@nextsparkjs/core 0.1.0-beta.19 → 0.1.0-beta.190

package/templates/contents/themes/starter/tests/cypress/src/session-helpers.ts

@@ -1,30 +1,102 @@
 /**
- * Starter Theme Session Helpers
+ * Default Theme Session Helpers
  *
- * Direct login functions for theme tests using theme-specific users.
+ * Direct login functions for Default theme tests using theme-specific users.
  * These helpers don't depend on ACTIVE_THEME environment variable.
  *
+ * EXPERIMENTAL: Uses API-based login instead of UI login.
+ * Hypothesis: API login is faster and more stable than DevKeyring UI login,
+ * especially with slow dev servers (Turbopack on-demand compilation).
+ *
+ * Test file: cypress/e2e/_experimental/api-login-test.cy.ts
+ * Fallback: If API fails, falls back to UI login with DevKeyring.
+ *
  * IMPORTANT: After login, this helper sets activeTeamId in localStorage.
  * This is required because all entity API calls include x-team-id header
- * which is read from localStorage.activeTeamId.
+ * which is read from localStorage.activeTeamId (see core/lib/api/entities.ts).
+ * Without this, API calls return 400 "Team context required".
+ */
+
+import { DevKeyringPOM as DevKeyring } from './components/DevKeyringPOM'
+
+/**
+ * Environment-based Test Credentials
+ *
+ * These can be overridden via Cypress env variables (cypress.config.ts or CLI):
+ * - CYPRESS_DEVELOPER_EMAIL / CYPRESS_DEVELOPER_PASSWORD - Developer user
+ * - CYPRESS_SUPERADMIN_EMAIL / CYPRESS_SUPERADMIN_PASSWORD - Superadmin user
+ * - CYPRESS_OWNER_EMAIL, CYPRESS_ADMIN_EMAIL, etc. - Demo theme users
+ *
+ * Fallback values are the default users from core and theme sample data.
  */
 
+// Core system user credentials (configurable via env)
+const DEVELOPER_EMAIL = Cypress.env('DEVELOPER_EMAIL') || 'developer@nextspark.dev'
+const DEVELOPER_PASSWORD = Cypress.env('DEVELOPER_PASSWORD') || 'Pandora1234'
+const SUPERADMIN_PASSWORD = Cypress.env('SUPERADMIN_PASSWORD') || 'Pandora1234'
+
+// Demo user password (configurable via env)
+const TEST_PASSWORD = Cypress.env('TEST_PASSWORD') || 'Test1234'
+
 /**
- * Theme Test Users
- * These emails should match the seeded users for the starter theme
+ * Team-role test users.
+ *
+ * The starter seeds exactly two users (core migration 090): superadmin and
+ * developer. The names below come from the default theme's richer sample data,
+ * and every one of them has to be pointed at a real user through the matching
+ * env var before the specs that use it can run.
+ *
+ * OWNER is the exception, and it matters: it is what the CRUD specs log in as,
+ * so its fallback is the user the starter actually creates — superadmin owns
+ * the initial team. Leaving it on a name with no row made the whole UAT suite
+ * fail in session setup, before a single assertion.
  */
-export const THEME_USERS = {
-  OWNER: 'owner@starter.dev',
-  ADMIN: 'admin@starter.dev',
-  MEMBER: 'member@starter.dev',
-  VIEWER: 'viewer@starter.dev',
+export const DEFAULT_THEME_USERS = {
+  OWNER: Cypress.env('OWNER_EMAIL') || 'superadmin@nextspark.dev',
+  ADMIN: Cypress.env('ADMIN_EMAIL') || 'james.wilson@nextspark.dev',
+  MEMBER: Cypress.env('MEMBER_EMAIL') || 'emily.johnson@nextspark.dev',
+  EDITOR: Cypress.env('EDITOR_EMAIL') || 'diego.ramirez@nextspark.dev',
+  VIEWER: Cypress.env('VIEWER_EMAIL') || 'sarah.davis@nextspark.dev',
 } as const
 
