@payloadcms/figma 0.0.1-alpha.62 → 0.0.1-alpha.64

package/dist/cli.js

@@ -1,9 +1,11 @@
 import * as p from '@clack/prompts';
 import arg from 'arg';
 import pc from 'picocolors';
+import { bootstrapCommand } from './commands/bootstrap.js';
 import { buildLambdaZipCommand } from './commands/build-lambda-zip.js';
 import { debugCommand } from './commands/debug.js';
 import { deployCommand } from './commands/deploy.js';
+import { dumpTokensCommand } from './commands/dump-tokens.js';
 import { envCommand } from './commands/env.js';
 import { initCommand } from './commands/init.js';
 import { listTokensCommand } from './commands/list-tokens.js';
@@ -41,6 +43,7 @@ class Main {
             '--help': Boolean,
             '--id': String,
             '--infra-env': String,
+            '--json': Boolean,
             '--name': String,
             '--skip-auth': Boolean,
             '--skip-build': Boolean,
@@ -101,11 +104,23 @@ class Main {
                 await debugCommand();
                 process.exit(0);
             }
+            // dump-tokens outputs plain text
+            if (subcommand === 'dump-tokens') {
+                await dumpTokensCommand();
+                process.exit(0);
+            }
             // eslint-disable-next-line no-console
             console.log('\n');
             p.intro(pc.bgCyan(pc.black(' @payloadcms/figma ')));
             // Route to appropriate command handler
             switch(subcommand){
+                case 'bootstrap':
+                    await bootstrapCommand({
+                        id: this.args['--id'],
+                        env: this.args['--env'],
+                        json: this.args['--json']
+                    });
+                    break;
                 case 'build-lambda-zip':
                     await buildLambdaZipCommand();
                     break;

package/dist/commands/bootstrap.d.ts

@@ -0,0 +1,18 @@
+export type BootstrapCommandOptions = {
+    /** Filter to a single environment (e.g. "production", "staging"). */
+    env?: string;
+    /** CMS Resource ID (FIGMA_PROJECT_ID, e.g. cms_…). */
+    id?: string;
+    /** Emit plain JSON instead of a styled note (handy for piping into jq). */
+    json?: boolean;
+};
+/**
+ * Fetch and display bootstrap info for a CMS resource.
+ *
+ * Calls the Control Plane bootstrap endpoint with the current OAuth credential
+ * and prints the resulting environments (`contentSystemId`, `tenantInstanceId`)
+ * plus OAuth client credentials. Useful for grabbing a tenant ID without having
+ * to `init` a project.
+ */
+export declare function bootstrapCommand(options?: BootstrapCommandOptions): Promise<void>;
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/commands/bootstrap.js

