fix(export): AM 2.0 export under management token — detect via plan-check, skip assets + loud warn (DX-9314)

.talismanrc

@@ -15,4 +15,6 @@ fileignoreconfig:
   checksum: 35451ca4c03359b06531a8461091f4a3a45c4dea1f8853081fb53e4ce28c1cc3
 - filename: packages/contentstack-bulk-operations/test/unit/base-bulk-command.test.ts
   checksum: ca699a9d73757d44ded4d9d27beb4f460f911a7c88a14551a9402a3ac0c69873
+- filename: packages/contentstack-export/src/utils/export-config-handler.ts
+  checksum: 7e9807759211ce97c041462fa12fd77e76e6003d5ff5774d2107d5ae9cec1705
 version: ""

packages/contentstack-export/src/commands/cm/stacks/export.ts

@@ -111,7 +111,7 @@ export default class ExportCommand extends Command {
     let exportDir: string = pathValidator('logs');
     try {
       const { flags } = await this.parse(ExportCommand);
-      const exportConfig = await setupExportConfig(flags);
+      const exportConfig = await setupExportConfig(flags, this.context);
       // Prepare the context object
       const context = this.createExportContext(exportConfig.apiKey, exportConfig.authenticationMethod);
       exportConfig.context = { ...context };

packages/contentstack-export/src/export/modules/assets.ts

@@ -20,6 +20,7 @@ import {
   handleAndLogError,
   messageHandler,
   CLIProgressManager,
+  FEATURE,
 } from '@contentstack/cli-utilities';
 import { PATH_CONSTANTS } from '../../constants';
 
@@ -37,6 +38,23 @@ import {
 } from '../../utils';
 import { handle } from '@oclif/core';
 
+// cli-utilities' CLIProgressManager.globalSummary is runtime-accessible but typed private. These
+// shapes describe the slice we mutate; the single accessor (getGlobalSummary) owns the structural
+// cast + feature-detect so applyAssetSummaryCounts and markAssetsSkippedInSummary don't each copy it.
+type SummaryModuleShape = {
+  status: string;
+  successCount: number;
+  failureCount: number;
+  failures: Array<{ item: string; error: string }>;
+  endTime?: number;
+};
+type GlobalSummaryShape = {
+  getModules(): Map<string, SummaryModuleShape>;
+  registerModule(name: string, totalItems?: number): void;
+  startModule(name: string): void;
+  completeModule(name: string, success?: boolean): void;
+};
+
 export default class ExportAssets extends BaseClass {
   private assetsRootPath: string;
   public assetConfig = config.modules.assets;
@@ -58,30 +76,34 @@ export default class ExportAssets extends BaseClass {
   }
 
