@crvouga/mockingbird-service-junction 0.2.0 → 0.4.0

package/dist/server.d.ts

@@ -99,7 +99,12 @@ type FaultRule$1 = {
      * rules added through `POST /__admin/faults` default to the calling namespace.
      */
     namespace?: string;
-    status: number;
+    /**
+     * Status of the injected response. Omit for a rule that only delays (`delayMs` /
+     * `latencyMs`), only drops the connection (`drop`), or only switches on an `effect`:
+     * the request then still reaches the service.
+     */
+    status?: number;
     /** Response body, serialized as JSON. A string is sent as-is. */
     body?: unknown;
     headers?: Record<string, string>;
@@ -109,6 +114,34 @@ type FaultRule$1 = {
     rate?: number;
     /** Hold the response back this long, to exercise timeouts. */
     delayMs?: number;
+    /** Alias of `delayMs`. */
+    latencyMs?: number;
+    /**
+     * Drop the connection instead of answering: an in-process `fetch` rejects with a
+     * `TypeError`, and a served mock destroys the socket. Models "unknown outcome" failures.
+     */
+    drop?: boolean;
+    /**
+     * A named service behaviour to switch on for the matching request instead of (or
+     * before) a canned response, e.g. `created_but_500` or `numeric_tracking_id`. Services
+     * read it with `faultEffects(request)`.
+     */
+    effect?: string;
+    /** Parameters for `effect`. */
+    params?: Record<string, unknown>;
+    /** From the preset this rule was expanded from, if any. */
+    preset?: string;
+};
+/** A fault that fired for one request. */
+type FaultHit$1 = {
+    id: string;
+    /** The injected response; absent when the rule only delays, drops, or sets an effect. */
+    response?: Response;
+    drop?: boolean;
+    effect?: {
+        name: string;
+        params: Record<string, unknown>;
+    };
 };
 /** What a request looks like to the fault matcher. */
 type FaultCandidate$1 = {
@@ -126,13 +159,11 @@ type FaultRegistry$1 = {
     remove(id: string): boolean;
     clear(): void;
     /**
-     * The fault this request should get, or `undefined` to let it through.
-     * Consumes one of the matching rule's remaining uses.
+     * Every fault this request should get, in rule order, stopping at the first that answers
+     * or drops (effect-only and delay-only rules let later rules match too). Consumes one of
+     * each matching rule's remaining uses.
      */
-    take(candidate: FaultCandidate$1): Promise<{
-        id: string;
-        response: Response;
-    } | undefined>;
+    take(candidate: FaultCandidate$1): Promise<FaultHit$1[]>;
 };
 
 /** One handled request, as the structured log sees it. */
@@ -148,6 +179,10 @@ type RequestLog$1 = {
     unmatched: boolean;
     /** Set when a fault rule produced the response. */
     faultId?: string;
+    /** Resource ids the handler touched (`userId`, `orderId`, …), when the service reports them. */
+    ids?: Record<string, string>;
+    /** Set when the service created a resource the request referred to but that did not exist. */
+    adopted?: boolean;
 };
 type MetricsReport$1 = {
     requests: number;
@@ -173,6 +208,28 @@ type Metrics$1 = {
     reset(): void;
 };
 
+/** One journal entry: a request log stamped with when (on the mock clock) it was handled. */
+type JournalEntry$1 = RequestLog$1 & {
+    at: string;
+};
+type JournalQuery$1 = {
+    /** Only this namespace. Omit for every namespace, oldest first across all of them. */
+    namespace?: string;
+    operationId?: string;
+    status?: number;
+    /** Only entries at or after this instant (epoch ms). */
+    since?: number;
+    /** At most this many, the most recent kept. */
+    limit?: number;
+};
+type Journal$1 = {
+    readonly size: number;
+    record(entry: JournalEntry$1): void;
+    list(query?: JournalQuery$1): JournalEntry$1[];
+    /** Forget one namespace's entries, or every namespace's. */
+    clear(namespace?: string): void;
+};
+
 /**
  * A point-in-time copy of everything a service namespace holds.
  *
@@ -195,6 +252,18 @@ type NamespaceSnapshot$1 = {
     }[];
 };
 
