@stardeck-customer-apps/testing 0.11.0 → 0.13.0

package/SKILL.md

@@ -193,6 +193,21 @@ await app.payments.deliverBeamEvent(beamPost, {
 // charge-failure or expiry event for bolt payments.
 // EXPIRED is derived from expiresAt on read, never stored.
 
+// Fail exactly one real SDK call, then let the next poll recover normally.
+app.payments.failNext("beam.getPaymentLinkStatus", {
+  status: 503,
+  message: "Beam is temporarily unavailable",
+});
+await expect(payments.getPaymentLinkStatus("plink_test_1")).rejects.toMatchObject({
+  statusCode: 503,
+});
+
+// Network failures reject fetch instead of returning a PaymentError response.
+app.payments.failNext("stripe.getCheckoutSessionStatus", {
+  kind: "network",
+  message: "connection reset",
+});
+
 // File upload
 const storage = new StorageClient();
 await storage.upload(new File(["hi"], "note.txt", { type: "text/plain" }));
@@ -285,7 +300,14 @@ expect(app.edge.latestDisplay()?.action).toBe("show");
 - `app.issueSession(partial?)` — mint access/refresh tokens for cookie-based
   auth flows (`__stardeck:sess`).
 - `app.inbox` — emails sent through the email-sdk: `.latest(addr?)`,
-  `.to(addr)`, `.all()`, `.count`, `.clear()`.
+  `.to(addr)`, `.all()`, `.count`, `.clear()`. Each captured email carries
+  `headers` (`{}` when none were set), so a reply that should thread onto an
+  inbound conversation can be asserted:
+
+  ```ts
+  expect(app.inbox.latest()?.headers["In-Reply-To"]).toBe("<original@mail.example>");
+  ```
+
 - `app.identities` — the platform-identity directory created through
   integrations-sdk `client.identities`: `.get(id)`, `.links(id)`, `.all()`,
   `.count`, `.clear()`. The test-only `.seedVerifiedLink(id, { kind,
@@ -295,6 +317,8 @@ externalId })` helper models a trusted platform/channel link, and
   identities through the integrations SDK.
 - `app.payments` — checkouts created through payments-sdk:
   `.checkouts`, `.latest()`, `.setProducts()`, `.markPaid(id)`,
+  `.setSessionStatus(id, status)`, `.setPaymentLinkStatus(id, status)`,
+  `.failNext(operation, failure)`,
   `.deliverStripeEvent(handler, event)`, `.deliverBeamEvent(handler, event)`,
   Bolt+ controls: `.approveBoltIntent(id)`, `.declineBoltIntent(id)`,
   `.expireBoltIntent(id)`, `.listBoltIntents()`, `.getBoltIntent(id)`,
@@ -378,7 +402,21 @@ cursor, limit })`; `list()` intentionally keeps its previous array shape.
   connections/intents/charges, product list) — captured in `app.payments`;
   fulfill checkout via `markPaid` (poll) or `deliverStripeEvent` /
   `deliverBeamEvent` (webhook push). Drive a terminal without hardware via
-  `approveBoltIntent` / `declineBoltIntent` / `expireBoltIntent`.
+  `approveBoltIntent` / `declineBoltIntent` / `expireBoltIntent`. Beam payment-link
+  polling returns the app's original `order.referenceId`; playground project
+  scoping is an internal control-plane detail and must not be handled in app code.
+- Payment outcomes are controllable without bypassing the SDK: Stripe sessions
+  support `open`, `complete`, and `expired` with `paid`, `unpaid`, or
+  `no_payment_required`; Beam links support `ACTIVE`, `DISABLED`, `EXPIRED`,
+  `PAID`, `VOIDED`, and `REFUNDED`; Bolt+ supports approve, decline, expiry, and
+  cancellation through the real SDK call. Use `app.payments.failNext()` for
+  one-shot HTTP or network failures during Stripe checkout creation/status polling
+  and Beam payment-link creation/status polling. The operation names are
+  `stripe.createCheckout`, `stripe.getCheckoutSessionStatus`,
+  `beam.createPaymentLink`, and `beam.getPaymentLinkStatus`. HTTP failures support
+  statuses 400, 402, 409, 429, 500, and 503 plus optional `code`, `details`, and
+  `retryAfterSeconds`; `{ kind: "network", message }` rejects fetch instead.
+  `app.reset()` clears pending failures.
 - `StorageClient` (upload/list/get/patch/delete, presigned upload) — captured
   in `app.storage` against the simulated `STORAGE_URL` host.
 - `client.slack` / `client.line` / `client.facebook` send endpoints — captured

