@payloadcms/figma 0.0.1-alpha.42 → 0.0.1-alpha.6

package/dist/commands/login.js

@@ -1,29 +1,22 @@
 import * as p from '@clack/prompts';
 import pc from 'picocolors';
-import { CallbackError } from '../auth/callback-server.js';
 import { executeOAuthFlow, getValidAccessToken, OAuthFlowError } from '../auth/oauth-flow.js';
-import { getTokenStore } from '../auth/token-store.js';
-import { getOAuthConfig } from '../config/oauth.js';
-import { getEnvironment } from '../constants.js';
-import { formatEnvSuffix } from '../utils/format-env-suffix.js';
+import { TokenStore } from '../auth/token-store.js';
+import { OAUTH_CONFIG } from '../config/oauth.js';
 import * as log from '../utils/log.js';
 /**
  * Handle the `@payloadcms/figma login` command
  *
  * Authenticates the user with Figma OAuth2 and stores tokens locally.
  * If valid tokens already exist, shows an error message.
- */ export async function loginCommand(args) {
-    const { showNextSteps } = args || {
-        showNextSteps: false
-    };
-    const env = getEnvironment();
-    const tokenStore = getTokenStore(env);
+ */ export async function loginCommand() {
+    const tokenStore = new TokenStore();
     // Check for existing valid tokens
     try {
         const existingToken = await getValidAccessToken(tokenStore);
         if (existingToken) {
             const tokens = tokenStore.getTokens();
-            p.log.warn(pc.yellow(`Already logged in${formatEnvSuffix(env)}`));
+            p.log.warn(pc.yellow('Already logged in'));
             if (tokens?.userId) {
                 log.info(`User ID: ${tokens.userId}`);
             }
@@ -37,39 +30,28 @@ import * as log from '../utils/log.js';
     }
     // Start OAuth flow
     await handleAuthentication({
-        showNextSteps,
         tokenStore
     });
 }
 /**
  * Handle authentication flow
- */ async function handleAuthentication({ showNextSteps, tokenStore }) {
+ */ async function handleAuthentication({ tokenStore }) {
     try {
         // Execute OAuth flow
-        const oauthConfig = getOAuthConfig();
         const result = await executeOAuthFlow(tokenStore, {
-            clientId: oauthConfig.clientId,
-            redirectUri: oauthConfig.redirectUri,
-            scopes: oauthConfig.scopes
+            clientId: OAUTH_CONFIG.clientId,
+            redirectUri: OAUTH_CONFIG.redirectUri,
+            scopes: OAUTH_CONFIG.scopes
         });
-        const env = getEnvironment();
-        p.log.success(pc.green(`✓ Logged in${formatEnvSuffix(env)}`));
+        p.log.success(pc.green('✓ You are now authenticated with Figma'));
         if (result.userId) {
             log.debug(`User ID: ${result.userId}`);
         }
         log.debug(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`);
-        // Show next steps unless disabled
-        if (showNextSteps !== false) {
-            p.note(`  ${pc.cyan('@payloadcms/figma init')}  Create a new CMS instance`, 'Next Steps');
-        }
+        // Show next steps
+        p.note(`  ${pc.cyan('@payloadcms/figma init')}  Create a new CMS instance`, 'Next Steps');
     } catch (error) {
         if (error instanceof OAuthFlowError) {
-            const isTimeout = error.cause instanceof CallbackError && error.cause.code === 'timeout';
-            if (isTimeout) {
-                p.log.error(pc.red('✗ Authentication timed out.'));
-                p.note(`Run ${pc.cyan('@payloadcms/figma login')} to try again.`, 'Tip');
-                process.exit(1);
-            }
             log.error(error.message);
             if (error.cause) {
                 log.debug(`Cause: ${error.cause.message}`);

