@payloadcms/figma 0.0.1-alpha.28 → 0.0.1-alpha.3

package/dist/auth/project-token.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/project-token.ts"],"sourcesContent":["/**\n * Project Token Management\n *\n * Handles project token (JWT) generation and refresh for authenticating\n * to the Content API. Project tokens are scoped to a specific tenant/CMS\n * and have a shorter lifespan (15-30 minutes) than OAuth tokens.\n */\n\nimport type { TokenStore } from './token-store.js'\nimport type { JWTPayload } from './types.js'\n\nimport { getProjectToken as fetchProjectToken } from '../api/figma-api.js'\nimport { getEnvironment } from '../constants.js'\nimport * as log from '../utils/log.js'\nimport { JWTValidationError, validateProjectToken } from './jwt-validator.js'\nimport { getValidAccessToken } from './oauth-flow.js'\n\n/**\n * Error during project token operations\n */\nexport class ProjectTokenError extends Error {\n  constructor(\n    message: string,\n    public cause?: Error,\n  ) {\n    super(message)\n    this.name = 'ProjectTokenError'\n  }\n}\n\n/**\n * Parse JWT claims from token without validation\n * Used for mock tokens where signature validation is not needed\n *\n * @param token - JWT token string\n * @returns Parsed JWT payload\n * @throws {ProjectTokenError} If JWT cannot be parsed\n */\nfunction parseJWTClaims(token: string): JWTPayload {\n  try {\n    // JWT format: header.payload.signature\n    const parts = token.split('.')\n    if (parts.length !== 3) {\n      throw new Error('Invalid JWT format')\n    }\n\n    // Decode the payload (second part)\n    const payload = parts[1]\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/')\n    const paddedBase64 = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=')\n\n    const decodedPayload = JSON.parse(Buffer.from(paddedBase64, 'base64').toString('utf-8'))\n\n    return decodedPayload as JWTPayload\n  } catch (error) {\n    throw new ProjectTokenError(\n      `Failed to parse JWT claims: ${error instanceof Error ? error.message : 'Unknown error'}`,\n      error instanceof Error ? error : undefined,\n    )\n  }\n}\n\n/**\n * Get a valid project token for a tenant, refreshing if necessary\n *\n * This function:\n * 1. Checks if a stored project token exists and is valid (not expired)\n * 2. If expired or missing, gets a valid user access token\n * 3. Calls the Figma API to generate a new project token\n * 4. Stores the new project token in encrypted storage\n * 5. Returns the JWT string\n *\n * The project token is used by local Payload instances to authenticate\n * requests to the Content API without requiring a round-trip to Sinatra.\n *\n * @param tokenStore - Token store for persisting tokens\n * @param tenantId - The tenant/CMS ID to get a token for\n * @returns Promise resolving to JWT token string or null if failed\n * @throws {ProjectTokenError} If token generation fails\n */\nexport async function getValidProjectToken(\n  tokenStore: TokenStore,\n  tenantId: string,\n): Promise<null | string> {\n  if (process.env.FIGMA_CONTENT_API_ACCESS_KEY) {\n    log.debug('FIGMA_CONTENT_API_ACCESS_KEY is set; skipping project token retrieval from API')\n    return null\n  }\n\n  // Check for existing valid project token\n  if (tokenStore.hasValidProjectToken(tenantId)) {\n    const projectToken = tokenStore.getProjectToken(tenantId)\n    return projectToken?.token || null\n  }\n\n  // We need to refresh the project token\n  // An oauth access token is required for the call\n  let accessToken: null | string\n  try {\n    accessToken = await getValidAccessToken(tokenStore)\n  } catch (error) {\n    throw new ProjectTokenError(\n      'Failed to get valid access token for project token refresh',\n      error instanceof Error ? error : undefined,\n    )\n  }\n\n  if (!accessToken) {\n    // No valid user tokens available - user needs to authenticate\n    return null\n  }\n\n  // Fetch a new project token from the Figma API\n  const projectToken = await fetchProjectToken(accessToken, tenantId)\n\n  // Validate the JWT signature and claims (skip for mocks)\n  const hasEnvToken = !!process.env.FIGMA_MOCK_PROJECT_TOKEN_VALUE\n  const shouldMock = process.env.FIGMA_MOCK_PROJECT_TOKEN !== 'false'\n  let validatedClaims: JWTPayload\n\n  if (hasEnvToken || shouldMock) {\n    // MOCK: Skip JWT validation and parse claims directly\n    log.debug('Skipping JWT validation for mock/env project token')\n    validatedClaims = parseJWTClaims(projectToken.token)\n  } else {\n    // REAL: Validate JWT signature against JWKS\n    try {\n      validatedClaims = await validateProjectToken(projectToken.token, getEnvironment())\n    } catch (validationError) {\n      // Handle validation errors\n      if (validationError instanceof JWTValidationError) {\n        throw new ProjectTokenError(\n          `Project token validation failed: ${validationError.message}`,\n          validationError,\n        )\n      }\n      throw validationError\n    }\n  }\n\n  // Ensure exp claim is present\n  if (!validatedClaims.exp) {\n    throw new ProjectTokenError('Project token missing expiration (exp) claim')\n  }\n\n  // Store the project token with validated expiration and claims\n  tokenStore.setProjectToken(tenantId, {\n    claims: validatedClaims,\n    expiresAt: validatedClaims.exp * 1000, // Convert from seconds to milliseconds\n    tenantId,\n    token: projectToken.token,\n  })\n\n  return projectToken.token\n}\n\n/**\n * Refresh a project token for a tenant\n *\n * Forces a refresh of the project token even if the current one is still valid.\n * Useful for testing or when you want to ensure you have the freshest token.\n *\n * @param tokenStore - Token store for persisting tokens\n * @param tenantId - The tenant/CMS ID to refresh token for\n * @returns Promise resolving to JWT token string or null if failed\n * @throws {ProjectTokenError} If token refresh fails\n */\nexport async function refreshProjectToken(\n  tokenStore: TokenStore,\n  tenantId: string,\n): Promise<null | string> {\n  // Clear the existing project token to force a refresh\n  tokenStore.clearProjectToken(tenantId)\n\n  // Get a new token (which will fetch from API since we just cleared it)\n  return getValidProjectToken(tokenStore, tenantId)\n}\n"],"names":["getProjectToken","fetchProjectToken","getEnvironment","log","JWTValidationError","validateProjectToken","getValidAccessToken","ProjectTokenError","Error","message","cause","name","parseJWTClaims","token","parts","split","length","payload","base64","replace","paddedBase64","padEnd","decodedPayload","JSON","parse","Buffer","from","toString","error","undefined","getValidProjectToken","tokenStore","tenantId","process","env","FIGMA_CONTENT_API_ACCESS_KEY","debug","hasValidProjectToken","projectToken","accessToken","hasEnvToken","FIGMA_MOCK_PROJECT_TOKEN_VALUE","shouldMock","FIGMA_MOCK_PROJECT_TOKEN","validatedClaims","validationError","exp","setProjectToken","claims","expiresAt","refreshProjectToken","clearProjectToken"],"mappings":"AAAA;;;;;;CAMC,GAKD,SAASA,mBAAmBC,iBAAiB,QAAQ,sBAAqB;AAC1E,SAASC,cAAc,QAAQ,kBAAiB;AAChD,YAAYC,SAAS,kBAAiB;AACtC,SAASC,kBAAkB,EAAEC,oBAAoB,QAAQ,qBAAoB;AAC7E,SAASC,mBAAmB,QAAQ,kBAAiB;AAErD;;CAEC,GACD,OAAO,MAAMC,0BAA0BC;;IACrC,YACEC,OAAe,EACf,AAAOC,KAAa,CACpB;QACA,KAAK,CAACD,eAFCC,QAAAA;QAGP,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;;;;;;CAOC,GACD,SAASC,eAAeC,KAAa;IACnC,IAAI;QACF,uCAAuC;QACvC,MAAMC,QAAQD,MAAME,KAAK,CAAC;QAC1B,IAAID,MAAME,MAAM,KAAK,GAAG;YACtB,MAAM,IAAIR,MAAM;QAClB;QAEA,mCAAmC;QACnC,MAAMS,UAAUH,KAAK,CAAC,EAAE;QACxB,MAAMI,SAASD,QAAQE,OAAO,CAAC,MAAM,KAAKA,OAAO,CAAC,MAAM;QACxD,MAAMC,eAAeF,OAAOG,MAAM,CAACH,OAAOF,MAAM,GAAI,AAAC,CAAA,IAAKE,OAAOF,MAAM,GAAG,CAAC,IAAK,GAAI;QAEpF,MAAMM,iBAAiBC,KAAKC,KAAK,CAACC,OAAOC,IAAI,CAACN,cAAc,UAAUO,QAAQ,CAAC;QAE/E,OAAOL;IACT,EAAE,OAAOM,OAAO;QACd,MAAM,IAAIrB,kBACR,CAAC,4BAA4B,EAAEqB,iBAAiBpB,QAAQoB,MAAMnB,OAAO,GAAG,iBAAiB,EACzFmB,iBAAiBpB,QAAQoB,QAAQC;IAErC;AACF;AAEA;;;;;;;;;;;;;;;;;CAiBC,GACD,OAAO,eAAeC,qBACpBC,UAAsB,EACtBC,QAAgB;IAEhB,IAAIC,QAAQC,GAAG,CAACC,4BAA4B,EAAE;QAC5ChC,IAAIiC,KAAK,CAAC;QACV,OAAO;IACT;IAEA,yCAAyC;IACzC,IAAIL,WAAWM,oBAAoB,CAACL,WAAW;QAC7C,MAAMM,eAAeP,WAAW/B,eAAe,CAACgC;QAChD,OAAOM,cAAczB,SAAS;IAChC;IAEA,uCAAuC;IACvC,iDAAiD;IACjD,IAAI0B;IACJ,IAAI;QACFA,cAAc,MAAMjC,oBAAoByB;IAC1C,EAAE,OAAOH,OAAO;QACd,MAAM,IAAIrB,kBACR,8DACAqB,iBAAiBpB,QAAQoB,QAAQC;IAErC;IAEA,IAAI,CAACU,aAAa;QAChB,8DAA8D;QAC9D,OAAO;IACT;IAEA,+CAA+C;IAC/C,MAAMD,eAAe,MAAMrC,kBAAkBsC,aAAaP;IAE1D,yDAAyD;IACzD,MAAMQ,cAAc,CAAC,CAACP,QAAQC,GAAG,CAACO,8BAA8B;IAChE,MAAMC,aAAaT,QAAQC,GAAG,CAACS,wBAAwB,KAAK;IAC5D,IAAIC;IAEJ,IAAIJ,eAAeE,YAAY;QAC7B,sDAAsD;QACtDvC,IAAIiC,KAAK,CAAC;QACVQ,kBAAkBhC,eAAe0B,aAAazB,KAAK;IACrD,OAAO;QACL,4CAA4C;QAC5C,IAAI;YACF+B,kBAAkB,MAAMvC,qBAAqBiC,aAAazB,KAAK,EAAEX;QACnE,EAAE,OAAO2C,iBAAiB;YACxB,2BAA2B;YAC3B,IAAIA,2BAA2BzC,oBAAoB;gBACjD,MAAM,IAAIG,kBACR,CAAC,iCAAiC,EAAEsC,gBAAgBpC,OAAO,EAAE,EAC7DoC;YAEJ;YACA,MAAMA;QACR;IACF;IAEA,8BAA8B;IAC9B,IAAI,CAACD,gBAAgBE,GAAG,EAAE;QACxB,MAAM,IAAIvC,kBAAkB;IAC9B;IAEA,+DAA+D;IAC/DwB,WAAWgB,eAAe,CAACf,UAAU;QACnCgB,QAAQJ;QACRK,WAAWL,gBAAgBE,GAAG,GAAG;QACjCd;QACAnB,OAAOyB,aAAazB,KAAK;IAC3B;IAEA,OAAOyB,aAAazB,KAAK;AAC3B;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeqC,oBACpBnB,UAAsB,EACtBC,QAAgB;IAEhB,sDAAsD;IACtDD,WAAWoB,iBAAiB,CAACnB;IAE7B,uEAAuE;IACvE,OAAOF,qBAAqBC,YAAYC;AAC1C"}
+{"version":3,"sources":["../../src/auth/project-token.ts"],"sourcesContent":["/**\n * Project Token Management\n *\n * Handles project token (JWT) generation and refresh for authenticating\n * to the Content API. Project tokens are scoped to a specific tenant/CMS\n * and have a shorter lifespan (15-30 minutes) than OAuth tokens.\n */\n\nimport type { TokenStore } from './token-store.js'\nimport type { JWTPayload } from './types.js'\n\nimport { getProjectToken as fetchProjectToken } from '../api/figma-api.js'\nimport { getEnvironment } from '../constants.js'\nimport * as log from '../utils/log.js'\nimport { JWTValidationError, validateProjectToken } from './jwt-validator.js'\nimport { getValidAccessToken } from './oauth-flow.js'\n\n/**\n * Error during project token operations\n */\nexport class ProjectTokenError extends Error {\n  constructor(\n    message: string,\n    public cause?: Error,\n  ) {\n    super(message)\n    this.name = 'ProjectTokenError'\n  }\n}\n\n/**\n * Parse JWT claims from token without validation\n * Used for mock tokens where signature validation is not needed\n *\n * @param token - JWT token string\n * @returns Parsed JWT payload\n * @throws {ProjectTokenError} If JWT cannot be parsed\n */\nfunction parseJWTClaims(token: string): JWTPayload {\n  try {\n    // JWT format: header.payload.signature\n    const parts = token.split('.')\n    if (parts.length !== 3) {\n      throw new Error('Invalid JWT format')\n    }\n\n    // Decode the payload (second part)\n    const payload = parts[1]\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/')\n    const paddedBase64 = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=')\n\n    const decodedPayload = JSON.parse(Buffer.from(paddedBase64, 'base64').toString('utf-8'))\n\n    return decodedPayload as JWTPayload\n  } catch (error) {\n    throw new ProjectTokenError(\n      `Failed to parse JWT claims: ${error instanceof Error ? error.message : 'Unknown error'}`,\n      error instanceof Error ? error : undefined,\n    )\n  }\n}\n\n/**\n * Get a valid project token for a tenant, refreshing if necessary\n *\n * This function:\n * 1. Checks if a stored project token exists and is valid (not expired)\n * 2. If expired or missing, gets a valid user access token\n * 3. Calls the Figma API to generate a new project token\n * 4. Stores the new project token in encrypted storage\n * 5. Returns the JWT string\n *\n * The project token is used by local Payload instances to authenticate\n * requests to the Content API without requiring a round-trip to Sinatra.\n *\n * @param tokenStore - Token store for persisting tokens\n * @param tenantId - The tenant/CMS ID to get a token for\n * @returns Promise resolving to JWT token string or null if failed\n * @throws {ProjectTokenError} If token generation fails\n */\nexport async function getValidProjectToken(\n  tokenStore: TokenStore,\n  tenantId: string,\n): Promise<null | string> {\n  // Check if we have a valid project token already\n  if (tokenStore.hasValidProjectToken(tenantId)) {\n    const projectToken = tokenStore.getProjectToken(tenantId)\n    return projectToken?.token || null\n  }\n\n  // We need to refresh the project token\n  // First, get a valid user access token (will auto-refresh if needed)\n  let accessToken: null | string\n  try {\n    accessToken = await getValidAccessToken(tokenStore)\n  } catch (error) {\n    throw new ProjectTokenError(\n      'Failed to get valid access token for project token refresh',\n      error instanceof Error ? error : undefined,\n    )\n  }\n\n  if (!accessToken) {\n    // No valid user tokens available - user needs to authenticate\n    return null\n  }\n\n  // Fetch a new project token from the Figma API\n  const projectToken = await fetchProjectToken(accessToken, tenantId)\n\n  // Validate the JWT signature and claims (skip for mocks)\n  const shouldMock = process.env.FIGMA_MOCK_PROJECT_TOKEN !== 'false'\n  let validatedClaims: JWTPayload\n\n  if (shouldMock) {\n    // MOCK: Skip JWT validation and parse claims directly\n    log.debug('Skipping JWT validation for mock project token')\n    validatedClaims = parseJWTClaims(projectToken.token)\n  } else {\n    // REAL: Validate JWT signature against JWKS\n    try {\n      validatedClaims = await validateProjectToken(projectToken.token, getEnvironment())\n    } catch (validationError) {\n      // Handle validation errors\n      if (validationError instanceof JWTValidationError) {\n        throw new ProjectTokenError(\n          `Project token validation failed: ${validationError.message}`,\n          validationError,\n        )\n      }\n      throw validationError\n    }\n  }\n\n  // Ensure exp claim is present\n  if (!validatedClaims.exp) {\n    throw new ProjectTokenError('Project token missing expiration (exp) claim')\n  }\n\n  // Store the project token with validated expiration and claims\n  tokenStore.setProjectToken(tenantId, {\n    claims: validatedClaims,\n    expiresAt: validatedClaims.exp * 1000, // Convert from seconds to milliseconds\n    tenantId,\n    token: projectToken.token,\n  })\n\n  return projectToken.token\n}\n\n/**\n * Refresh a project token for a tenant\n *\n * Forces a refresh of the project token even if the current one is still valid.\n * Useful for testing or when you want to ensure you have the freshest token.\n *\n * @param tokenStore - Token store for persisting tokens\n * @param tenantId - The tenant/CMS ID to refresh token for\n * @returns Promise resolving to JWT token string or null if failed\n * @throws {ProjectTokenError} If token refresh fails\n */\nexport async function refreshProjectToken(\n  tokenStore: TokenStore,\n  tenantId: string,\n): Promise<null | string> {\n  // Clear the existing project token to force a refresh\n  tokenStore.clearProjectToken(tenantId)\n\n  // Get a new token (which will fetch from API since we just cleared it)\n  return getValidProjectToken(tokenStore, tenantId)\n}\n"],"names":["getProjectToken","fetchProjectToken","getEnvironment","log","JWTValidationError","validateProjectToken","getValidAccessToken","ProjectTokenError","Error","message","cause","name","parseJWTClaims","token","parts","split","length","payload","base64","replace","paddedBase64","padEnd","decodedPayload","JSON","parse","Buffer","from","toString","error","undefined","getValidProjectToken","tokenStore","tenantId","hasValidProjectToken","projectToken","accessToken","shouldMock","process","env","FIGMA_MOCK_PROJECT_TOKEN","validatedClaims","debug","validationError","exp","setProjectToken","claims","expiresAt","refreshProjectToken","clearProjectToken"],"mappings":"AAAA;;;;;;CAMC,GAKD,SAASA,mBAAmBC,iBAAiB,QAAQ,sBAAqB;AAC1E,SAASC,cAAc,QAAQ,kBAAiB;AAChD,YAAYC,SAAS,kBAAiB;AACtC,SAASC,kBAAkB,EAAEC,oBAAoB,QAAQ,qBAAoB;AAC7E,SAASC,mBAAmB,QAAQ,kBAAiB;AAErD;;CAEC,GACD,OAAO,MAAMC,0BAA0BC;;IACrC,YACEC,OAAe,EACf,AAAOC,KAAa,CACpB;QACA,KAAK,CAACD,eAFCC,QAAAA;QAGP,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;;;;;;CAOC,GACD,SAASC,eAAeC,KAAa;IACnC,IAAI;QACF,uCAAuC;QACvC,MAAMC,QAAQD,MAAME,KAAK,CAAC;QAC1B,IAAID,MAAME,MAAM,KAAK,GAAG;YACtB,MAAM,IAAIR,MAAM;QAClB;QAEA,mCAAmC;QACnC,MAAMS,UAAUH,KAAK,CAAC,EAAE;QACxB,MAAMI,SAASD,QAAQE,OAAO,CAAC,MAAM,KAAKA,OAAO,CAAC,MAAM;QACxD,MAAMC,eAAeF,OAAOG,MAAM,CAACH,OAAOF,MAAM,GAAI,AAAC,CAAA,IAAKE,OAAOF,MAAM,GAAG,CAAC,IAAK,GAAI;QAEpF,MAAMM,iBAAiBC,KAAKC,KAAK,CAACC,OAAOC,IAAI,CAACN,cAAc,UAAUO,QAAQ,CAAC;QAE/E,OAAOL;IACT,EAAE,OAAOM,OAAO;QACd,MAAM,IAAIrB,kBACR,CAAC,4BAA4B,EAAEqB,iBAAiBpB,QAAQoB,MAAMnB,OAAO,GAAG,iBAAiB,EACzFmB,iBAAiBpB,QAAQoB,QAAQC;IAErC;AACF;AAEA;;;;;;;;;;;;;;;;;CAiBC,GACD,OAAO,eAAeC,qBACpBC,UAAsB,EACtBC,QAAgB;IAEhB,iDAAiD;IACjD,IAAID,WAAWE,oBAAoB,CAACD,WAAW;QAC7C,MAAME,eAAeH,WAAW/B,eAAe,CAACgC;QAChD,OAAOE,cAAcrB,SAAS;IAChC;IAEA,uCAAuC;IACvC,qEAAqE;IACrE,IAAIsB;IACJ,IAAI;QACFA,cAAc,MAAM7B,oBAAoByB;IAC1C,EAAE,OAAOH,OAAO;QACd,MAAM,IAAIrB,kBACR,8DACAqB,iBAAiBpB,QAAQoB,QAAQC;IAErC;IAEA,IAAI,CAACM,aAAa;QAChB,8DAA8D;QAC9D,OAAO;IACT;IAEA,+CAA+C;IAC/C,MAAMD,eAAe,MAAMjC,kBAAkBkC,aAAaH;IAE1D,yDAAyD;IACzD,MAAMI,aAAaC,QAAQC,GAAG,CAACC,wBAAwB,KAAK;IAC5D,IAAIC;IAEJ,IAAIJ,YAAY;QACd,sDAAsD;QACtDjC,IAAIsC,KAAK,CAAC;QACVD,kBAAkB5B,eAAesB,aAAarB,KAAK;IACrD,OAAO;QACL,4CAA4C;QAC5C,IAAI;YACF2B,kBAAkB,MAAMnC,qBAAqB6B,aAAarB,KAAK,EAAEX;QACnE,EAAE,OAAOwC,iBAAiB;YACxB,2BAA2B;YAC3B,IAAIA,2BAA2BtC,oBAAoB;gBACjD,MAAM,IAAIG,kBACR,CAAC,iCAAiC,EAAEmC,gBAAgBjC,OAAO,EAAE,EAC7DiC;YAEJ;YACA,MAAMA;QACR;IACF;IAEA,8BAA8B;IAC9B,IAAI,CAACF,gBAAgBG,GAAG,EAAE;QACxB,MAAM,IAAIpC,kBAAkB;IAC9B;IAEA,+DAA+D;IAC/DwB,WAAWa,eAAe,CAACZ,UAAU;QACnCa,QAAQL;QACRM,WAAWN,gBAAgBG,GAAG,GAAG;QACjCX;QACAnB,OAAOqB,aAAarB,KAAK;IAC3B;IAEA,OAAOqB,aAAarB,KAAK;AAC3B;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAekC,oBACpBhB,UAAsB,EACtBC,QAAgB;IAEhB,sDAAsD;IACtDD,WAAWiB,iBAAiB,CAAChB;IAE7B,uEAAuE;IACvE,OAAOF,qBAAqBC,YAAYC;AAC1C"}

