@payloadcms/figma 0.0.1-alpha.4 → 0.0.1-alpha.41

package/dist/commands/logout.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/commands/logout.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport { TokenStore } from '../auth/token-store.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Options for logout command\n */\nexport interface LogoutCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n}\n\n/**\n * Handle the `@payloadcms/figma logout` command\n *\n * Clears all stored tokens (OAuth and project tokens) after confirmation.\n *\n * @param _options - Command options (unused)\n */\nexport async function logoutCommand(_options: LogoutCommandOptions = {}): Promise<void> {\n  const tokenStore = new TokenStore()\n\n  const hasTokens = tokenStore.getTokens() !== null\n\n  if (!hasTokens) {\n    p.log.warn(pc.yellow('No tokens found. Already logged out.'))\n    return\n  }\n\n  // Confirm logout\n  const confirmed = await p.confirm({\n    initialValue: false,\n    message: 'This will clear all OAuth and project tokens. Continue?',\n  })\n\n  if (p.isCancel(confirmed) || !confirmed) {\n    p.log.info('Logout cancelled')\n    return\n  }\n\n  const s = p.spinner()\n  s.start('Clearing tokens...')\n\n  try {\n    // Clear OAuth tokens\n    tokenStore.clearTokens()\n    // Clear all project tokens\n    tokenStore.clearAllProjectTokens()\n    s.stop(pc.green('✓ Logged out successfully'))\n    p.log.step('All OAuth and project tokens have been cleared')\n  } catch (error) {\n    s.stop(pc.red('✗ Failed to clear tokens'))\n    log.error(error instanceof Error ? error.message : 'Unknown error')\n    process.exit(1)\n  }\n}\n"],"names":["p","pc","TokenStore","log","logoutCommand","_options","tokenStore","hasTokens","getTokens","warn","yellow","confirmed","confirm","initialValue","message","isCancel","info","s","spinner","start","clearTokens","clearAllProjectTokens","stop","green","step","error","red","Error","process","exit"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAE3B,SAASC,UAAU,QAAQ,yBAAwB;AACnD,YAAYC,SAAS,kBAAiB;AAUtC;;;;;;CAMC,GACD,OAAO,eAAeC,cAAcC,WAAiC,CAAC,CAAC;IACrE,MAAMC,aAAa,IAAIJ;IAEvB,MAAMK,YAAYD,WAAWE,SAAS,OAAO;IAE7C,IAAI,CAACD,WAAW;QACdP,EAAEG,GAAG,CAACM,IAAI,CAACR,GAAGS,MAAM,CAAC;QACrB;IACF;IAEA,iBAAiB;IACjB,MAAMC,YAAY,MAAMX,EAAEY,OAAO,CAAC;QAChCC,cAAc;QACdC,SAAS;IACX;IAEA,IAAId,EAAEe,QAAQ,CAACJ,cAAc,CAACA,WAAW;QACvCX,EAAEG,GAAG,CAACa,IAAI,CAAC;QACX;IACF;IAEA,MAAMC,IAAIjB,EAAEkB,OAAO;IACnBD,EAAEE,KAAK,CAAC;IAER,IAAI;QACF,qBAAqB;QACrBb,WAAWc,WAAW;QACtB,2BAA2B;QAC3Bd,WAAWe,qBAAqB;QAChCJ,EAAEK,IAAI,CAACrB,GAAGsB,KAAK,CAAC;QAChBvB,EAAEG,GAAG,CAACqB,IAAI,CAAC;IACb,EAAE,OAAOC,OAAO;QACdR,EAAEK,IAAI,CAACrB,GAAGyB,GAAG,CAAC;QACdvB,IAAIsB,KAAK,CAACA,iBAAiBE,QAAQF,MAAMX,OAAO,GAAG;QACnDc,QAAQC,IAAI,CAAC;IACf;AACF"}
+{"version":3,"sources":["../../src/commands/logout.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport { getTokenStore } from '../auth/token-store.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Options for logout command\n */\nexport interface LogoutCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n}\n\n/**\n * Handle the `@payloadcms/figma logout` command\n *\n * Clears all stored tokens (OAuth and project tokens) after confirmation.\n *\n * @param _options - Command options (unused)\n */\nexport async function logoutCommand(_options: LogoutCommandOptions = {}): Promise<void> {\n  const tokenStore = getTokenStore()\n\n  const hasTokens = tokenStore.getTokens() !== null\n\n  if (!hasTokens) {\n    p.log.warn(pc.yellow('No tokens found. Already logged out.'))\n    return\n  }\n\n  // Confirm logout\n  const confirmed = await p.confirm({\n    initialValue: false,\n    message: 'This will clear all OAuth and project tokens. Continue?',\n  })\n\n  if (p.isCancel(confirmed) || !confirmed) {\n    p.log.info('Logout cancelled')\n    return\n  }\n\n  const s = p.spinner()\n  s.start('Clearing tokens...')\n\n  try {\n    // Clear OAuth tokens\n    tokenStore.clearTokens()\n    // Clear all project tokens\n    tokenStore.clearAllProjectTokens()\n    s.stop(pc.green('✓ Logged out successfully'))\n    p.log.step('All OAuth and project tokens have been cleared')\n  } catch (error) {\n    s.stop(pc.red('✗ Failed to clear tokens'))\n    log.error(error instanceof Error ? error.message : 'Unknown error')\n    process.exit(1)\n  }\n}\n"],"names":["p","pc","getTokenStore","log","logoutCommand","_options","tokenStore","hasTokens","getTokens","warn","yellow","confirmed","confirm","initialValue","message","isCancel","info","s","spinner","start","clearTokens","clearAllProjectTokens","stop","green","step","error","red","Error","process","exit"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAE3B,SAASC,aAAa,QAAQ,yBAAwB;AACtD,YAAYC,SAAS,kBAAiB;AAUtC;;;;;;CAMC,GACD,OAAO,eAAeC,cAAcC,WAAiC,CAAC,CAAC;IACrE,MAAMC,aAAaJ;IAEnB,MAAMK,YAAYD,WAAWE,SAAS,OAAO;IAE7C,IAAI,CAACD,WAAW;QACdP,EAAEG,GAAG,CAACM,IAAI,CAACR,GAAGS,MAAM,CAAC;QACrB;IACF;IAEA,iBAAiB;IACjB,MAAMC,YAAY,MAAMX,EAAEY,OAAO,CAAC;QAChCC,cAAc;QACdC,SAAS;IACX;IAEA,IAAId,EAAEe,QAAQ,CAACJ,cAAc,CAACA,WAAW;QACvCX,EAAEG,GAAG,CAACa,IAAI,CAAC;QACX;IACF;IAEA,MAAMC,IAAIjB,EAAEkB,OAAO;IACnBD,EAAEE,KAAK,CAAC;IAER,IAAI;QACF,qBAAqB;QACrBb,WAAWc,WAAW;QACtB,2BAA2B;QAC3Bd,WAAWe,qBAAqB;QAChCJ,EAAEK,IAAI,CAACrB,GAAGsB,KAAK,CAAC;QAChBvB,EAAEG,GAAG,CAACqB,IAAI,CAAC;IACb,EAAE,OAAOC,OAAO;QACdR,EAAEK,IAAI,CAACrB,GAAGyB,GAAG,CAAC;QACdvB,IAAIsB,KAAK,CAACA,iBAAiBE,QAAQF,MAAMX,OAAO,GAAG;QACnDc,QAAQC,IAAI,CAAC;IACf;AACF"}

