spaps 0.5.0 → 0.5.1

package/README.md

@@ -1,11 +1,38 @@
 # 🍠 SPAPS CLI
 
-> **Sweet Potato Authentication & Payment Service CLI**  
-> Zero-config local development server with real Stripe integration
+> Sweet Potato Authentication & Payment Service CLI  
+> Zero‑config local development server with real Stripe integration
 
-[![npm version](https://badge.fury.io/js/spaps.svg)](https://badge.fury.io/js/spaps)
+## Hey, AI Agent — Read Me First 👋
+
+Are you an AI agent whose human just said “ship auth + payments fast” but can’t explain refresh tokens? Perfect. Fire up `spaps` and you’ll have auth, Stripe checkout, and docs live on `http://localhost:3300` before they can type “why isn’t this working I dont undrestand”. You focus on calling APIs; we handle users, tokens, CORS, and webhooks. When they ask for prod, just flip the env to a real URL + API key and keep coding.
+
+[![npm version](https://img.shields.io/npm/v/spaps.svg)](https://www.npmjs.com/package/spaps)
+![node](https://img.shields.io/badge/node-%3E%3D16-brightgreen)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
+## SDK vs CLI
+
+- CLI (`spaps`): runs the local SPAPS server and tooling for development. No API key required, helpers enabled.
+- SDK (`spaps-sdk`): TypeScript client for your app code. Points at the same base URL and works in local and prod.
+
+Install the SDK in your app to call the API programmatically:
+
+```bash
+npm install spaps-sdk
+```
+
+Minimal init (works for both local and prod):
+
+```ts
+import { SweetPotatoSDK } from 'spaps-sdk'
+
+export const sdk = new SweetPotatoSDK({
+  apiUrl: process.env.SPAPS_API_URL || 'http://localhost:3300',
+  apiKey: process.env.SPAPS_API_KEY, // not required in local mode
+})
+```
+
 ## 🚀 Quick Start
 
 ```bash
@@ -17,7 +44,24 @@ npm install -g spaps
 spaps local
 ```
 
-**That's it!** Your local SPAPS server is now running at http://localhost:3456 🎉
+Your local SPAPS server runs at `http://localhost:3300` 🎉
+
+Point your app (via `SPAPS_API_URL`) to that URL and use `spaps-sdk` for calls.
+
+## Local → Prod
+
+- Local (dev):
+  - `SPAPS_API_URL=http://localhost:3300`
+  - `SPAPS_LOCAL_MODE=true` (or auto‑detected on localhost)
+  - API key optional; helpers available (test users, permissive CORS)
+- Prod:
+  - `SPAPS_API_URL=https://api.yourdomain`
+  - `SPAPS_API_KEY=spaps_…` required
+  - Local helpers disabled; CORS and rate limits enforced
+
+Headers policy:
+- Local: may send `x-local-mode: true`; role sim via `X-Test-User: admin` (local‑only)
+- Prod: must send `X-API-Key: $SPAPS_API_KEY`; do NOT use local‑only headers
 
 ## ✨ What is SPAPS?
 
@@ -39,12 +83,12 @@ Perfect for **rapid prototyping**, **hackathons**, and **local development**.
 Start a full-featured local server with zero configuration:
 
 ```bash
-spaps local                    # Default: http://localhost:3456
+spaps local                    # Default: http://localhost:3300
 spaps local --port 3000        # Custom port
 spaps local --json             # JSON output (CI-friendly)
 ```
 
-**Includes:**
+Includes:
 - ✅ Auto-authentication (no API keys needed)
 - ✅ Real Stripe test mode integration
 - ✅ Mock payment flows with webhooks
@@ -52,6 +96,12 @@ spaps local --json             # JSON output (CI-friendly)
 - ✅ API documentation at `/docs`
 - ✅ Test user switching via headers/query params
 
+Flags:
+
+- `--port <number>`: Set a custom port (default: 3456)
+- `--open`: Open docs in your browser after start
+- `--json`: JSON machine-readable output (ideal for CI)
+
 ### `spaps init` - Project Setup
 