-// Common password for all test users
-const TEST_PASSWORD = 'Test1234'
+/**
+ * The password that goes with OWNER.
+ *
+ * OWNER falls back to the seeded superadmin, and that user's password is the
+ * superadmin one, not the demo-user one. A theme that points OWNER at a user of
+ * its own sets OWNER_EMAIL, and then the demo password is the right default.
+ */
+const OWNER_PASSWORD =
+  Cypress.env('OWNER_PASSWORD') ||
+  (Cypress.env('OWNER_EMAIL') ? TEST_PASSWORD : SUPERADMIN_PASSWORD)
+
+/**
+ * Whether a non-owner team role points at a user that exists.
+ *
+ * Only OWNER has a seeded fallback. The other four keep the default theme's
+ * names, which resolve to nothing here until the theme seeds them and sets the
+ * matching env var. A spec that needs one guards on this instead of failing in
+ * session setup, where the error is a ten-second timeout on the Dev Keyring
+ * rather than "this user does not exist".
+ */
+export function hasSeededTeamRoleUser(role: 'ADMIN' | 'MEMBER' | 'EDITOR' | 'VIEWER'): boolean {
+  return Boolean(Cypress.env(`${role}_EMAIL`))
+}
+
+/**
+ * Core System Users (from core/migrations/090_sample_data.sql)
+ * These users have special global roles, not team-based roles
+ *
+ * IMPORTANT: DEVELOPER is the recommended user for most tests.
+ * Configurable via CYPRESS_DEVELOPER_EMAIL env variable.
+ */
+export const CORE_USERS = {
+  SUPERADMIN: Cypress.env('SUPERADMIN_EMAIL') || 'superadmin@nextspark.dev',
+  DEVELOPER: DEVELOPER_EMAIL,
+} as const
 
-// Extended timeout for dev server compilation
-const API_TIMEOUT = 30000
+// Extended timeout for dev server compilation (60s for slow cold starts)
+const API_TIMEOUT = 60000
 
 /**
  * Sets up team context after login (requires page to be loaded for localStorage access)
@@ -35,8 +107,10 @@ const API_TIMEOUT = 30000
  * 3. Calls /api/v1/teams/switch to set server-side team cookie
  *
  * Without this, all entity API calls return 400 "Team context required"
+ *
+ * @param preferredRole - Optional role to filter teams by (e.g., 'member' to select team where user is member)
  */
-function setupTeamContext() {
+function setupTeamContext(preferredRole?: string) {
   cy.request({
     method: 'GET',
     url: '/api/v1/teams',
@@ -44,10 +118,23 @@ function setupTeamContext() {
     failOnStatusCode: false
   }).then((teamsResponse) => {
     if (teamsResponse.status === 200 && teamsResponse.body?.data?.length > 0) {
-      const firstTeam = teamsResponse.body.data[0]
-      const teamId = firstTeam.id
+      const teams = teamsResponse.body.data
+
+      // If preferredRole specified, find team where user has that role
+      let selectedTeam = teams[0]
+      if (preferredRole) {
+        const teamWithRole = teams.find((t: { role: string }) => t.role === preferredRole)
+        if (teamWithRole) {
+          selectedTeam = teamWithRole
+          cy.log(`✅ Found team with role "${preferredRole}": ${selectedTeam.name}`)
+        } else {
+          cy.log(`⚠️ No team found with role "${preferredRole}", using first team`)
+        }
+      }
 
-      cy.log(`Setting active team: ${firstTeam.name} (${teamId})`)
+      const teamId = selectedTeam.id
+
+      cy.log(`✅ Setting active team: ${selectedTeam.name} (${teamId}) - role: ${selectedTeam.role}`)
 
       // Set in localStorage (used by frontend buildHeaders() to add x-team-id)
       cy.window().then((win) => {
@@ -63,7 +150,7 @@ function setupTeamContext() {
         failOnStatusCode: false
       })
     } else {
-      cy.log(`Warning: No teams found for user, API calls requiring team context will fail`)
+      cy.log(`⚠️ No teams found for user, API calls requiring team context will fail`)
     }
   })
 }
@@ -71,47 +158,64 @@ function setupTeamContext() {
 /**
  * Login via API (faster and more stable than UI)
  * Returns true if API login succeeded, false if fallback to UI was needed.
+ *
+ * @param email - User email to login
+ * @param password - Optional password (defaults to TEST_PASSWORD for demo users)
  */
-function apiLogin(email: string): Cypress.Chainable<boolean> {
+function apiLogin(email: string, password: string = TEST_PASSWORD): Cypress.Chainable<boolean> {
   return cy.request({
     method: 'POST',
     url: '/api/auth/sign-in/email',
-    body: { email, password: TEST_PASSWORD },
+    body: { email, password },
     timeout: API_TIMEOUT,
     failOnStatusCode: false
   }).then((response) => {
     if (response.status === 200) {
       return true
     } else {
-      cy.log(`Warning: API login failed with status ${response.status}, falling back to UI login`)
+      cy.log(`⚠️ API login failed with status ${response.status}, falling back to UI login`)
       // Fallback to UI login if API fails
       cy.visit('/login', { timeout: 60000 })
+      const devKeyring = new DevKeyring()
+      devKeyring.validateVisible()
+      devKeyring.quickLoginByEmail(email)
       return false
     }
   })
 }
 
