@stardeck-customer-apps/testing 0.2.0 → 0.3.1

package/dist/index.d.mts

@@ -1,4 +1,5 @@
 import { PGlite } from '@electric-sql/pglite';
+import { ModuleSchemaOp, ModuleDataPort, IdentityClient } from '@stardeck-customer-apps/core';
 
 /**
  * The user shape returned by project-auth's `getSession()`. Mirrors the
@@ -140,6 +141,52 @@ interface TestApp {
  */
 declare function createTestApp(options?: TestAppOptions): Promise<TestApp>;
 
+/** The minimal slice of a module definition the harness needs to stand it up. */
+interface MountableModule {
+    schema: ModuleSchemaOp[];
+}
+interface ModuleSeedDeps {
+    /** Raw-SQL data port over the harness PGlite — what the module engine reads/writes through. */
+    data: ModuleDataPort;
+    /** Identity client backed by the simulated platform identity directory. */
+    identities: IdentityClient;
+}
+interface CreateModuleAppOptions {
+    /** Modules whose install schema is rendered to DDL and applied to the test DB. */
+    modules: MountableModule[];
+    /**
+     * Seed run once after the schema is applied, and again on every `reset()`.
+     * Receives the same data port + identity client the module engine uses, so a
+     * module's own `seed*` function drops straight in.
+     */
+    seed?: (deps: ModuleSeedDeps) => Promise<void>;
+    /** Allow real outbound network (default false). */
+    allowNetwork?: boolean;
+}
+interface ModuleApp extends ModuleSeedDeps {
+    /** The underlying harness app (db, identities inspector, callRoute, asUser, …). */
+    app: TestApp;
+    /** Reset to a clean slate: drop + re-apply the module schema, clear the sim, re-run the seed. */
+    reset(): Promise<void>;
+    /** Tear down (restore global fetch, close the db). */
+    close(): Promise<void>;
+}
+/**
+ * Stand a capability module up on the in-process platform simulator — the **L2**
+ * harness. It renders the module's install schema to real DDL (the SAME renderer
+ * the control plane uses, drift-tested in apps/web), applies it to PGlite, wires a
+ * raw-SQL data port over it, and a real `integrations-sdk` identity client talking
+ * to the simulated identity directory (so scoping + governance behave as in prod).
+ *
+ * That's a near-end-to-end test of a module's runtime — schema + data port +
+ * identity integration + engine — minus the HTTP/RSC shell (those belong to a
+ * real-deploy smoke). The same seams back the local dev playground.
+ *
+ * Adding a module costs one co-located test file calling this with its own
+ * definition + seed; there is no per-module harness to maintain.
+ */
+declare function createModuleApp(options: CreateModuleAppOptions): Promise<ModuleApp>;
+
 type RouteHandler<Req extends Request, P> = (request: Req, context: {
     params: Promise<P>;
 }) => Promise<Response> | Response;
@@ -183,4 +230,4 @@ declare const TEST_ENV_DEFAULTS: {
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestDirectory, type TestInbox, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CreateModuleAppOptions, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type ModuleApp, type ModuleSeedDeps, type MountableModule, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestDirectory, type TestInbox, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createModuleApp, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { PGlite } from '@electric-sql/pglite';
+import { ModuleSchemaOp, ModuleDataPort, IdentityClient } from '@stardeck-customer-apps/core';
 
 /**
  * The user shape returned by project-auth's `getSession()`. Mirrors the
@@ -140,6 +141,52 @@ interface TestApp {
  */
 declare function createTestApp(options?: TestAppOptions): Promise<TestApp>;
 
