@stardeck-customer-apps/testing 0.1.1 → 0.3.0

package/SKILL.md

@@ -85,6 +85,9 @@ describeWorkflow("checkout", () => {
   auth flows (`__stardeck:sess`).
 - `app.inbox` — emails sent through the email-sdk: `.latest(addr?)`,
   `.to(addr)`, `.all()`, `.count`, `.clear()`.
+- `app.identities` — the platform-identity directory created through
+  integrations-sdk `client.identities`: `.get(id)`, `.links(id)`, `.all()`,
+  `.count`, `.clear()`.
 - `app.query(sql, params?)` / `app.db` — direct database access for
   assertions and seeding.
 - `callRoute(handler, opts)` — invoke an App Router route handler with a real
@@ -104,6 +107,10 @@ describeWorkflow("checkout", () => {
 - `getSession()` / `requireAuth()` from project-auth — resolves the
   `asUser(...)` user (header fast path) or issued session cookies.
 - `EmailClient.send()` — captured in `app.inbox`, never delivered.
+- `client.identities` from integrations-sdk (create/get/update/list accounts &
+  persons, attach channel links) — served offline by the simulated directory;
+  `update` replaces the `profile` object (not a merge), like the control plane.
+  Inspect via `app.identities`. Merge/archive are dashboard-only — not simulated.
 - `next/headers` (`headers()`/`cookies()`) inside handlers under `callRoute`.
 
 ## Rules

package/dist/index.d.mts

@@ -1,4 +1,5 @@
 import { PGlite } from '@electric-sql/pglite';
+import { ModuleSchemaOp, ModuleDataPort, IdentityClient } from '@stardeck-customer-apps/core';
 
 /**
  * The user shape returned by project-auth's `getSession()`. Mirrors the
@@ -43,6 +44,47 @@ interface TestInbox {
     clear(): void;
     get count(): number;
 }
+/**
+ * A platform identity captured by the simulated directory. Mirrors the `Identity`
+ * shape returned by @stardeck-customer-apps/integrations-sdk's `client.identities`
+ * — keep in sync.
+ */
+interface CapturedIdentity {
+    id: string;
+    type: "person" | "account";
+    parentId: string | null;
+    displayName: string | null;
+    profile: Record<string, unknown>;
+    status: "active" | "merged" | "archived";
+    mergedIntoId: string | null;
+    externalRef: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** A channel identifier / login attached to a person identity. */
+interface CapturedIdentityLink {
+    id: string;
+    identityId: string;
+    kind: string;
+    externalId: string;
+    verified: boolean;
+    createdAt: string;
+}
+/**
+ * Inspect the simulated platform-identity directory — the in-memory stand-in for
+ * the control plane that `client.identities` talks to in tests. Identities and
+ * links created by app code under test land here; assert on them like `inbox`.
+ */
+interface TestDirectory {
+    /** All identities, oldest first. */
+    all(): CapturedIdentity[];
+    /** A single identity by id, or undefined. */
+    get(id: string): CapturedIdentity | undefined;
+    /** Channel/login links attached to an identity. */
+    links(identityId: string): CapturedIdentityLink[];
+    clear(): void;
+    get count(): number;
+}
 interface TestAppOptions {
     /**
      * Path to the schema.sql snapshot generated by
@@ -70,6 +112,8 @@ interface TestApp {
     db: PGlite;
     /** Captured outbound email. */
     inbox: TestInbox;
+    /** Inspect the simulated platform-identity directory (`client.identities`). */
+    identities: TestDirectory;
     /** Convenience for raw SQL: `app.query("SELECT ...", [param])`. */
     query<T = Record<string, unknown>>(sql: string, params?: unknown[]): Promise<T[]>;
     /**
@@ -97,6 +141,52 @@ interface TestApp {
  */
 declare function createTestApp(options?: TestAppOptions): Promise<TestApp>;
 