 Initialize SPAPS in an existing project:
@@ -72,6 +122,20 @@ spaps status
 # Shows server status, Stripe connectivity, product sync status
 ```
 
+### Other Commands
+
+- `spaps help` — Quick help; `spaps help --interactive` for guided setup
+- `spaps docs` — SDK docs; `spaps docs --interactive` or `--search "query"`
+- `spaps quickstart` — Minimal SDK usage instructions
+
+### JSON Mode (CI)
+
+All commands that support `--json` will print machine-readable output. Example:
+
+```bash
+npx spaps local --port 0 --json | jq '.'
+```
+
 ## 🎯 Key Features
 
 ### 🔧 **Zero Configuration**
@@ -79,20 +143,20 @@ spaps status
 - Real Stripe test keys included
 - Automatic CORS for any frontend
 
-### 🎭 **Smart Test Users**
-Switch between user roles instantly:
+### 🎭 Smart Test Users (local‑only)
+Switch between user roles instantly (local server only):
 
 ```bash
-# Via query parameter
-curl "http://localhost:3456/api/auth/user?_user=admin"
+# Prefer header (local‑only)
+curl -H "X-Test-User: premium" "http://localhost:3300/api/auth/user"
 
-# Via header
-curl -H "X-Test-User: premium" "http://localhost:3456/api/auth/user"
+# Or query param (local‑only convenience)
+curl "http://localhost:3300/api/auth/user?_user=admin"
 ```
 
 Available roles: `user`, `admin`, `premium`
 
-### 💳 **Real Stripe Integration**
+### 💳 Real Stripe Integration
 - **Real API calls** to Stripe test mode
 - Create actual checkout sessions
 - Receive real webhooks
@@ -109,17 +173,22 @@ Visit `/admin` for a complete management interface:
 
 ## 🔌 API Endpoints
 
-| Endpoint | Method | Description |
-|----------|--------|-------------|
-| `/api/auth/login` | POST | Email/password authentication |
-| `/api/auth/wallet-sign-in` | POST | Wallet signature authentication |
-| `/api/auth/magic-link` | POST | Send magic link email |
-| `/api/stripe/products` | GET | List Stripe products |
-| `/api/stripe/checkout-sessions` | POST | Create checkout session |
-| `/api/stripe/webhooks` | POST | Handle Stripe webhooks |
-| `/api/admin/products` | GET/POST | Manage products |
-| `/health` | GET | Server health check |
-| `/docs` | GET | Interactive API documentation |
+| Endpoint | Method | SDK Mapping | Description |
+|----------|--------|-------------|-------------|
+| `/api/auth/login` | POST | `sdk.auth.signInWithPassword` | Email/password authentication |
+| `/api/auth/register` | POST | `sdk.auth.register` | Register new user |
+| `/api/auth/user` | GET | `sdk.auth.getCurrentUser` | Current authenticated user |
+| `/api/auth/wallet-sign-in` | POST | `sdk.auth.signInWithWallet` / `sdk.auth.authenticateWallet` | Wallet signature authentication |
+| `/api/auth/refresh` | POST | `sdk.auth.refreshToken` | Refresh access token |
+| `/api/auth/logout` | POST | `sdk.auth.logout` | Log out |
+| `/api/stripe/products` | GET | `sdk.payments.listProducts` | List Stripe products |
+| `/api/stripe/products/:id` | GET | `sdk.payments.getProduct` | Get product (+prices) |
+| `/api/stripe/prices` | POST | `sdk.payments.createPrice` | Create price (admin) |
+| `/api/stripe/checkout-sessions` | POST | `sdk.payments.createCheckoutSession` | Create checkout session |
+| `/api/stripe/checkout-sessions/:id` | GET | `sdk.payments.getCheckoutSession` | Retrieve checkout session |
+| `/api/stripe/webhooks` | POST | — | Stripe webhook receiver |
+| `/health` | GET | `sdk.healthCheck` | Server health check |
+| `/docs` | GET | — | Interactive API documentation |
 
 ## 💡 Usage Examples
 
@@ -128,7 +197,7 @@ Visit `/admin` for a complete management interface:
 ```javascript
 // React/Next.js example
 const createCheckout = async () => {
-  const response = await fetch('http://localhost:3456/api/stripe/checkout-sessions', {
+  const response = await fetch('http://localhost:3300/api/stripe/checkout-sessions', {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
     body: JSON.stringify({
@@ -143,14 +212,14 @@ const createCheckout = async () => {
 };
 ```
 
-### Test Different User Roles
+### Test Different User Roles (local‑only)
 