@@ -0,0 +1,90 @@
+import * as p from '@clack/prompts';
+import pc from 'picocolors';
+import { ControlPlaneError, getBootstrapInfo } from '../api/control-plane.js';
+import { getValidCredential } from '../auth/oauth-flow.js';
+import { getTokenStore } from '../auth/token-store.js';
+import { getInfraEnvironment } from '../constants.js';
+import { isDebug } from '../utils/is-debug.js';
+import { maskToken } from '../utils/token-display.js';
+/**
+ * Fetch and display bootstrap info for a CMS resource.
+ *
+ * Calls the Control Plane bootstrap endpoint with the current OAuth credential
+ * and prints the resulting environments (`contentSystemId`, `tenantInstanceId`)
+ * plus OAuth client credentials. Useful for grabbing a tenant ID without having
+ * to `init` a project.
+ */ export async function bootstrapCommand(options = {}) {
+    if (!options.id) {
+        p.log.error(pc.red('--id <project-id> is required'));
+        p.note('The CMS Resource ID (FIGMA_PROJECT_ID), e.g. cms_abc123', 'Tip');
+        process.exit(1);
+    }
+    const tokenStore = getTokenStore(getInfraEnvironment());
+    let credential;
+    try {
+        credential = await getValidCredential(tokenStore);
+    } catch (error) {
+        p.log.error(pc.red(`Failed to read stored credentials: ${error instanceof Error ? error.message : 'Unknown error'}`));
+        p.note(`Run ${pc.cyan(`@payloadcms/figma logout --infra-env ${getInfraEnvironment()} -y`)} ` + `then ${pc.cyan(`@payloadcms/figma login --infra-env ${getInfraEnvironment()}`)} and retry.`, 'Re-authenticate');
+        if (isDebug() && error instanceof Error) {
+            // eslint-disable-next-line no-console
+            console.error(error);
+        }
+        process.exit(1);
+    }
+    if (!credential) {
+        p.log.error(pc.red('Not authenticated.'));
+        p.note(`Run ${pc.cyan('@payloadcms/figma login')} first`, 'Tip');
+        process.exit(1);
+    }
+    let info;
+    try {
+        info = await getBootstrapInfo(credential, options.id, options.env);
+    } catch (error) {
+        if (error instanceof ControlPlaneError) {
+            p.log.error(pc.red(`Bootstrap fetch failed: ${error.statusCode} ${error.message}`));
+            if (error.statusCode === 401) {
+                p.note(`Stored credentials for infra env ${pc.bold(getInfraEnvironment())} were rejected.\n` + `Run ${pc.cyan(`@payloadcms/figma logout --infra-env ${getInfraEnvironment()} -y`)} ` + `then ${pc.cyan(`@payloadcms/figma login --infra-env ${getInfraEnvironment()}`)} and retry.`, 'Re-authenticate');
+            } else if (error.statusCode === 404) {
+                p.note(`Resource ${pc.bold(options.id)} was not found in infra env ${pc.bold(getInfraEnvironment())}.\n` + `Try ${pc.cyan('--infra-env staging')} (or production) to target a different infra.`, 'Wrong infra environment?');
+            }
+        } else if (error instanceof Error) {
+            const causeMessage = error.cause instanceof Error ? `: ${error.cause.message}` : '';
+            p.log.error(pc.red(`${error.name}: ${error.message}${causeMessage}`));
+            if (isDebug()) {
+                // eslint-disable-next-line no-console
+                console.error(error);
+            }
+        } else {
+            p.log.error(pc.red('Unknown error'));
+        }
+        process.exit(1);
+    }
+    if (options.json) {
+        const showSecretsInJson = isDebug();
+        const payload = showSecretsInJson ? info : {
+            ...info,
+            oauthCredentials: {
+                ...info.oauthCredentials,
+                oauthClientSecret: maskToken(info.oauthCredentials.oauthClientSecret)
+            }
+        };
+        // eslint-disable-next-line no-console
+        console.log(JSON.stringify(payload, null, 2));
+        return;
+    }
+    const showSecret = isDebug();
+    const lines = [
+        `Project ID:        ${options.id}`,
+        `OAuth Client ID:   ${info.oauthCredentials.oauthClientId}`,
+        `OAuth Client Secret: ${showSecret ? info.oauthCredentials.oauthClientSecret : maskToken(info.oauthCredentials.oauthClientSecret)}`,
+        '',
+        'Environments:'
+    ];
+    for (const env of info.environments){
+        lines.push(`  ${pc.bold(env.name)}`, `    Tenant ID (contentSystemId): ${env.contentSystemId}`, `    Tenant Instance ID:          ${env.tenantInstanceId}`);
+    }
+    p.note(lines.join('\n'), 'Bootstrap Info');
+}
+
+//# sourceMappingURL=bootstrap.js.map