package/dist/index.d.mts

@@ -53,6 +53,11 @@ interface CapturedEmail {
     html?: string;
     text?: string;
     replyTo?: string;
+    /**
+     * Raw headers the sender attached, e.g. the `In-Reply-To` / `References` pair
+     * that threads a reply onto an inbound conversation. Empty when none were set.
+     */
+    headers: Record<string, string>;
     attachments: Array<{
         filename: string;
         contentType?: string;
@@ -133,6 +138,18 @@ interface CapturedCheckout {
     metadata?: Record<string, string>;
     createdAt: Date;
 }
+type PaymentSimulatorOperation = "stripe.createCheckout" | "stripe.getCheckoutSessionStatus" | "beam.createPaymentLink" | "beam.getPaymentLinkStatus";
+type PaymentSimulatorFailure = {
+    kind?: "http";
+    status: 400 | 402 | 409 | 429 | 500 | 503;
+    message: string;
+    code?: string;
+    details?: unknown;
+    retryAfterSeconds?: number;
+} | {
+    kind: "network";
+    message: string;
+};
 /** Simulated Bolt+ connection as returned by the control-plane store API. */
 interface SimBoltConnection {
     id: string;
@@ -184,6 +201,8 @@ interface TestPayments {
     get checkouts(): CapturedCheckout[];
     latest(): CapturedCheckout | undefined;
     setProducts(products: _stardeck_customer_apps_payments_sdk.Product[]): void;
+    /** Fail the next matching SDK request once, then resume normal simulator behavior. */
+    failNext(operation: PaymentSimulatorOperation, failure: PaymentSimulatorFailure): void;
     markPaid(id: string): void;
     setSessionStatus(id: string, status: Partial<_stardeck_customer_apps_payments_sdk.CheckoutSessionStatus>): void;
     setPaymentLinkStatus(id: string, status: _stardeck_customer_apps_payments_sdk.BeamPaymentLinkStatus): void;
@@ -545,4 +564,4 @@ declare const TEST_ENV_DEFAULTS: {
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PaymentSimulatorFailure, type PaymentSimulatorOperation, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.d.ts

@@ -53,6 +53,11 @@ interface CapturedEmail {
     html?: string;
     text?: string;
     replyTo?: string;
+    /**
+     * Raw headers the sender attached, e.g. the `In-Reply-To` / `References` pair
+     * that threads a reply onto an inbound conversation. Empty when none were set.
+     */
+    headers: Record<string, string>;
     attachments: Array<{
         filename: string;
         contentType?: string;
@@ -133,6 +138,18 @@ interface CapturedCheckout {
     metadata?: Record<string, string>;
     createdAt: Date;
 }
+type PaymentSimulatorOperation = "stripe.createCheckout" | "stripe.getCheckoutSessionStatus" | "beam.createPaymentLink" | "beam.getPaymentLinkStatus";
+type PaymentSimulatorFailure = {
+    kind?: "http";
+    status: 400 | 402 | 409 | 429 | 500 | 503;
+    message: string;
+    code?: string;
+    details?: unknown;
+    retryAfterSeconds?: number;
+} | {
+    kind: "network";
+    message: string;
+};
 /** Simulated Bolt+ connection as returned by the control-plane store API. */
 interface SimBoltConnection {
     id: string;
@@ -184,6 +201,8 @@ interface TestPayments {
     get checkouts(): CapturedCheckout[];
     latest(): CapturedCheckout | undefined;
     setProducts(products: _stardeck_customer_apps_payments_sdk.Product[]): void;
+    /** Fail the next matching SDK request once, then resume normal simulator behavior. */
+    failNext(operation: PaymentSimulatorOperation, failure: PaymentSimulatorFailure): void;
     markPaid(id: string): void;
     setSessionStatus(id: string, status: Partial<_stardeck_customer_apps_payments_sdk.CheckoutSessionStatus>): void;
     setPaymentLinkStatus(id: string, status: _stardeck_customer_apps_payments_sdk.BeamPaymentLinkStatus): void;
@@ -545,4 +564,4 @@ declare const TEST_ENV_DEFAULTS: {
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PaymentSimulatorFailure, type PaymentSimulatorOperation, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.js

