@stardeck-customer-apps/testing 0.7.1 → 0.9.0

package/dist/setup.js

@@ -45,6 +45,13 @@ var state = globalSingleton("state", () => ({
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   products: [],
+  boltConnections: /* @__PURE__ */ new Map(),
+  boltUsedPairingCodes: /* @__PURE__ */ new Set(),
+  boltConnectionCounter: 0,
+  boltIntents: /* @__PURE__ */ new Map(),
+  boltIntentCounter: 0,
+  boltCharges: [],
+  boltChargeCounter: 0,
   uploads: [],
   uploadCounter: 0,
   storageFiles: /* @__PURE__ */ new Map(),
@@ -983,8 +990,31 @@ var requestScopeStorage = globalSingleton(
 var import_node_crypto4 = __toESM(require("crypto"));
 
 // src/simulator/payments.ts
-function payErr(error, status = 400, code) {
-  return json(code ? { error, code } : { error }, status);
+var BEAM_BOLT_PAYMENT_METHODS = [
+  "CARD",
+  "CARD_INSTALLMENTS",
+  "QR_PROMPT_PAY",
+  "ALIPAY",
+  "ALIPAY_PLUS",
+  "LINE_PAY",
+  "SHOPEE_PAY",
+  "TRUE_MONEY",
+  "WECHAT_PAY",
+  "SPAY_LATER"
+];
+var BEAM_BOLT_INTENT_STATUSES = ["PENDING", "PAID", "FAILED", "CANCELED", "EXPIRED"];
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function payErr(error, status = 400, code, details) {
+  const body = { error };
+  if (code) body.code = code;
+  if (details !== void 0) body.details = details;
+  return json(body, status);
+}
+function isBoltPaymentMethod(value) {
+  return typeof value === "string" && BEAM_BOLT_PAYMENT_METHODS.includes(value);
+}
+function isBoltIntentStatus(value) {
+  return BEAM_BOLT_INTENT_STATUSES.includes(value);
 }
 function nextCheckoutId() {
   state.checkoutCounter += 1;
@@ -994,6 +1024,14 @@ function nextPaymentLinkId() {
   state.checkoutCounter += 1;
   return `plink_test_${state.checkoutCounter}`;
 }
+function nextBoltConnectionId() {
+  state.boltConnectionCounter += 1;
+  return `boltc_${state.boltConnectionCounter}`;
+}
+function nextBoltIntentId() {
+  state.boltIntentCounter += 1;
+  return `bolti_${state.boltIntentCounter}`;
+}
 function seedStripeSession(id, body) {
   const lineItems = body.lineItems ?? [];
   let amountTotal = null;
@@ -1037,11 +1075,262 @@ function seedBeamLink(id, body, merchantId) {
     collectDeliveryAddress: body.collectDeliveryAddress === true
   });
 }
+function deriveBoltIntentStatus(storedStatus, expiresAt, now3 = /* @__PURE__ */ new Date()) {
+  if (storedStatus !== "PENDING") return storedStatus;
+  return expiresAt.getTime() <= now3.getTime() ? "EXPIRED" : "PENDING";
+}
+function toBoltIntentRecord(intent, now3 = /* @__PURE__ */ new Date()) {
+  return {
+    id: intent.id,
+    beamIntentId: intent.beamIntentId,
+    boltConnectionId: intent.boltConnectionId,
+    amount: intent.amount,
+    currency: intent.currency,
+    paymentMethodType: intent.paymentMethodType,
+    referenceId: intent.referenceId,
+    internalNote: intent.internalNote,
+    status: deriveBoltIntentStatus(intent.status, intent.expiresAt, now3),
+    isVirtual: intent.isVirtual,
+    environment: intent.environment,
+    expiresAt: intent.expiresAt.toISOString(),
+    settledAt: intent.settledAt ? intent.settledAt.toISOString() : null,
+    chargeId: intent.chargeId,
+    failureReason: intent.failureReason,
+    createdAt: intent.createdAt.toISOString()
+  };
+}
+function findBoltConnection(connectionId) {
+  return state.boltConnections.get(connectionId) ?? [...state.boltConnections.values()].find((c) => c.beamConnectionId === connectionId);
+}
+function findBoltIntent(intentId) {
+  return state.boltIntents.get(intentId) ?? [...state.boltIntents.values()].find((i) => i.beamIntentId === intentId);
+}
+function storedStatusesForFilter(statuses) {
+  const stored = /* @__PURE__ */ new Set();
+  for (const status of statuses) {
+    if (status === "EXPIRED" || status === "PENDING") {
+      stored.add("PENDING");
+    } else {
