feat: Add Contentstack Authentication toggle to project creation.

Set the isContentstackAuthenticationEnabled environment field when
creating a new Launch project, for both the GitHub and FileUpload
flows. Contentstack Authentication is enabled by default; users can
opt out with the new --disable-cs-auth flag or by answering "no" at
the interactive prompt (which defaults to enabled).

#claude_code#
🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: chhavi-mandowara-cstk

.talismanrc

@@ -9,5 +9,9 @@ fileignoreconfig:
 - filename: test/unit/commands/rollback.test.ts
   checksum: d1f931f2d9a397131409399ad6463653e28b5a2224e870b641d9ba57c4418f18
 - filename: package-lock.json
-  checksum: ffb77989c6fe554cdd79ebe0cbd07c0ce4329dd65b3e9a9089db4abb7b9be2b3
+  checksum: c94ce0fbbbedcbad4dceef8168971831ed82aad85824db579f2497dcd49aecab
+- filename: src/adapters/github.test.ts
+  checksum: b3d3d3a3c14adde103152d2ac4e1c4b7121a5f7533a87c3cc600f6d25fb59d1b
+- filename: src/adapters/file-upload.test.ts
+  checksum: 962fd8b45578914926d20857ddc3d1bc2fa19e8b192c6dfdc03d214ae1898b59
 version: "1.0"

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@contentstack/cli-launch",
-  "version": "1.11.1",
+  "version": "1.11.2",
   "description": "Launch related operations",
   "author": "Contentstack CLI",
   "bin": {
@@ -31,7 +31,7 @@
     "@rollup/plugin-typescript": "^12.1.2",
     "@types/express": "^4.17.21",
     "@types/express-serve-static-core": "^4.17.34",
-    "adm-zip": "^0.5.16",
+    "adm-zip": "^0.5.18",
     "chalk": "^4.1.2",
     "cross-fetch": "^4.1.0",
     "dotenv": "^16.4.7",