@@ -108,6 +108,7 @@ var state = globalSingleton("state", () => ({
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
+  paymentFailures: [],
   products: [],
   boltConnections: /* @__PURE__ */ new Map(),
   boltUsedPairingCodes: /* @__PURE__ */ new Set(),
@@ -660,6 +661,7 @@ async function handleEmailSend(request) {
     html: body.html ? String(body.html) : void 0,
     text: body.text ? String(body.text) : void 0,
     replyTo: body.replyTo ? String(body.replyTo) : void 0,
+    headers: { ...body.headers ?? {} },
     attachments: (body.attachments ?? []).map((a) => ({
       filename: String(a.filename ?? ""),
       contentType: a.contentType ? String(a.contentType) : void 0
@@ -1273,6 +1275,43 @@ function payErr(error, status = 400, code, details) {
   if (details !== void 0) body.details = details;
   return json(body, status);
 }
+function paymentOperationForRequest(request, pathname) {
+  if (request.method === "POST" && /^\/api\/store\/beam\/[^/]+\/payment-links$/.test(pathname)) {
+    return "beam.createPaymentLink";
+  }
+  if (request.method === "GET" && /^\/api\/store\/beam\/[^/]+\/payment-links\/[^/]+$/.test(pathname)) {
+    return "beam.getPaymentLinkStatus";
+  }
+  if (request.method === "POST" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout$/.test(pathname)) {
+    return "stripe.createCheckout";
+  }
+  if (request.method === "GET" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout-sessions\/[^/]+$/.test(pathname)) {
+    return "stripe.getCheckoutSessionStatus";
+  }
+  return null;
+}
+function consumePaymentFailure(request, pathname) {
+  const operation = paymentOperationForRequest(request, pathname);
+  if (!operation) return null;
+  const index = state.paymentFailures.findIndex((entry) => entry.operation === operation);
+  if (index === -1) return null;
+  const [{ failure: failure2 }] = state.paymentFailures.splice(index, 1);
+  if (failure2.kind === "network") {
+    throw new TypeError(failure2.message);
+  }
+  const headers = new Headers({ "Content-Type": "application/json" });
+  if (failure2.retryAfterSeconds !== void 0) {
+    headers.set("Retry-After", String(failure2.retryAfterSeconds));
+  }
+  return new Response(
+    JSON.stringify({
+      error: failure2.message,
+      code: failure2.code ?? "REQUEST_ERROR",
+      ...failure2.details !== void 0 ? { details: failure2.details } : {}
+    }),
+    { status: failure2.status, headers }
+  );
+}
 function isBoltPaymentMethod(value) {
   return typeof value === "string" && BEAM_BOLT_PAYMENT_METHODS.includes(value);
 }
@@ -1416,6 +1455,8 @@ async function deliverEvent(envelope, handler, options) {
 }
 async function handlePaymentsRequest(request, url) {
   const pathname = url.pathname;
+  const injectedFailure = consumePaymentFailure(request, pathname);
+  if (injectedFailure) return injectedFailure;
   if (/\/billing-portal$/.test(pathname)) {
     return payErr("Not found", 404, "NOT_FOUND");
   }
@@ -1710,6 +1751,9 @@ function createPayments() {
     setProducts(products) {
       state.products = products;
     },
+    failNext(operation, failure2) {
+      state.paymentFailures.push({ operation, failure: failure2 });
+    },
     markPaid(id) {
       const session = state.sessionStatuses.get(id);
       if (session) {
@@ -1819,6 +1863,7 @@ function createPayments() {
       state.checkoutCounter = 0;
       state.sessionStatuses.clear();
       state.paymentLinks.clear();
+      state.paymentFailures = [];
       state.products = [];
       state.boltConnections.clear();
       state.boltUsedPairingCodes.clear();