package/dist/config/oauth.d.ts

@@ -1,19 +1,9 @@
 import type { OAuthConfig } from '../auth/types.js';
-export declare const URLS: Record<'prod' | 'staging', Pick<OAuthConfig, 'authorizationUrl' | 'refreshUrl' | 'tokenUrl'>>;
+export declare const DEFAULT_CALLBACK_PORT = 34462;
 /**
- * Figma OAuth2 configuration for public CLI client
- *
- * This is a PUBLIC OAuth client using PKCE (Proof Key for Code Exchange).
- * No client secret is used because CLIs cannot securely store secrets.
- * PKCE provides security through the code_verifier/code_challenge mechanism.
- *
- * For production use, register a public OAuth app with Figma.
- * To register an OAuth app, visit: https://www.figma.com/developers/api#oauth2
- */
-export declare const OAUTH_CONFIG: OAuthConfig;
-/**
- * Buffer time (in seconds) before token expiration to consider token as expired
- * This helps avoid using tokens that are about to expire
+ * Get OAuth configuration for current environment
+ * Uses getEnvironment() to determine staging vs production
  */
+export declare function getOAuthConfig(): OAuthConfig;
 export declare const TOKEN_EXPIRY_BUFFER_SECONDS = 300;
 //# sourceMappingURL=oauth.d.ts.map

