@stardeck-customer-apps/testing 0.20.0 → 0.22.0

package/dist/setup.mjs

@@ -52,6 +52,11 @@ var state = globalSingleton("state", () => ({
   boltIntentCounter: 0,
   boltCharges: [],
   boltChargeCounter: 0,
+  directCharges: /* @__PURE__ */ new Map(),
+  directChargeCounter: 0,
+  cardTokens: /* @__PURE__ */ new Map(),
+  cardTokenCounter: 0,
+  cardTokenizationEnabled: true,
   uploads: [],
   uploadCounter: 0,
   storageFiles: /* @__PURE__ */ new Map(),
@@ -1201,6 +1206,297 @@ async function handleIdentitiesRequest(request, subPath) {
   return failure(`No identities simulator for ${method} .../identities${subPath}`, 404);
 }
 
+// src/simulator/beam-direct-charges.ts
+var SIM_BEAM_HOST = "beam.stardeck.test";
+var SIM_BEAM_MERCHANT_ID = "sim_merchant";
+var SIM_BEAM_PUBLISHABLE_KEY = "pk_test_sim";
+var DIRECT_CHARGE_METHODS = /* @__PURE__ */ new Set([
+  "CARD",
+  "CARD_INSTALLMENTS",
+  "CARD_TOKEN",
+  "CARD_TOKEN_INSTALLMENTS",
+  "QR_PROMPT_PAY",
+  "ALIPAY",
+  "ALIPAY_PLUS",
+  "WECHAT_PAY",
+  "TRUE_MONEY",
+  "LINE_PAY",
+  "SHOPEE_PAY",
+  "KPLUS",
+  "MAKE",
+  "SCB_EASY",
+  "KRUNGSRI_APP",
+  "BANGKOK_BANK_APP",
+  "SPAY_LATER"
+]);
+var TEST_CARDS = {
+  "4111111111111111": { outcome: "SUCCEEDED" },
+  "5372074248113841": { outcome: "SUCCEEDED" },
+  "378282246310005": { outcome: "SUCCEEDED" },
+  "4953261730509988": { outcome: "REDIRECT" },
+  "4389783280144506": { outcome: "REDIRECT" },
+  "4943129900084541": { outcome: "FAILED", failureCode: "CH_INSUFFICIENT_FUNDS" },
+  "4111111111000025": { outcome: "FAILED", failureCode: "CH_CARD_DECLINED" },
+  "4111111111000033": { outcome: "FAILED", failureCode: "CH_CARD_RESTRICTED" }
+};
+var SIM_QR_PNG = "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNkYPhfDwAChwGA60e6kgAAAABJRU5ErkJggg==";
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function invalid(issues) {
+  return json({ error: "Invalid request body", details: issues }, 400);
+}
+var DEVICE_TYPES = /* @__PURE__ */ new Set(["ANDROID", "IOS", "WEB"]);
+function issue(path, message, code = "custom") {
+  return { path, message, code };
+}
+function validateChargeFields(body) {
+  const issues = [];
+  const isInt = (v) => typeof v === "number" && Number.isInteger(v);
+  if (!isInt(body.amount) || body.amount < 1) {
+    issues.push(issue(["amount"], "Number must be greater than 0", "too_small"));
+  }
+  if (typeof body.deploymentId !== "string" || !UUID_RE.test(body.deploymentId)) {
+    issues.push(issue(["deploymentId"], "Invalid deployment ID", "invalid_string"));
+  }
+  if (body.referenceId !== void 0 && (typeof body.referenceId !== "string" || body.referenceId.length > 100)) {
+    issues.push(issue(["referenceId"], "Too long", "too_big"));
+  }
+  const expiry = body.expiryDurationInSec;
+  if (expiry !== void 0 && (!isInt(expiry) || expiry < 60 || expiry > 3600)) {
+    issues.push(issue(["expiryDurationInSec"], "Must be an integer from 60 to 3600", "too_big"));
+  }
+  if (body.returnUrl !== void 0 && (typeof body.returnUrl !== "string" || !URL.canParse(body.returnUrl))) {
+    issues.push(issue(["returnUrl"], "Invalid URL", "invalid_format"));
+  }
+  if (body.deviceType !== void 0 && !DEVICE_TYPES.has(String(body.deviceType))) {
+    issues.push(issue(["deviceType"], "Invalid enum value", "invalid_value"));
+  }
+  const key = body.idempotencyKey;
+  if (key !== void 0 && (typeof key !== "string" || key.length < 1 || key.length > 255)) {
+    issues.push(issue(["idempotencyKey"], "Must be 1 to 255 characters", "too_small"));
+  }
+  return issues;
+}
+function validateChargeMethod(body) {
+  const method = body.paymentMethod;
+  const type = method?.paymentMethodType;
+  if (typeof type !== "string" || !DIRECT_CHARGE_METHODS.has(type)) {
