spaps 0.3.7 → 0.3.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps",
-  "version": "0.3.7",
+  "version": "0.3.8",
   "description": "Sweet Potato Authentication & Payment Service CLI - Zero-config local development and project scaffolding",
   "main": "bin/spaps.js",
   "bin": {

package/src/local-server.js

@@ -249,27 +249,33 @@ class LocalServer {
             limit: req.query.limit ? parseInt(req.query.limit) : 10
           });
 
-          // Get prices for each product
+          // Get prices for each product and filter out local-only products
           const productsWithPrices = await Promise.all(
-            products.data.map(async (product) => {
-              const prices = await stripe.prices.list({
-                product: product.id,
-                active: true,
-                limit: 1
-              });
-              
-              const defaultPrice = prices.data[0];
-              return {
-                id: product.id,
-                name: product.name,
-                description: product.description,
-                price: defaultPrice ? defaultPrice.unit_amount : 0,
-                currency: defaultPrice ? defaultPrice.currency : 'usd',
-                price_id: defaultPrice ? defaultPrice.id : null,
-                active: product.active,
-                metadata: product.metadata
-              };
-            })
+            products.data
+              .filter(product => {
+                // Only show products that were synced from SPAPS (have spaps_managed metadata)
+                // or don't start with prod_local_ (which are local-only placeholders)
+                return product.metadata?.spaps_managed === 'true' || !product.id.startsWith('prod_local_');
+              })
+              .map(async (product) => {
+                const prices = await stripe.prices.list({
+                  product: product.id,
+                  active: true,
+                  limit: 1
+                });
+                
+                const defaultPrice = prices.data[0];
+                return {
+                  id: product.id,
+                  name: product.name,
+                  description: product.description,
+                  price: defaultPrice ? defaultPrice.unit_amount : 0,
+                  currency: defaultPrice ? defaultPrice.currency : 'usd',
+                  price_id: defaultPrice ? defaultPrice.id : null,
+                  active: product.active,
+                  metadata: product.metadata
+                };
+              })
           );
 
           res.json({
@@ -349,6 +355,54 @@ class LocalServer {
       });
     });
 
+    // Admin whitelist check endpoint
+    this.app.post('/api/v1/admin/whitelist/check', (req, res) => {
+      const { email } = req.body;
+      
+      if (!email) {
+        return res.status(400).json({
+          success: false,
+          error: { message: 'Email is required' }
+        });
+      }
+
+      // Mock whitelist check - some emails are "whitelisted"
+      const whitelistedEmails = ['vip@example.com', 'admin@example.com', 'premium@example.com'];
+      const isWhitelisted = whitelistedEmails.includes(email.toLowerCase());
+
+      res.json({
+        success: true,
+        data: {
+          email,
+          whitelisted: isWhitelisted,
+          reason: isWhitelisted ? 'VIP access granted' : 'Standard access only'
+        }
+      });
+    });
+
+    // Admin pricing update endpoint  
+    this.app.post('/api/v1/admin/pricing/update', (req, res) => {
+      const { product_id, new_price, currency = 'usd' } = req.body;
+      
+      if (!product_id || !new_price) {
+        return res.status(400).json({
+          success: false,
+          error: { message: 'Product ID and new price are required' }
+        });
+      }
+
+      res.json({
+        success: true,
+        data: {
+          product_id,
+          old_price: 999,
+          new_price,
+          currency,
+          updated_at: new Date().toISOString()
+        }
+      });
+    });
+
     // Admin product sync endpoint - REAL or MOCK based on config
     this.app.post('/api/v1/admin/products/sync', async (req, res) => {
       try {