@stardeck-customer-apps/testing 0.6.0 → 0.6.2

package/SKILL.md

@@ -215,10 +215,13 @@ describe the code, and the owner can't tell from them what is or isn't covered.
 - `client.identities` from integrations-sdk (create/get/update/list accounts &
   persons, attach channel links, guest/staff `resolveOrCreate`, paginated
   `search`, and batch `getAliases`) — served offline by the simulated directory.
-  `resolveOrCreate` lowercases/trims email, requires E.164 phone values, and
+  `resolveOrCreate` applies the production email contract (trim + ASCII-only
+  A–Z→a–z; Turkish İ is left unchanged), requires E.164 phone values, and
   always writes an unverified link. A guest lookup of a verified link returns
   `{ identityId: null, reason: "verified_conflict" }`; staff provenance may
-  resolve either verified or unverified links. `attachLink(..., { verified:
+  resolve either verified or unverified links. `attachLink` accepts only
+  channel kinds (line/facebook/instagram/email/phone); login keys must be
+  seeded via `app.identities.seedVerifiedLink`. `attachLink(..., { verified:
 true })` remains source-compatible but the simulator (like the control plane)
   ignores that flag and returns `verified: false`. `update` replaces the
   `profile` object (not a merge), like the control plane. Inspect via
@@ -243,6 +246,44 @@ cursor, limit })`; `list()` intentionally keeps its previous array shape.
   pairing pickers via `app.edge.seedDevices()` / `seedPeripherals()`.
 - `next/headers` (`headers()`/`cookies()`) inside handlers under `callRoute`.
 
+## End-to-end (Playwright) suite
+
+This package covers the hermetic in-process suite. The app ALSO has a separate
+Playwright e2e suite: specs in `e2e/*.spec.ts`, run with `npm run test:e2e`
+against the live dev server. It is NOT hermetic — real routes, real database,
+the sandbox's mock admin session.
+
+**When to use which**
+
+- Business logic, route handlers, edge cases, error paths → this package (fast,
+  isolated, deterministic).
+- Whole user journeys through the real UI (the flows a customer walks) → one
+  e2e spec per critical workflow.
+
+**Which flows get an e2e spec** (full guidance: `e2e/README.md`)
+
+One spec per critical workflow — "if this broke overnight, would the owner
+lose money or trust?" The flow types worth a journey: core transactions
+(cart → checkout → confirmation), creation → visibility (post a review →
+see it on the page), state transitions (order placed → fulfilled → status
+updates), cross-surface handoffs (storefront order → admin order list). NOT
+worth one: render-existence checks, admin CRUD minutiae, static pages,
+per-field validation (unit-test the route), login/logout (platform-provided).
+
+**E2e rules** (mirror `e2e/README.md`)
+
+- Whole journeys only: start at the flow's real entry page, end by asserting
+  the durable user-visible outcome — never render-existence checks ("button
+  renders", "page loads"). One happy path per workflow first; error plumbing
+  stays in this package's suite.
+- Group with `test.describe("workflow:<Name>")` using the same names as your
+  `describeWorkflow` blocks where they overlap.
+- Specs create uniquely-named data INSIDE the test body (retries re-run it)
+  and clean up after themselves.
+- Flake killers: user-facing locators (`getByRole`/`getByLabel`) over CSS,
+  never `waitForTimeout` (web-first assertions auto-wait), every test
+  independent of other tests' data and ordering.
+
 ## Rules
 