package/dist/config/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/config/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAInD,eAAO,MAAM,IAAI,EAAE,MAAM,CACvB,MAAM,GAAG,SAAS,EAClB,IAAI,CAAC,WAAW,EAAE,kBAAkB,GAAG,YAAY,GAAG,UAAU,CAAC,CAYlE,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,EAAE,WAe1B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAA"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/config/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAInD,eAAO,MAAM,qBAAqB,QAAQ,CAAA;AAE1C;;;GAGG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAa5C;AAED,eAAO,MAAM,2BAA2B,MAAM,CAAA"}

package/dist/config/oauth.js

@@ -1,43 +1,22 @@
-import { FIGMA_CLIENT_IDS } from '../constants.js';
-export const URLS = {
-    prod: {
-        authorizationUrl: 'https://www.figma.com/oauth',
-        refreshUrl: 'https://api.figma.com/v1/oauth/refresh',
-        tokenUrl: 'https://api.figma.com/v1/oauth/token'
-    },
-    staging: {
-        authorizationUrl: 'https://staging.figma.com/oauth',
-        refreshUrl: 'https://api.staging.figma.com/v1/oauth/refresh',
-        tokenUrl: 'https://api.staging.figma.com/v1/oauth/token'
-    }
-};
+import { ENV_CONFIG, getEnvironment } from '../constants.js';
+export const DEFAULT_CALLBACK_PORT = 34462;
 /**
- * Figma OAuth2 configuration for public CLI client
- *
- * This is a PUBLIC OAuth client using PKCE (Proof Key for Code Exchange).
- * No client secret is used because CLIs cannot securely store secrets.
- * PKCE provides security through the code_verifier/code_challenge mechanism.
- *
- * For production use, register a public OAuth app with Figma.
- * To register an OAuth app, visit: https://www.figma.com/developers/api#oauth2
- */ export const OAUTH_CONFIG = {
-    // OAuth client ID (public client)
-    // Uses staging client ID by default since we use staging endpoints
-    clientId: process.env.FIGMA_CLIENT_ID || FIGMA_CLIENT_IDS.staging,
-    // No client secret - this is a public OAuth client using PKCE
-    // Public clients cannot securely store secrets in CLI environments
-    redirectUri: process.env.FIGMA_REDIRECT_URI || 'http://localhost:3000/callback',
-    // Only current_user:read scope is needed for basic user info
-    scopes: [
-        'current_user:read'
-    ],
-    // TODO: Dynamically choose between prod and staging based on environment
-    ...URLS.staging
-};
-/**
- * Buffer time (in seconds) before token expiration to consider token as expired
- * This helps avoid using tokens that are about to expire
- */ export const TOKEN_EXPIRY_BUFFER_SECONDS = 300 // 5 minutes
-;
+ * Get OAuth configuration for current environment
+ * Uses getEnvironment() to determine staging vs production
+ */ export function getOAuthConfig() {
+    const env = getEnvironment();
+    const { apiBaseUrl, authorizationUrl, clientId } = ENV_CONFIG[env];
+    return {
+        authorizationUrl,
+        clientId: process.env.FIGMA_CLIENT_ID || clientId,
+        redirectUri: process.env.FIGMA_REDIRECT_URI || `http://localhost:${DEFAULT_CALLBACK_PORT}/callback`,
+        refreshUrl: `${apiBaseUrl}/v1/oauth/refresh`,
+        scopes: [
+            'current_user:read'
+        ],
+        tokenUrl: `${apiBaseUrl}/v1/oauth/token`
+    };
+}
+export const TOKEN_EXPIRY_BUFFER_SECONDS = 300;
 