package/dist/index.mjs

@@ -59,6 +59,7 @@ var state = globalSingleton("state", () => ({
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
+  paymentFailures: [],
   products: [],
   boltConnections: /* @__PURE__ */ new Map(),
   boltUsedPairingCodes: /* @__PURE__ */ new Set(),
@@ -611,6 +612,7 @@ async function handleEmailSend(request) {
     html: body.html ? String(body.html) : void 0,
     text: body.text ? String(body.text) : void 0,
     replyTo: body.replyTo ? String(body.replyTo) : void 0,
+    headers: { ...body.headers ?? {} },
     attachments: (body.attachments ?? []).map((a) => ({
       filename: String(a.filename ?? ""),
       contentType: a.contentType ? String(a.contentType) : void 0
@@ -1224,6 +1226,43 @@ function payErr(error, status = 400, code, details) {
   if (details !== void 0) body.details = details;
   return json(body, status);
 }
+function paymentOperationForRequest(request, pathname) {
+  if (request.method === "POST" && /^\/api\/store\/beam\/[^/]+\/payment-links$/.test(pathname)) {
+    return "beam.createPaymentLink";
+  }
+  if (request.method === "GET" && /^\/api\/store\/beam\/[^/]+\/payment-links\/[^/]+$/.test(pathname)) {
+    return "beam.getPaymentLinkStatus";
+  }
+  if (request.method === "POST" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout$/.test(pathname)) {
+    return "stripe.createCheckout";
+  }
+  if (request.method === "GET" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout-sessions\/[^/]+$/.test(pathname)) {
+    return "stripe.getCheckoutSessionStatus";
+  }
+  return null;
+}
+function consumePaymentFailure(request, pathname) {
+  const operation = paymentOperationForRequest(request, pathname);
+  if (!operation) return null;
+  const index = state.paymentFailures.findIndex((entry) => entry.operation === operation);
+  if (index === -1) return null;
+  const [{ failure: failure2 }] = state.paymentFailures.splice(index, 1);
+  if (failure2.kind === "network") {
+    throw new TypeError(failure2.message);
+  }
+  const headers = new Headers({ "Content-Type": "application/json" });
+  if (failure2.retryAfterSeconds !== void 0) {
+    headers.set("Retry-After", String(failure2.retryAfterSeconds));
+  }
+  return new Response(
+    JSON.stringify({
+      error: failure2.message,
+      code: failure2.code ?? "REQUEST_ERROR",
+      ...failure2.details !== void 0 ? { details: failure2.details } : {}
+    }),
+    { status: failure2.status, headers }
+  );
+}
 function isBoltPaymentMethod(value) {
   return typeof value === "string" && BEAM_BOLT_PAYMENT_METHODS.includes(value);
 }
@@ -1367,6 +1406,8 @@ async function deliverEvent(envelope, handler, options) {
 }
 async function handlePaymentsRequest(request, url) {
   const pathname = url.pathname;
+  const injectedFailure = consumePaymentFailure(request, pathname);
+  if (injectedFailure) return injectedFailure;
   if (/\/billing-portal$/.test(pathname)) {
     return payErr("Not found", 404, "NOT_FOUND");
   }
@@ -1661,6 +1702,9 @@ function createPayments() {
     setProducts(products) {
       state.products = products;
     },
+    failNext(operation, failure2) {
+      state.paymentFailures.push({ operation, failure: failure2 });
+    },
     markPaid(id) {
       const session = state.sessionStatuses.get(id);
       if (session) {
@@ -1770,6 +1814,7 @@ function createPayments() {
       state.checkoutCounter = 0;
       state.sessionStatuses.clear();
       state.paymentLinks.clear();
+      state.paymentFailures = [];
       state.products = [];
       state.boltConnections.clear();
       state.boltUsedPairingCodes.clear();