package/dist/commands/debug.js

@@ -36,14 +36,14 @@ function appendSystemSection(lines, env) {
     lines.push('');
 }
 function appendAuthSection(lines, tokenStore, cwd) {
-    const tokens = tokenStore.getTokens();
+    const tokens = tokenStore.getOauthInfo();
     lines.push('Auth:');
     if (!tokens) {
         lines.push('  Status:           Not authenticated');
         lines.push('');
         return;
     }
-    const isValid = tokenStore.hasValidTokens();
+    const isValid = tokenStore.hasValidOauthToken();
     lines.push(`  Status:           ${isValid ? 'Authenticated' : 'Token expired'}`);
     const email = getEmailFromClaims(tokenStore, cwd);
     if (email) {
@@ -62,7 +62,7 @@ function appendTokenStoreDiagnostics(lines, tokenStore) {
     lines.push(`  File:             ${filePath}`);
     lines.push(`  File Exists:      ${fileExists}`);
     lines.push(`  File Size:        ${fileSize}B`);
-    const canRead = tokenStore.getTokens() !== null || tokenStore.getRefreshToken() !== null;
+    const canRead = tokenStore.getOauthInfo() !== null || tokenStore.getCurrentRefreshToken() !== null;
     lines.push(`  Decryption:       ${fileExists ? canRead || fileSize === 0 ? 'OK' : 'FAILED' : 'N/A'}`);
     lines.push(`  Key Hash:         ${getEncryptionKeyHash()}`);
     lines.push('');
@@ -85,7 +85,12 @@ function appendProjectSection(lines, tokenStore, cwd) {
             lines.push(`  Content System ID:  ${bootstrapData.contentSystemId}`);
             lines.push(`  Tenant Instance ID: ${bootstrapData.tenantInstanceId}`);
             lines.push(`  OAuth Client ID:    ${maskToken(bootstrapData.oauthClientId)}`);
-            const projectToken = tokenStore.getProjectToken(bootstrapData.contentSystemId);
+            const projectToken = tokenStore.getProjectToken({
+                projectInfo: {
+                    environmentName,
+                    projectId
+                }
+            });
             if (projectToken) {
                 lines.push(`  Project Token:      ${formatExpiryTime(projectToken.expiresAt)}`);
             }
@@ -103,25 +108,24 @@ async function appendPackagesSection(lines) {
     lines.push(`  payload:            ${payloadVersion}`);
 }
 /**
- * Try resolving email from bootstrap data, then iterate all stored project tokens.
+ * Resolve email from the current project + environment scoped token when available.
  */ function getEmailFromClaims(tokenStore, cwd) {
     const projectId = getEnvVarSync(cwd, 'FIGMA_PROJECT_ID');
     const environmentName = getEnvVarSync(cwd, 'FIGMA_ENVIRONMENT_NAME');
     if (projectId && environmentName) {
         const bootstrapData = tokenStore.getBootstrapData(projectId, environmentName);
         if (bootstrapData) {
-            const email = tokenStore.getProjectTokenClaims(bootstrapData.contentSystemId)?.email;
+            const email = tokenStore.getProjectToken({
+                projectInfo: {
+                    environmentName,
+                    projectId
+                }
+            })?.claims?.email;
             if (email) {
                 return email;
             }
         }
     }
-    for (const id of tokenStore.getAllProjectTokenTenantIds()){
-        const email = tokenStore.getProjectTokenClaims(id)?.email;
-        if (email) {
-            return email;
-        }
-    }
     return null;
 }
 function getPayloadVersion() {

package/dist/commands/dump-tokens.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Handle the `@payloadcms/figma dump-tokens` command
+ *
+ * Exports decrypted versions of encrypted token store files in
+ * `oauth/` and `projects/` subdirectories (new structure) plus any legacy
+ * per-env directories from older package versions. Creates
+ * `.decrypted.json` files next to each encrypted `.json` file.
+ *
+ * Skips the `payloadcms-figma-crypto.json` salt file at the root.
+ */
+export declare function dumpTokensCommand(): Promise<void>;
+//# sourceMappingURL=dump-tokens.d.ts.map

