@stardeck-customer-apps/testing 0.23.0 → 0.25.0

package/SKILL.md

@@ -208,6 +208,14 @@ app.payments.failNext("stripe.getCheckoutSessionStatus", {
   message: "connection reset",
 });
 
+// Stripe createCheckout idempotency + expiry (payments-sdk >= 4.11.0) is simulated like the
+// platform: same idempotencyKey + same payload replays the same session (one captured
+// checkout); same key + different payload -> PaymentError "idempotency_conflict" (409); keys
+// are scoped per account; expiresAt (unix seconds) must be 30 min - 24 h out or
+// "expiry_out_of_range" (400); the default is 24 h and session.expiresAt is returned.
+// Beam payment links reject idempotencyKey ("idempotency_unsupported") and echo expiresAt.
+// The simulator does not model Stripe's 24 h key retention.
+
 // File upload
 const storage = new StorageClient();
 await storage.upload(new File(["hi"], "note.txt", { type: "text/plain" }));
@@ -557,7 +565,10 @@ cursor, limit })`; `list()` intentionally keeps its previous array shape.
   in `app.storage` against the simulated `STORAGE_URL` host.
 - `client.slack` / `client.line` / `client.facebook` send endpoints — captured
   in `app.messages`.
-- `createEdgeClient()` (print, pair/unpair, list devices/peripherals, show/clear
+- `createEdgeClient()` (print, `enqueueReceipt()`/`getPrintJob()` durable receipts: idempotent per key,
+  conflicts and refused options mirrored, `app.edge.durablePrints`, and
+  `app.edge.settleNextDurableJob({ status: "needs_attention", reason, outcome })` to drive the
+  uncertain/not-printed UI; pair/unpair, list devices/peripherals, show/clear
   display, test print, `getCapabilities()`) — captured in `app.edge`; seed
   devices/peripherals for pairing pickers via `app.edge.seedDevices()` /
   `seedPeripherals()`.

package/dist/index.d.mts

@@ -542,6 +542,27 @@ interface CapturedPrint {
     logo?: boolean;
     copies: number;
 }
+/** One `edge.enqueueReceipt()` the app made, as the simulator accepted it. */
+interface CapturedDurablePrint {
+    jobId: string;
+    idempotencyKey: string;
+    alias?: string;
+    deviceId?: string;
+    peripheralId?: string;
+    receipt: ReceiptPayload;
+    logo?: boolean;
+}
+/** How a simulated durable job settles. Mirrors the platform's status contract. */
+type SimulatedDurableOutcome = {
+    status: "sent_to_printer";
+} | {
+    status: "queued";
+} | {
+    status: "needs_attention";
+    reason: string;
+    outcome: "not_printed" | "uncertain";
+    message?: string;
+};
 interface CapturedDisplay {
     action: "show" | "clear";
     alias?: string;
@@ -557,6 +578,15 @@ interface TestEdge {
     get prints(): CapturedPrint[];
     get displays(): CapturedDisplay[];
     get testPrints(): CapturedTestPrint[];
+    /** Durable receipts accepted by `edge.enqueueReceipt()` (one per distinct idempotency key). */
+    get durablePrints(): CapturedDurablePrint[];
+    /**
+     * Decide how the NEXT accepted durable job settles when the app reads it with
+     * `edge.getPrintJob()`. Without this every job reads `sent_to_printer`. Queue
+     * several to model a run of jobs; use `needs_attention` with `uncertain` to
+     * test the "check the printer before reprinting" path.
+     */
+    settleNextDurableJob(outcome: SimulatedDurableOutcome): void;
     latestPrint(): CapturedPrint | undefined;
     latestDisplay(): CapturedDisplay | undefined;
     get bindings(): BindingInfo[];
@@ -742,4 +772,4 @@ declare const TEST_ENV_DEFAULTS: {
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedStarlensCall, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PaymentSimulatorFailure, type PaymentSimulatorOperation, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, type StarlensReply, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStarlens, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedDurablePrint, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedStarlensCall, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PaymentSimulatorFailure, type PaymentSimulatorOperation, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, type SimulatedDurableOutcome, type StarlensReply, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStarlens, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.d.ts

@@ -542,6 +542,27 @@ interface CapturedPrint {
     logo?: boolean;
     copies: number;
 }
+/** One `edge.enqueueReceipt()` the app made, as the simulator accepted it. */
+interface CapturedDurablePrint {
+    jobId: string;
+    idempotencyKey: string;
+    alias?: string;
+    deviceId?: string;
+    peripheralId?: string;
+    receipt: ReceiptPayload;
+    logo?: boolean;
+}
+/** How a simulated durable job settles. Mirrors the platform's status contract. */
+type SimulatedDurableOutcome = {
+    status: "sent_to_printer";
+} | {
+    status: "queued";
+} | {
+    status: "needs_attention";
+    reason: string;
+    outcome: "not_printed" | "uncertain";
+    message?: string;
+};
 interface CapturedDisplay {
     action: "show" | "clear";
     alias?: string;
@@ -557,6 +578,15 @@ interface TestEdge {
     get prints(): CapturedPrint[];
     get displays(): CapturedDisplay[];
     get testPrints(): CapturedTestPrint[];
+    /** Durable receipts accepted by `edge.enqueueReceipt()` (one per distinct idempotency key). */
+    get durablePrints(): CapturedDurablePrint[];
+    /**
+     * Decide how the NEXT accepted durable job settles when the app reads it with
+     * `edge.getPrintJob()`. Without this every job reads `sent_to_printer`. Queue
+     * several to model a run of jobs; use `needs_attention` with `uncertain` to
+     * test the "check the printer before reprinting" path.
+     */
+    settleNextDurableJob(outcome: SimulatedDurableOutcome): void;
     latestPrint(): CapturedPrint | undefined;
     latestDisplay(): CapturedDisplay | undefined;
     get bindings(): BindingInfo[];
@@ -742,4 +772,4 @@ declare const TEST_ENV_DEFAULTS: {
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedStarlensCall, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PaymentSimulatorFailure, type PaymentSimulatorOperation, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, type StarlensReply, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStarlens, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedDurablePrint, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedStarlensCall, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PaymentSimulatorFailure, type PaymentSimulatorOperation, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, type SimulatedDurableOutcome, type StarlensReply, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStarlens, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.js

@@ -340,6 +340,7 @@ var state = globalSingleton("state", () => ({
   checkouts: [],
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
+  idempotentCheckouts: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   paymentFailures: [],
   products: [],
@@ -364,6 +365,8 @@ var state = globalSingleton("state", () => ({
   edgeDisplays: [],
   edgeTestPrints: [],
   edgePrintCounter: 0,
+  edgeDurableJobs: /* @__PURE__ */ new Map(),
+  edgeDurableOutcomes: [],
   edgeDevices: [],
   edgePeripherals: [],
   edgeBindings: /* @__PURE__ */ new Map(),
@@ -2131,6 +2134,8 @@ function signEventDelivery(secret, context, rawBody) {
 }
 