+/** The minimal slice of a module definition the harness needs to stand it up. */
+interface MountableModule {
+    schema: ModuleSchemaOp[];
+}
+interface ModuleSeedDeps {
+    /** Raw-SQL data port over the harness PGlite — what the module engine reads/writes through. */
+    data: ModuleDataPort;
+    /** Identity client backed by the simulated platform identity directory. */
+    identities: IdentityClient;
+}
+interface CreateModuleAppOptions {
+    /** Modules whose install schema is rendered to DDL and applied to the test DB. */
+    modules: MountableModule[];
+    /**
+     * Seed run once after the schema is applied, and again on every `reset()`.
+     * Receives the same data port + identity client the module engine uses, so a
+     * module's own `seed*` function drops straight in.
+     */
+    seed?: (deps: ModuleSeedDeps) => Promise<void>;
+    /** Allow real outbound network (default false). */
+    allowNetwork?: boolean;
+}
+interface ModuleApp extends ModuleSeedDeps {
+    /** The underlying harness app (db, identities inspector, callRoute, asUser, …). */
+    app: TestApp;
+    /** Reset to a clean slate: drop + re-apply the module schema, clear the sim, re-run the seed. */
+    reset(): Promise<void>;
+    /** Tear down (restore global fetch, close the db). */
+    close(): Promise<void>;
+}
+/**
+ * Stand a capability module up on the in-process platform simulator — the **L2**
+ * harness. It renders the module's install schema to real DDL (the SAME renderer
+ * the control plane uses, drift-tested in apps/web), applies it to PGlite, wires a
+ * raw-SQL data port over it, and a real `integrations-sdk` identity client talking
+ * to the simulated identity directory (so scoping + governance behave as in prod).
+ *
+ * That's a near-end-to-end test of a module's runtime — schema + data port +
+ * identity integration + engine — minus the HTTP/RSC shell (those belong to a
+ * real-deploy smoke). The same seams back the local dev playground.
+ *
+ * Adding a module costs one co-located test file calling this with its own
+ * definition + seed; there is no per-module harness to maintain.
+ */
+declare function createModuleApp(options: CreateModuleAppOptions): Promise<ModuleApp>;
+
 type RouteHandler<Req extends Request, P> = (request: Req, context: {
     params: Promise<P>;
 }) => Promise<Response> | Response;
@@ -183,4 +230,4 @@ declare const TEST_ENV_DEFAULTS: {
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestDirectory, type TestInbox, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CreateModuleAppOptions, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type ModuleApp, type ModuleSeedDeps, type MountableModule, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestDirectory, type TestInbox, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createModuleApp, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.js