 - Test **business logic and route handlers**, not framework plumbing. Focus on

package/dist/index.js

@@ -679,7 +679,8 @@ function createInbox() {
 
 // src/simulator/identities.ts
 var import_node_crypto3 = __toESM(require("crypto"));
-var LINK_KINDS = /* @__PURE__ */ new Set([
+var ATTACH_LINK_KINDS = /* @__PURE__ */ new Set(["line", "facebook", "instagram", "email", "phone"]);
+var TRUSTED_LINK_KINDS = /* @__PURE__ */ new Set([
   "line",
   "facebook",
   "instagram",
@@ -692,6 +693,15 @@ var RESOLVE_KINDS = /* @__PURE__ */ new Set(["phone", "email", "line"]);
 var E164_PHONE = /^\+[1-9]\d{1,14}$/;
 var SEARCH_DEFAULT_LIMIT = 50;
 var SEARCH_MAX_LIMIT = 100;
+function asciiLowercaseTrim(value) {
+  const trimmed = value.trim();
+  let out = "";
+  for (let i = 0; i < trimmed.length; i++) {
+    const code = trimmed.charCodeAt(i);
+    out += code >= 65 && code <= 90 ? String.fromCharCode(code + 32) : trimmed[i];
+  }
+  return out;
+}
 var IdentityGraphError = class extends Error {
 };
 function now() {
@@ -701,12 +711,12 @@ function linksFor(identityId) {
   return state.identityLinks.filter((l) => l.identityId === identityId);
 }
 function comparableExternalId(kind, externalId) {
-  if (kind === "email") return externalId.trim().toLowerCase();
+  if (kind === "email") return asciiLowercaseTrim(externalId);
   return externalId;
 }
 function normalizeExternalId(kind, externalId) {
   if (kind === "email") {
-    const normalized = externalId.trim().toLowerCase();
+    const normalized = asciiLowercaseTrim(externalId);
     return normalized.length > 0 ? { externalId: normalized } : { error: "externalId is required" };
   }
   if (kind === "phone" && !E164_PHONE.test(externalId)) {
@@ -870,8 +880,8 @@ async function handleAttachLink(identityId, request) {
   const normalized = normalizeLinkInput(
     body.kind,
     body.externalId,
-    LINK_KINDS,
-    `kind must be one of: ${[...LINK_KINDS].join(", ")}`
+    ATTACH_LINK_KINDS,
+    `kind must be one of: ${[...ATTACH_LINK_KINDS].join(", ")}`
   );
   if ("error" in normalized) return failure(normalized.error);
   const { kind, externalId } = normalized;
@@ -1046,7 +1056,7 @@ function seedVerifiedLink(identityId, params) {
   const normalized = normalizeLinkInput(
     params.kind,
     params.externalId,
-    LINK_KINDS,
+    TRUSTED_LINK_KINDS,
     "unknown identity link kind"
   );
   if ("error" in normalized) throw new Error(normalized.error);

package/dist/index.mjs

@@ -633,7 +633,8 @@ function createInbox() {
 
 // src/simulator/identities.ts
 import crypto3 from "crypto";
-var LINK_KINDS = /* @__PURE__ */ new Set([
+var ATTACH_LINK_KINDS = /* @__PURE__ */ new Set(["line", "facebook", "instagram", "email", "phone"]);
+var TRUSTED_LINK_KINDS = /* @__PURE__ */ new Set([
   "line",
   "facebook",
   "instagram",
@@ -646,6 +647,15 @@ var RESOLVE_KINDS = /* @__PURE__ */ new Set(["phone", "email", "line"]);
 var E164_PHONE = /^\+[1-9]\d{1,14}$/;
 var SEARCH_DEFAULT_LIMIT = 50;
 var SEARCH_MAX_LIMIT = 100;
+function asciiLowercaseTrim(value) {
+  const trimmed = value.trim();
+  let out = "";
+  for (let i = 0; i < trimmed.length; i++) {
+    const code = trimmed.charCodeAt(i);
+    out += code >= 65 && code <= 90 ? String.fromCharCode(code + 32) : trimmed[i];
+  }
+  return out;
+}
 var IdentityGraphError = class extends Error {
 };
 function now() {
@@ -655,12 +665,12 @@ function linksFor(identityId) {
   return state.identityLinks.filter((l) => l.identityId === identityId);
 }
 function comparableExternalId(kind, externalId) {
-  if (kind === "email") return externalId.trim().toLowerCase();
+  if (kind === "email") return asciiLowercaseTrim(externalId);
   return externalId;
 }
 function normalizeExternalId(kind, externalId) {
   if (kind === "email") {
-    const normalized = externalId.trim().toLowerCase();
+    const normalized = asciiLowercaseTrim(externalId);
     return normalized.length > 0 ? { externalId: normalized } : { error: "externalId is required" };
   }
   if (kind === "phone" && !E164_PHONE.test(externalId)) {
@@ -824,8 +834,8 @@ async function handleAttachLink(identityId, request) {
   const normalized = normalizeLinkInput(
     body.kind,
     body.externalId,
-    LINK_KINDS,
-    `kind must be one of: ${[...LINK_KINDS].join(", ")}`
+    ATTACH_LINK_KINDS,
+    `kind must be one of: ${[...ATTACH_LINK_KINDS].join(", ")}`
   );
   if ("error" in normalized) return failure(normalized.error);
   const { kind, externalId } = normalized;
@@ -1000,7 +1010,7 @@ function seedVerifiedLink(identityId, params) {
   const normalized = normalizeLinkInput(
     params.kind,
     params.externalId,
-    LINK_KINDS,
+    TRUSTED_LINK_KINDS,
     "unknown identity link kind"
   );
   if ("error" in normalized) throw new Error(normalized.error);

