snow-flow 8.5.7 → 8.5.8

package/dist/utils/snow-oauth.js

@@ -1,9 +1,42 @@
 #!/usr/bin/env node
 "use strict";
 /**
- * ServiceNow OAuth Authentication Utility with Dynamic Port
- * Handles OAuth2 flow for ServiceNow integration
+ * ServiceNow OAuth Authentication Utility with Code Paste Flow
+ * Handles OAuth2 flow for ServiceNow integration (Claude-style)
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -18,6 +51,7 @@ const axios_1 = __importDefault(require("axios"));
 const https_1 = __importDefault(require("https"));
 const net_1 = __importDefault(require("net"));
 const crypto_1 = __importDefault(require("crypto"));
+const prompts = __importStar(require("@clack/prompts"));
 const snow_flow_config_js_1 = require("../config/snow-flow-config.js");
 const unified_auth_store_js_1 = require("./unified-auth-store.js");
 const oauth_html_templates_js_1 = require("./oauth-html-templates.js");
@@ -44,7 +78,7 @@ class ServiceNowOAuth {
         }
         // Check if within rate limit
         if (this.tokenRequestCount >= this.MAX_TOKEN_REQUESTS_PER_WINDOW) {
-            console.warn('🔒 Rate limit exceeded: Too many token requests. Please wait before retrying.');
+            prompts.log.warn('Rate limit exceeded: Too many token requests. Please wait before retrying.');
             return false;
         }
         this.tokenRequestCount++;
@@ -84,9 +118,6 @@ class ServiceNowOAuth {
             });
         });
     }
-    /**
-     * Initialize OAuth flow - opens browser and handles callback
-     */
     /**
      * 🔧 CRIT-002 FIX: Normalize instance URL to prevent trailing slash 400 errors
      */
@@ -104,6 +135,109 @@ class ServiceNowOAuth {
         }
         return normalized;
     }
+    /**
+     * 🎯 NEW: Simplified OAuth flow with code paste (Claude-style)
+     * No local server required - user manually pastes authorization code
+     */
+    async authenticateWithCodePaste(instance, clientId, clientSecret) {
+        try {
+            // Normalize instance URL
+            const normalizedInstance = this.normalizeInstanceUrl(instance);
+            // Validate client secret
+            const secretValidation = this.validateClientSecret(clientSecret);
+            if (!secretValidation.valid) {
+                prompts.log.error(`Invalid OAuth Client Secret: ${secretValidation.reason}`);
+                prompts.log.info('To get a valid OAuth secret:');
+                prompts.log.message('   1. Log into ServiceNow as admin');
+                prompts.log.message('   2. Navigate to: System OAuth > Application Registry');
+                prompts.log.message('   3. Create a new OAuth application');
+                prompts.log.message('   4. Copy the generated Client Secret (long random string)');
+                return {
+                    success: false,
+                    error: secretValidation.reason
+                };
+            }
+            // For code paste flow, we use a special redirect URI that shows the code
+            const redirectUri = 'urn:ietf:wg:oauth:2.0:oob'; // Out-of-band redirect for manual code entry
+            // Store credentials
+            this.credentials = {
+                instance: normalizedInstance.replace('https://', '').replace('http://', ''),
+                clientId,
+                clientSecret,
+                redirectUri
+            };
+            prompts.log.step('Starting ServiceNow OAuth flow');
+            prompts.log.info(`Instance: ${normalizedInstance}`);
+            prompts.log.info(`Client ID: ${clientId}`);
+            // Generate state parameter and PKCE
+            this.stateParameter = this.generateState();
+            this.generatePKCE();
+            // Generate authorization URL
+            const authUrl = this.generateAuthUrl(this.credentials.instance, clientId, redirectUri);
+            prompts.log.message('');
+            prompts.log.step('Authorization URL generated');
+            prompts.log.message(`\n${authUrl}\n`);
+            prompts.log.warn(`Go to: ${authUrl}`);
+            prompts.log.message('');
+            const authCode = await prompts.text({
+                message: 'Paste the authorization code here',
+                placeholder: 'Enter the code from the browser after authorizing',
+                validate: (value) => {
+                    if (!value || value.trim() === '')
+                        return 'Authorization code is required';
+                    if (value.length < 10)
+                        return 'Code seems too short - please paste the full authorization code';
+                }
+            });
+            if (prompts.isCancel(authCode)) {
+                prompts.cancel('Authentication cancelled');
+                return {
+                    success: false,