@@ -36,6 +36,7 @@ __export(index_exports, {
   TEST_ENV_DEFAULTS: () => TEST_ENV_DEFAULTS,
   WORKFLOW_NAME_PREFIX: () => WORKFLOW_NAME_PREFIX,
   callRoute: () => callRoute,
+  createModuleApp: () => createModuleApp,
   createTestApp: () => createTestApp,
   describeWorkflow: () => describeWorkflow,
   parseWorkflowName: () => parseWorkflowName
@@ -98,6 +99,7 @@ var state = globalSingleton("state", () => ({
   emailCounter: 0,
   identities: /* @__PURE__ */ new Map(),
   identityLinks: [],
+  identityMemory: [],
   allowNetwork: false
 }));
 function requireDb() {
@@ -755,16 +757,108 @@ async function handleAttachLink(identityId, request) {
   state.identityLinks.push(link);
   return success({ link });
 }
+function memoryDto(m) {
+  return {
+    id: m.id,
+    source: m.source,
+    kind: m.kind,
+    content: m.content,
+    metadata: m.metadata,
+    createdAt: m.createdAt
+  };
+}
+async function handleResolve(request) {
+  const body = await readBody(request);
+  const type = body.type;
+  if (type !== "person" && type !== "account") {
+    return failure("type must be 'person' or 'account'");
+  }
+  if (type === "account") {
+    return failure(
+      "resolveOrCreate is for channel-linked persons; an account is not resolvable by link \u2014 create it explicitly instead.",
+      409
+    );
+  }
+  const link = body.link;
+  const kind = link?.kind;
+  const externalId = link?.externalId;
+  if (typeof kind !== "string" || !LINK_KINDS.has(kind)) {
+    return failure(`link.kind must be one of: ${[...LINK_KINDS].join(", ")}`);
+  }
+  if (typeof externalId !== "string" || !externalId) {
+    return failure("link.externalId is required");
+  }
+  const existingLink = state.identityLinks.find(
+    (l) => l.kind === kind && l.externalId === externalId
+  );
+  if (existingLink) {
+    const identity2 = state.identities.get(existingLink.identityId);
+    if (identity2) return success({ identity: identity2, created: false });
+  }
+  const identity = {
+    id: import_node_crypto3.default.randomUUID(),
+    type,
+    parentId: null,
+    displayName: body.displayName ?? null,
+    profile: body.profile ?? {},
+    status: "active",
+    mergedIntoId: null,
+    externalRef: null,
+    createdAt: now(),
+    updatedAt: now()
+  };
+  state.identities.set(identity.id, identity);
+  state.identityLinks.push({
+    id: import_node_crypto3.default.randomUUID(),
+    identityId: identity.id,
+    kind,
+    externalId,
+    verified: true,
+    createdAt: now()
+  });
+  return success({ identity, created: true });
+}
+async function handleWriteMemory(identityId, request) {
+  if (!state.identities.get(identityId)) return failure("Identity not found", 404);
+  const body = await readBody(request);
+  if (typeof body.content !== "string" || !body.content) return failure("content is required");
+  const entry = {
+    id: import_node_crypto3.default.randomUUID(),
+    identityId,
+    source: typeof body.source === "string" ? body.source : "app",
+    kind: typeof body.kind === "string" ? body.kind : "fact",
+    content: body.content,
+    metadata: body.metadata ?? {},
+    createdAt: now()
+  };
+  state.identityMemory.push(entry);
+  return success({ memory: memoryDto(entry) });
+}
+function handleListMemory(identityId, request) {
+  if (!state.identities.get(identityId)) return failure("Identity not found", 404);
+  let rows = state.identityMemory.filter((m) => m.identityId === identityId).reverse();
+  const limitParam = new URL(request.url).searchParams.get("limit");
+  if (limitParam) rows = rows.slice(0, Math.max(1, parseInt(limitParam, 10) || 0));
+  return success({ memories: rows.map(memoryDto) });
+}
 async function handleIdentitiesRequest(request, subPath) {
   const method = request.method;
   if (subPath === "" || subPath === "/") {
     if (method === "GET") return handleList(request);
     if (method === "POST") return handleCreate(request);
   }
+  if (subPath === "/resolve" && method === "POST") {
+    return handleResolve(request);
+  }
   const linksMatch = subPath.match(/^\/([^/]+)\/links$/);
   if (linksMatch && method === "POST") {
     return handleAttachLink(linksMatch[1], request);
   }
+  const memoryMatch = subPath.match(/^\/([^/]+)\/memory$/);
+  if (memoryMatch) {
+    if (method === "GET") return handleListMemory(memoryMatch[1], request);
+    if (method === "POST") return handleWriteMemory(memoryMatch[1], request);
+  }
   const singleMatch = subPath.match(/^\/([^/]+)$/);
   if (singleMatch) {
     if (method === "GET") return handleGet(singleMatch[1]);
@@ -964,6 +1058,7 @@ async function createTestApp(options = {}) {
       state.emailCounter = 0;
       state.identities.clear();
       state.identityLinks = [];
+      state.identityMemory = [];
     },
     async close() {
       state.db = null;
@@ -973,6 +1068,7 @@ async function createTestApp(options = {}) {
       state.emails = [];
       state.identities.clear();
       state.identityLinks = [];
+      state.identityMemory = [];
       uninstallFetchRouter();
       await db.close();
     }
@@ -980,6 +1076,39 @@ async function createTestApp(options = {}) {
   return app;
 }
 
+// src/module-app.ts
+var import_core = require("@stardeck-customer-apps/core");
+async function createModuleApp(options) {
+  const schemaSql = options.modules.map((m) => (0, import_core.renderSchemaOpsToSql)(m.schema)).join("\n\n");
+  const app = await createTestApp({ schemaSql, allowNetwork: options.allowNetwork });
+  const sql = { query: (text, params) => app.db.query(text, params ?? []) };
+  const data = (0, import_core.makeSqlPort)(sql);
+  const { createIntegrationsClient } = await import("@stardeck-customer-apps/integrations-sdk");
+  const identities = createIntegrationsClient({
+    controlPlaneUrl: TEST_ENV_DEFAULTS.CONTROL_PLANE_URL,
+    organizationId: TEST_ENV_DEFAULTS.ORGANIZATION_ID,
+    projectId: TEST_ENV_DEFAULTS.PROJECT_ID,
+    deploymentId: TEST_ENV_DEFAULTS.DEPLOYMENT_ID,
+    deploymentSecret: TEST_ENV_DEFAULTS.DEPLOYMENT_SECRET
+  }).identities;
+  const runSeed = async () => {
+    if (options.seed) await options.seed({ data, identities });
+  };
+  await runSeed();
+  return {
+    app,
+    data,
+    identities,
+    async reset() {
+      await app.reset();
+      await runSeed();
+    },
+    async close() {
+      await app.close();
+    }
+  };
+}
+
 // src/next/headers-shim.ts
 var import_node_async_hooks = require("async_hooks");
 var requestScopeStorage = globalSingleton(
@@ -1077,6 +1206,7 @@ function parseWorkflowName(describeTitle) {
   TEST_ENV_DEFAULTS,
   WORKFLOW_NAME_PREFIX,
   callRoute,
+  createModuleApp,
   createTestApp,
   describeWorkflow,
   parseWorkflowName