package/dist/auth/token-store.d.ts

@@ -1,11 +1,4 @@
 import type { FigmaTokens, JWTPayload, ProjectToken, TokenStoreConfig } from './types.js';
-/**
- * Get the singleton TokenStore instance
- * Use this for all production code to ensure a single shared instance
- *
- * @returns The singleton TokenStore instance
- */
-export declare function getTokenStore(): TokenStore;
 /**
  * Secure storage manager for Figma OAuth2 tokens
  *
@@ -16,9 +9,6 @@ export declare function getTokenStore(): TokenStore;
  *
  * Tokens are encrypted at rest with a machine-specific key and file permissions
  * are set to 0600 (owner read/write only)
- *
- * For production code, use getTokenStore() to get the singleton instance.
- * The constructor is still exported for test isolation.
  */
 export declare class TokenStore {
     private config;

package/dist/auth/token-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../src/auth/token-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAUzF;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,UAAU,CAK1C;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAA4E;gBAE9E,OAAO,CAAC,EAAE,gBAAgB;IActC;;;OAGG;IACH,SAAS,IAAI,WAAW,GAAG,IAAI;IAK/B;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAIpC;;OAEG;IACH,WAAW,IAAI,IAAI;IAInB;;;OAGG;IACH,cAAc,IAAI,OAAO;IAQzB;;;;OAIG;IACH,SAAS,IAAI,OAAO;IAcpB;;;OAGG;IACH,cAAc,IAAI,IAAI,GAAG,MAAM;IAQ/B;;;OAGG;IACH,eAAe,IAAI,IAAI,GAAG,MAAM;IAKhC;;;;;OAKG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAe/D;;;OAGG;IACH,cAAc,IAAI,MAAM;IAIxB;;;;;OAKG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY;IAiBtD;;;;OAIG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,IAAI;IAMnE;;;OAGG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAMzC;;OAEG;IACH,qBAAqB,IAAI,IAAI;IAI7B;;;;;OAKG;IACH,qBAAqB,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO;IAQ1D;;;;OAIG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQ/C;;;;OAIG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAK1D;;;OAGG;IACH,2BAA2B,IAAI,MAAM,EAAE;CAIxC"}
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../src/auth/token-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAKzF;;;;;;;;;;GAUG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAA4E;gBAE9E,OAAO,CAAC,EAAE,gBAAgB;IAWtC;;;OAGG;IACH,SAAS,IAAI,WAAW,GAAG,IAAI;IAK/B;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAIpC;;OAEG;IACH,WAAW,IAAI,IAAI;IAInB;;;OAGG;IACH,cAAc,IAAI,OAAO;IAQzB;;;;OAIG;IACH,SAAS,IAAI,OAAO;IAcpB;;;OAGG;IACH,cAAc,IAAI,IAAI,GAAG,MAAM;IAQ/B;;;OAGG;IACH,eAAe,IAAI,IAAI,GAAG,MAAM;IAKhC;;;;;OAKG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAe/D;;;OAGG;IACH,cAAc,IAAI,MAAM;IAIxB;;;;;OAKG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY;IAiBtD;;;;OAIG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,IAAI;IAMnE;;;OAGG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAMzC;;OAEG;IACH,qBAAqB,IAAI,IAAI;IAI7B;;;;;OAKG;IACH,qBAAqB,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO;IAQ1D;;;;OAIG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQ/C;;;;OAIG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAK1D;;;OAGG;IACH,2BAA2B,IAAI,MAAM,EAAE;CAIxC"}

package/dist/auth/token-store.js

@@ -1,20 +1,6 @@
 /* eslint-disable perfectionist/sort-classes */ import Conf from 'conf';
 import { TOKEN_EXPIRY_BUFFER_SECONDS } from '../config/oauth.js';
 import { deriveEncryptionKey } from './crypto-utils.js';
-/**
- * Module-level singleton instance for production use
- */ let defaultInstance = null;
-/**
- * Get the singleton TokenStore instance
- * Use this for all production code to ensure a single shared instance
- *
- * @returns The singleton TokenStore instance
- */ export function getTokenStore() {
-    if (!defaultInstance) {
-        defaultInstance = new TokenStore();
-    }
-    return defaultInstance;
-}
 /**
  * Secure storage manager for Figma OAuth2 tokens
  *
@@ -25,15 +11,9 @@ import { deriveEncryptionKey } from './crypto-utils.js';
  *
  * Tokens are encrypted at rest with a machine-specific key and file permissions
  * are set to 0600 (owner read/write only)
- *
- * For production code, use getTokenStore() to get the singleton instance.
- * The constructor is still exported for test isolation.
  */ export class TokenStore {
     config;
     constructor(options){
-        if (process.env.AWS_EXECUTION_ENV) {
-            throw new Error('TokenStore cannot be used in AWS Lambda environments');
-        }
         this.config = new Conf({
             configName: options?.configName || 'payloadcms-figma',
             projectName: 'payloadcms-figma',