+                    error: 'Authentication cancelled by user'
+                };
+            }
+            // Extract code if user pasted full URL
+            let code = authCode.trim();
+            if (code.includes('code=')) {
+                const match = code.match(/code=([^&]+)/);
+                if (match) {
+                    code = match[1];
+                }
+            }
+            // Exchange code for tokens
+            const spinner = prompts.spinner();
+            spinner.start('Exchanging authorization code for tokens');
+            const tokenResult = await this.exchangeCodeForTokens(code);
+            if (tokenResult.success && tokenResult.accessToken) {
+                // Save tokens
+                await this.saveTokens({
+                    accessToken: tokenResult.accessToken,
+                    refreshToken: tokenResult.refreshToken || '',
+                    expiresIn: tokenResult.expiresIn || 3600,
+                    instance: this.credentials.instance,
+                    clientId,
+                    clientSecret
+                });
+                spinner.stop('Authentication successful');
+                prompts.log.success('Tokens saved securely');
+            }
+            else {
+                spinner.stop('Token exchange failed');
+            }
+            return tokenResult;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            prompts.log.error(`Authentication failed: ${errorMessage}`);
+            return {
+                success: false,
+                error: errorMessage
+            };
+        }
+    }
+    /**
+     * Original OAuth flow with local server (fallback)
+     */
     async authenticate(instance, clientId, clientSecret) {
         try {
             // 🔧 CRIT-002 FIX: Apply URL normalization
@@ -111,12 +245,12 @@ class ServiceNowOAuth {
             // Validate client secret format
             const secretValidation = this.validateClientSecret(clientSecret);
             if (!secretValidation.valid) {
-                console.error('❌ Invalid OAuth Client Secret:', secretValidation.reason);
-                console.error('💡 To get a valid OAuth secret:');
-                console.error('   1. Log into ServiceNow as admin');
-                console.error('   2. Navigate to: System OAuth > Application Registry');
-                console.error('   3. Create a new OAuth application');
-                console.error('   4. Copy the generated Client Secret (long random string)');
+                prompts.log.error(`Invalid OAuth Client Secret: ${secretValidation.reason}`);
+                prompts.log.info('To get a valid OAuth secret:');
+                prompts.log.message('   1. Log into ServiceNow as admin');
+                prompts.log.message('   2. Navigate to: System OAuth > Application Registry');
+                prompts.log.message('   3. Create a new OAuth application');
+                prompts.log.message('   4. Copy the generated Client Secret (long random string)');
                 return {
                     success: false,
                     error: secretValidation.reason
@@ -131,8 +265,8 @@ class ServiceNowOAuth {
             // Check if port is available
             const isPortAvailable = await this.checkPortAvailable(port);
             if (!isPortAvailable) {
-                console.error(`❌ Port ${port} is already in use!`);
-                console.error(`💡 Please close any application using port ${port} and try again.`);
+                prompts.log.error(`Port ${port} is already in use!`);
+                prompts.log.warn(`Please close any application using port ${port} and try again.`);
                 return {
                     success: false,
                     error: `Port ${port} is already in use. Please free up the port and try again.`
@@ -145,18 +279,20 @@ class ServiceNowOAuth {
                 clientSecret,
                 redirectUri
             };
-            console.log('🚀 Starting ServiceNow OAuth flow...');
-            console.log(`📋 Instance: ${normalizedInstance}`);
-            console.log(`🔐 Client ID: ${clientId}`);
-            console.log(`🔗 Redirect URI: ${redirectUri}`);
+            prompts.log.step('Starting ServiceNow OAuth flow');
+            prompts.log.info(`Instance: ${normalizedInstance}`);
+            prompts.log.info(`Client ID: ${clientId}`);
+            prompts.log.info(`Redirect URI: ${redirectUri}`);
             // Generate state parameter for CSRF protection
             this.stateParameter = this.generateState();
             // Generate PKCE parameters
             this.generatePKCE();
             // Generate authorization URL
             const authUrl = this.generateAuthUrl(this.credentials.instance, clientId, redirectUri);