package/dist/commands/dump-tokens.js

@@ -0,0 +1,69 @@
+import * as p from '@clack/prompts';
+import envPaths from 'env-paths';
+import fsSync from 'node:fs';
+import path from 'node:path';
+import pc from 'picocolors';
+import { deriveEncryptionKey, exportDecryptedStoreFiles } from '../auth/crypto-utils.js';
+/**
+ * Handle the `@payloadcms/figma dump-tokens` command
+ *
+ * Exports decrypted versions of encrypted token store files in
+ * `oauth/` and `projects/` subdirectories (new structure) plus any legacy
+ * per-env directories from older package versions. Creates
+ * `.decrypted.json` files next to each encrypted `.json` file.
+ *
+ * Skips the `payloadcms-figma-crypto.json` salt file at the root.
+ */ export async function dumpTokensCommand() {
+    const encryptionKey = deriveEncryptionKey();
+    const newRoot = envPaths('payloadcms-figma').config;
+    const stagingLegacyRoot = envPaths('payloadcms-figma-staging').config;
+    const candidateDirs = [
+        path.join(newRoot, 'oauth'),
+        path.join(newRoot, 'projects'),
+        stagingLegacyRoot
+    ];
+    const targetDirs = Array.from(new Set(candidateDirs)).filter((dir)=>fsSync.existsSync(dir));
+    if (targetDirs.length === 0) {
+        // eslint-disable-next-line no-console
+        console.log('No token store directories found.');
+        return;
+    }
+    // eslint-disable-next-line no-console
+    console.log(pc.yellow('⚠  dump-tokens writes DECRYPTED token files to disk.'));
+    // eslint-disable-next-line no-console
+    console.log('Target directories:');
+    for (const dir of targetDirs){
+        // eslint-disable-next-line no-console
+        console.log(`  ${dir}`);
+    }
+    // eslint-disable-next-line no-console
+    console.log('');
+    const confirmed = await p.confirm({
+        initialValue: false,
+        message: 'Continue? Remember to delete the decrypted files after use.'
+    });
+    if (p.isCancel(confirmed) || !confirmed) {
+        // eslint-disable-next-line no-console
+        console.log('Cancelled.');
+        return;
+    }
+    const decryptedFiles = [];
+    for (const dir of targetDirs){
+        decryptedFiles.push(...exportDecryptedStoreFiles(dir, encryptionKey));
+    }
+    if (decryptedFiles.length === 0) {
+        // eslint-disable-next-line no-console
+        console.log('No encrypted files could be decrypted with the current machine key.');
+        return;
+    }
+    // eslint-disable-next-line no-console
+    console.log(`\nCreated ${decryptedFiles.length} decrypted file(s):`);
+    for (const file of decryptedFiles){
+        // eslint-disable-next-line no-console
+        console.log(`  ${file}`);
+    }
+    // eslint-disable-next-line no-console
+    console.log('\nNote: These files contain sensitive tokens. Delete after use.');
+}
+
+//# sourceMappingURL=dump-tokens.js.map

