@payloadcms/figma 0.0.1-alpha.6 → 0.0.1-alpha.60

package/dist/utils/project.js

@@ -1,13 +1,15 @@
 /**
  * Project detection and scaffolding utilities
- */ import { spawn } from 'child_process';
+ */ import spawn from 'cross-spawn';
 import fs from 'fs/promises';
 import path from 'path';
+import { fileURLToPath } from 'url';
 import { ensureGitignore } from './config.js';
 import { downloadTemplateFromGitHub } from './download-template.js';
-import { manageEnvFiles } from './env-management.js';
 import { tryInitRepoAndCommit } from './git.js';
 import { applyLambdaModifications } from './lambda-config.js';
+import { getRunCommand } from './package-manager.js';
+import { getOwnVersion } from './version-check.js';
 /**
  * Detect if current directory has a Payload project
  *
@@ -85,26 +87,28 @@ import { applyLambdaModifications } from './lambda-config.js';
  *
  * @param packageJson - Package JSON object to update
  * @param latestVersion - Latest Payload version to use
- */ function replaceWorkspaceVersions(packageJson, latestVersion) {
+ */ function replaceWorkspaceVersions(packageJson, latestVersion, figmaVersion) {
     const deps = packageJson.dependencies;
     if (!deps) {
         return;
     }
     for (const [key, value] of Object.entries(deps)){
-        // Replace workspace:* or workspace:^ with actual version
-        if (typeof value === 'string' && value.startsWith('workspace:')) {
+        if (key === '@payloadcms/figma') {
+            deps[key] = figmaVersion;
+        } else if (typeof value === 'string' && value.startsWith('workspace:')) {
             deps[key] = latestVersion;
         } else if (key === 'payload' || key.startsWith('@payloadcms/')) {
             deps[key] = latestVersion;
         }
     }
-    // Also handle devDependencies if present
     const devDeps = packageJson.devDependencies;
     if (!devDeps) {
         return;
     }
     for (const [key, value] of Object.entries(devDeps)){
-        if (typeof value === 'string' && value.startsWith('workspace:')) {
+        if (key === '@payloadcms/figma') {
+            devDeps[key] = figmaVersion;
+        } else if (typeof value === 'string' && value.startsWith('workspace:')) {
             devDeps[key] = latestVersion;
         } else if (key === 'payload' || key.startsWith('@payloadcms/')) {
             devDeps[key] = latestVersion;
@@ -116,7 +120,7 @@ import { applyLambdaModifications } from './lambda-config.js';
  *
  * @param projectPath - Path where to create the project
  * @param projectName - Name for the project
- */ export async function scaffoldProject(projectPath, projectName) {
+ */ export async function scaffoldProject(projectPath, projectName, packageManager = 'npm') {
     // Create project directory if it doesn't exist
     await fs.mkdir(projectPath, {
         recursive: true
@@ -125,9 +129,12 @@ import { applyLambdaModifications } from './lambda-config.js';
     await downloadTemplateFromGitHub(projectPath);
     // Apply Lambda modifications BEFORE updating package.json
     // This ensures we don't overwrite version replacements
-    await applyLambdaModifications(projectPath);
-    // Get latest Payload version from npm
-    const latestVersion = await getLatestPackageVersion('payload');
+    await applyLambdaModifications(projectPath, packageManager);
+    // Get latest Payload version from npm and CLI's own version
+    const [latestVersion, figmaVersion] = await Promise.all([
+        getLatestPackageVersion('payload'),
+        getOwnVersion()
+    ]);
     // Delete any existing lock files from template (they reference workspace:* versions)
     // This ensures pnpm install creates a fresh lock file with actual versions
     const lockFiles = [
@@ -149,16 +156,24 @@ import { applyLambdaModifications } from './lambda-config.js';
     const packageJson = JSON.parse(packageJsonContent);
     packageJson.name = projectName;
     // Replace workspace:* versions with actual versions
-    replaceWorkspaceVersions(packageJson, latestVersion);
+    replaceWorkspaceVersions(packageJson, latestVersion, figmaVersion);
     await fs.writeFile(packageJsonPath, JSON.stringify(packageJson, null, 2) + '\n', 'utf-8');
-    // Manage environment files (generate PAYLOAD_SECRET)
-    await manageEnvFiles(projectPath);
     // Ensure .gitignore has required entries
+    // Note: .env file is created by init command with FIGMA_CONTENT_API_CONTENT_SYSTEM_ID
     await ensureGitignore(projectPath, [
         '.env',
         '.env.local',
         'lambda.zip'
     ]);
+    // Replace README with Figma-specific version
+    const readmeTemplatePath = fileURLToPath(new URL('../templates/README.md', import.meta.url));
+    let readmeContent = await fs.readFile(readmeTemplatePath, 'utf-8');
+    readmeContent = readmeContent.replace(/\{\{PROJECT_NAME\}\}/g, projectName);
+    readmeContent = readmeContent.replace(/\{\{RUN_COMMAND\}\}/g, getRunCommand(packageManager));
+    await fs.writeFile(path.join(projectPath, 'README.md'), readmeContent, 'utf-8');
+    // Copy .env.example template
+    const envExampleTemplatePath = fileURLToPath(new URL('../templates/.env.example', import.meta.url));
+    await fs.copyFile(envExampleTemplatePath, path.join(projectPath, '.env.example'));
 }
 /**
  * Initialize git repository after all setup is complete
@@ -181,7 +196,6 @@ import { applyLambdaModifications } from './lambda-config.js';
             'install'
         ], {
             cwd: projectPath,
-            shell: true,
             stdio: 'pipe'
         });
         let stdout = '';

package/dist/utils/resolve-environment.d.ts

@@ -0,0 +1,14 @@
+import type { BootstrapEnvironment } from '../api/control-plane.js';
+/**
+ * Resolve which environment to use from the bootstrap response.
+ *
+ * - Single environment: auto-select (environmentName optional, validated if provided)
+ * - Multiple environments: environmentName required, must match
+ *
+ * @throws Error if resolution fails (with available environment names)
+ */
+export declare function resolveEnvironment(params: {
+    environmentName?: string;
+    environments: BootstrapEnvironment[];
+}): BootstrapEnvironment;
+//# sourceMappingURL=resolve-environment.d.ts.map

package/dist/utils/resolve-environment.js

@@ -0,0 +1,31 @@
+/**
+ * Resolve which environment to use from the bootstrap response.
+ *
+ * - Single environment: auto-select (environmentName optional, validated if provided)
+ * - Multiple environments: environmentName required, must match
+ *
+ * @throws Error if resolution fails (with available environment names)
+ */ export function resolveEnvironment(params) {
+    const { environmentName, environments } = params;
+    if (environments.length === 0) {
+        throw new Error('No environments found for this project.');
+    }
+    if (environments.length === 1) {
+        if (environmentName && environments[0].name !== environmentName) {
+            throw new Error(`Environment "${environmentName}" not found. Available: ${environments[0].name}`);
+        }
+        return environments[0];
+    }
+    // Multiple environments — name required
+    const availableNames = environments.map((e)=>e.name).join(', ');
+    if (!environmentName) {
+        throw new Error(`Multiple environments available. Use --env to specify one: ${availableNames}`);
+    }
+    const matched = environments.find((e)=>e.name === environmentName);
+    if (!matched) {
+        throw new Error(`Environment "${environmentName}" not found. Available: ${availableNames}`);
+    }
+    return matched;
+}
+
+//# sourceMappingURL=resolve-environment.js.map

package/dist/utils/s3-upload.d.ts

@@ -18,7 +18,6 @@ export interface UploadResults {
  *
  * @param filePath - Absolute path to file to upload
  * @param signedUrl - Signed S3 upload URL
- * @param contentType - MIME type (optional)
  * @throws Error if upload fails after retries
  */
 export declare function uploadFile(filePath: string, signedUrl: string, contentType?: string): Promise<void>;
@@ -39,5 +38,11 @@ export declare function uploadLambdaZip(zipPath: string, signedUrl: string): Pro
  * @param onProgress - Optional callback for progress updates (uploaded, total)
  * @returns Upload results with counts
  */
-export declare function uploadStaticAssets(projectPath: string, assetUrls: Record<string, string>, onProgress?: (uploaded: number, total: number) => void): Promise<UploadResults>;
+export declare function uploadStaticAssets(params: {
+    assetUrls: Record<string, string>;
+    onProgress?: (uploaded: number, total: number) => void;
+    /** Map of S3 key → relative filesystem path (overrides default _next/ → .next/ resolution) */
+    pathMap?: Record<string, string>;
+    projectPath: string;
+}): Promise<UploadResults>;
 //# sourceMappingURL=s3-upload.d.ts.map

package/dist/utils/s3-upload.js

@@ -11,6 +11,37 @@ const INITIAL_RETRY_DELAY = 1000 // 1 second
  */ function sleep(ms) {
     return new Promise((resolve)=>setTimeout(resolve, ms));
 }
+/** Common MIME types for web assets, keyed by file extension */ const MIME_TYPES = {
+    '.avif': 'image/avif',
+    '.css': 'text/css',
+    '.csv': 'text/csv',
+    '.eot': 'application/vnd.ms-fontobject',
+    '.gif': 'image/gif',
+    '.html': 'text/html',
+    '.ico': 'image/x-icon',
+    '.jpeg': 'image/jpeg',
+    '.jpg': 'image/jpeg',
+    '.js': 'application/javascript',
+    '.json': 'application/json',
+    '.map': 'application/json',
+    '.meta': 'application/json',
+    '.mjs': 'application/javascript',
+    '.mp4': 'video/mp4',
+    '.otf': 'font/otf',
+    '.pdf': 'application/pdf',
+    '.png': 'image/png',
+    '.rsc': 'text/x-component',
+    '.svg': 'image/svg+xml',
+    '.ttf': 'font/ttf',
+    '.txt': 'text/plain',
+    '.wasm': 'application/wasm',
+    '.webm': 'video/webm',
+    '.webp': 'image/webp',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.xml': 'application/xml',
+    '.zip': 'application/zip'
+};
 /**
  * Check if a signed URL is a mock URL
  */ function isMockUrl(signedUrl) {
@@ -23,7 +54,6 @@ const INITIAL_RETRY_DELAY = 1000 // 1 second
  *
  * @param filePath - Absolute path to file to upload
  * @param signedUrl - Signed S3 upload URL
- * @param contentType - MIME type (optional)
  * @throws Error if upload fails after retries
  */ export async function uploadFile(filePath, signedUrl, contentType) {
     // Skip actual upload for mock URLs
@@ -45,10 +75,12 @@ const INITIAL_RETRY_DELAY = 1000 // 1 second
     let lastError = null;
     for(let attempt = 0; attempt < MAX_RETRIES; attempt++){
         try {
+            const ext = path.extname(filePath).toLowerCase();
+            const determinedContentType = contentType ?? MIME_TYPES[ext];
             const response = await fetch(signedUrl, {
                 body: fileBuffer,
-                headers: contentType ? {
-                    'Content-Type': contentType
+                headers: determinedContentType ? {
+                    'Content-Type': determinedContentType
                 } : {},
                 method: 'PUT'
             });
@@ -83,7 +115,8 @@ const INITIAL_RETRY_DELAY = 1000 // 1 second
  * @param assetUrls - Map of asset paths to signed URLs
  * @param onProgress - Optional callback for progress updates (uploaded, total)
  * @returns Upload results with counts
- */ export async function uploadStaticAssets(projectPath, assetUrls, onProgress) {
+ */ export async function uploadStaticAssets(params) {
+    const { assetUrls, onProgress, pathMap, projectPath } = params;
     const results = {
         assetsFailed: 0,
         assetsUploaded: 0,
@@ -100,8 +133,8 @@ const INITIAL_RETRY_DELAY = 1000 // 1 second
         const batch = assetPaths.slice(i, i + CONCURRENCY);
         await Promise.all(batch.map(async (assetPath)=>{
             try {
-                // Convert _next back to .next for file system
-                const fsPath = assetPath.replace(/^_next\//, '.next/');
+                // Resolve filesystem path: use pathMap if available, else default _next/ → .next/
+                const fsPath = pathMap?.[assetPath] ?? assetPath.replace(/^_next\//, '.next/');
                 const fullPath = path.join(projectPath, fsPath);
                 const signedUrl = assetUrls[assetPath];
                 await uploadFile(fullPath, signedUrl);