 /**
- * Login as Owner
+ * Login as Default Theme Owner
  * Session is cached and reused across tests
+ *
+ * Flow:
+ * 1. API login (or UI fallback)
+ * 2. Visit dashboard to load page context
+ * 3. Setup team context (sets localStorage.activeTeamId)
  */
-export function loginAsOwner() {
-  cy.session('owner-session', () => {
-    apiLogin(THEME_USERS.OWNER).then((apiLoginSucceeded) => {
+export function loginAsDefaultOwner() {
+  cy.session('default-owner-session', () => {
+    apiLogin(DEFAULT_THEME_USERS.OWNER, OWNER_PASSWORD).then((apiLoginSucceeded) => {
+      // If API login succeeded, we need to visit a page before setting localStorage
       if (apiLoginSucceeded) {
         cy.visit('/dashboard', { timeout: 60000 })
       }
+      // URL assertion to ensure page loaded
       cy.url().should('include', '/dashboard')
+      // Setup team context (requires page to be loaded for localStorage)
       setupTeamContext()
     })
   }, {
     validate: () => {
+      // Validate auth session exists
       cy.request({
         url: '/api/auth/get-session',
         timeout: API_TIMEOUT,
         failOnStatusCode: false
       }).its('status').should('eq', 200)
 
+      // Validate team context exists in localStorage
+      // This ensures API calls will have x-team-id header
       cy.window().then((win) => {
         const teamId = win.localStorage.getItem('activeTeamId')
         expect(teamId, 'activeTeamId should exist in localStorage').to.not.be.null
@@ -122,12 +226,12 @@ export function loginAsOwner() {
 }
 
 /**
- * Login as Admin
+ * Login as Default Theme Admin
  * Session is cached and reused across tests
  */
-export function loginAsAdmin() {
-  cy.session('admin-session', () => {
-    apiLogin(THEME_USERS.ADMIN).then((apiLoginSucceeded) => {
+export function loginAsDefaultAdmin() {
+  cy.session('default-admin-session', () => {
+    apiLogin(DEFAULT_THEME_USERS.ADMIN).then((apiLoginSucceeded) => {
       if (apiLoginSucceeded) {
         cy.visit('/dashboard', { timeout: 60000 })
       }
@@ -146,12 +250,40 @@ export function loginAsAdmin() {
 }
 
 /**
- * Login as Member
+ * Login as Default Theme Member
+ * Session is cached and reused across tests
+ *
+ * Note: Emily Johnson is member of Everpoint but admin of Riverstone.
+ * We explicitly select the team where she has 'member' role.
+ */
+export function loginAsDefaultMember() {
+  cy.session('default-member-session', () => {
+    apiLogin(DEFAULT_THEME_USERS.MEMBER).then((apiLoginSucceeded) => {
+      if (apiLoginSucceeded) {
+        cy.visit('/dashboard', { timeout: 60000 })
+      }
+      cy.url().should('include', '/dashboard')
+      // Explicitly select team where user is member (not admin)
+      setupTeamContext('member')
+    })
+  }, {
+    validate: () => {
+      cy.request({
+        url: '/api/auth/get-session',
+        timeout: API_TIMEOUT,
+        failOnStatusCode: false
+      }).its('status').should('eq', 200)
+    }
+  })
+}
+
+/**
+ * Login as Default Theme Viewer
  * Session is cached and reused across tests
  */
-export function loginAsMember() {
-  cy.session('member-session', () => {
-    apiLogin(THEME_USERS.MEMBER).then((apiLoginSucceeded) => {
+export function loginAsDefaultViewer() {
+  cy.session('default-viewer-session', () => {
+    apiLogin(DEFAULT_THEME_USERS.VIEWER).then((apiLoginSucceeded) => {
       if (apiLoginSucceeded) {
         cy.visit('/dashboard', { timeout: 60000 })
       }
@@ -170,12 +302,16 @@ export function loginAsMember() {
 }
 