package/dist/setup.js

@@ -609,19 +609,20 @@ async function handleEmailSend(request) {
 
 // src/simulator/identities.ts
 var import_node_crypto3 = __toESM(require("crypto"));
-var LINK_KINDS = /* @__PURE__ */ new Set([
-  "line",
-  "facebook",
-  "instagram",
-  "email",
-  "phone",
-  "project_auth_user",
-  "dashboard_user"
-]);
+var ATTACH_LINK_KINDS = /* @__PURE__ */ new Set(["line", "facebook", "instagram", "email", "phone"]);
 var RESOLVE_KINDS = /* @__PURE__ */ new Set(["phone", "email", "line"]);
 var E164_PHONE = /^\+[1-9]\d{1,14}$/;
 var SEARCH_DEFAULT_LIMIT = 50;
 var SEARCH_MAX_LIMIT = 100;
+function asciiLowercaseTrim(value) {
+  const trimmed = value.trim();
+  let out = "";
+  for (let i = 0; i < trimmed.length; i++) {
+    const code = trimmed.charCodeAt(i);
+    out += code >= 65 && code <= 90 ? String.fromCharCode(code + 32) : trimmed[i];
+  }
+  return out;
+}
 var IdentityGraphError = class extends Error {
 };
 function now() {
@@ -631,12 +632,12 @@ function linksFor(identityId) {
   return state.identityLinks.filter((l) => l.identityId === identityId);
 }
 function comparableExternalId(kind, externalId) {
-  if (kind === "email") return externalId.trim().toLowerCase();
+  if (kind === "email") return asciiLowercaseTrim(externalId);
   return externalId;
 }
 function normalizeExternalId(kind, externalId) {
   if (kind === "email") {
-    const normalized = externalId.trim().toLowerCase();
+    const normalized = asciiLowercaseTrim(externalId);
     return normalized.length > 0 ? { externalId: normalized } : { error: "externalId is required" };
   }
   if (kind === "phone" && !E164_PHONE.test(externalId)) {
@@ -797,8 +798,8 @@ async function handleAttachLink(identityId, request) {
   const normalized = normalizeLinkInput(
     body.kind,
     body.externalId,
-    LINK_KINDS,
-    `kind must be one of: ${[...LINK_KINDS].join(", ")}`
+    ATTACH_LINK_KINDS,
+    `kind must be one of: ${[...ATTACH_LINK_KINDS].join(", ")}`
   );
   if ("error" in normalized) return failure(normalized.error);
   const { kind, externalId } = normalized;

package/dist/setup.mjs

@@ -585,19 +585,20 @@ async function handleEmailSend(request) {
 
 // src/simulator/identities.ts
 import crypto3 from "crypto";
-var LINK_KINDS = /* @__PURE__ */ new Set([
-  "line",
-  "facebook",
-  "instagram",
-  "email",
-  "phone",
-  "project_auth_user",
-  "dashboard_user"
-]);
+var ATTACH_LINK_KINDS = /* @__PURE__ */ new Set(["line", "facebook", "instagram", "email", "phone"]);
 var RESOLVE_KINDS = /* @__PURE__ */ new Set(["phone", "email", "line"]);
 var E164_PHONE = /^\+[1-9]\d{1,14}$/;
 var SEARCH_DEFAULT_LIMIT = 50;
 var SEARCH_MAX_LIMIT = 100;
+function asciiLowercaseTrim(value) {
+  const trimmed = value.trim();
+  let out = "";
+  for (let i = 0; i < trimmed.length; i++) {
+    const code = trimmed.charCodeAt(i);
+    out += code >= 65 && code <= 90 ? String.fromCharCode(code + 32) : trimmed[i];
+  }
+  return out;
+}
 var IdentityGraphError = class extends Error {
 };
 function now() {
@@ -607,12 +608,12 @@ function linksFor(identityId) {
   return state.identityLinks.filter((l) => l.identityId === identityId);
 }
 function comparableExternalId(kind, externalId) {
-  if (kind === "email") return externalId.trim().toLowerCase();
+  if (kind === "email") return asciiLowercaseTrim(externalId);
   return externalId;
 }
 function normalizeExternalId(kind, externalId) {
   if (kind === "email") {
-    const normalized = externalId.trim().toLowerCase();
+    const normalized = asciiLowercaseTrim(externalId);
     return normalized.length > 0 ? { externalId: normalized } : { error: "externalId is required" };
   }
   if (kind === "phone" && !E164_PHONE.test(externalId)) {
@@ -773,8 +774,8 @@ async function handleAttachLink(identityId, request) {
   const normalized = normalizeLinkInput(
     body.kind,
     body.externalId,
-    LINK_KINDS,
-    `kind must be one of: ${[...LINK_KINDS].join(", ")}`
+    ATTACH_LINK_KINDS,
+    `kind must be one of: ${[...ATTACH_LINK_KINDS].join(", ")}`
   );
   if ("error" in normalized) return failure(normalized.error);
   const { kind, externalId } = normalized;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/testing",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Vitest test harness for Stardeck customer apps — in-process Postgres (PGlite) plus a control-plane simulator so the real Stardeck SDKs run unmodified in tests",
   "main": "dist/index.js",
   "module": "dist/index.mjs",