package/dist/commands/login.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/commands/login.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport type { TokenStore } from '../auth/token-store.js'\n\nimport { CallbackError } from '../auth/callback-server.js'\nimport { executeOAuthFlow, getValidAccessToken, OAuthFlowError } from '../auth/oauth-flow.js'\nimport { getTokenStore } from '../auth/token-store.js'\nimport { getOAuthConfig } from '../config/oauth.js'\nimport { getEnvironment } from '../constants.js'\nimport { formatEnvSuffix } from '../utils/format-env-suffix.js'\nimport * as log from '../utils/log.js'\n\ntype LoginArgs = {\n  /** Set this to show next steps after login\n   * @default true\n   */\n  showNextSteps: boolean\n}\n\n/**\n * Handle the `@payloadcms/figma login` command\n *\n * Authenticates the user with Figma OAuth2 and stores tokens locally.\n * If valid tokens already exist, shows an error message.\n */\nexport async function loginCommand(args?: LoginArgs): Promise<void> {\n  const { showNextSteps } = args || { showNextSteps: false }\n  const env = getEnvironment()\n  const tokenStore = getTokenStore(env)\n\n  // Check for existing valid tokens\n  try {\n    const existingToken = await getValidAccessToken(tokenStore)\n    if (existingToken) {\n      const tokens = tokenStore.getTokens()\n      p.log.warn(pc.yellow(`Already logged in${formatEnvSuffix(env)}`))\n      if (tokens?.userId) {\n        log.info(`User ID: ${tokens.userId}`)\n      }\n      log.info(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`)\n      p.note(`To re-authenticate, first run ${pc.cyan('@payloadcms/figma logout')}`, 'Tip')\n      return\n    }\n  } catch {\n    // Token refresh failed - continue with new auth flow\n    log.warning('Existing tokens are invalid. Starting new authentication...')\n  }\n\n  // Start OAuth flow\n  await handleAuthentication({\n    showNextSteps,\n    tokenStore,\n  })\n}\n\n/**\n * Handle authentication flow\n */\nasync function handleAuthentication({\n  showNextSteps,\n  tokenStore,\n}: {\n  showNextSteps: boolean\n  tokenStore: TokenStore\n}): Promise<void> {\n  try {\n    // Execute OAuth flow\n    const oauthConfig = getOAuthConfig()\n    const result = await executeOAuthFlow(tokenStore, {\n      clientId: oauthConfig.clientId,\n      redirectUri: oauthConfig.redirectUri,\n      scopes: oauthConfig.scopes,\n    })\n\n    const env = getEnvironment()\n    p.log.success(pc.green(`✓ Logged in${formatEnvSuffix(env)}`))\n\n    if (result.userId) {\n      log.debug(`User ID: ${result.userId}`)\n    }\n\n    log.debug(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`)\n\n    // Show next steps unless disabled\n    if (showNextSteps !== false) {\n      p.note(`  ${pc.cyan('@payloadcms/figma init')}  Create a new CMS instance`, 'Next Steps')\n    }\n  } catch (error) {\n    if (error instanceof OAuthFlowError) {\n      const isTimeout = error.cause instanceof CallbackError && error.cause.code === 'timeout'\n\n      if (isTimeout) {\n        p.log.error(pc.red('✗ Authentication timed out.'))\n        p.note(`Run ${pc.cyan('@payloadcms/figma login')} to try again.`, 'Tip')\n        process.exit(1)\n      }\n\n      log.error(error.message)\n\n      if (error.cause) {\n        log.debug(`Cause: ${error.cause.message}`)\n      }\n    } else {\n      log.error(error instanceof Error ? error.message : 'Unknown error')\n    }\n\n    process.exit(1)\n  }\n}\n"],"names":["p","pc","CallbackError","executeOAuthFlow","getValidAccessToken","OAuthFlowError","getTokenStore","getOAuthConfig","getEnvironment","formatEnvSuffix","log","loginCommand","args","showNextSteps","env","tokenStore","existingToken","tokens","getTokens","warn","yellow","userId","info","dim","getStoragePath","note","cyan","warning","handleAuthentication","oauthConfig","result","clientId","redirectUri","scopes","success","green","debug","error","isTimeout","cause","code","red","process","exit","message","Error"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAI3B,SAASC,aAAa,QAAQ,6BAA4B;AAC1D,SAASC,gBAAgB,EAAEC,mBAAmB,EAAEC,cAAc,QAAQ,wBAAuB;AAC7F,SAASC,aAAa,QAAQ,yBAAwB;AACtD,SAASC,cAAc,QAAQ,qBAAoB;AACnD,SAASC,cAAc,QAAQ,kBAAiB;AAChD,SAASC,eAAe,QAAQ,gCAA+B;AAC/D,YAAYC,SAAS,kBAAiB;AAStC;;;;;CAKC,GACD,OAAO,eAAeC,aAAaC,IAAgB;IACjD,MAAM,EAAEC,aAAa,EAAE,GAAGD,QAAQ;QAAEC,eAAe;IAAM;IACzD,MAAMC,MAAMN;IACZ,MAAMO,aAAaT,cAAcQ;IAEjC,kCAAkC;IAClC,IAAI;QACF,MAAME,gBAAgB,MAAMZ,oBAAoBW;QAChD,IAAIC,eAAe;YACjB,MAAMC,SAASF,WAAWG,SAAS;YACnClB,EAAEU,GAAG,CAACS,IAAI,CAAClB,GAAGmB,MAAM,CAAC,CAAC,iBAAiB,EAAEX,gBAAgBK,MAAM;YAC/D,IAAIG,QAAQI,QAAQ;gBAClBX,IAAIY,IAAI,CAAC,CAAC,SAAS,EAAEL,OAAOI,MAAM,EAAE;YACtC;YACAX,IAAIY,IAAI,CAAC,CAAC,eAAe,EAAErB,GAAGsB,GAAG,CAACR,WAAWS,cAAc,KAAK;YAChExB,EAAEyB,IAAI,CAAC,CAAC,8BAA8B,EAAExB,GAAGyB,IAAI,CAAC,6BAA6B,EAAE;YAC/E;QACF;IACF,EAAE,OAAM;QACN,qDAAqD;QACrDhB,IAAIiB,OAAO,CAAC;IACd;IAEA,mBAAmB;IACnB,MAAMC,qBAAqB;QACzBf;QACAE;IACF;AACF;AAEA;;CAEC,GACD,eAAea,qBAAqB,EAClCf,aAAa,EACbE,UAAU,EAIX;IACC,IAAI;QACF,qBAAqB;QACrB,MAAMc,cAActB;QACpB,MAAMuB,SAAS,MAAM3B,iBAAiBY,YAAY;YAChDgB,UAAUF,YAAYE,QAAQ;YAC9BC,aAAaH,YAAYG,WAAW;YACpCC,QAAQJ,YAAYI,MAAM;QAC5B;QAEA,MAAMnB,MAAMN;QACZR,EAAEU,GAAG,CAACwB,OAAO,CAACjC,GAAGkC,KAAK,CAAC,CAAC,WAAW,EAAE1B,gBAAgBK,MAAM;QAE3D,IAAIgB,OAAOT,MAAM,EAAE;YACjBX,IAAI0B,KAAK,CAAC,CAAC,SAAS,EAAEN,OAAOT,MAAM,EAAE;QACvC;QAEAX,IAAI0B,KAAK,CAAC,CAAC,eAAe,EAAEnC,GAAGsB,GAAG,CAACR,WAAWS,cAAc,KAAK;QAEjE,kCAAkC;QAClC,IAAIX,kBAAkB,OAAO;YAC3Bb,EAAEyB,IAAI,CAAC,CAAC,EAAE,EAAExB,GAAGyB,IAAI,CAAC,0BAA0B,2BAA2B,CAAC,EAAE;QAC9E;IACF,EAAE,OAAOW,OAAO;QACd,IAAIA,iBAAiBhC,gBAAgB;YACnC,MAAMiC,YAAYD,MAAME,KAAK,YAAYrC,iBAAiBmC,MAAME,KAAK,CAACC,IAAI,KAAK;YAE/E,IAAIF,WAAW;gBACbtC,EAAEU,GAAG,CAAC2B,KAAK,CAACpC,GAAGwC,GAAG,CAAC;gBACnBzC,EAAEyB,IAAI,CAAC,CAAC,IAAI,EAAExB,GAAGyB,IAAI,CAAC,2BAA2B,cAAc,CAAC,EAAE;gBAClEgB,QAAQC,IAAI,CAAC;YACf;YAEAjC,IAAI2B,KAAK,CAACA,MAAMO,OAAO;YAEvB,IAAIP,MAAME,KAAK,EAAE;gBACf7B,IAAI0B,KAAK,CAAC,CAAC,OAAO,EAAEC,MAAME,KAAK,CAACK,OAAO,EAAE;YAC3C;QACF,OAAO;YACLlC,IAAI2B,KAAK,CAACA,iBAAiBQ,QAAQR,MAAMO,OAAO,GAAG;QACrD;QAEAF,QAAQC,IAAI,CAAC;IACf;AACF"}
+{"version":3,"sources":["../../src/commands/login.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport { executeOAuthFlow, getValidAccessToken, OAuthFlowError } from '../auth/oauth-flow.js'\nimport { TokenStore } from '../auth/token-store.js'\nimport { OAUTH_CONFIG } from '../config/oauth.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Handle the `@payloadcms/figma login` command\n *\n * Authenticates the user with Figma OAuth2 and stores tokens locally.\n * If valid tokens already exist, shows an error message.\n */\nexport async function loginCommand(): Promise<void> {\n  const tokenStore = new TokenStore()\n\n  // Check for existing valid tokens\n  try {\n    const existingToken = await getValidAccessToken(tokenStore)\n    if (existingToken) {\n      const tokens = tokenStore.getTokens()\n      p.log.warn(pc.yellow('Already logged in'))\n      if (tokens?.userId) {\n        log.info(`User ID: ${tokens.userId}`)\n      }\n      log.info(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`)\n      p.note(`To re-authenticate, first run ${pc.cyan('@payloadcms/figma logout')}`, 'Tip')\n      return\n    }\n  } catch {\n    // Token refresh failed - continue with new auth flow\n    log.warning('Existing tokens are invalid. Starting new authentication...')\n  }\n\n  // Start OAuth flow\n  await handleAuthentication({\n    tokenStore,\n  })\n}\n\n/**\n * Handle authentication flow\n */\nasync function handleAuthentication({ tokenStore }: { tokenStore: TokenStore }): Promise<void> {\n  try {\n    // Execute OAuth flow\n    const result = await executeOAuthFlow(tokenStore, {\n      clientId: OAUTH_CONFIG.clientId,\n      redirectUri: OAUTH_CONFIG.redirectUri,\n      scopes: OAUTH_CONFIG.scopes,\n    })\n\n    p.log.success(pc.green('✓ You are now authenticated with Figma'))\n\n    if (result.userId) {\n      log.debug(`User ID: ${result.userId}`)\n    }\n\n    log.debug(`Token storage: ${pc.dim(tokenStore.getStoragePath())}`)\n\n    // Show next steps\n    p.note(`  ${pc.cyan('@payloadcms/figma init')}  Create a new CMS instance`, 'Next Steps')\n  } catch (error) {\n    if (error instanceof OAuthFlowError) {\n      log.error(error.message)\n\n      if (error.cause) {\n        log.debug(`Cause: ${error.cause.message}`)\n      }\n    } else {\n      log.error(error instanceof Error ? error.message : 'Unknown error')\n    }\n\n    process.exit(1)\n  }\n}\n"],"names":["p","pc","executeOAuthFlow","getValidAccessToken","OAuthFlowError","TokenStore","OAUTH_CONFIG","log","loginCommand","tokenStore","existingToken","tokens","getTokens","warn","yellow","userId","info","dim","getStoragePath","note","cyan","warning","handleAuthentication","result","clientId","redirectUri","scopes","success","green","debug","error","message","cause","Error","process","exit"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAE3B,SAASC,gBAAgB,EAAEC,mBAAmB,EAAEC,cAAc,QAAQ,wBAAuB;AAC7F,SAASC,UAAU,QAAQ,yBAAwB;AACnD,SAASC,YAAY,QAAQ,qBAAoB;AACjD,YAAYC,SAAS,kBAAiB;AAEtC;;;;;CAKC,GACD,OAAO,eAAeC;IACpB,MAAMC,aAAa,IAAIJ;IAEvB,kCAAkC;IAClC,IAAI;QACF,MAAMK,gBAAgB,MAAMP,oBAAoBM;QAChD,IAAIC,eAAe;YACjB,MAAMC,SAASF,WAAWG,SAAS;YACnCZ,EAAEO,GAAG,CAACM,IAAI,CAACZ,GAAGa,MAAM,CAAC;YACrB,IAAIH,QAAQI,QAAQ;gBAClBR,IAAIS,IAAI,CAAC,CAAC,SAAS,EAAEL,OAAOI,MAAM,EAAE;YACtC;YACAR,IAAIS,IAAI,CAAC,CAAC,eAAe,EAAEf,GAAGgB,GAAG,CAACR,WAAWS,cAAc,KAAK;YAChElB,EAAEmB,IAAI,CAAC,CAAC,8BAA8B,EAAElB,GAAGmB,IAAI,CAAC,6BAA6B,EAAE;YAC/E;QACF;IACF,EAAE,OAAM;QACN,qDAAqD;QACrDb,IAAIc,OAAO,CAAC;IACd;IAEA,mBAAmB;IACnB,MAAMC,qBAAqB;QACzBb;IACF;AACF;AAEA;;CAEC,GACD,eAAea,qBAAqB,EAAEb,UAAU,EAA8B;IAC5E,IAAI;QACF,qBAAqB;QACrB,MAAMc,SAAS,MAAMrB,iBAAiBO,YAAY;YAChDe,UAAUlB,aAAakB,QAAQ;YAC/BC,aAAanB,aAAamB,WAAW;YACrCC,QAAQpB,aAAaoB,MAAM;QAC7B;QAEA1B,EAAEO,GAAG,CAACoB,OAAO,CAAC1B,GAAG2B,KAAK,CAAC;QAEvB,IAAIL,OAAOR,MAAM,EAAE;YACjBR,IAAIsB,KAAK,CAAC,CAAC,SAAS,EAAEN,OAAOR,MAAM,EAAE;QACvC;QAEAR,IAAIsB,KAAK,CAAC,CAAC,eAAe,EAAE5B,GAAGgB,GAAG,CAACR,WAAWS,cAAc,KAAK;QAEjE,kBAAkB;QAClBlB,EAAEmB,IAAI,CAAC,CAAC,EAAE,EAAElB,GAAGmB,IAAI,CAAC,0BAA0B,2BAA2B,CAAC,EAAE;IAC9E,EAAE,OAAOU,OAAO;QACd,IAAIA,iBAAiB1B,gBAAgB;YACnCG,IAAIuB,KAAK,CAACA,MAAMC,OAAO;YAEvB,IAAID,MAAME,KAAK,EAAE;gBACfzB,IAAIsB,KAAK,CAAC,CAAC,OAAO,EAAEC,MAAME,KAAK,CAACD,OAAO,EAAE;YAC3C;QACF,OAAO;YACLxB,IAAIuB,KAAK,CAACA,iBAAiBG,QAAQH,MAAMC,OAAO,GAAG;QACrD;QAEAG,QAAQC,IAAI,CAAC;IACf;AACF"}