package/dist/next/headers-shim.js

@@ -51,6 +51,7 @@ var state = globalSingleton("state", () => ({
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
+  paymentFailures: [],
   products: [],
   boltConnections: /* @__PURE__ */ new Map(),
   boltUsedPairingCodes: /* @__PURE__ */ new Set(),

package/dist/next/headers-shim.mjs

@@ -24,6 +24,7 @@ var state = globalSingleton("state", () => ({
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
+  paymentFailures: [],
   products: [],
   boltConnections: /* @__PURE__ */ new Map(),
   boltUsedPairingCodes: /* @__PURE__ */ new Set(),

package/dist/setup.js

@@ -45,6 +45,7 @@ var state = globalSingleton("state", () => ({
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
+  paymentFailures: [],
   products: [],
   boltConnections: /* @__PURE__ */ new Map(),
   boltUsedPairingCodes: /* @__PURE__ */ new Set(),
@@ -607,6 +608,7 @@ async function handleEmailSend(request) {
     html: body.html ? String(body.html) : void 0,
     text: body.text ? String(body.text) : void 0,
     replyTo: body.replyTo ? String(body.replyTo) : void 0,
+    headers: { ...body.headers ?? {} },
     attachments: (body.attachments ?? []).map((a) => ({
       filename: String(a.filename ?? ""),
       contentType: a.contentType ? String(a.contentType) : void 0
@@ -1011,6 +1013,43 @@ function payErr(error, status = 400, code, details) {
   if (details !== void 0) body.details = details;
   return json(body, status);
 }
+function paymentOperationForRequest(request, pathname) {
+  if (request.method === "POST" && /^\/api\/store\/beam\/[^/]+\/payment-links$/.test(pathname)) {
+    return "beam.createPaymentLink";
+  }
+  if (request.method === "GET" && /^\/api\/store\/beam\/[^/]+\/payment-links\/[^/]+$/.test(pathname)) {
+    return "beam.getPaymentLinkStatus";
+  }
+  if (request.method === "POST" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout$/.test(pathname)) {
+    return "stripe.createCheckout";
+  }
+  if (request.method === "GET" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout-sessions\/[^/]+$/.test(pathname)) {
+    return "stripe.getCheckoutSessionStatus";
+  }
+  return null;
+}
+function consumePaymentFailure(request, pathname) {
+  const operation = paymentOperationForRequest(request, pathname);
+  if (!operation) return null;
+  const index = state.paymentFailures.findIndex((entry) => entry.operation === operation);
+  if (index === -1) return null;
+  const [{ failure: failure2 }] = state.paymentFailures.splice(index, 1);
+  if (failure2.kind === "network") {
+    throw new TypeError(failure2.message);
+  }
+  const headers = new Headers({ "Content-Type": "application/json" });
+  if (failure2.retryAfterSeconds !== void 0) {
+    headers.set("Retry-After", String(failure2.retryAfterSeconds));
+  }
+  return new Response(
+    JSON.stringify({
+      error: failure2.message,
+      code: failure2.code ?? "REQUEST_ERROR",
+      ...failure2.details !== void 0 ? { details: failure2.details } : {}
+    }),
+    { status: failure2.status, headers }
+  );
+}
 function isBoltPaymentMethod(value) {
   return typeof value === "string" && BEAM_BOLT_PAYMENT_METHODS.includes(value);
 }
@@ -1119,6 +1158,8 @@ function storedStatusesForFilter(statuses) {
 }
 async function handlePaymentsRequest(request, url) {
   const pathname = url.pathname;
+  const injectedFailure = consumePaymentFailure(request, pathname);
+  if (injectedFailure) return injectedFailure;
   if (/\/billing-portal$/.test(pathname)) {
     return payErr("Not found", 404, "NOT_FOUND");
   }