package/dist/utils/token-display.js

@@ -37,27 +37,33 @@ import { isDebug } from './is-debug.js';
     // Get all tenant IDs that have project tokens
     const tenantIds = tokenStore.getAllProjectTokenTenantIds();
     if (tenantIds.length === 0) {
-        p.log.step(pc.dim('No project tokens stored.'));
-        p.note(`Run ${pc.cyan('@payloadcms/figma init')} to create a CMS instance`, 'Tip');
+        p.note(pc.dim('No project tokens stored.'), `Project Tokens`);
         return;
     }
     const projectTokenLines = [];
-    tenantIds.forEach((tenantId, index)=>{
+    let displayedCount = 0;
+    tenantIds.forEach((tenantId)=>{
         const projectToken = tokenStore.getProjectToken(tenantId);
         if (!projectToken) {
             return;
         }
         const isValid = tokenStore.hasValidProjectToken(tenantId);
         const status = isValid ? pc.green('✓ Valid') : pc.red('✗ Expired');
-        if (index > 0) {
+        if (displayedCount > 0) {
             projectTokenLines.push(''); // Blank line between tokens
         }
         projectTokenLines.push(`Tenant ID:      ${tenantId}`);
         projectTokenLines.push(`Status:         ${status}`);
         projectTokenLines.push(`Token:          ${isDebug() ? projectToken.token : maskToken(projectToken.token)}`);
         projectTokenLines.push(`Expires:        ${formatTimestamp(projectToken.expiresAt)}`);
+        displayedCount++;
     });
-    p.note(projectTokenLines.join('\n'), `Project Tokens (${tenantIds.length})`);
+    // Handle case where all tokens were expired and auto-cleaned
+    if (displayedCount === 0) {
+        p.note(pc.dim('No project tokens stored.'), `Project Tokens`);
+        return;
+    }
+    p.note(projectTokenLines.join('\n'), `Project Tokens (${displayedCount})`);
 }
 
 //# sourceMappingURL=token-display.js.map

package/dist/utils/typescript-validator.js

@@ -1,18 +1,16 @@
-import { spawn } from 'child_process';
+import spawn from 'cross-spawn';
 /**
  * Run TypeScript type checking (tsc --noEmit)
  * Skips silently if TypeScript not available
  */ export async function runTypeScriptCheck(projectPath, packageManager) {
     return new Promise((resolve)=>{
         try {
-            const args = [
+            const child = spawn(packageManager, [
                 'exec',
                 'tsc',
                 '--noEmit'
-            ];
-            const child = spawn(packageManager, args, {
+            ], {
                 cwd: projectPath,
-                shell: true,
                 stdio: 'pipe'
             });
             let output = '';
@@ -52,7 +50,7 @@ import { spawn } from 'child_process';
 /**
  * Parse TypeScript error output
  */ function parseTypeScriptErrors(output) {
-    return output.split('\n').filter((line)=>line.includes('error TS')).map((line)=>line.trim());
+    return output.split(/\r?\n/).filter((line)=>line.includes('error TS')).map((line)=>line.trim());
 }
 
 //# sourceMappingURL=typescript-validator.js.map

package/dist/utils/version-check.d.ts

@@ -0,0 +1,3 @@
+export declare function checkForUpdates(currentVersion: string): Promise<void>;
+export declare function getOwnVersion(): Promise<string>;
+//# sourceMappingURL=version-check.d.ts.map

package/dist/utils/version-check.js

@@ -0,0 +1,38 @@
+import * as p from '@clack/prompts';
+import fs from 'fs/promises';
+import path from 'path';
+import pc from 'picocolors';
+import { fileURLToPath } from 'url';
+const REGISTRY_URL = 'https://registry.npmjs.org/@payloadcms/figma';
+const TIMEOUT_MS = 3000;
+export async function checkForUpdates(currentVersion) {
+    try {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(()=>controller.abort(), TIMEOUT_MS);
+        const response = await fetch(REGISTRY_URL, {
+            signal: controller.signal
+        });
+        clearTimeout(timeoutId);
+        if (!response.ok) {
+            return;
+        }
+        const data = await response.json();
+        const latestVersion = data['dist-tags']?.latest;
+        if (!latestVersion || latestVersion === currentVersion) {
+            return;
+        }
+        p.log.warn(pc.yellow(`@payloadcms/figma ${currentVersion} is outdated. Latest: ${latestVersion}`));
+        p.log.message(pc.dim(`  Run: npx @payloadcms/figma@${latestVersion} init --id <your-id>`));
+    } catch  {
+    // Silent catch - network errors, timeouts, parse errors should not interrupt CLI
+    }
+}
+export async function getOwnVersion() {
+    const __dirname = path.dirname(fileURLToPath(import.meta.url));
+    const packageJsonPath = path.join(__dirname, '../../package.json');
+    const content = await fs.readFile(packageJsonPath, 'utf-8');
+    const pkg = JSON.parse(content);
+    return pkg.version;
+}
+
+//# sourceMappingURL=version-check.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/figma",
-  "version": "0.0.1-alpha.6",
+  "version": "0.0.1-alpha.60",
   "license": "SEE LICENSE IN LICENSE.md",
   "type": "module",
   "exports": {
@@ -23,49 +23,67 @@
   "files": [
     "package.json",
     "dist",
-    "bin"
+    "bin",
+    "!dist/**/*.map"
   ],
   "dependencies": {
     "@clack/prompts": "^0.11.0",
     "@figma/rest-api-spec": "^0.34.0",
     "@sindresorhus/slugify": "^3.0.0",
+    "archiver": "7.0.1",
     "arg": "^5.0.2",
     "conf": "^13.0.1",
-    "esprima-next": "^6.0.2",
+    "cross-spawn": "7.0.6",
     "figures": "^6.1.0",
     "jose": "6.0.12",
-    "jsonwebtoken": "9.0.2",
+    "jsonwebtoken": "9.0.3",
     "open": "^10.1.0",
+    "openapi-fetch": "0.15.0",
     "picocolors": "1.1.1",
     "tar": "^7.4.3",
     "terminal-link": "^5.0.0",
-    "ts-morph": "^21.0.0"
+    "ts-morph": "^21.0.0",
+    "uuid": "^10.0.0"
   },
   "devDependencies": {
+    "@types/archiver": "7.0.0",
+    "@types/cross-spawn": "6.0.6",
     "@types/node": "22.12.0",
+    "openapi-typescript": "^7.10.1",
     "tsx": "4.20.6",
     "typescript": "5.9.3",
-    "vitest": "3.2.4"
+    "vitest": "4.0.15"
   },
   "peerDependencies": {
-    "@payloadcms/richtext-lexical": "^3.54.0",
-    "payload": "^3.54.0"
+    "@payloadcms/plugin-cloud-storage": "^3.0.0",
+    "@payloadcms/richtext-lexical": "^3.0.0",
+    "payload": "^3.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@payloadcms/plugin-cloud-storage": {
+      "optional": true
+    },
+    "@payloadcms/richtext-lexical": {
+      "optional": true
+    }
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"
   },
   "scripts": {
-    "build": "pnpm build:swc && pnpm build:types",
+    "build": "pnpm build:swc && pnpm build:types && pnpm copyfiles",
     "build:swc": "swc ./src -d ./dist --config-file .swcrc --strip-leading-paths",
-    "build:types": "tsc",
+    "build:types": "tsc --project tsconfig.build.json",
     "clean": "rimraf -g \"{dist,*.tsbuildinfo,package}\"",
-    "copyfiles": "copyfiles -u 1 \"src/**/*.{html,css,scss,ttf,woff,woff2,eot,svg,jpg,png}\" dist/",
+    "copyfiles": "copyfiles -u 1 \"src/**/*.{html,css,scss,ttf,woff,woff2,eot,svg,jpg,png,md}\" \"src/**/.env.example\" dist/",
     "debug:clear-tokens": "tsx scripts/clear-tokens.ts",
     "debug:expire-token": "tsx scripts/expire-token.ts",
+    "debug:get-project-token": "tsx scripts/get-project-token.ts",
     "debug:jwks": "tsx scripts/test-jwks-validation.ts",
     "debug:refresh-token": "tsx scripts/refresh-token.ts",
     "debug:tokens": "tsx scripts/debug-tokens.ts",
     "debug:write-token": "tsx scripts/write-token.ts",
+    "generate:types": "tsx scripts/generate-types.ts",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "start": "pnpm build && node ./bin/cli.js",

package/dist/api/control-plane.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../src/api/control-plane.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAoBhD;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAGjC,UAAU,CAAC,EAAE,MAAM;IACnB,KAAK,CAAC,EAAE,KAAK;gBAFpB,OAAO,EAAE,MAAM,EACR,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,KAAK,CAAC,EAAE,KAAK,YAAA;CAKvB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2BAA2B;IAC3B,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,WAAW,CAAA;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,uDAAuD;IACvD,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAA;IACrB,2BAA2B;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,+DAA+D;IAC/D,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9C;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,OAAO,CAAA;IACd,IAAI,EAAE;QACJ,eAAe,EAAE,MAAM,CAAA;QACvB,aAAa,EAAE,MAAM,CAAA;QACrB,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KACjD,CAAA;IACD,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAA;IACpB,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,OAAO,CAAA;IACd,IAAI,EAAE;QACJ,aAAa,EAAE,MAAM,CAAA;QACrB,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;IACD,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyCxE;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAuCjB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgC7F;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,wBAAwB,CAAC,CA0DnC;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAwCpC"}