package/dist/commands/logout.d.ts

@@ -2,16 +2,15 @@
  * Options for logout command
  */
 export interface LogoutCommandOptions {
-    /** Logout from all environments */
-    all?: boolean;
     /** Enable debug mode */
     debug?: boolean;
 }
 /**
  * Handle the `@payloadcms/figma logout` command
  *
- * Clears stored tokens (OAuth and project tokens) after confirmation.
- * By default clears only current environment. Use --all for all environments.
+ * Clears all stored tokens (OAuth and project tokens) after confirmation.
+ *
+ * @param _options - Command options (unused)
  */
-export declare function logoutCommand(options?: LogoutCommandOptions): Promise<void>;
+export declare function logoutCommand(_options?: LogoutCommandOptions): Promise<void>;
 //# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,mCAAmC;IACnC,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAID;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQrF"}
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,QAAQ,GAAE,oBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCtF"}

package/dist/commands/logout.js

@@ -1,36 +1,24 @@
 import * as p from '@clack/prompts';
 import pc from 'picocolors';
-import { getTokenStore } from '../auth/token-store.js';
-import { getEnvironment } from '../constants.js';
-import { formatEnvSuffix } from '../utils/format-env-suffix.js';
+import { TokenStore } from '../auth/token-store.js';
 import * as log from '../utils/log.js';
-const ALL_ENVIRONMENTS = [
-    'production',
-    'staging'
-];
 /**
  * Handle the `@payloadcms/figma logout` command
  *
- * Clears stored tokens (OAuth and project tokens) after confirmation.
- * By default clears only current environment. Use --all for all environments.
- */ export async function logoutCommand(options = {}) {
-    const currentEnv = getEnvironment();
-    if (options.all) {
-        await logoutAllEnvironments();
-    } else {
-        await logoutSingleEnvironment(currentEnv);
-    }
-}
-async function logoutSingleEnvironment(env) {
-    const tokenStore = getTokenStore(env);
+ * Clears all stored tokens (OAuth and project tokens) after confirmation.
+ *
+ * @param _options - Command options (unused)
+ */ export async function logoutCommand(_options = {}) {
+    const tokenStore = new TokenStore();
     const hasTokens = tokenStore.getTokens() !== null;
     if (!hasTokens) {
-        p.log.warn(pc.yellow(`No tokens found${formatEnvSuffix(env, ' for ')}. Already logged out.`));
+        p.log.warn(pc.yellow('No tokens found. Already logged out.'));
         return;
     }
+    // Confirm logout
     const confirmed = await p.confirm({
         initialValue: false,
-        message: `This will clear all OAuth and project tokens${formatEnvSuffix(env, ' for ')}. Continue?`
+        message: 'This will clear all OAuth and project tokens. Continue?'
     });
     if (p.isCancel(confirmed) || !confirmed) {
         p.log.info('Logout cancelled');
@@ -39,43 +27,12 @@ async function logoutSingleEnvironment(env) {
     const s = p.spinner();
     s.start('Clearing tokens...');
     try {
+        // Clear OAuth tokens
         tokenStore.clearTokens();
+        // Clear all project tokens
         tokenStore.clearAllProjectTokens();
-        s.stop(pc.green(`✓ Logged out${formatEnvSuffix(env, ' from ')}`));
-    } catch (error) {
-        s.stop(pc.red('✗ Failed to clear tokens'));
-        log.error(error instanceof Error ? error.message : 'Unknown error');
-        process.exit(1);
-    }
-}
-async function logoutAllEnvironments() {
-    // Check which environments have tokens
-    const envsWithTokens = ALL_ENVIRONMENTS.filter((env)=>{
-        const store = getTokenStore(env);
-        return store.getTokens() !== null;
-    });
-    if (envsWithTokens.length === 0) {
-        p.log.warn(pc.yellow('No tokens found in any environment. Already logged out.'));
-        return;
-    }
-    const envList = envsWithTokens.join(' and ');
-    const confirmed = await p.confirm({
-        initialValue: false,
-        message: `This will clear all OAuth and project tokens for ${envList}. Continue?`
-    });
-    if (p.isCancel(confirmed) || !confirmed) {
-        p.log.info('Logout cancelled');
-        return;
-    }
-    const s = p.spinner();
-    s.start('Clearing tokens...');
-    try {
-        for (const env of envsWithTokens){
-            const store = getTokenStore(env);
-            store.clearTokens();
-            store.clearAllProjectTokens();
-        }
-        s.stop(pc.green('✓ Logged out from all environments'));
+        s.stop(pc.green('✓ Logged out successfully'));
+        p.log.step('All OAuth and project tokens have been cleared');
     } catch (error) {
         s.stop(pc.red('✗ Failed to clear tokens'));
         log.error(error instanceof Error ? error.message : 'Unknown error');