package/dist/index.mjs

@@ -54,6 +54,7 @@ var state = globalSingleton("state", () => ({
   emailCounter: 0,
   identities: /* @__PURE__ */ new Map(),
   identityLinks: [],
+  identityMemory: [],
   allowNetwork: false
 }));
 function requireDb() {
@@ -711,16 +712,108 @@ async function handleAttachLink(identityId, request) {
   state.identityLinks.push(link);
   return success({ link });
 }
+function memoryDto(m) {
+  return {
+    id: m.id,
+    source: m.source,
+    kind: m.kind,
+    content: m.content,
+    metadata: m.metadata,
+    createdAt: m.createdAt
+  };
+}
+async function handleResolve(request) {
+  const body = await readBody(request);
+  const type = body.type;
+  if (type !== "person" && type !== "account") {
+    return failure("type must be 'person' or 'account'");
+  }
+  if (type === "account") {
+    return failure(
+      "resolveOrCreate is for channel-linked persons; an account is not resolvable by link \u2014 create it explicitly instead.",
+      409
+    );
+  }
+  const link = body.link;
+  const kind = link?.kind;
+  const externalId = link?.externalId;
+  if (typeof kind !== "string" || !LINK_KINDS.has(kind)) {
+    return failure(`link.kind must be one of: ${[...LINK_KINDS].join(", ")}`);
+  }
+  if (typeof externalId !== "string" || !externalId) {
+    return failure("link.externalId is required");
+  }
+  const existingLink = state.identityLinks.find(
+    (l) => l.kind === kind && l.externalId === externalId
+  );
+  if (existingLink) {
+    const identity2 = state.identities.get(existingLink.identityId);
+    if (identity2) return success({ identity: identity2, created: false });
+  }
+  const identity = {
+    id: crypto3.randomUUID(),
+    type,
+    parentId: null,
+    displayName: body.displayName ?? null,
+    profile: body.profile ?? {},
+    status: "active",
+    mergedIntoId: null,
+    externalRef: null,
+    createdAt: now(),
+    updatedAt: now()
+  };
+  state.identities.set(identity.id, identity);
+  state.identityLinks.push({
+    id: crypto3.randomUUID(),
+    identityId: identity.id,
+    kind,
+    externalId,
+    verified: true,
+    createdAt: now()
+  });
+  return success({ identity, created: true });
+}
+async function handleWriteMemory(identityId, request) {
+  if (!state.identities.get(identityId)) return failure("Identity not found", 404);
+  const body = await readBody(request);
+  if (typeof body.content !== "string" || !body.content) return failure("content is required");
+  const entry = {
+    id: crypto3.randomUUID(),
+    identityId,
+    source: typeof body.source === "string" ? body.source : "app",
+    kind: typeof body.kind === "string" ? body.kind : "fact",
+    content: body.content,
+    metadata: body.metadata ?? {},
+    createdAt: now()
+  };
+  state.identityMemory.push(entry);
+  return success({ memory: memoryDto(entry) });
+}
+function handleListMemory(identityId, request) {
+  if (!state.identities.get(identityId)) return failure("Identity not found", 404);
+  let rows = state.identityMemory.filter((m) => m.identityId === identityId).reverse();
+  const limitParam = new URL(request.url).searchParams.get("limit");
+  if (limitParam) rows = rows.slice(0, Math.max(1, parseInt(limitParam, 10) || 0));
+  return success({ memories: rows.map(memoryDto) });
+}
 async function handleIdentitiesRequest(request, subPath) {
   const method = request.method;
   if (subPath === "" || subPath === "/") {
     if (method === "GET") return handleList(request);
     if (method === "POST") return handleCreate(request);
   }
+  if (subPath === "/resolve" && method === "POST") {
+    return handleResolve(request);
+  }
   const linksMatch = subPath.match(/^\/([^/]+)\/links$/);
   if (linksMatch && method === "POST") {
     return handleAttachLink(linksMatch[1], request);
   }
+  const memoryMatch = subPath.match(/^\/([^/]+)\/memory$/);
+  if (memoryMatch) {
+    if (method === "GET") return handleListMemory(memoryMatch[1], request);
+    if (method === "POST") return handleWriteMemory(memoryMatch[1], request);
+  }
   const singleMatch = subPath.match(/^\/([^/]+)$/);
   if (singleMatch) {
     if (method === "GET") return handleGet(singleMatch[1]);
@@ -920,6 +1013,7 @@ async function createTestApp(options = {}) {
       state.emailCounter = 0;
       state.identities.clear();
       state.identityLinks = [];
+      state.identityMemory = [];
     },
     async close() {
       state.db = null;
@@ -929,6 +1023,7 @@ async function createTestApp(options = {}) {
       state.emails = [];
       state.identities.clear();
       state.identityLinks = [];
+      state.identityMemory = [];
       uninstallFetchRouter();
       await db.close();
     }
@@ -936,6 +1031,42 @@ async function createTestApp(options = {}) {
   return app;
 }
 