+/** Credential → namespace mapping behind `PUT /__admin/credentials`. */
+type CredentialRegistry$1 = {
+    set(credential: string, namespace: string): void;
+    get(credential: string): string | undefined;
+    remove(credential: string): boolean;
+    clear(): void;
+    entries(): {
+        credential: string;
+        namespace: string;
+    }[];
+};
+
 /**
  * Anything that can answer a Fetch `Request` with a `Response`.
  *
@@ -205,6 +274,82 @@ interface FetchAPI$2 {
     fetch(request: Request): Promise<Response>;
 }
 
+type WebhookEndpoint$2 = {
+    /** Stable id; generated when omitted. */
+    id?: string;
+    url: string;
+    secret?: string;
+    /** Event types to deliver; omit or include `"*"` for every type. */
+    events?: string[];
+    /** Deliver only messages whose tags include all of these (e.g. `{ account: "mso" }`). */
+    tags?: Record<string, string>;
+    /** The public URL the receiver verifies signatures against (Twilio), when it differs. */
+    signUrl?: string;
+    headers?: Record<string, string>;
+};
+type WebhookMessage$1 = {
+    id: string;
+    namespace: string;
+    type: string;
+    body: string;
+    contentType: string;
+    tags: Record<string, string>;
+    /** Wall-clock ISO-8601 time of publication. */
+    publishedAt: string;
+};
+type WebhookAttempt$2 = {
+    attempt: number;
+    at: string;
+    status: number | null;
+    error: string | null;
+    durationMs: number;
+};
+type WebhookDelivery$2 = {
+    id: string;
+    messageId: string;
+    namespace: string;
+    type: string;
+    endpointId: string;
+    url: string;
+    state: "pending" | "delivered" | "failed" | "dropped";
+    attempts: WebhookAttempt$2[];
+};
+/** A delivery-level fault: what happens to the next `count` messages in a namespace. */
+type WebhookFault$1 = {
+    mode: "duplicate" | "reorder" | "drop";
+    /** Messages affected; default 1. */
+    count?: number;
+};
+type PublishInput$1 = {
+    namespace: string;
+    type: string;
+    /** Exact body; objects are JSON-encoded. */
+    body: string | Record<string, unknown> | unknown[];
+    /** Default `application/json`, or form-encoded when `form` is given. */
+    contentType?: string;
+    /** Form parameters, when the vendor posts `application/x-www-form-urlencoded`. */
+    form?: Record<string, string>;
+    tags?: Record<string, string>;
+    /** Message id; generated when omitted. */
+    id?: string;
+};
+type WebhookHub$1 = {
+    publish(input: PublishInput$1): WebhookMessage$1;
+    /** Replace a namespace's own endpoints (`PUT /__admin/webhook-endpoints`). */
+    setEndpoints(namespace: string, endpoints: WebhookEndpoint$2[]): WebhookEndpoint$2[];
+    /** The endpoints a namespace delivers to: its own, plus the global ones. */
+    endpoints(namespace: string): WebhookEndpoint$2[];
+    messages(namespace?: string): WebhookMessage$1[];
+    deliveries(namespace?: string): WebhookDelivery$2[];
+    replay(deliveryId: string): Promise<WebhookDelivery$2 | undefined>;
+    /** Run every pending retry (and release held reordered messages) now. */
+    flush(): Promise<void>;
+    /** Resolve once nothing is in flight. */
+    idle(): Promise<void>;
+    fault(namespace: string, fault: WebhookFault$1): void;
+    clear(namespace?: string): void;
+};
+
 /** What the runtime needs from a service: a Fetch handler it can reset. */
 type ServiceInstance$1 = FetchAPI$2 & {
     reset(): Promise<void>;
@@ -215,7 +360,13 @@ type ServiceRuntime$1<T extends ServiceInstance$1> = FetchAPI$2 & {
     readonly clock: Clock$1;
     readonly faults: FaultRegistry$1;
     readonly metrics: Metrics$1;
+    readonly journal: Journal$1;
     readonly rng: Rng$1;
+    readonly credentials: CredentialRegistry$1;
+    /** The webhook hub, when the service has outbound webhooks. */
+    readonly webhooks: WebhookHub$1 | undefined;
+    /** Expand a named preset into fault rules (and webhook faults) for `namespace`. */
+    applyPreset(name: string, namespace?: string, overrides?: Partial<FaultRule$1>): FaultRule$1[];
     /** The instance behind `namespace` (the default one when omitted), created on first use. */
     instance(namespace?: string): T;
     /** Public names of every namespace created so far. */
@@ -361,7 +512,12 @@ type FaultRule = {
      * rules added through `POST /__admin/faults` default to the calling namespace.
      */
     namespace?: string;
-    status: number;
+    /**
+     * Status of the injected response. Omit for a rule that only delays (`delayMs` /
+     * `latencyMs`), only drops the connection (`drop`), or only switches on an `effect`:
+     * the request then still reaches the service.
+     */
+    status?: number;
     /** Response body, serialized as JSON. A string is sent as-is. */
     body?: unknown;
     headers?: Record<string, string>;
@@ -371,6 +527,34 @@ type FaultRule = {
     rate?: number;
     /** Hold the response back this long, to exercise timeouts. */
     delayMs?: number;
+    /** Alias of `delayMs`. */
+    latencyMs?: number;
+    /**
+     * Drop the connection instead of answering: an in-process `fetch` rejects with a
+     * `TypeError`, and a served mock destroys the socket. Models "unknown outcome" failures.
+     */
+    drop?: boolean;
+    /**
+     * A named service behaviour to switch on for the matching request instead of (or
+     * before) a canned response, e.g. `created_but_500` or `numeric_tracking_id`. Services
+     * read it with `faultEffects(request)`.
+     */
+    effect?: string;
+    /** Parameters for `effect`. */
+    params?: Record<string, unknown>;
+    /** From the preset this rule was expanded from, if any. */
+    preset?: string;
+};
+/** A fault that fired for one request. */
+type FaultHit = {
+    id: string;
+    /** The injected response; absent when the rule only delays, drops, or sets an effect. */
+    response?: Response;
+    drop?: boolean;
+    effect?: {
+        name: string;
+        params: Record<string, unknown>;
+    };
 };
 /** What a request looks like to the fault matcher. */
 type FaultCandidate = {
@@ -388,13 +572,11 @@ type FaultRegistry = {
     remove(id: string): boolean;
     clear(): void;
     /**
-     * The fault this request should get, or `undefined` to let it through.
-     * Consumes one of the matching rule's remaining uses.
+     * Every fault this request should get, in rule order, stopping at the first that answers
+     * or drops (effect-only and delay-only rules let later rules match too). Consumes one of
+     * each matching rule's remaining uses.
      */
-    take(candidate: FaultCandidate): Promise<{
-        id: string;
-        response: Response;
-    } | undefined>;
+    take(candidate: FaultCandidate): Promise<FaultHit[]>;
 };
 