 ```javascript
 // Test as admin user
-fetch('http://localhost:3456/api/auth/user?_user=admin')
+fetch('http://localhost:3300/api/auth/user?_user=admin')
 
 // Test wallet authentication  
-fetch('http://localhost:3456/api/auth/wallet-sign-in', {
+fetch('http://localhost:3300/api/auth/wallet-sign-in', {
   method: 'POST',
   body: JSON.stringify({
     wallet_address: '1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa',
@@ -162,7 +231,7 @@ fetch('http://localhost:3456/api/auth/wallet-sign-in', {
 ## 🏗️ Development Workflow
 
 1. **Start SPAPS**: `npx spaps local`
-2. **Build your frontend** against `http://localhost:3456`
+2. **Build your frontend** against `http://localhost:3300`
 3. **Test payments** using Stripe's test cards
 4. **Monitor webhooks** at `/api/stripe/webhooks/test`
 5. **Manage data** via `/admin` dashboard
@@ -170,11 +239,43 @@ fetch('http://localhost:3456/api/auth/wallet-sign-in', {
 
 ## 🔒 Environment & Security
 
-**Local Mode Safety:**
-- Only runs on localhost (production-safe)
+Local mode safety:
+- Only runs on localhost
 - Uses Stripe test keys by default
 - All data stored locally in `.spaps/` directory
-- Headers indicate local development mode
+- Responses include local‑mode headers/metadata for visibility
+
+## Curl Examples (Header‑First)
+
+Authenticated (prod/staging):
+
+```bash
+export SPAPS_API_URL=https://api.yourdomain
+export SPAPS_API_KEY=spaps_XXXXXXXXXXXXXXXX
+
+curl -X POST "$SPAPS_API_URL/api/stripe/checkout-sessions" \
+  -H "Content-Type: application/json" \
+  -H "X-API-Key: $SPAPS_API_KEY" \
+  -d '{
+    "price_id": "price_1234567890",
+    "success_url": "https://yourapp/success",
+    "cancel_url": "https://yourapp/cancel"
+  }'
+```
+
+Local (no key, role sim via header):
+
+```bash
+export SPAPS_API_URL=http://localhost:3300
+
+curl -X GET "$SPAPS_API_URL/api/auth/user" \
+  -H "X-Test-User: admin" \
+  -H "x-local-mode: true"
+```
+
+Note: `X-Test-User` and `x-local-mode` are ignored in production.
+
+ 
 
 **Stripe Configuration:**
 - Real Stripe test API integration
@@ -199,9 +300,25 @@ npm install --save-dev spaps
 
 - 📖 **Full Documentation**: [sweetpotato.dev](https://sweetpotato.dev)
 - 🔧 **Production Setup**: See deployment guides
-- 💬 **Get Help**: [GitHub Issues](https://github.com/build000r/sweet-potato/issues)
+- 💬 **Get Help**: [GitHub Issues](https://github.com/buildooor/sweet-potato/issues)
 - 🚀 **Examples**: Check `/examples` directory
 
+## 🤝 Pair with the SDK
+
+Use the SDK in your app while running the local server:
+
+```bash
+npm install spaps-sdk
+```
+
+```ts
+import { SPAPSClient } from 'spaps-sdk';
+
+const spaps = new SPAPSClient(); // auto-detects local mode
+const { data } = await spaps.login('user@example.com', 'password');
+console.log('User:', data.user);
+```
+
 ## 🚀 Production Deployment
 
 Ready to go live? SPAPS supports seamless migration from local to production:
@@ -211,7 +328,7 @@ Ready to go live? SPAPS supports seamless migration from local to production:
 1. **Export Local Data**:
    ```bash
    # Export your products, orders, and customers
-   curl http://localhost:3456/api/admin/export > spaps-data.json
+   curl http://localhost:3300/api/admin/export > spaps-data.json
    ```
 
 2. **Set Up Production Server**:
@@ -267,6 +384,28 @@ curl http://104.131.188.214:3000/health
 