 //# sourceMappingURL=oauth.js.map

package/dist/config/oauth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/config/oauth.ts"],"sourcesContent":["import type { OAuthConfig } from '../auth/types.js'\n\nimport { FIGMA_CLIENT_IDS } from '../constants.js'\n\nexport const URLS: Record<\n  'prod' | 'staging',\n  Pick<OAuthConfig, 'authorizationUrl' | 'refreshUrl' | 'tokenUrl'>\n> = {\n  prod: {\n    authorizationUrl: 'https://www.figma.com/oauth',\n    refreshUrl: 'https://api.figma.com/v1/oauth/refresh',\n    tokenUrl: 'https://api.figma.com/v1/oauth/token',\n  },\n  staging: {\n    authorizationUrl: 'https://staging.figma.com/oauth',\n    refreshUrl: 'https://api.staging.figma.com/v1/oauth/refresh',\n    tokenUrl: 'https://api.staging.figma.com/v1/oauth/token',\n  },\n}\n\n/**\n * Figma OAuth2 configuration for public CLI client\n *\n * This is a PUBLIC OAuth client using PKCE (Proof Key for Code Exchange).\n * No client secret is used because CLIs cannot securely store secrets.\n * PKCE provides security through the code_verifier/code_challenge mechanism.\n *\n * For production use, register a public OAuth app with Figma.\n * To register an OAuth app, visit: https://www.figma.com/developers/api#oauth2\n */\nexport const OAUTH_CONFIG: OAuthConfig = {\n  // OAuth client ID (public client)\n  // Uses staging client ID by default since we use staging endpoints\n  clientId: process.env.FIGMA_CLIENT_ID || FIGMA_CLIENT_IDS.staging,\n\n  // No client secret - this is a public OAuth client using PKCE\n  // Public clients cannot securely store secrets in CLI environments\n\n  redirectUri: process.env.FIGMA_REDIRECT_URI || 'http://localhost:3000/callback',\n\n  // Only current_user:read scope is needed for basic user info\n  scopes: ['current_user:read'],\n\n  // TODO: Dynamically choose between prod and staging based on environment\n  ...URLS.staging,\n}\n\n/**\n * Buffer time (in seconds) before token expiration to consider token as expired\n * This helps avoid using tokens that are about to expire\n */\nexport const TOKEN_EXPIRY_BUFFER_SECONDS = 300 // 5 minutes\n"],"names":["FIGMA_CLIENT_IDS","URLS","prod","authorizationUrl","refreshUrl","tokenUrl","staging","OAUTH_CONFIG","clientId","process","env","FIGMA_CLIENT_ID","redirectUri","FIGMA_REDIRECT_URI","scopes","TOKEN_EXPIRY_BUFFER_SECONDS"],"mappings":"AAEA,SAASA,gBAAgB,QAAQ,kBAAiB;AAElD,OAAO,MAAMC,OAGT;IACFC,MAAM;QACJC,kBAAkB;QAClBC,YAAY;QACZC,UAAU;IACZ;IACAC,SAAS;QACPH,kBAAkB;QAClBC,YAAY;QACZC,UAAU;IACZ;AACF,EAAC;AAED;;;;;;;;;CASC,GACD,OAAO,MAAME,eAA4B;IACvC,kCAAkC;IAClC,mEAAmE;IACnEC,UAAUC,QAAQC,GAAG,CAACC,eAAe,IAAIX,iBAAiBM,OAAO;IAEjE,8DAA8D;IAC9D,mEAAmE;IAEnEM,aAAaH,QAAQC,GAAG,CAACG,kBAAkB,IAAI;IAE/C,6DAA6D;IAC7DC,QAAQ;QAAC;KAAoB;IAE7B,yEAAyE;IACzE,GAAGb,KAAKK,OAAO;AACjB,EAAC;AAED;;;CAGC,GACD,OAAO,MAAMS,8BAA8B,IAAI,YAAY;CAAb"}
+{"version":3,"sources":["../../src/config/oauth.ts"],"sourcesContent":["import type { OAuthConfig } from '../auth/types.js'\n\nimport { ENV_CONFIG, getEnvironment } from '../constants.js'\n\nexport const DEFAULT_CALLBACK_PORT = 34462\n\n/**\n * Get OAuth configuration for current environment\n * Uses getEnvironment() to determine staging vs production\n */\nexport function getOAuthConfig(): OAuthConfig {\n  const env = getEnvironment()\n  const { apiBaseUrl, authorizationUrl, clientId } = ENV_CONFIG[env]\n\n  return {\n    authorizationUrl,\n    clientId: process.env.FIGMA_CLIENT_ID || clientId,\n    redirectUri:\n      process.env.FIGMA_REDIRECT_URI || `http://localhost:${DEFAULT_CALLBACK_PORT}/callback`,\n    refreshUrl: `${apiBaseUrl}/v1/oauth/refresh`,\n    scopes: ['current_user:read'],\n    tokenUrl: `${apiBaseUrl}/v1/oauth/token`,\n  }\n}\n\nexport const TOKEN_EXPIRY_BUFFER_SECONDS = 300\n"],"names":["ENV_CONFIG","getEnvironment","DEFAULT_CALLBACK_PORT","getOAuthConfig","env","apiBaseUrl","authorizationUrl","clientId","process","FIGMA_CLIENT_ID","redirectUri","FIGMA_REDIRECT_URI","refreshUrl","scopes","tokenUrl","TOKEN_EXPIRY_BUFFER_SECONDS"],"mappings":"AAEA,SAASA,UAAU,EAAEC,cAAc,QAAQ,kBAAiB;AAE5D,OAAO,MAAMC,wBAAwB,MAAK;AAE1C;;;CAGC,GACD,OAAO,SAASC;IACd,MAAMC,MAAMH;IACZ,MAAM,EAAEI,UAAU,EAAEC,gBAAgB,EAAEC,QAAQ,EAAE,GAAGP,UAAU,CAACI,IAAI;IAElE,OAAO;QACLE;QACAC,UAAUC,QAAQJ,GAAG,CAACK,eAAe,IAAIF;QACzCG,aACEF,QAAQJ,GAAG,CAACO,kBAAkB,IAAI,CAAC,iBAAiB,EAAET,sBAAsB,SAAS,CAAC;QACxFU,YAAY,GAAGP,WAAW,iBAAiB,CAAC;QAC5CQ,QAAQ;YAAC;SAAoB;QAC7BC,UAAU,GAAGT,WAAW,eAAe,CAAC;IAC1C;AACF;AAEA,OAAO,MAAMU,8BAA8B,IAAG"}

