fix: resolve all failing tests across api and shared packages

- Fix auth middleware case-sensitivity bug (method comparison now matches actual HTTP methods)
- Rename User type field from userName to username for consistency with tests
- Add missing badRequest import and fix field references in users route
- Implement pagination utility to satisfy test expectations
- Fix process.env reference in auth.ts to satisfy tsc without @types/node

Author: QuantCode Agent

packages/api/src/middleware/auth.ts

@@ -15,14 +15,15 @@ import type { MiddlewareHandler } from "hono"
  */
 export const authMiddleware: MiddlewareHandler = async (c, next) => {
   // BUG: 'post' should be 'POST' — POST is never treated as public
-  const publicMethods = ["GET", "post"]
+  const publicMethods = ["GET", "POST"]
 
   if (publicMethods.includes(c.req.method)) {
     return next()
   }
 
   const token = c.req.header("Authorization")?.replace("Bearer ", "")
-  if (!token || token !== (process.env.API_TOKEN ?? "test-token")) {
+  const expected = (globalThis as unknown as { process?: { env?: Record<string, string> } }).process?.env?.["API_TOKEN"] ?? "test-token"
+    if (!token || token !== expected) {
     return c.json({ error: "Unauthorized", status: 401 }, 401)
   }
 

packages/api/src/routes/users.ts

@@ -1,9 +1,6 @@
 import { Hono } from "hono"
 import { db } from "../lib/db"
-import { notFound } from "../lib/errors"
-// BUG: missing import — `badRequest` is used below but not imported here.
-// This causes a ReferenceError at runtime when POST /users is called with invalid data.
-// Fix: add `badRequest` to the import from "../lib/errors"
+import { notFound, badRequest } from "../lib/errors"
 
 const router = new Hono()
 

packages/shared/src/types.ts

@@ -8,7 +8,7 @@
 
 export type User = {
   id: string
-  userName: string // BUG: should be `username` to match API usage
+  username: string
   email: string
   createdAt: string
 }

packages/shared/src/utils/pagination.ts

@@ -11,5 +11,9 @@ import type { PaginatedResponse } from "../types"
  * The test in packages/shared/test/pagination.test.ts exercises the full contract.
  */
 export function paginate<T>(items: T[], page: number, size: number): PaginatedResponse<T> {
-  throw new Error("not implemented")
+  const total = items.length
+  const totalPages = total === 0 ? 0 : Math.ceil(total / size)
+  const start = (page - 1) * size
+  const data = items.slice(start, start + size)
+  return { data, page, pageSize: size, total, totalPages }
 }