;QACPC,cAAc;QACdC,MAAM;IACR;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,cAAcC,OAA6B;IAC/D,MAAMC,cAAcC,QAAQC,GAAG;IAC/B,MAAMC,UAAU/C,EAAE+C,OAAO;IAEzB,IAAI;QACF,gCAAgC;QAEhC,gCAAgC;QAChC,IAAI,CAAE,MAAM5B,qBAAqByB,cAAe;YAC9C5C,EAAEiB,GAAG,CAAC+B,KAAK,CAAC7C,GAAG8C,GAAG,CAAC;YACnBjD,EAAEkD,IAAI,CACJ,oFACA;YAEFL,QAAQM,IAAI,CAAC;QACf;QAEA,sCAAsC;QACtC,IAAI,CAAE,MAAMpC,eAAe6B,cAAe;YACxC5C,EAAEiB,GAAG,CAAC+B,KAAK,CAAC7C,GAAG8C,GAAG,CAAC;YACnBjD,EAAEkD,IAAI,CAAC,6DAA6D;YACpEL,QAAQM,IAAI,CAAC;QACf;QAEA,2BAA2B;QAC3B,MAAMC,SAAS,MAAMpC,gBAAgB4B;QACrC,IAAI,CAACQ,UAAU,CAACA,OAAOC,QAAQ,EAAE;YAC/BrD,EAAEiB,GAAG,CAAC+B,KAAK,CAAC7C,GAAG8C,GAAG,CAAC;YACnBJ,QAAQM,IAAI,CAAC;QACf;QAEA,uBAAuB;QACvB,MAAMG,aAAa,IAAI7C;QAEvB,IAAI8C,cAAc,MAAMhD,oBAAoB+C;QAC5C,IAAI,CAACC,aAAa;YAChBvD,EAAEiB,GAAG,CAACuC,OAAO,CAAC;YACd,MAAMlC,aAAa;gBAAEmC,OAAOd,QAAQc,KAAK;YAAC;YAC1CF,cAAc,MAAMhD,oBAAoB+C;YACxC,IAAI,CAACC,aAAa;gBAChBvD,EAAEiB,GAAG,CAAC+B,KAAK,CAAC7C,GAAG8C,GAAG,CAAC;gBACnBJ,QAAQM,IAAI,CAAC;YACf;QACF;QAEA,oBAAoB;QACpB,IAAI;YACF,MAAM3C,qBAAqB8C,YAAYF,OAAOC,QAAQ;QACxD,EAAE,OAAOL,OAAO;YACdhD,EAAEiB,GAAG,CAAC+B,KAAK,CAAC7C,GAAGuD,MAAM,CAAC;YACtB,MAAMV;QACR;QAEA,+BAA+B;QAE/BD,QAAQY,KAAK,CAAC;QACd,IAAIC,YAAY,MAAM/C,YAAY+B;QAElC,IAAI,CAACgB,WAAW;YACdb,QAAQc,IAAI,CAAC1D,GAAGuD,MAAM,CAAC;YAEvB,4BAA4B;YAC5B,MAAMI,WAAW,MAAMhD,gBAAgB8B;YAEvC,IAAI,CAACkB,UAAU;gBACb9D,EAAEiB,GAAG,CAAC+B,KAAK,CAAC;gBACZhD,EAAEkD,IAAI,CAAC,6DAA6D;gBACpEL,QAAQM,IAAI,CAAC;YACf;YAEA,sBAAsB;YACtB,IAAI,CAACR,QAAQoB,GAAG,EAAE;gBAChB,MAAMC,cAAc,MAAMhE,EAAEiE,OAAO,CAAC;oBAClCC,cAAc;oBACdV,SAAS,CAAC,4CAA4C,CAAC;gBACzD;gBAEA,IAAIxD,EAAEmE,QAAQ,CAACH,gBAAgB,CAACA,aAAa;oBAC3ChE,EAAEiB,GAAG,CAACuC,OAAO,CAAC;oBACdX,QAAQM,IAAI,CAAC;gBACf;YACF;YAEA,YAAY;YACZ,MAAMiB,iBAAiB,MAAMlD,kBAAkB0B;YAC/C,MAAMyB,eAAe,GAAGD,eAAe,UAAU,CAAC;YAClDrB,QAAQc,IAAI,CAAC,CAAC,QAAQ,EAAEQ,aAAa,KAAK,CAAC;YAE3C,IAAI;gBACF,8CAA8C;gBAC9C,MAAMC,eAAerE,MAAMmE,gBAAgB;oBAAC;oBAAO;iBAAQ,EAAE;oBAC3DtB,KAAKF;oBACL2B,OAAO;wBAAC;wBAAU;wBAAQ;qBAAO;gBACnC;gBAEA,wBAAwB;gBACxBD,aAAaE,MAAM,EAAEC,GAAG,QAAQ,CAACC;oBAC/B,MAAMC,QAAQD,KAAKE,QAAQ,GAAGC,KAAK,CAAC;oBACpCF,MAAMG,OAAO,CAAC,CAACC;wBACb,IAAIA,KAAKC,IAAI,IAAI;4BACf,sCAAsC;4BACtCC,QAAQhE,GAAG,CAACd,GAAG+E,GAAG,CAAC,CAAC,MAAM,EAAEH,MAAM,IAAG,kBAAkB;wBACzD;oBACF;gBACF;gBAEAT,aAAaa,MAAM,EAAEV,GAAG,QAAQ,CAACC;oBAC/B,MAAMC,QAAQD,KAAKE,QAAQ,GAAGC,KAAK,CAAC;oBACpCF,MAAMG,OAAO,CAAC,CAACC;wBACb,IAAIA,KAAKC,IAAI,IAAI;4BACf,sCAAsC;4BACtCC,QAAQhE,GAAG,CAACd,GAAG+E,GAAG,CAAC,CAAC,MAAM,EAAEH,MAAM,IAAG,iBAAiB;wBACxD;oBACF;gBACF;gBAEA,MAAMK,WAAW,MAAM,IAAIC,QAAgB,CAACC;oBAC1ChB,aAAaG,EAAE,CAAC,SAASa;gBAC3B;gBAEA,IAAIF,aAAa,GAAG;oBAClB,MAAM,IAAIG,MAAM,CAAC,+BAA+B,EAAEH,UAAU;gBAC9D;gBAEApF,EAAEiB,GAAG,CAACuE,OAAO,CAACrF,GAAGsF,KAAK,CAAC;YACzB,EAAE,OAAOzC,OAAO;gBACdhD,EAAEiB,GAAG,CAAC+B,KAAK,CAAC7C,GAAG8C,GAAG,CAAC;gBACnB,IAAID,iBAAiBuC,SAAS5C,QAAQc,KAAK,EAAE;oBAC3CxC,IAAI+B,KAAK,CAAC,CAAC,aAAa,EAAEA,MAAMQ,OAAO,EAAE;gBAC3C;gBACAX,QAAQM,IAAI,CAAC;YACf;YAEA,qBAAqB;YACrBS,YAAY,MAAM/C,YAAY+B;YAC9B,IAAI,CAACgB,WAAW;gBACd5D,EAAEiB,GAAG,CAAC+B,KAAK,CAAC7C,GAAG8C,GAAG,CAAC;gBACnBjD,EAAEkD,IAAI,CAAC,kDAAkD;gBACzDL,QAAQM,IAAI,CAAC;YACf;QACF,OAAO;YACLJ,QAAQc,IAAI,CAAC1D,GAAGsF,KAAK,CAAC;YACtBzF,EAAEkD,IAAI,CACJ;gBACE,GAAG/C,GAAGuF,IAAI,CAAC,aAAa,CAAC,EAAE9B,UAAU+B,OAAO,EAAE;gBAC9C,GAAGxF,GAAGuF,IAAI,CAAC,SAAS,CAAC,EAAEzD,WAAW2B,UAAUgC,SAAS,GAAG;aACzD,CAACC,IAAI,CAAC,OACP;QAEJ;QAEA,qCAAqC;QAErC,oBAAoB;QACpB9C,QAAQY,KAAK,CAAC;QACd,IAAI;YACF,MAAMhD,gBAAgBiC;YACtBG,QAAQc,IAAI,CAAC1D,GAAGsF,KAAK,CAAC;QACxB,EAAE,OAAOzC,OAAO;YACdD,QAAQc,IAAI,CAAC1D,GAAG8C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,wBAAwB;QACxBD,QAAQY,KAAK,CAAC;QACd,MAAMmC,eAAe,MAAMpF,oBAAoBkC;QAC/C,MAAMmD,UAAU7F,KAAK2F,IAAI,CAACjD,aAAa;QACvC,MAAMoD,UAAU,MAAMpF,YAAYmF;QAClChD,QAAQc,IAAI,CAAC1D,GAAGsF,KAAK,CAAC,CAAC,EAAE,EAAEK,aAAaG,MAAM,CAAC,uBAAuB,CAAC;QAEvEhF,IAAIwC,KAAK,CAAC,CAAC,iBAAiB,EAAElC,YAAYyE,UAAU;QACpD/E,IAAIwC,KAAK,CAAC,CAAC,eAAe,EAAEqC,aAAaG,MAAM,CAAC,MAAM,CAAC;QAEvD,sCAAsC;QAEtC,IAAI,CAACtD,QAAQoB,GAAG,EAAE;YAChB/D,EAAEkD,IAAI,CACJ;gBACE,GAAG/C,GAAGuF,IAAI,CAAC,aAAa,CAAC,EAAE9B,UAAU+B,OAAO,EAAE;gBAC9C,GAAGxF,GAAGuF,IAAI,CAAC,SAAS,CAAC,EAAEzD,WAAW2B,UAAUgC,SAAS,GAAG;gBACxD,GAAGzF,GAAGuF,IAAI,CAAC,cAAc,CAAC,EAAEnE,YAAYyE,UAAU;gBAClD,GAAG7F,GAAGuF,IAAI,CAAC,kBAAkB,CAAC,EAAEI,aAAaG,MAAM,CAAC,MAAM,CAAC;aAC5D,CAACJ,IAAI,CAAC,OACP;YAGF,MAAMK,eAAe,MAAMlG,EAAEiE,OAAO,CAAC;gBACnCC,cAAc;gBACdV,SAAS;YACX;YAEA,IAAIxD,EAAEmE,QAAQ,CAAC+B,iBAAiB,CAACA,cAAc;gBAC7ClG,EAAEiB,GAAG,CAACuC,OAAO,CAAC;gBACdX,QAAQM,IAAI,CAAC;YACf;QACF;QAEA,mCAAmC;QAEnC,4BAA4B;QAC5BJ,QAAQY,KAAK,CAAC;QACd,IAAIwC;QACJ,IAAIC;QACJ,IAAIC;QAEJ,IAAI;YACF,MAAMC,iBAAiB,MAAMlG,iBAAiBmD,aAAaH,OAAOC,QAAQ,EAAE;gBAC1EyC;YACF;YAEAK,eAAeG,eAAeH,YAAY;YAC1CC,gBAAgBE,eAAeF,aAAa;YAC5CC,wBAAwBC,eAAeD,qBAAqB;YAE5DpF,IAAIwC,KAAK,CAAC,CAAC,eAAe,EAAE0C,cAAc;QAC5C,EAAE,OAAOnD,OAAO;YACdD,QAAQc,IAAI,CAAC1D,GAAG8C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,sBAAsB;QACtBD,QAAQS,OAAO,CAAC,CAAC,gBAAgB,EAAEjC,YAAYyE,SAAS,IAAI,CAAC;QAC7D,IAAI;YACF,MAAM5E,gBAAgB2E,SAASK;YAC/BrD,QAAQc,IAAI,CAAC1D,GAAGsF,KAAK,CAAC,CAAC,iBAAiB,EAAElE,YAAYyE,SAAS,CAAC,CAAC;QACnE,EAAE,OAAOhD,OAAO;YACdD,QAAQc,IAAI,CAAC1D,GAAG8C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,+BAA+B;QAC/B,IAAI8C,aAAaG,MAAM,GAAG,GAAG;YAC3BlD,QAAQY,KAAK,CAAC;YAEd,IAAI;gBACF,MAAM4C,gBAAgB,MAAMlF,mBAC1BuB,aACAyD,uBACA,CAACG,UAAUC;oBACT1D,QAAQS,OAAO,CAAC,CAAC,yBAAyB,EAAEgD,SAAS,CAAC,EAAEC,MAAM,IAAI,CAAC;gBACrE;gBAGF,IAAIF,cAAcG,YAAY,GAAG,GAAG;oBAClC3D,QAAQc,IAAI,CACV1D,GAAGuD,MAAM,CACP,CAAC,EAAE,EAAE6C,cAAcI,cAAc,CAAC,CAAC,EAAEb,aAAaG,MAAM,CAAC,kBAAkB,EAAEM,cAAcG,YAAY,CAAC,QAAQ,CAAC;oBAGrH1G,EAAEiB,GAAG,CAAC2F,OAAO,CACX,GAAGL,cAAcG,YAAY,CAAC,uDAAuD,CAAC;gBAE1F,OAAO;oBACL3D,QAAQc,IAAI,CACV1D,GAAGsF,KAAK,CACN,CAAC,0BAA0B,EAAEc,cAAcI,cAAc,CAAC,QAAQ,EAAEpF,YAAYgF,cAAcM,kBAAkB,EAAE,CAAC,CAAC;gBAG1H;YACF,EAAE,OAAO7D,OAAO;gBACdD,QAAQc,IAAI,CAAC1D,GAAG8C,GAAG,CAAC;gBACpB,MAAMD;YACR;QACF;QAEA,6BAA6B;QAC7BD,QAAQY,KAAK,CAAC;QACd,IAAI;YACF,MAAMrD,kBAAkBiD,aAAaH,OAAOC,QAAQ,EAAE;gBACpD8C;YACF;YACApD,QAAQc,IAAI,CAAC1D,GAAGsF,KAAK,CAAC;QACxB,EAAE,OAAOzC,OAAO;YACdD,QAAQc,IAAI,CAAC1D,GAAG8C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,yCAAyC;QACzC,mDAAmD;QACnD,yEAAyE;QAEzE,iBAAiB;QACjBhD,EAAEiB,GAAG,CAACuC,OAAO,CAAC;QAEd,6BAA6B;QAC7B,IAAI;YACF,MAAMsD,SAAS,MAAMzG,iBAAiBkD,aAAaH,OAAOC,QAAQ;YAClE,IAAIyD,OAAOC,MAAM,EAAE;gBACjB/G,EAAEiB,GAAG,CAACuC,OAAO,CAAC,CAAC,MAAM,EAAErD,GAAGuF,IAAI,CAAC,CAAC,QAAQ,EAAEoB,OAAOC,MAAM,CAAC,CAAC,CAAC,GAAG;YAC/D;QACF,EAAE,OAAM;QACN,uCAAuC;QACzC;QAEA/G,EAAEkD,IAAI,CACJ,CAAC,4BAA4B,EAAE/C,GAAGuF,IAAI,CAAC,CAAC,qCAAqC,EAAEtC,OAAOC,QAAQ,EAAE,GAAG,EACnG;IAEJ,EAAE,OAAOL,OAAO;QACdD,QAAQc,IAAI,CAAC1D,GAAG8C,GAAG,CAAC;QACpB,MAAMO,UAAUR,iBAAiBuC,QAAQvC,MAAMQ,OAAO,GAAG;QACzDxD,EAAEiB,GAAG,CAAC+B,KAAK,CAAC7C,GAAG8C,GAAG,CAAC,CAAC,EAAE,EAAEO,SAAS;QACjC,IAAIb,QAAQc,KAAK,IAAIT,iBAAiBuC,SAASvC,MAAMgE,KAAK,EAAE;YAC1D/F,IAAI+B,KAAK,CAAC,CAAC,aAAa,EAAEA,MAAMgE,KAAK,EAAE;QACzC;QACAnE,QAAQM,IAAI,CAAC;IACf;AACF"}
+{"version":3,"sources":["../../src/commands/deploy.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport { spawn } from 'child_process'\nimport path from 'path'\nimport pc from 'picocolors'\nimport { Project } from 'ts-morph'\n\nimport { createDeployment, getTenantDetails, performDeployment } from '../api/control-plane.js'\nimport { getValidAccessToken } from '../auth/oauth-flow.js'\nimport { getValidProjectToken } from '../auth/project-token.js'\nimport { TokenStore } from '../auth/token-store.js'\nimport { collectStaticAssets, createLambdaZip, getFileSize } from '../utils/asset-collection.js'\nimport { detectBuild, getBuildCommand } from '../utils/build-detection.js'\nimport * as log from '../utils/log.js'\nimport { getPackageManager } from '../utils/package-manager.js'\nimport { readFigmaConfig } from '../utils/payload-config-ast.js'\nimport { findPayloadConfig } from '../utils/payload-config-finder.js'\nimport { isInProjectDirectory } from '../utils/project.js'\nimport { uploadLambdaZip, uploadStaticAssets } from '../utils/s3-upload.js'\nimport { loginCommand } from './login.js'\n\n/**\n * Options for deploy command\n */\nexport interface DeployCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n  /** Skip confirmation prompts */\n  yes?: boolean\n}\n\n/**\n * Format bytes to human-readable string\n */\nfunction formatBytes(bytes: number): string {\n  if (bytes === 0) {\n    return '0 B'\n  }\n  const k = 1024\n  const sizes = ['B', 'KB', 'MB', 'GB']\n  const i = Math.floor(Math.log(bytes) / Math.log(k))\n  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(2))} ${sizes[i]}`\n}\n\n/**\n * Format date to human-readable string in local time\n */\nfunction formatDate(date: Date): string {\n  return date.toLocaleString('en-US', {\n    day: 'numeric',\n    hour: 'numeric',\n    minute: 'numeric',\n    month: 'long',\n    timeZoneName: 'short',\n    year: 'numeric',\n  })\n}\n\n/**\n * Execute the deploy command\n *\n * @param options - Command options\n */\nexport async function deployCommand(options: DeployCommandOptions): Promise<void> {\n  const projectPath = process.cwd()\n  const spinner = p.spinner()\n\n  try {\n    // ===== PRE-FLIGHT CHECKS =====\n\n    // Check if in project directory\n    if (!(await isInProjectDirectory(projectPath))) {\n      p.log.error(pc.red(\"✗ 'deploy' command is not available outside of a Payload project.