-            console.log('\n🌐 Authorization URL generated:');
-            console.log(`${authUrl}\n`);
+            prompts.log.step('Authorization URL generated');
+            prompts.log.message('');
+            prompts.log.message(`\n${authUrl}\n`);
+            prompts.log.message('');
             // Start local server to handle callback
             const authResult = await this.startCallbackServer(redirectUri, port);
             if (authResult.success && authResult.accessToken) {
@@ -169,14 +305,14 @@ class ServiceNowOAuth {
                     clientId,
                     clientSecret
                 });
-                console.log('\n✅ Authentication successful!');
-                console.log('🔐 Tokens saved securely');
+                prompts.log.success('Authentication successful');
+                prompts.log.success('Tokens saved securely');
             }
             return authResult;
         }
         catch (error) {
             const errorMessage = error instanceof Error ? error.message : String(error);
-            console.error('❌ Authentication failed:', errorMessage);
+            prompts.log.error(`Authentication failed: ${errorMessage}`);
             return {
                 success: false,
                 error: errorMessage
@@ -201,10 +337,14 @@ class ServiceNowOAuth {
     }
     /**
      * Start local HTTP server to handle OAuth callback
+     * Also supports manual callback URL paste as fallback
      */
     async startCallbackServer(redirectUri, port) {
-        return new Promise((resolve) => {
+        return new Promise(async (resolve) => {
+            let resolved = false;
             const server = (0, http_1.createServer)(async (req, res) => {
+                if (resolved)
+                    return;
                 try {
                     const url = new url_1.URL(req.url, `http://${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectHost}:${port}`);
                     if (url.pathname === '/callback') {
@@ -215,6 +355,7 @@ class ServiceNowOAuth {
                         if (state !== this.stateParameter) {
                             res.writeHead(400, { 'Content-Type': 'text/html' });
                             res.end(oauth_html_templates_js_1.OAuthTemplates.securityError);
+                            resolved = true;
                             server.close();
                             resolve({
                                 success: false,
@@ -225,6 +366,7 @@ class ServiceNowOAuth {
                         if (error) {
                             res.writeHead(400, { 'Content-Type': 'text/html' });
                             res.end(oauth_html_templates_js_1.OAuthTemplates.error(error));
+                            resolved = true;
                             server.close();
                             resolve({
                                 success: false,
@@ -235,6 +377,7 @@ class ServiceNowOAuth {
                         if (!code) {
                             res.writeHead(400, { 'Content-Type': 'text/html' });
                             res.end(oauth_html_templates_js_1.OAuthTemplates.missingCode);
+                            resolved = true;
                             server.close();
                             resolve({
                                 success: false,
@@ -243,7 +386,9 @@ class ServiceNowOAuth {
                             return;
                         }
                         // Exchange code for tokens
-                        console.log('🔄 Exchanging authorization code for tokens...');
+                        resolved = true;
+                        const spinner = prompts.spinner();
+                        spinner.start('Exchanging authorization code for tokens');
                         const tokenResult = await this.exchangeCodeForTokens(code);
                         if (tokenResult.success) {
                             res.writeHead(200, { 'Content-Type': 'text/html' });
@@ -264,9 +409,10 @@ class ServiceNowOAuth {
                     }
                 }
                 catch (error) {
-                    console.error('Callback server error:', error);
+                    prompts.log.error(`Callback server error: ${error}`);
                     res.writeHead(500, { 'Content-Type': 'text/plain' });
                     res.end('Internal Server Error');
+                    resolved = true;
                     server.close();
                     resolve({
                         success: false,
@@ -275,9 +421,9 @@ class ServiceNowOAuth {
                 }
             });
             server.listen(port, () => {
-                console.log(`🌐 OAuth callback server started on http://${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectHost}:${port}`);