+      stored.add(status);
+    }
+  }
+  return [...stored];
+}
 async function handlePaymentsRequest(request, url) {
   const pathname = url.pathname;
-  if (/\/bolt-connections/.test(pathname) || /\/bolt-intents/.test(pathname) || /\/charges(\/|$)/.test(pathname) || /\/billing-portal$/.test(pathname)) {
+  if (/\/billing-portal$/.test(pathname)) {
     return payErr("Not found", 404, "NOT_FOUND");
   }
+  const boltConnectionsMatch = pathname.match(
+    /^\/api\/store\/beam\/([^/]+)\/bolt-connections(?:\/([^/]+))?$/
+  );
+  if (boltConnectionsMatch) {
+    const connectionId = boltConnectionsMatch[2];
+    if (!connectionId && request.method === "POST") {
+      const body = await readJsonBody(request);
+      const pairingCode = body.pairingCode ? String(body.pairingCode) : "";
+      if (!pairingCode) {
+        return payErr("pairingCode is required", 400);
+      }
+      if (state.boltUsedPairingCodes.has(pairingCode)) {
+        return payErr("Pairing code has already been used", 400, "PAIRING_CODE_USED");
+      }
+      const id = nextBoltConnectionId();
+      const now3 = (/* @__PURE__ */ new Date()).toISOString();
+      const environments = Array.isArray(body.environments) ? body.environments.map(String) : ["sandbox"];
+      const isSandbox = environments.some((e) => e === "sandbox" || e === "preview");
+      const connection = {
+        id,
+        projectId: TEST_ENV_DEFAULTS.PROJECT_ID,
+        beamConnectionId: id,
+        displayName: body.displayName != null ? String(body.displayName) : null,
+        pairingCode,
+        status: "ACTIVE",
+        isSandbox,
+        environments,
+        createdAt: now3,
+        updatedAt: now3
+      };
+      state.boltUsedPairingCodes.add(pairingCode);
+      state.boltConnections.set(id, connection);
+      return json({ connection });
+    }
+    if (!connectionId && request.method === "GET") {
+      return json({ connections: [...state.boltConnections.values()] });
+    }
+    if (connectionId && request.method === "GET") {
+      const connection = findBoltConnection(connectionId);
+      if (!connection) return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      return json({ connection });
+    }
+    if (connectionId && request.method === "DELETE") {
+      const connection = findBoltConnection(connectionId);
+      if (!connection) return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      state.boltConnections.delete(connection.id);
+      return json({ success: true });
+    }
+  }
+  const boltIntentsMatch = pathname.match(
+    /^\/api\/store\/beam\/([^/]+)\/bolt-intents(?:\/([^/]+))?$/
+  );
+  if (boltIntentsMatch) {
+    const intentId = boltIntentsMatch[2];
+    if (!intentId && request.method === "POST") {
+      const body = await readJsonBody(request);
+      const issues = [];
+      if (typeof body.amount !== "number" || !Number.isInteger(body.amount) || body.amount < 1) {
+        issues.push({
+          path: ["amount"],
+          message: "Number must be greater than 0",
+          code: "too_small"
+        });
+      }
+      const boltConnectionIdRaw = body.boltConnectionId;
+      if (typeof boltConnectionIdRaw !== "string" || boltConnectionIdRaw.length < 1) {
+        issues.push({
+          path: ["boltConnectionId"],
+          message: "String must contain at least 1 character(s)",
+          code: "too_small"
+        });
+      }
+      const paymentMethod = body.paymentMethod;
+      if (!paymentMethod || typeof paymentMethod !== "object") {
+        issues.push({
+          path: ["paymentMethod"],
+          message: "Required",
+          code: "invalid_type"
+        });
+      } else if (!isBoltPaymentMethod(paymentMethod.paymentMethodType)) {
+        issues.push({
+          path: ["paymentMethod", "paymentMethodType"],