package/dist/commands/logout.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/commands/logout.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport type { Environment } from '../constants.js'\n\nimport { getTokenStore } from '../auth/token-store.js'\nimport { getEnvironment } from '../constants.js'\nimport { formatEnvSuffix } from '../utils/format-env-suffix.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Options for logout command\n */\nexport interface LogoutCommandOptions {\n  /** Logout from all environments */\n  all?: boolean\n  /** Enable debug mode */\n  debug?: boolean\n}\n\nconst ALL_ENVIRONMENTS: Environment[] = ['production', 'staging']\n\n/**\n * Handle the `@payloadcms/figma logout` command\n *\n * Clears stored tokens (OAuth and project tokens) after confirmation.\n * By default clears only current environment. Use --all for all environments.\n */\nexport async function logoutCommand(options: LogoutCommandOptions = {}): Promise<void> {\n  const currentEnv = getEnvironment()\n\n  if (options.all) {\n    await logoutAllEnvironments()\n  } else {\n    await logoutSingleEnvironment(currentEnv)\n  }\n}\n\nasync function logoutSingleEnvironment(env: Environment): Promise<void> {\n  const tokenStore = getTokenStore(env)\n  const hasTokens = tokenStore.getTokens() !== null\n\n  if (!hasTokens) {\n    p.log.warn(pc.yellow(`No tokens found${formatEnvSuffix(env, ' for ')}. Already logged out.`))\n    return\n  }\n\n  const confirmed = await p.confirm({\n    initialValue: false,\n    message: `This will clear all OAuth and project tokens${formatEnvSuffix(env, ' for ')}. Continue?`,\n  })\n\n  if (p.isCancel(confirmed) || !confirmed) {\n    p.log.info('Logout cancelled')\n    return\n  }\n\n  const s = p.spinner()\n  s.start('Clearing tokens...')\n\n  try {\n    tokenStore.clearTokens()\n    tokenStore.clearAllProjectTokens()\n    s.stop(pc.green(`✓ Logged out${formatEnvSuffix(env, ' from ')}`))\n  } catch (error) {\n    s.stop(pc.red('✗ Failed to clear tokens'))\n    log.error(error instanceof Error ? error.message : 'Unknown error')\n    process.exit(1)\n  }\n}\n\nasync function logoutAllEnvironments(): Promise<void> {\n  // Check which environments have tokens\n  const envsWithTokens = ALL_ENVIRONMENTS.filter((env) => {\n    const store = getTokenStore(env)\n    return store.getTokens() !== null\n  })\n\n  if (envsWithTokens.length === 0) {\n    p.log.warn(pc.yellow('No tokens found in any environment. Already logged out.'))\n    return\n  }\n\n  const envList = envsWithTokens.join(' and ')\n  const confirmed = await p.confirm({\n    initialValue: false,\n    message: `This will clear all OAuth and project tokens for ${envList}. Continue?`,\n  })\n\n  if (p.isCancel(confirmed) || !confirmed) {\n    p.log.info('Logout cancelled')\n    return\n  }\n\n  const s = p.spinner()\n  s.start('Clearing tokens...')\n\n  try {\n    for (const env of envsWithTokens) {\n      const store = getTokenStore(env)\n      store.clearTokens()\n      store.clearAllProjectTokens()\n    }\n    s.stop(pc.green('✓ Logged out from all environments'))\n  } catch (error) {\n    s.stop(pc.red('✗ Failed to clear tokens'))\n    log.error(error instanceof Error ? error.message : 'Unknown error')\n    process.exit(1)\n  }\n}\n"],"names":["p","pc","getTokenStore","getEnvironment","formatEnvSuffix","log","ALL_ENVIRONMENTS","logoutCommand","options","currentEnv","all","logoutAllEnvironments","logoutSingleEnvironment","env","tokenStore","hasTokens","getTokens","warn","yellow","confirmed","confirm","initialValue","message","isCancel","info","s","spinner","start","clearTokens","clearAllProjectTokens","stop","green","error","red","Error","process","exit","envsWithTokens","filter","store","length","envList","join"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAI3B,SAASC,aAAa,QAAQ,yBAAwB;AACtD,SAASC,cAAc,QAAQ,kBAAiB;AAChD,SAASC,eAAe,QAAQ,gCAA+B;AAC/D,YAAYC,SAAS,kBAAiB;AAYtC,MAAMC,mBAAkC;IAAC;IAAc;CAAU;AAEjE;;;;;CAKC,GACD,OAAO,eAAeC,cAAcC,UAAgC,CAAC,CAAC;IACpE,MAAMC,aAAaN;IAEnB,IAAIK,QAAQE,GAAG,EAAE;QACf,MAAMC;IACR,OAAO;QACL,MAAMC,wBAAwBH;IAChC;AACF;AAEA,eAAeG,wBAAwBC,GAAgB;IACrD,MAAMC,aAAaZ,cAAcW;IACjC,MAAME,YAAYD,WAAWE,SAAS,OAAO;IAE7C,IAAI,CAACD,WAAW;QACdf,EAAEK,GAAG,CAACY,IAAI,CAAChB,GAAGiB,MAAM,CAAC,CAAC,eAAe,EAAEd,gBAAgBS,KAAK,SAAS,qBAAqB,CAAC;QAC3F;IACF;IAEA,MAAMM,YAAY,MAAMnB,EAAEoB,OAAO,CAAC;QAChCC,cAAc;QACdC,SAAS,CAAC,4CAA4C,EAAElB,gBAAgBS,KAAK,SAAS,WAAW,CAAC;IACpG;IAEA,IAAIb,EAAEuB,QAAQ,CAACJ,cAAc,CAACA,WAAW;QACvCnB,EAAEK,GAAG,CAACmB,IAAI,CAAC;QACX;IACF;IAEA,MAAMC,IAAIzB,EAAE0B,OAAO;IACnBD,EAAEE,KAAK,CAAC;IAER,IAAI;QACFb,WAAWc,WAAW;QACtBd,WAAWe,qBAAqB;QAChCJ,EAAEK,IAAI,CAAC7B,GAAG8B,KAAK,CAAC,CAAC,YAAY,EAAE3B,gBAAgBS,KAAK,WAAW;IACjE,EAAE,OAAOmB,OAAO;QACdP,EAAEK,IAAI,CAAC7B,GAAGgC,GAAG,CAAC;QACd5B,IAAI2B,KAAK,CAACA,iBAAiBE,QAAQF,MAAMV,OAAO,GAAG;QACnDa,QAAQC,IAAI,CAAC;IACf;AACF;AAEA,eAAezB;IACb,uCAAuC;IACvC,MAAM0B,iBAAiB/B,iBAAiBgC,MAAM,CAAC,CAACzB;QAC9C,MAAM0B,QAAQrC,cAAcW;QAC5B,OAAO0B,MAAMvB,SAAS,OAAO;IAC/B;IAEA,IAAIqB,eAAeG,MAAM,KAAK,GAAG;QAC/BxC,EAAEK,GAAG,CAACY,IAAI,CAAChB,GAAGiB,MAAM,CAAC;QACrB;IACF;IAEA,MAAMuB,UAAUJ,eAAeK,IAAI,CAAC;IACpC,MAAMvB,YAAY,MAAMnB,EAAEoB,OAAO,CAAC;QAChCC,cAAc;QACdC,SAAS,CAAC,iDAAiD,EAAEmB,QAAQ,WAAW,CAAC;IACnF;IAEA,IAAIzC,EAAEuB,QAAQ,CAACJ,cAAc,CAACA,WAAW;QACvCnB,EAAEK,GAAG,CAACmB,IAAI,CAAC;QACX;IACF;IAEA,MAAMC,IAAIzB,EAAE0B,OAAO;IACnBD,EAAEE,KAAK,CAAC;IAER,IAAI;QACF,KAAK,MAAMd,OAAOwB,eAAgB;YAChC,MAAME,QAAQrC,cAAcW;YAC5B0B,MAAMX,WAAW;YACjBW,MAAMV,qBAAqB;QAC7B;QACAJ,EAAEK,IAAI,CAAC7B,GAAG8B,KAAK,CAAC;IAClB,EAAE,OAAOC,OAAO;QACdP,EAAEK,IAAI,CAAC7B,GAAGgC,GAAG,CAAC;QACd5B,IAAI2B,KAAK,CAACA,iBAAiBE,QAAQF,MAAMV,OAAO,GAAG;QACnDa,QAAQC,IAAI,CAAC;IACf;AACF"}
+{"version":3,"sources":["../../src/commands/logout.ts"],"sourcesContent":["import * as p from '@clack/prompts'\nimport pc from 'picocolors'\n\nimport { TokenStore } from '../auth/token-store.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Options for logout command\n */\nexport interface LogoutCommandOptions {\n  /** Enable debug mode */\n  debug?: boolean\n}\n\n/**\n * Handle the `@payloadcms/figma logout` command\n *\n * Clears all stored tokens (OAuth and project tokens) after confirmation.\n *\n * @param _options - Command options (unused)\n */\nexport async function logoutCommand(_options: LogoutCommandOptions = {}): Promise<void> {\n  const tokenStore = new TokenStore()\n\n  const hasTokens = tokenStore.getTokens() !== null\n\n  if (!hasTokens) {\n    p.log.warn(pc.yellow('No tokens found. Already logged out.'))\n    return\n  }\n\n  // Confirm logout\n  const confirmed = await p.confirm({\n    initialValue: false,\n    message: 'This will clear all OAuth and project tokens. Continue?',\n  })\n\n  if (p.isCancel(confirmed) || !confirmed) {\n    p.log.info('Logout cancelled')\n    return\n  }\n\n  const s = p.spinner()\n  s.start('Clearing tokens...')\n\n  try {\n    // Clear OAuth tokens\n    tokenStore.clearTokens()\n    // Clear all project tokens\n    tokenStore.clearAllProjectTokens()\n    s.stop(pc.green('✓ Logged out successfully'))\n    p.log.step('All OAuth and project tokens have been cleared')\n  } catch (error) {\n    s.stop(pc.red('✗ Failed to clear tokens'))\n    log.error(error instanceof Error ? error.message : 'Unknown error')\n    process.exit(1)\n  }\n}\n"],"names":["p","pc","TokenStore","log","logoutCommand","_options","tokenStore","hasTokens","getTokens","warn","yellow","confirmed","confirm","initialValue","message","isCancel","info","s","spinner","start","clearTokens","clearAllProjectTokens","stop","green","step","error","red","Error","process","exit"],"mappings":"AAAA,YAAYA,OAAO,iBAAgB;AACnC,OAAOC,QAAQ,aAAY;AAE3B,SAASC,UAAU,QAAQ,yBAAwB;AACnD,YAAYC,SAAS,kBAAiB;AAUtC;;;;;;CAMC,GACD,OAAO,eAAeC,cAAcC,WAAiC,CAAC,CAAC;IACrE,MAAMC,aAAa,IAAIJ;IAEvB,MAAMK,YAAYD,WAAWE,SAAS,OAAO;IAE7C,IAAI,CAACD,WAAW;QACdP,EAAEG,GAAG,CAACM,IAAI,CAACR,GAAGS,MAAM,CAAC;QACrB;IACF;IAEA,iBAAiB;IACjB,MAAMC,YAAY,MAAMX,EAAEY,OAAO,CAAC;QAChCC,cAAc;QACdC,SAAS;IACX;IAEA,IAAId,EAAEe,QAAQ,CAACJ,cAAc,CAACA,WAAW;QACvCX,EAAEG,GAAG,CAACa,IAAI,CAAC;QACX;IACF;IAEA,MAAMC,IAAIjB,EAAEkB,OAAO;IACnBD,EAAEE,KAAK,CAAC;IAER,IAAI;QACF,qBAAqB;QACrBb,WAAWc,WAAW;QACtB,2BAA2B;QAC3Bd,WAAWe,qBAAqB;QAChCJ,EAAEK,IAAI,CAACrB,GAAGsB,KAAK,CAAC;QAChBvB,EAAEG,GAAG,CAACqB,IAAI,CAAC;IACb,EAAE,OAAOC,OAAO;QACdR,EAAEK,IAAI,CAACrB,GAAGyB,GAAG,CAAC;QACdvB,IAAIsB,KAAK,CAACA,iBAAiBE,QAAQF,MAAMX,OAAO,GAAG;QACnDc,QAAQC,IAAI,CAAC;IACf;AACF"}