 /**
- * Login as Viewer
+ * Login as Default Theme Editor
  * Session is cached and reused across tests
+ *
+ * Editor is a custom role with limited permissions:
+ * - Can view/list customers but cannot create/update/delete
+ * - Cannot access Admin or Dev Zone
  */
-export function loginAsViewer() {
-  cy.session('viewer-session', () => {
-    apiLogin(THEME_USERS.VIEWER).then((apiLoginSucceeded) => {
+export function loginAsDefaultEditor() {
+  cy.session('default-editor-session', () => {
+    apiLogin(DEFAULT_THEME_USERS.EDITOR).then((apiLoginSucceeded) => {
       if (apiLoginSucceeded) {
         cy.visit('/dashboard', { timeout: 60000 })
       }
@@ -194,62 +330,220 @@ export function loginAsViewer() {
 }
 
 /**
- * Login with custom session management
- * Useful for specific email/password combinations
+ * Login as Superadmin (core system user)
+ * Session is cached and reused across tests
+ *
+ * Superadmin has global access:
+ * - Full Admin access
+ * - Not team-based (no setupTeamContext needed)
  */
-export function loginWithSession(email: string, password: string) {
-  const sessionId = `session-${email.replace(/[@.]/g, '-')}`
+export function loginAsDefaultSuperadmin() {
+  cy.session('default-superadmin-session', () => {
+    apiLogin(CORE_USERS.SUPERADMIN, SUPERADMIN_PASSWORD).then((apiLoginSucceeded) => {
+      if (apiLoginSucceeded) {
+        cy.visit('/superadmin', { timeout: 60000 })
+      }
+      // Superadmin should land on superadmin panel or dashboard
+      cy.url().should('satisfy', (url: string) => {
+        return url.includes('/superadmin') || url.includes('/dashboard')
+      })
+    })
+  }, {
+    validate: () => {
+      cy.request({
+        url: '/api/auth/get-session',
+        timeout: API_TIMEOUT,
+        failOnStatusCode: false
+      }).its('status').should('eq', 200)
+    }
+  })
+}
 
-  cy.session(sessionId, () => {
-    cy.request({
-      method: 'POST',
-      url: '/api/auth/sign-in/email',
-      body: { email, password },
-      timeout: API_TIMEOUT,
-      failOnStatusCode: false
-    }).then((response) => {
-      if (response.status === 200) {
-        cy.visit('/dashboard', { timeout: 60000 })
-        cy.url().should('include', '/dashboard')
-        setupTeamContext()
-      } else {
-        throw new Error(`Login failed for ${email}: ${response.body?.error || 'Unknown error'}`)
+/**
+ * Login as Developer (core system user)
+ * Session is cached and reused across tests
+ *
+ * Developer has:
+ * - Dev Zone access
+ * - Not team-based (no setupTeamContext needed)
+ */
+export function loginAsDefaultDeveloper() {
+  cy.session('default-developer-session', () => {
+    apiLogin(CORE_USERS.DEVELOPER, DEVELOPER_PASSWORD).then((apiLoginSucceeded) => {
+      if (apiLoginSucceeded) {
+        cy.visit('/devtools', { timeout: 60000 })
       }
+      // Developer should land on devtools or dashboard
+      cy.url().should('satisfy', (url: string) => {
+        return url.includes('/devtools') || url.includes('/dashboard')
+      })
     })
+  }, {
+    validate: () => {
+      cy.request({
+        url: '/api/auth/get-session',
+        timeout: API_TIMEOUT,
+        failOnStatusCode: false
+      }).its('status').should('eq', 200)
+    }
   })
 }
 
+// Aliases for convenience
+export const loginAsOwner = loginAsDefaultOwner
+export const loginAsMember = loginAsDefaultMember
+export const loginAsAdmin = loginAsDefaultAdmin
+export const loginAsEditor = loginAsDefaultEditor
+export const loginAsViewer = loginAsDefaultViewer
+export const loginAsSuperadmin = loginAsDefaultSuperadmin
+export const loginAsDeveloper = loginAsDefaultDeveloper
+
 /**
- * Login as a specific role
+ * Returns theme users for backwards compatibility with external helper pattern.
+ * Used by tests that import { getThemeUsers } from session-helpers.
  */
-export function loginAsRole(role: 'owner' | 'admin' | 'member' | 'viewer') {
-  const loginFunctions = {
-    owner: loginAsOwner,
-    admin: loginAsAdmin,
-    member: loginAsMember,
-    viewer: loginAsViewer,
-  }
+export function getThemeUsers() {
+  return DEFAULT_THEME_USERS
+}
 