package/dist/constants.d.ts

@@ -1,27 +1,35 @@
-export declare const FIGMA_CLIENT_IDS: {
-    production: string;
-    staging: string;
-};
-export declare const JWKS_URI: {
-    production: string;
-    staging: string;
-};
 /**
  * Figma environment (production or staging)
  */
 export type Environment = 'production' | 'staging';
+type EnvironmentConfig = {
+    /** Figma API base URL. Override: FIGMA_API_BASE_URL */
+    apiBaseUrl: string;
+    /** OAuth authorization URL (CLI auth) */
+    authorizationUrl: string;
+    /** OAuth client ID. Override: FIGMA_CLIENT_ID or FIGMA_OAUTH_CLIENT_ID */
+    clientId: string;
+    /** Content API base URL. Override: FIGMA_CONTENT_API_URL */
+    contentApiUrl: string;
+    /** OIDC discovery endpoint */
+    identityMetadata: string;
+    /** JSON Web Key Set URL for token validation */
+    jwksUri: string;
+};
 /**
- * Get current Figma environment from environment variable
- * Defaults to 'staging' if not specified
- *
- * @returns Current environment
+ * Environment-specific configuration for Figma integration.
+ * Selected via FIGMA_ENV ('production' | 'staging'), defaults to 'production'.
  */
-export declare function getEnvironment(): Environment;
+export declare const ENV_CONFIG: Record<Environment, EnvironmentConfig>;
 /**
- * Get JWKS URI for a given environment
- *
- * @param env - Environment (defaults to current environment)
- * @returns JWKS URI for the environment
+ * Set environment override (used by --env CLI flag)
+ * Pass undefined to clear the override
  */
-export declare function getJWKSUri(env?: Environment): string;
+export declare function setEnvironment(env: Environment | undefined): void;
+/**
+ * Get current Figma environment
+ * Priority: 1) setEnvironment override, 2) FIGMA_ENV env var, 3) 'production' default
+ */
+export declare function getEnvironment(): Environment;
+export {};
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB;;;CAG5B,CAAA;AAED,eAAO,MAAM,QAAQ;;;CAGpB,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,SAAS,CAAA;AAElD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,GAAG,MAAM,CAGpD"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,SAAS,CAAA;AAElD,KAAK,iBAAiB,GAAG;IACvB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAA;IACxB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAA;IAChB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAA;IACrB,8BAA8B;IAC9B,gBAAgB,EAAE,MAAM,CAAA;IACxB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAiB7D,CAAA;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAEjE;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C"}