package/dist/auth/token-store.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/token-store.ts"],"sourcesContent":["/* eslint-disable perfectionist/sort-classes */\nimport Conf from 'conf'\n\nimport type { FigmaTokens, JWTPayload, ProjectToken, TokenStoreConfig } from './types.js'\n\nimport { TOKEN_EXPIRY_BUFFER_SECONDS } from '../config/oauth.js'\nimport { deriveEncryptionKey } from './crypto-utils.js'\n\n/**\n * Module-level singleton instance for production use\n */\nlet defaultInstance: null | TokenStore = null\n\n/**\n * Get the singleton TokenStore instance\n * Use this for all production code to ensure a single shared instance\n *\n * @returns The singleton TokenStore instance\n */\nexport function getTokenStore(): TokenStore {\n  if (!defaultInstance) {\n    defaultInstance = new TokenStore()\n  }\n  return defaultInstance\n}\n\n/**\n * Secure storage manager for Figma OAuth2 tokens\n *\n * Uses the `conf` library to store tokens in an OS-specific secure location:\n * - macOS: ~/Library/Preferences/payloadcms-figma\n * - Linux: ~/.config/payloadcms-figma or $XDG_CONFIG_HOME/payloadcms-figma\n * - Windows: %APPDATA%/payloadcms-figma/Config\n *\n * Tokens are encrypted at rest with a machine-specific key and file permissions\n * are set to 0600 (owner read/write only)\n *\n * For production code, use getTokenStore() to get the singleton instance.\n * The constructor is still exported for test isolation.\n */\nexport class TokenStore {\n  private config: Conf<{ projectTokens: Record<string, ProjectToken>; tokens: FigmaTokens }>\n\n  constructor(options?: TokenStoreConfig) {\n    if (process.env.AWS_EXECUTION_ENV) {\n      throw new Error('TokenStore cannot be used in AWS Lambda environments')\n    }\n    this.config = new Conf<{ projectTokens: Record<string, ProjectToken>; tokens: FigmaTokens }>({\n      configName: options?.configName || 'payloadcms-figma',\n      projectName: 'payloadcms-figma',\n      // Enable encryption with machine-specific key for better security\n      encryptionKey: options?.encryptionKey || deriveEncryptionKey(),\n      // Clear schema to avoid validation issues\n      clearInvalidConfig: true,\n    })\n  }\n\n  /**\n   * Retrieve stored tokens\n   * @returns FigmaTokens if stored, null otherwise\n   */\n  getTokens(): FigmaTokens | null {\n    const tokens = this.config.get('tokens')\n    return tokens || null\n  }\n\n  /**\n   * Store OAuth2 tokens securely\n   * @param tokens - Figma OAuth2 tokens to store\n   */\n  setTokens(tokens: FigmaTokens): void {\n    this.config.set('tokens', tokens)\n  }\n\n  /**\n   * Clear all stored tokens (used for logout)\n   */\n  clearTokens(): void {\n    this.config.delete('tokens')\n  }\n\n  /**\n   * Check if valid (non-expired) tokens exist\n   * @returns true if tokens exist and are not expired\n   */\n  hasValidTokens(): boolean {\n    const tokens = this.getTokens()\n    if (!tokens) {\n      return false\n    }\n    return !this.isExpired()\n  }\n\n  /**\n   * Check if the current access token is expired\n   * Includes a buffer time to avoid using tokens that are about to expire\n   * @returns true if token is expired or will expire within buffer time\n   */\n  isExpired(): boolean {\n    // Access config directly to avoid circular dependency with getTokens()\n    const tokens = this.config.get('tokens')\n    if (!tokens) {\n      return true\n    }\n\n    const now = Date.now()\n    const bufferMs = TOKEN_EXPIRY_BUFFER_SECONDS * 1000\n    const expiryWithBuffer = tokens.expiresAt - bufferMs\n\n    return now >= expiryWithBuffer\n  }\n\n  /**\n   * Get the access token if it exists and is valid\n   * @returns Access token string or null if expired/missing\n   */\n  getAccessToken(): null | string {\n    if (!this.hasValidTokens()) {\n      return null\n    }\n    const tokens = this.getTokens()\n    return tokens?.accessToken || null\n  }\n\n  /**\n   * Get the refresh token if it exists\n   * @returns Refresh token string or null if missing\n   */\n  getRefreshToken(): null | string {\n    const tokens = this.getTokens()\n    return tokens?.refreshToken || null\n  }\n\n  /**\n   * Update just the access token after a refresh\n   * Preserves the existing refresh token and other metadata\n   * @param accessToken - New access token\n   * @param expiresIn - Expiration time in seconds\n   */\n  updateAccessToken(accessToken: string, expiresIn: number): void {\n    const existingTokens = this.getTokens()\n    if (!existingTokens) {\n      throw new Error('Cannot update access token: no existing tokens found')\n    }\n\n    const expiresAt = Date.now() + expiresIn * 1000\n\n    this.setTokens({\n      ...existingTokens,\n      accessToken,\n      expiresAt,\n    })\n  }\n\n  /**\n   * Get the path to the config file (useful for debugging)\n   * @returns Absolute path to the token storage file\n   */\n  getStoragePath(): string {\n    return this.config.path\n  }\n\n  /**\n   * Retrieve a project token for a specific tenant\n   * Automatically removes expired tokens from storage\n   * @param tenantId - The tenant/CMS ID\n   * @returns ProjectToken if stored and valid, null otherwise\n   */\n  getProjectToken(tenantId: string): null | ProjectToken {\n    const projectTokens = this.config.get('projectTokens') || {}\n    const projectToken = projectTokens[tenantId]\n\n    if (!projectToken) {\n      return null\n    }\n\n    // Auto-cleanup expired project token\n    if (this.isProjectTokenExpired(projectToken)) {\n      this.clearProjectToken(tenantId)\n      return null\n    }\n\n    return projectToken\n  }\n\n  /**\n   * Store a project token for a specific tenant\n   * @param tenantId - The tenant/CMS ID\n   * @param projectToken - The project token to store\n   */\n  setProjectToken(tenantId: string, projectToken: ProjectToken): void {\n    const projectTokens = this.config.get('projectTokens') || {}\n    projectTokens[tenantId] = projectToken\n    this.config.set('projectTokens', projectTokens)\n  }\n\n  /**\n   * Clear a project token for a specific tenant\n   * @param tenantId - The tenant/CMS ID\n   */\n  clearProjectToken(tenantId: string): void {\n    const projectTokens = this.config.get('projectTokens') || {}\n    delete projectTokens[tenantId]\n    this.config.set('projectTokens', projectTokens)\n  }\n\n  /**\n   * Clear all project tokens\n   */\n  clearAllProjectTokens(): void {\n    this.config.delete('projectTokens')\n  }\n\n  /**\n   * Check if a project token is expired\n   * Includes a buffer time to avoid using tokens that are about to expire\n   * @param projectToken - The project token to check\n   * @returns true if token is expired or will expire within buffer time\n   */\n  isProjectTokenExpired(projectToken: ProjectToken): boolean {\n    const now = Date.now()\n    const bufferMs = TOKEN_EXPIRY_BUFFER_SECONDS * 1000\n    const expiryWithBuffer = projectToken.expiresAt - bufferMs\n\n    return now >= expiryWithBuffer\n  }\n\n  /**\n   * Check if a valid (non-expired) project token exists for a tenant\n   * @param tenantId - The tenant/CMS ID\n   * @returns true if token exists and is not expired\n   */\n  hasValidProjectToken(tenantId: string): boolean {\n    const projectToken = this.getProjectToken(tenantId)\n    if (!projectToken) {\n      return false\n    }\n    return !this.isProjectTokenExpired(projectToken)\n  }\n\n  /**\n   * Get validated JWT claims from a project token\n   * @param tenantId - The tenant/CMS ID\n   * @returns JWT payload claims or null if token not found or has no claims\n   */\n  getProjectTokenClaims(tenantId: string): JWTPayload | null {\n    const projectToken = this.getProjectToken(tenantId)\n    return projectToken?.claims || null\n  }\n\n  /**\n   * Get all tenant IDs that have stored project tokens\n   * @returns Array of tenant IDs\n   */\n  getAllProjectTokenTenantIds(): string[] {\n    const projectTokens = this.config.get('projectTokens') || {}\n    return Object.keys(projectTokens)\n  }\n}\n"],"names":["Conf","TOKEN_EXPIRY_BUFFER_SECONDS","deriveEncryptionKey","defaultInstance","getTokenStore","TokenStore","config","options","process","env","AWS_EXECUTION_ENV","Error","configName","projectName","encryptionKey","clearInvalidConfig","getTokens","tokens","get","setTokens","set","clearTokens","delete","hasValidTokens","isExpired","now","Date","bufferMs","expiryWithBuffer","expiresAt","getAccessToken","accessToken","getRefreshToken","refreshToken","updateAccessToken","expiresIn","existingTokens","getStoragePath","path","getProjectToken","tenantId","projectTokens","projectToken","isProjectTokenExpired","clearProjectToken","setProjectToken","clearAllProjectTokens","hasValidProjectToken","getProjectTokenClaims","claims","getAllProjectTokenTenantIds","Object","keys"],"mappings":"AAAA,6CAA6C,GAC7C,OAAOA,UAAU,OAAM;AAIvB,SAASC,2BAA2B,QAAQ,qBAAoB;AAChE,SAASC,mBAAmB,QAAQ,oBAAmB;AAEvD;;CAEC,GACD,IAAIC,kBAAqC;AAEzC;;;;;CAKC,GACD,OAAO,SAASC;IACd,IAAI,CAACD,iBAAiB;QACpBA,kBAAkB,IAAIE;IACxB;IACA,OAAOF;AACT;AAEA;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAME;IACHC,OAAkF;IAE1F,YAAYC,OAA0B,CAAE;QACtC,IAAIC,QAAQC,GAAG,CAACC,iBAAiB,EAAE;YACjC,MAAM,IAAIC,MAAM;QAClB;QACA,IAAI,CAACL,MAAM,GAAG,IAAIN,KAA2E;YAC3FY,YAAYL,SAASK,cAAc;YACnCC,aAAa;YACb,kEAAkE;YAClEC,eAAeP,SAASO,iBAAiBZ;YACzC,0CAA0C;YAC1Ca,oBAAoB;QACtB;IACF;IAEA;;;GAGC,GACDC,YAAgC;QAC9B,MAAMC,SAAS,IAAI,CAACX,MAAM,CAACY,GAAG,CAAC;QAC/B,OAAOD,UAAU;IACnB;IAEA;;;GAGC,GACDE,UAAUF,MAAmB,EAAQ;QACnC,IAAI,CAACX,MAAM,CAACc,GAAG,CAAC,UAAUH;IAC5B;IAEA;;GAEC,GACDI,cAAoB;QAClB,IAAI,CAACf,MAAM,CAACgB,MAAM,CAAC;IACrB;IAEA;;;GAGC,GACDC,iBAA0B;QACxB,MAAMN,SAAS,IAAI,CAACD,SAAS;QAC7B,IAAI,CAACC,QAAQ;YACX,OAAO;QACT;QACA,OAAO,CAAC,IAAI,CAACO,SAAS;IACxB;IAEA;;;;GAIC,GACDA,YAAqB;QACnB,uEAAuE;QACvE,MAAMP,SAAS,IAAI,CAACX,MAAM,CAACY,GAAG,CAAC;QAC/B,IAAI,CAACD,QAAQ;YACX,OAAO;QACT;QAEA,MAAMQ,MAAMC,KAAKD,GAAG;QACpB,MAAME,WAAW1B,8BAA8B;QAC/C,MAAM2B,mBAAmBX,OAAOY,SAAS,GAAGF;QAE5C,OAAOF,OAAOG;IAChB;IAEA;;;GAGC,GACDE,iBAAgC;QAC9B,IAAI,CAAC,IAAI,CAACP,cAAc,IAAI;YAC1B,OAAO;QACT;QACA,MAAMN,SAAS,IAAI,CAACD,SAAS;QAC7B,OAAOC,QAAQc,eAAe;IAChC;IAEA;;;GAGC,GACDC,kBAAiC;QAC/B,MAAMf,SAAS,IAAI,CAACD,SAAS;QAC7B,OAAOC,QAAQgB,gBAAgB;IACjC;IAEA;;;;;GAKC,GACDC,kBAAkBH,WAAmB,EAAEI,SAAiB,EAAQ;QAC9D,MAAMC,iBAAiB,IAAI,CAACpB,SAAS;QACrC,IAAI,CAACoB,gBAAgB;YACnB,MAAM,IAAIzB,MAAM;QAClB;QAEA,MAAMkB,YAAYH,KAAKD,GAAG,KAAKU,YAAY;QAE3C,IAAI,CAAChB,SAAS,CAAC;YACb,GAAGiB,cAAc;YACjBL;YACAF;QACF;IACF;IAEA;;;GAGC,GACDQ,iBAAyB;QACvB,OAAO,IAAI,CAAC/B,MAAM,CAACgC,IAAI;IACzB;IAEA;;;;;GAKC,GACDC,gBAAgBC,QAAgB,EAAuB;QACrD,MAAMC,gBAAgB,IAAI,CAACnC,MAAM,CAACY,GAAG,CAAC,oBAAoB,CAAC;QAC3D,MAAMwB,eAAeD,aAAa,CAACD,SAAS;QAE5C,IAAI,CAACE,cAAc;YACjB,OAAO;QACT;QAEA,qCAAqC;QACrC,IAAI,IAAI,CAACC,qBAAqB,CAACD,eAAe;YAC5C,IAAI,CAACE,iBAAiB,CAACJ;YACvB,OAAO;QACT;QAEA,OAAOE;IACT;IAEA;;;;GAIC,GACDG,gBAAgBL,QAAgB,EAAEE,YAA0B,EAAQ;QAClE,MAAMD,gBAAgB,IAAI,CAACnC,MAAM,CAACY,GAAG,CAAC,oBAAoB,CAAC;QAC3DuB,aAAa,CAACD,SAAS,GAAGE;QAC1B,IAAI,CAACpC,MAAM,CAACc,GAAG,CAAC,iBAAiBqB;IACnC;IAEA;;;GAGC,GACDG,kBAAkBJ,QAAgB,EAAQ;QACxC,MAAMC,gBAAgB,IAAI,CAACnC,MAAM,CAACY,GAAG,CAAC,oBAAoB,CAAC;QAC3D,OAAOuB,aAAa,CAACD,SAAS;QAC9B,IAAI,CAAClC,MAAM,CAACc,GAAG,CAAC,iBAAiBqB;IACnC;IAEA;;GAEC,GACDK,wBAA8B;QAC5B,IAAI,CAACxC,MAAM,CAACgB,MAAM,CAAC;IACrB;IAEA;;;;;GAKC,GACDqB,sBAAsBD,YAA0B,EAAW;QACzD,MAAMjB,MAAMC,KAAKD,GAAG;QACpB,MAAME,WAAW1B,8BAA8B;QAC/C,MAAM2B,mBAAmBc,aAAab,SAAS,GAAGF;QAElD,OAAOF,OAAOG;IAChB;IAEA;;;;GAIC,GACDmB,qBAAqBP,QAAgB,EAAW;QAC9C,MAAME,eAAe,IAAI,CAACH,eAAe,CAACC;QAC1C,IAAI,CAACE,cAAc;YACjB,OAAO;QACT;QACA,OAAO,CAAC,IAAI,CAACC,qBAAqB,CAACD;IACrC;IAEA;;;;GAIC,GACDM,sBAAsBR,QAAgB,EAAqB;QACzD,MAAME,eAAe,IAAI,CAACH,eAAe,CAACC;QAC1C,OAAOE,cAAcO,UAAU;IACjC;IAEA;;;GAGC,GACDC,8BAAwC;QACtC,MAAMT,gBAAgB,IAAI,CAACnC,MAAM,CAACY,GAAG,CAAC,oBAAoB,CAAC;QAC3D,OAAOiC,OAAOC,IAAI,CAACX;IACrB;AACF"}
+{"version":3,"sources":["../../src/auth/token-store.ts"],"sourcesContent":["/* eslint-disable perfectionist/sort-classes */\nimport Conf from 'conf'\n\nimport type { FigmaTokens, JWTPayload, ProjectToken, TokenStoreConfig } from './types.js'\n\nimport { TOKEN_EXPIRY_BUFFER_SECONDS } from '../config/oauth.js'\nimport { deriveEncryptionKey } from './crypto-utils.js'\n\n/**\n * Secure storage manager for Figma OAuth2 tokens\n *\n * Uses the `conf` library to store tokens in an OS-specific secure location:\n * - macOS: ~/Library/Preferences/payloadcms-figma\n * - Linux: ~/.config/payloadcms-figma or $XDG_CONFIG_HOME/payloadcms-figma\n * - Windows: %APPDATA%/payloadcms-figma/Config\n *\n * Tokens are encrypted at rest with a machine-specific key and file permissions\n * are set to 0600 (owner read/write only)\n */\nexport class TokenStore {\n  private config: Conf<{ projectTokens: Record<string, ProjectToken>; tokens: FigmaTokens }>\n\n  constructor(options?: TokenStoreConfig) {\n    this.config = new Conf<{ projectTokens: Record<string, ProjectToken>; tokens: FigmaTokens }>({\n      configName: options?.configName || 'payloadcms-figma',\n      projectName: 'payloadcms-figma',\n      // Enable encryption with machine-specific key for better security\n      encryptionKey: options?.encryptionKey || deriveEncryptionKey(),\n      // Clear schema to avoid validation issues\n      clearInvalidConfig: true,\n    })\n  }\n\n  /**\n   * Retrieve stored tokens\n   * @returns FigmaTokens if stored, null otherwise\n   */\n  getTokens(): FigmaTokens | null {\n    const tokens = this.config.get('tokens')\n    return tokens || null\n  }\n\n  /**\n   * Store OAuth2 tokens securely\n   * @param tokens - Figma OAuth2 tokens to store\n   */\n  setTokens(tokens: FigmaTokens): void {\n    this.config.set('tokens', tokens)\n  }\n\n  /**\n   * Clear all stored tokens (used for logout)\n   */\n  clearTokens(): void {\n    this.config.delete('tokens')\n  }\n\n  /**\n   * Check if valid (non-expired) tokens exist\n   * @returns true if tokens exist and are not expired\n   */\n  hasValidTokens(): boolean {\n    const tokens = this.getTokens()\n    if (!tokens) {\n      return false\n    }\n    return !this.isExpired()\n  }\n\n  /**\n   * Check if the current access token is expired\n   * Includes a buffer time to avoid using tokens that are about to expire\n   * @returns true if token is expired or will expire within buffer time\n   */\n  isExpired(): boolean {\n    // Access config directly to avoid circular dependency with getTokens()\n    const tokens = this.config.get('tokens')\n    if (!tokens) {\n      return true\n    }\n\n    const now = Date.now()\n    const bufferMs = TOKEN_EXPIRY_BUFFER_SECONDS * 1000\n    const expiryWithBuffer = tokens.expiresAt - bufferMs\n\n    return now >= expiryWithBuffer\n  }\n\n  /**\n   * Get the access token if it exists and is valid\n   * @returns Access token string or null if expired/missing\n   */\n  getAccessToken(): null | string {\n    if (!this.hasValidTokens()) {\n      return null\n    }\n    const tokens = this.getTokens()\n    return tokens?.accessToken || null\n  }\n\n  /**\n   * Get the refresh token if it exists\n   * @returns Refresh token string or null if missing\n   */\n  getRefreshToken(): null | string {\n    const tokens = this.getTokens()\n    return tokens?.refreshToken || null\n  }\n\n  /**\n   * Update just the access token after a refresh\n   * Preserves the existing refresh token and other metadata\n   * @param accessToken - New access token\n   * @param expiresIn - Expiration time in seconds\n   */\n  updateAccessToken(accessToken: string, expiresIn: number): void {\n    const existingTokens = this.getTokens()\n    if (!existingTokens) {\n      throw new Error('Cannot update access token: no existing tokens found')\n    }\n\n    const expiresAt = Date.now() + expiresIn * 1000\n\n    this.setTokens({\n      ...existingTokens,\n      accessToken,\n      expiresAt,\n    })\n  }\n\n  /**\n   * Get the path to the config file (useful for debugging)\n   * @returns Absolute path to the token storage file\n   */\n  getStoragePath(): string {\n    return this.config.path\n  }\n\n  /**\n   * Retrieve a project token for a specific tenant\n   * Automatically removes expired tokens from storage\n   * @param tenantId - The tenant/CMS ID\n   * @returns ProjectToken if stored and valid, null otherwise\n   */\n  getProjectToken(tenantId: string): null | ProjectToken {\n    const projectTokens = this.config.get('projectTokens') || {}\n    const projectToken = projectTokens[tenantId]\n\n    if (!projectToken) {\n      return null\n    }\n\n    // Auto-cleanup expired project token\n    if (this.isProjectTokenExpired(projectToken)) {\n      this.clearProjectToken(tenantId)\n      return null\n    }\n\n    return projectToken\n  }\n\n  /**\n   * Store a project token for a specific tenant\n   * @param tenantId - The tenant/CMS ID\n   * @param projectToken - The project token to store\n   */\n  setProjectToken(tenantId: string, projectToken: ProjectToken): void {\n    const projectTokens = this.config.get('projectTokens') || {}\n    projectTokens[tenantId] = projectToken\n    this.config.set('projectTokens', projectTokens)\n  }\n\n  /**\n   * Clear a project token for a specific tenant\n   * @param tenantId - The tenant/CMS ID\n   */\n  clearProjectToken(tenantId: string): void {\n    const projectTokens = this.config.get('projectTokens') || {}\n    delete projectTokens[tenantId]\n    this.config.set('projectTokens', projectTokens)\n  }\n\n  /**\n   * Clear all project tokens\n   */\n  clearAllProjectTokens(): void {\n    this.config.delete('projectTokens')\n  }\n\n  /**\n   * Check if a project token is expired\n   * Includes a buffer time to avoid using tokens that are about to expire\n   * @param projectToken - The project token to check\n   * @returns true if token is expired or will expire within buffer time\n   */\n  isProjectTokenExpired(projectToken: ProjectToken): boolean {\n    const now = Date.now()\n    const bufferMs = TOKEN_EXPIRY_BUFFER_SECONDS * 1000\n    const expiryWithBuffer = projectToken.expiresAt - bufferMs\n\n    return now >= expiryWithBuffer\n  }\n\n  /**\n   * Check if a valid (non-expired) project token exists for a tenant\n   * @param tenantId - The tenant/CMS ID\n   * @returns true if token exists and is not expired\n   */\n  hasValidProjectToken(tenantId: string): boolean {\n    const projectToken = this.getProjectToken(tenantId)\n    if (!projectToken) {\n      return false\n    }\n    return !this.isProjectTokenExpired(projectToken)\n  }\n\n  /**\n   * Get validated JWT claims from a project token\n   * @param tenantId - The tenant/CMS ID\n   * @returns JWT payload claims or null if token not found or has no claims\n   */\n  getProjectTokenClaims(tenantId: string): JWTPayload | null {\n    const projectToken = this.getProjectToken(tenantId)\n    return projectToken?.claims || null\n  }\n\n  /**\n   * Get all tenant IDs that have stored project tokens\n   * @returns Array of tenant IDs\n   */\n  getAllProjectTokenTenantIds(): string[] {\n    const projectTokens = this.config.get('projectTokens') || {}\n    return Object.keys(projectTokens)\n  }\n}\n"],"names":["Conf","TOKEN_EXPIRY_BUFFER_SECONDS","deriveEncryptionKey","TokenStore","config","options","configName","projectName","encryptionKey","clearInvalidConfig","getTokens","tokens","get","setTokens","set","clearTokens","delete","hasValidTokens","isExpired","now","Date","bufferMs","expiryWithBuffer","expiresAt","getAccessToken","accessToken","getRefreshToken","refreshToken","updateAccessToken","expiresIn","existingTokens","Error","getStoragePath","path","getProjectToken","tenantId","projectTokens","projectToken","isProjectTokenExpired","clearProjectToken","setProjectToken","clearAllProjectTokens","hasValidProjectToken","getProjectTokenClaims","claims","getAllProjectTokenTenantIds","Object","keys"],"mappings":"AAAA,6CAA6C,GAC7C,OAAOA,UAAU,OAAM;AAIvB,SAASC,2BAA2B,QAAQ,qBAAoB;AAChE,SAASC,mBAAmB,QAAQ,oBAAmB;AAEvD;;;;;;;;;;CAUC,GACD,OAAO,MAAMC;IACHC,OAAkF;IAE1F,YAAYC,OAA0B,CAAE;QACtC,IAAI,CAACD,MAAM,GAAG,IAAIJ,KAA2E;YAC3FM,YAAYD,SAASC,cAAc;YACnCC,aAAa;YACb,kEAAkE;YAClEC,eAAeH,SAASG,iBAAiBN;YACzC,0CAA0C;YAC1CO,oBAAoB;QACtB;IACF;IAEA;;;GAGC,GACDC,YAAgC;QAC9B,MAAMC,SAAS,IAAI,CAACP,MAAM,CAACQ,GAAG,CAAC;QAC/B,OAAOD,UAAU;IACnB;IAEA;;;GAGC,GACDE,UAAUF,MAAmB,EAAQ;QACnC,IAAI,CAACP,MAAM,CAACU,GAAG,CAAC,UAAUH;IAC5B;IAEA;;GAEC,GACDI,cAAoB;QAClB,IAAI,CAACX,MAAM,CAACY,MAAM,CAAC;IACrB;IAEA;;;GAGC,GACDC,iBAA0B;QACxB,MAAMN,SAAS,IAAI,CAACD,SAAS;QAC7B,IAAI,CAACC,QAAQ;YACX,OAAO;QACT;QACA,OAAO,CAAC,IAAI,CAACO,SAAS;IACxB;IAEA;;;;GAIC,GACDA,YAAqB;QACnB,uEAAuE;QACvE,MAAMP,SAAS,IAAI,CAACP,MAAM,CAACQ,GAAG,CAAC;QAC/B,IAAI,CAACD,QAAQ;YACX,OAAO;QACT;QAEA,MAAMQ,MAAMC,KAAKD,GAAG;QACpB,MAAME,WAAWpB,8BAA8B;QAC/C,MAAMqB,mBAAmBX,OAAOY,SAAS,GAAGF;QAE5C,OAAOF,OAAOG;IAChB;IAEA;;;GAGC,GACDE,iBAAgC;QAC9B,IAAI,CAAC,IAAI,CAACP,cAAc,IAAI;YAC1B,OAAO;QACT;QACA,MAAMN,SAAS,IAAI,CAACD,SAAS;QAC7B,OAAOC,QAAQc,eAAe;IAChC;IAEA;;;GAGC,GACDC,kBAAiC;QAC/B,MAAMf,SAAS,IAAI,CAACD,SAAS;QAC7B,OAAOC,QAAQgB,gBAAgB;IACjC;IAEA;;;;;GAKC,GACDC,kBAAkBH,WAAmB,EAAEI,SAAiB,EAAQ;QAC9D,MAAMC,iBAAiB,IAAI,CAACpB,SAAS;QACrC,IAAI,CAACoB,gBAAgB;YACnB,MAAM,IAAIC,MAAM;QAClB;QAEA,MAAMR,YAAYH,KAAKD,GAAG,KAAKU,YAAY;QAE3C,IAAI,CAAChB,SAAS,CAAC;YACb,GAAGiB,cAAc;YACjBL;YACAF;QACF;IACF;IAEA;;;GAGC,GACDS,iBAAyB;QACvB,OAAO,IAAI,CAAC5B,MAAM,CAAC6B,IAAI;IACzB;IAEA;;;;;GAKC,GACDC,gBAAgBC,QAAgB,EAAuB;QACrD,MAAMC,gBAAgB,IAAI,CAAChC,MAAM,CAACQ,GAAG,CAAC,oBAAoB,CAAC;QAC3D,MAAMyB,eAAeD,aAAa,CAACD,SAAS;QAE5C,IAAI,CAACE,cAAc;YACjB,OAAO;QACT;QAEA,qCAAqC;QACrC,IAAI,IAAI,CAACC,qBAAqB,CAACD,eAAe;YAC5C,IAAI,CAACE,iBAAiB,CAACJ;YACvB,OAAO;QACT;QAEA,OAAOE;IACT;IAEA;;;;GAIC,GACDG,gBAAgBL,QAAgB,EAAEE,YAA0B,EAAQ;QAClE,MAAMD,gBAAgB,IAAI,CAAChC,MAAM,CAACQ,GAAG,CAAC,oBAAoB,CAAC;QAC3DwB,aAAa,CAACD,SAAS,GAAGE;QAC1B,IAAI,CAACjC,MAAM,CAACU,GAAG,CAAC,iBAAiBsB;IACnC;IAEA;;;GAGC,GACDG,kBAAkBJ,QAAgB,EAAQ;QACxC,MAAMC,gBAAgB,IAAI,CAAChC,MAAM,CAACQ,GAAG,CAAC,oBAAoB,CAAC;QAC3D,OAAOwB,aAAa,CAACD,SAAS;QAC9B,IAAI,CAAC/B,MAAM,CAACU,GAAG,CAAC,iBAAiBsB;IACnC;IAEA;;GAEC,GACDK,wBAA8B;QAC5B,IAAI,CAACrC,MAAM,CAACY,MAAM,CAAC;IACrB;IAEA;;;;;GAKC,GACDsB,sBAAsBD,YAA0B,EAAW;QACzD,MAAMlB,MAAMC,KAAKD,GAAG;QACpB,MAAME,WAAWpB,8BAA8B;QAC/C,MAAMqB,mBAAmBe,aAAad,SAAS,GAAGF;QAElD,OAAOF,OAAOG;IAChB;IAEA;;;;GAIC,GACDoB,qBAAqBP,QAAgB,EAAW;QAC9C,MAAME,eAAe,IAAI,CAACH,eAAe,CAACC;QAC1C,IAAI,CAACE,cAAc;YACjB,OAAO;QACT;QACA,OAAO,CAAC,IAAI,CAACC,qBAAqB,CAACD;IACrC;IAEA;;;;GAIC,GACDM,sBAAsBR,QAAgB,EAAqB;QACzD,MAAME,eAAe,IAAI,CAACH,eAAe,CAACC;QAC1C,OAAOE,cAAcO,UAAU;IACjC;IAEA;;;GAGC,GACDC,8BAAwC;QACtC,MAAMT,gBAAgB,IAAI,CAAChC,MAAM,CAACQ,GAAG,CAAC,oBAAoB,CAAC;QAC3D,OAAOkC,OAAOC,IAAI,CAACX;IACrB;AACF"}