 // src/simulator/payments.ts
+var STRIPE_MIN_EXPIRY_SECONDS = 30 * 60;
+var STRIPE_MAX_EXPIRY_SECONDS = 24 * 60 * 60;
 var BEAM_BOLT_PAYMENT_METHODS = [
   "CARD",
   "CARD_INSTALLMENTS",
@@ -2200,6 +2205,15 @@ function isBoltPaymentMethod(value) {
 function isBoltIntentStatus(value) {
   return BEAM_BOLT_INTENT_STATUSES.includes(value);
 }
+function stableStringify(value) {
+  if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
+  if (value && typeof value === "object") {
+    const entries = Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+var ISO_8601_WITH_ZONE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/;
 function nextCheckoutId() {
   state.checkoutCounter += 1;
   return `cs_test_${state.checkoutCounter}`;
@@ -2220,7 +2234,7 @@ function nextBoltChargeId() {
   state.boltChargeCounter += 1;
   return `chrg_${state.boltChargeCounter}`;
 }
-function seedStripeSession(id, body) {
+function seedStripeSession(id, body, expiresAt) {
   const lineItems = body.lineItems ?? [];
   let amountTotal = null;
   let currency = null;
@@ -2240,7 +2254,7 @@ function seedStripeSession(id, body) {
     currency,
     customerEmail: body.customerEmail ? String(body.customerEmail) : null,
     metadata: body.metadata ?? {},
-    expiresAt: Math.floor(Date.now() / 1e3) + 3600
+    expiresAt
   });
 }
 function seedBeamLink(id, body, merchantId) {
@@ -2260,7 +2274,8 @@ function seedBeamLink(id, body, merchantId) {
     },
     redirectUrl: body.redirectUrl ? String(body.redirectUrl) : void 0,
     linkSettings: body.linkSettings,
-    collectDeliveryAddress: body.collectDeliveryAddress === true
+    collectDeliveryAddress: body.collectDeliveryAddress === true,
+    ...typeof body.expiresAt === "string" ? { expiresAt: body.expiresAt } : {}
   });
 }
 function deriveBoltIntentStatus(storedStatus, expiresAt, now3 = /* @__PURE__ */ new Date()) {
@@ -2562,6 +2577,16 @@ async function handlePaymentsRequest(request, url) {
     const linkId = beamProductsMatch[2];
     if (!linkId && request.method === "POST") {
       const body = await readJsonBody(request);
+      if ("idempotencyKey" in body) {
+        return payErr(
+          "idempotencyKey is not supported for Beam payment links.",
+          400,
+          "idempotency_unsupported"
+        );
+      }
+      if (typeof body.expiresAt === "string" && (!ISO_8601_WITH_ZONE.test(body.expiresAt) || Number.isNaN(Date.parse(body.expiresAt)))) {
+        return payErr("expiresAt must be an ISO 8601 timestamp", 400);
+      }
       const id = nextPaymentLinkId();
       const checkoutUrl = `https://beam.test/pay/${id}`;
       const captured = {
@@ -2574,7 +2599,11 @@ async function handlePaymentsRequest(request, url) {
       };
       state.checkouts.push(captured);
       seedBeamLink(id, body, merchantId);
-      return json({ id, url: checkoutUrl });
+      return json({
+        id,
+        url: checkoutUrl,
+        ...typeof body.expiresAt === "string" ? { expiresAt: body.expiresAt } : {}
+      });
     }
     if (linkId && request.method === "GET") {
       const link = state.paymentLinks.get(linkId);
@@ -2600,6 +2629,34 @@ async function handlePaymentsRequest(request, url) {
     }
     if (subPath === "checkout" && request.method === "POST") {
       const body = await readJsonBody(request);
+      const nowSeconds = Math.floor(Date.now() / 1e3);
+      const requestedExpiry = typeof body.expiresAt === "number" ? body.expiresAt : void 0;
+      const callerKey = typeof body.idempotencyKey === "string" ? body.idempotencyKey : void 0;
+      const scopedKey = callerKey ? JSON.stringify(["stripe", accountId, callerKey]) : void 0;
+      const comparable = { ...body };
+      delete comparable.deploymentId;
+      delete comparable.idempotencyKey;
+      const fingerprint = stableStringify(comparable);
+      if (scopedKey) {
+        const saved = state.idempotentCheckouts.get(scopedKey);
+        if (saved) {
+          if (saved.fingerprint !== fingerprint) {
+            return payErr(
+              "This idempotency key was already used with different checkout parameters. Use a new key for a different checkout.",
+              409,
+              "idempotency_conflict"
+            );
+          }
+          return json(saved.response);
+        }
+      }
+      if (requestedExpiry !== void 0 && (requestedExpiry < nowSeconds + STRIPE_MIN_EXPIRY_SECONDS || requestedExpiry > nowSeconds + STRIPE_MAX_EXPIRY_SECONDS)) {
+        return payErr(
+          "expiresAt must be between 30 minutes and 24 hours after the checkout is created (Unix seconds).",
+          400,
+          "expiry_out_of_range"
+        );
+      }
       const id = nextCheckoutId();
       const checkoutUrl = `https://checkout.stripe.test/c/pay/${id}`;
       const captured = {
@@ -2612,8 +2669,11 @@ async function handlePaymentsRequest(request, url) {
         createdAt: /* @__PURE__ */ new Date()
       };
       state.checkouts.push(captured);
-      seedStripeSession(id, body);
-      return json({ id, url: checkoutUrl });
+      const expiresAt = requestedExpiry ?? nowSeconds + STRIPE_MAX_EXPIRY_SECONDS;
+      seedStripeSession(id, body, expiresAt);
+      const response = { id, url: checkoutUrl, expiresAt };
+      if (scopedKey) state.idempotentCheckouts.set(scopedKey, { fingerprint, response });
+      return json(response);