+// src/module-app.ts
+import {
+  makeSqlPort,
+  renderSchemaOpsToSql
+} from "@stardeck-customer-apps/core";
+async function createModuleApp(options) {
+  const schemaSql = options.modules.map((m) => renderSchemaOpsToSql(m.schema)).join("\n\n");
+  const app = await createTestApp({ schemaSql, allowNetwork: options.allowNetwork });
+  const sql = { query: (text, params) => app.db.query(text, params ?? []) };
+  const data = makeSqlPort(sql);
+  const { createIntegrationsClient } = await import("@stardeck-customer-apps/integrations-sdk");
+  const identities = createIntegrationsClient({
+    controlPlaneUrl: TEST_ENV_DEFAULTS.CONTROL_PLANE_URL,
+    organizationId: TEST_ENV_DEFAULTS.ORGANIZATION_ID,
+    projectId: TEST_ENV_DEFAULTS.PROJECT_ID,
+    deploymentId: TEST_ENV_DEFAULTS.DEPLOYMENT_ID,
+    deploymentSecret: TEST_ENV_DEFAULTS.DEPLOYMENT_SECRET
+  }).identities;
+  const runSeed = async () => {
+    if (options.seed) await options.seed({ data, identities });
+  };
+  await runSeed();
+  return {
+    app,
+    data,
+    identities,
+    async reset() {
+      await app.reset();
+      await runSeed();
+    },
+    async close() {
+      await app.close();
+    }
+  };
+}
+
 // src/next/headers-shim.ts
 import { AsyncLocalStorage } from "async_hooks";
 var requestScopeStorage = globalSingleton(
@@ -1032,6 +1163,7 @@ export {
   TEST_ENV_DEFAULTS,
   WORKFLOW_NAME_PREFIX,
   callRoute,
+  createModuleApp,
   createTestApp,
   describeWorkflow,
   parseWorkflowName

package/dist/next/headers-shim.js

@@ -46,6 +46,7 @@ var state = globalSingleton("state", () => ({
   emailCounter: 0,
   identities: /* @__PURE__ */ new Map(),
   identityLinks: [],
+  identityMemory: [],
   allowNetwork: false
 }));
 

package/dist/next/headers-shim.mjs

@@ -19,6 +19,7 @@ var state = globalSingleton("state", () => ({
   emailCounter: 0,
   identities: /* @__PURE__ */ new Map(),
   identityLinks: [],
+  identityMemory: [],
   allowNetwork: false
 }));
 