package/dist/commands/init.js

@@ -29,12 +29,16 @@ import { cacheAllEnvironments } from '../utils/cache-bootstrap.js';
  * @param tokenStore - Token store instance
  * @param contentSystemId - Content System ID to generate token for
  * @param spinner - Clack spinner instance for status updates (only used in debug mode)
- */ async function generateProjectTokenWithFeedback(tokenStore, contentSystemId, spinner) {
+ */ async function generateProjectTokenWithFeedback(tokenStore, contentSystemId, spinner, projectInfo) {
     if (isDebug()) {
         spinner.start('Generating project token...');
     }
     try {
-        const projectToken = await getValidProjectToken(tokenStore, contentSystemId);
+        const projectToken = await getValidProjectToken({
+            projectInfo,
+            tenantId: contentSystemId,
+            tokenStore
+        });
         if (isDebug()) {
             if (projectToken) {
                 spinner.stop(pc.green('✓ Project token generated'));
@@ -78,7 +82,7 @@ import { cacheAllEnvironments } from '../utils/cache-bootstrap.js';
         p.log.warn(pc.yellow('Skipping authentication (--skip-auth mode)'));
     } else {
         // Check for valid cached tokens first (no API call needed)
-        if (!tokenStore.hasValidTokens()) {
+        if (!tokenStore.hasValidOauthToken()) {
             // Need to refresh or authenticate - show spinner for API call
             s.start('Checking authentication...');
             const credential = await tryGetCredential(tokenStore);
@@ -221,6 +225,18 @@ import { cacheAllEnvironments } from '../utils/cache-bootstrap.js';
             p.note('Run this command in a directory without an existing project or in an existing Payload project.', 'Action Required');
             process.exit(1);
         }
+        // npm leaves node_modules in a transient state after a sequence of
+        // add/remove calls; without a final `install` the subprocess that runs
+        // generate:importmap silently misses @payloadcms/figma subpath components.
+        s.start('Reconciling dependencies...');
+        try {
+            await installDependencies(process.cwd(), packageManager);
+            s.stop(pc.green('✓ Dependencies reconciled'));
+        } catch (error) {
+            s.stop(pc.red('✗ Failed to reconcile dependencies before generate:importmap'));
+            log.error(error instanceof Error ? error.message : 'Unknown error');
+            process.exit(1);
+        }
         // Generate import map to prevent errors on first dev run
         const importMapResult = await runScript(process.cwd(), 'generate:importmap', packageManager);
         if (!importMapResult) {
@@ -236,7 +252,10 @@ import { cacheAllEnvironments } from '../utils/cache-bootstrap.js';
         ]);
         // Generate project token (unless skipping auth)
         if (!options.skipAuth && resolvedEnv) {
-            await generateProjectTokenWithFeedback(tokenStore, resolvedEnv.contentSystemId, s);
+            await generateProjectTokenWithFeedback(tokenStore, resolvedEnv.contentSystemId, s, {
+                environmentName: resolvedEnv.name,
+                projectId: cmsResourceId
+            });
         }
         // Success message for existing project
         p.outro(pc.green('✓ Project initialized successfully!'));
@@ -335,6 +354,18 @@ import { cacheAllEnvironments } from '../utils/cache-bootstrap.js';
         } catch (error) {
             p.log.warn(pc.yellow(`⚠ Failed to update .env file: ${error instanceof Error ? error.message : 'Unknown error'}`));
         }
+        // npm leaves node_modules in a transient state after a sequence of
+        // add/remove calls; without a final `install` the subprocess that runs
+        // generate:importmap silently misses @payloadcms/figma subpath components.
+        s.start('Reconciling dependencies...');
+        try {
+            await installDependencies(fullPath, packageManager);
+            s.stop(pc.green('✓ Dependencies reconciled'));
+        } catch (error) {
+            s.stop(pc.red('✗ Failed to reconcile dependencies before generate:importmap'));
+            log.error(error instanceof Error ? error.message : 'Unknown error');
+            process.exit(1);
+        }
         // Generate import map to prevent errors on first dev run
         const importMapResult = await runScript(fullPath, 'generate:importmap', packageManager);
         if (!importMapResult) {
@@ -342,7 +373,10 @@ import { cacheAllEnvironments } from '../utils/cache-bootstrap.js';
         }
         // Generate project token (unless skipping auth)
         if (!options.skipAuth && resolvedEnv) {
-            await generateProjectTokenWithFeedback(tokenStore, resolvedEnv.contentSystemId, s);
+            await generateProjectTokenWithFeedback(tokenStore, resolvedEnv.contentSystemId, s, {
+                environmentName: resolvedEnv.name,
+                projectId: cmsResourceId
+            });
         }
         // Initialize git repository (after all files including lock file are ready)
         initializeGitRepo(fullPath);

package/dist/commands/list-tokens.js

@@ -26,13 +26,13 @@ const ALL_ENVIRONMENTS = [
 }
 function showTokenDetails(env) {
     const tokenStore = getTokenStore(env);
-    const tokens = tokenStore.getTokens();
+    const tokens = tokenStore.getOauthInfo();
     if (!tokens) {
         p.log.warn(pc.yellow(`No tokens found${formatEnvSuffix(env, ' for ')}. Not authenticated.`));
         p.note(`Run ${pc.cyan('@payloadcms/figma login')} to authenticate`, 'Tip');
         return;
     }
-    const isValid = tokenStore.hasValidTokens();
+    const isValid = tokenStore.hasValidOauthToken();
     const status = isValid ? pc.green('✓ Valid') : pc.red('✗ Expired');
     p.log.step(pc.bold(`Token Status${formatEnvSuffix(env, ' (', ')')}`));
     // Build OAuth token info display

package/dist/commands/login.js

@@ -22,7 +22,7 @@ import * as log from '../utils/log.js';
     try {
         const existingCredential = await getValidCredential(tokenStore);
         if (existingCredential) {
-            const tokens = tokenStore.getTokens();
+            const tokens = tokenStore.getOauthInfo();
             p.log.warn(pc.yellow(`Already logged in${formatEnvSuffix(env)}`));
             if (tokens?.userId) {
                 log.info(`User ID: ${tokens.userId}`);