     }
     const sessionMatch = subPath.match(/^checkout-sessions\/([^/]+)$/);
     if (sessionMatch && request.method === "GET") {
@@ -2778,6 +2838,7 @@ function createPayments() {
       state.checkouts = [];
       state.checkoutCounter = 0;
       state.sessionStatuses.clear();
+      state.idempotentCheckouts.clear();
       state.paymentLinks.clear();
       state.paymentFailures = [];
       state.products = [];
@@ -3323,6 +3384,93 @@ async function handlePrint(request) {
     status: "completed"
   });
 }
+var IDEMPOTENCY_KEY = /^[A-Za-z0-9_.:-]{1,128}$/;
+async function handleEnqueue(request) {
+  const body = await readJsonBody(request);
+  const key = typeof body.idempotencyKey === "string" ? body.idempotencyKey : "";
+  if (!IDEMPOTENCY_KEY.test(key)) {
+    return edgeFailure("idempotencyKey must be 1-128 characters of A-Z a-z 0-9 _ . : -");
+  }
+  if (body.openDrawer === true) {
+    return edgeFailure("Durable receipts cannot open the cash drawer; a retry would kick it again");
+  }
+  if (body.copies !== void 0 && body.copies !== 1) {
+    return edgeFailure(
+      "Durable receipts print exactly one copy; submit a second job for another copy"
+    );
+  }
+  const receipt = body.receipt ?? {};
+  if (receipt.rawEscPos !== void 0) {
+    return edgeFailure("rawEscPos is not supported for durable receipts");
+  }
+  const requestHash = JSON.stringify([
+    body.alias,
+    body.deviceId,
+    body.peripheralId,
+    receipt,
+    body.logo
+  ]);
+  const existing = [...state.edgeDurableJobs.values()].find(
+    (j) => j.captured.idempotencyKey === key
+  );
+  if (existing) {
+    if (existing.requestHash !== requestHash) {
+      return edgeFailure(
+        "This idempotencyKey was already used for a different receipt, target or options.",
+        409,
+        "IDEMPOTENCY_KEY_CONFLICT"
+      );
+    }
+    return json({ success: true, data: durableView(existing.captured.jobId, "queued") }, 200);
+  }
+  const jobId = nextJobId();
+  const captured = {
+    jobId,
+    idempotencyKey: key,
+    alias: body.alias ? String(body.alias) : void 0,
+    deviceId: body.deviceId ? String(body.deviceId) : void 0,
+    peripheralId: body.peripheralId ? String(body.peripheralId) : void 0,
+    receipt,
+    logo: body.logo === true ? true : body.logo === false ? false : void 0
+  };
+  const outcome = state.edgeDurableOutcomes.shift() ?? { status: "sent_to_printer" };
+  state.edgeDurableJobs.set(jobId, { requestHash, captured, outcome });
+  return json({ success: true, data: durableView(jobId, "queued") }, 202);
+}
+function durableView(jobId, as) {
+  const job = state.edgeDurableJobs.get(jobId);
+  const createdAt = now2();
+  const base = {
+    jobId,
+    attempts: as === "queued" ? 0 : 1,
+    createdAt,
+    expiresAt: new Date(Date.parse(createdAt) + 10 * 6e4).toISOString(),
+    target: {
+      deviceId: job.captured.deviceId ?? "sim-device",
+      peripheralId: job.captured.peripheralId ?? "sim-peripheral"
+    }
+  };
+  const outcome = as === "queued" ? { status: "queued" } : job.outcome;
+  if (outcome.status === "needs_attention") {
+    return {
+      ...base,
+      status: "needs_attention",
+      attention: {
+        reason: outcome.reason,
+        outcome: outcome.outcome,
+        message: outcome.message ?? "Delivery stopped."
+      }
+    };
+  }
+  if (outcome.status === "sent_to_printer") {
+    return { ...base, status: "sent_to_printer", sentToPrinterAt: createdAt };
+  }
+  return { ...base, status: "queued" };
+}
+function handleGetDurable(jobId) {
+  if (!state.edgeDurableJobs.has(jobId)) return edgeFailure("Print job not found", 404);
+  return success(durableView(jobId));
+}
 async function handleShowDisplay(request) {
   const body = await readJsonBody(request);
   const captured = {
@@ -3372,6 +3520,13 @@ async function handleEdgeRequest(request, subPath) {
   if (subPath === "/print" && method === "POST") {
     return handlePrint(request);
   }
+  if (subPath === "/print-jobs" && method === "POST") {
+    return handleEnqueue(request);
+  }
+  const durableMatch = subPath.match(/^\/print-jobs\/([^/]+)$/);
+  if (durableMatch && method === "GET") {
+    return handleGetDurable(decodeURIComponent(durableMatch[1]));
+  }
   if (subPath === "/capabilities" && method === "GET") {
     return handleCapabilities(request);
   }
@@ -3415,6 +3570,12 @@ function createEdge() {
     get testPrints() {
       return [...state.edgeTestPrints];
     },
+    get durablePrints() {
+      return [...state.edgeDurableJobs.values()].map((j) => j.captured);
+    },
+    settleNextDurableJob(outcome) {
+      state.edgeDurableOutcomes.push(outcome);
+    },
     latestPrint() {
       return state.edgePrints[state.edgePrints.length - 1];
     },
@@ -3451,12 +3612,14 @@ function createEdge() {
       state.edgeDisplays = [];
       state.edgeTestPrints = [];
       state.edgePrintCounter = 0;
+      state.edgeDurableJobs.clear();
+      state.edgeDurableOutcomes = [];
       state.edgeDevices = [];
       state.edgePeripherals = [];
       state.edgeBindings.clear();
     },
     get count() {
-      return state.edgePrints.length + state.edgeDisplays.length + state.edgeTestPrints.length;
+      return state.edgePrints.length + state.edgeDisplays.length + state.edgeTestPrints.length + state.edgeDurableJobs.size;
     }
   };
 }