package/dist/setup.js

@@ -40,6 +40,7 @@ var state = globalSingleton("state", () => ({
   emailCounter: 0,
   identities: /* @__PURE__ */ new Map(),
   identityLinks: [],
+  identityMemory: [],
   allowNetwork: false
 }));
 function requireDb() {
@@ -687,16 +688,108 @@ async function handleAttachLink(identityId, request) {
   state.identityLinks.push(link);
   return success({ link });
 }
+function memoryDto(m) {
+  return {
+    id: m.id,
+    source: m.source,
+    kind: m.kind,
+    content: m.content,
+    metadata: m.metadata,
+    createdAt: m.createdAt
+  };
+}
+async function handleResolve(request) {
+  const body = await readBody(request);
+  const type = body.type;
+  if (type !== "person" && type !== "account") {
+    return failure("type must be 'person' or 'account'");
+  }
+  if (type === "account") {
+    return failure(
+      "resolveOrCreate is for channel-linked persons; an account is not resolvable by link \u2014 create it explicitly instead.",
+      409
+    );
+  }
+  const link = body.link;
+  const kind = link?.kind;
+  const externalId = link?.externalId;
+  if (typeof kind !== "string" || !LINK_KINDS.has(kind)) {
+    return failure(`link.kind must be one of: ${[...LINK_KINDS].join(", ")}`);
+  }
+  if (typeof externalId !== "string" || !externalId) {
+    return failure("link.externalId is required");
+  }
+  const existingLink = state.identityLinks.find(
+    (l) => l.kind === kind && l.externalId === externalId
+  );
+  if (existingLink) {
+    const identity2 = state.identities.get(existingLink.identityId);
+    if (identity2) return success({ identity: identity2, created: false });
+  }
+  const identity = {
+    id: import_node_crypto3.default.randomUUID(),
+    type,
+    parentId: null,
+    displayName: body.displayName ?? null,
+    profile: body.profile ?? {},
+    status: "active",
+    mergedIntoId: null,
+    externalRef: null,
+    createdAt: now(),
+    updatedAt: now()
+  };
+  state.identities.set(identity.id, identity);
+  state.identityLinks.push({
+    id: import_node_crypto3.default.randomUUID(),
+    identityId: identity.id,
+    kind,
+    externalId,
+    verified: true,
+    createdAt: now()
+  });
+  return success({ identity, created: true });
+}
+async function handleWriteMemory(identityId, request) {
+  if (!state.identities.get(identityId)) return failure("Identity not found", 404);
+  const body = await readBody(request);
+  if (typeof body.content !== "string" || !body.content) return failure("content is required");
+  const entry = {
+    id: import_node_crypto3.default.randomUUID(),
+    identityId,
+    source: typeof body.source === "string" ? body.source : "app",
+    kind: typeof body.kind === "string" ? body.kind : "fact",
+    content: body.content,
+    metadata: body.metadata ?? {},
+    createdAt: now()
+  };
+  state.identityMemory.push(entry);
+  return success({ memory: memoryDto(entry) });
+}
+function handleListMemory(identityId, request) {
+  if (!state.identities.get(identityId)) return failure("Identity not found", 404);
+  let rows = state.identityMemory.filter((m) => m.identityId === identityId).reverse();
+  const limitParam = new URL(request.url).searchParams.get("limit");
+  if (limitParam) rows = rows.slice(0, Math.max(1, parseInt(limitParam, 10) || 0));
+  return success({ memories: rows.map(memoryDto) });
+}
 async function handleIdentitiesRequest(request, subPath) {
   const method = request.method;
   if (subPath === "" || subPath === "/") {
     if (method === "GET") return handleList(request);
     if (method === "POST") return handleCreate(request);
   }
+  if (subPath === "/resolve" && method === "POST") {
+    return handleResolve(request);
+  }
   const linksMatch = subPath.match(/^\/([^/]+)\/links$/);
   if (linksMatch && method === "POST") {
     return handleAttachLink(linksMatch[1], request);
   }
+  const memoryMatch = subPath.match(/^\/([^/]+)\/memory$/);
+  if (memoryMatch) {
+    if (method === "GET") return handleListMemory(memoryMatch[1], request);
+    if (method === "POST") return handleWriteMemory(memoryMatch[1], request);
+  }
   const singleMatch = subPath.match(/^\/([^/]+)$/);
   if (singleMatch) {
     if (method === "GET") return handleGet(singleMatch[1]);