package/dist/constants.js

@@ -1,27 +1,41 @@
-export const FIGMA_CLIENT_IDS = {
-    production: '',
-    staging: 'wqAToBAp4UI9AZ5M6wTfT9'
-};
-export const JWKS_URI = {
-    production: 'https://static.figmacontent.com/.well_known/jwks.json',
-    staging: 'https://static.figmacontentstaging.com/.well_known/jwks.json'
+/**
+ * Figma environment (production or staging)
+ */ /**
+ * Environment-specific configuration for Figma integration.
+ * Selected via FIGMA_ENV ('production' | 'staging'), defaults to 'production'.
+ */ export const ENV_CONFIG = {
+    production: {
+        apiBaseUrl: 'https://api.figma.com',
+        authorizationUrl: 'https://www.figma.com/oauth',
+        clientId: 'lelKVTAzOekFnirnlAMbuD',
+        contentApiUrl: 'https://us-east-1.cms-tenants-001-production.figmacontent.com',
+        identityMetadata: 'https://www.figma.com/.well-known/openid-configuration',
+        jwksUri: 'https://static.figmacontent.com/.well_known/jwks.json'
+    },
+    staging: {
+        apiBaseUrl: 'https://api.staging.figma.com',
+        authorizationUrl: 'https://staging.figma.com/oauth',
+        clientId: 'wqAToBAp4UI9AZ5M6wTfT9',
+        contentApiUrl: 'https://us-east-1.cms-tenants-001-staging.figmacontentstaging.com',
+        identityMetadata: 'https://staging.figma.com/.well-known/openid-configuration',
+        jwksUri: 'https://static.figmacontentstaging.com/.well_known/jwks.json'
+    }
 };
+let envOverride;
 /**
- * Get current Figma environment from environment variable
- * Defaults to 'staging' if not specified
- *
- * @returns Current environment
- */ export function getEnvironment() {
-    return process.env.FIGMA_ENV === 'production' ? 'production' : 'staging';
+ * Set environment override (used by --env CLI flag)
+ * Pass undefined to clear the override
+ */ export function setEnvironment(env) {
+    envOverride = env;
 }
 /**
- * Get JWKS URI for a given environment
- *
- * @param env - Environment (defaults to current environment)
- * @returns JWKS URI for the environment
- */ export function getJWKSUri(env) {
-    const environment = env || getEnvironment();
-    return JWKS_URI[environment];
+ * Get current Figma environment
+ * Priority: 1) setEnvironment override, 2) FIGMA_ENV env var, 3) 'production' default
+ */ export function getEnvironment() {
+    if (envOverride) {
+        return envOverride;
+    }
+    return process.env.FIGMA_ENV === 'staging' ? 'staging' : 'production';
 }
 