package/dist/api/control-plane.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/api/control-plane.ts"],"sourcesContent":["/**\n * Control Plane API Client\n *\n * TODO: Replace with real API calls when Control Plane is available\n */\n\nimport type { Tenant } from '../types/config.js'\n\nimport { getEnvironment } from '../constants.js'\nimport * as log from '../utils/log.js'\n\n/**\n * Control Plane API base URLs\n */\nconst CONTROL_PLANE_API_URLS = {\n  production: 'https://api.figma.com',\n  staging: 'https://api.staging.figma.com',\n}\n\n/**\n * Get the Control Plane API base URL based on environment\n */\nfunction getControlPlaneBaseUrl(): string {\n  return process.env.FIGMA_API_BASE_URL || CONTROL_PLANE_API_URLS[getEnvironment()]\n}\n\n/**\n * Error thrown when Control Plane API calls fail\n */\nexport class ControlPlaneError extends Error {\n  constructor(\n    message: string,\n    public statusCode?: number,\n    public cause?: Error,\n  ) {\n    super(message)\n    this.name = 'ControlPlaneError'\n  }\n}\n\n/**\n * Options for creating a new tenant\n */\nexport interface CreateTenantOptions {\n  /** Name for the new CMS instance */\n  name: string\n  /** Optional parent ID */\n  parentId?: string\n  /** Optional parent type */\n  parentType?: 'org' | 'team' | 'workspace'\n}\n\n/**\n * Options for creating a new deployment\n */\nexport interface CreateDeploymentOptions {\n  /** List of static asset paths that need upload URLs */\n  staticAssets: string[]\n}\n\n/**\n * Response from creating a new deployment\n */\nexport interface CreateDeploymentResponse {\n  /** Upload URL for the Lambda function code zip */\n  codeUploadUrl: string\n  /** Unique deployment ID */\n  deploymentId: string\n  /** Map of static asset paths to their signed S3 upload URLs */\n  staticAssetUploadUrls: Record<string, string>\n}\n\nexport interface CreateDeploymentApiResponse {\n  error: boolean\n  meta: {\n    code_upload_url: string\n    deployment_id: string\n    static_asset_upload_urls: Record<string, string>\n  }\n  status: number\n}\n\n/**\n * Options for performing a deployment\n */\nexport interface PerformDeploymentOptions {\n  /** Deployment ID from createDeployment */\n  deploymentId: string\n}\n\n/**\n * Response from performing a deployment\n */\nexport interface PerformDeploymentResponse {\n  /** Deployment ID that was deployed */\n  deploymentId: string\n  /** Status message */\n  message: string\n}\n\nexport interface PerformDeploymentApiResponse {\n  error: boolean\n  meta: {\n    deployment_id: string\n    message: string\n    status: string\n  }\n  status: number\n}\n\n/**\n * List all tenant instances for the authenticated user\n * Maps to: GET /v1/tenant\n *\n * @param accessToken - OAuth access token\n * @returns Array of tenant instances\n */\nexport async function listTenants(accessToken: string): Promise<Tenant[]> {\n  // Check if control plane API should be mocked\n  // Default to true until real API is available\n  const shouldMock = process.env.FIGMA_MOCK_CONTROL_PLANE !== 'false'\n\n  if (shouldMock) {\n    // MOCK IMPLEMENTATION: Return sample tenants for testing\n    log.debug('Using mock Control Plane API for listTenants (FIGMA_MOCK_CONTROL_PLANE != \"false\")')\n    return [\n      {\n        id: 'tenant_abc123',\n        createdAt: '2025-01-15T10:00:00Z',\n        domain: 'my-blog.figmacms.com',\n        parentId: 'team_456',\n        parentType: 'team',\n        status: 'active',\n      },\n      {\n        id: 'tenant_def456',\n        createdAt: '2025-01-10T14:30:00Z',\n        domain: 'my-store.figmacms.com',\n        parentId: 'team_456',\n        parentType: 'team',\n        status: 'active',\n      },\n    ]\n  }\n\n  // REAL API IMPLEMENTATION\n  const response = await fetch(`${getControlPlaneBaseUrl()}/v1/tenant`, {\n    headers: { Authorization: `Bearer ${accessToken}` },\n  })\n\n  if (!response.ok) {\n    throw new ControlPlaneError(\n      `Failed to list tenants: ${response.status} ${response.statusText}`,\n      response.status,\n    )\n  }\n\n  return response.json()\n}\n\n/**\n * Create a new tenant instance\n * Maps to: POST /v1/tenant\n *\n * @param accessToken - OAuth access token\n * @param options - Tenant creation options\n * @returns Newly created tenant\n */\nexport async function createTenant(\n  accessToken: string,\n  options: CreateTenantOptions,\n): Promise<Tenant> {\n  // Check if control plane API should be mocked\n  const shouldMock = process.env.FIGMA_MOCK_CONTROL_PLANE !== 'false'\n\n  if (shouldMock) {\n    // MOCK IMPLEMENTATION: Generate mock tenant for testing\n    log.debug('Using mock Control Plane API for createTenant (FIGMA_MOCK_CONTROL_PLANE != \"false\")')\n    const tenantId = `tenant_${Math.random().toString(36).substring(2, 11)}`\n    const slug = options.name.toLowerCase().replace(/[^a-z0-9]+/g, '-')\n    const domain = `${slug}.figmacms.com`\n\n    return {\n      id: tenantId,\n      createdAt: new Date().toISOString(),\n      domain,\n      parentId: options.parentId || 'team_456',\n      parentType: options.parentType || 'team',\n      status: 'provisioning',\n    }\n  }\n\n  // REAL API IMPLEMENTATION\n  const response = await fetch(`${getControlPlaneBaseUrl()}/v1/tenant`, {\n    body: JSON.stringify({ name: options.name }),\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      'Content-Type': 'application/json',\n    },\n    method: 'POST',\n  })\n\n  if (!response.ok) {\n    throw new ControlPlaneError(\n      `Failed to create tenant: ${response.status} ${response.statusText}`,\n      response.status,\n    )\n  }\n\n  return response.json()\n}\n\n/**\n * Get details for a specific tenant\n * Maps to: GET /v1/tenant/{tenant_id}\n *\n * @param accessToken - OAuth access token\n * @param tenantId - Tenant ID\n * @returns Tenant details\n */\nexport async function getTenantDetails(accessToken: string, tenantId: string): Promise<Tenant> {\n  // Check if control plane API should be mocked\n  const shouldMock = process.env.FIGMA_MOCK_CONTROL_PLANE !== 'false'\n\n  if (shouldMock) {\n    // MOCK IMPLEMENTATION: Return mock tenant details for testing\n    log.debug(\n      'Using mock Control Plane API for getTenantDetails (FIGMA_MOCK_CONTROL_PLANE != \"false\")',\n    )\n    return {\n      id: tenantId,\n      createdAt: '2025-01-15T10:00:00Z',\n      domain: 'example.figmacms.com',\n      parentId: 'team_456',\n      parentType: 'team',\n      status: 'active',\n    }\n  }\n\n  // REAL API IMPLEMENTATION\n  const response = await fetch(`${getControlPlaneBaseUrl()}/v1/tenant/${tenantId}`, {\n    headers: { Authorization: `Bearer ${accessToken}` },\n  })\n\n  if (!response.ok) {\n    throw new ControlPlaneError(\n      `Failed to get tenant details: ${response.status} ${response.statusText}`,\n      response.status,\n    )\n  }\n\n  return response.json()\n}\n\n/**\n * Create a new deployment and get signed upload URLs\n * Maps to: POST /v1/tenant/{tenant_id}/deploy/create\n *\n * @param accessToken - OAuth access token\n * @param tenantId - Tenant ID\n * @param options - Deployment creation options\n * @returns Deployment ID and upload URLs\n */\nexport async function createDeployment(\n  accessToken: string,\n  tenantId: string,\n  options: CreateDeploymentOptions,\n): Promise<CreateDeploymentResponse> {\n  // Check if control plane API should be mocked\n  const shouldMock = process.env.FIGMA_MOCK_CONTROL_PLANE !== 'false'\n\n  if (shouldMock) {\n    // MOCK IMPLEMENTATION: Generate mock deployment and signed URLs\n    log.debug(\n      'Using mock Control Plane API for createDeployment (FIGMA_MOCK_CONTROL_PLANE != \"false\")',\n    )\n\n    const deploymentId = `deploy_${Math.random().toString(36).substring(2, 11)}`\n    const mockBucket = 'figma-cms-deployments-mock'\n    const mockRegion = 'us-west-2'\n    const mockBaseUrl = `https://${mockBucket}.s3.