package/dist/config/oauth.d.ts

@@ -1,9 +1,19 @@
 import type { OAuthConfig } from '../auth/types.js';
-export declare const DEFAULT_CALLBACK_PORT = 34462;
+export declare const URLS: Record<'prod' | 'staging', Pick<OAuthConfig, 'authorizationUrl' | 'refreshUrl' | 'tokenUrl'>>;
 /**
- * Get OAuth configuration for current environment
- * Uses getEnvironment() to determine staging vs production
+ * Figma OAuth2 configuration for public CLI client
+ *
+ * This is a PUBLIC OAuth client using PKCE (Proof Key for Code Exchange).
+ * No client secret is used because CLIs cannot securely store secrets.
+ * PKCE provides security through the code_verifier/code_challenge mechanism.
+ *
+ * For production use, register a public OAuth app with Figma.
+ * To register an OAuth app, visit: https://www.figma.com/developers/api#oauth2
+ */
+export declare const OAUTH_CONFIG: OAuthConfig;
+/**
+ * Buffer time (in seconds) before token expiration to consider token as expired
+ * This helps avoid using tokens that are about to expire
  */
-export declare function getOAuthConfig(): OAuthConfig;
 export declare const TOKEN_EXPIRY_BUFFER_SECONDS = 300;
 //# sourceMappingURL=oauth.d.ts.map

package/dist/config/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/config/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAInD,eAAO,MAAM,qBAAqB,QAAQ,CAAA;AAE1C;;;GAGG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAa5C;AAED,eAAO,MAAM,2BAA2B,MAAM,CAAA"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/config/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAInD,eAAO,MAAM,IAAI,EAAE,MAAM,CACvB,MAAM,GAAG,SAAS,EAClB,IAAI,CAAC,WAAW,EAAE,kBAAkB,GAAG,YAAY,GAAG,UAAU,CAAC,CAYlE,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,EAAE,WAe1B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAA"}

package/dist/config/oauth.js

@@ -1,22 +1,43 @@
-import { ENV_CONFIG, getEnvironment } from '../constants.js';
-export const DEFAULT_CALLBACK_PORT = 34462;
+import { FIGMA_CLIENT_IDS } from '../constants.js';
+export const URLS = {
+    prod: {
+        authorizationUrl: 'https://www.figma.com/oauth',
+        refreshUrl: 'https://api.figma.com/v1/oauth/refresh',
+        tokenUrl: 'https://api.figma.com/v1/oauth/token'
+    },
+    staging: {
+        authorizationUrl: 'https://staging.figma.com/oauth',
+        refreshUrl: 'https://api.staging.figma.com/v1/oauth/refresh',
+        tokenUrl: 'https://api.staging.figma.com/v1/oauth/token'
+    }
+};
 /**
- * Get OAuth configuration for current environment
- * Uses getEnvironment() to determine staging vs production
- */ export function getOAuthConfig() {
-    const env = getEnvironment();
-    const { apiBaseUrl, authorizationUrl, clientId } = ENV_CONFIG[env];
-    return {
-        authorizationUrl,
-        clientId: process.env.FIGMA_CLIENT_ID || clientId,
-        redirectUri: process.env.FIGMA_REDIRECT_URI || `http://localhost:${DEFAULT_CALLBACK_PORT}/callback`,
-        refreshUrl: `${apiBaseUrl}/v1/oauth/refresh`,
-        scopes: [
-            'current_user:read'
-        ],
-        tokenUrl: `${apiBaseUrl}/v1/oauth/token`
-    };
-}
-export const TOKEN_EXPIRY_BUFFER_SECONDS = 300;
+ * Figma OAuth2 configuration for public CLI client
+ *
+ * This is a PUBLIC OAuth client using PKCE (Proof Key for Code Exchange).
+ * No client secret is used because CLIs cannot securely store secrets.
+ * PKCE provides security through the code_verifier/code_challenge mechanism.
+ *
+ * For production use, register a public OAuth app with Figma.
+ * To register an OAuth app, visit: https://www.figma.com/developers/api#oauth2
+ */ export const OAUTH_CONFIG = {
+    // OAuth client ID (public client)
+    // Uses staging client ID by default since we use staging endpoints
+    clientId: process.env.FIGMA_CLIENT_ID || FIGMA_CLIENT_IDS.staging,
+    // No client secret - this is a public OAuth client using PKCE
+    // Public clients cannot securely store secrets in CLI environments
+    redirectUri: process.env.FIGMA_REDIRECT_URI || 'http://localhost:3000/callback',
+    // Only current_user:read scope is needed for basic user info
+    scopes: [
+        'current_user:read'
+    ],
+    // TODO: Dynamically choose between prod and staging based on environment
+    ...URLS.staging
+};
+/**
+ * Buffer time (in seconds) before token expiration to consider token as expired
+ * This helps avoid using tokens that are about to expire
+ */ export const TOKEN_EXPIRY_BUFFER_SECONDS = 300 // 5 minutes
+;
 