\"))\n      p.note(\n        'Create a project or connect an existing one to Figma: npx @payloadcms/figma init',\n        'Tip',\n      )\n      process.exit(1)\n    }\n\n    // Find and read payload config\n    const configPath = await findPayloadConfig(projectPath)\n    if (!configPath) {\n      p.log.error(pc.red('✗ payload.config.ts not found'))\n      p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip')\n      process.exit(1)\n    }\n\n    // Parse config with ts-morph\n    const project = new Project({ skipAddingFilesFromTsConfig: true })\n    const sourceFile = project.addSourceFileAtPath(configPath)\n\n    // Read figma configuration from buildConfig\n    const config = readFigmaConfig(sourceFile)\n    if (!config || !config.tenantId) {\n      p.log.error(pc.red('✗ No figma configuration found in payload.config.ts'))\n      p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip')\n      process.exit(1)\n    }\n\n    // Check authentication\n    const tokenStore = new TokenStore()\n\n    let accessToken = await getValidAccessToken(tokenStore)\n    if (!accessToken) {\n      p.log.message('Please log in to continue')\n      await loginCommand()\n      accessToken = await getValidAccessToken(tokenStore)\n      if (!accessToken) {\n        p.log.error(pc.red('✗ Authentication failed'))\n        process.exit(1)\n      }\n    }\n\n    // Get project token\n    try {\n      await getValidProjectToken(tokenStore, config.tenantId)\n    } catch (error) {\n      p.log.error(pc.yellow('⚠ Project token invalid'))\n      throw error\n    }\n\n    // ===== BUILD VALIDATION =====\n\n    spinner.start('Checking for build...')\n    let buildInfo = await detectBuild(projectPath)\n\n    if (!buildInfo) {\n      spinner.stop(pc.yellow('⚠ No build found for this project.'))\n\n      // Try to find build command\n      const buildCmd = await getBuildCommand(projectPath)\n\n      if (!buildCmd) {\n        p.log.error('No build script found in package.json')\n        p.note('Add a build script to package.json: \"build\": \"next build\"', 'Tip')\n        process.exit(1)\n      }\n\n      // Prompt to run build\n      if (!options.yes) {\n        const shouldBuild = await p.confirm({\n          initialValue: true,\n          message: `Build command found in package.json. Run it?`,\n        })\n\n        if (p.isCancel(shouldBuild) || !shouldBuild) {\n          p.log.message('Cancelling deployment...')\n          process.exit(0)\n        }\n      }\n\n      // Run build\n      const packageManager = await getPackageManager(projectPath)\n      const buildCommand = `${packageManager} run build`\n      spinner.stop(`Running ${buildCommand}...\\n`)\n\n      try {\n        // Stream build output to user with formatting\n        const buildProcess = spawn(packageManager, ['run', 'build'], {\n          cwd: projectPath,\n          stdio: ['ignore', 'pipe', 'pipe'],\n        })\n\n        // Indent and dim output\n        buildProcess.stdout?.on('data', (data) => {\n          const lines = data.toString().split('\\n')\n          lines.forEach((line: string) => {\n            if (line.trim()) {\n              // eslint-disable-next-line no-console\n              console.log(pc.dim(`      ${line}`)) // Standard output\n            }\n          })\n        })\n\n        buildProcess.stderr?.on('data', (data) => {\n          const lines = data.toString().split('\\n')\n          lines.forEach((line: string) => {\n            if (line.trim()) {\n              // eslint-disable-next-line no-console\n              console.log(pc.dim(`      ${line}`)) // Standard error\n            }\n          })\n        })\n\n        const exitCode = await new Promise<number>((resolve) => {\n          buildProcess.on('close', resolve)\n        })\n\n        if (exitCode !== 0) {\n          throw new Error(`Build process exited with code ${exitCode}`)\n        }\n\n        p.log.success(pc.green('✓ Build completed'))\n      } catch (error) {\n        p.log.error(pc.red('✗ Build failed'))\n        if (error instanceof Error && options.debug) {\n          log.error(`Build error: ${error.message}`)\n        }\n        process.exit(1)\n      }\n\n      // Re-check for build\n      buildInfo = await detectBuild(projectPath)\n      if (!buildInfo) {\n        p.log.error(pc.red('✗ Build completed but standalone build not found'))\n        p.note('Ensure next.config.js has output: \"standalone\"', 'Check Lambda Configuration')\n        process.exit(1)\n      }\n    } else {\n      spinner.stop(pc.green('✓ Build found'))\n      p.note(\n        [\n          `${pc.cyan('Build ID:')} ${buildInfo.buildId}`,\n          `${pc.cyan('Date:')} ${formatDate(buildInfo.timestamp)}`,\n        ].join('\\n'),\n        'Build Details',\n      )\n    }\n\n    // ===== DEPLOYMENT PREPARATION =====\n\n    // Create Lambda zip\n    spinner.start('Creating deployment package...')\n    try {\n      await createLambdaZip(projectPath)\n      spinner.stop(pc.green('✓ Deployment package created'))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to create deployment package'))\n      throw error\n    }\n\n    // Collect static assets\n    spinner.start('Collecting static assets...')