${mockRegion}.amazonaws.com`\n\n    // Generate mock signed URLs for static assets\n    const staticAssetUploadUrls: Record<string, string> = {}\n    for (const assetPath of options.staticAssets) {\n      const encodedPath = encodeURIComponent(assetPath)\n      staticAssetUploadUrls[assetPath] =\n        `${mockBaseUrl}/${tenantId}/${deploymentId}/static/${encodedPath}?X-Amz-Signature=mock`\n    }\n\n    // Generate mock signed URL for code zip\n    const codeUploadUrl = `${mockBaseUrl}/${tenantId}/${deploymentId}/lambda.zip?X-Amz-Signature=mock`\n\n    return {\n      codeUploadUrl,\n      deploymentId,\n      staticAssetUploadUrls,\n    }\n  }\n\n  // REAL API IMPLEMENTATION\n  const response = await fetch(`${getControlPlaneBaseUrl()}/v1/tenant/${tenantId}/deploy/create`, {\n    body: JSON.stringify({ static_assets: options.staticAssets }),\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      'Content-Type': 'application/json',\n    },\n    method: 'POST',\n  })\n\n  if (!response.ok) {\n    throw new ControlPlaneError(\n      `Failed to create deployment: ${response.status} ${response.statusText}`,\n      response.status,\n    )\n  }\n\n  const data = (await response.json()) as CreateDeploymentApiResponse\n\n  // Map API response format to our interface\n  return {\n    codeUploadUrl: data.meta.code_upload_url,\n    deploymentId: data.meta.deployment_id,\n    staticAssetUploadUrls: data.meta.static_asset_upload_urls,\n  }\n}\n\n/**\n * Perform deployment for a created deployment ID\n * Maps to: POST /v1/tenant/{tenant_id}/deploy/perform\n *\n * @param accessToken - OAuth access token\n * @param tenantId - Tenant ID\n * @param options - Deployment perform options\n * @returns Deployment status and message\n */\nexport async function performDeployment(\n  accessToken: string,\n  tenantId: string,\n  options: PerformDeploymentOptions,\n): Promise<PerformDeploymentResponse> {\n  // Check if control plane API should be mocked\n  const shouldMock = process.env.FIGMA_MOCK_CONTROL_PLANE !== 'false'\n\n  if (shouldMock) {\n    // MOCK IMPLEMENTATION: Return mock deployment status\n    log.debug(\n      'Using mock Control Plane API for performDeployment (FIGMA_MOCK_CONTROL_PLANE != \"false\")',\n    )\n\n    return {\n      deploymentId: options.deploymentId,\n      message: 'Deployment initiated successfully',\n    }\n  }\n\n  // REAL API IMPLEMENTATION\n  const response = await fetch(`${getControlPlaneBaseUrl()}/v1/tenant/${tenantId}/deploy/perform`, {\n    body: JSON.stringify({ deployment_id: options.deploymentId }),\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      'Content-Type': 'application/json',\n    },\n    method: 'POST',\n  })\n\n  if (!response.ok) {\n    throw new ControlPlaneError(\n      `Failed to perform deployment: ${response.status} ${response.statusText}`,\n      response.status,\n    )\n  }\n\n  const data = (await response.json()) as PerformDeploymentApiResponse\n\n  // Map API response to our interface\n  return {\n    deploymentId: data.meta.deployment_id,\n    message: data.meta.message || 'Deployment initiated',\n  }\n}\n"],"names":["getEnvironment","log","CONTROL_PLANE_API_URLS","production","staging","getControlPlaneBaseUrl","process","env","FIGMA_API_BASE_URL","ControlPlaneError","Error","message","statusCode","cause","name","listTenants","accessToken","shouldMock","FIGMA_MOCK_CONTROL_PLANE","debug","id","createdAt","domain","parentId","parentType","status","response","fetch","headers","Authorization","ok","statusText","json","createTenant","options","tenantId","Math","random","toString","substring","slug","toLowerCase","replace","Date","toISOString","body","JSON","stringify","method","getTenantDetails","createDeployment","deploymentId","mockBucket","mockRegion","mockBaseUrl","staticAssetUploadUrls","assetPath","staticAssets","encodedPath","encodeURIComponent","codeUploadUrl","static_assets","data","meta","code_upload_url","deployment_id","static_asset_upload_urls","performDeployment"],"mappings":"AAAA;;;;CAIC,GAID,SAASA,cAAc,QAAQ,kBAAiB;AAChD,YAAYC,SAAS,kBAAiB;AAEtC;;CAEC,GACD,MAAMC,yBAAyB;IAC7BC,YAAY;IACZC,SAAS;AACX;AAEA;;CAEC,GACD,SAASC;IACP,OAAOC,QAAQC,GAAG,CAACC,kBAAkB,IAAIN,sBAAsB,CAACF,iBAAiB;AACnF;AAEA;;CAEC,GACD,OAAO,MAAMS,0BAA0BC;;;IACrC,YACEC,OAAe,EACf,AAAOC,UAAmB,EAC1B,AAAOC,KAAa,CACpB;QACA,KAAK,CAACF,eAHCC,aAAAA,iBACAC,QAAAA;QAGP,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAwEA;;;;;;CAMC,GACD,OAAO,eAAeC,YAAYC,WAAmB;IACnD,8CAA8C;IAC9C,8CAA8C;IAC9C,MAAMC,aAAaX,QAAQC,GAAG,CAACW,wBAAwB,KAAK;IAE5D,IAAID,YAAY;QACd,yDAAyD;QACzDhB,IAAIkB,KAAK,CAAC;QACV,OAAO;YACL;gBACEC,IAAI;gBACJC,WAAW;gBACXC,QAAQ;gBACRC,UAAU;gBACVC,YAAY;gBACZC,QAAQ;YACV;YACA;gBACEL,IAAI;gBACJC,WAAW;gBACXC,QAAQ;gBACRC,UAAU;gBACVC,YAAY;gBACZC,QAAQ;YACV;SACD;IACH;IAEA,0BAA0B;IAC1B,MAAMC,WAAW,MAAMC,MAAM,GAAGtB,yBAAyB,UAAU,CAAC,EAAE;QACpEuB,SAAS;YAAEC,eAAe,CAAC,OAAO,EAAEb,aAAa;QAAC;IACpD;IAEA,IAAI,CAACU,SAASI,EAAE,EAAE;QAChB,MAAM,IAAIrB,kBACR,CAAC,wBAAwB,EAAEiB,SAASD,MAAM,CAAC,CAAC,EAAEC,SAASK,UAAU,EAAE,EACnEL,SAASD,MAAM;IAEnB;IAEA,OAAOC,SAASM,IAAI;AACtB;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeC,aACpBjB,WAAmB,EACnBkB,OAA4B;IAE5B,8CAA8C;IAC9C,MAAMjB,aAAaX,QAAQC,GAAG,CAACW,wBAAwB,KAAK;IAE5D,IAAID,YAAY;QACd,wDAAwD;QACxDhB,IAAIkB,KAAK,CAAC;QACV,MAAMgB,WAAW,CAAC,OAAO,EAAEC,KAAKC,MAAM,GAAGC,QAAQ,CAAC,IAAIC,SAAS,CAAC,GAAG,KAAK;QACxE,MAAMC,OAAON,QAAQpB,IAAI,CAAC2B,WAAW,GAAGC,OAAO,CAAC,eAAe;QAC/D,MAAMpB,SAAS,GAAGkB,KAAK,aAAa,CAAC;QAErC,OAAO;YACLpB,IAAIe;YACJd,WAAW,IAAIsB,OAAOC,WAAW;YACjCtB;YACAC,UAAUW,QAAQX,QAAQ,IAAI;YAC9BC,YAAYU,QAAQV,UAAU,IAAI;YAClCC,QAAQ;QACV;IACF;IAEA,0BAA0B;IAC1B,MAAMC,WAAW,MAAMC,MAAM,GAAGtB,yBAAyB,UAAU,CAAC,EAAE;QACpEwC,MAAMC,KAAKC,SAAS,CAAC;YAAEjC,MAAMoB,QAAQpB,IAAI;QAAC;QAC1Cc,SAAS;YACPC,eAAe,CAAC,OAAO,EAAEb,aAAa;YACtC,gBAAgB;QAClB;QACAgC,QAAQ;IACV;IAEA,IAAI,CAACtB,SAASI,EAAE,EAAE;QAChB,MAAM,IAAIrB,kBACR,CAAC,yBAAyB,EAAEiB,SAASD,MAAM,CAAC,CAAC,EAAEC,SAASK,UAAU,EAAE,EACpEL,SAASD,MAAM;IAEnB;IAEA,OAAOC,SAASM,IAAI;AACtB;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeiB,iBAAiBjC,WAAmB,EAAEmB,QAAgB;IAC1E,8CAA8C;IAC9C,MAAMlB,aAAaX,QAAQC,GAAG,CAACW,wBAAwB,KAAK;IAE5D,IAAID,YAAY;QACd,8DAA8D;QAC9DhB,IAAIkB,KAAK,CACP;QAEF,OAAO;YACLC,IAAIe;YACJd,WAAW;YACXC,QAAQ;YACRC,UAAU;YACVC,YAAY;YACZC,QAAQ;QACV;IACF;IAEA,0BAA0B;IAC1B,MAAMC,WAAW,MAAMC,MAAM,GAAGtB,yBAAyB,WAAW,EAAE8B,UAAU,EAAE;QAChFP,SAAS;YAAEC,eAAe,CAAC,OAAO,EAAEb,aAAa;QAAC;IACpD;IAEA,IAAI,CAACU,SAASI,EAAE,EAAE;QAChB,MAAM,IAAIrB,kBACR,CAAC,8BAA8B,EAAEiB,SAASD,MAAM,CAAC,CAAC,EAAEC,SAASK,UAAU,EAAE,EACzEL,SAASD,MAAM;IAEnB;IAEA,OAAOC,SAASM,IAAI;AACtB;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAekB,iBACpBlC,WAAmB,EACnBmB,QAAgB,EAChBD,OAAgC;IAEhC,8CAA8C;IAC9C,MAAMjB,aAAaX,QAAQC,GAAG,CAACW,wBAAwB,KAAK;IAE5D,IAAID,YAAY;QACd,gEAAgE;QAChEhB,IAAIkB,KAAK,CACP;QAGF,MAAMgC,eAAe,CAAC,OAAO,EAAEf,KAAKC,MAAM,GAAGC,QAAQ,CAAC,IAAIC,SAAS,CAAC,GAAG,KAAK;QAC5E,MAAMa,aAAa;QACnB,MAAMC,aAAa;QACnB,MAAMC,cAAc,CAAC,QAAQ,EAAEF,WAAW,IAAI,EAAEC,WAAW,cAAc,CAAC;QAE1E,8CAA8C;QAC9C,MAAME,wBAAgD,CAAC;QACvD,KAAK,MAAMC,aAAatB,QAAQuB,YAAY,CAAE;YAC5C,MAAMC,cAAcC,mBAAmBH;YACvCD,qBAAqB,CAACC,UAAU,GAC9B,GAAGF,YAAY,CAAC,EAAEnB,SAAS,CAAC,EAAEgB,aAAa,QAAQ,EAAEO,YAAY,qBAAqB,CAAC;QAC3F;QAEA,wCAAwC;QACxC,MAAME,gBAAgB,GAAGN,YAAY,CAAC,EAAEnB,SAAS,CAAC,EAAEgB,aAAa,gCAAgC,CAAC;QAElG,OAAO;YACLS;YACAT;YACAI;QACF;IACF;IAEA,0BAA0B;IAC1B,MAAM7B,WAAW,MAAMC,MAAM,GAAGtB,yBAAyB,WAAW,EAAE8B,SAAS,cAAc,CAAC,EAAE;QAC9FU,MAAMC,KAAKC,SAAS,CAAC;YAAEc,eAAe3B,QAAQuB,YAAY;QAAC;QAC3D7B,SAAS;YACPC,eAAe,CAAC,OAAO,EAAEb,aAAa;YACtC,gBAAgB;QAClB;QACAgC,QAAQ;IACV;IAEA,IAAI,CAACtB,SAASI,EAAE,EAAE;QAChB,MAAM,IAAIrB,kBACR,CAAC,6BAA6B,EAAEiB,SAASD,MAAM,CAAC,CAAC,EAAEC,SAASK,UAAU,EAAE,EACxEL,SAASD,MAAM;IAEnB;IAEA,MAAMqC,OAAQ,MAAMpC,SAASM,IAAI;IAEjC,2CAA2C;IAC3C,OAAO;QACL4B,eAAeE,KAAKC,IAAI,CAACC,eAAe;QACxCb,cAAcW,KAAKC,IAAI,CAACE,aAAa;QACrCV,uBAAuBO,KAAKC,IAAI,CAACG,wBAAwB;IAC3D;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeC,kBACpBnD,WAAmB,EACnBmB,QAAgB,EAChBD,OAAiC;IAEjC,8CAA8C;IAC9C,MAAMjB,aAAaX,QAAQC,GAAG,CAACW,wBAAwB,KAAK;IAE5D,IAAID,YAAY;QACd,qDAAqD;QACrDhB,IAAIkB,KAAK,CACP;QAGF,OAAO;YACLgC,cAAcjB,QAAQiB,YAAY;YAClCxC,SAAS;QACX;IACF;IAEA,0BAA0B;IAC1B,MAAMe,WAAW,MAAMC,MAAM,GAAGtB,yBAAyB,WAAW,EAAE8B,SAAS,eAAe,CAAC,EAAE;QAC/FU,MAAMC,KAAKC,SAAS,CAAC;YAAEkB,eAAe/B,QAAQiB,YAAY;QAAC;QAC3DvB,SAAS;YACPC,eAAe,CAAC,OAAO,EAAEb,aAAa;YACtC,gBAAgB;QAClB;QACAgC,QAAQ;IACV;IAEA,IAAI,CAACtB,SAASI,EAAE,EAAE;QAChB,MAAM,IAAIrB,kBACR,CAAC,8BAA8B,EAAEiB,SAASD,MAAM,CAAC,CAAC,EAAEC,SAASK,UAAU,EAAE,EACzEL,SAASD,MAAM;IAEnB;IAEA,MAAMqC,OAAQ,MAAMpC,SAASM,IAAI;IAEjC,oCAAoC;IACpC,OAAO;QACLmB,cAAcW,KAAKC,IAAI,CAACE,aAAa;QACrCtD,SAASmD,KAAKC,IAAI,CAACpD,OAAO,IAAI;IAChC;AACF"}