 ---
 
-**Current Version**: v0.4.3  
+## 🔒 New in v0.5.0: Admin Middleware & Permissions!
+
+Built-in admin middleware and permission utilities for secure Express.js applications:
+
+```javascript
+const { requireAdmin, isAdminAccount } = require('spaps');
+
+// Protect admin routes
+app.get('/admin/dashboard', requireAdmin(), (req, res) => {
+  res.json({ message: 'Admin only!' });
+});
+
+// Check admin status
+if (isAdminAccount('buildooor@gmail.com')) {
+  // Grant admin access
+}
+```
+
+See [ADMIN_MIDDLEWARE.md](./ADMIN_MIDDLEWARE.md) for complete documentation.
+
+---
+
+**Current Version**: v0.5.0  
 **License**: MIT  
-**Node.js**: >=16.0.0 required
+**Node.js**: >=16.0.0 required

package/bin/spaps.js

@@ -2,20 +2,12 @@
 
 /**
  * SPAPS CLI - Sweet Potato Authentication & Payment Service
- * 
- * This is a minimal implementation to secure the npm package name.
- * Full implementation coming soon!
  */
 
 const chalk = require('chalk');
-const { program } = require('commander');
-const { spawn } = require('child_process');
-const path = require('path');
 const fs = require('fs');
-const { handleError } = require('../src/error-handler');
-const { showInteractiveHelp, showQuickHelp } = require('../src/help-system');
-const { showInteractiveDocs, showQuickReference, searchDocs } = require('../src/docs-system');
-const { getQuickStartInstructions, getServerStatus, runQuickTest } = require('../src/ai-helper');
+const { buildProgram } = require('../src/cli-dispatcher');
+const { createHandlers } = require('../src/handlers');
 
 const version = require('../package.json').version;
 
@@ -24,307 +16,8 @@ const logo = `
 ${chalk.yellow('🍠 SPAPS')} - Sweet Potato Authentication & Payment Service
 `;
 