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["export const FIGMA_CLIENT_IDS = {\n  production: '',\n  staging: 'wqAToBAp4UI9AZ5M6wTfT9', // Hard-coded staging client ID\n}\n\nexport const JWKS_URI = {\n  production: 'https://static.figmacontent.com/.well_known/jwks.json',\n  staging: 'https://static.figmacontentstaging.com/.well_known/jwks.json',\n}\n\n/**\n * Figma environment (production or staging)\n */\nexport type Environment = 'production' | 'staging'\n\n/**\n * Get current Figma environment from environment variable\n * Defaults to 'staging' if not specified\n *\n * @returns Current environment\n */\nexport function getEnvironment(): Environment {\n  return process.env.FIGMA_ENV === 'production' ? 'production' : 'staging'\n}\n\n/**\n * Get JWKS URI for a given environment\n *\n * @param env - Environment (defaults to current environment)\n * @returns JWKS URI for the environment\n */\nexport function getJWKSUri(env?: Environment): string {\n  const environment = env || getEnvironment()\n  return JWKS_URI[environment]\n}\n"],"names":["FIGMA_CLIENT_IDS","production","staging","JWKS_URI","getEnvironment","process","env","FIGMA_ENV","getJWKSUri","environment"],"mappings":"AAAA,OAAO,MAAMA,mBAAmB;IAC9BC,YAAY;IACZC,SAAS;AACX,EAAC;AAED,OAAO,MAAMC,WAAW;IACtBF,YAAY;IACZC,SAAS;AACX,EAAC;AAOD;;;;;CAKC,GACD,OAAO,SAASE;IACd,OAAOC,QAAQC,GAAG,CAACC,SAAS,KAAK,eAAe,eAAe;AACjE;AAEA;;;;;CAKC,GACD,OAAO,SAASC,WAAWF,GAAiB;IAC1C,MAAMG,cAAcH,OAAOF;IAC3B,OAAOD,QAAQ,CAACM,YAAY;AAC9B"}
+{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Figma environment (production or staging)\n */\nexport type Environment = 'production' | 'staging'\n\ntype EnvironmentConfig = {\n  /** Figma API base URL. Override: FIGMA_API_BASE_URL */\n  apiBaseUrl: string\n  /** OAuth authorization URL (CLI auth) */\n  authorizationUrl: string\n  /** OAuth client ID. Override: FIGMA_CLIENT_ID or FIGMA_OAUTH_CLIENT_ID */\n  clientId: string\n  /** Content API base URL. Override: FIGMA_CONTENT_API_URL */\n  contentApiUrl: string\n  /** OIDC discovery endpoint */\n  identityMetadata: string\n  /** JSON Web Key Set URL for token validation */\n  jwksUri: string\n}\n\n/**\n * Environment-specific configuration for Figma integration.\n * Selected via FIGMA_ENV ('production' | 'staging'), defaults to 'production'.\n */\nexport const ENV_CONFIG: Record<Environment, EnvironmentConfig> = {\n  production: {\n    apiBaseUrl: 'https://api.figma.com',\n    authorizationUrl: 'https://www.figma.com/oauth',\n    clientId: 'lelKVTAzOekFnirnlAMbuD',\n    contentApiUrl: 'https://us-east-1.cms-tenants-001-production.figmacontent.com',\n    identityMetadata: 'https://www.figma.com/.well-known/openid-configuration',\n    jwksUri: 'https://static.figmacontent.com/.well_known/jwks.json',\n  },\n  staging: {\n    apiBaseUrl: 'https://api.staging.figma.com',\n    authorizationUrl: 'https://staging.figma.com/oauth',\n    clientId: 'wqAToBAp4UI9AZ5M6wTfT9',\n    contentApiUrl: 'https://us-east-1.cms-tenants-001-staging.figmacontentstaging.com',\n    identityMetadata: 'https://staging.figma.com/.well-known/openid-configuration',\n    jwksUri: 'https://static.figmacontentstaging.com/.well_known/jwks.json',\n  },\n}\n\nlet envOverride: Environment | undefined\n\n/**\n * Set environment override (used by --env CLI flag)\n * Pass undefined to clear the override\n */\nexport function setEnvironment(env: Environment | undefined): void {\n  envOverride = env\n}\n\n/**\n * Get current Figma environment\n * Priority: 1) setEnvironment override, 2) FIGMA_ENV env var, 3) 'production' default\n */\nexport function getEnvironment(): Environment {\n  if (envOverride) {\n    return envOverride\n  }\n  return process.env.FIGMA_ENV === 'staging' ? 'staging' : 'production'\n}\n"],"names":["ENV_CONFIG","production","apiBaseUrl","authorizationUrl","clientId","contentApiUrl","identityMetadata","jwksUri","staging","envOverride","setEnvironment","env","getEnvironment","process","FIGMA_ENV"],"mappings":"AAAA;;CAEC,GAkBD;;;CAGC,GACD,OAAO,MAAMA,aAAqD;IAChEC,YAAY;QACVC,YAAY;QACZC,kBAAkB;QAClBC,UAAU;QACVC,eAAe;QACfC,kBAAkB;QAClBC,SAAS;IACX;IACAC,SAAS;QACPN,YAAY;QACZC,kBAAkB;QAClBC,UAAU;QACVC,eAAe;QACfC,kBAAkB;QAClBC,SAAS;IACX;AACF,EAAC;AAED,IAAIE;AAEJ;;;CAGC,GACD,OAAO,SAASC,eAAeC,GAA4B;IACzDF,cAAcE;AAChB;AAEA;;;CAGC,GACD,OAAO,SAASC;IACd,IAAIH,aAAa;QACf,OAAOA;IACT;IACA,OAAOI,QAAQF,GAAG,CAACG,SAAS,KAAK,YAAY,YAAY;AAC3D"}