package/dist/api/figma-api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"figma-api.d.ts","sourceRoot":"","sources":["../../src/api/figma-api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAwB,MAAM,kBAAkB,CAAA;AAI1E;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,UAAU,CAAC,EAAE,MAAM;IACnB,KAAK,CAAC,EAAE,KAAK;gBAFpB,OAAO,EAAE,MAAM,EACR,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,KAAK,CAAC,EAAE,KAAK,YAAA;CAKvB;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC,CAuFvB"}

package/dist/api/figma-api.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/api/figma-api.ts"],"sourcesContent":["/**\n * Figma API Client\n *\n * Client for Figma REST API (Pixie) endpoints\n * Handles project token generation and other CMS-related API calls\n */\n\nimport type { ProjectToken, ProjectTokenResponse } from '../auth/types.js'\n\nimport * as log from '../utils/log.js'\n\n/**\n * Error thrown when Figma API calls fail\n */\nexport class FigmaApiError extends Error {\n  constructor(\n    message: string,\n    public statusCode?: number,\n    public cause?: Error,\n  ) {\n    super(message)\n    this.name = 'FigmaApiError'\n  }\n}\n\n/**\n * Base URLs for Figma API\n */\nconst API_BASE_URLS = {\n  prod: 'https://api.figma.com',\n  staging: 'https://api.staging.figma.com',\n}\n\n/**\n * Get the Figma API base URL based on environment\n * TODO: Use this once real API endpoints are available\n */\nfunction _getApiBaseUrl(): string {\n  // For now, default to staging to match OAuth config\n  return process.env.FIGMA_API_BASE_URL || API_BASE_URLS.staging\n}\n\n/**\n * Get a project token (JWT) for a specific tenant/CMS\n *\n * This token is used by local Payload instances to authenticate\n * requests to the Content API. The token contains the CMS ID and\n * user identifying information in its claims.\n *\n * Endpoint: GET https://api.figma.com/v1/cms/:id/token/\n *\n * @param accessToken - OAuth access token for authentication\n * @param tenantId - The tenant/CMS ID\n * @returns ProjectToken with JWT and expiry information\n * @throws {FigmaApiError} If the API call fails\n */\nexport async function getProjectToken(\n  accessToken: string,\n  tenantId: string,\n): Promise<ProjectToken> {\n  // Check if project token API should be mocked\n  // Default to true until real API is available\n  const shouldMock = process.env.FIGMA_MOCK_PROJECT_TOKEN !== 'false'\n\n  try {\n    if (shouldMock) {\n      // MOCK IMPLEMENTATION: Generate a mock JWT token for testing\n      log.debug(\n        'Using mock project token API for getProjectToken (FIGMA_MOCK_PROJECT_TOKEN != \"false\")',\n      )\n      const mockToken = createMockJWT(tenantId, 25) // 25 minutes expiry\n\n      // Mock response data\n      const data: ProjectTokenResponse = {\n        meta: {\n          token: mockToken,\n        },\n      }\n\n      if (!data.meta?.token) {\n        throw new FigmaApiError('Invalid response: missing token in meta')\n      }\n\n      // Parse the JWT to extract expiry (it's in the payload)\n      const expiresAt = parseJwtExpiry(data.meta.token)\n\n      return {\n        expiresAt,\n        tenantId,\n        token: data.meta.token,\n      }\n    }\n\n    // REAL API IMPLEMENTATION\n    const baseUrl = _getApiBaseUrl()\n    const url = `${baseUrl}/v1/cms/${tenantId}/token/`\n\n    const response = await fetch(url, {\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n      },\n      method: 'POST',\n    })\n\n    if (!response.ok) {\n      // Handle error responses\n      let errorMessage = `Failed to get project token: ${response.status} ${response.statusText}`\n\n      try {\n        const errorBody = await response.json()\n        if (errorBody.error || errorBody.message) {\n          errorMessage = errorBody.error || errorBody.message\n        }\n      } catch {\n        // Ignore JSON parse errors for error body\n      }\n\n      throw new FigmaApiError(errorMessage, response.status)\n    }\n\n    const data: ProjectTokenResponse = await response.json()\n\n    if (!data.meta?.token) {\n      throw new FigmaApiError('Invalid response: missing token in meta')\n    }\n\n    // Parse the JWT to extract expiry (it's in the payload)\n    const expiresAt = parseJwtExpiry(data.meta.token)\n\n    return {\n      expiresAt,\n      tenantId,\n      token: data.meta.token,\n    }\n  } catch (error) {\n    if (error instanceof FigmaApiError) {\n      throw error\n    }\n\n    // Handle network errors and other unexpected errors\n    throw new FigmaApiError(\n      `Failed to get project token: ${error instanceof Error ? error.message : 'Unknown error'}`,\n      undefined,\n      error instanceof Error ? error : undefined,\n    )\n  }\n}\n\n/**\n * Create a mock JWT token for testing\n * TODO: Remove this when real API is available\n */\nfunction createMockJWT(tenantId: string, expiresInMinutes: number): string {\n  const header = {\n    alg: 'RS256',\n    typ: 'JWT',\n  }\n\n  const now = Math.floor(Date.now() / 1000) // Current time in seconds\n  const exp = now + expiresInMinutes * 60 // Expiry in seconds\n\n  const payload = {\n    aud: tenantId, // Audience claim contains the CMS ID\n    email: 'developer@example.com',\n    exp,\n    iat: now,\n    sub: 'user123',\n  }\n\n  // Base64url encode\n  const encodeBase64Url = (obj: object): string => {\n    return Buffer.from(JSON.stringify(obj))\n      .toString('base64')\n      .replace(/\\+/g, '-')\n      .replace(/\\//g, '_')\n      .replace(/=/g, '')\n  }\n\n  const headerEncoded = encodeBase64Url(header)\n  const payloadEncoded = encodeBase64Url(payload)\n  const signature = 'mock_signature_' + Math.random().toString(36).substring(2, 15)\n\n  return `${headerEncoded}.${payloadEncoded}.${signature}`\n}\n\n/**\n * Parse JWT expiry from token\n * JWTs contain an 'exp' claim in the payload (second part)\n *\n * @param token - JWT token string\n * @returns Unix timestamp in milliseconds when token expires\n * @throws {FigmaApiError} If JWT cannot be parsed\n */\nfunction parseJwtExpiry(token: string): number {\n  try {\n    // JWT format: header.payload.signature\n    const parts = token.split('.')\n    if (parts.length !== 3) {\n      throw new Error('Invalid JWT format')\n    }\n\n    // Decode the payload (second part)\n    const payload = parts[1]\n    // Use atob for base64url decoding (handle padding and URL-safe characters)\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/')\n    const paddedBase64 = base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=')\n\n    const decodedPayload = JSON.parse(Buffer.from(paddedBase64, 'base64').toString('utf-8')) as {\n      exp?: number\n    }\n\n    if (!decodedPayload.exp || typeof decodedPayload.exp !== 'number') {\n      throw new Error('JWT payload missing exp claim')\n    }\n\n    // JWT exp claim is in seconds, convert to milliseconds\n    return decodedPayload.exp * 1000\n  } catch (error) {\n    throw new FigmaApiError(\n      `Failed to parse JWT expiry: ${error instanceof Error ? error.message : 'Unknown error'}`,\n      undefined,\n      error instanceof Error ? error : undefined,\n    )\n  }\n}\n"],"names":["log","FigmaApiError","Error","message","statusCode","cause","name","API_BASE_URLS","prod","staging","_getApiBaseUrl","process","env","FIGMA_API_BASE_URL","getProjectToken","accessToken","tenantId","shouldMock","FIGMA_MOCK_PROJECT_TOKEN","debug","mockToken","createMockJWT","data","meta","token","expiresAt","parseJwtExpiry","baseUrl","url","response","fetch","headers","Authorization","method","ok","errorMessage","status","statusText","errorBody","json","error","undefined","expiresInMinutes","header","alg","typ","now","Math","floor","Date","exp","payload","aud","email","iat","sub","encodeBase64Url","obj","Buffer","from","JSON","stringify","toString","replace","headerEncoded","payloadEncoded","signature","random","substring","parts","split","length","base64","paddedBase64","padEnd","decodedPayload","parse"],"mappings":"AAAA;;;;;CAKC,GAID,YAAYA,SAAS,kBAAiB;AAEtC;;CAEC,GACD,OAAO,MAAMC,sBAAsBC;;;IACjC,YACEC,OAAe,EACf,AAAOC,UAAmB,EAC1B,AAAOC,KAAa,CACpB;QACA,KAAK,CAACF,eAHCC,aAAAA,iBACAC,QAAAA;QAGP,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;CAEC,GACD,MAAMC,gBAAgB;IACpBC,MAAM;IACNC,SAAS;AACX;AAEA;;;CAGC,GACD,SAASC;IACP,oDAAoD;IACpD,OAAOC,QAAQC,GAAG,CAACC,kBAAkB,IAAIN,cAAcE,OAAO;AAChE;AAEA;;;;;;;;;;;;;CAaC,GACD,OAAO,eAAeK,gBACpBC,WAAmB,EACnBC,QAAgB;IAEhB,8CAA8C;IAC9C,8CAA8C;IAC9C,MAAMC,aAAaN,QAAQC,GAAG,CAACM,wBAAwB,KAAK;IAE5D,IAAI;QACF,IAAID,YAAY;YACd,6DAA6D;YAC7DjB,IAAImB,KAAK,CACP;YAEF,MAAMC,YAAYC,cAAcL,UAAU,IAAI,oBAAoB;;YAElE,qBAAqB;YACrB,MAAMM,OAA6B;gBACjCC,MAAM;oBACJC,OAAOJ;gBACT;YACF;YAEA,IAAI,CAACE,KAAKC,IAAI,EAAEC,OAAO;gBACrB,MAAM,IAAIvB,cAAc;YAC1B;YAEA,wDAAwD;YACxD,MAAMwB,YAAYC,eAAeJ,KAAKC,IAAI,CAACC,KAAK;YAEhD,OAAO;gBACLC;gBACAT;gBACAQ,OAAOF,KAAKC,IAAI,CAACC,KAAK;YACxB;QACF;QAEA,0BAA0B;QAC1B,MAAMG,UAAUjB;QAChB,MAAMkB,MAAM,GAAGD,QAAQ,QAAQ,EAAEX,SAAS,OAAO,CAAC;QAElD,MAAMa,WAAW,MAAMC,MAAMF,KAAK;YAChCG,SAAS;gBACPC,eAAe,CAAC,OAAO,EAAEjB,aAAa;YACxC;YACAkB,QAAQ;QACV;QAEA,IAAI,CAACJ,SAASK,EAAE,EAAE;YAChB,yBAAyB;YACzB,IAAIC,eAAe,CAAC,6BAA6B,EAAEN,SAASO,MAAM,CAAC,CAAC,EAAEP,SAASQ,UAAU,EAAE;YAE3F,IAAI;gBACF,MAAMC,YAAY,MAAMT,SAASU,IAAI;gBACrC,IAAID,UAAUE,KAAK,IAAIF,UAAUnC,OAAO,EAAE;oBACxCgC,eAAeG,UAAUE,KAAK,IAAIF,UAAUnC,OAAO;gBACrD;YACF,EAAE,OAAM;YACN,0CAA0C;YAC5C;YAEA,MAAM,IAAIF,cAAckC,cAAcN,SAASO,MAAM;QACvD;QAEA,MAAMd,OAA6B,MAAMO,SAASU,IAAI;QAEtD,IAAI,CAACjB,KAAKC,IAAI,EAAEC,OAAO;YACrB,MAAM,IAAIvB,cAAc;QAC1B;QAEA,wDAAwD;QACxD,MAAMwB,YAAYC,eAAeJ,KAAKC,IAAI,CAACC,KAAK;QAEhD,OAAO;YACLC;YACAT;YACAQ,OAAOF,KAAKC,IAAI,CAACC,KAAK;QACxB;IACF,EAAE,OAAOgB,OAAO;QACd,IAAIA,iBAAiBvC,eAAe;YAClC,MAAMuC;QACR;QAEA,oDAAoD;QACpD,MAAM,IAAIvC,cACR,CAAC,6BAA6B,EAAEuC,iBAAiBtC,QAAQsC,MAAMrC,OAAO,GAAG,iBAAiB,EAC1FsC,WACAD,iBAAiBtC,QAAQsC,QAAQC;IAErC;AACF;AAEA;;;CAGC,GACD,SAASpB,cAAcL,QAAgB,EAAE0B,gBAAwB;IAC/D,MAAMC,SAAS;QACbC,KAAK;QACLC,KAAK;IACP;IAEA,MAAMC,MAAMC,KAAKC,KAAK,CAACC,KAAKH,GAAG,KAAK,MAAM,0BAA0B;;IACpE,MAAMI,MAAMJ,MAAMJ,mBAAmB,GAAG,oBAAoB;;IAE5D,MAAMS,UAAU;QACdC,KAAKpC;QACLqC,OAAO;QACPH;QACAI,KAAKR;QACLS,KAAK;IACP;IAEA,mBAAmB;IACnB,MAAMC,kBAAkB,CAACC;QACvB,OAAOC,OAAOC,IAAI,CAACC,KAAKC,SAAS,CAACJ,MAC/BK,QAAQ,CAAC,UACTC,OAAO,CAAC,OAAO,KACfA,OAAO,CAAC,OAAO,KACfA,OAAO,CAAC,MAAM;IACnB;IAEA,MAAMC,gBAAgBR,gBAAgBb;IACtC,MAAMsB,iBAAiBT,gBAAgBL;IACvC,MAAMe,YAAY,oBAAoBnB,KAAKoB,MAAM,GAAGL,QAAQ,CAAC,IAAIM,SAAS,CAAC,GAAG;IAE9E,OAAO,GAAGJ,cAAc,CAAC,EAAEC,eAAe,CAAC,EAAEC,WAAW;AAC1D;AAEA;;;;;;;CAOC,GACD,SAASxC,eAAeF,KAAa;IACnC,IAAI;QACF,uCAAuC;QACvC,MAAM6C,QAAQ7C,MAAM8C,KAAK,CAAC;QAC1B,IAAID,MAAME,MAAM,KAAK,GAAG;YACtB,MAAM,IAAIrE,MAAM;QAClB;QAEA,mCAAmC;QACnC,MAAMiD,UAAUkB,KAAK,CAAC,EAAE;QACxB,2EAA2E;QAC3E,MAAMG,SAASrB,QAAQY,OAAO,CAAC,MAAM,KAAKA,OAAO,CAAC,MAAM;QACxD,MAAMU,eAAeD,OAAOE,MAAM,CAACF,OAAOD,MAAM,GAAI,AAAC,CAAA,IAAKC,OAAOD,MAAM,GAAG,CAAC,IAAK,GAAI;QAEpF,MAAMI,iBAAiBf,KAAKgB,KAAK,CAAClB,OAAOC,IAAI,CAACc,cAAc,UAAUX,QAAQ,CAAC;QAI/E,IAAI,CAACa,eAAezB,GAAG,IAAI,OAAOyB,eAAezB,GAAG,KAAK,UAAU;YACjE,MAAM,IAAIhD,MAAM;QAClB;QAEA,uDAAuD;QACvD,OAAOyE,eAAezB,GAAG,GAAG;IAC9B,EAAE,OAAOV,OAAO;QACd,MAAM,IAAIvC,cACR,CAAC,4BAA4B,EAAEuC,iBAAiBtC,QAAQsC,MAAMrC,OAAO,GAAG,iBAAiB,EACzFsC,WACAD,iBAAiBtC,QAAQsC,QAAQC;IAErC;AACF"}