 /** One handled request, as the structured log sees it. */
@@ -410,6 +592,10 @@ type RequestLog = {
     unmatched: boolean;
     /** Set when a fault rule produced the response. */
     faultId?: string;
+    /** Resource ids the handler touched (`userId`, `orderId`, …), when the service reports them. */
+    ids?: Record<string, string>;
+    /** Set when the service created a resource the request referred to but that did not exist. */
+    adopted?: boolean;
 };
 type MetricsReport = {
     requests: number;
@@ -435,6 +621,28 @@ type Metrics = {
     reset(): void;
 };
 
+/** One journal entry: a request log stamped with when (on the mock clock) it was handled. */
+type JournalEntry = RequestLog & {
+    at: string;
+};
+type JournalQuery = {
+    /** Only this namespace. Omit for every namespace, oldest first across all of them. */
+    namespace?: string;
+    operationId?: string;
+    status?: number;
+    /** Only entries at or after this instant (epoch ms). */
+    since?: number;
+    /** At most this many, the most recent kept. */
+    limit?: number;
+};
+type Journal = {
+    readonly size: number;
+    record(entry: JournalEntry): void;
+    list(query?: JournalQuery): JournalEntry[];
+    /** Forget one namespace's entries, or every namespace's. */
+    clear(namespace?: string): void;
+};
+
 /**
  * A point-in-time copy of everything a service namespace holds.
  *
@@ -457,6 +665,18 @@ type NamespaceSnapshot = {
     }[];
 };
 
