spaps-sdk 1.0.1 → 1.0.2

package/README.md

@@ -1,6 +1,6 @@
 # Sweet Potato SDK
 
-[![npm version](https://badge.fury.io/js/%40sweet-potato%2Fsdk.svg)](https://www.npmjs.com/package/@sweet-potato/sdk)
+[![npm version](https://badge.fury.io/js/spaps-sdk.svg)](https://www.npmjs.com/package/spaps-sdk)
 [![TypeScript](https://img.shields.io/badge/TypeScript-4.5%2B-blue)](https://www.typescriptlang.org/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
@@ -34,13 +34,15 @@ A comprehensive TypeScript SDK for integrating with the Sweet Potato Authenticat
 ## Installation
 
 ```bash
-npm install @sweet-potato/sdk
+npm install spaps-sdk
 # or
-yarn add @sweet-potato/sdk
-# or
-pnpm add @sweet-potato/sdk
+yarn add spaps-sdk
+# or  
+pnpm add spaps-sdk
 ```
 
+> **📍 Important:** SPAPS runs on port **3456**. This is standardized across all tools.
+
 ### Requirements
 
 - Node.js 14+ or modern browser
@@ -51,13 +53,13 @@ pnpm add @sweet-potato/sdk
 ### Basic Setup
 
 ```typescript
-import { SweetPotatoSDK, TokenManager } from '@sweet-potato/sdk';
+import { SweetPotatoSDK, TokenManager } from 'spaps-sdk';
 
 // Initialize the SDK
 const sdk = new SweetPotatoSDK({
-  apiUrl: 'http://localhost:3456',  // Development
-  // apiUrl: 'https://api.sweetpotato.dev',  // Production
-  apiKey: 'your-api-key',
+  apiUrl: 'http://localhost:3456',  // Always port 3456 for local dev
+  // apiUrl: 'https://api.sweetpotato.dev',  // Production (not available yet)
+  apiKey: process.env.SPAPS_API_KEY || 'test_key_local_dev_only',
   timeout: 30000,  // Optional: 30 second timeout
   retries: 3       // Optional: 3 retry attempts
 });
@@ -71,18 +73,29 @@ await TokenManager.autoRefreshToken(sdk);
 ### Wallet Authentication (Complete Flow)
 
 ```typescript
-// Auto-detect chain and authenticate
+// Complete implementation with proper signature handling
+const walletAddress = '0x742d35CC6354C7Cb24b5d2C2C7f9Ff5Ef8B4d5f6';
+
 const authResponse = await sdk.auth.authenticateWallet(
-  '0x742d35CC6354C7Cb24b5d2C2C7f9Ff5Ef8B4d5f6',
+  walletAddress,
   async (message) => {
-    // Use your wallet provider to sign the message
-    // Example with MetaMask:
-    return await window.ethereum.request({
-      method: 'personal_sign',
-      params: [message, walletAddress]
-    });
+    // The SDK provides the message to sign
+    // You must return the signed message
+    
+    // Browser (MetaMask):
+    if (typeof window !== 'undefined' && window.ethereum) {
+      return await window.ethereum.request({
+        method: 'personal_sign',
+        params: [message, walletAddress]
+      });
+    }
+    
+    // Node.js (ethers.js):
+    // const { Wallet } = require('ethers');
+    // const wallet = new Wallet(privateKey);
+    // return await wallet.signMessage(message);
   },
-  'ethereum',      // Optional: specify chain type
+  'ethereum',      // Chain type: 'ethereum', 'solana', 'bitcoin', 'base'
   'username123'    // Optional: username for new users
 );
 
@@ -538,7 +551,11 @@ Static utility class for wallet operations.
 
 ## What's NOT in the SDK
 
-### Whitelist Management
+> **⚠️ Important:** These features require direct API calls with admin authentication.
+
+### Whitelist Management  
+❌ **Not available:** `sdk.whitelist.check()`, `sdk.admin.addToWhitelist()`
+
 Whitelist operations require admin JWT authentication and must be done via direct API calls:
 
 ```typescript
@@ -565,20 +582,63 @@ const response = await fetch(`${apiUrl}/api/v1/whitelist`, {
 ```
 
 ### Admin Operations
+❌ **Not available:** `sdk.admin.*` methods
+
+Admin operations require JWT authentication:
 - Application management (create/rotate API keys)
-- User management (admin dashboard)
+- User management (admin dashboard)  
 - Direct database operations
+- Product sync from Stripe
+
+All admin operations follow this pattern:
+1. Authenticate as admin user via `sdk.auth.signInWithPassword()`
+2. Use the JWT token for direct API calls
+3. Include both JWT and API key in headers
 
 See [Stripe Admin Guide](../STRIPE_ADMIN_GUIDE.md) for product management instructions.
 