 //# sourceMappingURL=oauth.js.map

package/dist/config/oauth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/config/oauth.ts"],"sourcesContent":["import type { OAuthConfig } from '../auth/types.js'\n\nimport { ENV_CONFIG, getEnvironment } from '../constants.js'\n\nexport const DEFAULT_CALLBACK_PORT = 34462\n\n/**\n * Get OAuth configuration for current environment\n * Uses getEnvironment() to determine staging vs production\n */\nexport function getOAuthConfig(): OAuthConfig {\n  const env = getEnvironment()\n  const { apiBaseUrl, authorizationUrl, clientId } = ENV_CONFIG[env]\n\n  return {\n    authorizationUrl,\n    clientId: process.env.FIGMA_CLIENT_ID || clientId,\n    redirectUri:\n      process.env.FIGMA_REDIRECT_URI || `http://localhost:${DEFAULT_CALLBACK_PORT}/callback`,\n    refreshUrl: `${apiBaseUrl}/v1/oauth/refresh`,\n    scopes: ['current_user:read'],\n    tokenUrl: `${apiBaseUrl}/v1/oauth/token`,\n  }\n}\n\nexport const TOKEN_EXPIRY_BUFFER_SECONDS = 300\n"],"names":["ENV_CONFIG","getEnvironment","DEFAULT_CALLBACK_PORT","getOAuthConfig","env","apiBaseUrl","authorizationUrl","clientId","process","FIGMA_CLIENT_ID","redirectUri","FIGMA_REDIRECT_URI","refreshUrl","scopes","tokenUrl","TOKEN_EXPIRY_BUFFER_SECONDS"],"mappings":"AAEA,SAASA,UAAU,EAAEC,cAAc,QAAQ,kBAAiB;AAE5D,OAAO,MAAMC,wBAAwB,MAAK;AAE1C;;;CAGC,GACD,OAAO,SAASC;IACd,MAAMC,MAAMH;IACZ,MAAM,EAAEI,UAAU,EAAEC,gBAAgB,EAAEC,QAAQ,EAAE,GAAGP,UAAU,CAACI,IAAI;IAElE,OAAO;QACLE;QACAC,UAAUC,QAAQJ,GAAG,CAACK,eAAe,IAAIF;QACzCG,aACEF,QAAQJ,GAAG,CAACO,kBAAkB,IAAI,CAAC,iBAAiB,EAAET,sBAAsB,SAAS,CAAC;QACxFU,YAAY,GAAGP,WAAW,iBAAiB,CAAC;QAC5CQ,QAAQ;YAAC;SAAoB;QAC7BC,UAAU,GAAGT,WAAW,eAAe,CAAC;IAC1C;AACF;AAEA,OAAO,MAAMU,8BAA8B,IAAG"}
+{"version":3,"sources":["../../src/config/oauth.ts"],"sourcesContent":["import type { OAuthConfig } from '../auth/types.js'\n\nimport { FIGMA_CLIENT_IDS } from '../constants.js'\n\nexport const URLS: Record<\n  'prod' | 'staging',\n  Pick<OAuthConfig, 'authorizationUrl' | 'refreshUrl' | 'tokenUrl'>\n> = {\n  prod: {\n    authorizationUrl: 'https://www.figma.com/oauth',\n    refreshUrl: 'https://api.figma.com/v1/oauth/refresh',\n    tokenUrl: 'https://api.figma.com/v1/oauth/token',\n  },\n  staging: {\n    authorizationUrl: 'https://staging.figma.com/oauth',\n    refreshUrl: 'https://api.staging.figma.com/v1/oauth/refresh',\n    tokenUrl: 'https://api.staging.figma.com/v1/oauth/token',\n  },\n}\n\n/**\n * Figma OAuth2 configuration for public CLI client\n *\n * This is a PUBLIC OAuth client using PKCE (Proof Key for Code Exchange).\n * No client secret is used because CLIs cannot securely store secrets.\n * PKCE provides security through the code_verifier/code_challenge mechanism.\n *\n * For production use, register a public OAuth app with Figma.\n * To register an OAuth app, visit: https://www.figma.com/developers/api#oauth2\n */\nexport const OAUTH_CONFIG: OAuthConfig = {\n  // OAuth client ID (public client)\n  // Uses staging client ID by default since we use staging endpoints\n  clientId: process.env.FIGMA_CLIENT_ID || FIGMA_CLIENT_IDS.staging,\n\n  // No client secret - this is a public OAuth client using PKCE\n  // Public clients cannot securely store secrets in CLI environments\n\n  redirectUri: process.env.FIGMA_REDIRECT_URI || 'http://localhost:3000/callback',\n\n  // Only current_user:read scope is needed for basic user info\n  scopes: ['current_user:read'],\n\n  // TODO: Dynamically choose between prod and staging based on environment\n  ...URLS.staging,\n}\n\n/**\n * Buffer time (in seconds) before token expiration to consider token as expired\n * This helps avoid using tokens that are about to expire\n */\nexport const TOKEN_EXPIRY_BUFFER_SECONDS = 300 // 5 minutes\n"],"names":["FIGMA_CLIENT_IDS","URLS","prod","authorizationUrl","refreshUrl","tokenUrl","staging","OAUTH_CONFIG","clientId","process","env","FIGMA_CLIENT_ID","redirectUri","FIGMA_REDIRECT_URI","scopes","TOKEN_EXPIRY_BUFFER_SECONDS"],"mappings":"AAEA,SAASA,gBAAgB,QAAQ,kBAAiB;AAElD,OAAO,MAAMC,OAGT;IACFC,MAAM;QACJC,kBAAkB;QAClBC,YAAY;QACZC,UAAU;IACZ;IACAC,SAAS;QACPH,kBAAkB;QAClBC,YAAY;QACZC,UAAU;IACZ;AACF,EAAC;AAED;;;;;;;;;CASC,GACD,OAAO,MAAME,eAA4B;IACvC,kCAAkC;IAClC,mEAAmE;IACnEC,UAAUC,QAAQC,GAAG,CAACC,eAAe,IAAIX,iBAAiBM,OAAO;IAEjE,8DAA8D;IAC9D,mEAAmE;IAEnEM,aAAaH,QAAQC,GAAG,CAACG,kBAAkB,IAAI;IAE/C,6DAA6D;IAC7DC,QAAQ;QAAC;KAAoB;IAE7B,yEAAyE;IACzE,GAAGb,KAAKK,OAAO;AACjB,EAAC;AAED;;;CAGC,GACD,OAAO,MAAMS,8BAA8B,IAAI,YAAY;CAAb"}