package/dist/index.mjs

@@ -301,6 +301,7 @@ var state = globalSingleton("state", () => ({
   checkouts: [],
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
+  idempotentCheckouts: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   paymentFailures: [],
   products: [],
@@ -325,6 +326,8 @@ var state = globalSingleton("state", () => ({
   edgeDisplays: [],
   edgeTestPrints: [],
   edgePrintCounter: 0,
+  edgeDurableJobs: /* @__PURE__ */ new Map(),
+  edgeDurableOutcomes: [],
   edgeDevices: [],
   edgePeripherals: [],
   edgeBindings: /* @__PURE__ */ new Map(),
@@ -2092,6 +2095,8 @@ function signEventDelivery(secret, context, rawBody) {
 }
 
 // src/simulator/payments.ts
+var STRIPE_MIN_EXPIRY_SECONDS = 30 * 60;
+var STRIPE_MAX_EXPIRY_SECONDS = 24 * 60 * 60;
 var BEAM_BOLT_PAYMENT_METHODS = [
   "CARD",
   "CARD_INSTALLMENTS",
@@ -2161,6 +2166,15 @@ function isBoltPaymentMethod(value) {
 function isBoltIntentStatus(value) {
   return BEAM_BOLT_INTENT_STATUSES.includes(value);
 }
+function stableStringify(value) {
+  if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
+  if (value && typeof value === "object") {
+    const entries = Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+var ISO_8601_WITH_ZONE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/;
 function nextCheckoutId() {
   state.checkoutCounter += 1;
   return `cs_test_${state.checkoutCounter}`;
@@ -2181,7 +2195,7 @@ function nextBoltChargeId() {
   state.boltChargeCounter += 1;
   return `chrg_${state.boltChargeCounter}`;
 }
-function seedStripeSession(id, body) {
+function seedStripeSession(id, body, expiresAt) {
   const lineItems = body.lineItems ?? [];
   let amountTotal = null;
   let currency = null;
@@ -2201,7 +2215,7 @@ function seedStripeSession(id, body) {
     currency,
     customerEmail: body.customerEmail ? String(body.customerEmail) : null,
     metadata: body.metadata ?? {},
-    expiresAt: Math.floor(Date.now() / 1e3) + 3600
+    expiresAt
   });
 }
 function seedBeamLink(id, body, merchantId) {
@@ -2221,7 +2235,8 @@ function seedBeamLink(id, body, merchantId) {
     },
     redirectUrl: body.redirectUrl ? String(body.redirectUrl) : void 0,
     linkSettings: body.linkSettings,
-    collectDeliveryAddress: body.collectDeliveryAddress === true
+    collectDeliveryAddress: body.collectDeliveryAddress === true,
+    ...typeof body.expiresAt === "string" ? { expiresAt: body.expiresAt } : {}
   });
 }
 function deriveBoltIntentStatus(storedStatus, expiresAt, now3 = /* @__PURE__ */ new Date()) {
@@ -2523,6 +2538,16 @@ async function handlePaymentsRequest(request, url) {
     const linkId = beamProductsMatch[2];
     if (!linkId && request.method === "POST") {
       const body = await readJsonBody(request);
+      if ("idempotencyKey" in body) {
+        return payErr(
+          "idempotencyKey is not supported for Beam payment links.",
+          400,
+          "idempotency_unsupported"
+        );
+      }
+      if (typeof body.expiresAt === "string" && (!ISO_8601_WITH_ZONE.test(body.expiresAt) || Number.isNaN(Date.parse(body.expiresAt)))) {
+        return payErr("expiresAt must be an ISO 8601 timestamp", 400);
+      }
       const id = nextPaymentLinkId();
       const checkoutUrl = `https://beam.test/pay/${id}`;
       const captured = {
@@ -2535,7 +2560,11 @@ async function handlePaymentsRequest(request, url) {
       };
       state.checkouts.push(captured);
       seedBeamLink(id, body, merchantId);
-      return json({ id, url: checkoutUrl });
+      return json({
+        id,
+        url: checkoutUrl,
+        ...typeof body.expiresAt === "string" ? { expiresAt: body.expiresAt } : {}
+      });
     }
     if (linkId && request.method === "GET") {
       const link = state.paymentLinks.get(linkId);
@@ -2561,6 +2590,34 @@ async function handlePaymentsRequest(request, url) {
     }
     if (subPath === "checkout" && request.method === "POST") {
       const body = await readJsonBody(request);
+      const nowSeconds = Math.floor(Date.now() / 1e3);
+      const requestedExpiry = typeof body.expiresAt === "number" ? body.expiresAt : void 0;
+      const callerKey = typeof body.idempotencyKey === "string" ? body.idempotencyKey : void 0;
+      const scopedKey = callerKey ? JSON.stringify(["stripe", accountId, callerKey]) : void 0;
+      const comparable = { ...body };
+      delete comparable.deploymentId;
+      delete comparable.idempotencyKey;
+      const fingerprint = stableStringify(comparable);
+      if (scopedKey) {
+        const saved = state.idempotentCheckouts.get(scopedKey);
+        if (saved) {
+          if (saved.fingerprint !== fingerprint) {
+            return payErr(
+              "This idempotency key was already used with different checkout parameters. Use a new key for a different checkout.",
+              409,
+              "idempotency_conflict"
+            );
+          }
+          return json(saved.response);
+        }
+      }
+      if (requestedExpiry !== void 0 && (requestedExpiry < nowSeconds + STRIPE_MIN_EXPIRY_SECONDS || requestedExpiry > nowSeconds + STRIPE_MAX_EXPIRY_SECONDS)) {
+        return payErr(
+          "expiresAt must be between 30 minutes and 24 hours after the checkout is created (Unix seconds).",
+          400,
+          "expiry_out_of_range"
+        );
+      }
       const id = nextCheckoutId();
       const checkoutUrl = `https://checkout.stripe.test/c/pay/${id}`;
       const captured = {
@@ -2573,8 +2630,11 @@ async function handlePaymentsRequest(request, url) {
         createdAt: /* @__PURE__ */ new Date()
       };
       state.checkouts.push(captured);
-      seedStripeSession(id, body);
-      return json({ id, url: checkoutUrl });