+    return [issue(["paymentMethod", "paymentMethodType"], "Invalid enum value", "invalid_value")];
+  }
+  const issues = [];
+  const isToken = type === "CARD_TOKEN" || type === "CARD_TOKEN_INSTALLMENTS";
+  const token = method?.cardToken;
+  if (isToken && (typeof token?.cardTokenId !== "string" || token.cardTokenId === "")) {
+    issues.push(
+      issue(["paymentMethod", "cardToken"], `${type} requires paymentMethod.cardToken.cardTokenId`)
+    );
+  }
+  if (token?.securityCode !== void 0 && !/^\d{3,4}$/.test(String(token.securityCode))) {
+    issues.push(
+      issue(
+        ["paymentMethod", "cardToken", "securityCode"],
+        "Invalid security code",
+        "invalid_format"
+      )
+    );
+  }
+  if (type === "CARD_TOKEN_INSTALLMENTS" && ![3, 4, 6, 10].includes(method?.installmentPeriod)) {
+    issues.push(
+      issue(
+        ["paymentMethod", "installmentPeriod"],
+        "CARD_TOKEN_INSTALLMENTS requires paymentMethod.installmentPeriod (3, 4, 6 or 10)"
+      )
+    );
+  }
+  if (type !== "QR_PROMPT_PAY" && !body.returnUrl) {
+    issues.push(
+      issue(
+        ["returnUrl"],
+        `${type} sends the shopper away to pay; returnUrl is required to bring them back`
+      )
+    );
+  }
+  if (type === "CARD" || type === "CARD_INSTALLMENTS") {
+    issues.push(
+      issue(
+        ["paymentMethod", "paymentMethodType"],
+        `${type} takes raw card data; tokenize the card in the browser and charge CARD_TOKEN instead`
+      )
+    );
+  }
+  return issues;
+}
+function validateDirectCharge(body) {
+  return [...validateChargeFields(body), ...validateChargeMethod(body)];
+}
+function chargeResponse(charge) {
+  const response = {
+    chargeId: charge.id,
+    actionRequired: charge.actionRequired,
+    paymentMethodType: charge.paymentMethodType
+  };
+  if (charge.actionRequired === "ENCODED_IMAGE") {
+    response.encodedImage = {
+      imageBase64Encoded: SIM_QR_PNG,
+      rawData: `00020101021230SIM${charge.id}`,
+      expiry: charge.expiresAt
+    };
+  }
+  if (charge.actionRequired === "REDIRECT") {
+    response.redirect = { redirectUrl: charge.redirectUrl };
+    response.redirectUrl = charge.redirectUrl;
+  }
+  return response;
+}
+function nextChargeId() {
+  state.directChargeCounter += 1;
+  return `ch_sim_${state.directChargeCounter}`;
+}
+function createCharge(body) {
+  const method = body.paymentMethod;
+  const type = method.paymentMethodType;
+  const id = nextChargeId();
+  const now3 = /* @__PURE__ */ new Date();
+  const expirySec = typeof body.expiryDurationInSec === "number" ? body.expiryDurationInSec : 30 * 60;
+  const returnUrl = typeof body.returnUrl === "string" ? body.returnUrl : null;
+  let actionRequired = "REDIRECT";
+  let status = "PENDING";
+  let failureCode = null;
+  let cardLast4 = null;
+  if (type === "QR_PROMPT_PAY") {
+    actionRequired = "ENCODED_IMAGE";
+  } else if (type === "CARD_TOKEN" || type === "CARD_TOKEN_INSTALLMENTS") {
+    const token = state.cardTokens.get(method.cardToken.cardTokenId);
+    if (!token) {
+      return json({ error: "Card token not found", code: "CARD_TOKEN_NOT_FOUND" }, 404);
+    }
+    cardLast4 = token.last4;
+    const card = TEST_CARDS[token.pan] ?? {
+      outcome: "FAILED",
+      failureCode: "CH_PROCESSING_FAILED"
+    };
+    if (card.outcome === "REDIRECT") {
+      actionRequired = "REDIRECT";
+    } else {
+      actionRequired = "NONE";
+      status = card.outcome;
+      failureCode = card.failureCode ?? null;
+    }
+  }
+  const charge = {
+    id,
+    status,
+    amount: body.amount,
+    currency: String(body.currency ?? "THB"),
+    paymentMethodType: type,
+    referenceId: typeof body.referenceId === "string" ? body.referenceId : null,