\n    const staticAssets = await collectStaticAssets(projectPath)\n    const zipPath = path.join(projectPath, 'lambda.zip')\n    const zipSize = await getFileSize(zipPath)\n    spinner.stop(pc.green(`✓ ${staticAssets.length} static assets detected`))\n\n    log.debug(`Lambda zip size: ${formatBytes(zipSize)}`)\n    log.debug(`Static assets: ${staticAssets.length} files`)\n\n    // ===== DEPLOYMENT CONFIRMATION =====\n\n    if (!options.yes) {\n      p.note(\n        [\n          `${pc.cyan('Build ID:')} ${buildInfo.buildId}`,\n          `${pc.cyan('Date:')} ${formatDate(buildInfo.timestamp)}`,\n          `${pc.cyan('Code size:')} ${formatBytes(zipSize)}`,\n          `${pc.cyan('Static assets:')} ${staticAssets.length} files`,\n        ].join('\\n'),\n        'Details',\n      )\n\n      const shouldDeploy = await p.confirm({\n        initialValue: true,\n        message: 'Deploy this build to Figma?',\n      })\n\n      if (p.isCancel(shouldDeploy) || !shouldDeploy) {\n        p.log.message('Cancelling deployment...')\n        process.exit(0)\n      }\n    }\n\n    // ===== DEPLOYMENT EXECUTION =====\n\n    // Step 1: Create deployment\n    spinner.start('Creating deployment...')\n    let deploymentId: string\n    let codeUploadUrl: string\n    let staticAssetUploadUrls: Record<string, string>\n\n    try {\n      const createResponse = await createDeployment(accessToken, config.tenantId, {\n        staticAssets,\n      })\n\n      deploymentId = createResponse.deploymentId\n      codeUploadUrl = createResponse.codeUploadUrl\n      staticAssetUploadUrls = createResponse.staticAssetUploadUrls\n\n      log.debug(`Deployment ID: ${deploymentId}`)\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to create deployment'))\n      throw error\n    }\n\n    // Step 2: Upload code\n    spinner.message(`Uploading code (${formatBytes(zipSize)})...`)\n    try {\n      await uploadLambdaZip(zipPath, codeUploadUrl)\n      spinner.stop(pc.green(`✓ Code uploaded (${formatBytes(zipSize)})`))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to upload code'))\n      throw error\n    }\n\n    // Step 3: Upload static assets\n    if (staticAssets.length > 0) {\n      spinner.start('Uploading static assets...')\n\n      try {\n        const uploadResults = await uploadStaticAssets(\n          projectPath,\n          staticAssetUploadUrls,\n          (uploaded, total) => {\n            spinner.message(`Uploading static assets (${uploaded}/${total})...`)\n          },\n        )\n\n        if (uploadResults.assetsFailed > 0) {\n          spinner.stop(\n            pc.yellow(\n              `⚠ ${uploadResults.assetsUploaded}/${staticAssets.length} assets uploaded (${uploadResults.assetsFailed} failed)`,\n            ),\n          )\n          p.log.warning(\n            `${uploadResults.assetsFailed} assets failed to upload. Deployment may be incomplete.`,\n          )\n        } else {\n          spinner.stop(\n            pc.green(\n              `✓ Static assets uploaded (${uploadResults.assetsUploaded} files, ${formatBytes(uploadResults.totalBytesUploaded)})`,\n            ),\n          )\n        }\n      } catch (error) {\n        spinner.stop(pc.red('✗ Failed to upload assets'))\n        throw error\n      }\n    }\n\n    // Step 4: Perform deployment\n    spinner.start('Performing deployment...')\n    try {\n      await performDeployment(accessToken, config.tenantId, {\n        deploymentId,\n      })\n      spinner.stop(pc.green('✓ Deployment initiated'))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to perform deployment'))\n      throw error\n    }\n\n    // TODO: Add deployment progress tracking\n    // Future: Poll deployment status and show progress\n    // API endpoint: GET /v1/tenant/{tenant_id}/deploy/{deployment_id}/status\n\n    // Success output\n    p.log.message('This usually takes 2-3 minutes to complete.')\n\n    // Get tenant details for URL\n    try {\n      const tenant = await getTenantDetails(accessToken, config.tenantId)\n      if (tenant.domain) {\n        p.log.message(`View: ${pc.cyan(`https://${tenant.domain}/`)}`)\n      }\n    } catch {\n      // Non-critical - just skip URL display\n    }\n\n    p.note(\n      `Manage your deployment at:\\n${pc.cyan(`https://cms.figma.com/manage/tenants/${config.tenantId}`)}`,\n      'Next Steps',\n    )\n  } catch (error) {\n    spinner.stop(pc.red('✗ Failed'))\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    p.log.error(pc.red(`✗ ${message}`))\n    if (options.debug && error instanceof Error && error.stack) {\n      log.error(`Stack trace: ${error.stack}`)\n    }\n    process.exit(1)\n  }\n}\n"],"names":["p","spawn","path","pc","Project","createDeployment","getTenantDetails","performDeployment","getValidAccessToken","getValidProjectToken","TokenStore","collectStaticAssets","createLambdaZip","getFileSize","detectBuild","getBuildCommand","log","getPackageManager","readFigmaConfig","findPayloadConfig","isInProjectDirectory","uploadLambdaZip","uploadStaticAssets","loginCommand","formatBytes","bytes","k","sizes","i","Math","floor","parseFloat","pow","toFixed","formatDate","date","toLocaleString","day","hour","minute","month","timeZoneName","year","deployCommand","options","projectPath","process","cwd","spinner","error","red","note","exit","configPath","project","skipAddingFilesFromTsConfig","sourceFile","addSourceFileAtPath","config","tenantId","tokenStore","accessToken","message","yellow","start","buildInfo","stop","buildCmd","yes","shouldBuild","confirm","initialValue","isCancel","packageManager","buildCommand","buildProcess","stdio","stdout","on","data","lines","toString","split","forEach","line","trim","console","dim","stderr","exitCode","Promise","resolve","Error","success","green","debug","cyan","buildId","timestamp","join","staticAssets","zipPath","zipSize","length","shouldDeploy","deploymentId","codeUploadUrl","staticAssetUploadUrls","createResponse","uploadResults","uploaded","total","assetsFailed","assetsUploaded","warning","totalBytesUploaded","tenant","domain","stack"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,SAASC,KAAK,QAAQ,gBAAe;AACrC,OAAOC,UAAU,OAAM;AACvB,OAAOC,QAAQ,aAAY;AAC3B,SAASC,OAAO,QAAQ,WAAU;AAElC,SAASC,gBAAgB,EAAEC,gBAAgB,EAAEC,iBAAiB,QAAQ,0BAAyB;AAC/F,SAASC,mBAAmB,QAAQ,wBAAuB;AAC3D,SAASC,oBAAoB,QAAQ,2BAA0B;AAC/D,SAASC,UAAU,QAAQ,yBAAwB;AACnD,SAASC,mBAAmB,EAAEC,eAAe,EAAEC,WAAW,QAAQ,+BAA8B;AAChG,SAASC,WAAW,EAAEC,eAAe,QAAQ,8BAA6B;AAC1E,YAAYC,SAAS,kBAAiB;AACtC,SAASC,iBAAiB,QAAQ,8BAA6B;AAC/D,SAASC,eAAe,QAAQ,iCAAgC;AAChE,SAASC,iBAAiB,QAAQ,oCAAmC;AACrE,SAASC,oBAAoB,QAAQ,sBAAqB;AAC1D,SAASC,eAAe,EAAEC,kBAAkB,QAAQ,wBAAuB;AAC3E,SAASC,YAAY,QAAQ,aAAY;AAYzC;;CAEC,GACD,SAASC,YAAYC,KAAa;IAChC,IAAIA,UAAU,GAAG;QACf,OAAO;IACT;IACA,MAAMC,IAAI;IACV,MAAMC,QAAQ;QAAC;QAAK;QAAM;QAAM;KAAK;IACrC,MAAMC,IAAIC,KAAKC,KAAK,CAACD,KAAKb,GAAG,CAACS,SAASI,KAAKb,GAAG,CAACU;IAChD,OAAO,GAAGK,WAAW,AAACN,CAAAA,QAAQI,KAAKG,GAAG,CAACN,GAAGE,EAAC,EAAGK,OAAO,CAAC,IAAI,CAAC,EAAEN,KAAK,CAACC,EAAE,EAAE;AACzE;AAEA;;CAEC,GACD,SAASM,WAAWC,IAAU;IAC5B,OAAOA,KAAKC,cAAc,CAAC,SAAS;QAClCC,KAAK;QACLC,MAAM;QACNC,QAAQ;QACRC,OAAO;QACPC,cAAc;QACdC,MAAM;IACR;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,cAAcC,OAA6B;IAC/D,MAAMC,cAAcC,QAAQC,GAAG;IAC/B,MAAMC,UAAUhD,EAAEgD,OAAO;IAEzB,IAAI;QACF,gCAAgC;QAEhC,gCAAgC;QAChC,IAAI,CAAE,MAAM5B,qBAAqByB,cAAe;YAC9C7C,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;YACnBlD,EAAEmD,IAAI,CACJ,oFACA;YAEFL,QAAQM,IAAI,CAAC;QACf;QAEA,+BAA+B;QAC/B,MAAMC,aAAa,MAAMlC,kBAAkB0B;QAC3C,IAAI,CAACQ,YAAY;YACfrD,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;YACnBlD,EAAEmD,IAAI,CAAC,6DAA6D;YACpEL,QAAQM,IAAI,CAAC;QACf;QAEA,6BAA6B;QAC7B,MAAME,UAAU,IAAIlD,QAAQ;YAAEmD,6BAA6B;QAAK;QAChE,MAAMC,aAAaF,QAAQG,mBAAmB,CAACJ;QAE/C,4CAA4C;QAC5C,MAAMK,SAASxC,gBAAgBsC;QAC/B,IAAI,CAACE,UAAU,CAACA,OAAOC,QAAQ,EAAE;YAC/B3D,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;YACnBlD,EAAEmD,IAAI,CAAC,6DAA6D;YACpEL,QAAQM,IAAI,CAAC;QACf;QAEA,uBAAuB;QACvB,MAAMQ,aAAa,IAAIlD;QAEvB,IAAImD,cAAc,MAAMrD,oBAAoBoD;QAC5C,IAAI,CAACC,aAAa;YAChB7D,EAAEgB,GAAG,CAAC8C,OAAO,CAAC;YACd,MAAMvC;YACNsC,cAAc,MAAMrD,oBAAoBoD;YACxC,IAAI,CAACC,aAAa;gBAChB7D,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;gBACnBJ,QAAQM,IAAI,CAAC;YACf;QACF;QAEA,oBAAoB;QACpB,IAAI;YACF,MAAM3C,qBAAqBmD,YAAYF,OAAOC,QAAQ;QACxD,EAAE,OAAOV,OAAO;YACdjD,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG4D,MAAM,CAAC;YACtB,MAAMd;QACR;QAEA,+BAA+B;QAE/BD,QAAQgB,KAAK,CAAC;QACd,IAAIC,YAAY,MAAMnD,YAAY+B;QAElC,IAAI,CAACoB,WAAW;YACdjB,QAAQkB,IAAI,CAAC/D,GAAG4D,MAAM,CAAC;YAEvB,4BAA4B;YAC5B,MAAMI,WAAW,MAAMpD,gBAAgB8B;YAEvC,IAAI,CAACsB,UAAU;gBACbnE,EAAEgB,GAAG,CAACiC,KAAK,CAAC;gBACZjD,EAAEmD,IAAI,CAAC,6DAA6D;gBACpEL,QAAQM,IAAI,CAAC;YACf;YAEA,sBAAsB;YACtB,IAAI,CAACR,QAAQwB,GAAG,EAAE;gBAChB,MAAMC,cAAc,MAAMrE,EAAEsE,OAAO,CAAC;oBAClCC,cAAc;oBACdT,SAAS,CAAC,4CAA4C,CAAC;gBACzD;gBAEA,IAAI9D,EAAEwE,QAAQ,CAACH,gBAAgB,CAACA,aAAa;oBAC3CrE,EAAEgB,GAAG,CAAC8C,OAAO,CAAC;oBACdhB,QAAQM,IAAI,CAAC;gBACf;YACF;YAEA,YAAY;YACZ,MAAMqB,iBAAiB,MAAMxD,kBAAkB4B;YAC/C,MAAM6B,eAAe,GAAGD,eAAe,UAAU,CAAC;YAClDzB,QAAQkB,IAAI,CAAC,CAAC,QAAQ,EAAEQ,aAAa,KAAK,CAAC;YAE3C,IAAI;gBACF,8CAA8C;gBAC9C,MAAMC,eAAe1E,MAAMwE,gBAAgB;oBAAC;oBAAO;iBAAQ,EAAE;oBAC3D1B,KAAKF;oBACL+B,OAAO;wBAAC;wBAAU;wBAAQ;qBAAO;gBACnC;gBAEA,wBAAwB;gBACxBD,aAAaE,MAAM,EAAEC,GAAG,QAAQ,CAACC;oBAC/B,MAAMC,QAAQD,KAAKE,QAAQ,GAAGC,KAAK,CAAC;oBACpCF,MAAMG,OAAO,CAAC,CAACC;wBACb,IAAIA,KAAKC,IAAI,IAAI;4BACf,sCAAsC;4BACtCC,QAAQtE,GAAG,CAACb,GAAGoF,GAAG,CAAC,CAAC,MAAM,EAAEH,MAAM,IAAG,kBAAkB;wBACzD;oBACF;gBACF;gBAEAT,aAAaa,MAAM,EAAEV,GAAG,QAAQ,CAACC;oBAC/B,MAAMC,QAAQD,KAAKE,QAAQ,GAAGC,KAAK,CAAC;oBACpCF,MAAMG,OAAO,CAAC,CAACC;wBACb,IAAIA,KAAKC,IAAI,IAAI;4BACf,sCAAsC;4BACtCC,QAAQtE,GAAG,CAACb,GAAGoF,GAAG,CAAC,CAAC,MAAM,EAAEH,MAAM,IAAG,iBAAiB;wBACxD;oBACF;gBACF;gBAEA,MAAMK,WAAW,MAAM,IAAIC,QAAgB,CAACC;oBAC1ChB,aAAaG,EAAE,CAAC,SAASa;gBAC3B;gBAEA,IAAIF,aAAa,GAAG;oBAClB,MAAM,IAAIG,MAAM,CAAC,+BAA+B,EAAEH,UAAU;gBAC9D;gBAEAzF,EAAEgB,GAAG,CAAC6E,OAAO,CAAC1F,GAAG2F,KAAK,CAAC;YACzB,EAAE,OAAO7C,OAAO;gBACdjD,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;gBACnB,IAAID,iBAAiB2C,SAAShD,QAAQmD,KAAK,EAAE;oBAC3C/E,IAAIiC,KAAK,CAAC,CAAC,aAAa,EAAEA,MAAMa,OAAO,EAAE;gBAC3C;gBACAhB,QAAQM,IAAI,CAAC;YACf;YAEA,qBAAqB;YACrBa,YAAY,MAAMnD,YAAY+B;YAC9B,IAAI,CAACoB,WAAW;gBACdjE,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;gBACnBlD,EAAEmD,IAAI,CAAC,kDAAkD;gBACzDL,QAAQM,IAAI,CAAC;YACf;QACF,OAAO;YACLJ,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC;YACtB9F,EAAEmD,IAAI,CACJ;gBACE,GAAGhD,GAAG6F,IAAI,CAAC,aAAa,CAAC,EAAE/B,UAAUgC,OAAO,EAAE;gBAC9C,GAAG9F,GAAG6F,IAAI,CAAC,SAAS,CAAC,EAAE9D,WAAW+B,UAAUiC,SAAS,GAAG;aACzD,CAACC,IAAI,CAAC,OACP;QAEJ;QAEA,qCAAqC;QAErC,oBAAoB;QACpBnD,QAAQgB,KAAK,CAAC;QACd,IAAI;YACF,MAAMpD,gBAAgBiC;YACtBG,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC;QACxB,EAAE,OAAO7C,OAAO;YACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,wBAAwB;QACxBD,QAAQgB,KAAK,CAAC;QACd,MAAMoC,eAAe,MAAMzF,oBAAoBkC;QAC/C,MAAMwD,UAAUnG,KAAKiG,IAAI,CAACtD,aAAa;QACvC,MAAMyD,UAAU,MAAMzF,YAAYwF;QAClCrD,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC,CAAC,EAAE,EAAEM,aAAaG,MAAM,CAAC,uBAAuB,CAAC;QAEvEvF,IAAI+E,KAAK,CAAC,CAAC,iBAAiB,EAAEvE,YAAY8E,UAAU;QACpDtF,IAAI+E,KAAK,CAAC,CAAC,eAAe,EAAEK,aAAaG,MAAM,CAAC,MAAM,CAAC;QAEvD,sCAAsC;QAEtC,IAAI,CAAC3D,QAAQwB,GAAG,EAAE;YAChBpE,EAAEmD,IAAI,CACJ;gBACE,GAAGhD,GAAG6F,IAAI,CAAC,aAAa,CAAC,EAAE/B,UAAUgC,OAAO,EAAE;gBAC9C,GAAG9F,GAAG6F,IAAI,CAAC,SAAS,CAAC,EAAE9D,WAAW+B,UAAUiC,SAAS,GAAG;gBACxD,GAAG/F,GAAG6F,IAAI,CAAC,cAAc,CAAC,EAAExE,YAAY8E,UAAU;gBAClD,GAAGnG,GAAG6F,IAAI,CAAC,kBAAkB,CAAC,EAAEI,aAAaG,MAAM,CAAC,MAAM,CAAC;aAC5D,CAACJ,IAAI,CAAC,OACP;YAGF,MAAMK,eAAe,MAAMxG,EAAEsE,OAAO,CAAC;gBACnCC,cAAc;gBACdT,SAAS;YACX;YAEA,IAAI9D,EAAEwE,QAAQ,CAACgC,iBAAiB,CAACA,cAAc;gBAC7CxG,EAAEgB,GAAG,CAAC8C,OAAO,CAAC;gBACdhB,QAAQM,IAAI,CAAC;YACf;QACF;QAEA,mCAAmC;QAEnC,4BAA4B;QAC5BJ,QAAQgB,KAAK,CAAC;QACd,IAAIyC;QACJ,IAAIC;QACJ,IAAIC;QAEJ,IAAI;YACF,MAAMC,iBAAiB,MAAMvG,iBAAiBwD,aAAaH,OAAOC,QAAQ,EAAE;gBAC1EyC;YACF;YAEAK,eAAeG,eAAeH,YAAY;YAC1CC,gBAAgBE,eAAeF,aAAa;YAC5CC,wBAAwBC,eAAeD,qBAAqB;YAE5D3F,IAAI+E,KAAK,CAAC,CAAC,eAAe,EAAEU,cAAc;QAC5C,EAAE,OAAOxD,OAAO;YACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,sBAAsB;QACtBD,QAAQc,OAAO,CAAC,CAAC,gBAAgB,EAAEtC,YAAY8E,SAAS,IAAI,CAAC;QAC7D,IAAI;YACF,MAAMjF,gBAAgBgF,SAASK;YAC/B1D,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC,CAAC,iBAAiB,EAAEtE,YAAY8E,SAAS,CAAC,CAAC;QACnE,EAAE,OAAOrD,OAAO;YACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,+BAA+B;QAC/B,IAAImD,aAAaG,MAAM,GAAG,GAAG;YAC3BvD,QAAQgB,KAAK,CAAC;YAEd,IAAI;gBACF,MAAM6C,gBAAgB,MAAMvF,mBAC1BuB,aACA8D,uBACA,CAACG,UAAUC;oBACT/D,QAAQc,OAAO,CAAC,CAAC,yBAAyB,EAAEgD,SAAS,CAAC,EAAEC,MAAM,IAAI,CAAC;gBACrE;gBAGF,IAAIF,cAAcG,YAAY,GAAG,GAAG;oBAClChE,QAAQkB,IAAI,CACV/D,GAAG4D,MAAM,CACP,CAAC,EAAE,EAAE8C,cAAcI,cAAc,CAAC,CAAC,EAAEb,aAAaG,MAAM,CAAC,kBAAkB,EAAEM,cAAcG,YAAY,CAAC,QAAQ,CAAC;oBAGrHhH,EAAEgB,GAAG,CAACkG,OAAO,CACX,GAAGL,cAAcG,YAAY,CAAC,uDAAuD,CAAC;gBAE1F,OAAO;oBACLhE,QAAQkB,IAAI,CACV/D,GAAG2F,KAAK,CACN,CAAC,0BAA0B,EAAEe,cAAcI,cAAc,CAAC,QAAQ,EAAEzF,YAAYqF,cAAcM,kBAAkB,EAAE,CAAC,CAAC;gBAG1H;YACF,EAAE,OAAOlE,OAAO;gBACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;gBACpB,MAAMD;YACR;QACF;QAEA,6BAA6B;QAC7BD,QAAQgB,KAAK,CAAC;QACd,IAAI;YACF,MAAMzD,kBAAkBsD,aAAaH,OAAOC,QAAQ,EAAE;gBACpD8C;YACF;YACAzD,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC;QACxB,EAAE,OAAO7C,OAAO;YACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,yCAAyC;QACzC,mDAAmD;QACnD,yEAAyE;QAEzE,iBAAiB;QACjBjD,EAAEgB,GAAG,CAAC8C,OAAO,CAAC;QAEd,6BAA6B;QAC7B,IAAI;YACF,MAAMsD,SAAS,MAAM9G,iBAAiBuD,aAAaH,OAAOC,QAAQ;YAClE,IAAIyD,OAAOC,MAAM,EAAE;gBACjBrH,EAAEgB,GAAG,CAAC8C,OAAO,CAAC,CAAC,MAAM,EAAE3D,GAAG6F,IAAI,CAAC,CAAC,QAAQ,EAAEoB,OAAOC,MAAM,CAAC,CAAC,CAAC,GAAG;YAC/D;QACF,EAAE,OAAM;QACN,uCAAuC;QACzC;QAEArH,EAAEmD,IAAI,CACJ,CAAC,4BAA4B,EAAEhD,GAAG6F,IAAI,CAAC,CAAC,qCAAqC,EAAEtC,OAAOC,QAAQ,EAAE,GAAG,EACnG;IAEJ,EAAE,OAAOV,OAAO;QACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;QACpB,MAAMY,UAAUb,iBAAiB2C,QAAQ3C,MAAMa,OAAO,GAAG;QACzD9D,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC,CAAC,EAAE,EAAEY,SAAS;QACjC,IAAIlB,QAAQmD,KAAK,IAAI9C,iBAAiB2C,SAAS3C,MAAMqE,KAAK,EAAE;YAC1DtG,IAAIiC,KAAK,CAAC,CAAC,aAAa,EAAEA,MAAMqE,KAAK,EAAE;QACzC;QACAxE,QAAQM,IAAI,CAAC;IACf;AACF"}