+/** Credential → namespace mapping behind `PUT /__admin/credentials`. */
+type CredentialRegistry = {
+    set(credential: string, namespace: string): void;
+    get(credential: string): string | undefined;
+    remove(credential: string): boolean;
+    clear(): void;
+    entries(): {
+        credential: string;
+        namespace: string;
+    }[];
+};
+
 /**
  * Anything that can answer a Fetch `Request` with a `Response`.
  *
@@ -467,6 +687,82 @@ interface FetchAPI$1 {
     fetch(request: Request): Promise<Response>;
 }
 
+type WebhookEndpoint$1 = {
+    /** Stable id; generated when omitted. */
+    id?: string;
+    url: string;
+    secret?: string;
+    /** Event types to deliver; omit or include `"*"` for every type. */
+    events?: string[];
+    /** Deliver only messages whose tags include all of these (e.g. `{ account: "mso" }`). */
+    tags?: Record<string, string>;
+    /** The public URL the receiver verifies signatures against (Twilio), when it differs. */
+    signUrl?: string;
+    headers?: Record<string, string>;
+};
+type WebhookMessage = {
+    id: string;
+    namespace: string;
+    type: string;
+    body: string;
+    contentType: string;
+    tags: Record<string, string>;
+    /** Wall-clock ISO-8601 time of publication. */
+    publishedAt: string;
+};
+type WebhookAttempt$1 = {
+    attempt: number;
+    at: string;
+    status: number | null;
+    error: string | null;
+    durationMs: number;
+};
+type WebhookDelivery$1 = {
+    id: string;
+    messageId: string;
+    namespace: string;
+    type: string;
+    endpointId: string;
+    url: string;
+    state: "pending" | "delivered" | "failed" | "dropped";
+    attempts: WebhookAttempt$1[];
+};
+/** A delivery-level fault: what happens to the next `count` messages in a namespace. */
+type WebhookFault = {
+    mode: "duplicate" | "reorder" | "drop";
+    /** Messages affected; default 1. */
+    count?: number;
+};
+type PublishInput = {
+    namespace: string;
+    type: string;
+    /** Exact body; objects are JSON-encoded. */
+    body: string | Record<string, unknown> | unknown[];
+    /** Default `application/json`, or form-encoded when `form` is given. */
+    contentType?: string;
+    /** Form parameters, when the vendor posts `application/x-www-form-urlencoded`. */
+    form?: Record<string, string>;
+    tags?: Record<string, string>;
+    /** Message id; generated when omitted. */
+    id?: string;
+};
+type WebhookHub = {
+    publish(input: PublishInput): WebhookMessage;
+    /** Replace a namespace's own endpoints (`PUT /__admin/webhook-endpoints`). */
+    setEndpoints(namespace: string, endpoints: WebhookEndpoint$1[]): WebhookEndpoint$1[];
+    /** The endpoints a namespace delivers to: its own, plus the global ones. */
+    endpoints(namespace: string): WebhookEndpoint$1[];
+    messages(namespace?: string): WebhookMessage[];
+    deliveries(namespace?: string): WebhookDelivery$1[];
+    replay(deliveryId: string): Promise<WebhookDelivery$1 | undefined>;
+    /** Run every pending retry (and release held reordered messages) now. */
+    flush(): Promise<void>;
+    /** Resolve once nothing is in flight. */
+    idle(): Promise<void>;
+    fault(namespace: string, fault: WebhookFault): void;
+    clear(namespace?: string): void;
+};
+
 /** What the runtime needs from a service: a Fetch handler it can reset. */
 type ServiceInstance = FetchAPI$1 & {
     reset(): Promise<void>;
@@ -477,7 +773,13 @@ type ServiceRuntime<T extends ServiceInstance> = FetchAPI$1 & {
     readonly clock: Clock;
     readonly faults: FaultRegistry;
     readonly metrics: Metrics;
+    readonly journal: Journal;
     readonly rng: Rng;
+    readonly credentials: CredentialRegistry;
+    /** The webhook hub, when the service has outbound webhooks. */
+    readonly webhooks: WebhookHub | undefined;
+    /** Expand a named preset into fault rules (and webhook faults) for `namespace`. */
+    applyPreset(name: string, namespace?: string, overrides?: Partial<FaultRule>): FaultRule[];
     /** The instance behind `namespace` (the default one when omitted), created on first use. */
     instance(namespace?: string): T;
     /** Public names of every namespace created so far. */
@@ -582,6 +884,21 @@ type LabTestRecord = {
     worst_case_tat_days: number | null;
 };
 