package/dist/auth/browser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/auth/browser.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5D;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,gBAAgB,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAYT"}

package/dist/auth/browser.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/auth/browser.ts"],"sourcesContent":["import open from 'open'\n\n/**\n * Error thrown when browser launch fails\n */\nexport class BrowserError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'BrowserError'\n  }\n}\n\n/**\n * Open a URL in the user's default browser\n *\n * Uses the `open` package for cross-platform browser launching\n *\n * @param url - URL to open in browser\n * @throws BrowserError if browser launch fails\n */\nexport async function openBrowser(url: string): Promise<void> {\n  try {\n    await open(url)\n  } catch (error) {\n    throw new BrowserError(\n      `Failed to open browser: ${error instanceof Error ? error.message : 'Unknown error'}`,\n    )\n  }\n}\n\n/**\n * Build OAuth authorization URL with all required parameters\n *\n * @param params - Authorization URL parameters\n * @returns Complete authorization URL\n */\nexport function buildAuthorizationUrl(params: {\n  authorizationUrl: string\n  clientId: string\n  codeChallenge: string\n  codeChallengeMethod: 'S256'\n  redirectUri: string\n  scopes: string[]\n  state: string\n}): string {\n  const url = new URL(params.authorizationUrl)\n\n  url.searchParams.set('client_id', params.clientId)\n  url.searchParams.set('redirect_uri', params.redirectUri)\n  url.searchParams.set('response_type', 'code')\n  url.searchParams.set('scope', params.scopes.join(' '))\n  url.searchParams.set('state', params.state)\n  url.searchParams.set('code_challenge', params.codeChallenge)\n  url.searchParams.set('code_challenge_method', params.codeChallengeMethod)\n\n  return url.toString()\n}\n"],"names":["open","BrowserError","Error","message","name","openBrowser","url","error","buildAuthorizationUrl","params","URL","authorizationUrl","searchParams","set","clientId","redirectUri","scopes","join","state","codeChallenge","codeChallengeMethod","toString"],"mappings":"AAAA,OAAOA,UAAU,OAAM;AAEvB;;CAEC,GACD,OAAO,MAAMC,qBAAqBC;IAChC,YAAYC,OAAe,CAAE;QAC3B,KAAK,CAACA;QACN,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeC,YAAYC,GAAW;IAC3C,IAAI;QACF,MAAMN,KAAKM;IACb,EAAE,OAAOC,OAAO;QACd,MAAM,IAAIN,aACR,CAAC,wBAAwB,EAAEM,iBAAiBL,QAAQK,MAAMJ,OAAO,GAAG,iBAAiB;IAEzF;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASK,sBAAsBC,MAQrC;IACC,MAAMH,MAAM,IAAII,IAAID,OAAOE,gBAAgB;IAE3CL,IAAIM,YAAY,CAACC,GAAG,CAAC,aAAaJ,OAAOK,QAAQ;IACjDR,IAAIM,YAAY,CAACC,GAAG,CAAC,gBAAgBJ,OAAOM,WAAW;IACvDT,IAAIM,YAAY,CAACC,GAAG,CAAC,iBAAiB;IACtCP,IAAIM,YAAY,CAACC,GAAG,CAAC,SAASJ,OAAOO,MAAM,CAACC,IAAI,CAAC;IACjDX,IAAIM,YAAY,CAACC,GAAG,CAAC,SAASJ,OAAOS,KAAK;IAC1CZ,IAAIM,YAAY,CAACC,GAAG,CAAC,kBAAkBJ,OAAOU,aAAa;IAC3Db,IAAIM,YAAY,CAACC,GAAG,CAAC,yBAAyBJ,OAAOW,mBAAmB;IAExE,OAAOd,IAAIe,QAAQ;AACrB"}

package/dist/auth/callback-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"callback-server.d.ts","sourceRoot":"","sources":["../../src/auth/callback-server.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,IAAI,CAAC,EAAE,MAAM;gBADpB,OAAO,EAAE,MAAM,EACR,IAAI,CAAC,EAAE,MAAM,YAAA;CAKvB;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAAC,CAAQ;IAC3B,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,SAAS,CAAQ;gBAEb,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAM/D;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,aAAa,IAAI,MAAM;IAIvB;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ;;;;;;OAMG;IACG,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CA8GtE"}