+      const expiresAt = requestedExpiry ?? nowSeconds + STRIPE_MAX_EXPIRY_SECONDS;
+      seedStripeSession(id, body, expiresAt);
+      const response = { id, url: checkoutUrl, expiresAt };
+      if (scopedKey) state.idempotentCheckouts.set(scopedKey, { fingerprint, response });
+      return json(response);
     }
     const sessionMatch = subPath.match(/^checkout-sessions\/([^/]+)$/);
     if (sessionMatch && request.method === "GET") {
@@ -2739,6 +2799,7 @@ function createPayments() {
       state.checkouts = [];
       state.checkoutCounter = 0;
       state.sessionStatuses.clear();
+      state.idempotentCheckouts.clear();
       state.paymentLinks.clear();
       state.paymentFailures = [];
       state.products = [];
@@ -3284,6 +3345,93 @@ async function handlePrint(request) {
     status: "completed"
   });
 }
+var IDEMPOTENCY_KEY = /^[A-Za-z0-9_.:-]{1,128}$/;
+async function handleEnqueue(request) {
+  const body = await readJsonBody(request);
+  const key = typeof body.idempotencyKey === "string" ? body.idempotencyKey : "";
+  if (!IDEMPOTENCY_KEY.test(key)) {
+    return edgeFailure("idempotencyKey must be 1-128 characters of A-Z a-z 0-9 _ . : -");
+  }
+  if (body.openDrawer === true) {
+    return edgeFailure("Durable receipts cannot open the cash drawer; a retry would kick it again");
+  }
+  if (body.copies !== void 0 && body.copies !== 1) {
+    return edgeFailure(
+      "Durable receipts print exactly one copy; submit a second job for another copy"
+    );
+  }
+  const receipt = body.receipt ?? {};
+  if (receipt.rawEscPos !== void 0) {
+    return edgeFailure("rawEscPos is not supported for durable receipts");
+  }
+  const requestHash = JSON.stringify([
+    body.alias,
+    body.deviceId,
+    body.peripheralId,
+    receipt,
+    body.logo
+  ]);
+  const existing = [...state.edgeDurableJobs.values()].find(
+    (j) => j.captured.idempotencyKey === key
+  );
+  if (existing) {
+    if (existing.requestHash !== requestHash) {
+      return edgeFailure(
+        "This idempotencyKey was already used for a different receipt, target or options.",
+        409,
+        "IDEMPOTENCY_KEY_CONFLICT"
+      );
+    }
+    return json({ success: true, data: durableView(existing.captured.jobId, "queued") }, 200);
+  }
+  const jobId = nextJobId();
+  const captured = {
+    jobId,
+    idempotencyKey: key,
+    alias: body.alias ? String(body.alias) : void 0,
+    deviceId: body.deviceId ? String(body.deviceId) : void 0,
+    peripheralId: body.peripheralId ? String(body.peripheralId) : void 0,
+    receipt,
+    logo: body.logo === true ? true : body.logo === false ? false : void 0
+  };
+  const outcome = state.edgeDurableOutcomes.shift() ?? { status: "sent_to_printer" };
+  state.edgeDurableJobs.set(jobId, { requestHash, captured, outcome });
+  return json({ success: true, data: durableView(jobId, "queued") }, 202);
+}
+function durableView(jobId, as) {
+  const job = state.edgeDurableJobs.get(jobId);
+  const createdAt = now2();
+  const base = {
+    jobId,
+    attempts: as === "queued" ? 0 : 1,
+    createdAt,
+    expiresAt: new Date(Date.parse(createdAt) + 10 * 6e4).toISOString(),
+    target: {
+      deviceId: job.captured.deviceId ?? "sim-device",
+      peripheralId: job.captured.peripheralId ?? "sim-peripheral"
+    }
+  };
+  const outcome = as === "queued" ? { status: "queued" } : job.outcome;
+  if (outcome.status === "needs_attention") {
+    return {
+      ...base,
+      status: "needs_attention",
+      attention: {
+        reason: outcome.reason,
+        outcome: outcome.outcome,
+        message: outcome.message ?? "Delivery stopped."
+      }
+    };
+  }
+  if (outcome.status === "sent_to_printer") {
+    return { ...base, status: "sent_to_printer", sentToPrinterAt: createdAt };
+  }
+  return { ...base, status: "queued" };
+}
+function handleGetDurable(jobId) {
+  if (!state.edgeDurableJobs.has(jobId)) return edgeFailure("Print job not found", 404);
+  return success(durableView(jobId));
+}
 async function handleShowDisplay(request) {
   const body = await readJsonBody(request);
   const captured = {
@@ -3333,6 +3481,13 @@ async function handleEdgeRequest(request, subPath) {
   if (subPath === "/print" && method === "POST") {
     return handlePrint(request);
   }
+  if (subPath === "/print-jobs" && method === "POST") {
+    return handleEnqueue(request);
+  }
+  const durableMatch = subPath.match(/^\/print-jobs\/([^/]+)$/);
+  if (durableMatch && method === "GET") {
+    return handleGetDurable(decodeURIComponent(durableMatch[1]));
+  }
   if (subPath === "/capabilities" && method === "GET") {
     return handleCapabilities(request);
   }
@@ -3376,6 +3531,12 @@ function createEdge() {
     get testPrints() {
       return [...state.edgeTestPrints];
     },
+    get durablePrints() {
+      return [...state.edgeDurableJobs.values()].map((j) => j.captured);
+    },
+    settleNextDurableJob(outcome) {
+      state.edgeDurableOutcomes.push(outcome);
+    },
     latestPrint() {
       return state.edgePrints[state.edgePrints.length - 1];
     },
@@ -3412,12 +3573,14 @@ function createEdge() {
       state.edgeDisplays = [];
       state.edgeTestPrints = [];
       state.edgePrintCounter = 0;
+      state.edgeDurableJobs.clear();
+      state.edgeDurableOutcomes = [];
       state.edgeDevices = [];
       state.edgePeripherals = [];
       state.edgeBindings.clear();
     },
     get count() {
-      return state.edgePrints.length + state.edgeDisplays.length + state.edgeTestPrints.length;
+      return state.edgePrints.length + state.edgeDisplays.length + state.edgeTestPrints.length + state.edgeDurableJobs.size;
     }
   };
 }