+type JunctionLimits = {
+    /**
+     * Live users a team may hold; creating one more answers the sandbox's
+     * "maximum of 50 Sandbox users" 400. Deleted users free their slot. `null`: unlimited.
+     */
+    maxUsers: number | null;
+    /** Refuse `POST /v3/order/{id}/test` unless the API key is a sandbox key (`sk_us_…`/`sk_eu_…`). */
+    simulateRequiresSandbox: boolean;
+    /** Vendor requests per second per namespace before a 429. `null`: unlimited. */
+    rateLimitPerSecond: number | null;
+};
+type JunctionLimitsInput = {
+    [K in keyof JunctionLimits]?: JunctionLimits[K] | undefined;
+};
+
 type GetCacheEntry = {
     status: number;
     headers: Record<string, string>;
@@ -602,6 +919,25 @@ type WebhookDeliveryAttempt = {
     timeout_ms: number;
     acknowledged: boolean;
 };
+type UserRecord = {
+    user_id: string;
+    team_id: string;
+    client_user_id: string;
+    created_on: string;
+    connected_sources: unknown[];
+    fallback_time_zone: {
+        id: string;
+        source_slug: string;
+        updated_at: string;
+    } | null;
+    fallback_birth_date: {
+        value: string;
+        source_slug: string;
+        updated_at: string;
+    } | null;
+    ingestion_start: string | null;
+    ingestion_end: string | null;
+};
 type OrderEventRecord = {
     id: number;
     created_at: string;
@@ -707,6 +1043,62 @@ type JunctionWebhookOptions = {
     timeoutMs?: number;
 };
 
+/**
+ * The test backdoor: users and orders put straight into a namespace, with ids a suite
+ * chooses — the Junction `user_id`s a database fixture already carries, or an order
+ * already in some status — plus the lenient identity mode that adopts unknown users.
+ *
+ * Everything inserted here goes through the records `create_user` and `create_order`
+ * build, so no read path can tell a fixture from an API-created resource.
+ */
+
+/** How requests referring to a user the namespace does not hold are answered. */
+type IdentityMode = "strict" | "adopt-users";
+type UserFixture = {
+    /** Default: a fresh id, as `create_user` would mint. */
+    user_id?: string;
+    client_user_id: string;
+    /** ISO-8601. Default: the mock clock's now. */
+    created_on?: string;
+    /** An IANA zone, or the full `{ id, source_slug, updated_at }` object. */
+    fallback_time_zone?: string | UserRecord["fallback_time_zone"];
+    /** `YYYY-MM-DD`, or the full `{ value, source_slug, updated_at }` object. */
+    fallback_birth_date?: string | UserRecord["fallback_birth_date"];
+    ingestion_start?: string | null;
+    ingestion_end?: string | null;
+};
+type OrderFixture = {
+    /** Default: a fresh id, as `create_order` would mint. */
+    order_id?: string;
+    user_id: string;
+    lab_test_id: string;
+    lab_account_id?: string;
+    /** A transition target (`completed`, `at_lab`, or a full status). Default: just ordered. */
+    status?: string;
+    /** Default: the lab test's own method. */
+    collection_method?: string;
+    patient_details?: Record<string, unknown>;
+    patient_address?: Record<string, unknown>;
+    billing_type?: string;
+    icd_codes?: string[] | null;
+    passthrough?: string | null;
+    clinical_notes?: string | null;
+    /** ISO-8601. Default: the mock clock's now. */
+    created_at?: string;
+    /** Results served for the order, as `PUT /__admin/results/{id}` takes them. */
+    result_fixture?: Omit<ResultFixture, "name"> & {
+        name?: string;
+    };
+};
+type JunctionFixtures = {
+    users?: readonly UserFixture[];
+    orders?: readonly OrderFixture[];
+};
+type InsertOptions = {
+    /** Publish the webhooks the equivalent API calls would. Default `false`. */
+    emitWebhooks?: boolean;
+};
+
 /**
  * Anything that can answer a Fetch `Request` with a `Response`.
  *
@@ -739,15 +1131,39 @@ type LabAccountInput = {
     allowed_billing?: Record<string, readonly string[]>;
     /** Shorthand for `allowed_billing: { client_bill: states }`. Default: every state. */
     states?: readonly string[];
-    /** Teams the account is linked to. Default: the mock team, so it is selectable. */
+    /** Teams the account is linked to. Default: the configured team, so it is selectable. */
     team_id_allowlist?: readonly string[];
 };
 