package/dist/commands/logout.js

@@ -2,6 +2,7 @@ import * as p from '@clack/prompts';
 import pc from 'picocolors';
 import { getTokenStore } from '../auth/token-store.js';
 import { getInfraEnvironment } from '../constants.js';
+import { getEnvVarSync } from '../utils/env-management.js';
 import { formatEnvSuffix } from '../utils/format-env-suffix.js';
 import * as log from '../utils/log.js';
 const ALL_ENVIRONMENTS = [
@@ -23,7 +24,7 @@ const ALL_ENVIRONMENTS = [
 }
 async function logoutSingleEnvironment(env) {
     const tokenStore = getTokenStore(env);
-    const hasTokens = tokenStore.getTokens() !== null;
+    const hasTokens = tokenStore.getOauthInfo() !== null;
     if (!hasTokens) {
         p.log.warn(pc.yellow(`No tokens found${formatEnvSuffix(env, ' for ')}. Already logged out.`));
         return;
@@ -40,7 +41,7 @@ async function logoutSingleEnvironment(env) {
     s.start('Clearing tokens...');
     try {
         tokenStore.clearTokens();
-        tokenStore.clearAllProjectTokens();
+        clearCurrentProjectToken(tokenStore, env);
         s.stop(pc.green(`✓ Logged out${formatEnvSuffix(env, ' from ')}`));
     } catch (error) {
         s.stop(pc.red('✗ Failed to clear tokens'));
@@ -52,7 +53,7 @@ async function logoutAllEnvironments() {
     // Check which environments have tokens
     const envsWithTokens = ALL_ENVIRONMENTS.filter((env)=>{
         const store = getTokenStore(env);
-        return store.getTokens() !== null;
+        return store.getOauthInfo() !== null;
     });
     if (envsWithTokens.length === 0) {
         p.log.warn(pc.yellow('No tokens found in any environment. Already logged out.'));
@@ -73,7 +74,7 @@ async function logoutAllEnvironments() {
         for (const env of envsWithTokens){
             const store = getTokenStore(env);
             store.clearTokens();
-            store.clearAllProjectTokens();
+            clearCurrentProjectToken(store, env);
         }
         s.stop(pc.green('✓ Logged out from all environments'));
     } catch (error) {
@@ -82,5 +83,23 @@ async function logoutAllEnvironments() {
         process.exit(1);
     }
 }
+function clearCurrentProjectToken(store, env) {
+    const projectId = getEnvVarSync(process.cwd(), 'FIGMA_PROJECT_ID');
+    if (!projectId) {
+        return;
+    }
+    const bootstrapData = store.getBootstrapData(projectId, env);
+    if (!bootstrapData?.contentSystemId) {
+        return;
+    }
+    const projectInfo = {
+        environmentName: env,
+        projectId
+    };
+    // Clear scoped token for this tenant.
+    store.clearProjectToken({
+        projectInfo
+    });
+}
 