+    deviceType: typeof body.deviceType === "string" ? body.deviceType : null,
+    returnUrl,
+    actionRequired,
+    redirectUrl: actionRequired === "REDIRECT" ? `https://${SIM_BEAM_HOST}/pay/${id}${returnUrl ? `?returnUrl=${encodeURIComponent(returnUrl)}` : ""}` : null,
+    expiresAt: new Date(now3.getTime() + expirySec * 1e3).toISOString(),
+    failureCode,
+    cardLast4,
+    idempotencyKey: typeof body.idempotencyKey === "string" ? body.idempotencyKey : null,
+    createdAt: now3.toISOString()
+  };
+  state.directCharges.set(id, charge);
+  return charge;
+}
+async function handleDirectChargeRequest(request, pathname) {
+  if (request.method === "POST" && /^\/api\/store\/beam\/[^/]+\/charges$/.test(pathname)) {
+    const body = await readJsonBody(request);
+    const issues = validateDirectCharge(body);
+    if (issues.length > 0) return invalid(issues);
+    const key = typeof body.idempotencyKey === "string" ? body.idempotencyKey : null;
+    if (key) {
+      const existing = [...state.directCharges.values()].find((c) => c.idempotencyKey === key);
+      if (existing) return json(chargeResponse(existing));
+    }
+    const created = createCharge(body);
+    if (created instanceof Response) return created;
+    return json(chargeResponse(created));
+  }
+  const getMatch = pathname.match(/^\/api\/store\/beam\/[^/]+\/charges\/([^/]+)$/);
+  if (request.method === "GET" && getMatch) {
+    const charge = state.directCharges.get(decodeURIComponent(getMatch[1]));
+    if (!charge) return json({ error: "Charge not found", code: "NOT_FOUND" }, 404);
+    return json({ charge: toChargeDetail(charge) });
+  }
+  if (request.method === "GET" && /^\/api\/store\/beam\/[^/]+\/card-tokenization$/.test(pathname)) {
+    if (!state.cardTokenizationEnabled) {
+      return json(
+        {
+          error: "Add the Beam publishable key to this merchant account to take cards in your own checkout",
+          code: "CARD_TOKENIZATION_NOT_CONFIGURED"
+        },
+        409
+      );
+    }
+    return json({
+      merchantId: SIM_BEAM_MERCHANT_ID,
+      publishableKey: SIM_BEAM_PUBLISHABLE_KEY,
+      tokenizeUrl: `https://${SIM_BEAM_HOST}/client/v1/card-tokens`,
+      isSandbox: true
+    });
+  }
+  return null;
+}
+function toChargeDetail(charge) {
+  return {
+    id: charge.id,
+    chargeId: charge.id,
+    status: charge.status,
+    amount: charge.amount,
+    currency: charge.currency,
+    paymentMethodType: charge.paymentMethodType,
+    ...charge.referenceId !== null ? { referenceId: charge.referenceId } : {},
+    ...charge.failureCode ? { failureCode: charge.failureCode } : {},
+    source: "API",
+    createdAt: charge.createdAt
+  };
+}
+async function handleCardTokenRequest(request, url) {
+  if (request.method !== "POST" || url.pathname !== "/client/v1/card-tokens") {
+    return json({ error: `No Beam simulator for ${request.method} ${url.pathname}` }, 404);
+  }
+  const expected = `Basic ${btoa(`${SIM_BEAM_MERCHANT_ID}:${SIM_BEAM_PUBLISHABLE_KEY}`)}`;
+  if (request.headers.get("Authorization") !== expected) {
+    return json(
+      {
+        message: "invalid credentials",
+        error: { errorCode: "INVALID_CREDENTIALS_ERROR", errorMessage: "invalid credentials" }
+      },
+      401
+    );
+  }
+  const body = await readJsonBody(request);
+  const pan = typeof body.pan === "string" ? body.pan : "";
+  const month = body.expiryMonth;
+  const year = body.expiryYear;
+  if (!/^\d{12,19}$/.test(pan) || typeof month !== "number" || month < 1 || month > 12 || typeof year !== "number" || year < 0 || year > 99) {
+    return json(
+      {
+        message: "inputs are failing validation",
+        error: {
+          errorCode: "API_VALIDATION_ERROR",
+          errorMessage: "inputs are failing validation"
+        }