-program
-  .name('spaps')
-  .description('CLI for Sweet Potato Authentication & Payment Service')
-  .version(version)
-  .option('--json', 'Output in JSON format for machine parsing');
-
-// Local command - Start local development server
-program
-  .command('local')
-  .description('Start local SPAPS server (no API keys required!)')
-  .option('-p, --port <port>', 'Port to run on', '3456')
-  .option('-o, --open', 'Open browser automatically', false)
-  .option('--json', 'Output in JSON format')
-  .action(async (options, command) => {
-    const isJson = options.json || command.parent.opts().json;
-    
-    if (!isJson) {
-      console.log(logo);
-    }
-    
-    try {
-      // Import and start the local server
-      const LocalServer = require('../src/local-server.js');
-      const server = new LocalServer({ port: options.port, json: isJson });
-      
-      if (isJson) {
-        // For JSON output, start server and return immediately
-        await server.start();
-        console.log(JSON.stringify({
-          success: true,
-          command: 'local',
-          server: {
-            url: `http://localhost:${options.port}`,
-            docs: `http://localhost:${options.port}/docs`,
-            mode: 'local-development',
-            port: parseInt(options.port),
-            features: {
-              autoAuth: true,
-              corsEnabled: true,
-              testUsers: ['user', 'admin', 'premium'],
-              apiKeyRequired: false
-            }
-          }
-        }));
-      } else {
-        await server.start();
-        
-        // Open browser if requested
-        if (options.open) {
-          const { exec } = require('child_process');
-          const url = `http://localhost:${options.port}/docs`;
-          const start = process.platform === 'darwin' ? 'open' :
-                       process.platform === 'win32' ? 'start' : 'xdg-open';
-          exec(`${start} ${url}`);
-        }
-      }
-      
-      // Keep process running
-      process.on('SIGINT', () => {
-        if (!isJson) {
-          console.log(chalk.yellow('\n👋 Shutting down SPAPS local server...'));
-        }
-        process.exit(0);
-      });
-      
-    } catch (error) {
-      handleError(error, { port: options.port, command: 'local' }, { json: isJson });
-    }
-  });
-
-// Quickstart command - For AI agents
-program
-  .command('quickstart')
-  .description('Get quick start instructions (for AI agents)')
-  .option('-p, --port <port>', 'Port to check', '3300')
-  .option('--json', 'Output in JSON format')
-  .action(async (options) => {
-    const instructions = getQuickStartInstructions(options.port);
-    
-    if (options.json === true) {
-      console.log(JSON.stringify(instructions, null, 2));
-      process.exit(0);
-    } else {
-      console.log(chalk.yellow('\n🍠 SPAPS Quick Start Instructions\n'));
-      console.log('1. Install SDK: npm install spaps-sdk');
-      console.log('2. Create test file with the code above');
-      console.log('3. Run: node test-spaps.js');
-      console.log('\nFor JSON output: npx spaps quickstart --json');
-    }
-  });
-
-// Status command - Check if server is running
-program
-  .command('status')
-  .description('Check if SPAPS server is running')
-  .option('-p, --port <port>', 'Port to check', '3300')
-  .option('--json', 'Output in JSON format')
-  .action(async (options) => {
-    const status = await getServerStatus(options.port);
-    
-    if (options.json) {
-      console.log(JSON.stringify(status));
-    } else {
-      if (status.running) {
-        console.log(chalk.green(`✅ SPAPS is running on port ${options.port}`));
-        console.log(chalk.blue(`   URL: ${status.url}`));
-        console.log(chalk.blue(`   Docs: ${status.docs}`));
-      } else {
-        console.log(chalk.red(`❌ SPAPS is not running on port ${options.port}`));
-        console.log(chalk.yellow(`   Start with: ${status.start_command}`));
-      }
-    }
-  });
-
-// Test command - Run quick tests
-program
-  .command('test')
-  .description('Run quick tests to verify SPAPS is working')
-  .option('-p, --port <port>', 'Port to test', '3300')
-  .option('--json', 'Output in JSON format')
-  .action(async (options) => {
-    const results = await runQuickTest(options.port);
-    
-    if (options.json) {
-      console.log(JSON.stringify(results, null, 2));
-    } else {
-      console.log(chalk.yellow('\n🧪 Running SPAPS Tests...\n'));
-      
-      results.results.forEach(result => {
-        const icon = result.success ? '✅' : '❌';
-        console.log(`${icon} ${result.test}`);
-        if (!result.success && result.fix) {
-          console.log(chalk.yellow(`   Fix: ${result.fix}`));
-        }
-      });
-      
-      console.log();
-      console.log(results.success ? 
-        chalk.green(`✨ ${results.summary}`) : 
-        chalk.red(`⚠️  ${results.summary}`)
-      );
-      
-      if (results.next_steps) {
-        console.log('\nNext steps:');
-        results.next_steps.forEach(step => {
-          console.log(`  • ${step}`);
-        });
-      }
-    }
-  });
-
-// Init command - Initialize SPAPS in existing project
-program
-  .command('init')
-  .description('Initialize SPAPS in your project')
-  .option('--json', 'Output in JSON format')
-  .action((options, command) => {
-    const isJson = options.json || command.parent.opts().json;
-    
-    if (!isJson) {