package/dist/next/headers-shim.js

@@ -62,6 +62,7 @@ var state = globalSingleton("state", () => ({
   checkouts: [],
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
+  idempotentCheckouts: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   paymentFailures: [],
   products: [],
@@ -86,6 +87,8 @@ var state = globalSingleton("state", () => ({
   edgeDisplays: [],
   edgeTestPrints: [],
   edgePrintCounter: 0,
+  edgeDurableJobs: /* @__PURE__ */ new Map(),
+  edgeDurableOutcomes: [],
   edgeDevices: [],
   edgePeripherals: [],
   edgeBindings: /* @__PURE__ */ new Map(),

package/dist/next/headers-shim.mjs

@@ -35,6 +35,7 @@ var state = globalSingleton("state", () => ({
   checkouts: [],
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
+  idempotentCheckouts: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   paymentFailures: [],
   products: [],
@@ -59,6 +60,8 @@ var state = globalSingleton("state", () => ({
   edgeDisplays: [],
   edgeTestPrints: [],
   edgePrintCounter: 0,
+  edgeDurableJobs: /* @__PURE__ */ new Map(),
+  edgeDurableOutcomes: [],
   edgeDevices: [],
   edgePeripherals: [],
   edgeBindings: /* @__PURE__ */ new Map(),

package/dist/setup.js

@@ -67,6 +67,7 @@ var state = globalSingleton("state", () => ({
   checkouts: [],
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
+  idempotentCheckouts: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   paymentFailures: [],
   products: [],
@@ -91,6 +92,8 @@ var state = globalSingleton("state", () => ({
   edgeDisplays: [],
   edgeTestPrints: [],
   edgePrintCounter: 0,
+  edgeDurableJobs: /* @__PURE__ */ new Map(),
+  edgeDurableOutcomes: [],
   edgeDevices: [],
   edgePeripherals: [],
   edgeBindings: /* @__PURE__ */ new Map(),
@@ -1536,6 +1539,8 @@ var requestScopeStorage = globalSingleton(
 var import_node_crypto4 = __toESM(require("crypto"));
 