+      },
+      400
+    );
+  }
+  state.cardTokenCounter += 1;
+  const token = {
+    id: `ctok_sim_${state.cardTokenCounter}`,
+    pan,
+    last4: pan.slice(-4),
+    expiryMonth: month,
+    expiryYear: year
+  };
+  state.cardTokens.set(token.id, token);
+  return json({ id: token.id });
+}
+
 // src/simulator/payments.ts
 import crypto5 from "crypto";
 
@@ -1228,7 +1524,7 @@ var BEAM_BOLT_PAYMENT_METHODS = [
   "SPAY_LATER"
 ];
 var BEAM_BOLT_INTENT_STATUSES = ["PENDING", "PAID", "FAILED", "CANCELED", "EXPIRED"];
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function payErr(error, status = 400, code, details) {
   const body = { error };
   if (code) body.code = code;
@@ -1242,6 +1538,12 @@ function paymentOperationForRequest(request, pathname) {
   if (request.method === "GET" && /^\/api\/store\/beam\/[^/]+\/payment-links\/[^/]+$/.test(pathname)) {
     return "beam.getPaymentLinkStatus";
   }
+  if (request.method === "POST" && /^\/api\/store\/beam\/[^/]+\/charges$/.test(pathname)) {
+    return "beam.createDirectCharge";
+  }
+  if (request.method === "GET" && /^\/api\/store\/beam\/[^/]+\/charges\/[^/]+$/.test(pathname)) {
+    return "beam.getCharge";
+  }
   if (request.method === "POST" && /^\/api\/store\/(?!beam\/)[^/]+\/checkout$/.test(pathname)) {
     return "stripe.createCheckout";
   }
@@ -1382,6 +1684,8 @@ async function handlePaymentsRequest(request, url) {
   const pathname = url.pathname;
   const injectedFailure = consumePaymentFailure(request, pathname);
   if (injectedFailure) return injectedFailure;
+  const directChargeResponse = await handleDirectChargeRequest(request, pathname);
+  if (directChargeResponse) return directChargeResponse;
   if (/\/billing-portal$/.test(pathname)) {
     return payErr("Not found", 404, "NOT_FOUND");
   }
@@ -1478,7 +1782,7 @@ async function handlePaymentsRequest(request, url) {
           code: "too_small"
         });
       }
-      if (typeof body.deploymentId !== "string" || !UUID_RE.test(body.deploymentId)) {
+      if (typeof body.deploymentId !== "string" || !UUID_RE2.test(body.deploymentId)) {
         issues.push({
           path: ["deploymentId"],
           message: "Invalid uuid",
@@ -2223,6 +2527,7 @@ async function handleEdgeRequest(request, subPath) {
 }
 
 // src/simulator/starlens.ts
+var LATEST_VERSION = "v2";
 function starlensFailure(error, status, code) {
   return json({ success: false, error, code }, status);
 }
@@ -2241,11 +2546,18 @@ function nullFlagged(output, issues) {
   }
   return copy;
 }
-async function handleStarlensExtract(request, signedDeploymentId) {
-  const body = await readJsonBody(request);
-  if (signedDeploymentId !== null && body.deploymentId !== signedDeploymentId) {
-    return starlensFailure("Deployment ID mismatch", 401, "AUTHENTICATION_ERROR");
-  }
+function isInputShape(input) {
+  if (!input || typeof input !== "object") return false;
+  const i = input;
+  return typeof i.url === "string" || typeof i.data === "string" && i.data.length > 0 && typeof i.mediaType === "string";
+}
+var NON_IMAGE_EXTENSION = /\.(pdf|mp3|m4a|wav|ogg|aac|flac|mp4|mov|webm|mkv)(\?|#|$)/i;
+function isCroppable(input) {
+  if (typeof input.mediaType === "string") return input.mediaType.startsWith("image/");
+  const name = typeof input.filename === "string" ? input.filename : input.url;
+  return !(typeof name === "string" && NON_IMAGE_EXTENSION.test(name));
+}
+function validateStarlensBody(body) {
   const inputs = Array.isArray(body.inputs) ? body.inputs : [];
   if (inputs.length === 0) {
     return starlensFailure(
@@ -2254,6 +2566,13 @@ async function handleStarlensExtract(request, signedDeploymentId) {
       "VALIDATION_ERROR"
     );
   }
+  if (!inputs.every(isInputShape)) {
