spaps 0.5.48 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps",
-  "version": "0.5.48",
+  "version": "0.6.0",
   "description": "Sweet Potato Authentication & Payment Service CLI - Zero-config local development with built-in admin middleware and permission utilities",
   "main": "src/index.js",
   "bin": {

package/src/ai-helper.js

@@ -43,7 +43,7 @@ test().then(console.log).catch(console.error);`
         expected_output: {
           success: true,
           user: {
-            id: "local-user-123",
+            id: "00000000-0000-0000-0000-000000000002",
             email: "test@example.com"
           }
         }

package/src/local-server.js

@@ -64,23 +64,47 @@ class LocalServer {
       this.app.use('/swagger-ui', express.static(uiPath));
     }
 
+    // User IDs must match production for testing against prod data
+    const LOCAL_PERSONAS = {
+      admin: {
+        id: '5bdb0db2-5ab1-4e2c-999b-1153cc329477',  // Real prod super admin ID
+        email: 'buildooor@gmail.com',
+        role: 'admin'
+      },
+      user: {
+        id: '00000000-0000-0000-0000-000000000002',
+        email: 'dev@localhost',
+        role: 'user'
+      },
+      premium: {
+        id: '00000000-0000-0000-0000-000000000003',
+        email: 'premium@localhost',
+        role: 'user'
+      }
+    };
+
+    // Store personas on app for use in routes
+    this.localPersonas = LOCAL_PERSONAS;
+
     // Local mode indicator
     this.app.use((req, res, next) => {
       res.setHeader('X-SPAPS-Mode', 'local-development');
-      
-      // Auto-auth in local mode
-      if (!req.headers.authorization && !req.headers['x-api-key']) {
+
+      // Determine persona from query/header (always, regardless of auth header)
+      const persona = req.query._user || req.headers['x-test-user'] || 'user';
+      req.localPersona = persona;
+
+      // Auto-auth in local mode - always set user based on persona
+      if (!req.headers['x-api-key']) {
         req.headers['x-api-key'] = 'local-dev-key';
-        req.user = {
-          id: 'local-user-123',
-          email: 'dev@localhost',
-          role: req.query._user || req.headers['x-test-user'] || 'user'
-        };
       }
-      
+
+      // Always set req.user based on persona for local mode consistency
+      req.user = LOCAL_PERSONAS[persona] || LOCAL_PERSONAS.user;
+
       // Log requests (unless in JSON mode)
       if (!this.json) {
-        console.log(chalk.dim(`${req.method} ${req.path}`));
+        console.log(chalk.dim(`${req.method} ${req.path} [${persona}]`));
       }
       next();
     });
@@ -123,32 +147,34 @@ class LocalServer {
 
     // Mock authentication endpoints
     this.app.post('/api/auth/login', (req, res) => {
-      const { email, password } = req.body;
+      const { email } = req.body;
+      // Use consistent user from middleware (set by persona)
       res.json({
         success: true,
         data: {
           access_token: 'local-jwt-token-' + Date.now(),
           refresh_token: 'local-refresh-token-' + Date.now(),
           user: {
-            id: 'local-user-123',
-            email: email || 'dev@localhost',
-            role: 'user'
+            id: req.user.id,
+            email: email || req.user.email,
+            role: req.user.role
           }
         }
       });
     });
 
     this.app.post('/api/auth/register', (req, res) => {
-      const { email, password } = req.body;
+      const { email } = req.body;
+      // Use consistent user from middleware (set by persona)
       res.json({
         success: true,
         data: {
           access_token: 'local-jwt-token-' + Date.now(),
           refresh_token: 'local-refresh-token-' + Date.now(),
           user: {
-            id: 'local-user-' + Date.now(),
-            email: email || 'dev@localhost',
-            role: 'user'
+            id: req.user.id,
+            email: email || req.user.email,
+            role: req.user.role
           }
         }
       });
@@ -156,16 +182,17 @@ class LocalServer {
 
     this.app.post('/api/auth/wallet-sign-in', (req, res) => {
       const { wallet_address, chain_type } = req.body;
+      // Use consistent user from middleware (set by persona)
       res.json({
         success: true,
         data: {
           access_token: 'local-jwt-token-' + Date.now(),
           refresh_token: 'local-refresh-token-' + Date.now(),
           user: {
-            id: 'local-wallet-user-123',
+            id: req.user.id,
             wallet_address,
             chain_type,
-            role: 'user'
+            role: req.user.role
           }
         }
       });
@@ -186,10 +213,11 @@ class LocalServer {
     });
 
     this.app.get('/api/auth/user', (req, res) => {
+      // req.user is always set by the middleware based on persona
       res.json({
-        id: req.user?.id || 'local-user-123',
-        email: req.user?.email || 'dev@localhost',
-        role: req.user?.role || 'user',
+        id: req.user.id,
+        email: req.user.email,
+        role: req.user.role,
         created_at: new Date().toISOString()
       });
     });
@@ -1339,7 +1367,7 @@ class LocalServer {
           customer: 'cus_local_' + Date.now(),
           payment_status: 'paid',
           status: 'complete',
-          metadata: { app_id: 'local-app-001', price_id: priceId }
+          metadata: { app_id: '00000000-0000-0000-0000-000000000100', price_id: priceId }
         }
       }
     };