   /**
-   * Bug 3 — push real CS Assets entity counts into the final EXPORT summary: override the ASSETS
-   * module to count downloaded binaries only, and add dedicated ASSET TYPES / FIELDS / FOLDERS rows.
-   * Drives the global summary directly (no cli-utilities change); the live multibar is unaffected.
-   * The ASSETS strategy is set to Default so applyStrategyCorrections does not overwrite these.
+   * cli-utilities' CLIProgressManager.globalSummary is runtime-accessible but typed private. Reach it
+   * via a single structural cast + feature-detect here so both callers share one copy of the
+   * private-shape assumption; returns null (caller degrades) if a future cli-utilities version
+   * changes the shape.
    */
-  private applyAssetSummaryCounts(counts: AssetExportCounts): void {
-    type SummaryModule = { successCount: number; failureCount: number };
-    type GlobalSummary = {
-      getModules(): Map<string, SummaryModule>;
-      registerModule(name: string, totalItems?: number): void;
-      startModule(name: string): void;
-      completeModule(name: string, success?: boolean): void;
-    };
-    // globalSummary is runtime-accessible but typed private; reach it via a structural cast.
-    const gs = (CLIProgressManager as unknown as { globalSummary?: GlobalSummary | null }).globalSummary;
-    // We reach into cli-utilities' summary internals, so feature-detect the shape and DEGRADE
-    // (skip the count overrides) instead of throwing if a future version changes it.
+  private getGlobalSummary(): GlobalSummaryShape | null {
+    const gs = (CLIProgressManager as unknown as { globalSummary?: GlobalSummaryShape | null }).globalSummary;
     if (
       !gs ||
       typeof gs.getModules !== 'function' ||
       typeof gs.registerModule !== 'function' ||
       typeof gs.startModule !== 'function' ||
       typeof gs.completeModule !== 'function'
     ) {
+      return null;
+    }
+    return gs;
+  }
+
+  /**
+   * Bug 3 — push real CS Assets entity counts into the final EXPORT summary: override the ASSETS
+   * module to count downloaded binaries only, and add dedicated ASSET TYPES / FIELDS / FOLDERS rows.
+   * Drives the global summary directly (no cli-utilities change); the live multibar is unaffected.
+   * The ASSETS strategy is set to Default so applyStrategyCorrections does not overwrite these.
+   */
+  private applyAssetSummaryCounts(counts: AssetExportCounts): void {
+    const gs = this.getGlobalSummary();
+    if (!gs) {
       log.debug('Global summary shape unavailable; skipping CS Assets summary count overrides', this.exportConfig.context);
       return;
     }
@@ -114,7 +136,60 @@ export default class ExportAssets extends BaseClass {
     }
   }
 
+  /**
+   * DX-9314 — record the AM 2.0 asset skip in the FINAL export summary without a live progress bar.
+   * We do NOT call createNestedProgress (it would print an empty "ASSETS:" section); instead we reach
+   * the global summary directly (same structural cast + feature-detect + degrade pattern as
+   * applyAssetSummaryCounts) and push a failure entry so the Module Details row shows `✗ ASSETS` and the
+   * Failure Summary prints the reason verbatim. failureCount stays 0 so the row reads `0/0 items`.
+   * NOTE: this reuses the failure channel deliberately — a first-class "skipped" summary status is a
+   * separate cli-utilities ticket.
+   */
+  private markAssetsSkippedInSummary(reason: string): void {
+    const gs = this.getGlobalSummary();
+    if (!gs) {
+      log.debug('Global summary shape unavailable; skipping ASSETS skip row', this.exportConfig.context);
+      return;
+    }
+
+    try {
+      const name = this.currentModuleName.toUpperCase();
+      gs.registerModule(name);
+      gs.startModule(name);
+      const module = gs.getModules().get(name);
+      if (module) {
+        module.failures.push({ item: reason, error: reason });
+        module.status = 'failed';
+        module.endTime = Date.now();
+      }
+    } catch (e) {
+      log.debug(`Failed to mark ASSETS as skipped in summary: ${e}`, this.exportConfig.context);
+    }
+  }
+
   async start(): Promise<void> {
+    // AM 2.0 assets cannot be exported with a management token — the CS Assets API only
+    // accepts a logged-in session (auth token / OAuth). Today the linked-workspaces lookup silently
+    // returns [] under a management token, so the export falls back to the legacy layout and import
+    // later reports success with broken entry->asset references. Detect the AM 2.0 org up front via
+    // the plan-check (which DOES accept a management token) and skip the assets module with a loud
+    // warning instead of silently emitting the wrong layout.
+    const amInPlan = this.exportConfig.planStatus?.[FEATURE.ASSET_MANAGEMENT]?.is_part_of_plan;
+    if (amInPlan && this.exportConfig.management_token) {
+      const warning =
+        'Skipping AM 2.0 asset export: management token authentication is not supported by the Assets APIs. ' +
+        'Entry-to-asset references will NOT resolve in the exported content. ' +
+        'Re-run the export with a logged-in session (auth token or OAuth) to export AM 2.0 assets.';
+      cliux.print(`\nWARNING!!! ${warning}`, { color: 'yellow' });
+      // Log at error level so the reason lands in error.log — the final summary's failure section
+      // points users to the error logs, and a bare warn would leave error.log empty.
+      log.error(warning, this.exportConfig.context);
+      // Surface the skip in the FINAL global summary without opening a live progress section
+      // (createNestedProgress would render an empty "ASSETS:" bar). See markAssetsSkippedInSummary.
+      this.markAssetsSkippedInSummary(warning);
+      return;
+    }
+
     const linkedWorkspaces = this.exportConfig.linkedWorkspaces ?? [];
 