+/**
+ * Named lab accounts a suite can add in one call, modelled on a real team's recorded
+ * listing (a BioReference-linked team, recorded 2026-09-21 from the Junction sandbox).
+ *
+ * Where a preset copies a recorded account, its states and billing types are the
+ * recording's. `bioreference_ny_nj_delegated` is not a recorded account: it is the
+ * NY/NJ client-bill shape a consumer asked for, kept because suites depend on it.
+ */
+
+/**
+ * A lab-account layout as a file or option declares it: a bare list of accounts, or
+ * presets (by name, or `{ name, id }`) plus accounts, added in that order.
+ */
+type LabAccountLayout = readonly LabAccountInput[] | {
+    presets?: readonly (string | {
+        name: string;
+        id?: string;
+    })[];
+    accounts?: readonly LabAccountInput[];
+};
+
 /**
  * Version of the sealed-corpus on-disk format. Bumped whenever the shape changes so a
  * stale recording is rejected instead of half-applied.
+ *
+ * - 1: observations, catalog and lab accounts.
+ * - 2: adds `teamId`, the recording team, so lab-account allowlists load verbatim.
  */
-declare const SEALED_CORPUS_VERSION = 1;
+declare const SEALED_CORPUS_VERSION = 2;
 /**
  * Exact sandbox recording of the provider-owned reads a drop-in consumer depends on:
  * parameter-stable GET observations (area/PSC inventory), the lab catalog, team labs, and
@@ -755,9 +1171,14 @@ declare const SEALED_CORPUS_VERSION = 1;
  * `booking_key`s can never match a live cache key, so it stays with the generator.
  */
 type SealedCorpus = {
-    version: typeof SEALED_CORPUS_VERSION;
+    version: 1 | typeof SEALED_CORPUS_VERSION;
     recordedAt: string;
     source: string;
+    /**
+     * The recording team's id (version 2+). When present it is the mock's default team,
+     * and each lab account's `team_id_allowlist` is kept exactly as recorded.
+     */
+    teamId?: string;
     /** SHA-256 of the recording's content, written by `corpus pull`. Identifies it in logs. */
     fingerprint?: string;
     observations: Record<string, GetCacheEntry>;
@@ -856,10 +1277,22 @@ type JunctionAPIOptions = APIOptions & {
      */
     geo?: GeoMode;
     /**
-     * The team's lab accounts, replacing the built-in fixtures (and any from the corpus).
-     * `create_order` routes, accepts and rejects `lab_account_id` against these.
+     * The team's lab accounts, replacing the built-in fixtures (and any from the corpus):
+     * a list of accounts, or `{ presets: [...], accounts: [...] }`. `create_order` routes,
+     * accepts and rejects `lab_account_id` against these.
      */
-    labAccounts?: readonly LabAccountInput[];
+    labAccounts?: LabAccountLayout;
+    /**
+     * The team the mock answers as: `team_id` on users and orders, and the team lab-account
+     * allowlists are checked against. Default: the corpus's recorded team, else a fixed id.
+     */
+    teamId?: string;
+    /** Sandbox-only restrictions to enforce. Every one is off unless set here. */
+    limits?: JunctionLimitsInput;
+    /** `adopt-users` creates an unknown (well-formed) `user_id` on first use. Default `strict`. */
+    identity?: IdentityMode;
+    /** Users and orders to load into every namespace, re-applied on every `reset()`. */
+    fixtures?: JunctionFixtures;
 };
 /** What a loaded corpus covers, for `/health` and startup logs. */
 type CorpusInfo = {
@@ -870,12 +1303,18 @@ type CorpusInfo = {
     labTests: number;
     labAccounts: number;
     zips: number;
+    /** The recording team, when the corpus recorded one (version 2+). */
+    teamId?: string;
 };
 declare class JunctionAPI implements FetchAPI {
     readonly app: Hono;
     readonly sqlite: SqliteClient;
     private readonly service;
     private readonly state;
+    private readonly now;
+    private readonly explicitTeamId;
+    private readonly fixtures;
+    private readonly rateWindow;