+          message: "Invalid enum value",
+          code: "invalid_enum_value"
+        });
+      }
+      if (typeof body.expiryDurationInSec !== "number" || !Number.isInteger(body.expiryDurationInSec) || body.expiryDurationInSec < 90 || body.expiryDurationInSec > 600) {
+        issues.push({
+          path: ["expiryDurationInSec"],
+          message: "Number must be between 90 and 600",
+          code: "too_small"
+        });
+      }
+      if (typeof body.deploymentId !== "string" || !UUID_RE.test(body.deploymentId)) {
+        issues.push({
+          path: ["deploymentId"],
+          message: "Invalid uuid",
+          code: "invalid_string"
+        });
+      }
+      if (issues.length > 0) {
+        return payErr("Invalid request body", 400, void 0, issues);
+      }
+      const boltConnectionId = String(body.boltConnectionId);
+      if (!findBoltConnection(boltConnectionId)) {
+        return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      }
+      const paymentMethodType = body.paymentMethod.paymentMethodType;
+      const amount = body.amount;
+      const currency = String(body.currency ?? "THB");
+      const expiryDurationInSec = body.expiryDurationInSec;
+      const id = nextBoltIntentId();
+      const now3 = /* @__PURE__ */ new Date();
+      const intent = {
+        id,
+        beamIntentId: id,
+        boltConnectionId,
+        amount,
+        currency,
+        paymentMethodType,
+        referenceId: body.referenceId != null ? String(body.referenceId) : null,
+        internalNote: body.internalNote != null ? String(body.internalNote) : null,
+        status: "PENDING",
+        isVirtual: false,
+        environment: "sandbox",
+        expiresAt: new Date(now3.getTime() + expiryDurationInSec * 1e3),
+        settledAt: null,
+        chargeId: null,
+        failureReason: null,
+        createdAt: now3
+      };
+      state.boltIntents.set(id, intent);
+      return json({
+        id,
+        status: "PENDING",
+        amount,
+        currency,
+        createdAt: now3.toISOString()
+      });
+    }
+    if (!intentId && request.method === "GET") {
+      const deploymentId = url.searchParams.get("deploymentId");
+      if (!deploymentId) {
+        return payErr("Missing deploymentId parameter", 400);
+      }
+      const now3 = /* @__PURE__ */ new Date();
+      const statusParam = url.searchParams.get("status");
+      let requestedStatuses;
+      if (statusParam) {
+        const parts = statusParam.split(",").map((s) => s.trim()).filter(Boolean);
+        const parsed = [];
+        for (const part of parts) {
+          if (!isBoltIntentStatus(part)) {
+            return payErr(`Invalid status: ${part}`, 400);
+          }
+          parsed.push(part);
+        }
+        requestedStatuses = parsed;
+      }
+      const boltConnectionId = url.searchParams.get("boltConnectionId") ?? void 0;
+      const limitParam = url.searchParams.get("limit");
+      let limit = 50;
+      if (limitParam !== null) {
+        const trimmed = limitParam.trim();
+        if (!/^\d+$/.test(trimmed)) {
+          return payErr("limit must be an integer between 1 and 100", 400);
+        }
+        const parsed = Number.parseInt(trimmed, 10);
+        if (!Number.isInteger(parsed) || parsed < 1 || parsed > 100) {
+          return payErr("limit must be an integer between 1 and 100", 400);
+        }
+        limit = parsed;
+      }
+      let intents = [...state.boltIntents.values()];
+      if (boltConnectionId) {
+        intents = intents.filter((i) => i.boltConnectionId === boltConnectionId);
+      }
+      if (requestedStatuses && requestedStatuses.length > 0) {
+        const storedWanted = new Set(storedStatusesForFilter(requestedStatuses));
+        intents = intents.filter((i) => storedWanted.has(i.status));