+    return starlensFailure(
+      "Validation failed \u2014 inputs: each input needs a url, or data with a mediaType",
+      400,
+      "VALIDATION_ERROR"
+    );
+  }
   const schema = body.schema;
   if (!schema || schema.type !== "object" || typeof schema.properties !== "object") {
     return starlensFailure(
@@ -2262,8 +2581,35 @@ async function handleStarlensExtract(request, signedDeploymentId) {
       "VALIDATION_ERROR"
     );
   }
+  const version = body.version ?? "latest";
+  if (version !== "v1" && version !== "v2" && version !== "latest") {
+    return starlensFailure("Validation failed \u2014 version: unknown version", 400, "VALIDATION_ERROR");
+  }
+  const effort = body.effort ?? "low";
+  if (effort !== "low" && effort !== "high") {
+    return starlensFailure("Validation failed \u2014 effort: low or high", 400, "VALIDATION_ERROR");
+  }
+  const resolved = version === "latest" ? LATEST_VERSION : version;
+  if (effort === "high" && resolved === "v1") {
+    return starlensFailure(
+      `Starlens v1 does not support effort "high"; use version "v2"`,
+      400,
+      "unsupported_effort"
+    );
+  }
+  return { version, resolved, effort, inputs, schema };
+}
+async function handleStarlensExtract(request, signedDeploymentId) {
+  const body = await readJsonBody(request);
+  const valid = validateStarlensBody(body);
+  if (valid instanceof Response) return valid;
+  const { version, resolved, effort, inputs, schema } = valid;
+  if (signedDeploymentId !== null && body.deploymentId !== signedDeploymentId) {
+    return starlensFailure("Deployment ID mismatch", 401, "AUTHENTICATION_ERROR");
+  }
   const call = {
-    version: typeof body.version === "string" ? body.version : "latest",
+    version,
+    effort,
     inputs: inputs.map((i) => ({
       name: typeof i.filename === "string" ? i.filename : typeof i.url === "string" ? i.url : "upload",
       mediaType: typeof i.mediaType === "string" ? i.mediaType : null,
@@ -2285,8 +2631,10 @@ async function handleStarlensExtract(request, signedDeploymentId) {
     return starlensFailure(reply.reject, 422, "unsupported_document");
   }
   const issues = reply.issues ?? [];
+  const ran = reply.effort ?? (effort === "high" && !inputs.some(isCroppable) ? "low" : effort);
   return success({
-    version: call.version === "latest" ? "v1" : call.version,
+    version: resolved,
+    effort: ran,
     output: nullFlagged(reply.output, issues),
     issues,
     usage: { inputTokens: 0, outputTokens: 0, cost: 0 }
@@ -2362,6 +2710,9 @@ async function handleSimulatedRequest(request, url) {
   if (isStorageHost) {
     return handleStorageRequest(request, url);
   }
+  if (url.hostname === SIM_BEAM_HOST) {
+    return handleCardTokenRequest(request, url);
+  }
   if (isEmail && request.method === "POST") {
     return handleEmailSend(request);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/testing",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "description": "Vitest test harness for Stardeck customer apps — in-process Postgres (PGlite) plus a control-plane simulator so the real Stardeck SDKs run unmodified in tests",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -48,7 +48,7 @@
     "build": "tsup src/index.ts src/config.ts src/setup.ts src/next/headers-shim.ts src/server-only-shim.ts --format cjs,esm --dts --no-splitting",
     "dev": "tsup src/index.ts src/config.ts src/setup.ts src/next/headers-shim.ts src/server-only-shim.ts --format cjs,esm --dts --no-splitting --watch",
     "format": "prettier --write . && oxlint . --fix",
-    "typecheck": "tsc --noEmit && tsc -p tsconfig.test.json",
+    "typecheck": "tsgo --noEmit && tsgo -p tsconfig.test.json",
     "lint": "oxlint src/",
     "test": "vitest run",
     "test:watch": "vitest"