+/** The minimal slice of a module definition the harness needs to stand it up. */
+interface MountableModule {
+    schema: ModuleSchemaOp[];
+}
+interface ModuleSeedDeps {
+    /** Raw-SQL data port over the harness PGlite — what the module engine reads/writes through. */
+    data: ModuleDataPort;
+    /** Identity client backed by the simulated platform identity directory. */
+    identities: IdentityClient;
+}
+interface CreateModuleAppOptions {
+    /** Modules whose install schema is rendered to DDL and applied to the test DB. */
+    modules: MountableModule[];
+    /**
+     * Seed run once after the schema is applied, and again on every `reset()`.
+     * Receives the same data port + identity client the module engine uses, so a
+     * module's own `seed*` function drops straight in.
+     */
+    seed?: (deps: ModuleSeedDeps) => Promise<void>;
+    /** Allow real outbound network (default false). */
+    allowNetwork?: boolean;
+}
+interface ModuleApp extends ModuleSeedDeps {
+    /** The underlying harness app (db, identities inspector, callRoute, asUser, …). */
+    app: TestApp;
+    /** Reset to a clean slate: drop + re-apply the module schema, clear the sim, re-run the seed. */
+    reset(): Promise<void>;
+    /** Tear down (restore global fetch, close the db). */
+    close(): Promise<void>;
+}
+/**
+ * Stand a capability module up on the in-process platform simulator — the **L2**
+ * harness. It renders the module's install schema to real DDL (the SAME renderer
+ * the control plane uses, drift-tested in apps/web), applies it to PGlite, wires a
+ * raw-SQL data port over it, and a real `integrations-sdk` identity client talking
+ * to the simulated identity directory (so scoping + governance behave as in prod).
+ *
+ * That's a near-end-to-end test of a module's runtime — schema + data port +
+ * identity integration + engine — minus the HTTP/RSC shell (those belong to a
+ * real-deploy smoke). The same seams back the local dev playground.
+ *
+ * Adding a module costs one co-located test file calling this with its own
+ * definition + seed; there is no per-module harness to maintain.
+ */
+declare function createModuleApp(options: CreateModuleAppOptions): Promise<ModuleApp>;
+
 type RouteHandler<Req extends Request, P> = (request: Req, context: {
     params: Promise<P>;
 }) => Promise<Response> | Response;
@@ -140,4 +230,4 @@ declare const TEST_ENV_DEFAULTS: {
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedEmail, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestInbox, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CreateModuleAppOptions, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type ModuleApp, type ModuleSeedDeps, type MountableModule, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestDirectory, type TestInbox, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createModuleApp, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { PGlite } from '@electric-sql/pglite';
+import { ModuleSchemaOp, ModuleDataPort, IdentityClient } from '@stardeck-customer-apps/core';
 
 /**
  * The user shape returned by project-auth's `getSession()`. Mirrors the
@@ -43,6 +44,47 @@ interface TestInbox {
     clear(): void;
     get count(): number;
 }
+/**
+ * A platform identity captured by the simulated directory. Mirrors the `Identity`
+ * shape returned by @stardeck-customer-apps/integrations-sdk's `client.identities`
+ * — keep in sync.
+ */
+interface CapturedIdentity {
+    id: string;
+    type: "person" | "account";
+    parentId: string | null;
+    displayName: string | null;
+    profile: Record<string, unknown>;
+    status: "active" | "merged" | "archived";
+    mergedIntoId: string | null;
+    externalRef: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** A channel identifier / login attached to a person identity. */
+interface CapturedIdentityLink {
+    id: string;
+    identityId: string;
+    kind: string;
+    externalId: string;
+    verified: boolean;
+    createdAt: string;
+}
+/**
+ * Inspect the simulated platform-identity directory — the in-memory stand-in for
+ * the control plane that `client.identities` talks to in tests. Identities and
+ * links created by app code under test land here; assert on them like `inbox`.
+ */
+interface TestDirectory {
+    /** All identities, oldest first. */
+    all(): CapturedIdentity[];
+    /** A single identity by id, or undefined. */
+    get(id: string): CapturedIdentity | undefined;
+    /** Channel/login links attached to an identity. */
+    links(identityId: string): CapturedIdentityLink[];
+    clear(): void;
+    get count(): number;
+}
 interface TestAppOptions {
     /**
      * Path to the schema.sql snapshot generated by
@@ -70,6 +112,8 @@ interface TestApp {
     db: PGlite;
     /** Captured outbound email. */
     inbox: TestInbox;
+    /** Inspect the simulated platform-identity directory (`client.identities`). */
+    identities: TestDirectory;
     /** Convenience for raw SQL: `app.query("SELECT ...", [param])`. */
     query<T = Record<string, unknown>>(sql: string, params?: unknown[]): Promise<T[]>;
     /**
@@ -97,6 +141,52 @@ interface TestApp {
  */
 declare function createTestApp(options?: TestAppOptions): Promise<TestApp>;
 