package/dist/cli.js

@@ -58,7 +58,6 @@ class Main {
             switch(subcommand){
                 case 'deploy':
                     await deployCommand({
-                        id: this.args['--id'],
                         debug: this.args['--debug'],
                         yes: this.args['--yes']
                     });

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport arg from 'arg'\nimport pc from 'picocolors'\n\nimport type { CliArgs } from './types.js'\n\nimport { deployCommand } from './commands/deploy.js'\nimport { initCommand } from './commands/init.js'\nimport { listTokensCommand } from './commands/list-tokens.js'\nimport { loginCommand } from './commands/login.js'\nimport { logoutCommand } from './commands/logout.js'\nimport { feedbackOutro, helpMessage } from './utils/messages.js'\n\n/**\n * Entrypoint for bin/cli.js\n */\nexport async function main(): Promise<void> {\n  try {\n    await new Main().init()\n  } catch (e) {\n    if (e instanceof Error) {\n      // eslint-disable-next-line no-console\n      console.error(e.message)\n    }\n  }\n}\n\nclass Main {\n  args: CliArgs\n\n  constructor() {\n    // @ts-expect-error bad typings\n    this.args = arg(\n      {\n        '--debug': Boolean,\n        '--force': Boolean,\n        '--help': Boolean,\n        '--id': String,\n        '--name': String,\n        '--skip-auth': Boolean,\n        '--yes': Boolean,\n\n        // Aliases\n        '-f': '--force',\n        '-h': '--help',\n        '-y': '--yes',\n      },\n      { permissive: true },\n    )\n\n    // Set debug flag globally\n    if (this.args['--debug']) {\n      process.env.DEBUG = 'true'\n    }\n  }\n\n  async init(): Promise<void> {\n    try {\n      if (this.args['--help']) {\n        helpMessage()\n        process.exit(0)\n      }\n\n      // Get the subcommand (first non-flag argument)\n      const subcommand = this.args._[0]\n\n      // eslint-disable-next-line no-console\n      console.log('\\n')\n      p.intro(pc.bgCyan(pc.black(' @payloadcms/figma ')))\n\n      // Route to appropriate command handler\n      switch (subcommand) {\n        case 'deploy':\n          await deployCommand({\n            id: this.args['--id'],\n            debug: this.args['--debug'],\n            yes: this.args['--yes'],\n          })\n          break\n\n        case 'init':\n          await initCommand({\n            id: this.args['--id'],\n            name: this.args['--name'],\n            debug: this.args['--debug'],\n            force: this.args['--force'],\n            skipAuth: this.args['--skip-auth'],\n          })\n          break\n\n        case 'list-tokens':\n          listTokensCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case 'login':\n          await loginCommand()\n          break\n\n        case 'logout':\n          await logoutCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case undefined:\n          // No subcommand - show default message\n          p.note(\"Let's create a new CMS!\")\n          p.outro(feedbackOutro())\n          break\n\n        default:\n          p.log.error(pc.red(`Unknown command: ${subcommand}`))\n          p.note('Use --help to see available commands', 'Tip')\n          process.exit(1)\n      }\n\n      process.exit(0)\n    } catch (err: unknown) {\n      // eslint-disable-next-line no-console\n      console.error(err instanceof Error ? err.message : 'An error occurred')\n      process.exit(1)\n    }\n  }\n}\n"],"names":["p","arg","pc","deployCommand","initCommand","listTokensCommand","loginCommand","logoutCommand","feedbackOutro","helpMessage","main","Main","init","e","Error","console","error","message","args","Boolean","String","permissive","process","env","DEBUG","exit","subcommand","_","log","intro","bgCyan","black","id","debug","yes","name","force","skipAuth","undefined","note","outro","red","err"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,SAAS,MAAK;AACrB,OAAOC,QAAQ,aAAY;AAI3B,SAASC,aAAa,QAAQ,uBAAsB;AACpD,SAASC,WAAW,QAAQ,qBAAoB;AAChD,SAASC,iBAAiB,QAAQ,4BAA2B;AAC7D,SAASC,YAAY,QAAQ,sBAAqB;AAClD,SAASC,aAAa,QAAQ,uBAAsB;AACpD,SAASC,aAAa,EAAEC,WAAW,QAAQ,sBAAqB;AAEhE;;CAEC,GACD,OAAO,eAAeC;IACpB,IAAI;QACF,MAAM,IAAIC,OAAOC,IAAI;IACvB,EAAE,OAAOC,GAAG;QACV,IAAIA,aAAaC,OAAO;YACtB,sCAAsC;YACtCC,QAAQC,KAAK,CAACH,EAAEI,OAAO;QACzB;IACF;AACF;AAEA,MAAMN;IACJO,KAAa;IAEb,aAAc;QACZ,+BAA+B;QAC/B,IAAI,CAACA,IAAI,GAAGjB,IACV;YACE,WAAWkB;YACX,WAAWA;YACX,UAAUA;YACV,QAAQC;YACR,UAAUA;YACV,eAAeD;YACf,SAASA;YAET,UAAU;YACV,MAAM;YACN,MAAM;YACN,MAAM;QACR,GACA;YAAEE,YAAY;QAAK;QAGrB,0BAA0B;QAC1B,IAAI,IAAI,CAACH,IAAI,CAAC,UAAU,EAAE;YACxBI,QAAQC,GAAG,CAACC,KAAK,GAAG;QACtB;IACF;IAEA,MAAMZ,OAAsB;QAC1B,IAAI;YACF,IAAI,IAAI,CAACM,IAAI,CAAC,SAAS,EAAE;gBACvBT;gBACAa,QAAQG,IAAI,CAAC;YACf;YAEA,+CAA+C;YAC/C,MAAMC,aAAa,IAAI,CAACR,IAAI,CAACS,CAAC,CAAC,EAAE;YAEjC,sCAAsC;YACtCZ,QAAQa,GAAG,CAAC;YACZ5B,EAAE6B,KAAK,CAAC3B,GAAG4B,MAAM,CAAC5B,GAAG6B,KAAK,CAAC;YAE3B,uCAAuC;YACvC,OAAQL;gBACN,KAAK;oBACH,MAAMvB,cAAc;wBAClB6B,IAAI,IAAI,CAACd,IAAI,CAAC,OAAO;wBACrBe,OAAO,IAAI,CAACf,IAAI,CAAC,UAAU;wBAC3BgB,KAAK,IAAI,CAAChB,IAAI,CAAC,QAAQ;oBACzB;oBACA;gBAEF,KAAK;oBACH,MAAMd,YAAY;wBAChB4B,IAAI,IAAI,CAACd,IAAI,CAAC,OAAO;wBACrBiB,MAAM,IAAI,CAACjB,IAAI,CAAC,SAAS;wBACzBe,OAAO,IAAI,CAACf,IAAI,CAAC,UAAU;wBAC3BkB,OAAO,IAAI,CAAClB,IAAI,CAAC,UAAU;wBAC3BmB,UAAU,IAAI,CAACnB,IAAI,CAAC,cAAc;oBACpC;oBACA;gBAEF,KAAK;oBACHb,kBAAkB;wBAChB4B,OAAO,IAAI,CAACf,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAK;oBACH,MAAMZ;oBACN;gBAEF,KAAK;oBACH,MAAMC,cAAc;wBAClB0B,OAAO,IAAI,CAACf,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAKoB;oBACH,uCAAuC;oBACvCtC,EAAEuC,IAAI,CAAC;oBACPvC,EAAEwC,KAAK,CAAChC;oBACR;gBAEF;oBACER,EAAE4B,GAAG,CAACZ,KAAK,CAACd,GAAGuC,GAAG,CAAC,CAAC,iBAAiB,EAAEf,YAAY;oBACnD1B,EAAEuC,IAAI,CAAC,wCAAwC;oBAC/CjB,QAAQG,IAAI,CAAC;YACjB;YAEAH,QAAQG,IAAI,CAAC;QACf,EAAE,OAAOiB,KAAc;YACrB,sCAAsC;YACtC3B,QAAQC,KAAK,CAAC0B,eAAe5B,QAAQ4B,IAAIzB,OAAO,GAAG;YACnDK,QAAQG,IAAI,CAAC;QACf;IACF;AACF"}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport arg from 'arg'\nimport pc from 'picocolors'\n\nimport type { CliArgs } from './types.js'\n\nimport { deployCommand } from './commands/deploy.js'\nimport { initCommand } from './commands/init.js'\nimport { listTokensCommand } from './commands/list-tokens.js'\nimport { loginCommand } from './commands/login.js'\nimport { logoutCommand } from './commands/logout.js'\nimport { feedbackOutro, helpMessage } from './utils/messages.js'\n\n/**\n * Entrypoint for bin/cli.js\n */\nexport async function main(): Promise<void> {\n  try {\n    await new Main().init()\n  } catch (e) {\n    if (e instanceof Error) {\n      // eslint-disable-next-line no-console\n      console.error(e.message)\n    }\n  }\n}\n\nclass Main {\n  args: CliArgs\n\n  constructor() {\n    // @ts-expect-error bad typings\n    this.args = arg(\n      {\n        '--debug': Boolean,\n        '--force': Boolean,\n        '--help': Boolean,\n        '--id': String,\n        '--name': String,\n        '--skip-auth': Boolean,\n        '--yes': Boolean,\n\n        // Aliases\n        '-f': '--force',\n        '-h': '--help',\n        '-y': '--yes',\n      },\n      { permissive: true },\n    )\n\n    // Set debug flag globally\n    if (this.args['--debug']) {\n      process.env.DEBUG = 'true'\n    }\n  }\n\n  async init(): Promise<void> {\n    try {\n      if (this.args['--help']) {\n        helpMessage()\n        process.exit(0)\n      }\n\n      // Get the subcommand (first non-flag argument)\n      const subcommand = this.args._[0]\n\n      // eslint-disable-next-line no-console\n      console.log('\\n')\n      p.intro(pc.bgCyan(pc.black(' @payloadcms/figma ')))\n\n      // Route to appropriate command handler\n      switch (subcommand) {\n        case 'deploy':\n          await deployCommand({\n            debug: this.args['--debug'],\n            yes: this.args['--yes'],\n          })\n          break\n\n        case 'init':\n          await initCommand({\n            id: this.args['--id'],\n            name: this.args['--name'],\n            debug: this.args['--debug'],\n            force: this.args['--force'],\n            skipAuth: this.args['--skip-auth'],\n          })\n          break\n\n        case 'list-tokens':\n          listTokensCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case 'login':\n          await loginCommand()\n          break\n\n        case 'logout':\n          await logoutCommand({\n            debug: this.args['--debug'],\n          })\n          break\n\n        case undefined:\n          // No subcommand - show default message\n          p.note(\"Let's create a new CMS!\")\n          p.outro(feedbackOutro())\n          break\n\n        default:\n          p.log.error(pc.red(`Unknown command: ${subcommand}`))\n          p.note('Use --help to see available commands', 'Tip')\n          process.exit(1)\n      }\n\n      process.exit(0)\n    } catch (err: unknown) {\n      // eslint-disable-next-line no-console\n      console.error(err instanceof Error ? err.message : 'An error occurred')\n      process.exit(1)\n    }\n  }\n}\n"],"names":["p","arg","pc","deployCommand","initCommand","listTokensCommand","loginCommand","logoutCommand","feedbackOutro","helpMessage","main","Main","init","e","Error","console","error","message","args","Boolean","String","permissive","process","env","DEBUG","exit","subcommand","_","log","intro","bgCyan","black","debug","yes","id","name","force","skipAuth","undefined","note","outro","red","err"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,SAAS,MAAK;AACrB,OAAOC,QAAQ,aAAY;AAI3B,SAASC,aAAa,QAAQ,uBAAsB;AACpD,SAASC,WAAW,QAAQ,qBAAoB;AAChD,SAASC,iBAAiB,QAAQ,4BAA2B;AAC7D,SAASC,YAAY,QAAQ,sBAAqB;AAClD,SAASC,aAAa,QAAQ,uBAAsB;AACpD,SAASC,aAAa,EAAEC,WAAW,QAAQ,sBAAqB;AAEhE;;CAEC,GACD,OAAO,eAAeC;IACpB,IAAI;QACF,MAAM,IAAIC,OAAOC,IAAI;IACvB,EAAE,OAAOC,GAAG;QACV,IAAIA,aAAaC,OAAO;YACtB,sCAAsC;YACtCC,QAAQC,KAAK,CAACH,EAAEI,OAAO;QACzB;IACF;AACF;AAEA,MAAMN;IACJO,KAAa;IAEb,aAAc;QACZ,+BAA+B;QAC/B,IAAI,CAACA,IAAI,GAAGjB,IACV;YACE,WAAWkB;YACX,WAAWA;YACX,UAAUA;YACV,QAAQC;YACR,UAAUA;YACV,eAAeD;YACf,SAASA;YAET,UAAU;YACV,MAAM;YACN,MAAM;YACN,MAAM;QACR,GACA;YAAEE,YAAY;QAAK;QAGrB,0BAA0B;QAC1B,IAAI,IAAI,CAACH,IAAI,CAAC,UAAU,EAAE;YACxBI,QAAQC,GAAG,CAACC,KAAK,GAAG;QACtB;IACF;IAEA,MAAMZ,OAAsB;QAC1B,IAAI;YACF,IAAI,IAAI,CAACM,IAAI,CAAC,SAAS,EAAE;gBACvBT;gBACAa,QAAQG,IAAI,CAAC;YACf;YAEA,+CAA+C;YAC/C,MAAMC,aAAa,IAAI,CAACR,IAAI,CAACS,CAAC,CAAC,EAAE;YAEjC,sCAAsC;YACtCZ,QAAQa,GAAG,CAAC;YACZ5B,EAAE6B,KAAK,CAAC3B,GAAG4B,MAAM,CAAC5B,GAAG6B,KAAK,CAAC;YAE3B,uCAAuC;YACvC,OAAQL;gBACN,KAAK;oBACH,MAAMvB,cAAc;wBAClB6B,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;wBAC3Be,KAAK,IAAI,CAACf,IAAI,CAAC,QAAQ;oBACzB;oBACA;gBAEF,KAAK;oBACH,MAAMd,YAAY;wBAChB8B,IAAI,IAAI,CAAChB,IAAI,CAAC,OAAO;wBACrBiB,MAAM,IAAI,CAACjB,IAAI,CAAC,SAAS;wBACzBc,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;wBAC3BkB,OAAO,IAAI,CAAClB,IAAI,CAAC,UAAU;wBAC3BmB,UAAU,IAAI,CAACnB,IAAI,CAAC,cAAc;oBACpC;oBACA;gBAEF,KAAK;oBACHb,kBAAkB;wBAChB2B,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAK;oBACH,MAAMZ;oBACN;gBAEF,KAAK;oBACH,MAAMC,cAAc;wBAClByB,OAAO,IAAI,CAACd,IAAI,CAAC,UAAU;oBAC7B;oBACA;gBAEF,KAAKoB;oBACH,uCAAuC;oBACvCtC,EAAEuC,IAAI,CAAC;oBACPvC,EAAEwC,KAAK,CAAChC;oBACR;gBAEF;oBACER,EAAE4B,GAAG,CAACZ,KAAK,CAACd,GAAGuC,GAAG,CAAC,CAAC,iBAAiB,EAAEf,YAAY;oBACnD1B,EAAEuC,IAAI,CAAC,wCAAwC;oBAC/CjB,QAAQG,IAAI,CAAC;YACjB;YAEAH,QAAQG,IAAI,CAAC;QACf,EAAE,OAAOiB,KAAc;YACrB,sCAAsC;YACtC3B,QAAQC,KAAK,CAAC0B,eAAe5B,QAAQ4B,IAAIzB,OAAO,GAAG;YACnDK,QAAQG,IAAI,CAAC;QACf;IACF;AACF"}