 // src/simulator/payments.ts
+var STRIPE_MIN_EXPIRY_SECONDS = 30 * 60;
+var STRIPE_MAX_EXPIRY_SECONDS = 24 * 60 * 60;
 var BEAM_BOLT_PAYMENT_METHODS = [
   "CARD",
   "CARD_INSTALLMENTS",
@@ -1605,6 +1610,15 @@ function isBoltPaymentMethod(value) {
 function isBoltIntentStatus(value) {
   return BEAM_BOLT_INTENT_STATUSES.includes(value);
 }
+function stableStringify(value) {
+  if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
+  if (value && typeof value === "object") {
+    const entries = Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+var ISO_8601_WITH_ZONE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/;
 function nextCheckoutId() {
   state.checkoutCounter += 1;
   return `cs_test_${state.checkoutCounter}`;
@@ -1621,7 +1635,7 @@ function nextBoltIntentId() {
   state.boltIntentCounter += 1;
   return `bolti_${state.boltIntentCounter}`;
 }
-function seedStripeSession(id, body) {
+function seedStripeSession(id, body, expiresAt) {
   const lineItems = body.lineItems ?? [];
   let amountTotal = null;
   let currency = null;
@@ -1641,7 +1655,7 @@ function seedStripeSession(id, body) {
     currency,
     customerEmail: body.customerEmail ? String(body.customerEmail) : null,
     metadata: body.metadata ?? {},
-    expiresAt: Math.floor(Date.now() / 1e3) + 3600
+    expiresAt
   });
 }
 function seedBeamLink(id, body, merchantId) {
@@ -1661,7 +1675,8 @@ function seedBeamLink(id, body, merchantId) {
     },
     redirectUrl: body.redirectUrl ? String(body.redirectUrl) : void 0,
     linkSettings: body.linkSettings,
-    collectDeliveryAddress: body.collectDeliveryAddress === true
+    collectDeliveryAddress: body.collectDeliveryAddress === true,
+    ...typeof body.expiresAt === "string" ? { expiresAt: body.expiresAt } : {}
   });
 }
 function deriveBoltIntentStatus(storedStatus, expiresAt, now3 = /* @__PURE__ */ new Date()) {
@@ -1932,6 +1947,16 @@ async function handlePaymentsRequest(request, url) {
     const linkId = beamProductsMatch[2];
     if (!linkId && request.method === "POST") {
       const body = await readJsonBody(request);
+      if ("idempotencyKey" in body) {
+        return payErr(
+          "idempotencyKey is not supported for Beam payment links.",
+          400,
+          "idempotency_unsupported"
+        );
+      }
+      if (typeof body.expiresAt === "string" && (!ISO_8601_WITH_ZONE.test(body.expiresAt) || Number.isNaN(Date.parse(body.expiresAt)))) {
+        return payErr("expiresAt must be an ISO 8601 timestamp", 400);
+      }
       const id = nextPaymentLinkId();
       const checkoutUrl = `https://beam.test/pay/${id}`;
       const captured = {
@@ -1944,7 +1969,11 @@ async function handlePaymentsRequest(request, url) {
       };
       state.checkouts.push(captured);
       seedBeamLink(id, body, merchantId);
-      return json({ id, url: checkoutUrl });
+      return json({
+        id,
+        url: checkoutUrl,
+        ...typeof body.expiresAt === "string" ? { expiresAt: body.expiresAt } : {}
+      });
     }
     if (linkId && request.method === "GET") {
       const link = state.paymentLinks.get(linkId);
@@ -1970,6 +1999,34 @@ async function handlePaymentsRequest(request, url) {
     }
     if (subPath === "checkout" && request.method === "POST") {
       const body = await readJsonBody(request);
+      const nowSeconds = Math.floor(Date.now() / 1e3);
+      const requestedExpiry = typeof body.expiresAt === "number" ? body.expiresAt : void 0;
+      const callerKey = typeof body.idempotencyKey === "string" ? body.idempotencyKey : void 0;
+      const scopedKey = callerKey ? JSON.stringify(["stripe", accountId, callerKey]) : void 0;
+      const comparable = { ...body };
+      delete comparable.deploymentId;
+      delete comparable.idempotencyKey;
+      const fingerprint = stableStringify(comparable);
+      if (scopedKey) {
+        const saved = state.idempotentCheckouts.get(scopedKey);
+        if (saved) {
+          if (saved.fingerprint !== fingerprint) {
+            return payErr(
+              "This idempotency key was already used with different checkout parameters. Use a new key for a different checkout.",
+              409,
+              "idempotency_conflict"
+            );
+          }
+          return json(saved.response);
+        }
+      }
+      if (requestedExpiry !== void 0 && (requestedExpiry < nowSeconds + STRIPE_MIN_EXPIRY_SECONDS || requestedExpiry > nowSeconds + STRIPE_MAX_EXPIRY_SECONDS)) {
+        return payErr(
+          "expiresAt must be between 30 minutes and 24 hours after the checkout is created (Unix seconds).",
+          400,
+          "expiry_out_of_range"
+        );
+      }
       const id = nextCheckoutId();
       const checkoutUrl = `https://checkout.stripe.test/c/pay/${id}`;
       const captured = {
@@ -1982,8 +2039,11 @@ async function handlePaymentsRequest(request, url) {
         createdAt: /* @__PURE__ */ new Date()
       };
       state.checkouts.push(captured);
-      seedStripeSession(id, body);
-      return json({ id, url: checkoutUrl });
+      const expiresAt = requestedExpiry ?? nowSeconds + STRIPE_MAX_EXPIRY_SECONDS;
+      seedStripeSession(id, body, expiresAt);
+      const response = { id, url: checkoutUrl, expiresAt };
+      if (scopedKey) state.idempotentCheckouts.set(scopedKey, { fingerprint, response });
+      return json(response);
     }
     const sessionMatch = subPath.match(/^checkout-sessions\/([^/]+)$/);
     if (sessionMatch && request.method === "GET") {
@@ -2469,6 +2529,93 @@ async function handlePrint(request) {
     status: "completed"
   });
 }
+var IDEMPOTENCY_KEY = /^[A-Za-z0-9_.:-]{1,128}$/;
+async function handleEnqueue(request) {
+  const body = await readJsonBody(request);
+  const key = typeof body.idempotencyKey === "string" ? body.idempotencyKey : "";
+  if (!IDEMPOTENCY_KEY.test(key)) {
+    return edgeFailure("idempotencyKey must be 1-128 characters of A-Z a-z 0-9 _ . : -");
+  }
+  if (body.openDrawer === true) {
+    return edgeFailure("Durable receipts cannot open the cash drawer; a retry would kick it again");
+  }
+  if (body.copies !== void 0 && body.copies !== 1) {
+    return edgeFailure(
+      "Durable receipts print exactly one copy; submit a second job for another copy"
+    );
+  }
+  const receipt = body.receipt ?? {};
+  if (receipt.rawEscPos !== void 0) {
+    return edgeFailure("rawEscPos is not supported for durable receipts");
+  }
+  const requestHash = JSON.stringify([
+    body.alias,
+    body.deviceId,
+    body.peripheralId,
+    receipt,
+    body.logo
+  ]);
+  const existing = [...state.edgeDurableJobs.values()].find(
+    (j) => j.captured.idempotencyKey === key
+  );
+  if (existing) {
+    if (existing.requestHash !== requestHash) {
+      return edgeFailure(
+        "This idempotencyKey was already used for a different receipt, target or options.",
+        409,
+        "IDEMPOTENCY_KEY_CONFLICT"
+      );
+    }
+    return json({ success: true, data: durableView(existing.captured.jobId, "queued") }, 200);
+  }
+  const jobId = nextJobId();
+  const captured = {
+    jobId,
+    idempotencyKey: key,
+    alias: body.alias ? String(body.alias) : void 0,
+    deviceId: body.deviceId ? String(body.deviceId) : void 0,
+    peripheralId: body.peripheralId ? String(body.peripheralId) : void 0,
+    receipt,
+    logo: body.logo === true ? true : body.logo === false ? false : void 0
+  };
+  const outcome = state.edgeDurableOutcomes.shift() ?? { status: "sent_to_printer" };
+  state.edgeDurableJobs.set(jobId, { requestHash, captured, outcome });
+  return json({ success: true, data: durableView(jobId, "queued") }, 202);
+}
+function durableView(jobId, as) {
+  const job = state.edgeDurableJobs.get(jobId);
+  const createdAt = now2();
+  const base = {
+    jobId,
+    attempts: as === "queued" ? 0 : 1,
+    createdAt,
+    expiresAt: new Date(Date.parse(createdAt) + 10 * 6e4).toISOString(),
+    target: {
+      deviceId: job.captured.deviceId ?? "sim-device",
+      peripheralId: job.captured.peripheralId ?? "sim-peripheral"
+    }
+  };
+  const outcome = as === "queued" ? { status: "queued" } : job.outcome;
+  if (outcome.status === "needs_attention") {
+    return {
+      ...base,
+      status: "needs_attention",
+      attention: {
+        reason: outcome.reason,
+        outcome: outcome.outcome,
+        message: outcome.message ?? "Delivery stopped."
+      }
+    };
+  }
+  if (outcome.status === "sent_to_printer") {
+    return { ...base, status: "sent_to_printer", sentToPrinterAt: createdAt };
+  }
+  return { ...base, status: "queued" };
+}
+function handleGetDurable(jobId) {
+  if (!state.edgeDurableJobs.has(jobId)) return edgeFailure("Print job not found", 404);
+  return success(durableView(jobId));
+}
 async function handleShowDisplay(request) {
   const body = await readJsonBody(request);
   const captured = {
@@ -2518,6 +2665,13 @@ async function handleEdgeRequest(request, subPath) {
   if (subPath === "/print" && method === "POST") {
     return handlePrint(request);
   }
+  if (subPath === "/print-jobs" && method === "POST") {
+    return handleEnqueue(request);
+  }
+  const durableMatch = subPath.match(/^\/print-jobs\/([^/]+)$/);
+  if (durableMatch && method === "GET") {
+    return handleGetDurable(decodeURIComponent(durableMatch[1]));
+  }
   if (subPath === "/capabilities" && method === "GET") {
     return handleCapabilities(request);
   }