+      }
+      let records = intents.map((i) => toBoltIntentRecord(i, now3));
+      if (requestedStatuses && requestedStatuses.length > 0) {
+        const wanted = new Set(requestedStatuses);
+        records = records.filter((r) => wanted.has(r.status));
+      }
+      records = records.slice(0, limit);
+      return json({ intents: records });
+    }
+    if (intentId && request.method === "DELETE") {
+      const intent = findBoltIntent(intentId);
+      if (!intent) return payErr("Bolt intent not found", 404, "NOT_FOUND");
+      const derived = deriveBoltIntentStatus(intent.status, intent.expiresAt);
+      if (derived !== "PENDING") {
+        return payErr(`Bolt intent is ${derived}, only PENDING intents can be canceled`, 409);
+      }
+      intent.status = "CANCELED";
+      intent.settledAt = /* @__PURE__ */ new Date();
+      return json({ success: true });
+    }
+  }
+  const chargesMatch = pathname.match(/^\/api\/store\/beam\/([^/]+)\/charges$/);
+  if (chargesMatch && request.method === "GET") {
+    const sourceId = url.searchParams.get("sourceId");
+    if (!sourceId) {
+      return payErr("Missing sourceId parameter", 400);
+    }
+    const charges = state.boltCharges.filter((c) => c.sourceId === sourceId);
+    return json({ charges });
+  }
   const beamProductsMatch = pathname.match(
     /^\/api\/store\/beam\/([^/]+)\/payment-links(?:\/([^/]+))?$/
   );

package/dist/setup.mjs

@@ -21,6 +21,13 @@ var state = globalSingleton("state", () => ({
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   products: [],
+  boltConnections: /* @__PURE__ */ new Map(),
+  boltUsedPairingCodes: /* @__PURE__ */ new Set(),
+  boltConnectionCounter: 0,
+  boltIntents: /* @__PURE__ */ new Map(),
+  boltIntentCounter: 0,
+  boltCharges: [],
+  boltChargeCounter: 0,
   uploads: [],
   uploadCounter: 0,
   storageFiles: /* @__PURE__ */ new Map(),
@@ -959,8 +966,31 @@ var requestScopeStorage = globalSingleton(
 import crypto4 from "crypto";
 
 // src/simulator/payments.ts
-function payErr(error, status = 400, code) {
-  return json(code ? { error, code } : { error }, status);
+var BEAM_BOLT_PAYMENT_METHODS = [
+  "CARD",
+  "CARD_INSTALLMENTS",
+  "QR_PROMPT_PAY",
+  "ALIPAY",
+  "ALIPAY_PLUS",
+  "LINE_PAY",
+  "SHOPEE_PAY",
+  "TRUE_MONEY",
+  "WECHAT_PAY",
+  "SPAY_LATER"
+];
+var BEAM_BOLT_INTENT_STATUSES = ["PENDING", "PAID", "FAILED", "CANCELED", "EXPIRED"];
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function payErr(error, status = 400, code, details) {
+  const body = { error };
+  if (code) body.code = code;
+  if (details !== void 0) body.details = details;
+  return json(body, status);
+}
+function isBoltPaymentMethod(value) {
+  return typeof value === "string" && BEAM_BOLT_PAYMENT_METHODS.includes(value);
+}
+function isBoltIntentStatus(value) {
+  return BEAM_BOLT_INTENT_STATUSES.includes(value);
 }
 function nextCheckoutId() {
   state.checkoutCounter += 1;
@@ -970,6 +1000,14 @@ function nextPaymentLinkId() {
   state.checkoutCounter += 1;
   return `plink_test_${state.checkoutCounter}`;
 }
+function nextBoltConnectionId() {
+  state.boltConnectionCounter += 1;
+  return `boltc_${state.boltConnectionCounter}`;
+}
+function nextBoltIntentId() {
+  state.boltIntentCounter += 1;
+  return `bolti_${state.boltIntentCounter}`;
+}
 function seedStripeSession(id, body) {
   const lineItems = body.lineItems ?? [];
   let amountTotal = null;
@@ -1013,11 +1051,262 @@ function seedBeamLink(id, body, merchantId) {
     collectDeliveryAddress: body.collectDeliveryAddress === true
   });
 }
+function deriveBoltIntentStatus(storedStatus, expiresAt, now3 = /* @__PURE__ */ new Date()) {
+  if (storedStatus !== "PENDING") return storedStatus;
+  return expiresAt.getTime() <= now3.getTime() ? "EXPIRED" : "PENDING";
+}