     if (linkedWorkspaces.length > 0) {

packages/contentstack-export/src/types/export-config.ts

@@ -1,3 +1,4 @@
+import { FeatureStatus } from '@contentstack/cli-utilities';
 import { Context, Modules, Region } from '.';
 import DefaultConfig from './default-config';
 
@@ -36,6 +37,7 @@ export default interface ExportConfig extends DefaultConfig {
   skipDependencies?: boolean;
   authenticationMethod?: string;
   linkedWorkspaces?: Array<{ uid: string; space_uid: string; is_default: boolean }>;
+  planStatus?: Record<string, FeatureStatus>;
 }
 
 type branch = {

packages/contentstack-export/src/utils/export-config-handler.ts

@@ -1,14 +1,26 @@
 import merge from 'merge';
 import * as path from 'path';
-import { configHandler, isAuthenticated, cliux, sanitizePath, log } from '@contentstack/cli-utilities';
+import {
+  configHandler,
+  isAuthenticated,
+  cliux,
+  sanitizePath,
+  log,
+  isFeatureEnabled,
+  FeatureCtx,
+  FEATURE,
+} from '@contentstack/cli-utilities';
 import defaultConfig from '../config';
 import { readFile, isDirectoryNonEmpty } from './file-helper';
 import { askExportDir, askAPIKey } from './interactive';
 import login from './basic-login';
 import { filter, includes } from 'lodash';
 import { ExportConfig } from '../types';
 
-const setupConfig = async (exportCmdFlags: any): Promise<ExportConfig> => {
+const setupConfig = async (
+  exportCmdFlags: any,
+  context?: { planCheckRequired?: string[] },
+): Promise<ExportConfig> => {
   // Set progress supported module FIRST, before any log calls
   // This ensures the logger respects the showConsoleLogs setting correctly
   configHandler.set('log.progressSupportedModule', 'export');
@@ -150,6 +162,31 @@ const setupConfig = async (exportCmdFlags: any): Promise<ExportConfig> => {
   }
   // Add authentication details to config for context tracking
   config.authenticationMethod = authenticationMethod;
+
+  // DX-9314: detect AM 2.0 via the plan-check API. Unlike the CS Assets API (which rejects
+  // management tokens), the auth-api /feature-status endpoint accepts a management token, so this
+  // reliably tells us the org is AM 2.0 even under `--alias`. The assets module uses this to skip
+  // AM 2.0 asset export with a loud warning instead of silently emitting the legacy layout.
+  // `context.planCheckRequired` is honored if PR #2627's plan-guard prerun hook populated it, but
+  // we always check ASSET_MANAGEMENT directly so this works even without that hook.
+  const featuresToCheck: string[] = Array.from(
+    new Set<string>([FEATURE.ASSET_MANAGEMENT, ...(context?.planCheckRequired ?? [])]),
+  );
+  config.planStatus = config.planStatus || {};
+  const planCtx: FeatureCtx = {
+    apiKey: config.apiKey,
+    managementToken: config.management_token,
+    authToken: config.auth_token,
+  };
+  for (const featureUid of featuresToCheck) {
+    try {
+      config.planStatus[featureUid] = await isFeatureEnabled(featureUid, planCtx);
+      log.debug(`[export] Plan status fetched for "${featureUid}".`);
+    } catch (error) {
+      log.warn(`[export] Could not fetch plan status for "${featureUid}": ${(error as Error).message}`);
+    }
+  }
+
   log.debug('Export configuration setup completed.', { ...config });
 
   return config;