package/dist/constants.d.ts

@@ -1,35 +1,27 @@
+export declare const FIGMA_CLIENT_IDS: {
+    production: string;
+    staging: string;
+};
+export declare const JWKS_URI: {
+    production: string;
+    staging: string;
+};
 /**
  * Figma environment (production or staging)
  */
 export type Environment = 'production' | 'staging';
-type EnvironmentConfig = {
-    /** Figma API base URL. Override: FIGMA_API_BASE_URL */
-    apiBaseUrl: string;
-    /** OAuth authorization URL (CLI auth) */
-    authorizationUrl: string;
-    /** OAuth client ID. Override: FIGMA_CLIENT_ID or FIGMA_OAUTH_CLIENT_ID */
-    clientId: string;
-    /** Content API base URL. Override: FIGMA_CONTENT_API_URL */
-    contentApiUrl: string;
-    /** OIDC discovery endpoint */
-    identityMetadata: string;
-    /** JSON Web Key Set URL for token validation */
-    jwksUri: string;
-};
 /**
- * Environment-specific configuration for Figma integration.
- * Selected via FIGMA_ENV ('production' | 'staging'), defaults to 'production'.
+ * Get current Figma environment from environment variable
+ * Defaults to 'staging' if not specified
+ *
+ * @returns Current environment
  */
-export declare const ENV_CONFIG: Record<Environment, EnvironmentConfig>;
-/**
- * Set environment override (used by --env CLI flag)
- * Pass undefined to clear the override
- */
-export declare function setEnvironment(env: Environment | undefined): void;
+export declare function getEnvironment(): Environment;
 /**
- * Get current Figma environment
- * Priority: 1) setEnvironment override, 2) FIGMA_ENV env var, 3) 'production' default
+ * Get JWKS URI for a given environment
+ *
+ * @param env - Environment (defaults to current environment)
+ * @returns JWKS URI for the environment
  */
-export declare function getEnvironment(): Environment;
-export {};
+export declare function getJWKSUri(env?: Environment): string;
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,SAAS,CAAA;AAElD,KAAK,iBAAiB,GAAG;IACvB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAA;IACxB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAA;IAChB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAA;IACrB,8BAA8B;IAC9B,gBAAgB,EAAE,MAAM,CAAA;IACxB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAiB7D,CAAA;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAEjE;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB;;;CAG5B,CAAA;AAED,eAAO,MAAM,QAAQ;;;CAGpB,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,SAAS,CAAA;AAElD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,GAAG,MAAM,CAGpD"}

package/dist/constants.js

@@ -1,41 +1,27 @@
-/**
- * Figma environment (production or staging)
- */ /**
- * Environment-specific configuration for Figma integration.
- * Selected via FIGMA_ENV ('production' | 'staging'), defaults to 'production'.
- */ export const ENV_CONFIG = {
-    production: {
-        apiBaseUrl: 'https://api.figma.com',
-        authorizationUrl: 'https://www.figma.com/oauth',
-        clientId: 'lelKVTAzOekFnirnlAMbuD',
-        contentApiUrl: 'https://us-east-1.cms-tenants-001-production.figmacontent.com',
-        identityMetadata: 'https://www.figma.com/.well-known/openid-configuration',
-        jwksUri: 'https://static.figmacontent.com/.well_known/jwks.json'
-    },
-    staging: {
-        apiBaseUrl: 'https://api.staging.figma.com',
-        authorizationUrl: 'https://staging.figma.com/oauth',
-        clientId: 'wqAToBAp4UI9AZ5M6wTfT9',
-        contentApiUrl: 'https://us-east-1.cms-tenants-001-staging.figmacontentstaging.com',
-        identityMetadata: 'https://staging.figma.com/.well-known/openid-configuration',
-        jwksUri: 'https://static.figmacontentstaging.com/.well_known/jwks.json'
-    }
+export const FIGMA_CLIENT_IDS = {
+    production: '',
+    staging: 'wqAToBAp4UI9AZ5M6wTfT9'
+};
+export const JWKS_URI = {
+    production: 'https://static.figmacontent.com/.well_known/jwks.json',
+    staging: 'https://static.figmacontentstaging.com/.well_known/jwks.json'
 };
-let envOverride;
 /**
- * Set environment override (used by --env CLI flag)
- * Pass undefined to clear the override
- */ export function setEnvironment(env) {
-    envOverride = env;
+ * Get current Figma environment from environment variable
+ * Defaults to 'staging' if not specified
+ *
+ * @returns Current environment
+ */ export function getEnvironment() {
+    return process.env.FIGMA_ENV === 'production' ? 'production' : 'staging';
 }
 /**
- * Get current Figma environment
- * Priority: 1) setEnvironment override, 2) FIGMA_ENV env var, 3) 'production' default
- */ export function getEnvironment() {
-    if (envOverride) {
-        return envOverride;
-    }
-    return process.env.FIGMA_ENV === 'staging' ? 'staging' : 'production';
+ * Get JWKS URI for a given environment
+ *
+ * @param env - Environment (defaults to current environment)
+ * @returns JWKS URI for the environment
+ */ export function getJWKSUri(env) {
+    const environment = env || getEnvironment();
+    return JWKS_URI[environment];
 }
 
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Figma environment (production or staging)\n */\nexport type Environment = 'production' | 'staging'\n\ntype EnvironmentConfig = {\n  /** Figma API base URL. Override: FIGMA_API_BASE_URL */\n  apiBaseUrl: string\n  /** OAuth authorization URL (CLI auth) */\n  authorizationUrl: string\n  /** OAuth client ID. Override: FIGMA_CLIENT_ID or FIGMA_OAUTH_CLIENT_ID */\n  clientId: string\n  /** Content API base URL. Override: FIGMA_CONTENT_API_URL */\n  contentApiUrl: string\n  /** OIDC discovery endpoint */\n  identityMetadata: string\n  /** JSON Web Key Set URL for token validation */\n  jwksUri: string\n}\n\n/**\n * Environment-specific configuration for Figma integration.\n * Selected via FIGMA_ENV ('production' | 'staging'), defaults to 'production'.\n */\nexport const ENV_CONFIG: Record<Environment, EnvironmentConfig> = {\n  production: {\n    apiBaseUrl: 'https://api.figma.com',\n    authorizationUrl: 'https://www.figma.com/oauth',\n    clientId: 'lelKVTAzOekFnirnlAMbuD',\n    contentApiUrl: 'https://us-east-1.cms-tenants-001-production.figmacontent.com',\n    identityMetadata: 'https://www.figma.com/.well-known/openid-configuration',\n    jwksUri: 'https://static.figmacontent.com/.well_known/jwks.json',\n  },\n  staging: {\n    apiBaseUrl: 'https://api.staging.figma.com',\n    authorizationUrl: 'https://staging.figma.com/oauth',\n    clientId: 'wqAToBAp4UI9AZ5M6wTfT9',\n    contentApiUrl: 'https://us-east-1.cms-tenants-001-staging.figmacontentstaging.com',\n    identityMetadata: 'https://staging.figma.com/.well-known/openid-configuration',\n    jwksUri: 'https://static.figmacontentstaging.com/.well_known/jwks.json',\n  },\n}\n\nlet envOverride: Environment | undefined\n\n/**\n * Set environment override (used by --env CLI flag)\n * Pass undefined to clear the override\n */\nexport function setEnvironment(env: Environment | undefined): void {\n  envOverride = env\n}\n\n/**\n * Get current Figma environment\n * Priority: 1) setEnvironment override, 2) FIGMA_ENV env var, 3) 'production' default\n */\nexport function getEnvironment(): Environment {\n  if (envOverride) {\n    return envOverride\n  }\n  return process.env.FIGMA_ENV === 'staging' ? 'staging' : 'production'\n}\n"],"names":["ENV_CONFIG","production","apiBaseUrl","authorizationUrl","clientId","contentApiUrl","identityMetadata","jwksUri","staging","envOverride","setEnvironment","env","getEnvironment","process","FIGMA_ENV"],"mappings":"AAAA;;CAEC,GAkBD;;;CAGC,GACD,OAAO,MAAMA,aAAqD;IAChEC,YAAY;QACVC,YAAY;QACZC,kBAAkB;QAClBC,UAAU;QACVC,eAAe;QACfC,kBAAkB;QAClBC,SAAS;IACX;IACAC,SAAS;QACPN,YAAY;QACZC,kBAAkB;QAClBC,UAAU;QACVC,eAAe;QACfC,kBAAkB;QAClBC,SAAS;IACX;AACF,EAAC;AAED,IAAIE;AAEJ;;;CAGC,GACD,OAAO,SAASC,eAAeC,GAA4B;IACzDF,cAAcE;AAChB;AAEA;;;CAGC,GACD,OAAO,SAASC;IACd,IAAIH,aAAa;QACf,OAAOA;IACT;IACA,OAAOI,QAAQF,GAAG,CAACG,SAAS,KAAK,YAAY,YAAY;AAC3D"}
+{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["export const FIGMA_CLIENT_IDS = {\n  production: '',\n  staging: 'wqAToBAp4UI9AZ5M6wTfT9', // Hard-coded staging client ID\n}\n\nexport const JWKS_URI = {\n  production: 'https://static.figmacontent.com/.well_known/jwks.json',\n  staging: 'https://static.figmacontentstaging.com/.well_known/jwks.json',\n}\n\n/**\n * Figma environment (production or staging)\n */\nexport type Environment = 'production' | 'staging'\n\n/**\n * Get current Figma environment from environment variable\n * Defaults to 'staging' if not specified\n *\n * @returns Current environment\n */\nexport function getEnvironment(): Environment {\n  return process.env.FIGMA_ENV === 'production' ? 'production' : 'staging'\n}\n\n/**\n * Get JWKS URI for a given environment\n *\n * @param env - Environment (defaults to current environment)\n * @returns JWKS URI for the environment\n */\nexport function getJWKSUri(env?: Environment): string {\n  const environment = env || getEnvironment()\n  return JWKS_URI[environment]\n}\n"],"names":["FIGMA_CLIENT_IDS","production","staging","JWKS_URI","getEnvironment","process","env","FIGMA_ENV","getJWKSUri","environment"],"mappings":"AAAA,OAAO,MAAMA,mBAAmB;IAC9BC,YAAY;IACZC,SAAS;AACX,EAAC;AAED,OAAO,MAAMC,WAAW;IACtBF,YAAY;IACZC,SAAS;AACX,EAAC;AAOD;;;;;CAKC,GACD,OAAO,SAASE;IACd,OAAOC,QAAQC,GAAG,CAACC,SAAS,KAAK,eAAe,eAAe;AACjE;AAEA;;;;;CAKC,GACD,OAAO,SAASC,WAAWF,GAAiB;IAC1C,MAAMG,cAAcH,OAAOF;IAC3B,OAAOD,QAAQ,CAACM,YAAY;AAC9B"}