-  const loginFn = loginFunctions[role]
-  if (loginFn) {
-    loginFn()
-  } else {
-    throw new Error(`Unknown role: ${role}`)
+// ============================================================
+// BILLING TEST USERS
+// ============================================================
+
+/**
+ * Billing Test Users - Teams with different subscription plans
+ *
+ * These users/teams are used to test billing features from different plan perspectives:
+ * - Free Plan: Carlos's personal team (team-personal-carlos-001)
+ * - Pro Plan: Everpoint Labs (team-everpoint-001)
+ * - Enterprise Plan: Ironvale Global (team-ironvale-002)
+ */
+export const BILLING_TEAMS = {
+  FREE: {
+    teamId: Cypress.env('BILLING_FREE_TEAM_ID') || 'team-personal-carlos-001',
+    name: 'Carlos Personal',
+    planSlug: 'free',
+    owner: Cypress.env('BILLING_FREE_OWNER') || 'carlos.mendoza@nextspark.dev'
+  },
+  PRO: {
+    teamId: Cypress.env('BILLING_PRO_TEAM_ID') || 'team-everpoint-001',
+    name: 'Everpoint Labs',
+    planSlug: 'pro',
+    owner: Cypress.env('BILLING_PRO_OWNER') || 'carlos.mendoza@nextspark.dev'
+  },
+  ENTERPRISE: {
+    teamId: Cypress.env('BILLING_ENTERPRISE_TEAM_ID') || 'team-ironvale-002',
+    name: 'Ironvale Global',
+    planSlug: 'enterprise',
+    owner: Cypress.env('BILLING_ENTERPRISE_OWNER') || 'ana.garcia@nextspark.dev'
   }
+} as const
+
+/**
+ * Switch to a specific team after login
+ * @param teamId - Team ID to switch to
+ */
+function switchToTeam(teamId: string) {
+  cy.window().then((win) => {
+    win.localStorage.setItem('activeTeamId', teamId)
+  })
+
+  cy.request({
+    method: 'POST',
+    url: '/api/v1/teams/switch',
+    body: { teamId },
+    timeout: API_TIMEOUT,
+    failOnStatusCode: false
+  })
+}
+
+/**
+ * Login as Carlos and switch to Free plan team
+ * Used for testing Free plan restrictions
+ */
+export function loginAsFreePlanUser() {
+  cy.session('billing-free-plan-session', () => {
+    apiLogin(BILLING_TEAMS.FREE.owner).then((apiLoginSucceeded) => {
+      if (apiLoginSucceeded) {
+        cy.visit('/dashboard', { timeout: 60000, failOnStatusCode: false })
+      }
+      cy.url().should('include', '/dashboard')
+      // Switch to the Free team
+      switchToTeam(BILLING_TEAMS.FREE.teamId)
+    })
+  }, {
+    validate: () => {
+      cy.request({
+        url: '/api/auth/get-session',
+        timeout: API_TIMEOUT,
+        failOnStatusCode: false
+      }).its('status').should('eq', 200)
+
+      cy.window().then((win) => {
+        const teamId = win.localStorage.getItem('activeTeamId')
+        expect(teamId).to.eq(BILLING_TEAMS.FREE.teamId)
+      })
+    }
+  })
 }
 
 /**
- * Clear all session data
+ * Login as Carlos and switch to Pro plan team (Everpoint)
+ * Used for testing Pro plan features
  */
-export function clearSession() {
-  cy.clearCookies()
-  cy.clearLocalStorage()
-  Cypress.session.clearAllSavedSessions()
+export function loginAsProPlanUser() {
+  cy.session('billing-pro-plan-session', () => {
+    apiLogin(BILLING_TEAMS.PRO.owner).then((apiLoginSucceeded) => {
+      if (apiLoginSucceeded) {
+        cy.visit('/dashboard', { timeout: 60000, failOnStatusCode: false })
+      }
+      cy.url().should('include', '/dashboard')
+      // Switch to the Pro team
+      switchToTeam(BILLING_TEAMS.PRO.teamId)
+    })
+  }, {
+    validate: () => {
+      cy.request({
+        url: '/api/auth/get-session',
+        timeout: API_TIMEOUT,
+        failOnStatusCode: false
+      }).its('status').should('eq', 200)
+
+      cy.window().then((win) => {
+        const teamId = win.localStorage.getItem('activeTeamId')
+        expect(teamId).to.eq(BILLING_TEAMS.PRO.teamId)
+      })
+    }
+  })
 }
 