-                console.log('🚀 Please open the authorization URL in your browser...');
-                console.log('⏳ Waiting for OAuth callback...');
+                prompts.log.step(`OAuth callback server started on http://${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectHost}:${port}`);
+                prompts.log.warn('Please open the authorization URL in your browser');
+                prompts.log.info('Waiting for OAuth callback...');
                 // Auto-open browser if possible
                 // Try to auto-open browser if not in headless environment
                 const isCodespaces = process.env.CODESPACES === 'true';
@@ -310,7 +456,7 @@ class ServiceNowOAuth {
                             }
                         }
                         else {
-                            console.log('⚠️  Unknown OS:', process.platform);
+                            prompts.log.warn(`Unknown OS: ${process.platform}`);
                         }
                         // Prevent the spawn from keeping the process alive
                         if (browserProcess && browserProcess.unref) {
@@ -319,23 +465,92 @@ class ServiceNowOAuth {
                     }
                     catch (err) {
                         // Silently fail - user can manually open URL
-                        console.log('\n📋 Browser auto-open failed. Please manually copy and open the URL above.');
+                        prompts.log.warn('Browser auto-open failed. Please manually copy and open the URL above.');
                     }
                 }
-                else {
-                    console.log('\n🐳 Running in headless environment (Codespaces/Container/CI)');
-                    console.log('📋 Please manually copy and open the authorization URL above in your browser.');
-                    if (isCodespaces) {
-                        console.log('\n💡 TIP for GitHub Codespaces:');
-                        console.log('   1. Copy the authorization URL above');
-                        console.log('   2. Open it in a new browser tab');
-                        console.log('   3. After authorizing, you\'ll be redirected to localhost:3005');
-                        console.log('   4. Copy the FULL redirect URL from your browser');
-                        console.log('   5. Open a new Codespaces terminal and run:');
-                        console.log('      curl "http://localhost:3005/callback?code=YOUR_CODE&state=YOUR_STATE"');
-                        console.log('   6. Or use port forwarding in Codespaces to make port 3005 accessible');
+                // Offer manual callback URL paste as alternative
+                prompts.log.message('');
+                prompts.log.info('Alternatively, paste the callback URL here after authorizing:');
+                // Start prompt for manual URL paste (race with server callback)
+                (async () => {
+                    try {
+                        const callbackUrl = await prompts.text({
+                            message: 'Paste callback URL (or press Enter to wait for automatic redirect)',
+                            placeholder: 'http://localhost:3005/callback?code=...&state=...',
+                            validate: (value) => {
+                                // Allow empty (waiting for server callback)
+                                if (!value || value.trim() === '')
+                                    return undefined;
+                                // Validate if URL was pasted
+                                if (!value.includes('callback'))
+                                    return 'Invalid callback URL - must contain "callback"';
+                                if (!value.includes('code='))
+                                    return 'Invalid callback URL - must contain code parameter';
+                            }
+                        });
+                        // If user pressed Enter without pasting, just wait for server callback
+                        if (prompts.isCancel(callbackUrl) || !callbackUrl || callbackUrl.trim() === '') {
+                            prompts.log.info('Waiting for browser redirect...');
+                            return;
+                        }
+                        // User pasted a URL - parse it
+                        if (resolved)
+                            return; // Server already handled it
+                        resolved = true;
+                        try {
+                            const url = new url_1.URL(callbackUrl);
+                            const code = url.searchParams.get('code');
+                            const state = url.searchParams.get('state');
+                            const error = url.searchParams.get('error');
+                            // Validate state