package/dist/setup.mjs

@@ -21,6 +21,7 @@ var state = globalSingleton("state", () => ({
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
+  paymentFailures: [],
   products: [],
   boltConnections: /* @__PURE__ */ new Map(),
   boltUsedPairingCodes: /* @__PURE__ */ new Set(),
@@ -583,6 +584,7 @@ async function handleEmailSend(request) {
     html: body.html ? String(body.html) : void 0,
     text: body.text ? String(body.text) : void 0,
     replyTo: body.replyTo ? String(body.replyTo) : void 0,
+    headers: { ...body.headers ?? {} },
     attachments: (body.attachments ?? []).map((a) => ({
       filename: String(a.filename ?? ""),
       contentType: a.contentType ? String(a.contentType) : void 0
@@ -987,6 +989,43 @@ function payErr(error, status = 400, code, details) {
   if (details !== void 0) body.details = details;
   return json(body, status);
 }
+function paymentOperationForRequest(request, pathname) {
+  if (request.method === "POST" && /^\/api\/store\/beam\/[^/]+\/payment-links$/.test(pathname)) {
+    return "beam.createPaymentLink";
+  }
+  if (request.method === "GET" && /^\/api\/store\/beam\/[^/]+\/payment-links\/[^/]+$/.test(pathname)) {
+    return "beam.getPaymentLinkStatus";
+  }
+  if (request.method === "POST" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout$/.test(pathname)) {
+    return "stripe.createCheckout";
+  }
+  if (request.method === "GET" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout-sessions\/[^/]+$/.test(pathname)) {
+    return "stripe.getCheckoutSessionStatus";
+  }
+  return null;
+}
+function consumePaymentFailure(request, pathname) {
+  const operation = paymentOperationForRequest(request, pathname);
+  if (!operation) return null;
+  const index = state.paymentFailures.findIndex((entry) => entry.operation === operation);
+  if (index === -1) return null;
+  const [{ failure: failure2 }] = state.paymentFailures.splice(index, 1);
+  if (failure2.kind === "network") {
+    throw new TypeError(failure2.message);
+  }
+  const headers = new Headers({ "Content-Type": "application/json" });
+  if (failure2.retryAfterSeconds !== void 0) {
+    headers.set("Retry-After", String(failure2.retryAfterSeconds));
+  }
+  return new Response(
+    JSON.stringify({
+      error: failure2.message,
+      code: failure2.code ?? "REQUEST_ERROR",
+      ...failure2.details !== void 0 ? { details: failure2.details } : {}
+    }),
+    { status: failure2.status, headers }
+  );
+}
 function isBoltPaymentMethod(value) {
   return typeof value === "string" && BEAM_BOLT_PAYMENT_METHODS.includes(value);
 }
@@ -1095,6 +1134,8 @@ function storedStatusesForFilter(statuses) {
 }
 async function handlePaymentsRequest(request, url) {
   const pathname = url.pathname;
+  const injectedFailure = consumePaymentFailure(request, pathname);
+  if (injectedFailure) return injectedFailure;
   if (/\/billing-portal$/.test(pathname)) {
     return payErr("Not found", 404, "NOT_FOUND");
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/testing",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "Vitest test harness for Stardeck customer apps — in-process Postgres (PGlite) plus a control-plane simulator so the real Stardeck SDKs run unmodified in tests",
   "main": "dist/index.js",
   "module": "dist/index.mjs",