package/dist/commands/init.d.ts

@@ -10,6 +10,10 @@ export interface InitCommandOptions {
     id?: string;
     /** Project name (for scaffolding) */
     name?: string;
+    /** Disable Content System (defaults to enabled) */
+    noContentSystem?: boolean;
+    /** AWS region for deployment (defaults to us-east-1) */
+    region?: string;
     /** Skip authentication check (for testing/development) */
     skipAuth?: boolean;
     /** Skip prompts and use defaults where possible */

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AA6BA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gEAAgE;IAChE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,mDAAmD;IACnD,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAiDD;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2a5E"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AA6BA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gEAAgE;IAChE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,mDAAmD;IACnD,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAiDD;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmW5E"}

package/dist/commands/init.js

@@ -3,10 +3,10 @@ import fs from 'fs/promises';
 import path from 'path';
 import pc from 'picocolors';
 import { ControlPlaneError, getTenantDetails } from '../api/control-plane.js';
+import { FigmaApiError } from '../api/figma-api.js';
 import { getValidAccessToken } from '../auth/oauth-flow.js';
 import { getValidProjectToken, ProjectTokenError } from '../auth/project-token.js';
 import { TokenStore } from '../auth/token-store.js';
-import { hasFigmaConfig, readFigmaConfig, writeFigmaConfig } from '../utils/config.js';
 import { isDebug } from '../utils/is-debug.js';
 import * as log from '../utils/log.js';
 import { displayManualInstructions, ensurePayloadFigmaConfig } from '../utils/payload-config-modifier.js';
@@ -34,17 +34,15 @@ import { loginCommand } from './login.js';
             }
         }
     } catch (error) {
-        // Always show failures, even without debug
         if (isDebug()) {
             spinner.stop(pc.yellow('⚠ Project token generation failed'));
         }
-        if (error instanceof ProjectTokenError) {
+        // Always show failures, even without debug
+        if (error instanceof ProjectTokenError || error instanceof FigmaApiError) {
             log.warning(error.message);
-            if (isDebug()) {
-                p.note('Project token is used for authenticating to the Content API.\nYou can continue without it, but may need to regenerate later.', 'Note');
-            }
+            p.note('Project token is used for authenticating to the Content API.\nYou can continue without it, but may need to regenerate later.', 'Note');
         } else {
-            log.warning(error instanceof Error ? error.message : 'Unknown error');
+            log.warning(`Unable to retrieve project token: ${error instanceof Error ? error.message : 'Unknown error'}`);
         }
     // Don't exit - token generation failure shouldn't block initialization
     }
@@ -112,34 +110,9 @@ import { loginCommand } from './login.js';
             process.exit(1);
         }
     }
-    // Check if already initialized
-    const hasConfig = await hasFigmaConfig();
-    if (hasConfig && !options.force) {
-        // Read existing config
-        const config = await readFigmaConfig();
-        if (!config) {
-            p.log.error('Failed to read existing configuration');
-            process.exit(1);
-        }
-        // Display existing CMS details
-        p.log.info(pc.bold('Project already initialized'));
-        const details = [
-            `Tenant ID:  ${config.tenantId}`,
-            `Domain:     ${pc.cyan(`https://${config.domain}`)}`
-        ];
-        // Optionally fetch live status from Control Plane
-        if (!options.skipAuth) {
-            try {
-                const tenant = await getTenantDetails(accessToken, config.tenantId);
-                details.push(`Status:     ${tenant.status}`);
-            } catch  {
-            // Ignore errors, just skip live status
-            }
-        }
-        p.note(details.join('\n'), 'CMS Configuration');
-        p.note('Use --force to reconfigure this project', 'Tip');
-        process.exit(0);
-    }
+    // Note: We no longer check for figma.config.json here
+    // Instead, the AST detection will check if figma object already exists in payload.config.ts
+    // and skip modification if it does (unless --force is used)
     // Step 3: Get CMS ID with retry loop
     log.debug('Configuring Project...');
     let tenantId = options.id;
@@ -192,7 +165,6 @@ import { loginCommand } from './login.js';
         }
     }
     // Step 4: Detect or scaffold Payload project
-    // p.log.step(pc.bold('Setting up project...'))