package/dist/exports/client.d.ts

@@ -1,4 +1,3 @@
 export { DefaultLoginButton } from '../oauth/components/LoginButton/index.js';
 export { LogoutButton } from '../oauth/components/LogoutButton/index.js';
-export { ContentApiClientUploadHandler } from '../storage-content-api/client-uploads/ClientUploadHandler.js';
 //# sourceMappingURL=client.d.ts.map

package/dist/exports/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/exports/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAA;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAA;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8DAA8D,CAAA"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/exports/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAA;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAA"}

package/dist/exports/client.js

@@ -1,5 +1,4 @@
 export { DefaultLoginButton } from '../oauth/components/LoginButton/index.js';
 export { LogoutButton } from '../oauth/components/LogoutButton/index.js';
-export { ContentApiClientUploadHandler } from '../storage-content-api/client-uploads/ClientUploadHandler.js';
 
 //# sourceMappingURL=client.js.map

package/dist/exports/client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/exports/client.ts"],"sourcesContent":["export { DefaultLoginButton } from '../oauth/components/LoginButton/index.js'\nexport { LogoutButton } from '../oauth/components/LogoutButton/index.js'\nexport { ContentApiClientUploadHandler } from '../storage-content-api/client-uploads/ClientUploadHandler.js'\n"],"names":["DefaultLoginButton","LogoutButton","ContentApiClientUploadHandler"],"mappings":"AAAA,SAASA,kBAAkB,QAAQ,2CAA0C;AAC7E,SAASC,YAAY,QAAQ,4CAA2C;AACxE,SAASC,6BAA6B,QAAQ,+DAA8D"}
+{"version":3,"sources":["../../src/exports/client.ts"],"sourcesContent":["export { DefaultLoginButton } from '../oauth/components/LoginButton/index.js'\nexport { LogoutButton } from '../oauth/components/LogoutButton/index.js'\n"],"names":["DefaultLoginButton","LogoutButton"],"mappings":"AAAA,SAASA,kBAAkB,QAAQ,2CAA0C;AAC7E,SAASC,YAAY,QAAQ,4CAA2C"}

package/dist/index.d.ts

@@ -1,6 +1,5 @@
-export { contentAPIAdapter } from './db-content-api/index.js';
 export { figmaContentSystem } from './plugin/adapter.js';
 export type { FigmaContentSystemOptions } from './plugin/adapter.js';
-export { buildFigmaConfig } from './plugin/build-config.js';
+export { buildConfig } from './plugin/build-config.js';
 export type { FigmaConfig } from './plugin/build-config.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAG7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAGpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAGpE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/index.js

@@ -1,8 +1,6 @@
-// Export contentAPIAdapter for testing use cases
-export { contentAPIAdapter } from './db-content-api/index.js';
 // Export database adapter for advanced use cases
 export { figmaContentSystem } from './plugin/adapter.js';
 // Export buildConfig wrapper and its config type
-export { buildFigmaConfig } from './plugin/build-config.js';
+export { buildConfig } from './plugin/build-config.js';
 
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Export contentAPIAdapter for testing use cases\nexport { contentAPIAdapter } from './db-content-api/index.js'\n\n// Export database adapter for advanced use cases\nexport { figmaContentSystem } from './plugin/adapter.js'\nexport type { FigmaContentSystemOptions } from './plugin/adapter.js'\n\n// Export buildConfig wrapper and its config type\nexport { buildFigmaConfig } from './plugin/build-config.js'\nexport type { FigmaConfig } from './plugin/build-config.js'\n"],"names":["contentAPIAdapter","figmaContentSystem","buildFigmaConfig"],"mappings":"AAAA,iDAAiD;AACjD,SAASA,iBAAiB,QAAQ,4BAA2B;AAE7D,iDAAiD;AACjD,SAASC,kBAAkB,QAAQ,sBAAqB;AAGxD,iDAAiD;AACjD,SAASC,gBAAgB,QAAQ,2BAA0B"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// Export database adapter for advanced use cases\nexport { figmaContentSystem } from './plugin/adapter.js'\nexport type { FigmaContentSystemOptions } from './plugin/adapter.js'\n\n// Export buildConfig wrapper and its config type\nexport { buildConfig } from './plugin/build-config.js'\nexport type { FigmaConfig } from './plugin/build-config.js'\n"],"names":["figmaContentSystem","buildConfig"],"mappings":"AAAA,iDAAiD;AACjD,SAASA,kBAAkB,QAAQ,sBAAqB;AAGxD,iDAAiD;AACjD,SAASC,WAAW,QAAQ,2BAA0B"}

package/dist/oauth/components/LoginButton/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/oauth/components/LoginButton/index.tsx"],"names":[],"mappings":"AAIA,OAAO,KAA8B,MAAM,OAAO,CAAA;AAElD,OAAO,cAAc,CAAA;AAgDrB,KAAK,uBAAuB,GAAG;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAqDhE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/oauth/components/LoginButton/index.tsx"],"names":[],"mappings":"AAIA,OAAO,KAA8B,MAAM,OAAO,CAAA;AAElD,OAAO,cAAc,CAAA;AAIrB,KAAK,uBAAuB,GAAG;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAoDhE,CAAA"}