package/dist/commands/deploy.d.ts

@@ -4,8 +4,6 @@
 export interface DeployCommandOptions {
     /** Enable debug mode */
     debug?: boolean;
-    /** Tenant ID */
-    id?: string;
     /** Skip confirmation prompts */
     yes?: boolean;
 }

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAgBA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gBAAgB;IAChB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,gCAAgC;IAChC,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AA6BD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwRhF"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAoBA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gCAAgC;IAChC,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AA6BD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyThF"}

package/dist/commands/deploy.js

@@ -2,13 +2,17 @@ import * as p from '@clack/prompts';
 import { spawn } from 'child_process';
 import path from 'path';
 import pc from 'picocolors';
-import { createDeployment, performDeployment } from '../api/control-plane.js';
+import { Project } from 'ts-morph';
+import { createDeployment, getTenantDetails, performDeployment } from '../api/control-plane.js';
 import { getValidAccessToken } from '../auth/oauth-flow.js';
-import { getTokenStore } from '../auth/token-store.js';
+import { getValidProjectToken } from '../auth/project-token.js';
+import { TokenStore } from '../auth/token-store.js';
 import { collectStaticAssets, createLambdaZip, getFileSize } from '../utils/asset-collection.js';
 import { detectBuild, getBuildCommand } from '../utils/build-detection.js';
 import * as log from '../utils/log.js';
 import { getPackageManager } from '../utils/package-manager.js';
+import { readFigmaConfig } from '../utils/payload-config-ast.js';
+import { findPayloadConfig } from '../utils/payload-config-finder.js';
 import { isInProjectDirectory } from '../utils/project.js';
 import { uploadLambdaZip, uploadStaticAssets } from '../utils/s3-upload.js';
 import { loginCommand } from './login.js';
@@ -47,11 +51,6 @@ import { loginCommand } from './login.js';
  */ export async function deployCommand(options) {
     const projectPath = process.cwd();
     const spinner = p.spinner();
-    if (!options.id) {
-        p.log.error(pc.red('✗ Tenant ID is required. Use --id <tenant_id> to specify.'));
-        process.exit(1);
-    }
-    const tenantId = options.id;
     try {
         // ===== PRE-FLIGHT CHECKS =====
         // Check if in project directory
@@ -60,8 +59,27 @@ import { loginCommand } from './login.js';
             p.note('Create a project or connect an existing one to Figma: npx @payloadcms/figma init', 'Tip');
             process.exit(1);
         }
+        // Find and read payload config
+        const configPath = await findPayloadConfig(projectPath);
+        if (!configPath) {
+            p.log.error(pc.red('✗ payload.config.ts not found'));
+            p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip');
+            process.exit(1);
+        }
+        // Parse config with ts-morph
+        const project = new Project({
+            skipAddingFilesFromTsConfig: true
+        });
+        const sourceFile = project.addSourceFileAtPath(configPath);
+        // Read figma configuration from buildConfig
+        const config = readFigmaConfig(sourceFile);
+        if (!config || !config.tenantId) {
+            p.log.error(pc.red('✗ No figma configuration found in payload.config.ts'));
+            p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip');
+            process.exit(1);
+        }
         // Check authentication
-        const tokenStore = getTokenStore();
+        const tokenStore = new TokenStore();
         let accessToken = await getValidAccessToken(tokenStore);
         if (!accessToken) {
             p.log.message('Please log in to continue');
@@ -72,6 +90,13 @@ import { loginCommand } from './login.js';
                 process.exit(1);
             }
         }
+        // Get project token
+        try {
+            await getValidProjectToken(tokenStore, config.tenantId);
+        } catch (error) {
+            p.log.error(pc.yellow('⚠ Project token invalid'));
+            throw error;
+        }
         // ===== BUILD VALIDATION =====
         spinner.start('Checking for build...');
         let buildInfo = await detectBuild(projectPath);
@@ -201,7 +226,7 @@ import { loginCommand } from './login.js';
         let codeUploadUrl;
         let staticAssetUploadUrls;
         try {
-            const createResponse = await createDeployment(accessToken, tenantId, {
+            const createResponse = await createDeployment(accessToken, config.tenantId, {
                 staticAssets
             });
             deploymentId = createResponse.deploymentId;
@@ -242,7 +267,7 @@ import { loginCommand } from './login.js';
         // Step 4: Perform deployment
         spinner.start('Performing deployment...');
         try {
-            await performDeployment(accessToken, tenantId, {
+            await performDeployment(accessToken, config.tenantId, {
                 deploymentId
             });
             spinner.stop(pc.green('✓ Deployment initiated'));
@@ -255,8 +280,16 @@ import { loginCommand } from './login.js';
         // API endpoint: GET /v1/tenant/{tenant_id}/deploy/{deployment_id}/status
         // Success output
         p.log.message('This usually takes 2-3 minutes to complete.');
-    // TODO: Get tenant details for URL using getTenantDetails
-    // TODO: Display next steps with url to manage their CMS ie. https://staging.figma.com/files/1234/cms/manager/12345678
+        // Get tenant details for URL
+        try {
+            const tenant = await getTenantDetails(accessToken, config.tenantId);
+            if (tenant.domain) {
+                p.log.message(`View: ${pc.cyan(`https://${tenant.domain}/`)}`);
+            }
+        } catch  {
+        // Non-critical - just skip URL display
+        }
+        p.note(`Manage your deployment at:\n${pc.cyan(`https://cms.figma.com/manage/tenants/${config.tenantId}`)}`, 'Next Steps');
     } catch (error) {
         spinner.stop(pc.red('✗ Failed'));
         const message = error instanceof Error ? error.message : 'Unknown error';