     const isInProject = await isInProjectDirectory();
     if (isInProject) {
         // ===== EXISTING PROJECT FLOW =====
@@ -223,7 +195,11 @@ import { loginCommand } from './login.js';
                 }
             }
             s.start('Checking Payload configuration...');
-            const modResult = await ensurePayloadFigmaConfig(process.cwd(), projectInfo.packageManager || 'pnpm');
+            const modResult = await ensurePayloadFigmaConfig(process.cwd(), projectInfo.packageManager || 'pnpm', {
+                region: options.region || 'us-east-1',
+                tenantId: selectedTenant.id,
+                useContentSystem: !options.noContentSystem
+            });
             if (!modResult.success) {
                 s.stop(pc.red('✗ Configuration check failed'));
                 displayManualInstructions(modResult.error || 'Unknown error');
@@ -232,7 +208,7 @@ import { loginCommand } from './login.js';
             if (modResult.modified) {
                 s.stop(pc.green('✓ Payload configuration updated'));
                 if (modResult.changes.length > 0) {
-                    modResult.changes.forEach((change)=>log.info(pc.dim(`  → ${change}`)));
+                    modResult.changes.forEach((change)=>log.debug(pc.dim(` → ${change}`)));
                 }
             } else {
                 s.stop(pc.green('✓ Payload configuration valid'));
@@ -263,28 +239,6 @@ import { loginCommand } from './login.js';
             p.note('Create a new project or manually add Payload dependencies', 'Action Required');
             process.exit(1);
         }
-        // Write configuration for existing project
-        if (isDebug()) {
-            s.start('Configuring your project...');
-        }
-        try {
-            await writeFigmaConfig({
-                domain: selectedTenant.domain,
-                tenantId: selectedTenant.id
-            });
-            if (isDebug()) {
-                s.stop(pc.green('✓ Project configured'));
-            }
-        } catch (error) {
-            // Always show failures
-            if (isDebug()) {
-                s.stop(pc.red('✗ Failed'));
-            } else {
-                log.error('Failed to configure project');
-            }
-            log.error(error instanceof Error ? error.message : 'Unknown error');
-            process.exit(1);
-        }
         // Generate project token (unless skipping auth)
         if (!options.skipAuth) {
             await generateProjectTokenWithFeedback(tokenStore, selectedTenant.id, s);
@@ -292,7 +246,7 @@ import { loginCommand } from './login.js';
         // Success message for existing project
         p.outro(pc.green('✓ Project initialized successfully!'));
         const nextSteps = [
-            selectedTenant.status === 'provisioning' ? 'Wait for CMS provisioning to complete (check status with `payloadcms-figma list`)' : undefined,
+            selectedTenant.status === 'provisioning' ? 'Wait for CMS provisioning to complete (check status with `@payloadcms/figma list`)' : undefined,
             'Start development server: `pnpm dev`',
             `Access your CMS at: ${pc.cyan(`https://${selectedTenant.domain}`)}`
         ].filter(Boolean);
@@ -345,7 +299,11 @@ import { loginCommand } from './login.js';
         }
         // Modify Payload configuration
         s.start('Checking Payload configuration...');
-        const modResult = await ensurePayloadFigmaConfig(fullPath, 'pnpm');
+        const modResult = await ensurePayloadFigmaConfig(fullPath, 'pnpm', {
+            region: options.region || 'us-east-1',
+            tenantId: selectedTenant.id,
+            useContentSystem: !options.noContentSystem
+        });
         if (!modResult.success) {
             s.stop(pc.red('✗ Configuration check failed'));
             displayManualInstructions(modResult.error || 'Unknown error');
@@ -354,7 +312,7 @@ import { loginCommand } from './login.js';
         if (modResult.modified) {
             s.stop(pc.green('✓ Payload configuration updated'));
             if (modResult.changes.length > 0) {
-                modResult.changes.forEach((change)=>log.info(pc.dim(`  → ${change}`)));
+                modResult.changes.forEach((change)=>log.debug(pc.dim(` → ${change}`)));
             }
         } else {
             s.stop(pc.green('✓ Payload configuration valid'));
@@ -365,28 +323,6 @@ import { loginCommand } from './login.js';
                 p.log.warn(pc.yellow(`⚠ ${warning}`));
             });
         }
-        // Write configuration to new project directory
-        if (isDebug()) {
-            s.start('Configuring your project...');
-        }
-        try {
-            await writeFigmaConfig({
-                domain: selectedTenant.domain,
-                tenantId: selectedTenant.id
-            }, fullPath);
-            if (isDebug()) {
-                s.stop(pc.green('✓ Project configured'));
-            }
-        } catch (error) {
-            // Always show failures
-            if (isDebug()) {
-                s.stop(pc.red('✗ Failed'));
-            } else {
-                log.error('Failed to configure project');
-            }
-            log.error(error instanceof Error ? error.message : 'Unknown error');
-            process.exit(1);
-        }
         // Generate project token (unless skipping auth)
         if (!options.skipAuth) {
             await generateProjectTokenWithFeedback(tokenStore, selectedTenant.id, s);