+function toBoltIntentRecord(intent, now3 = /* @__PURE__ */ new Date()) {
+  return {
+    id: intent.id,
+    beamIntentId: intent.beamIntentId,
+    boltConnectionId: intent.boltConnectionId,
+    amount: intent.amount,
+    currency: intent.currency,
+    paymentMethodType: intent.paymentMethodType,
+    referenceId: intent.referenceId,
+    internalNote: intent.internalNote,
+    status: deriveBoltIntentStatus(intent.status, intent.expiresAt, now3),
+    isVirtual: intent.isVirtual,
+    environment: intent.environment,
+    expiresAt: intent.expiresAt.toISOString(),
+    settledAt: intent.settledAt ? intent.settledAt.toISOString() : null,
+    chargeId: intent.chargeId,
+    failureReason: intent.failureReason,
+    createdAt: intent.createdAt.toISOString()
+  };
+}
+function findBoltConnection(connectionId) {
+  return state.boltConnections.get(connectionId) ?? [...state.boltConnections.values()].find((c) => c.beamConnectionId === connectionId);
+}
+function findBoltIntent(intentId) {
+  return state.boltIntents.get(intentId) ?? [...state.boltIntents.values()].find((i) => i.beamIntentId === intentId);
+}
+function storedStatusesForFilter(statuses) {
+  const stored = /* @__PURE__ */ new Set();
+  for (const status of statuses) {
+    if (status === "EXPIRED" || status === "PENDING") {
+      stored.add("PENDING");
+    } else {
+      stored.add(status);
+    }
+  }
+  return [...stored];
+}
 async function handlePaymentsRequest(request, url) {
   const pathname = url.pathname;
-  if (/\/bolt-connections/.test(pathname) || /\/bolt-intents/.test(pathname) || /\/charges(\/|$)/.test(pathname) || /\/billing-portal$/.test(pathname)) {
+  if (/\/billing-portal$/.test(pathname)) {
     return payErr("Not found", 404, "NOT_FOUND");
   }
+  const boltConnectionsMatch = pathname.match(
+    /^\/api\/store\/beam\/([^/]+)\/bolt-connections(?:\/([^/]+))?$/
+  );
+  if (boltConnectionsMatch) {
+    const connectionId = boltConnectionsMatch[2];
+    if (!connectionId && request.method === "POST") {
+      const body = await readJsonBody(request);
+      const pairingCode = body.pairingCode ? String(body.pairingCode) : "";
+      if (!pairingCode) {
+        return payErr("pairingCode is required", 400);
+      }
+      if (state.boltUsedPairingCodes.has(pairingCode)) {
+        return payErr("Pairing code has already been used", 400, "PAIRING_CODE_USED");
+      }
+      const id = nextBoltConnectionId();
+      const now3 = (/* @__PURE__ */ new Date()).toISOString();
+      const environments = Array.isArray(body.environments) ? body.environments.map(String) : ["sandbox"];
+      const isSandbox = environments.some((e) => e === "sandbox" || e === "preview");
+      const connection = {
+        id,
+        projectId: TEST_ENV_DEFAULTS.PROJECT_ID,
+        beamConnectionId: id,
+        displayName: body.displayName != null ? String(body.displayName) : null,
+        pairingCode,
+        status: "ACTIVE",
+        isSandbox,
+        environments,
+        createdAt: now3,
+        updatedAt: now3
+      };
+      state.boltUsedPairingCodes.add(pairingCode);
+      state.boltConnections.set(id, connection);
+      return json({ connection });
+    }
+    if (!connectionId && request.method === "GET") {
+      return json({ connections: [...state.boltConnections.values()] });
+    }
+    if (connectionId && request.method === "GET") {
+      const connection = findBoltConnection(connectionId);
+      if (!connection) return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      return json({ connection });
+    }
+    if (connectionId && request.method === "DELETE") {
+      const connection = findBoltConnection(connectionId);
+      if (!connection) return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      state.boltConnections.delete(connection.id);