package/dist/auth/callback-server.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/auth/callback-server.ts"],"sourcesContent":["import { readFileSync } from 'fs'\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from 'http'\nimport path from 'path'\nimport { fileURLToPath } from 'url'\n\nconst filename = fileURLToPath(import.meta.url)\nconst dirname = path.dirname(filename)\n\n/**\n * Result from OAuth callback server\n */\nexport interface CallbackResult {\n  /** Authorization code from OAuth provider */\n  code: string\n  /** State parameter for CSRF verification */\n  state: string\n}\n\n/**\n * Error from OAuth callback\n */\nexport class CallbackError extends Error {\n  constructor(\n    message: string,\n    public code?: string,\n  ) {\n    super(message)\n    this.name = 'CallbackError'\n  }\n}\n\n/**\n * Local HTTP server for handling OAuth callbacks\n *\n * Starts a temporary server on localhost to receive the OAuth authorization code.\n * The server automatically shuts down after receiving the callback or on timeout.\n *\n * Implements dynamic port allocation: tries preferred port first, falls back to\n * OS-assigned port if unavailable.\n */\nexport class CallbackServer {\n  private actualPort?: number\n  private preferredPort: number\n  private server: null | Server = null\n  private timeoutMs: number\n\n  constructor(options: { port?: number; timeoutMs?: number } = {}) {\n    this.preferredPort = options.port || 3000\n    this.timeoutMs = options.timeoutMs || 120000 // 2 minutes default\n    this.server = createServer()\n  }\n\n  /**\n   * Render error page shown in browser when auth fails\n   */\n  private renderErrorPage(error: string, description?: string): string {\n    const template = readFileSync(path.join(dirname, 'pages', 'error.html'), 'utf-8')\n    return template\n      .replace('{{description}}', description || 'An error occurred during authentication.')\n      .replace('{{error}}', error ? `<p>Error: <span class=\"error-code\">${error}</span></p>` : '')\n  }\n\n  /**\n   * Render success page shown in browser after successful auth\n   */\n  private renderSuccessPage(): string {\n    return readFileSync(path.join(dirname, 'pages', 'success.html'), 'utf-8')\n  }\n\n  /**\n   * Get the actual port the server is listening on\n   * @returns Port number (may differ from preferred if that was in use)\n   */\n  getActualPort(): number {\n    return this.actualPort || this.preferredPort\n  }\n\n  /**\n   * Stop the server if running\n   */\n  stop(): void {\n    if (this.server) {\n      this.server.close()\n      this.server = null\n    }\n  }\n\n  /**\n   * Start server and wait for OAuth callback\n   *\n   * @param expectedState - State parameter to verify CSRF protection\n   * @returns Promise resolving to callback result with code and state\n   * @throws CallbackError if callback fails or times out\n   */\n  async waitForCallback(expectedState: string): Promise<CallbackResult> {\n    return new Promise((resolve, reject) => {\n      const cleanup = (handle: NodeJS.Timeout) => {\n        clearTimeout(handle)\n        if (this.server) {\n          this.server.close()\n          this.server = null\n        }\n      }\n\n      // Set timeout for waiting\n      const timeoutHandle = setTimeout(() => {\n        cleanup(timeoutHandle)\n        reject(new CallbackError('OAuth authorization timed out. Please try again.', 'timeout'))\n      }, this.timeoutMs)\n\n      // Create HTTP server\n      this.server = createServer((req: IncomingMessage, res: ServerResponse) => {\n        const url = new URL(req.url || '', `http://localhost:${this.getActualPort()}`)\n\n        // Only handle /callback path\n        if (url.pathname !== '/callback') {\n          res.writeHead(404, { 'Content-Type': 'text/html' })\n          res.end('<html><body><h1>404 Not Found</h1></body></html>')\n          return\n        }\n\n        // Extract code and state from query params\n        const code = url.searchParams.get('code')\n        const state = url.searchParams.get('state')\n        const error = url.searchParams.get('error')\n        const errorDescription = url.searchParams.get('error_description')\n\n        // Handle OAuth errors\n        if (error) {\n          cleanup(timeoutHandle)\n          res.writeHead(400, { 'Content-Type': 'text/html' })\n          res.end(this.renderErrorPage(error, errorDescription || undefined))\n          reject(\n            new CallbackError(\n              `OAuth error: ${error}${errorDescription ? ` - ${errorDescription}` : ''}`,\n              error,\n            ),\n          )\n          return\n        }\n\n        // Validate required parameters\n        if (!code || !state) {\n          cleanup(timeoutHandle)\n          res.writeHead(400, { 'Content-Type': 'text/html' })\n          res.end(this.renderErrorPage('invalid_request', 'Missing code or state parameter'))\n          reject(new CallbackError('Invalid callback: missing code or state', 'invalid_request'))\n          return\n        }\n\n        // Verify state matches (CSRF protection)\n        if (state !== expectedState) {\n          cleanup(timeoutHandle)\n          res.writeHead(400, { 'Content-Type': 'text/html' })\n          res.end(this.renderErrorPage('invalid_state', 'State parameter mismatch'))\n          reject(new CallbackError('State mismatch: possible CSRF attack', 'invalid_state'))\n          return\n        }\n\n        // Success! Send response to browser\n        res.writeHead(200, { 'Content-Type': 'text/html' })\n        res.end(this.renderSuccessPage())\n\n        // Resolve with the callback result\n        cleanup(timeoutHandle)\n        resolve({ code, state })\n      })\n\n      // Try to start server with dynamic port allocation\n      const tryListen = (port: number, isRetry: boolean = false) => {\n        if (!this.server) {\n          reject(new CallbackError('Server instance is not available', 'server_error'))\n          return\n        }\n\n        this.server.listen(port, '127.0.0.1', () => {\n          // Capture the actual port that was assigned\n          const addr = this.server!.address()\n          if (addr && typeof addr === 'object') {\n            this.actualPort = addr.port\n          }\n        })\n\n        // Handle server errors (port in use, etc)\n        this.server.once('error', (err: NodeJS.ErrnoException) => {\n          if (err.code === 'EADDRINUSE' && !isRetry) {\n            // Port in use, try with OS-assigned port (0 = dynamic)\n            this.server!.removeAllListeners()\n            tryListen(0, true)\n          } else {\n            cleanup(timeoutHandle)\n            reject(\n              new CallbackError(\n                `Failed to start callback server: ${err.message}${!isRetry ? ' (tried fallback port)' : ''}`,\n              ),\n            )\n          }\n        })\n      }\n\n      // Start with preferred port\n      tryListen(this.preferredPort)\n    })\n  }\n}\n"],"names":["readFileSync","createServer","path","fileURLToPath","filename","url","dirname","CallbackError","Error","message","code","name","CallbackServer","actualPort","preferredPort","server","timeoutMs","options","port","renderErrorPage","error","description","template","join","replace","renderSuccessPage","getActualPort","stop","close","waitForCallback","expectedState","Promise","resolve","reject","cleanup","handle","clearTimeout","timeoutHandle","setTimeout","req","res","URL","pathname","writeHead","end","searchParams","get","state","errorDescription","undefined","tryListen","isRetry","listen","addr","address","once","err","removeAllListeners"],"mappings":"AAAA,SAASA,YAAY,QAAQ,KAAI;AACjC,SAASC,YAAY,QAAgE,OAAM;AAC3F,OAAOC,UAAU,OAAM;AACvB,SAASC,aAAa,QAAQ,MAAK;AAEnC,MAAMC,WAAWD,cAAc,YAAYE,GAAG;AAC9C,MAAMC,UAAUJ,KAAKI,OAAO,CAACF;AAY7B;;CAEC,GACD,OAAO,MAAMG,sBAAsBC;;IACjC,YACEC,OAAe,EACf,AAAOC,IAAa,CACpB;QACA,KAAK,CAACD,eAFCC,OAAAA;QAGP,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,MAAMC;IACHC,WAAmB;IACnBC,cAAqB;IACrBC,SAAwB,KAAI;IAC5BC,UAAiB;IAEzB,YAAYC,UAAiD,CAAC,CAAC,CAAE;QAC/D,IAAI,CAACH,aAAa,GAAGG,QAAQC,IAAI,IAAI;QACrC,IAAI,CAACF,SAAS,GAAGC,QAAQD,SAAS,IAAI,QAAO,oBAAoB;QACjE,IAAI,CAACD,MAAM,GAAGd;IAChB;IAEA;;GAEC,GACD,AAAQkB,gBAAgBC,KAAa,EAAEC,WAAoB,EAAU;QACnE,MAAMC,WAAWtB,aAAaE,KAAKqB,IAAI,CAACjB,SAAS,SAAS,eAAe;QACzE,OAAOgB,SACJE,OAAO,CAAC,mBAAmBH,eAAe,4CAC1CG,OAAO,CAAC,aAAaJ,QAAQ,CAAC,mCAAmC,EAAEA,MAAM,WAAW,CAAC,GAAG;IAC7F;IAEA;;GAEC,GACD,AAAQK,oBAA4B;QAClC,OAAOzB,aAAaE,KAAKqB,IAAI,CAACjB,SAAS,SAAS,iBAAiB;IACnE;IAEA;;;GAGC,GACDoB,gBAAwB;QACtB,OAAO,IAAI,CAACb,UAAU,IAAI,IAAI,CAACC,aAAa;IAC9C;IAEA;;GAEC,GACDa,OAAa;QACX,IAAI,IAAI,CAACZ,MAAM,EAAE;YACf,IAAI,CAACA,MAAM,CAACa,KAAK;YACjB,IAAI,CAACb,MAAM,GAAG;QAChB;IACF;IAEA;;;;;;GAMC,GACD,MAAMc,gBAAgBC,aAAqB,EAA2B;QACpE,OAAO,IAAIC,QAAQ,CAACC,SAASC;YAC3B,MAAMC,UAAU,CAACC;gBACfC,aAAaD;gBACb,IAAI,IAAI,CAACpB,MAAM,EAAE;oBACf,IAAI,CAACA,MAAM,CAACa,KAAK;oBACjB,IAAI,CAACb,MAAM,GAAG;gBAChB;YACF;YAEA,0BAA0B;YAC1B,MAAMsB,gBAAgBC,WAAW;gBAC/BJ,QAAQG;gBACRJ,OAAO,IAAI1B,cAAc,oDAAoD;YAC/E,GAAG,IAAI,CAACS,SAAS;YAEjB,qBAAqB;YACrB,IAAI,CAACD,MAAM,GAAGd,aAAa,CAACsC,KAAsBC;gBAChD,MAAMnC,MAAM,IAAIoC,IAAIF,IAAIlC,GAAG,IAAI,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAACqB,aAAa,IAAI;gBAE7E,6BAA6B;gBAC7B,IAAIrB,IAAIqC,QAAQ,KAAK,aAAa;oBAChCF,IAAIG,SAAS,CAAC,KAAK;wBAAE,gBAAgB;oBAAY;oBACjDH,IAAII,GAAG,CAAC;oBACR;gBACF;gBAEA,2CAA2C;gBAC3C,MAAMlC,OAAOL,IAAIwC,YAAY,CAACC,GAAG,CAAC;gBAClC,MAAMC,QAAQ1C,IAAIwC,YAAY,CAACC,GAAG,CAAC;gBACnC,MAAM1B,QAAQf,IAAIwC,YAAY,CAACC,GAAG,CAAC;gBACnC,MAAME,mBAAmB3C,IAAIwC,YAAY,CAACC,GAAG,CAAC;gBAE9C,sBAAsB;gBACtB,IAAI1B,OAAO;oBACTc,QAAQG;oBACRG,IAAIG,SAAS,CAAC,KAAK;wBAAE,gBAAgB;oBAAY;oBACjDH,IAAII,GAAG,CAAC,IAAI,CAACzB,eAAe,CAACC,OAAO4B,oBAAoBC;oBACxDhB,OACE,IAAI1B,cACF,CAAC,aAAa,EAAEa,QAAQ4B,mBAAmB,CAAC,GAAG,EAAEA,kBAAkB,GAAG,IAAI,EAC1E5B;oBAGJ;gBACF;gBAEA,+BAA+B;gBAC/B,IAAI,CAACV,QAAQ,CAACqC,OAAO;oBACnBb,QAAQG;oBACRG,IAAIG,SAAS,CAAC,KAAK;wBAAE,gBAAgB;oBAAY;oBACjDH,IAAII,GAAG,CAAC,IAAI,CAACzB,eAAe,CAAC,mBAAmB;oBAChDc,OAAO,IAAI1B,cAAc,2CAA2C;oBACpE;gBACF;gBAEA,yCAAyC;gBACzC,IAAIwC,UAAUjB,eAAe;oBAC3BI,QAAQG;oBACRG,IAAIG,SAAS,CAAC,KAAK;wBAAE,gBAAgB;oBAAY;oBACjDH,IAAII,GAAG,CAAC,IAAI,CAACzB,eAAe,CAAC,iBAAiB;oBAC9Cc,OAAO,IAAI1B,cAAc,wCAAwC;oBACjE;gBACF;gBAEA,oCAAoC;gBACpCiC,IAAIG,SAAS,CAAC,KAAK;oBAAE,gBAAgB;gBAAY;gBACjDH,IAAII,GAAG,CAAC,IAAI,CAACnB,iBAAiB;gBAE9B,mCAAmC;gBACnCS,QAAQG;gBACRL,QAAQ;oBAAEtB;oBAAMqC;gBAAM;YACxB;YAEA,mDAAmD;YACnD,MAAMG,YAAY,CAAChC,MAAciC,UAAmB,KAAK;gBACvD,IAAI,CAAC,IAAI,CAACpC,MAAM,EAAE;oBAChBkB,OAAO,IAAI1B,cAAc,oCAAoC;oBAC7D;gBACF;gBAEA,IAAI,CAACQ,MAAM,CAACqC,MAAM,CAAClC,MAAM,aAAa;oBACpC,4CAA4C;oBAC5C,MAAMmC,OAAO,IAAI,CAACtC,MAAM,CAAEuC,OAAO;oBACjC,IAAID,QAAQ,OAAOA,SAAS,UAAU;wBACpC,IAAI,CAACxC,UAAU,GAAGwC,KAAKnC,IAAI;oBAC7B;gBACF;gBAEA,0CAA0C;gBAC1C,IAAI,CAACH,MAAM,CAACwC,IAAI,CAAC,SAAS,CAACC;oBACzB,IAAIA,IAAI9C,IAAI,KAAK,gBAAgB,CAACyC,SAAS;wBACzC,uDAAuD;wBACvD,IAAI,CAACpC,MAAM,CAAE0C,kBAAkB;wBAC/BP,UAAU,GAAG;oBACf,OAAO;wBACLhB,QAAQG;wBACRJ,OACE,IAAI1B,cACF,CAAC,iCAAiC,EAAEiD,IAAI/C,OAAO,GAAG,CAAC0C,UAAU,2BAA2B,IAAI;oBAGlG;gBACF;YACF;YAEA,4BAA4B;YAC5BD,UAAU,IAAI,CAACpC,aAAa;QAC9B;IACF;AACF"}