+/** The minimal slice of a module definition the harness needs to stand it up. */
+interface MountableModule {
+    schema: ModuleSchemaOp[];
+}
+interface ModuleSeedDeps {
+    /** Raw-SQL data port over the harness PGlite — what the module engine reads/writes through. */
+    data: ModuleDataPort;
+    /** Identity client backed by the simulated platform identity directory. */
+    identities: IdentityClient;
+}
+interface CreateModuleAppOptions {
+    /** Modules whose install schema is rendered to DDL and applied to the test DB. */
+    modules: MountableModule[];
+    /**
+     * Seed run once after the schema is applied, and again on every `reset()`.
+     * Receives the same data port + identity client the module engine uses, so a
+     * module's own `seed*` function drops straight in.
+     */
+    seed?: (deps: ModuleSeedDeps) => Promise<void>;
+    /** Allow real outbound network (default false). */
+    allowNetwork?: boolean;
+}
+interface ModuleApp extends ModuleSeedDeps {
+    /** The underlying harness app (db, identities inspector, callRoute, asUser, …). */
+    app: TestApp;
+    /** Reset to a clean slate: drop + re-apply the module schema, clear the sim, re-run the seed. */
+    reset(): Promise<void>;
+    /** Tear down (restore global fetch, close the db). */
+    close(): Promise<void>;
+}
+/**
+ * Stand a capability module up on the in-process platform simulator — the **L2**
+ * harness. It renders the module's install schema to real DDL (the SAME renderer
+ * the control plane uses, drift-tested in apps/web), applies it to PGlite, wires a
+ * raw-SQL data port over it, and a real `integrations-sdk` identity client talking
+ * to the simulated identity directory (so scoping + governance behave as in prod).
+ *
+ * That's a near-end-to-end test of a module's runtime — schema + data port +
+ * identity integration + engine — minus the HTTP/RSC shell (those belong to a
+ * real-deploy smoke). The same seams back the local dev playground.
+ *
+ * Adding a module costs one co-located test file calling this with its own
+ * definition + seed; there is no per-module harness to maintain.
+ */
+declare function createModuleApp(options: CreateModuleAppOptions): Promise<ModuleApp>;
+
 type RouteHandler<Req extends Request, P> = (request: Req, context: {
     params: Promise<P>;
 }) => Promise<Response> | Response;
@@ -140,4 +230,4 @@ declare const TEST_ENV_DEFAULTS: {
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedEmail, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestInbox, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CreateModuleAppOptions, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type ModuleApp, type ModuleSeedDeps, type MountableModule, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestDirectory, type TestInbox, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createModuleApp, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.js

@@ -36,6 +36,7 @@ __export(index_exports, {
   TEST_ENV_DEFAULTS: () => TEST_ENV_DEFAULTS,
   WORKFLOW_NAME_PREFIX: () => WORKFLOW_NAME_PREFIX,
   callRoute: () => callRoute,
+  createModuleApp: () => createModuleApp,
   createTestApp: () => createTestApp,
   describeWorkflow: () => describeWorkflow,
   parseWorkflowName: () => parseWorkflowName
@@ -43,7 +44,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/test-app.ts
-var import_node_crypto3 = __toESM(require("crypto"));
+var import_node_crypto4 = __toESM(require("crypto"));
 var import_node_fs = require("fs");
 var import_node_path = require("path");
 