package.json

@@ -648,6 +648,161 @@ describe('FileUpload Adapter', () => {
       uploadFileMock.mockRestore();
       handleEnvImportFlowMock.mockRestore();
     });
+
+    it.each([
+      ['a "yes" answer maps to enabled', true, true],
+      ['a "no" answer maps to disabled', false, false],
+    ])(
+      'should prompt Enable Contentstack Authentication (default enabled) when disable-cs-auth is not provided — %s',
+      async (_label, answer, expected) => {
+        (cliux.inquire as jest.Mock).mockResolvedValueOnce('test-project');
+        (cliux.inquire as jest.Mock).mockResolvedValueOnce('Default');
+        (cliux.inquire as jest.Mock).mockResolvedValueOnce('npm run build');
+        (cliux.inquire as jest.Mock).mockResolvedValueOnce('./public');
+        (cliux.inquire as jest.Mock).mockResolvedValueOnce(answer);
+
+        const createSignedUploadUrlMock = jest
+          .spyOn(FileUpload.prototype as any, 'createSignedUploadUrl')
+          .mockResolvedValue({ uploadUid: 'test-upload-uid' });
+        const archiveMock = jest
+          .spyOn(FileUpload.prototype as any, 'archive')
+          .mockResolvedValue({ zipName: 'test.zip', zipPath: '/path/to/test.zip', projectName: 'test-project' });
+        const uploadFileMock = jest
+          .spyOn(FileUpload.prototype as any, 'uploadFile')
+          .mockResolvedValue(undefined);
+
+        const fileUploadInstance = new FileUpload({
+          config: {
+            flags: {
+              'response-mode': 'buffered',
+              'disable-cs-auth': false,
+            },
+            framework: 'GATSBY',
+            supportedFrameworksForServerCommands: ['ANGULAR', 'OTHER', 'REMIX', 'NUXT'],
+            outputDirectories: { GATSBY: './public' },
+          },
+          log: logMock,
+          exit: exitMock,
+        } as any);
+
+        const handleEnvImportFlowMock = jest
+          .spyOn(fileUploadInstance, 'handleEnvImportFlow' as any)
+          .mockResolvedValue(undefined);
+
+        await fileUploadInstance.prepareAndUploadNewProjectFile();
+
+        expect(cliux.inquire).toHaveBeenCalledWith(
+          expect.objectContaining({
+            type: 'confirm',
+            name: 'contentstackAuth',
+            default: true,
+          }),
+        );
+        expect(fileUploadInstance.config.isContentstackAuthenticationEnabled).toBe(expected);
+
+        createSignedUploadUrlMock.mockRestore();
+        archiveMock.mockRestore();
+        uploadFileMock.mockRestore();
+        handleEnvImportFlowMock.mockRestore();
+      },
+    );
+
+
+    it('should disable Contentstack Authentication without prompt when --disable-cs-auth is passed', async () => {
+      (cliux.inquire as jest.Mock).mockResolvedValueOnce('test-project');
+      (cliux.inquire as jest.Mock).mockResolvedValueOnce('Default');
+      (cliux.inquire as jest.Mock).mockResolvedValueOnce('npm run build');
+      (cliux.inquire as jest.Mock).mockResolvedValueOnce('./public');
+
+      const createSignedUploadUrlMock = jest
+        .spyOn(FileUpload.prototype as any, 'createSignedUploadUrl')
+        .mockResolvedValue({ uploadUid: 'test-upload-uid' });
+      const archiveMock = jest
+        .spyOn(FileUpload.prototype as any, 'archive')
+        .mockResolvedValue({ zipName: 'test.zip', zipPath: '/path/to/test.zip', projectName: 'test-project' });
+      const uploadFileMock = jest
+        .spyOn(FileUpload.prototype as any, 'uploadFile')
+        .mockResolvedValue(undefined);
+
+      const fileUploadInstance = new FileUpload({
+        config: {
+          flags: {
+            'response-mode': 'buffered',
+            'disable-cs-auth': true,
+          },
+          framework: 'GATSBY',
+          supportedFrameworksForServerCommands: ['ANGULAR', 'OTHER', 'REMIX', 'NUXT'],
+          outputDirectories: { GATSBY: './public' },
+        },
+        log: logMock,
+        exit: exitMock,
+      } as any);
+
+      const handleEnvImportFlowMock = jest
+        .spyOn(fileUploadInstance, 'handleEnvImportFlow' as any)
+        .mockResolvedValue(undefined);
+
+      await fileUploadInstance.prepareAndUploadNewProjectFile();
+
+      const contentstackAuthCalls = (cliux.inquire as jest.Mock).mock.calls.filter(
+        (call) => call[0]?.name === 'contentstackAuth',
+      );
+      expect(contentstackAuthCalls.length).toBe(0);
+      expect(fileUploadInstance.config.isContentstackAuthenticationEnabled).toBe(false);
+
+      createSignedUploadUrlMock.mockRestore();
+      archiveMock.mockRestore();
+      uploadFileMock.mockRestore();
+      handleEnvImportFlowMock.mockRestore();
+    });
+
+    it('should enable Contentstack Authentication without prompt when --enable-cs-auth is passed', async () => {
+      (cliux.inquire as jest.Mock).mockResolvedValueOnce('test-project');
+      (cliux.inquire as jest.Mock).mockResolvedValueOnce('Default');
+      (cliux.inquire as jest.Mock).mockResolvedValueOnce('npm run build');
+      (cliux.inquire as jest.Mock).mockResolvedValueOnce('./public');
+
+      const createSignedUploadUrlMock = jest
+        .spyOn(FileUpload.prototype as any, 'createSignedUploadUrl')
+        .mockResolvedValue({ uploadUid: 'test-upload-uid' });
+      const archiveMock = jest
+        .spyOn(FileUpload.prototype as any, 'archive')
+        .mockResolvedValue({ zipName: 'test.zip', zipPath: '/path/to/test.zip', projectName: 'test-project' });
+      const uploadFileMock = jest
+        .spyOn(FileUpload.prototype as any, 'uploadFile')
+        .mockResolvedValue(undefined);
+
+      const fileUploadInstance = new FileUpload({
+        config: {
+          flags: {
+            'response-mode': 'buffered',
+            'enable-cs-auth': true,
+          },
+          framework: 'GATSBY',
+          supportedFrameworksForServerCommands: ['ANGULAR', 'OTHER', 'REMIX', 'NUXT'],
+          outputDirectories: { GATSBY: './public' },
+        },
+        log: logMock,
+        exit: exitMock,
+      } as any);
+
+      const handleEnvImportFlowMock = jest
+        .spyOn(fileUploadInstance, 'handleEnvImportFlow' as any)
+        .mockResolvedValue(undefined);
+
+      await fileUploadInstance.prepareAndUploadNewProjectFile();
+
+      const contentstackAuthCalls = (cliux.inquire as jest.Mock).mock.calls.filter(
+        (call) => call[0]?.name === 'contentstackAuth',
+      );
+      expect(contentstackAuthCalls.length).toBe(0);
+      expect(fileUploadInstance.config.isContentstackAuthenticationEnabled).toBe(true);
+
+      createSignedUploadUrlMock.mockRestore();
+      archiveMock.mockRestore();
+      uploadFileMock.mockRestore();
+      handleEnvImportFlowMock.mockRestore();
+    });
   });
 });
 