package/dist/auth/crypto-utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto-utils.d.ts","sourceRoot":"","sources":["../../src/auth/crypto-utils.ts"],"names":[],"mappings":"AAqEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAe5C"}

package/dist/auth/crypto-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/auth/crypto-utils.ts"],"sourcesContent":["import Conf from 'conf'\nimport crypto from 'crypto'\nimport os from 'os'\n\n// Configuration store for cryptographic salt\nconst cryptoConf = new Conf<{ salt: string }>({\n  configName: 'payloadcms-figma-crypto',\n  projectName: 'payloadcms-figma',\n})\n\n/**\n * Get or generate a random salt for key derivation\n *\n * Generates a cryptographically secure random salt on first run and persists it\n * for future use. This ensures the encryption key is unique per machine and not\n * reproducible even if machine identifiers are known.\n *\n * @returns 32-byte hex string (64 characters)\n */\nfunction getOrCreateSalt(): string {\n  let salt = cryptoConf.get('salt')\n  if (!salt) {\n    // Generate cryptographically secure random salt (32 bytes = 256 bits)\n    salt = crypto.randomBytes(32).toString('hex')\n    cryptoConf.set('salt', salt)\n  }\n  return salt\n}\n\n/**\n * Gather machine-specific entropy sources\n *\n * Collects multiple machine and user identifiers to create a unique input\n * for key derivation. More entropy sources make the key harder to guess.\n *\n * @returns Combined machine identifier string\n * @throws Error if unable to gather sufficient entropy\n */\nfunction gatherMachineEntropy(): string {\n  try {\n    const userInfo = os.userInfo()\n    const networkInterfaces = os.networkInterfaces()\n\n    // Get MAC address from first available network interface (if available)\n    const macAddress = Object.values(networkInterfaces)\n      .flat()\n      .find((iface) => iface && !iface.internal && iface.mac !== '00:00:00:00:00:00')?.mac\n\n    const entropy = [\n      os.hostname(), // Machine hostname\n      os.homedir(), // User home directory path\n      userInfo.username, // OS username\n      os.platform(), // Operating system platform\n      os.arch(), // CPU architecture\n      macAddress, // MAC address (if available)\n    ].filter(Boolean) // Remove any undefined values\n\n    if (entropy.length < 4) {\n      throw new Error('Insufficient machine entropy available')\n    }\n\n    return entropy.join('::')\n  } catch (error) {\n    throw new Error(\n      `Failed to gather machine entropy: ${error instanceof Error ? error.message : 'Unknown error'}`,\n    )\n  }\n}\n\n/**\n * Derive a machine-specific encryption key for token storage\n *\n * Creates a deterministic encryption key using PBKDF2 with machine-specific\n * identifiers and a random salt. This provides stronger security than simple\n * hashing by making brute force attacks computationally expensive.\n *\n * Security model - What this protects against:\n * ✅ Accidental file exposure (cloud backups, shared drives)\n * ✅ Non-technical users reading token files\n * ✅ Brute force attacks (100k PBKDF2 iterations)\n * ✅ Key guessing even with known machine identifiers (random salt)\n *\n * Security model - What this DOES NOT protect against:\n * ❌ Local user compromise (same user can run this function)\n * ❌ Root/admin access attacks\n * ❌ Sophisticated attackers with system access\n *\n * For stronger security, use OS keychain (@napi-rs/keyring) instead.\n * This is a fallback for environments without keychain access.\n *\n * Implementation details:\n * - Uses PBKDF2 with SHA-256 and 100,000 iterations (~500ms-1s)\n * - Combines multiple machine identifiers for entropy\n * - Uses persistent random salt unique to each machine\n * - Produces consistent key for same machine (deterministic)\n * - Tokens are not portable between machines (by design)\n *\n * @returns 64-character hex string (32-byte key) suitable for AES-256 encryption\n * @throws Error if unable to derive key due to missing machine information\n */\nexport function deriveEncryptionKey(): string {\n  const machineId = gatherMachineEntropy()\n  const salt = getOrCreateSalt()\n\n  // PBKDF2 with 100k iterations provides strong security against brute force\n  // while remaining performant for CLI use (~500ms-1s key derivation time)\n  const key = crypto.pbkdf2Sync(\n    machineId, // Password (machine identifiers)\n    salt, // Salt (random, persisted)\n    100000, // Iterations (100k for strong security)\n    32, // Key length (32 bytes = 256 bits for AES-256)\n    'sha256', // Hash algorithm\n  )\n\n  return key.toString('hex')\n}\n"],"names":["Conf","crypto","os","cryptoConf","configName","projectName","getOrCreateSalt","salt","get","randomBytes","toString","set","gatherMachineEntropy","userInfo","networkInterfaces","macAddress","Object","values","flat","find","iface","internal","mac","entropy","hostname","homedir","username","platform","arch","filter","Boolean","length","Error","join","error","message","deriveEncryptionKey","machineId","key","pbkdf2Sync"],"mappings":"AAAA,OAAOA,UAAU,OAAM;AACvB,OAAOC,YAAY,SAAQ;AAC3B,OAAOC,QAAQ,KAAI;AAEnB,6CAA6C;AAC7C,MAAMC,aAAa,IAAIH,KAAuB;IAC5CI,YAAY;IACZC,aAAa;AACf;AAEA;;;;;;;;CAQC,GACD,SAASC;IACP,IAAIC,OAAOJ,WAAWK,GAAG,CAAC;IAC1B,IAAI,CAACD,MAAM;QACT,sEAAsE;QACtEA,OAAON,OAAOQ,WAAW,CAAC,IAAIC,QAAQ,CAAC;QACvCP,WAAWQ,GAAG,CAAC,QAAQJ;IACzB;IACA,OAAOA;AACT;AAEA;;;;;;;;CAQC,GACD,SAASK;IACP,IAAI;QACF,MAAMC,WAAWX,GAAGW,QAAQ;QAC5B,MAAMC,oBAAoBZ,GAAGY,iBAAiB;QAE9C,wEAAwE;QACxE,MAAMC,aAAaC,OAAOC,MAAM,CAACH,mBAC9BI,IAAI,GACJC,IAAI,CAAC,CAACC,QAAUA,SAAS,CAACA,MAAMC,QAAQ,IAAID,MAAME,GAAG,KAAK,sBAAsBA;QAEnF,MAAMC,UAAU;YACdrB,GAAGsB,QAAQ;YACXtB,GAAGuB,OAAO;YACVZ,SAASa,QAAQ;YACjBxB,GAAGyB,QAAQ;YACXzB,GAAG0B,IAAI;YACPb;SACD,CAACc,MAAM,CAACC,SAAS,8BAA8B;;QAEhD,IAAIP,QAAQQ,MAAM,GAAG,GAAG;YACtB,MAAM,IAAIC,MAAM;QAClB;QAEA,OAAOT,QAAQU,IAAI,CAAC;IACtB,EAAE,OAAOC,OAAO;QACd,MAAM,IAAIF,MACR,CAAC,kCAAkC,EAAEE,iBAAiBF,QAAQE,MAAMC,OAAO,GAAG,iBAAiB;IAEnG;AACF;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BC,GACD,OAAO,SAASC;IACd,MAAMC,YAAYzB;IAClB,MAAML,OAAOD;IAEb,2EAA2E;IAC3E,yEAAyE;IACzE,MAAMgC,MAAMrC,OAAOsC,UAAU,CAC3BF,WACA9B,MACA,QACA,IACA;IAGF,OAAO+B,IAAI5B,QAAQ,CAAC;AACtB"}

package/dist/auth/jwt-validator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-validator.d.ts","sourceRoot":"","sources":["../../src/auth/jwt-validator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAI5C;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAGlC,IAAI,EAAE,SAAS,GAAG,mBAAmB,GAAG,aAAa,GAAG,mBAAmB;IAC3E,KAAK,CAAC,EAAE,KAAK;gBAFpB,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,SAAS,GAAG,mBAAmB,GAAG,aAAa,GAAG,mBAAmB,EAC3E,KAAK,CAAC,EAAE,KAAK,YAAA;CAKvB;AAqCD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,YAAY,GAAG,SAAS,GACpC,OAAO,CAAC,UAAU,CAAC,CA8ErB;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAErC"}