package/dist/commands/deploy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/commands/deploy.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport { spawn } from 'child_process'\nimport path from 'path'\nimport pc from 'picocolors'\n\nimport { createDeployment, performDeployment } from '../api/control-plane.js'\nimport { getValidAccessToken } from '../auth/oauth-flow.js'\nimport { getTokenStore } from '../auth/token-store.js'\nimport { collectStaticAssets, createLambdaZip, getFileSize } from '../utils/asset-collection.js'\nimport { detectBuild, getBuildCommand } from '../utils/build-detection.js'\nimport * as log from '../utils/log.js'\nimport { getPackageManager } from '../utils/package-manager.js'\nimport { isInProjectDirectory } from '../utils/project.js'\nimport { uploadLambdaZip, uploadStaticAssets } from '../utils/s3-upload.js'\nimport { loginCommand } from './login.js'\n\n/**\n * Options for deploy command\n */\nexport interface DeployCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n  /** Tenant ID */\n  id?: string\n  /** Skip confirmation prompts */\n  yes?: boolean\n}\n\n/**\n * Format bytes to human-readable string\n */\nfunction formatBytes(bytes: number): string {\n  if (bytes === 0) {\n    return '0 B'\n  }\n  const k = 1024\n  const sizes = ['B', 'KB', 'MB', 'GB']\n  const i = Math.floor(Math.log(bytes) / Math.log(k))\n  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(2))} ${sizes[i]}`\n}\n\n/**\n * Format date to human-readable string in local time\n */\nfunction formatDate(date: Date): string {\n  return date.toLocaleString('en-US', {\n    day: 'numeric',\n    hour: 'numeric',\n    minute: 'numeric',\n    month: 'long',\n    timeZoneName: 'short',\n    year: 'numeric',\n  })\n}\n\n/**\n * Execute the deploy command\n *\n * @param options - Command options\n */\nexport async function deployCommand(options: DeployCommandOptions): Promise<void> {\n  const projectPath = process.cwd()\n  const spinner = p.spinner()\n\n  if (!options.id) {\n    p.log.error(pc.red('✗ Tenant ID is required. Use --id <tenant_id> to specify.'))\n    process.exit(1)\n  }\n\n  const tenantId = options.id\n\n  try {\n    // ===== PRE-FLIGHT CHECKS =====\n\n    // Check if in project directory\n    if (!(await isInProjectDirectory(projectPath))) {\n      p.log.error(pc.red(\"✗ 'deploy' command is not available outside of a Payload project.\"))\n      p.note(\n        'Create a project or connect an existing one to Figma: npx @payloadcms/figma init',\n        'Tip',\n      )\n      process.exit(1)\n    }\n\n    // Check authentication\n    const tokenStore = getTokenStore()\n\n    let accessToken = await getValidAccessToken(tokenStore)\n    if (!accessToken) {\n      p.log.message('Please log in to continue')\n      await loginCommand()\n      accessToken = await getValidAccessToken(tokenStore)\n      if (!accessToken) {\n        p.log.error(pc.red('✗ Authentication failed'))\n        process.exit(1)\n      }\n    }\n\n    // ===== BUILD VALIDATION =====\n\n    spinner.start('Checking for build...')\n    let buildInfo = await detectBuild(projectPath)\n\n    if (!buildInfo) {\n      spinner.stop(pc.yellow('⚠ No build found for this project.'))\n\n      // Try to find build command\n      const buildCmd = await getBuildCommand(projectPath)\n\n      if (!buildCmd) {\n        p.log.error('No build script found in package.json')\n        p.note('Add a build script to package.json: \"build\": \"next build\"', 'Tip')\n        process.exit(1)\n      }\n\n      // Prompt to run build\n      if (!options.yes) {\n        const shouldBuild = await p.confirm({\n          initialValue: true,\n          message: `Build command found in package.json. Run it?`,\n        })\n\n        if (p.isCancel(shouldBuild) || !shouldBuild) {\n          p.log.message('Cancelling deployment...')\n          process.exit(0)\n        }\n      }\n\n      // Run build\n      const packageManager = await getPackageManager(projectPath)\n      const buildCommand = `${packageManager} run build`\n      spinner.stop(`Running ${buildCommand}...\\n`)\n\n      try {\n        // Stream build output to user with formatting\n        const buildProcess = spawn(packageManager, ['run', 'build'], {\n          cwd: projectPath,\n          stdio: ['ignore', 'pipe', 'pipe'],\n        })\n\n        // Indent and dim output\n        buildProcess.stdout?.on('data', (data) => {\n          const lines = data.toString().split('\\n')\n          lines.forEach((line: string) => {\n            if (line.trim()) {\n              // eslint-disable-next-line no-console\n              console.log(pc.dim(`      ${line}`)) // Standard output\n            }\n          })\n        })\n\n        buildProcess.stderr?.on('data', (data) => {\n          const lines = data.toString().split('\\n')\n          lines.forEach((line: string) => {\n            if (line.trim()) {\n              // eslint-disable-next-line no-console\n              console.log(pc.dim(`      ${line}`)) // Standard error\n            }\n          })\n        })\n\n        const exitCode = await new Promise<number>((resolve) => {\n          buildProcess.on('close', resolve)\n        })\n\n        if (exitCode !== 0) {\n          throw new Error(`Build process exited with code ${exitCode}`)\n        }\n\n        p.log.success(pc.green('✓ Build completed'))\n      } catch (error) {\n        p.log.error(pc.red('✗ Build failed'))\n        if (error instanceof Error && options.debug) {\n          log.error(`Build error: ${error.message}`)\n        }\n        process.exit(1)\n      }\n\n      // Re-check for build\n      buildInfo = await detectBuild(projectPath)\n      if (!buildInfo) {\n        p.log.error(pc.red('✗ Build completed but standalone build not found'))\n        p.note('Ensure next.config.js has output: \"standalone\"', 'Check Lambda Configuration')\n        process.exit(1)\n      }\n    } else {\n      spinner.stop(pc.green('✓ Build found'))\n      p.note(\n        [\n          `${pc.cyan('Build ID:')} ${buildInfo.buildId}`,\n          `${pc.cyan('Date:')} ${formatDate(buildInfo.timestamp)}`,\n        ].join('\\n'),\n        'Build Details',\n      )\n    }\n\n    // ===== DEPLOYMENT PREPARATION =====\n\n    // Create Lambda zip\n    spinner.start('Creating deployment package...')\n    try {\n      await createLambdaZip(projectPath)\n      spinner.stop(pc.green('✓ Deployment package created'))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to create deployment package'))\n      throw error\n    }\n\n    // Collect static assets\n    spinner.start('Collecting static assets...')\n    const staticAssets = await collectStaticAssets(projectPath)\n    const zipPath = path.join(projectPath, 'lambda.zip')\n    const zipSize = await getFileSize(zipPath)\n    spinner.stop(pc.green(`✓ ${staticAssets.length} static assets detected`))\n\n    log.debug(`Lambda zip size: ${formatBytes(zipSize)}`)\n    log.debug(`Static assets: ${staticAssets.length} files`)\n\n    // ===== DEPLOYMENT CONFIRMATION =====\n\n    if (!options.yes) {\n      p.note(\n        [\n          `${pc.cyan('Build ID:')} ${buildInfo.buildId}`,\n          `${pc.cyan('Date:')} ${formatDate(buildInfo.timestamp)}`,\n          `${pc.cyan('Code size:')} ${formatBytes(zipSize)}`,\n          `${pc.cyan('Static assets:')} ${staticAssets.length} files`,\n        ].join('\\n'),\n        'Details',\n      )\n\n      const shouldDeploy = await p.confirm({\n        initialValue: true,\n        message: 'Deploy this build to Figma?',\n      })\n\n      if (p.isCancel(shouldDeploy) || !shouldDeploy) {\n        p.log.message('Cancelling deployment...')\n        process.exit(0)\n      }\n    }\n\n    // ===== DEPLOYMENT EXECUTION =====\n\n    // Step 1: Create deployment\n    spinner.start('Creating deployment...')\n    let deploymentId: string\n    let codeUploadUrl: string\n    let staticAssetUploadUrls: Record<string, string>\n\n    try {\n      const createResponse = await createDeployment(accessToken, tenantId, {\n        staticAssets,\n      })\n\n      deploymentId = createResponse.deploymentId\n      codeUploadUrl = createResponse.codeUploadUrl\n      staticAssetUploadUrls = createResponse.staticAssetUploadUrls\n\n      log.debug(`Deployment ID: ${deploymentId}`)\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to create deployment'))\n      throw error\n    }\n\n    // Step 2: Upload code\n    spinner.message(`Uploading code (${formatBytes(zipSize)})...`)\n    try {\n      await uploadLambdaZip(zipPath, codeUploadUrl)\n      spinner.stop(pc.green(`✓ Code uploaded (${formatBytes(zipSize)})`))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to upload code'))\n      throw error\n    }\n\n    // Step 3: Upload static assets\n    if (staticAssets.length > 0) {\n      spinner.start('Uploading static assets...')\n\n      try {\n        const uploadResults = await uploadStaticAssets(\n          projectPath,\n          staticAssetUploadUrls,\n          (uploaded, total) => {\n            spinner.message(`Uploading static assets (${uploaded}/${total})...`)\n          },\n        )\n\n        if (uploadResults.assetsFailed > 0) {\n          spinner.stop(\n            pc.yellow(\n              `⚠ ${uploadResults.assetsUploaded}/${staticAssets.length} assets uploaded (${uploadResults.assetsFailed} failed)`,\n            ),\n          )\n          p.log.warning(\n            `${uploadResults.assetsFailed} assets failed to upload. Deployment may be incomplete.`,\n          )\n        } else {\n          spinner.stop(\n            pc.green(\n              `✓ Static assets uploaded (${uploadResults.assetsUploaded} files, ${formatBytes(uploadResults.totalBytesUploaded)})`,\n            ),\n          )\n        }\n      } catch (error) {\n        spinner.stop(pc.red('✗ Failed to upload assets'))\n        throw error\n      }\n    }\n\n    // Step 4: Perform deployment\n    spinner.start('Performing deployment...')\n    try {\n      await performDeployment(accessToken, tenantId, {\n        deploymentId,\n      })\n      spinner.stop(pc.green('✓ Deployment initiated'))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to perform deployment'))\n      throw error\n    }\n\n    // TODO: Add deployment progress tracking\n    // Future: Poll deployment status and show progress\n    // API endpoint: GET /v1/tenant/{tenant_id}/deploy/{deployment_id}/status\n\n    // Success output\n    p.log.message('This usually takes 2-3 minutes to complete.')\n\n    // TODO: Get tenant details for URL using getTenantDetails\n    // TODO: Display next steps with url to manage their CMS ie. https://staging.figma.com/files/1234/cms/manager/12345678\n  } catch (error) {\n    spinner.stop(pc.red('✗ Failed'))\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    p.log.error(pc.red(`✗ ${message}`))\n    if (options.debug && error instanceof Error && error.stack) {\n      log.error(`Stack trace: ${error.stack}`)\n    }\n    process.exit(1)\n  }\n}\n"],"names":["p","spawn","path","pc","createDeployment","performDeployment","getValidAccessToken","getTokenStore","collectStaticAssets","createLambdaZip","getFileSize","detectBuild","getBuildCommand","log","getPackageManager","isInProjectDirectory","uploadLambdaZip","uploadStaticAssets","loginCommand","formatBytes","bytes","k","sizes","i","Math","floor","parseFloat","pow","toFixed","formatDate","date","toLocaleString","day","hour","minute","month","timeZoneName","year","deployCommand","options","projectPath","process","cwd","spinner","id","error","red","exit","tenantId","note","tokenStore","accessToken","message","start","buildInfo","stop","yellow","buildCmd","yes","shouldBuild","confirm","initialValue","isCancel","packageManager","buildCommand","buildProcess","stdio","stdout","on","data","lines","toString","split","forEach","line","trim","console","dim","stderr","exitCode","Promise","resolve","Error","success","green","debug","cyan","buildId","timestamp","join","staticAssets","zipPath","zipSize","length","shouldDeploy","deploymentId","codeUploadUrl","staticAssetUploadUrls","createResponse","uploadResults","uploaded","total","assetsFailed","assetsUploaded","warning","totalBytesUploaded","stack"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,SAASC,KAAK,QAAQ,gBAAe;AACrC,OAAOC,UAAU,OAAM;AACvB,OAAOC,QAAQ,aAAY;AAE3B,SAASC,gBAAgB,EAAEC,iBAAiB,QAAQ,0BAAyB;AAC7E,SAASC,mBAAmB,QAAQ,wBAAuB;AAC3D,SAASC,aAAa,QAAQ,yBAAwB;AACtD,SAASC,mBAAmB,EAAEC,eAAe,EAAEC,WAAW,QAAQ,+BAA8B;AAChG,SAASC,WAAW,EAAEC,eAAe,QAAQ,8BAA6B;AAC1E,YAAYC,SAAS,kBAAiB;AACtC,SAASC,iBAAiB,QAAQ,8BAA6B;AAC/D,SAASC,oBAAoB,QAAQ,sBAAqB;AAC1D,SAASC,eAAe,EAAEC,kBAAkB,QAAQ,wBAAuB;AAC3E,SAASC,YAAY,QAAQ,aAAY;AAczC;;CAEC,GACD,SAASC,YAAYC,KAAa;IAChC,IAAIA,UAAU,GAAG;QACf,OAAO;IACT;IACA,MAAMC,IAAI;IACV,MAAMC,QAAQ;QAAC;QAAK;QAAM;QAAM;KAAK;IACrC,MAAMC,IAAIC,KAAKC,KAAK,CAACD,KAAKX,GAAG,CAACO,SAASI,KAAKX,GAAG,CAACQ;IAChD,OAAO,GAAGK,WAAW,AAACN,CAAAA,QAAQI,KAAKG,GAAG,CAACN,GAAGE,EAAC,EAAGK,OAAO,CAAC,IAAI,CAAC,EAAEN,KAAK,CAACC,EAAE,EAAE;AACzE;AAEA;;CAEC,GACD,SAASM,WAAWC,IAAU;IAC5B,OAAOA,KAAKC,cAAc,CAAC,SAAS;QAClCC,KAAK;QACLC,MAAM;QACNC,QAAQ;QACRC,OAAO;QACPC,cAAc;QACdC,MAAM;IACR;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,cAAcC,OAA6B;IAC/D,MAAMC,cAAcC,QAAQC,GAAG;IAC/B,MAAMC,UAAU3C,EAAE2C,OAAO;IAEzB,IAAI,CAACJ,QAAQK,EAAE,EAAE;QACf5C,EAAEa,GAAG,CAACgC,KAAK,CAAC1C,GAAG2C,GAAG,CAAC;QACnBL,QAAQM,IAAI,CAAC;IACf;IAEA,MAAMC,WAAWT,QAAQK,EAAE;IAE3B,IAAI;QACF,gCAAgC;QAEhC,gCAAgC;QAChC,IAAI,CAAE,MAAM7B,qBAAqByB,cAAe;YAC9CxC,EAAEa,GAAG,CAACgC,KAAK,CAAC1C,GAAG2C,GAAG,CAAC;YACnB9C,EAAEiD,IAAI,CACJ,oFACA;YAEFR,QAAQM,IAAI,CAAC;QACf;QAEA,uBAAuB;QACvB,MAAMG,aAAa3C;QAEnB,IAAI4C,cAAc,MAAM7C,oBAAoB4C;QAC5C,IAAI,CAACC,aAAa;YAChBnD,EAAEa,GAAG,CAACuC,OAAO,CAAC;YACd,MAAMlC;YACNiC,cAAc,MAAM7C,oBAAoB4C;YACxC,IAAI,CAACC,aAAa;gBAChBnD,EAAEa,GAAG,CAACgC,KAAK,CAAC1C,GAAG2C,GAAG,CAAC;gBACnBL,QAAQM,IAAI,CAAC;YACf;QACF;QAEA,+BAA+B;QAE/BJ,QAAQU,KAAK,CAAC;QACd,IAAIC,YAAY,MAAM3C,YAAY6B;QAElC,IAAI,CAACc,WAAW;YACdX,QAAQY,IAAI,CAACpD,GAAGqD,MAAM,CAAC;YAEvB,4BAA4B;YAC5B,MAAMC,WAAW,MAAM7C,gBAAgB4B;YAEvC,IAAI,CAACiB,UAAU;gBACbzD,EAAEa,GAAG,CAACgC,KAAK,CAAC;gBACZ7C,EAAEiD,IAAI,CAAC,6DAA6D;gBACpER,QAAQM,IAAI,CAAC;YACf;YAEA,sBAAsB;YACtB,IAAI,CAACR,QAAQmB,GAAG,EAAE;gBAChB,MAAMC,cAAc,MAAM3D,EAAE4D,OAAO,CAAC;oBAClCC,cAAc;oBACdT,SAAS,CAAC,4CAA4C,CAAC;gBACzD;gBAEA,IAAIpD,EAAE8D,QAAQ,CAACH,gBAAgB,CAACA,aAAa;oBAC3C3D,EAAEa,GAAG,CAACuC,OAAO,CAAC;oBACdX,QAAQM,IAAI,CAAC;gBACf;YACF;YAEA,YAAY;YACZ,MAAMgB,iBAAiB,MAAMjD,kBAAkB0B;YAC/C,MAAMwB,eAAe,GAAGD,eAAe,UAAU,CAAC;YAClDpB,QAAQY,IAAI,CAAC,CAAC,QAAQ,EAAES,aAAa,KAAK,CAAC;YAE3C,IAAI;gBACF,8CAA8C;gBAC9C,MAAMC,eAAehE,MAAM8D,gBAAgB;oBAAC;oBAAO;iBAAQ,EAAE;oBAC3DrB,KAAKF;oBACL0B,OAAO;wBAAC;wBAAU;wBAAQ;qBAAO;gBACnC;gBAEA,wBAAwB;gBACxBD,aAAaE,MAAM,EAAEC,GAAG,QAAQ,CAACC;oBAC/B,MAAMC,QAAQD,KAAKE,QAAQ,GAAGC,KAAK,CAAC;oBACpCF,MAAMG,OAAO,CAAC,CAACC;wBACb,IAAIA,KAAKC,IAAI,IAAI;4BACf,sCAAsC;4BACtCC,QAAQ/D,GAAG,CAACV,GAAG0E,GAAG,CAAC,CAAC,MAAM,EAAEH,MAAM,IAAG,kBAAkB;wBACzD;oBACF;gBACF;gBAEAT,aAAaa,MAAM,EAAEV,GAAG,QAAQ,CAACC;oBAC/B,MAAMC,QAAQD,KAAKE,QAAQ,GAAGC,KAAK,CAAC;oBACpCF,MAAMG,OAAO,CAAC,CAACC;wBACb,IAAIA,KAAKC,IAAI,IAAI;4BACf,sCAAsC;4BACtCC,QAAQ/D,GAAG,CAACV,GAAG0E,GAAG,CAAC,CAAC,MAAM,EAAEH,MAAM,IAAG,iBAAiB;wBACxD;oBACF;gBACF;gBAEA,MAAMK,WAAW,MAAM,IAAIC,QAAgB,CAACC;oBAC1ChB,aAAaG,EAAE,CAAC,SAASa;gBAC3B;gBAEA,IAAIF,aAAa,GAAG;oBAClB,MAAM,IAAIG,MAAM,CAAC,+BAA+B,EAAEH,UAAU;gBAC9D;gBAEA/E,EAAEa,GAAG,CAACsE,OAAO,CAAChF,GAAGiF,KAAK,CAAC;YACzB,EAAE,OAAOvC,OAAO;gBACd7C,EAAEa,GAAG,CAACgC,KAAK,CAAC1C,GAAG2C,GAAG,CAAC;gBACnB,IAAID,iBAAiBqC,SAAS3C,QAAQ8C,KAAK,EAAE;oBAC3CxE,IAAIgC,KAAK,CAAC,CAAC,aAAa,EAAEA,MAAMO,OAAO,EAAE;gBAC3C;gBACAX,QAAQM,IAAI,CAAC;YACf;YAEA,qBAAqB;YACrBO,YAAY,MAAM3C,YAAY6B;YAC9B,IAAI,CAACc,WAAW;gBACdtD,EAAEa,GAAG,CAACgC,KAAK,CAAC1C,GAAG2C,GAAG,CAAC;gBACnB9C,EAAEiD,IAAI,CAAC,kDAAkD;gBACzDR,QAAQM,IAAI,CAAC;YACf;QACF,OAAO;YACLJ,QAAQY,IAAI,CAACpD,GAAGiF,KAAK,CAAC;YACtBpF,EAAEiD,IAAI,CACJ;gBACE,GAAG9C,GAAGmF,IAAI,CAAC,aAAa,CAAC,EAAEhC,UAAUiC,OAAO,EAAE;gBAC9C,GAAGpF,GAAGmF,IAAI,CAAC,SAAS,CAAC,EAAEzD,WAAWyB,UAAUkC,SAAS,GAAG;aACzD,CAACC,IAAI,CAAC,OACP;QAEJ;QAEA,qCAAqC;QAErC,oBAAoB;QACpB9C,QAAQU,KAAK,CAAC;QACd,IAAI;YACF,MAAM5C,gBAAgB+B;YACtBG,QAAQY,IAAI,CAACpD,GAAGiF,KAAK,CAAC;QACxB,EAAE,OAAOvC,OAAO;YACdF,QAAQY,IAAI,CAACpD,GAAG2C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,wBAAwB;QACxBF,QAAQU,KAAK,CAAC;QACd,MAAMqC,eAAe,MAAMlF,oBAAoBgC;QAC/C,MAAMmD,UAAUzF,KAAKuF,IAAI,CAACjD,aAAa;QACvC,MAAMoD,UAAU,MAAMlF,YAAYiF;QAClChD,QAAQY,IAAI,CAACpD,GAAGiF,KAAK,CAAC,CAAC,EAAE,EAAEM,aAAaG,MAAM,CAAC,uBAAuB,CAAC;QAEvEhF,IAAIwE,KAAK,CAAC,CAAC,iBAAiB,EAAElE,YAAYyE,UAAU;QACpD/E,IAAIwE,KAAK,CAAC,CAAC,eAAe,EAAEK,aAAaG,MAAM,CAAC,MAAM,CAAC;QAEvD,sCAAsC;QAEtC,IAAI,CAACtD,QAAQmB,GAAG,EAAE;YAChB1D,EAAEiD,IAAI,CACJ;gBACE,GAAG9C,GAAGmF,IAAI,CAAC,aAAa,CAAC,EAAEhC,UAAUiC,OAAO,EAAE;gBAC9C,GAAGpF,GAAGmF,IAAI,CAAC,SAAS,CAAC,EAAEzD,WAAWyB,UAAUkC,SAAS,GAAG;gBACxD,GAAGrF,GAAGmF,IAAI,CAAC,cAAc,CAAC,EAAEnE,YAAYyE,UAAU;gBAClD,GAAGzF,GAAGmF,IAAI,CAAC,kBAAkB,CAAC,EAAEI,aAAaG,MAAM,CAAC,MAAM,CAAC;aAC5D,CAACJ,IAAI,CAAC,OACP;YAGF,MAAMK,eAAe,MAAM9F,EAAE4D,OAAO,CAAC;gBACnCC,cAAc;gBACdT,SAAS;YACX;YAEA,IAAIpD,EAAE8D,QAAQ,CAACgC,iBAAiB,CAACA,cAAc;gBAC7C9F,EAAEa,GAAG,CAACuC,OAAO,CAAC;gBACdX,QAAQM,IAAI,CAAC;YACf;QACF;QAEA,mCAAmC;QAEnC,4BAA4B;QAC5BJ,QAAQU,KAAK,CAAC;QACd,IAAI0C;QACJ,IAAIC;QACJ,IAAIC;QAEJ,IAAI;YACF,MAAMC,iBAAiB,MAAM9F,iBAAiB+C,aAAaH,UAAU;gBACnE0C;YACF;YAEAK,eAAeG,eAAeH,YAAY;YAC1CC,gBAAgBE,eAAeF,aAAa;YAC5CC,wBAAwBC,eAAeD,qBAAqB;YAE5DpF,IAAIwE,KAAK,CAAC,CAAC,eAAe,EAAEU,cAAc;QAC5C,EAAE,OAAOlD,OAAO;YACdF,QAAQY,IAAI,CAACpD,GAAG2C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,sBAAsB;QACtBF,QAAQS,OAAO,CAAC,CAAC,gBAAgB,EAAEjC,YAAYyE,SAAS,IAAI,CAAC;QAC7D,IAAI;YACF,MAAM5E,gBAAgB2E,SAASK;YAC/BrD,QAAQY,IAAI,CAACpD,GAAGiF,KAAK,CAAC,CAAC,iBAAiB,EAAEjE,YAAYyE,SAAS,CAAC,CAAC;QACnE,EAAE,OAAO/C,OAAO;YACdF,QAAQY,IAAI,CAACpD,GAAG2C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,+BAA+B;QAC/B,IAAI6C,aAAaG,MAAM,GAAG,GAAG;YAC3BlD,QAAQU,KAAK,CAAC;YAEd,IAAI;gBACF,MAAM8C,gBAAgB,MAAMlF,mBAC1BuB,aACAyD,uBACA,CAACG,UAAUC;oBACT1D,QAAQS,OAAO,CAAC,CAAC,yBAAyB,EAAEgD,SAAS,CAAC,EAAEC,MAAM,IAAI,CAAC;gBACrE;gBAGF,IAAIF,cAAcG,YAAY,GAAG,GAAG;oBAClC3D,QAAQY,IAAI,CACVpD,GAAGqD,MAAM,CACP,CAAC,EAAE,EAAE2C,cAAcI,cAAc,CAAC,CAAC,EAAEb,aAAaG,MAAM,CAAC,kBAAkB,EAAEM,cAAcG,YAAY,CAAC,QAAQ,CAAC;oBAGrHtG,EAAEa,GAAG,CAAC2F,OAAO,CACX,GAAGL,cAAcG,YAAY,CAAC,uDAAuD,CAAC;gBAE1F,OAAO;oBACL3D,QAAQY,IAAI,CACVpD,GAAGiF,KAAK,CACN,CAAC,0BAA0B,EAAEe,cAAcI,cAAc,CAAC,QAAQ,EAAEpF,YAAYgF,cAAcM,kBAAkB,EAAE,CAAC,CAAC;gBAG1H;YACF,EAAE,OAAO5D,OAAO;gBACdF,QAAQY,IAAI,CAACpD,GAAG2C,GAAG,CAAC;gBACpB,MAAMD;YACR;QACF;QAEA,6BAA6B;QAC7BF,QAAQU,KAAK,CAAC;QACd,IAAI;YACF,MAAMhD,kBAAkB8C,aAAaH,UAAU;gBAC7C+C;YACF;YACApD,QAAQY,IAAI,CAACpD,GAAGiF,KAAK,CAAC;QACxB,EAAE,OAAOvC,OAAO;YACdF,QAAQY,IAAI,CAACpD,GAAG2C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,yCAAyC;QACzC,mDAAmD;QACnD,yEAAyE;QAEzE,iBAAiB;QACjB7C,EAAEa,GAAG,CAACuC,OAAO,CAAC;IAEd,0DAA0D;IAC1D,sHAAsH;IACxH,EAAE,OAAOP,OAAO;QACdF,QAAQY,IAAI,CAACpD,GAAG2C,GAAG,CAAC;QACpB,MAAMM,UAAUP,iBAAiBqC,QAAQrC,MAAMO,OAAO,GAAG;QACzDpD,EAAEa,GAAG,CAACgC,KAAK,CAAC1C,GAAG2C,GAAG,CAAC,CAAC,EAAE,EAAEM,SAAS;QACjC,IAAIb,QAAQ8C,KAAK,IAAIxC,iBAAiBqC,SAASrC,MAAM6D,KAAK,EAAE;YAC1D7F,IAAIgC,KAAK,CAAC,CAAC,aAAa,EAAEA,MAAM6D,KAAK,EAAE;QACzC;QACAjE,QAAQM,IAAI,CAAC;IACf;AACF"}
+{"version":3,"sources":["../../src/commands/deploy.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport { spawn } from 'child_process'\nimport path from 'path'\nimport pc from 'picocolors'\nimport { Project } from 'ts-morph'\n\nimport { createDeployment, getTenantDetails, performDeployment } from '../api/control-plane.js'\nimport { getValidAccessToken } from '../auth/oauth-flow.js'\nimport { getValidProjectToken } from '../auth/project-token.js'\nimport { TokenStore } from '../auth/token-store.js'\nimport { collectStaticAssets, createLambdaZip, getFileSize } from '../utils/asset-collection.js'\nimport { detectBuild, getBuildCommand } from '../utils/build-detection.js'\nimport * as log from '../utils/log.js'\nimport { getPackageManager } from '../utils/package-manager.js'\nimport { readFigmaConfig } from '../utils/payload-config-ast.js'\nimport { findPayloadConfig } from '../utils/payload-config-finder.js'\nimport { isInProjectDirectory } from '../utils/project.js'\nimport { uploadLambdaZip, uploadStaticAssets } from '../utils/s3-upload.js'\nimport { loginCommand } from './login.js'\n\n/**\n * Options for deploy command\n */\nexport interface DeployCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n  /** Skip confirmation prompts */\n  yes?: boolean\n}\n\n/**\n * Format bytes to human-readable string\n */\nfunction formatBytes(bytes: number): string {\n  if (bytes === 0) {\n    return '0 B'\n  }\n  const k = 1024\n  const sizes = ['B', 'KB', 'MB', 'GB']\n  const i = Math.floor(Math.log(bytes) / Math.log(k))\n  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(2))} ${sizes[i]}`\n}\n\n/**\n * Format date to human-readable string in local time\n */\nfunction formatDate(date: Date): string {\n  return date.toLocaleString('en-US', {\n    day: 'numeric',\n    hour: 'numeric',\n    minute: 'numeric',\n    month: 'long',\n    timeZoneName: 'short',\n    year: 'numeric',\n  })\n}\n\n/**\n * Execute the deploy command\n *\n * @param options - Command options\n */\nexport async function deployCommand(options: DeployCommandOptions): Promise<void> {\n  const projectPath = process.cwd()\n  const spinner = p.spinner()\n\n  try {\n    // ===== PRE-FLIGHT CHECKS =====\n\n    // Check if in project directory\n    if (!(await isInProjectDirectory(projectPath))) {\n      p.log.error(pc.red(\"✗ 'deploy' command is not available outside of a Payload project.\"))\n      p.note(\n        'Create a project or connect an existing one to Figma: npx @payloadcms/figma init',\n        'Tip',\n      )\n      process.exit(1)\n    }\n\n    // Find and read payload config\n    const configPath = await findPayloadConfig(projectPath)\n    if (!configPath) {\n      p.log.error(pc.red('✗ payload.config.ts not found'))\n      p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip')\n      process.exit(1)\n    }\n\n    // Parse config with ts-morph\n    const project = new Project({ skipAddingFilesFromTsConfig: true })\n    const sourceFile = project.addSourceFileAtPath(configPath)\n\n    // Read figma configuration from buildConfig\n    const config = readFigmaConfig(sourceFile)\n    if (!config || !config.tenantId) {\n      p.log.error(pc.red('✗ No figma configuration found in payload.config.ts'))\n      p.note('Run npx @payloadcms/figma init to configure your project.', 'Tip')\n      process.exit(1)\n    }\n\n    // Check authentication\n    const tokenStore = new TokenStore()\n\n    let accessToken = await getValidAccessToken(tokenStore)\n    if (!accessToken) {\n      p.log.message('Please log in to continue')\n      await loginCommand()\n      accessToken = await getValidAccessToken(tokenStore)\n      if (!accessToken) {\n        p.log.error(pc.red('✗ Authentication failed'))\n        process.exit(1)\n      }\n    }\n\n    // Get project token\n    try {\n      await getValidProjectToken(tokenStore, config.tenantId)\n    } catch (error) {\n      p.log.error(pc.yellow('⚠ Project token invalid'))\n      throw error\n    }\n\n    // ===== BUILD VALIDATION =====\n\n    spinner.start('Checking for build...')\n    let buildInfo = await detectBuild(projectPath)\n\n    if (!buildInfo) {\n      spinner.stop(pc.yellow('⚠ No build found for this project.'))\n\n      // Try to find build command\n      const buildCmd = await getBuildCommand(projectPath)\n\n      if (!buildCmd) {\n        p.log.error('No build script found in package.json')\n        p.note('Add a build script to package.json: \"build\": \"next build\"', 'Tip')\n        process.exit(1)\n      }\n\n      // Prompt to run build\n      if (!options.yes) {\n        const shouldBuild = await p.confirm({\n          initialValue: true,\n          message: `Build command found in package.json. Run it?`,\n        })\n\n        if (p.isCancel(shouldBuild) || !shouldBuild) {\n          p.log.message('Cancelling deployment...')\n          process.exit(0)\n        }\n      }\n\n      // Run build\n      const packageManager = await getPackageManager(projectPath)\n      const buildCommand = `${packageManager} run build`\n      spinner.stop(`Running ${buildCommand}...\\n`)\n\n      try {\n        // Stream build output to user with formatting\n        const buildProcess = spawn(packageManager, ['run', 'build'], {\n          cwd: projectPath,\n          stdio: ['ignore', 'pipe', 'pipe'],\n        })\n\n        // Indent and dim output\n        buildProcess.stdout?.on('data', (data) => {\n          const lines = data.toString().split('\\n')\n          lines.forEach((line: string) => {\n            if (line.trim()) {\n              // eslint-disable-next-line no-console\n              console.log(pc.dim(`      ${line}`)) // Standard output\n            }\n          })\n        })\n\n        buildProcess.stderr?.on('data', (data) => {\n          const lines = data.toString().split('\\n')\n          lines.forEach((line: string) => {\n            if (line.trim()) {\n              // eslint-disable-next-line no-console\n              console.log(pc.dim(`      ${line}`)) // Standard error\n            }\n          })\n        })\n\n        const exitCode = await new Promise<number>((resolve) => {\n          buildProcess.on('close', resolve)\n        })\n\n        if (exitCode !== 0) {\n          throw new Error(`Build process exited with code ${exitCode}`)\n        }\n\n        p.log.success(pc.green('✓ Build completed'))\n      } catch (error) {\n        p.log.error(pc.red('✗ Build failed'))\n        if (error instanceof Error && options.debug) {\n          log.error(`Build error: ${error.message}`)\n        }\n        process.exit(1)\n      }\n\n      // Re-check for build\n      buildInfo = await detectBuild(projectPath)\n      if (!buildInfo) {\n        p.log.error(pc.red('✗ Build completed but standalone build not found'))\n        p.note('Ensure next.config.js has output: \"standalone\"', 'Check Lambda Configuration')\n        process.exit(1)\n      }\n    } else {\n      spinner.stop(pc.green('✓ Build found'))\n      p.note(\n        [\n          `${pc.cyan('Build ID:')} ${buildInfo.buildId}`,\n          `${pc.cyan('Date:')} ${formatDate(buildInfo.timestamp)}`,\n        ].join('\\n'),\n        'Build Details',\n      )\n    }\n\n    // ===== DEPLOYMENT PREPARATION =====\n\n    // Create Lambda zip\n    spinner.start('Creating deployment package...')\n    try {\n      await createLambdaZip(projectPath)\n      spinner.stop(pc.green('✓ Deployment package created'))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to create deployment package'))\n      throw error\n    }\n\n    // Collect static assets\n    spinner.start('Collecting static assets...')\n    const staticAssets = await collectStaticAssets(projectPath)\n    const zipPath = path.join(projectPath, 'lambda.zip')\n    const zipSize = await getFileSize(zipPath)\n    spinner.stop(pc.green(`✓ ${staticAssets.length} static assets detected`))\n\n    log.debug(`Lambda zip size: ${formatBytes(zipSize)}`)\n    log.debug(`Static assets: ${staticAssets.length} files`)\n\n    // ===== DEPLOYMENT CONFIRMATION =====\n\n    if (!options.yes) {\n      p.note(\n        [\n          `${pc.cyan('Build ID:')} ${buildInfo.buildId}`,\n          `${pc.cyan('Date:')} ${formatDate(buildInfo.timestamp)}`,\n          `${pc.cyan('Code size:')} ${formatBytes(zipSize)}`,\n          `${pc.cyan('Static assets:')} ${staticAssets.length} files`,\n        ].join('\\n'),\n        'Details',\n      )\n\n      const shouldDeploy = await p.confirm({\n        initialValue: true,\n        message: 'Deploy this build to Figma?',\n      })\n\n      if (p.isCancel(shouldDeploy) || !shouldDeploy) {\n        p.log.message('Cancelling deployment...')\n        process.exit(0)\n      }\n    }\n\n    // ===== DEPLOYMENT EXECUTION =====\n\n    // Step 1: Create deployment\n    spinner.start('Creating deployment...')