+## Local Development Mode
+
+When using `npx spaps local`:
+- ✅ Auto-authentication enabled (no signup needed)
+- ✅ Test users pre-created: 'user', 'admin', 'premium'
+- ✅ CORS enabled for all origins
+- ✅ No real API keys required
+- ✅ Mock Stripe integration ready
+- ✅ Runs on port **3456** by default
+
+```bash
+# Start local server
+npx spaps local
+
+# Your app can now connect to:
+http://localhost:3456
+```
+
+## Production Notes
+
+⚠️ **Production API is not yet available.** Currently, only local development mode is supported.
+
+Future production URL: `https://api.sweetpotato.dev` (coming soon)
+
 ## Troubleshooting
 
 ### Common Issues
 
+**Wrong Port**
+```typescript
+// ❌ Wrong
+apiUrl: 'http://localhost:3000'
+apiUrl: 'http://localhost:3300'
+
+// ✅ Correct - always use 3456
+apiUrl: 'http://localhost:3456'
+```
+
 **CORS Errors**
 ```typescript
-// Ensure your API URL is whitelisted in SPAPS config
-// Contact support to add your domain
+// In local mode, CORS is enabled for all origins
+// In production, ensure your domain is whitelisted
 ```
 
 **Token Expired**

package/admin-utils.ts

@@ -25,7 +25,7 @@ export interface WhitelistClient {
  * Requires admin JWT token from authentication
  */
 export class WhitelistManager {
-  private headers: HeadersInit;
+  private headers: Record<string, string>;
   
   constructor(private config: WhitelistClient) {
     this.headers = {
@@ -44,7 +44,7 @@ export class WhitelistManager {
       { headers: { 'X-API-Key': this.config.apiKey } }
     );
     
-    const result = await response.json();
+    const result = await response.json() as any;
     return result.data?.entry || null;
   }
 
@@ -71,11 +71,11 @@ export class WhitelistManager {
     });
 
     if (!response.ok) {
-      const error = await response.json();
+      const error = await response.json() as any;
       throw new Error(error.error?.message || 'Failed to add to whitelist');
     }
 
-    const result = await response.json();
+    const result = await response.json() as any;
     return result.data.entry;
   }
 
@@ -99,7 +99,7 @@ export class WhitelistManager {
       body: JSON.stringify({ emails })
     });
 
-    const result = await response.json();
+    const result = await response.json() as any;
     return result.data;
   }
 
@@ -124,7 +124,7 @@ export class WhitelistManager {
       { headers: this.headers }
     );
 
-    const result = await response.json();
+    const result = await response.json() as any;
     return result.data;
   }
 
@@ -149,11 +149,11 @@ export class WhitelistManager {
     );
 
     if (!response.ok) {
-      const error = await response.json();
+      const error = await response.json() as any;
       throw new Error(error.error?.message || 'Failed to update whitelist');
     }
 
-    const result = await response.json();
+    const result = await response.json() as any;
     return result.data.entry;
   }
 
@@ -170,7 +170,7 @@ export class WhitelistManager {
     );
 
     if (!response.ok) {
-      const error = await response.json();
+      const error = await response.json() as any;
       throw new Error(error.error?.message || 'Failed to remove from whitelist');
     }
   }
@@ -188,7 +188,7 @@ export class WhitelistManager {
       { headers: this.headers }
     );
 
-    const result = await response.json();
+    const result = await response.json() as any;
     return result.data.stats;
   }
 
@@ -205,11 +205,11 @@ export class WhitelistManager {
     );
 
     if (!response.ok) {
-      const error = await response.json();
+      const error = await response.json() as any;
       throw new Error(error.error?.message || 'Failed to clear whitelist');
     }
 
-    const result = await response.json();
+    const result = await response.json() as any;
     const match = result.data.message.match(/Cleared (\d+) entries/);
     return match ? parseInt(match[1]) : 0;
   }

package/dist/index.js

@@ -279,6 +279,10 @@ var AuthService = class {
   async signInWithPassword(request) {
     var _a;
     const response = await this.httpClient.post("/api/auth/login", request);
+    if (response.access_token && response.refresh_token && response.user) {
+      this.httpClient.setAccessToken(response.access_token);
+      return response;
+    }
     if (!response.success || !response.data) {
       throw new Error(((_a = response.error) == null ? void 0 : _a.message) || "Login failed");
     }

package/dist/index.mjs

@@ -245,6 +245,10 @@ var AuthService = class {
   async signInWithPassword(request) {
     var _a;
     const response = await this.httpClient.post("/api/auth/login", request);
+    if (response.access_token && response.refresh_token && response.user) {
+      this.httpClient.setAccessToken(response.access_token);
+      return response;
+    }
     if (!response.success || !response.data) {
       throw new Error(((_a = response.error) == null ? void 0 : _a.message) || "Login failed");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps-sdk",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "repository": {
     "type": "git",
     "url": "https://github.com/sweet-potato/spaps-sdk"