src/adapters/file-upload.test.ts

@@ -114,14 +114,15 @@ export default class FileUpload extends BaseClass {
    * @memberof FileUpload
    */
   async createNewProject(uploadUid: string): Promise<void> {
-    const { 
-      framework, 
-      projectName, 
-      buildCommand, 
-      outputDirectory, 
-      environmentName, 
-      serverCommand, 
-      isStreamingEnabled 
+    const {
+      framework,
+      projectName,
+      buildCommand,
+      outputDirectory,
+      environmentName,
+      serverCommand,
+      isStreamingEnabled,
+      isContentstackAuthenticationEnabled,
     } = this.config;
     await this.apolloClient
       .mutate({
@@ -139,6 +140,7 @@ export default class FileUpload extends BaseClass {
               buildCommand: buildCommand === undefined || buildCommand === null ? 'npm run build' : buildCommand,
               ...(serverCommand && serverCommand.trim() !== '' ? { serverCommand } : {}),
               isStreamingEnabled: isStreamingEnabled ?? false,
+              isContentstackAuthenticationEnabled: isContentstackAuthenticationEnabled ?? true,
             },
           },
           skipGitData: true,
@@ -177,6 +179,8 @@ export default class FileUpload extends BaseClass {
       'env-variables': envVariables,
       'server-command': serverCommand,
       'response-mode': responseMode,
+      'enable-cs-auth': enableCsAuth,
+      'disable-cs-auth': disableCsAuth,
       alias,
     } = this.config.flags;
     const { token, apiKey } = configHandler.get(`tokens.${alias}`) ?? {};
@@ -263,6 +267,20 @@ export default class FileUpload extends BaseClass {
     } else {
       this.config.isStreamingEnabled = responseMode === 'streaming';
     }
+    if (enableCsAuth) {
+      this.config.isContentstackAuthenticationEnabled = true;
+    } else if (disableCsAuth) {
+      this.config.isContentstackAuthenticationEnabled = false;
+    } else {
+      this.config.isContentstackAuthenticationEnabled = (await cliux.inquire({
+        type: 'confirm',
+        name: 'contentstackAuth',
+        message:
+          // eslint-disable-next-line max-len
+          'Enable Contentstack Authentication? Restricts access to this environment to members of your Contentstack organization.',
+        default: true,
+      })) as boolean;
+    }
     this.config.variableType = variableType as unknown as string;
     this.config.envVariables = envVariables;
     await this.handleEnvImportFlow();