\n    let deploymentId: string\n    let codeUploadUrl: string\n    let staticAssetUploadUrls: Record<string, string>\n\n    try {\n      const createResponse = await createDeployment(accessToken, config.tenantId, {\n        staticAssets,\n      })\n\n      deploymentId = createResponse.deploymentId\n      codeUploadUrl = createResponse.codeUploadUrl\n      staticAssetUploadUrls = createResponse.staticAssetUploadUrls\n\n      log.debug(`Deployment ID: ${deploymentId}`)\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to create deployment'))\n      throw error\n    }\n\n    // Step 2: Upload code\n    spinner.message(`Uploading code (${formatBytes(zipSize)})...`)\n    try {\n      await uploadLambdaZip(zipPath, codeUploadUrl)\n      spinner.stop(pc.green(`✓ Code uploaded (${formatBytes(zipSize)})`))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to upload code'))\n      throw error\n    }\n\n    // Step 3: Upload static assets\n    if (staticAssets.length > 0) {\n      spinner.start('Uploading static assets...')\n\n      try {\n        const uploadResults = await uploadStaticAssets(\n          projectPath,\n          staticAssetUploadUrls,\n          (uploaded, total) => {\n            spinner.message(`Uploading static assets (${uploaded}/${total})...`)\n          },\n        )\n\n        if (uploadResults.assetsFailed > 0) {\n          spinner.stop(\n            pc.yellow(\n              `⚠ ${uploadResults.assetsUploaded}/${staticAssets.length} assets uploaded (${uploadResults.assetsFailed} failed)`,\n            ),\n          )\n          p.log.warning(\n            `${uploadResults.assetsFailed} assets failed to upload. Deployment may be incomplete.`,\n          )\n        } else {\n          spinner.stop(\n            pc.green(\n              `✓ Static assets uploaded (${uploadResults.assetsUploaded} files, ${formatBytes(uploadResults.totalBytesUploaded)})`,\n            ),\n          )\n        }\n      } catch (error) {\n        spinner.stop(pc.red('✗ Failed to upload assets'))\n        throw error\n      }\n    }\n\n    // Step 4: Perform deployment\n    spinner.start('Performing deployment...')\n    try {\n      await performDeployment(accessToken, config.tenantId, {\n        deploymentId,\n      })\n      spinner.stop(pc.green('✓ Deployment initiated'))\n    } catch (error) {\n      spinner.stop(pc.red('✗ Failed to perform deployment'))\n      throw error\n    }\n\n    // TODO: Add deployment progress tracking\n    // Future: Poll deployment status and show progress\n    // API endpoint: GET /v1/tenant/{tenant_id}/deploy/{deployment_id}/status\n\n    // Success output\n    p.log.message('This usually takes 2-3 minutes to complete.')\n\n    // Get tenant details for URL\n    try {\n      const tenant = await getTenantDetails(accessToken, config.tenantId)\n      if (tenant.domain) {\n        p.log.message(`View: ${pc.cyan(`https://${tenant.domain}/`)}`)\n      }\n    } catch {\n      // Non-critical - just skip URL display\n    }\n\n    p.note(\n      `Manage your deployment at:\\n${pc.cyan(`https://cms.figma.com/manage/tenants/${config.tenantId}`)}`,\n      'Next Steps',\n    )\n  } catch (error) {\n    spinner.stop(pc.red('✗ Failed'))\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    p.log.error(pc.red(`✗ ${message}`))\n    if (options.debug && error instanceof Error && error.stack) {\n      log.error(`Stack trace: ${error.stack}`)\n    }\n    process.exit(1)\n  }\n}\n"],"names":["p","spawn","path","pc","Project","createDeployment","getTenantDetails","performDeployment","getValidAccessToken","getValidProjectToken","TokenStore","collectStaticAssets","createLambdaZip","getFileSize","detectBuild","getBuildCommand","log","getPackageManager","readFigmaConfig","findPayloadConfig","isInProjectDirectory","uploadLambdaZip","uploadStaticAssets","loginCommand","formatBytes","bytes","k","sizes","i","Math","floor","parseFloat","pow","toFixed","formatDate","date","toLocaleString","day","hour","minute","month","timeZoneName","year","deployCommand","options","projectPath","process","cwd","spinner","error","red","note","exit","configPath","project","skipAddingFilesFromTsConfig","sourceFile","addSourceFileAtPath","config","tenantId","tokenStore","accessToken","message","yellow","start","buildInfo","stop","buildCmd","yes","shouldBuild","confirm","initialValue","isCancel","packageManager","buildCommand","buildProcess","stdio","stdout","on","data","lines","toString","split","forEach","line","trim","console","dim","stderr","exitCode","Promise","resolve","Error","success","green","debug","cyan","buildId","timestamp","join","staticAssets","zipPath","zipSize","length","shouldDeploy","deploymentId","codeUploadUrl","staticAssetUploadUrls","createResponse","uploadResults","uploaded","total","assetsFailed","assetsUploaded","warning","totalBytesUploaded","tenant","domain","stack"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,SAASC,KAAK,QAAQ,gBAAe;AACrC,OAAOC,UAAU,OAAM;AACvB,OAAOC,QAAQ,aAAY;AAC3B,SAASC,OAAO,QAAQ,WAAU;AAElC,SAASC,gBAAgB,EAAEC,gBAAgB,EAAEC,iBAAiB,QAAQ,0BAAyB;AAC/F,SAASC,mBAAmB,QAAQ,wBAAuB;AAC3D,SAASC,oBAAoB,QAAQ,2BAA0B;AAC/D,SAASC,UAAU,QAAQ,yBAAwB;AACnD,SAASC,mBAAmB,EAAEC,eAAe,EAAEC,WAAW,QAAQ,+BAA8B;AAChG,SAASC,WAAW,EAAEC,eAAe,QAAQ,8BAA6B;AAC1E,YAAYC,SAAS,kBAAiB;AACtC,SAASC,iBAAiB,QAAQ,8BAA6B;AAC/D,SAASC,eAAe,QAAQ,iCAAgC;AAChE,SAASC,iBAAiB,QAAQ,oCAAmC;AACrE,SAASC,oBAAoB,QAAQ,sBAAqB;AAC1D,SAASC,eAAe,EAAEC,kBAAkB,QAAQ,wBAAuB;AAC3E,SAASC,YAAY,QAAQ,aAAY;AAYzC;;CAEC,GACD,SAASC,YAAYC,KAAa;IAChC,IAAIA,UAAU,GAAG;QACf,OAAO;IACT;IACA,MAAMC,IAAI;IACV,MAAMC,QAAQ;QAAC;QAAK;QAAM;QAAM;KAAK;IACrC,MAAMC,IAAIC,KAAKC,KAAK,CAACD,KAAKb,GAAG,CAACS,SAASI,KAAKb,GAAG,CAACU;IAChD,OAAO,GAAGK,WAAW,AAACN,CAAAA,QAAQI,KAAKG,GAAG,CAACN,GAAGE,EAAC,EAAGK,OAAO,CAAC,IAAI,CAAC,EAAEN,KAAK,CAACC,EAAE,EAAE;AACzE;AAEA;;CAEC,GACD,SAASM,WAAWC,IAAU;IAC5B,OAAOA,KAAKC,cAAc,CAAC,SAAS;QAClCC,KAAK;QACLC,MAAM;QACNC,QAAQ;QACRC,OAAO;QACPC,cAAc;QACdC,MAAM;IACR;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,cAAcC,OAA6B;IAC/D,MAAMC,cAAcC,QAAQC,GAAG;IAC/B,MAAMC,UAAUhD,EAAEgD,OAAO;IAEzB,IAAI;QACF,gCAAgC;QAEhC,gCAAgC;QAChC,IAAI,CAAE,MAAM5B,qBAAqByB,cAAe;YAC9C7C,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;YACnBlD,EAAEmD,IAAI,CACJ,oFACA;YAEFL,QAAQM,IAAI,CAAC;QACf;QAEA,+BAA+B;QAC/B,MAAMC,aAAa,MAAMlC,kBAAkB0B;QAC3C,IAAI,CAACQ,YAAY;YACfrD,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;YACnBlD,EAAEmD,IAAI,CAAC,6DAA6D;YACpEL,QAAQM,IAAI,CAAC;QACf;QAEA,6BAA6B;QAC7B,MAAME,UAAU,IAAIlD,QAAQ;YAAEmD,6BAA6B;QAAK;QAChE,MAAMC,aAAaF,QAAQG,mBAAmB,CAACJ;QAE/C,4CAA4C;QAC5C,MAAMK,SAASxC,gBAAgBsC;QAC/B,IAAI,CAACE,UAAU,CAACA,OAAOC,QAAQ,EAAE;YAC/B3D,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;YACnBlD,EAAEmD,IAAI,CAAC,6DAA6D;YACpEL,QAAQM,IAAI,CAAC;QACf;QAEA,uBAAuB;QACvB,MAAMQ,aAAa,IAAIlD;QAEvB,IAAImD,cAAc,MAAMrD,oBAAoBoD;QAC5C,IAAI,CAACC,aAAa;YAChB7D,EAAEgB,GAAG,CAAC8C,OAAO,CAAC;YACd,MAAMvC;YACNsC,cAAc,MAAMrD,oBAAoBoD;YACxC,IAAI,CAACC,aAAa;gBAChB7D,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;gBACnBJ,QAAQM,IAAI,CAAC;YACf;QACF;QAEA,oBAAoB;QACpB,IAAI;YACF,MAAM3C,qBAAqBmD,YAAYF,OAAOC,QAAQ;QACxD,EAAE,OAAOV,OAAO;YACdjD,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG4D,MAAM,CAAC;YACtB,MAAMd;QACR;QAEA,+BAA+B;QAE/BD,QAAQgB,KAAK,CAAC;QACd,IAAIC,YAAY,MAAMnD,YAAY+B;QAElC,IAAI,CAACoB,WAAW;YACdjB,QAAQkB,IAAI,CAAC/D,GAAG4D,MAAM,CAAC;YAEvB,4BAA4B;YAC5B,MAAMI,WAAW,MAAMpD,gBAAgB8B;YAEvC,IAAI,CAACsB,UAAU;gBACbnE,EAAEgB,GAAG,CAACiC,KAAK,CAAC;gBACZjD,EAAEmD,IAAI,CAAC,6DAA6D;gBACpEL,QAAQM,IAAI,CAAC;YACf;YAEA,sBAAsB;YACtB,IAAI,CAACR,QAAQwB,GAAG,EAAE;gBAChB,MAAMC,cAAc,MAAMrE,EAAEsE,OAAO,CAAC;oBAClCC,cAAc;oBACdT,SAAS,CAAC,4CAA4C,CAAC;gBACzD;gBAEA,IAAI9D,EAAEwE,QAAQ,CAACH,gBAAgB,CAACA,aAAa;oBAC3CrE,EAAEgB,GAAG,CAAC8C,OAAO,CAAC;oBACdhB,QAAQM,IAAI,CAAC;gBACf;YACF;YAEA,YAAY;YACZ,MAAMqB,iBAAiB,MAAMxD,kBAAkB4B;YAC/C,MAAM6B,eAAe,GAAGD,eAAe,UAAU,CAAC;YAClDzB,QAAQkB,IAAI,CAAC,CAAC,QAAQ,EAAEQ,aAAa,KAAK,CAAC;YAE3C,IAAI;gBACF,8CAA8C;gBAC9C,MAAMC,eAAe1E,MAAMwE,gBAAgB;oBAAC;oBAAO;iBAAQ,EAAE;oBAC3D1B,KAAKF;oBACL+B,OAAO;wBAAC;wBAAU;wBAAQ;qBAAO;gBACnC;gBAEA,wBAAwB;gBACxBD,aAAaE,MAAM,EAAEC,GAAG,QAAQ,CAACC;oBAC/B,MAAMC,QAAQD,KAAKE,QAAQ,GAAGC,KAAK,CAAC;oBACpCF,MAAMG,OAAO,CAAC,CAACC;wBACb,IAAIA,KAAKC,IAAI,IAAI;4BACf,sCAAsC;4BACtCC,QAAQtE,GAAG,CAACb,GAAGoF,GAAG,CAAC,CAAC,MAAM,EAAEH,MAAM,IAAG,kBAAkB;wBACzD;oBACF;gBACF;gBAEAT,aAAaa,MAAM,EAAEV,GAAG,QAAQ,CAACC;oBAC/B,MAAMC,QAAQD,KAAKE,QAAQ,GAAGC,KAAK,CAAC;oBACpCF,MAAMG,OAAO,CAAC,CAACC;wBACb,IAAIA,KAAKC,IAAI,IAAI;4BACf,sCAAsC;4BACtCC,QAAQtE,GAAG,CAACb,GAAGoF,GAAG,CAAC,CAAC,MAAM,EAAEH,MAAM,IAAG,iBAAiB;wBACxD;oBACF;gBACF;gBAEA,MAAMK,WAAW,MAAM,IAAIC,QAAgB,CAACC;oBAC1ChB,aAAaG,EAAE,CAAC,SAASa;gBAC3B;gBAEA,IAAIF,aAAa,GAAG;oBAClB,MAAM,IAAIG,MAAM,CAAC,+BAA+B,EAAEH,UAAU;gBAC9D;gBAEAzF,EAAEgB,GAAG,CAAC6E,OAAO,CAAC1F,GAAG2F,KAAK,CAAC;YACzB,EAAE,OAAO7C,OAAO;gBACdjD,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;gBACnB,IAAID,iBAAiB2C,SAAShD,QAAQmD,KAAK,EAAE;oBAC3C/E,IAAIiC,KAAK,CAAC,CAAC,aAAa,EAAEA,MAAMa,OAAO,EAAE;gBAC3C;gBACAhB,QAAQM,IAAI,CAAC;YACf;YAEA,qBAAqB;YACrBa,YAAY,MAAMnD,YAAY+B;YAC9B,IAAI,CAACoB,WAAW;gBACdjE,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC;gBACnBlD,EAAEmD,IAAI,CAAC,kDAAkD;gBACzDL,QAAQM,IAAI,CAAC;YACf;QACF,OAAO;YACLJ,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC;YACtB9F,EAAEmD,IAAI,CACJ;gBACE,GAAGhD,GAAG6F,IAAI,CAAC,aAAa,CAAC,EAAE/B,UAAUgC,OAAO,EAAE;gBAC9C,GAAG9F,GAAG6F,IAAI,CAAC,SAAS,CAAC,EAAE9D,WAAW+B,UAAUiC,SAAS,GAAG;aACzD,CAACC,IAAI,CAAC,OACP;QAEJ;QAEA,qCAAqC;QAErC,oBAAoB;QACpBnD,QAAQgB,KAAK,CAAC;QACd,IAAI;YACF,MAAMpD,gBAAgBiC;YACtBG,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC;QACxB,EAAE,OAAO7C,OAAO;YACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,wBAAwB;QACxBD,QAAQgB,KAAK,CAAC;QACd,MAAMoC,eAAe,MAAMzF,oBAAoBkC;QAC/C,MAAMwD,UAAUnG,KAAKiG,IAAI,CAACtD,aAAa;QACvC,MAAMyD,UAAU,MAAMzF,YAAYwF;QAClCrD,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC,CAAC,EAAE,EAAEM,aAAaG,MAAM,CAAC,uBAAuB,CAAC;QAEvEvF,IAAI+E,KAAK,CAAC,CAAC,iBAAiB,EAAEvE,YAAY8E,UAAU;QACpDtF,IAAI+E,KAAK,CAAC,CAAC,eAAe,EAAEK,aAAaG,MAAM,CAAC,MAAM,CAAC;QAEvD,sCAAsC;QAEtC,IAAI,CAAC3D,QAAQwB,GAAG,EAAE;YAChBpE,EAAEmD,IAAI,CACJ;gBACE,GAAGhD,GAAG6F,IAAI,CAAC,aAAa,CAAC,EAAE/B,UAAUgC,OAAO,EAAE;gBAC9C,GAAG9F,GAAG6F,IAAI,CAAC,SAAS,CAAC,EAAE9D,WAAW+B,UAAUiC,SAAS,GAAG;gBACxD,GAAG/F,GAAG6F,IAAI,CAAC,cAAc,CAAC,EAAExE,YAAY8E,UAAU;gBAClD,GAAGnG,GAAG6F,IAAI,CAAC,kBAAkB,CAAC,EAAEI,aAAaG,MAAM,CAAC,MAAM,CAAC;aAC5D,CAACJ,IAAI,CAAC,OACP;YAGF,MAAMK,eAAe,MAAMxG,EAAEsE,OAAO,CAAC;gBACnCC,cAAc;gBACdT,SAAS;YACX;YAEA,IAAI9D,EAAEwE,QAAQ,CAACgC,iBAAiB,CAACA,cAAc;gBAC7CxG,EAAEgB,GAAG,CAAC8C,OAAO,CAAC;gBACdhB,QAAQM,IAAI,CAAC;YACf;QACF;QAEA,mCAAmC;QAEnC,4BAA4B;QAC5BJ,QAAQgB,KAAK,CAAC;QACd,IAAIyC;QACJ,IAAIC;QACJ,IAAIC;QAEJ,IAAI;YACF,MAAMC,iBAAiB,MAAMvG,iBAAiBwD,aAAaH,OAAOC,QAAQ,EAAE;gBAC1EyC;YACF;YAEAK,eAAeG,eAAeH,YAAY;YAC1CC,gBAAgBE,eAAeF,aAAa;YAC5CC,wBAAwBC,eAAeD,qBAAqB;YAE5D3F,IAAI+E,KAAK,CAAC,CAAC,eAAe,EAAEU,cAAc;QAC5C,EAAE,OAAOxD,OAAO;YACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,sBAAsB;QACtBD,QAAQc,OAAO,CAAC,CAAC,gBAAgB,EAAEtC,YAAY8E,SAAS,IAAI,CAAC;QAC7D,IAAI;YACF,MAAMjF,gBAAgBgF,SAASK;YAC/B1D,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC,CAAC,iBAAiB,EAAEtE,YAAY8E,SAAS,CAAC,CAAC;QACnE,EAAE,OAAOrD,OAAO;YACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,+BAA+B;QAC/B,IAAImD,aAAaG,MAAM,GAAG,GAAG;YAC3BvD,QAAQgB,KAAK,CAAC;YAEd,IAAI;gBACF,MAAM6C,gBAAgB,MAAMvF,mBAC1BuB,aACA8D,uBACA,CAACG,UAAUC;oBACT/D,QAAQc,OAAO,CAAC,CAAC,yBAAyB,EAAEgD,SAAS,CAAC,EAAEC,MAAM,IAAI,CAAC;gBACrE;gBAGF,IAAIF,cAAcG,YAAY,GAAG,GAAG;oBAClChE,QAAQkB,IAAI,CACV/D,GAAG4D,MAAM,CACP,CAAC,EAAE,EAAE8C,cAAcI,cAAc,CAAC,CAAC,EAAEb,aAAaG,MAAM,CAAC,kBAAkB,EAAEM,cAAcG,YAAY,CAAC,QAAQ,CAAC;oBAGrHhH,EAAEgB,GAAG,CAACkG,OAAO,CACX,GAAGL,cAAcG,YAAY,CAAC,uDAAuD,CAAC;gBAE1F,OAAO;oBACLhE,QAAQkB,IAAI,CACV/D,GAAG2F,KAAK,CACN,CAAC,0BAA0B,EAAEe,cAAcI,cAAc,CAAC,QAAQ,EAAEzF,YAAYqF,cAAcM,kBAAkB,EAAE,CAAC,CAAC;gBAG1H;YACF,EAAE,OAAOlE,OAAO;gBACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;gBACpB,MAAMD;YACR;QACF;QAEA,6BAA6B;QAC7BD,QAAQgB,KAAK,CAAC;QACd,IAAI;YACF,MAAMzD,kBAAkBsD,aAAaH,OAAOC,QAAQ,EAAE;gBACpD8C;YACF;YACAzD,QAAQkB,IAAI,CAAC/D,GAAG2F,KAAK,CAAC;QACxB,EAAE,OAAO7C,OAAO;YACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;YACpB,MAAMD;QACR;QAEA,yCAAyC;QACzC,mDAAmD;QACnD,yEAAyE;QAEzE,iBAAiB;QACjBjD,EAAEgB,GAAG,CAAC8C,OAAO,CAAC;QAEd,6BAA6B;QAC7B,IAAI;YACF,MAAMsD,SAAS,MAAM9G,iBAAiBuD,aAAaH,OAAOC,QAAQ;YAClE,IAAIyD,OAAOC,MAAM,EAAE;gBACjBrH,EAAEgB,GAAG,CAAC8C,OAAO,CAAC,CAAC,MAAM,EAAE3D,GAAG6F,IAAI,CAAC,CAAC,QAAQ,EAAEoB,OAAOC,MAAM,CAAC,CAAC,CAAC,GAAG;YAC/D;QACF,EAAE,OAAM;QACN,uCAAuC;QACzC;QAEArH,EAAEmD,IAAI,CACJ,CAAC,4BAA4B,EAAEhD,GAAG6F,IAAI,CAAC,CAAC,qCAAqC,EAAEtC,OAAOC,QAAQ,EAAE,GAAG,EACnG;IAEJ,EAAE,OAAOV,OAAO;QACdD,QAAQkB,IAAI,CAAC/D,GAAG+C,GAAG,CAAC;QACpB,MAAMY,UAAUb,iBAAiB2C,QAAQ3C,MAAMa,OAAO,GAAG;QACzD9D,EAAEgB,GAAG,CAACiC,KAAK,CAAC9C,GAAG+C,GAAG,CAAC,CAAC,EAAE,EAAEY,SAAS;QACjC,IAAIlB,QAAQmD,KAAK,IAAI9C,iBAAiB2C,SAAS3C,MAAMqE,KAAK,EAAE;YAC1DtG,IAAIiC,KAAK,CAAC,CAAC,aAAa,EAAEA,MAAMqE,KAAK,EAAE;QACzC;QACAxE,QAAQM,IAAI,CAAC;IACf;AACF"}

package/dist/commands/init.d.ts

@@ -6,10 +6,14 @@ export interface InitCommandOptions {
     debug?: boolean;
     /** Force reconfiguration of existing project */
     force?: boolean;
-    /** Content System ID to use */
+    /** Tenant ID to use (optional - will prompt if not provided) */
     id?: string;
     /** Project name (for scaffolding) */
     name?: string;
+    /** Disable Content System (defaults to enabled) */
+    noContentSystem?: boolean;
+    /** AWS region for deployment (defaults to us-east-1) */
+    region?: string;
     /** Skip authentication check (for testing/development) */
     skipAuth?: boolean;
     /** Skip prompts and use defaults where possible */

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAiCA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,+BAA+B;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,mDAAmD;IACnD,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAoED;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuW5E"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AA6BA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gEAAgE;IAChE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,mDAAmD;IACnD,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAiDD;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmW5E"}