package/dist/setup.mjs

@@ -43,6 +43,7 @@ var state = globalSingleton("state", () => ({
   checkouts: [],
   checkoutCounter: 0,
   sessionStatuses: /* @__PURE__ */ new Map(),
+  idempotentCheckouts: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   paymentFailures: [],
   products: [],
@@ -67,6 +68,8 @@ var state = globalSingleton("state", () => ({
   edgeDisplays: [],
   edgeTestPrints: [],
   edgePrintCounter: 0,
+  edgeDurableJobs: /* @__PURE__ */ new Map(),
+  edgeDurableOutcomes: [],
   edgeDevices: [],
   edgePeripherals: [],
   edgeBindings: /* @__PURE__ */ new Map(),
@@ -1512,6 +1515,8 @@ var requestScopeStorage = globalSingleton(
 import crypto4 from "crypto";
 
 // src/simulator/payments.ts
+var STRIPE_MIN_EXPIRY_SECONDS = 30 * 60;
+var STRIPE_MAX_EXPIRY_SECONDS = 24 * 60 * 60;
 var BEAM_BOLT_PAYMENT_METHODS = [
   "CARD",
   "CARD_INSTALLMENTS",
@@ -1581,6 +1586,15 @@ function isBoltPaymentMethod(value) {
 function isBoltIntentStatus(value) {
   return BEAM_BOLT_INTENT_STATUSES.includes(value);
 }
+function stableStringify(value) {
+  if (Array.isArray(value)) return `[${value.map(stableStringify).join(",")}]`;
+  if (value && typeof value === "object") {
+    const entries = Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableStringify(v)}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+var ISO_8601_WITH_ZONE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/;
 function nextCheckoutId() {
   state.checkoutCounter += 1;
   return `cs_test_${state.checkoutCounter}`;
@@ -1597,7 +1611,7 @@ function nextBoltIntentId() {
   state.boltIntentCounter += 1;
   return `bolti_${state.boltIntentCounter}`;
 }
-function seedStripeSession(id, body) {
+function seedStripeSession(id, body, expiresAt) {
   const lineItems = body.lineItems ?? [];
   let amountTotal = null;
   let currency = null;
@@ -1617,7 +1631,7 @@ function seedStripeSession(id, body) {
     currency,
     customerEmail: body.customerEmail ? String(body.customerEmail) : null,
     metadata: body.metadata ?? {},
-    expiresAt: Math.floor(Date.now() / 1e3) + 3600
+    expiresAt
   });
 }
 function seedBeamLink(id, body, merchantId) {
@@ -1637,7 +1651,8 @@ function seedBeamLink(id, body, merchantId) {
     },
     redirectUrl: body.redirectUrl ? String(body.redirectUrl) : void 0,
     linkSettings: body.linkSettings,
-    collectDeliveryAddress: body.collectDeliveryAddress === true
+    collectDeliveryAddress: body.collectDeliveryAddress === true,
+    ...typeof body.expiresAt === "string" ? { expiresAt: body.expiresAt } : {}
   });
 }
 function deriveBoltIntentStatus(storedStatus, expiresAt, now3 = /* @__PURE__ */ new Date()) {
@@ -1908,6 +1923,16 @@ async function handlePaymentsRequest(request, url) {
     const linkId = beamProductsMatch[2];
     if (!linkId && request.method === "POST") {
       const body = await readJsonBody(request);
+      if ("idempotencyKey" in body) {
+        return payErr(
+          "idempotencyKey is not supported for Beam payment links.",
+          400,
+          "idempotency_unsupported"
+        );
+      }
+      if (typeof body.expiresAt === "string" && (!ISO_8601_WITH_ZONE.test(body.expiresAt) || Number.isNaN(Date.parse(body.expiresAt)))) {
+        return payErr("expiresAt must be an ISO 8601 timestamp", 400);
+      }
       const id = nextPaymentLinkId();
       const checkoutUrl = `https://beam.test/pay/${id}`;
       const captured = {
@@ -1920,7 +1945,11 @@ async function handlePaymentsRequest(request, url) {
       };
       state.checkouts.push(captured);
       seedBeamLink(id, body, merchantId);
-      return json({ id, url: checkoutUrl });
+      return json({
+        id,
+        url: checkoutUrl,
+        ...typeof body.expiresAt === "string" ? { expiresAt: body.expiresAt } : {}
+      });
     }
     if (linkId && request.method === "GET") {
       const link = state.paymentLinks.get(linkId);
@@ -1946,6 +1975,34 @@ async function handlePaymentsRequest(request, url) {
     }
     if (subPath === "checkout" && request.method === "POST") {
       const body = await readJsonBody(request);
+      const nowSeconds = Math.floor(Date.now() / 1e3);
+      const requestedExpiry = typeof body.expiresAt === "number" ? body.expiresAt : void 0;
+      const callerKey = typeof body.idempotencyKey === "string" ? body.idempotencyKey : void 0;
+      const scopedKey = callerKey ? JSON.stringify(["stripe", accountId, callerKey]) : void 0;
+      const comparable = { ...body };
+      delete comparable.deploymentId;
+      delete comparable.idempotencyKey;
+      const fingerprint = stableStringify(comparable);
+      if (scopedKey) {
+        const saved = state.idempotentCheckouts.get(scopedKey);
+        if (saved) {
+          if (saved.fingerprint !== fingerprint) {
+            return payErr(
+              "This idempotency key was already used with different checkout parameters. Use a new key for a different checkout.",
+              409,
+              "idempotency_conflict"
+            );
+          }
+          return json(saved.response);
+        }
+      }
+      if (requestedExpiry !== void 0 && (requestedExpiry < nowSeconds + STRIPE_MIN_EXPIRY_SECONDS || requestedExpiry > nowSeconds + STRIPE_MAX_EXPIRY_SECONDS)) {
+        return payErr(
+          "expiresAt must be between 30 minutes and 24 hours after the checkout is created (Unix seconds).",
+          400,
+          "expiry_out_of_range"
+        );
+      }
       const id = nextCheckoutId();
       const checkoutUrl = `https://checkout.stripe.test/c/pay/${id}`;
       const captured = {
@@ -1958,8 +2015,11 @@ async function handlePaymentsRequest(request, url) {
         createdAt: /* @__PURE__ */ new Date()
       };
       state.checkouts.push(captured);
-      seedStripeSession(id, body);
-      return json({ id, url: checkoutUrl });
+      const expiresAt = requestedExpiry ?? nowSeconds + STRIPE_MAX_EXPIRY_SECONDS;
+      seedStripeSession(id, body, expiresAt);
+      const response = { id, url: checkoutUrl, expiresAt };
+      if (scopedKey) state.idempotentCheckouts.set(scopedKey, { fingerprint, response });
+      return json(response);
     }
     const sessionMatch = subPath.match(/^checkout-sessions\/([^/]+)$/);
     if (sessionMatch && request.method === "GET") {
@@ -2445,6 +2505,93 @@ async function handlePrint(request) {
     status: "completed"
   });
 }
+var IDEMPOTENCY_KEY = /^[A-Za-z0-9_.:-]{1,128}$/;
+async function handleEnqueue(request) {
+  const body = await readJsonBody(request);
+  const key = typeof body.idempotencyKey === "string" ? body.idempotencyKey : "";
+  if (!IDEMPOTENCY_KEY.test(key)) {
+    return edgeFailure("idempotencyKey must be 1-128 characters of A-Z a-z 0-9 _ . : -");
+  }
+  if (body.openDrawer === true) {
+    return edgeFailure("Durable receipts cannot open the cash drawer; a retry would kick it again");
+  }
+  if (body.copies !== void 0 && body.copies !== 1) {
+    return edgeFailure(
+      "Durable receipts print exactly one copy; submit a second job for another copy"
+    );
+  }
+  const receipt = body.receipt ?? {};
+  if (receipt.rawEscPos !== void 0) {
+    return edgeFailure("rawEscPos is not supported for durable receipts");
+  }
+  const requestHash = JSON.stringify([
+    body.alias,
+    body.deviceId,
+    body.peripheralId,
+    receipt,
+    body.logo
+  ]);
+  const existing = [...state.edgeDurableJobs.values()].find(
+    (j) => j.captured.idempotencyKey === key
+  );
+  if (existing) {
+    if (existing.requestHash !== requestHash) {
+      return edgeFailure(
+        "This idempotencyKey was already used for a different receipt, target or options.",
+        409,
+        "IDEMPOTENCY_KEY_CONFLICT"
+      );
+    }
+    return json({ success: true, data: durableView(existing.captured.jobId, "queued") }, 200);
+  }
+  const jobId = nextJobId();
+  const captured = {
+    jobId,
+    idempotencyKey: key,
+    alias: body.alias ? String(body.alias) : void 0,
+    deviceId: body.deviceId ? String(body.deviceId) : void 0,
+    peripheralId: body.peripheralId ? String(body.peripheralId) : void 0,
+    receipt,
+    logo: body.logo === true ? true : body.logo === false ? false : void 0
+  };
+  const outcome = state.edgeDurableOutcomes.shift() ?? { status: "sent_to_printer" };
+  state.edgeDurableJobs.set(jobId, { requestHash, captured, outcome });
+  return json({ success: true, data: durableView(jobId, "queued") }, 202);
+}
+function durableView(jobId, as) {
+  const job = state.edgeDurableJobs.get(jobId);
+  const createdAt = now2();
+  const base = {
+    jobId,
+    attempts: as === "queued" ? 0 : 1,
+    createdAt,
+    expiresAt: new Date(Date.parse(createdAt) + 10 * 6e4).toISOString(),
+    target: {
+      deviceId: job.captured.deviceId ?? "sim-device",
+      peripheralId: job.captured.peripheralId ?? "sim-peripheral"
+    }
+  };
+  const outcome = as === "queued" ? { status: "queued" } : job.outcome;
+  if (outcome.status === "needs_attention") {
+    return {
+      ...base,
+      status: "needs_attention",
+      attention: {
+        reason: outcome.reason,
+        outcome: outcome.outcome,
+        message: outcome.message ?? "Delivery stopped."
+      }
+    };
+  }
+  if (outcome.status === "sent_to_printer") {
+    return { ...base, status: "sent_to_printer", sentToPrinterAt: createdAt };
+  }
+  return { ...base, status: "queued" };
+}
+function handleGetDurable(jobId) {
+  if (!state.edgeDurableJobs.has(jobId)) return edgeFailure("Print job not found", 404);
+  return success(durableView(jobId));
+}
 async function handleShowDisplay(request) {
   const body = await readJsonBody(request);
   const captured = {
@@ -2494,6 +2641,13 @@ async function handleEdgeRequest(request, subPath) {
   if (subPath === "/print" && method === "POST") {
     return handlePrint(request);
   }
+  if (subPath === "/print-jobs" && method === "POST") {
+    return handleEnqueue(request);
+  }
+  const durableMatch = subPath.match(/^\/print-jobs\/([^/]+)$/);
+  if (durableMatch && method === "GET") {
+    return handleGetDurable(decodeURIComponent(durableMatch[1]));
+  }
   if (subPath === "/capabilities" && method === "GET") {
     return handleCapabilities(request);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/testing",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "Vitest test harness for Stardeck customer apps — in-process Postgres (PGlite) plus a control-plane simulator so the real Stardeck SDKs run unmodified in tests",
   "main": "dist/index.js",
   "module": "dist/index.mjs",