 //# sourceMappingURL=logout.js.map

package/dist/db-content-api/index.js

@@ -673,41 +673,6 @@ async function upsert(args) {
         payload: this.payload
     });
 }
-// Mirrors MAX_DOCUMENT_UPDATES in the content API's updateDocuments.ts.
-// updateJobs may be called with larger limits (e.g. 150), so we batch sequentially.
-const CONTENT_API_MAX_UPDATES = 20;
-// Issues a single update request against payload-jobs and returns the unwrapped docs.
-async function updateJobsBatch({ batchSize, docData, meta, sortClause, whereQuery }) {
-    const { data: response, error } = await this.client.POST('/api/v0/documents:update', {
-        body: {
-            collection: 'payload-jobs',
-            contentSystemId: this.contentSystemId,
-            createOnMissing: false,
-            doc: docData,
-            ...batchSize != null && {
-                limit: batchSize
-            },
-            returning: {},
-            sort: sortClause,
-            where: whereQuery,
-            ...meta
-        }
-    });
-    if (error) {
-        throw new Error(`Content API updateJobs error: ${JSON.stringify(error)}`);
-    }
-    if (!response) {
-        throw new Error('No response from updateJobs');
-    }
-    if (!response.result || !('data' in response.result)) {
-        return [];
-    }
-    return response.result.data.map((doc)=>unwrapDocument({
-            collectionSlug: 'payload-jobs',
-            doc,
-            payload: this.payload
-        }));
-}
 async function updateJobs(args) {
     const { id, limit, returning, sort, where } = args;
     if (id == null && where == null) {
@@ -737,49 +702,38 @@ async function updateJobs(args) {
         locale: undefined,
         where: whereClause
     });
-    // When limit exceeds the content API's per-request cap, batch sequentially.
-    const needsBatching = limit != null && limit > CONTENT_API_MAX_UPDATES;
-    if (!needsBatching) {
-        const docs = await updateJobsBatch.call(this, {
-            batchSize: limit,
-            docData,
-            meta,
-            sortClause,
-            whereQuery
-        });
-        if (returning === false) {
-            return null;
-        }
-        return docs;
-    }
-    // Batched path: issue sequential requests of ≤ CONTENT_API_MAX_UPDATES each.
-    // This relies on the update itself causing matched jobs to no longer satisfy the where
-    // clause on subsequent batches (e.g. setting processing: true removes them from a
-    // "processing: false" query). If a future updateJobs call in Payload core updates jobs
-    // in a way that does NOT change their match status, the same jobs could be updated
-    // multiple times across batches.
-    const allDocs = [];
-    let remaining = limit;
-    while(remaining > 0){
-        const batchSize = Math.min(remaining, CONTENT_API_MAX_UPDATES);
-        const batchDocs = await updateJobsBatch.call(this, {
-            batchSize,
-            docData,
-            meta,
-            sortClause,
-            whereQuery
-        });
-        allDocs.push(...batchDocs);
-        remaining -= batchSize;
-        // Stop early when this batch returned fewer docs than requested — no more matching docs.
-        if (batchDocs.length < batchSize) {
-            break;
+    const { data: response, error } = await this.client.POST('/api/v0/documents:update', {
+        body: {
+            collection: 'payload-jobs',
+            contentSystemId: this.contentSystemId,
+            createOnMissing: false,
+            doc: docData,
+            ...limit != null && {
+                limit
+            },
+            returning: {},
+            sort: sortClause,
+            where: whereQuery,
+            ...meta
         }
+    });
+    if (error) {
+        throw new Error(`Content API updateJobs error: ${JSON.stringify(error)}`);
+    }
+    if (!response) {
+        throw new Error('No response from updateJobs');
     }
     if (returning === false) {
         return null;
     }
-    return allDocs;
+    if (!response.result || !('data' in response.result)) {
+        return [];
+    }
+    return response.result.data.map((doc)=>unwrapDocument({
+            collectionSlug: 'payload-jobs',
+            doc,
+            payload: this.payload
+        }));
 }
 function createGlobal(args) {
     // Globals are singletons identified by their slug. Use upsert so concurrent calls

package/dist/db-content-api/utilities/auth.js

@@ -25,7 +25,10 @@ export function createAuthMiddleware(opts) {
             if (opts.auth.mode === 'apiKey') {
                 request.headers.set('X-Api-Key', opts.auth.apiKey);
             } else if (opts.auth.mode === 'tokenStore') {
-                const token = await getValidProjectToken(opts.auth.tokenStore, opts.contentSystemId);
+                const token = await getValidProjectToken({
+                    tenantId: opts.contentSystemId,
+                    tokenStore: opts.auth.tokenStore
+                });
                 if (!token) {
                     throw new Error('Authentication required. Run `npx @payloadcms/figma login` to authenticate.');
                 }

package/dist/oauth/defaults.d.ts

@@ -1,10 +1,12 @@
 import type { CollectionConfig, EmailField, TextField } from 'payload';
 import type { VerifyFunction } from './types.js';
+export declare const DEFAULT_USER_INFO_COOKIE_NAME = "figma-user-info";
 export declare const defaultScope: string[];
 export declare const defaultUsernameField: TextField;
-export declare const defaultVerify: ({ collection, strategyName, usernameField, }: {
+export declare const defaultVerify: ({ collection, strategyName, userInfoCookieName, usernameField, }: {
     collection: CollectionConfig;
     strategyName: string;
+    userInfoCookieName?: string;
     usernameField: EmailField | TextField;
 }) => VerifyFunction;
 //# sourceMappingURL=defaults.d.ts.map