+                            if (state !== this.stateParameter) {
+                                server.close();
+                                resolve({
+                                    success: false,
+                                    error: 'Invalid state parameter - security check failed'
+                                });
+                                return;
+                            }
+                            if (error) {
+                                server.close();
+                                resolve({
+                                    success: false,
+                                    error: `OAuth error: ${error}`
+                                });
+                                return;
+                            }
+                            if (!code) {
+                                server.close();
+                                resolve({
+                                    success: false,
+                                    error: 'No authorization code found in URL'
+                                });
+                                return;
+                            }
+                            // Exchange code for tokens
+                            prompts.log.success('Authorization code received from pasted URL');
+                            const spinner = prompts.spinner();
+                            spinner.start('Exchanging authorization code for tokens');
+                            const tokenResult = await this.exchangeCodeForTokens(code);
+                            spinner.stop(tokenResult.success ? 'Token exchange successful' : 'Token exchange failed');
+                            server.close();
+                            resolve(tokenResult);
+                        }
+                        catch (err) {
+                            server.close();
+                            resolve({
+                                success: false,
+                                error: 'Invalid callback URL format'
+                            });
+                        }
                     }
-                }
+                    catch (err) {
+                        // Prompt was cancelled or errored - just wait for server callback
+                        if (!resolved) {
+                            prompts.log.info('Waiting for browser redirect...');
+                        }
+                    }
+                })();
             });
         });
     }
@@ -387,9 +602,41 @@ class ServiceNowOAuth {
         }
         catch (error) {
             const errorMessage = error instanceof Error ? error.message : String(error);
-            console.error('Token exchange error:', errorMessage);
+            // Check for invalid redirect_uri error
             if (axios_1.default.isAxiosError(error) && error.response) {
-                console.error('Response data:', error.response.data);
+                const responseData = error.response.data;
+                const errorDescription = responseData?.error_description || responseData?.error || '';
+                // Special handling for redirect_uri errors
+                if (errorDescription.toLowerCase().includes('redirect_uri') ||
+                    errorDescription.toLowerCase().includes('redirect uri')) {
+                    prompts.log.error('Invalid redirect_uri configuration');
+                    prompts.log.message('');
+                    prompts.log.warn('The OAuth application in ServiceNow is not configured correctly.');
+                    prompts.log.message('');
+                    prompts.log.step('Fix this by following these steps:');
+                    prompts.log.message('');
+                    prompts.log.info('1. Log into ServiceNow as administrator');
+                    prompts.log.info(`2. Navigate to: System OAuth → Application Registry`);
+                    prompts.log.info(`3. Find your OAuth application (Client ID: ${this.credentials.clientId})`);
+                    prompts.log.info('4. Edit the "Redirect URL" field');
+                    prompts.log.info('5. Change it to: http://localhost:3005/callback');
+                    prompts.log.message('   (exactly this - copy/paste to avoid typos!)');
+                    prompts.log.info('6. Save the application');
+                    prompts.log.info('7. Run "snow-flow auth login" again');
+                    prompts.log.message('');
+                    prompts.log.warn('The redirect URI MUST be exactly: http://localhost:3005/callback');
+                    prompts.log.message('');
+                    return {
+                        success: false,
+                        error: 'Invalid redirect_uri - OAuth application not configured. See instructions above.'