package/dist/db-content-api/README.md

@@ -0,0 +1,98 @@
+# Content API Database Adapter Parity
+
+This document explains how the Content API database adapter differs from Payload today and how it will behave once alignment is complete.
+
+The Content API is an internal service built exclusively for Payload. Because of that, the adapter should match Payload by default and only diverge when there is a strong technical reason.
+
+## Where
+
+Now  
+`{ path: "slug", operator: "equals", value: "hello", type: "text" }`
+
+Future  
+`{ path: "slug", operator: "equals", value: "hello", type: "text" }`
+
+The format stays different. This allows the Content API to evolve its filter schema, for example to support composite types like Point, which are not lexicographically sortable. Semantics must remain identical to Payload.
+
+## Pagination
+
+~~Now~~  
+~~`{ limit: 10, offset: 20 }`~~
+
+✅ Partially Implemented  
+`{ limit: 10, page: 3 }`
+
+**Status:**
+
+- ✅ Content API main endpoints use `page` (matches Payload)
+
+- ⚠️ **Issue #1 (Joins):** `JoinClause` still uses `offset` instead of `page`
+  - Payload `JoinQuery`: `{ page?: number, limit?: number }`
+  - Content API `JoinClause`: `{ offset?: number, limit?: number }`
+  - **Inconsistent** with main endpoints which use `page`
+
+**Current workaround for joins:** The adapter converts `page` to `offset`:
+
+```typescript
+// Payload join query
+{ page: 2, limit: 5 }
+// Adapter converts to offset for Content API
+{ offset: 5, limit: 5 }
+```
+
+**Future:**
+
+1. Content API should support `skip` parameter for main endpoints
+2. Content API `JoinClause` should use `page` instead of `offset` (consistent with main endpoints)
+3. Content API pagination response should match Payload's flat structure
+
+### Pagination Response Structure
+
+**Payload format (flat):**
+
+```typescript
+{
+  docs: [...],
+  hasNextPage: boolean,
+  hasPrevPage: boolean,
+  limit: number,
+  nextPage: number | null,
+  page: number,
+  pagingCounter: number,
+  prevPage: number | null,
+  totalDocs: number,
+  totalPages: number
+}
+```
+
+**Content API format (nested):**
+
+```typescript
+{
+  data: [...],
+  pagination: {
+    total: number,
+    current: { limit: number, page: number },
+    next?: { limit: number, page: number },
+    prev?: { limit: number, page: number }
+  }
+}
+```
+
+**Current workaround:** The adapter transforms Content API's nested structure to Payload's flat structure using `getPaginationData()` utility.
+
+## Slugs
+
+Now  
+`{ collection: { key: "posts" } }`
+
+Future  
+`{ collection: { slug: "posts" } }`
+
+Collection identifiers will match Payload. Consumers should not be aware of internal collection IDs.
+
+## Temporary Conversions
+
+Helpers that translate Payload queries into the current Content API format are temporary and placed in the `temp-utilities` folder.
+
+They live in the `temp-utilities` folder until the Content API is fully aligned with Payload.