@@ -96,6 +97,8 @@ var state = globalSingleton("state", () => ({
   refreshSessions: /* @__PURE__ */ new Map(),
   emails: [],
   emailCounter: 0,
+  identities: /* @__PURE__ */ new Map(),
+  identityLinks: [],
   allowNetwork: false
 }));
 function requireDb() {
@@ -155,8 +158,8 @@ function verifyDeploymentAuthHeader(secret, header) {
     return null;
   }
   if (payload.type !== "deployment-request") return null;
-  const now = Math.floor(Date.now() / 1e3);
-  if (Math.abs(now - payload.timestamp) > TIMESTAMP_TOLERANCE_SECONDS) return null;
+  const now2 = Math.floor(Date.now() / 1e3);
+  if (Math.abs(now2 - payload.timestamp) > TIMESTAMP_TOLERANCE_SECONDS) return null;
   return payload;
 }
 
@@ -460,6 +463,7 @@ var FIELD_TYPE_TO_PG = {
   currency: "numeric",
   rating: "integer",
   relation: "uuid",
+  identity: "uuid",
   file_ref: "jsonb",
   file_refs: "jsonb",
   json: "jsonb"
@@ -637,6 +641,153 @@ function createInbox() {
   };
 }
 
+// src/simulator/identities.ts
+var import_node_crypto3 = __toESM(require("crypto"));
+var LINK_KINDS = /* @__PURE__ */ new Set([
+  "line",
+  "facebook",
+  "instagram",
+  "email",
+  "phone",
+  "project_auth_user",
+  "dashboard_user"
+]);
+function now() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function linksFor(identityId) {
+  return state.identityLinks.filter((l) => l.identityId === identityId);
+}
+async function readBody(request) {
+  try {
+    return await request.json();
+  } catch {
+    return {};
+  }
+}
+function handleList(request) {
+  const typeParam = new URL(request.url).searchParams.get("type");
+  const type = typeParam === "person" || typeParam === "account" ? typeParam : void 0;
+  const identities = [...state.identities.values()];
+  return success({ identities: type ? identities.filter((i) => i.type === type) : identities });
+}
+async function handleCreate(request) {
+  const body = await readBody(request);
+  const type = body.type;
+  if (type !== "person" && type !== "account") {
+    return failure("type must be 'person' or 'account'");
+  }
+  let parentId = null;
+  if (type === "person" && body.parentId) {
+    const parent = state.identities.get(body.parentId);
+    if (!parent) return failure("parent identity not found");
+    if (parent.type !== "account") {
+      return failure("a person's parent must be an account");
+    }
+    parentId = parent.id;
+  }
+  const identity = {
+    id: import_node_crypto3.default.randomUUID(),
+    type,
+    parentId,
+    displayName: body.displayName ?? null,
+    profile: body.profile ?? {},
+    status: "active",
+    mergedIntoId: null,
+    externalRef: body.externalRef ?? null,
+    createdAt: now(),
+    updatedAt: now()
+  };
+  state.identities.set(identity.id, identity);
+  return success({ identity });
+}
+function handleGet(identityId) {
+  const identity = state.identities.get(identityId);
+  if (!identity) return failure("identity not found", 404);
+  return success({ identity, links: linksFor(identityId) });
+}
+async function handleUpdate(identityId, request) {
+  const identity = state.identities.get(identityId);
+  if (!identity) return failure("identity not found", 404);
+  const body = await readBody(request);
+  if (body.displayName !== void 0) {
+    identity.displayName = body.displayName;
+  }
+  if (body.profile !== void 0) {
+    identity.profile = body.profile;
+  }
+  if (body.externalRef !== void 0) {
+    identity.externalRef = body.externalRef;
+  }
+  identity.updatedAt = now();
+  return success({ identity });
+}
+async function handleAttachLink(identityId, request) {
+  const identity = state.identities.get(identityId);
+  if (!identity) return failure("identity not found", 404);
+  if (identity.type !== "person") {
+    return failure("links attach only to a person identity");
+  }
+  if (identity.status !== "active") {
+    return failure("links attach only to active persons");
+  }
+  const body = await readBody(request);
+  const kind = body.kind;
+  const externalId = body.externalId;
+  if (typeof kind !== "string" || !LINK_KINDS.has(kind)) {
+    return failure(`kind must be one of: ${[...LINK_KINDS].join(", ")}`);
+  }
+  if (typeof externalId !== "string" || !externalId) {
+    return failure("externalId is required");
+  }
+  const existing = state.identityLinks.find((l) => l.kind === kind && l.externalId === externalId);
+  if (existing) {
+    if (existing.identityId === identityId) return success({ link: existing });
+    return failure("identifier already linked to another identity", 409);
+  }
+  const link = {
+    id: import_node_crypto3.default.randomUUID(),
+    identityId,
+    kind,
+    externalId,
+    verified: body.verified === true,
+    createdAt: now()
+  };
+  state.identityLinks.push(link);
+  return success({ link });
+}
+async function handleIdentitiesRequest(request, subPath) {
+  const method = request.method;
+  if (subPath === "" || subPath === "/") {