package/dist/setup.mjs

@@ -16,6 +16,7 @@ var state = globalSingleton("state", () => ({
   emailCounter: 0,
   identities: /* @__PURE__ */ new Map(),
   identityLinks: [],
+  identityMemory: [],
   allowNetwork: false
 }));
 function requireDb() {
@@ -663,16 +664,108 @@ async function handleAttachLink(identityId, request) {
   state.identityLinks.push(link);
   return success({ link });
 }
+function memoryDto(m) {
+  return {
+    id: m.id,
+    source: m.source,
+    kind: m.kind,
+    content: m.content,
+    metadata: m.metadata,
+    createdAt: m.createdAt
+  };
+}
+async function handleResolve(request) {
+  const body = await readBody(request);
+  const type = body.type;
+  if (type !== "person" && type !== "account") {
+    return failure("type must be 'person' or 'account'");
+  }
+  if (type === "account") {
+    return failure(
+      "resolveOrCreate is for channel-linked persons; an account is not resolvable by link \u2014 create it explicitly instead.",
+      409
+    );
+  }
+  const link = body.link;
+  const kind = link?.kind;
+  const externalId = link?.externalId;
+  if (typeof kind !== "string" || !LINK_KINDS.has(kind)) {
+    return failure(`link.kind must be one of: ${[...LINK_KINDS].join(", ")}`);
+  }
+  if (typeof externalId !== "string" || !externalId) {
+    return failure("link.externalId is required");
+  }
+  const existingLink = state.identityLinks.find(
+    (l) => l.kind === kind && l.externalId === externalId
+  );
+  if (existingLink) {
+    const identity2 = state.identities.get(existingLink.identityId);
+    if (identity2) return success({ identity: identity2, created: false });
+  }
+  const identity = {
+    id: crypto3.randomUUID(),
+    type,
+    parentId: null,
+    displayName: body.displayName ?? null,
+    profile: body.profile ?? {},
+    status: "active",
+    mergedIntoId: null,
+    externalRef: null,
+    createdAt: now(),
+    updatedAt: now()
+  };
+  state.identities.set(identity.id, identity);
+  state.identityLinks.push({
+    id: crypto3.randomUUID(),
+    identityId: identity.id,
+    kind,
+    externalId,
+    verified: true,
+    createdAt: now()
+  });
+  return success({ identity, created: true });
+}
+async function handleWriteMemory(identityId, request) {
+  if (!state.identities.get(identityId)) return failure("Identity not found", 404);
+  const body = await readBody(request);
+  if (typeof body.content !== "string" || !body.content) return failure("content is required");
+  const entry = {
+    id: crypto3.randomUUID(),
+    identityId,
+    source: typeof body.source === "string" ? body.source : "app",
+    kind: typeof body.kind === "string" ? body.kind : "fact",
+    content: body.content,
+    metadata: body.metadata ?? {},
+    createdAt: now()
+  };
+  state.identityMemory.push(entry);
+  return success({ memory: memoryDto(entry) });
+}
+function handleListMemory(identityId, request) {
+  if (!state.identities.get(identityId)) return failure("Identity not found", 404);
+  let rows = state.identityMemory.filter((m) => m.identityId === identityId).reverse();
+  const limitParam = new URL(request.url).searchParams.get("limit");
+  if (limitParam) rows = rows.slice(0, Math.max(1, parseInt(limitParam, 10) || 0));
+  return success({ memories: rows.map(memoryDto) });
+}
 async function handleIdentitiesRequest(request, subPath) {
   const method = request.method;
   if (subPath === "" || subPath === "/") {
     if (method === "GET") return handleList(request);
     if (method === "POST") return handleCreate(request);
   }
+  if (subPath === "/resolve" && method === "POST") {
+    return handleResolve(request);
+  }
   const linksMatch = subPath.match(/^\/([^/]+)\/links$/);
   if (linksMatch && method === "POST") {
     return handleAttachLink(linksMatch[1], request);
   }
+  const memoryMatch = subPath.match(/^\/([^/]+)\/memory$/);
+  if (memoryMatch) {
+    if (method === "GET") return handleListMemory(memoryMatch[1], request);
+    if (method === "POST") return handleWriteMemory(memoryMatch[1], request);
+  }
   const singleMatch = subPath.match(/^\/([^/]+)$/);
   if (singleMatch) {
     if (method === "GET") return handleGet(singleMatch[1]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/testing",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "Vitest test harness for Stardeck customer apps — in-process Postgres (PGlite) plus a control-plane simulator so the real Stardeck SDKs run unmodified in tests",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -62,13 +62,18 @@
   "author": "Stardeck",
   "license": "MIT",
   "dependencies": {
-    "@electric-sql/pglite": "^0.3.0"
+    "@electric-sql/pglite": "^0.3.0",
+    "@stardeck-customer-apps/core": "*"
   },
   "peerDependencies": {
+    "@stardeck-customer-apps/integrations-sdk": ">=1.6.0",
     "next": "^14.0.0 || ^15.0.0 || ^16.0.0",
     "vitest": ">=2.0.0"
   },
   "peerDependenciesMeta": {
+    "@stardeck-customer-apps/integrations-sdk": {
+      "optional": true
+    },
     "next": {
       "optional": true
     }