     private corpus;
     private labAccountConfig;
     constructor(options?: JunctionAPIOptions);
@@ -892,9 +1331,40 @@ declare class JunctionAPI implements FetchAPI {
      * recorded from a team with no accounts leaves in place).
      */
     private seedLabAccounts;
-    /** Replace the team's lab accounts; `undefined` restores the default. Kept across resets. */
-    configureLabAccounts(accounts: readonly LabAccountInput[] | undefined): StoredLabAccount[];
+    /** The team this namespace answers as. */
+    get teamId(): string;
+    /**
+     * Replace the team's lab accounts (a list, or `{ presets, accounts }`); `undefined`
+     * restores the default. Kept across `reset()`, per namespace.
+     */
+    configureLabAccounts(accounts: LabAccountLayout | undefined): StoredLabAccount[];
     labAccounts(): StoredLabAccount[];
+    /** Apply one change to the effective account list and keep it as this namespace's config. */
+    private editLabAccounts;
+    /** Add one account. Throws `LabAccountConflict` when the id is taken. Kept across resets. */
+    addLabAccount(input: LabAccountInput | StoredLabAccount): StoredLabAccount;
+    /** Add a named preset (see `LAB_ACCOUNT_PRESETS`); `undefined` for an unknown name. */
+    addLabAccountPreset(name: string, id?: string): StoredLabAccount | undefined;
+    /** Merge fields into an account; `undefined` when there is none with that id. */
+    patchLabAccount(id: string, patch: Partial<LabAccountInput>): StoredLabAccount | undefined;
+    removeLabAccount(id: string): boolean;
+    /** The sandbox limits this namespace enforces. Every one is off unless configured. */
+    get limits(): JunctionLimits;
+    /** Change some limits (`null` lifts a numeric one); kept across `reset()`. */
+    configureLimits(input: JunctionLimitsInput): JunctionLimits;
+    get identity(): IdentityMode;
+    set identity(mode: IdentityMode);
+    /** Insert users with chosen ids, all or none. Throws `FixtureError` (400/404/409). */
+    insertUsers(users: readonly UserFixture[]): UserRecord[];
+    /** Remove a user outright, leaving no deletion tombstone. */
+    hardDeleteUser(userId: string): boolean;
+    /** Insert orders, optionally already in a status. No webhook fires unless asked. */
+    insertOrders(orders: readonly OrderFixture[], options?: InsertOptions): OrderRecord[];
+    /** Load users, then orders, in one call. */
+    importFixtures(fixtures: JunctionFixtures, options?: InsertOptions): {
+        users: UserRecord[];
+        orders: OrderRecord[];
+    };
     corpusInfo(): CorpusInfo | undefined;
     get geoMode(): GeoMode;
     set geoMode(mode: GeoMode);
@@ -928,8 +1398,18 @@ type JunctionRuntimeOptions = {
     corpus?: SealedCorpus;
     /** Default: `corpus` when a corpus is loaded, otherwise `synthetic`. */
     geo?: GeoMode;
-    /** The team's lab accounts; see {@link JunctionAPIOptions.labAccounts}. */
-    labAccounts?: readonly LabAccountInput[];
+    /** The team's lab accounts, or `{ presets, accounts }`; see {@link JunctionAPIOptions.labAccounts}. */
+    labAccounts?: LabAccountLayout;
+    /** The team the mock answers as. Default: the corpus's recorded team, else a fixed id. */
+    teamId?: string;
+    /** Sandbox-only restrictions, every one off by default; per namespace via `PUT /__admin/limits`. */
+    limits?: JunctionLimitsInput;
+    /** `adopt-users` creates unknown user ids on first use. Default `strict`. */
+    identity?: IdentityMode;
+    /** Users and orders every namespace starts with, re-applied on each reset. */
+    fixtures?: JunctionFixtures;
+    /** Requests each namespace's journal keeps (`GET /__admin/requests`). Default 1000. */
+    journalSize?: number;
     /** Deliver signed webhooks here, with Svix's retry schedule. */
     webhooks?: WebhookEndpoint;
     /** Called in-process for every webhook event, delivered or not. */