+    if (method === "GET") return handleList(request);
+    if (method === "POST") return handleCreate(request);
+  }
+  const linksMatch = subPath.match(/^\/([^/]+)\/links$/);
+  if (linksMatch && method === "POST") {
+    return handleAttachLink(linksMatch[1], request);
+  }
+  const singleMatch = subPath.match(/^\/([^/]+)$/);
+  if (singleMatch) {
+    if (method === "GET") return handleGet(singleMatch[1]);
+    if (method === "PATCH") return handleUpdate(singleMatch[1], request);
+  }
+  return failure(`No identities simulator for ${method} .../identities${subPath}`, 404);
+}
+function createDirectory() {
+  return {
+    all: () => [...state.identities.values()],
+    get: (id) => state.identities.get(id),
+    links: (identityId) => linksFor(identityId),
+    clear: () => {
+      state.identities.clear();
+      state.identityLinks = [];
+    },
+    get count() {
+      return state.identities.size;
+    }
+  };
+}
+
 // src/simulator/router.ts
 var fetchHolder = globalSingleton("fetch-holder", () => ({
   originalFetch: null
@@ -654,7 +805,8 @@ async function handleSimulatedRequest(request, url) {
   }
   const dataStoreMatch = url.pathname.match(/^\/api\/data-stores\/[^/]+(\/.*)?$/);
   const isEmail = url.pathname === "/api/email/send";
-  if (dataStoreMatch || isEmail) {
+  const identitiesMatch = url.pathname.match(/^\/api\/deployments\/[^/]+\/identities(\/.*)?$/);
+  if (dataStoreMatch || isEmail || identitiesMatch) {
     const authHeader = request.headers.get("X-Stardeck-Auth");
     if (!authHeader) {
       return failure("Missing authentication header", 401);
@@ -667,28 +819,31 @@ async function handleSimulatedRequest(request, url) {
   if (isEmail && request.method === "POST") {
     return handleEmailSend(request);
   }
+  if (identitiesMatch) {
+    return handleIdentitiesRequest(request, identitiesMatch[1] ?? "");
+  }
   if (dataStoreMatch) {
     const subPath = dataStoreMatch[1] ?? "";
     const db = requireDb();
-    const readBody = async () => await request.json();
+    const readBody2 = async () => await request.json();
     if (subPath === "/query" && request.method === "POST") {
-      return handleQuery(db, await readBody());
+      return handleQuery(db, await readBody2());
     }
     if (subPath === "/mutate" && request.method === "POST") {
-      return handleMutate(db, await readBody());
+      return handleMutate(db, await readBody2());
     }
     if (subPath === "/schema" && request.method === "GET") {
       return handleGetSchema(db);
     }
     if (subPath === "/schema/tables" && request.method === "POST") {
-      return handleCreateTable(db, await readBody());
+      return handleCreateTable(db, await readBody2());
     }
     if (subPath === "/schema/columns" && request.method === "POST") {
-      return handleAddColumn(db, await readBody());
+      return handleAddColumn(db, await readBody2());
     }
   }
   return failure(
-    `[stardeck-testing] No simulator for ${request.method} ${url.pathname}. Supported: data-store query/mutate/schema, email send, auth verify/refresh, Neon /sql.`,
+    `[stardeck-testing] No simulator for ${request.method} ${url.pathname}. Supported: data-store query/mutate/schema, email send, identities CRUD, auth verify/refresh, Neon /sql.`,
     404
   );
 }
@@ -773,9 +928,11 @@ async function createTestApp(options = {}) {
     throw error;
   }
   const inbox = createInbox();
+  const directory = createDirectory();
   const app = {
     db,
     inbox,
+    identities: directory,
     async query(sql, params = []) {
       const result = await db.query(sql, params);
       return result.rows;
@@ -791,8 +948,8 @@ async function createTestApp(options = {}) {
     issueSession(user) {
       const fullUser = buildUser(user);
       const tokens = {
-        accessToken: `test-access-${import_node_crypto3.default.randomUUID()}`,
-        refreshToken: `test-refresh-${import_node_crypto3.default.randomUUID()}`
+        accessToken: `test-access-${import_node_crypto4.default.randomUUID()}`,
+        refreshToken: `test-refresh-${import_node_crypto4.default.randomUUID()}`
       };
       state.sessions.set(tokens.accessToken, fullUser);
       state.refreshSessions.set(tokens.refreshToken, fullUser);
@@ -806,6 +963,8 @@ async function createTestApp(options = {}) {
       state.refreshSessions.clear();
       state.emails = [];
       state.emailCounter = 0;
+      state.identities.clear();
+      state.identityLinks = [];
     },
     async close() {
       state.db = null;
@@ -813,6 +972,8 @@ async function createTestApp(options = {}) {
       state.sessions.clear();
       state.refreshSessions.clear();
       state.emails = [];
+      state.identities.clear();
+      state.identityLinks = [];
       uninstallFetchRouter();
       await db.close();
     }
@@ -820,6 +981,39 @@ async function createTestApp(options = {}) {
   return app;
 }
 