+                    };
+                }
+                // Log other API errors
+                prompts.log.error(`ServiceNow OAuth error: ${errorDescription}`);
+                prompts.log.error(`Response data: ${JSON.stringify(responseData)}`);
+            }
+            else {
+                prompts.log.error(`Token exchange error: ${errorMessage}`);
             }
             return {
                 success: false,
@@ -414,7 +661,7 @@ class ServiceNowOAuth {
             await unified_auth_store_js_1.unifiedAuthStore.bridgeToMCP();
         }
         catch (error) {
-            console.error('Failed to save tokens:', error);
+            prompts.log.error(`Failed to save tokens: ${error}`);
             throw error;
         }
     }
@@ -459,7 +706,7 @@ class ServiceNowOAuth {
             const now = new Date();
             if (now >= expiresAt && tokens.refreshToken) {
                 // Token expired, try to refresh
-                console.log('🔄 Token expired, refreshing...');
+                prompts.log.info('Token expired, refreshing...');
                 const refreshResult = await this.refreshAccessToken(tokens);
                 if (refreshResult.success && refreshResult.accessToken) {
                     // Update saved tokens
@@ -471,14 +718,14 @@ class ServiceNowOAuth {
                     return refreshResult.accessToken;
                 }
                 else {
-                    console.error('❌ Token refresh failed:', refreshResult.error);
+                    prompts.log.error(`Token refresh failed: ${refreshResult.error}`);
                     return null;
                 }
             }
             return tokens.accessToken;
         }
         catch (error) {
-            console.error('Failed to get access token:', error);
+            prompts.log.error(`Failed to get access token: ${error}`);
             return null;
         }
     }
@@ -555,10 +802,10 @@ class ServiceNowOAuth {
     async logout() {
         try {
             await fs_1.promises.unlink(this.tokenPath);
-            console.log('✅ Logged out successfully');
+            prompts.log.success('Logged out successfully');
         }
         catch (error) {
-            console.log('No active session to logout from');
+            prompts.log.info('No active session to logout from');
         }
     }
     /**
@@ -579,15 +826,15 @@ class ServiceNowOAuth {
                 if (tokens.clientSecret) {
                     const secretValidation = this.validateClientSecret(tokens.clientSecret);
                     if (!secretValidation.valid) {
-                        console.warn('⚠️  OAuth Configuration Issue:', secretValidation.reason);
-                        console.warn('💡 Your stored client secret may be incorrect. Re-authenticate with: snow-flow auth login');
+                        prompts.log.warn(`OAuth Configuration Issue: ${secretValidation.reason}`);
+                        prompts.log.info('Your stored client secret may be incorrect. Re-authenticate with: snow-flow auth login');
                     }
                 }
                 // Check if token is expired
                 const expiresAt = new Date(tokens.expiresAt);
                 const now = new Date();
                 if (now < expiresAt) {
-                    console.log('✅ Using saved OAuth tokens');
+                    prompts.log.success('Using saved OAuth tokens');
                     return {
                         instance: tokens.instance,
                         clientId: tokens.clientId,
@@ -598,39 +845,39 @@ class ServiceNowOAuth {
                     };
                 }
                 else {
-                    console.log('⏰ Saved OAuth token expired, will try refresh...');
+                    prompts.log.warn('Saved OAuth token expired, will try refresh...');
                 }
             }
             // 🔧 NEW: Fallback to .env file if no valid tokens
-            console.log('🔍 No valid OAuth tokens found, checking .env file...');
+            prompts.log.info('No valid OAuth tokens found, checking .env file...');
             // Load environment variables with dotenv
             try {
                 require('dotenv').config();
             }
             catch (err) {
-                console.log('📝 dotenv not available, using process.env directly');
+                prompts.log.message('dotenv not available, using process.env directly');
             }
             const envInstance = process.env.SNOW_INSTANCE;
             const envClientId = process.env.SNOW_CLIENT_ID;
             const envClientSecret = process.env.SNOW_CLIENT_SECRET;
             if (envInstance && envClientId && envClientSecret) {
-                console.log('✅ Found ServiceNow credentials in .env file');
-                console.log(`   - Instance: ${envInstance}`);
-                console.log(`   - Client ID: ${envClientId}`);
-                console.log(`   - Client Secret: ✅ Present`);
+                prompts.log.success('Found ServiceNow credentials in .env file');
+                prompts.log.message(`   - Instance: ${envInstance}`);
+                prompts.log.message(`   - Client ID: ${envClientId}`);
+                prompts.log.message('   - Client Secret: Present');
                 // Validate client secret