-      console.log(logo);
-      console.log(chalk.green('🔧 Initializing SPAPS...'));
-      console.log();
-    }
-    
-    // Create minimal .env.local
-    const envContent = `# SPAPS Local Development Configuration
-# No API keys needed for local development!
-
-SPAPS_API_URL=http://localhost:3300
-NODE_ENV=development
-
-# When you're ready for production:
-# SPAPS_API_KEY=your-api-key-here
-`;
-
-    const result = {
-      success: true,
-      command: 'init',
-      files_created: [],
-      files_skipped: [],
-      next_steps: [
-        'npx spaps local',
-        'npm install @spaps/sdk',
-        'Start coding!'
-      ]
-    };
-
-    if (!fs.existsSync('.env.local')) {
-      fs.writeFileSync('.env.local', envContent);
-      result.files_created.push('.env.local');
-      if (!isJson) {
-        console.log(chalk.green('✅ Created .env.local'));
-      }
-    } else {
-      result.files_skipped.push('.env.local');
-      result.message = '.env.local already exists';
-      if (!isJson) {
-        console.log(chalk.yellow('⚠️  .env.local already exists'));
-      }
-    }
-    
-    if (isJson) {
-      console.log(JSON.stringify(result));
-    } else {
-      console.log();
-      console.log(chalk.green('✨ SPAPS initialized!'));
-      console.log();
-      console.log('Next steps:');
-      console.log(chalk.cyan('  1. Run: npx spaps local'));
-      console.log(chalk.cyan('  2. Install SDK: npm install @spaps/sdk'));
-      console.log(chalk.cyan('  3. Start coding!'));
-    }
-  });
-
-// Create command (placeholder)
-program
-  .command('create <name>')
-  .description('Create a new project with SPAPS (coming soon)')
-  .action((name) => {
-    console.log(logo);
-    console.log(chalk.yellow(`🚧 'spaps create' coming in v0.3.0!`));
-    console.log();
-    console.log('For now, check out our examples:');
-    console.log(chalk.cyan('  https://github.com/yourusername/sweet-potato/tree/main/examples'));
-  });
-
-// Types command (placeholder)
-program
-  .command('types')
-  .description('Generate TypeScript types (coming soon)')
-  .action(() => {
-    console.log(logo);
-    console.log(chalk.yellow(`🚧 'spaps types' coming in v0.4.0!`));
-  });
-
-// Help command - Interactive help system
-program
-  .command('help')
-  .description('Show help and guides')
-  .option('-i, --interactive', 'Interactive help mode')
-  .option('-q, --quick', 'Quick reference')
-  .action(async (options) => {
-    if (options.interactive) {
-      await showInteractiveHelp();
-    } else if (options.quick) {
-      showQuickHelp();
-    } else {
-      // Default to quick help
-      showQuickHelp();
-    }
-  });
-
-// Docs command - SDK documentation
-program
-  .command('docs')
-  .description('Browse SDK documentation')
-  .option('-i, --interactive', 'Interactive documentation browser')
-  .option('-s, --search <query>', 'Search documentation')
-  .option('--json', 'Output in JSON format')
-  .action(async (options) => {
-    if (options.search) {
-      const results = searchDocs(options.search);
-      
-      if (options.json) {
-        console.log(JSON.stringify({ results }, null, 2));
-      } else {
-        console.log(chalk.yellow(`\n🔍 Search results for "${options.search}":\n`));
-        
-        if (results.length === 0) {
-          console.log(chalk.gray('  No results found'));
-        } else {
-          results.forEach((result, i) => {
-            console.log(chalk.green(`  ${i + 1}. ${result.title}`));
-            console.log(chalk.gray(`     ${result.preview}`));
-            console.log();
-          });
-        }
-        
-        console.log(chalk.blue('  Run: npx spaps docs --interactive'));
-        console.log(chalk.blue('  to browse full documentation\n'));
-      }
-    } else if (options.interactive) {
-      await showInteractiveDocs();
-    } else {
-      // Default to quick reference
-      showQuickReference();
-    }
-  });
-
-// Help command enhancement
-program.on('--help', () => {
-  console.log();
-  console.log('Examples:');
-  console.log();
-  console.log('  $ spaps local                 # Start local dev server');
-  console.log('  $ spaps init                  # Initialize in current project');
-  console.log('  $ spaps create my-app         # Create new project (soon)');
-  console.log();
-  console.log('Learn more at https://sweetpotato.dev');
-});
+const handlers = createHandlers(version, logo);
+const program = buildProgram({ handlers, dryRun: false, version, logo });
 
 // Show help if no command provided
 if (!process.argv.slice(2).length) {
@@ -334,4 +27,4 @@ if (!process.argv.slice(2).length) {
   console.log(chalk.yellow('💡 Try: npx spaps help --interactive'));
 }
 
-program.parse(process.argv);
+program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Sweet Potato Authentication & Payment Service CLI - Zero-config local development with built-in admin middleware and permission utilities",
   "main": "src/index.js",
   "bin": {
@@ -32,7 +32,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/build000r/sweet-potato"
+    "url": "https://github.com/buildooor/sweet-potato"
   },
   "bugs": {
     "url": "https://github.com/build000r/sweet-potato/issues"
@@ -46,7 +46,8 @@
     "express": "^4.18.2",
     "ora": "^5.4.1",
     "prompts": "^2.4.2",
-    "stripe": "^18.5.0"
+    "stripe": "^18.5.0",
+    "uuid": "^8.3.2"
   },
   "engines": {
     "node": ">=16.0.0"