+// src/module-app.ts
+var import_core = require("@stardeck-customer-apps/core");
+async function createModuleApp(options) {
+  const schemaSql = options.modules.map((m) => (0, import_core.renderSchemaOpsToSql)(m.schema)).join("\n\n");
+  const app = await createTestApp({ schemaSql, allowNetwork: options.allowNetwork });
+  const sql = { query: (text, params) => app.db.query(text, params ?? []) };
+  const data = (0, import_core.makeSqlPort)(sql);
+  const { createIntegrationsClient } = await import("@stardeck-customer-apps/integrations-sdk");
+  const identities = createIntegrationsClient({
+    controlPlaneUrl: TEST_ENV_DEFAULTS.CONTROL_PLANE_URL,
+    organizationId: TEST_ENV_DEFAULTS.ORGANIZATION_ID,
+    projectId: TEST_ENV_DEFAULTS.PROJECT_ID,
+    deploymentId: TEST_ENV_DEFAULTS.DEPLOYMENT_ID,
+    deploymentSecret: TEST_ENV_DEFAULTS.DEPLOYMENT_SECRET
+  }).identities;
+  const runSeed = async () => {
+    if (options.seed) await options.seed({ data, identities });
+  };
+  await runSeed();
+  return {
+    app,
+    data,
+    identities,
+    async reset() {
+      await app.reset();
+      await runSeed();
+    },
+    async close() {
+      await app.close();
+    }
+  };
+}
+
 // src/next/headers-shim.ts
 var import_node_async_hooks = require("async_hooks");
 var requestScopeStorage = globalSingleton(
@@ -917,6 +1111,7 @@ function parseWorkflowName(describeTitle) {
   TEST_ENV_DEFAULTS,
   WORKFLOW_NAME_PREFIX,
   callRoute,
+  createModuleApp,
   createTestApp,
   describeWorkflow,
   parseWorkflowName