 /**
- * Returns theme users for backwards compatibility with external helper pattern.
+ * Login as Ana and switch to Enterprise plan team (Ironvale)
+ * Used for testing Enterprise plan features
  */
-export function getThemeUsers() {
-  return THEME_USERS
+export function loginAsEnterprisePlanUser() {
+  cy.session('billing-enterprise-plan-session', () => {
+    // Ana is owner of Ironvale
+    apiLogin(BILLING_TEAMS.ENTERPRISE.owner).then((apiLoginSucceeded) => {
+      if (apiLoginSucceeded) {
+        cy.visit('/dashboard', { timeout: 60000, failOnStatusCode: false })
+      }
+      cy.url().should('include', '/dashboard')
+      // Switch to the Enterprise team
+      switchToTeam(BILLING_TEAMS.ENTERPRISE.teamId)
+    })
+  }, {
+    validate: () => {
+      cy.request({
+        url: '/api/auth/get-session',
+        timeout: API_TIMEOUT,
+        failOnStatusCode: false
+      }).its('status').should('eq', 200)
+
+      cy.window().then((win) => {
+        const teamId = win.localStorage.getItem('activeTeamId')
+        expect(teamId).to.eq(BILLING_TEAMS.ENTERPRISE.teamId)
+      })
+    }
+  })
 }

package/templates/contents/themes/starter/tests/cypress/support/commands.ts

@@ -140,18 +140,37 @@ Cypress.Commands.add('logout', () => {
 })
 
 /**
- * Create a task via API
+ * The headers an entity API call needs, `x-team-id` included.
+ *
+ * The app writes `activeTeamId` into localStorage while the dashboard loads, so
+ * a command that runs before any dashboard visit — a `beforeEach` seeding data,
+ * typically — finds nothing there. Without the header the API answers 400
+ * TEAM_CONTEXT_REQUIRED, and since these requests do not fail on status the
+ * seed silently does nothing: the failure only surfaces later, as an assertion
+ * about data that was never created. Asking the API for the team is what makes
+ * the command work from any starting point.
  */
-Cypress.Commands.add('createTask', (data) => {
+function apiHeaders(): Cypress.Chainable<Record<string, string>> {
+  const base: Record<string, string> = { 'Content-Type': 'application/json' }
+
   return cy.window().then((win) => {
-    const teamId = win.localStorage.getItem('activeTeamId')
-    const headers: Record<string, string> = {
-      'Content-Type': 'application/json',
-    }
-    if (teamId) {
-      headers['x-team-id'] = teamId
-    }
+    const stored = win.localStorage.getItem('activeTeamId')
+    if (stored) return cy.wrap({ ...base, 'x-team-id': stored })
+
+    return cy
+      .request({ method: 'GET', url: '/api/v1/teams', failOnStatusCode: false })
+      .then((response) => {
+        const teamId = response.body?.data?.[0]?.id
+        return cy.wrap(teamId ? { ...base, 'x-team-id': teamId } : base)
+      })
+  })
+}
 
+/**
+ * Create a task via API
+ */
+Cypress.Commands.add('createTask', (data) => {
+  return apiHeaders().then((headers) => {
     return cy.request({
       method: 'POST',
       url: '/api/v1/tasks',
@@ -171,15 +190,7 @@ Cypress.Commands.add('createTask', (data) => {
  * Delete a task via API
  */
 Cypress.Commands.add('deleteTask', (id: string) => {
-  return cy.window().then((win) => {
-    const teamId = win.localStorage.getItem('activeTeamId')
-    const headers: Record<string, string> = {
-      'Content-Type': 'application/json',
-    }
-    if (teamId) {
-      headers['x-team-id'] = teamId
-    }
-
+  return apiHeaders().then((headers) => {
     return cy.request({
       method: 'DELETE',
       url: `/api/v1/tasks/${id}`,