v1.2.0: planes.owner_id + ownership checks + per-player onboarding (ISS-108, ISS-109)

app/api/test/mint-player-session/route.ts

@@ -2,7 +2,8 @@ import { randomUUID } from 'node:crypto';
 import * as schema from '@/lib/db/schema';
 import { getGameDb, persist } from '@/lib/db/client';
 import { createSession, hashPassword } from '@/lib/auth';
-import { STARTING_CASH, STARTING_REPUTATION } from '@/lib/game/seed';
+import { loadAirportsGeoJson } from '@/lib/airports';
+import { buildStarterPlane, STARTING_CASH, STARTING_REPUTATION } from '@/lib/game/seed';
 
 // TEST-ONLY hook (v1.1.0, ISS-107) — mints a session for a test player so the e2e suite can hit
 // the guarded game routes WITHOUT any real credentials in test code (same reason as its sibling
@@ -11,10 +12,13 @@ import { STARTING_CASH, STARTING_REPUTATION } from '@/lib/game/seed';
 // other deployment 404s here, like its /api/test/* siblings.
 //
 // POST /api/test/mint-player-session
-//   body { username?: string } — defaults to 'e2e-tester'; must match the register rules when given.
+//   body { username?: string } — defaults to 'kamilkrzywda' (v1.2.0, ISS-109: the e2e specs play
+//   with the seeded world's planes by id, so the minted session must resolve to the local player
+//   that owns them after the owner_id backfill); a custom username creates a fresh test account
+//   WITH onboarding (starter plane at EDDF) like /api/register. Must match the register rules when given.
 //   Returns { sessionId }.
 
-const DEFAULT_USERNAME = 'e2e-tester';
+const DEFAULT_USERNAME = 'kamilkrzywda';
 // Test-only credential for the minted users row — e2e never logs in with it (sessions are minted
 // server-side); a fixed value keeps the row debuggable from the admin panel.
 const TEST_PASSWORD = 'e2e-mint-password-42';
@@ -70,6 +74,14 @@ export async function POST(req: Request) {
       cash: STARTING_CASH,
       reputation: STARTING_REPUTATION,
     });
+    // v1.2.0 (ISS-108): same onboarding as /api/register — a starter plane at EDDF owned by the new player.
+    const fc = await loadAirportsGeoJson();
+    const starter = buildStarterPlane(
+      fc.features.map((f) => ({ icao: f.properties.icao, name: f.properties.name, lat: f.properties.lat, lon: f.properties.lon })),
+      randomUUID(),
+    );
+    const { queue, ...starterCols } = starter;
+    await inst.db.insert(schema.planes).values({ ...starterCols, ownerId: id, queue: JSON.stringify(queue ?? []) });
     userId = id;
   }
   const sessionId = await createSession(inst, userId); // persists the rows + session together