                 const secretValidation = this.validateClientSecret(envClientSecret);
                 if (!secretValidation.valid) {
-                    console.error('❌ Invalid OAuth Client Secret in .env file:', secretValidation.reason);
-                    console.error('💡 Please update SNOW_CLIENT_SECRET in .env with proper OAuth secret from ServiceNow');
+                    prompts.log.error(`Invalid OAuth Client Secret in .env file: ${secretValidation.reason}`);
+                    prompts.log.warn('Please update SNOW_CLIENT_SECRET in .env with proper OAuth secret from ServiceNow');
                     return null;
                 }
-                console.log('');
-                console.log('🔐 OAuth Setup Required:');
-                console.log('   Your .env has OAuth credentials but no active session.');
-                console.log('   Run: snow-flow auth login');
-                console.log('   This will authenticate and create persistent tokens.');
-                console.log('');
+                prompts.log.message('');
+                prompts.log.info('OAuth Setup Required:');
+                prompts.log.message('   Your .env has OAuth credentials but no active session.');
+                prompts.log.message('   Run: snow-flow auth login');
+                prompts.log.message('   This will authenticate and create persistent tokens.');
+                prompts.log.message('');
                 // Return credentials without access token - this will trigger auth flow
                 return {
                     instance: envInstance.replace(/\/$/, ''),
@@ -643,33 +890,33 @@ class ServiceNowOAuth {
             const envUsername = process.env.SNOW_USERNAME;
             const envPassword = process.env.SNOW_PASSWORD;
             if (envInstance && envUsername && envPassword) {
-                console.warn('⚠️  Found username/password in .env - OAuth is recommended');
-                console.warn('💡 For better security, set up OAuth credentials:');
-                console.warn('   1. In ServiceNow: System OAuth > Application Registry > New');
-                console.warn('   2. Update .env with SNOW_CLIENT_ID and SNOW_CLIENT_SECRET');
-                console.warn('   3. Run: snow-flow auth login');
+                prompts.log.warn('Found username/password in .env - OAuth is recommended');
+                prompts.log.info('For better security, set up OAuth credentials:');
+                prompts.log.message('   1. In ServiceNow: System OAuth > Application Registry > New');
+                prompts.log.message('   2. Update .env with SNOW_CLIENT_ID and SNOW_CLIENT_SECRET');
+                prompts.log.message('   3. Run: snow-flow auth login');
                 // Don't return username/password - force OAuth setup
                 return null;
             }
             // No credentials found anywhere
-            console.error('❌ No ServiceNow credentials found!');
-            console.error('');
-            console.error('🔧 Setup Instructions:');
-            console.error('   1. Create .env file with OAuth credentials:');
-            console.error('      SNOW_INSTANCE=your-instance.service-now.com');
-            console.error('      SNOW_CLIENT_ID=your_oauth_client_id');
-            console.error('      SNOW_CLIENT_SECRET=your_oauth_client_secret');
-            console.error('   2. Run: snow-flow auth login');
-            console.error('');
-            console.error('💡 To get OAuth credentials:');
-            console.error('   • ServiceNow: System OAuth > Application Registry > New OAuth Application');
-            console.error(`   • Redirect URI: http://${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectHost}:${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectPort}${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectPath}`);
-            console.error('   • Scopes: useraccount write admin');
-            console.error('');
+            prompts.log.error('No ServiceNow credentials found!');
+            prompts.log.message('');
+            prompts.log.info('Setup Instructions:');
+            prompts.log.message('   1. Create .env file with OAuth credentials:');
+            prompts.log.message('      SNOW_INSTANCE=your-instance.service-now.com');
+            prompts.log.message('      SNOW_CLIENT_ID=your_oauth_client_id');
+            prompts.log.message('      SNOW_CLIENT_SECRET=your_oauth_client_secret');
+            prompts.log.message('   2. Run: snow-flow auth login');
+            prompts.log.message('');
+            prompts.log.info('To get OAuth credentials:');
+            prompts.log.message('   • ServiceNow: System OAuth > Application Registry > New OAuth Application');
+            prompts.log.message(`   • Redirect URI: http://${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectHost}:${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectPort}${snow_flow_config_js_1.snowFlowConfig.servicenow.oauth.redirectPath}`);
+            prompts.log.message('   • Scopes: useraccount write admin');
+            prompts.log.message('');
             return null;
         }
         catch (error) {
-            console.error('❌ Error loading credentials:', error);
+            prompts.log.error(`Error loading credentials: ${error}`);
             return null;
         }
     }