+      return json({ success: true });
+    }
+  }
+  const boltIntentsMatch = pathname.match(
+    /^\/api\/store\/beam\/([^/]+)\/bolt-intents(?:\/([^/]+))?$/
+  );
+  if (boltIntentsMatch) {
+    const intentId = boltIntentsMatch[2];
+    if (!intentId && request.method === "POST") {
+      const body = await readJsonBody(request);
+      const issues = [];
+      if (typeof body.amount !== "number" || !Number.isInteger(body.amount) || body.amount < 1) {
+        issues.push({
+          path: ["amount"],
+          message: "Number must be greater than 0",
+          code: "too_small"
+        });
+      }
+      const boltConnectionIdRaw = body.boltConnectionId;
+      if (typeof boltConnectionIdRaw !== "string" || boltConnectionIdRaw.length < 1) {
+        issues.push({
+          path: ["boltConnectionId"],
+          message: "String must contain at least 1 character(s)",
+          code: "too_small"
+        });
+      }
+      const paymentMethod = body.paymentMethod;
+      if (!paymentMethod || typeof paymentMethod !== "object") {
+        issues.push({
+          path: ["paymentMethod"],
+          message: "Required",
+          code: "invalid_type"
+        });
+      } else if (!isBoltPaymentMethod(paymentMethod.paymentMethodType)) {
+        issues.push({
+          path: ["paymentMethod", "paymentMethodType"],
+          message: "Invalid enum value",
+          code: "invalid_enum_value"
+        });
+      }
+      if (typeof body.expiryDurationInSec !== "number" || !Number.isInteger(body.expiryDurationInSec) || body.expiryDurationInSec < 90 || body.expiryDurationInSec > 600) {
+        issues.push({
+          path: ["expiryDurationInSec"],
+          message: "Number must be between 90 and 600",
+          code: "too_small"
+        });
+      }
+      if (typeof body.deploymentId !== "string" || !UUID_RE.test(body.deploymentId)) {
+        issues.push({
+          path: ["deploymentId"],
+          message: "Invalid uuid",
+          code: "invalid_string"
+        });
+      }
+      if (issues.length > 0) {
+        return payErr("Invalid request body", 400, void 0, issues);
+      }
+      const boltConnectionId = String(body.boltConnectionId);
+      if (!findBoltConnection(boltConnectionId)) {
+        return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      }
+      const paymentMethodType = body.paymentMethod.paymentMethodType;
+      const amount = body.amount;
+      const currency = String(body.currency ?? "THB");
+      const expiryDurationInSec = body.expiryDurationInSec;
+      const id = nextBoltIntentId();
+      const now3 = /* @__PURE__ */ new Date();
+      const intent = {
+        id,
+        beamIntentId: id,
+        boltConnectionId,
+        amount,
+        currency,
+        paymentMethodType,
+        referenceId: body.referenceId != null ? String(body.referenceId) : null,
+        internalNote: body.internalNote != null ? String(body.internalNote) : null,
+        status: "PENDING",
+        isVirtual: false,
+        environment: "sandbox",
+        expiresAt: new Date(now3.getTime() + expiryDurationInSec * 1e3),
+        settledAt: null,
+        chargeId: null,
+        failureReason: null,
+        createdAt: now3
+      };
+      state.boltIntents.set(id, intent);
+      return json({
+        id,
+        status: "PENDING",
+        amount,
+        currency,
+        createdAt: now3.toISOString()
+      });
+    }
+    if (!intentId && request.method === "GET") {
+      const deploymentId = url.searchParams.get("deploymentId");
+      if (!deploymentId) {
+        return payErr("Missing deploymentId parameter", 400);
+      }
+      const now3 = /* @__PURE__ */ new Date();
+      const statusParam = url.searchParams.get("status");
+      let requestedStatuses;
+      if (statusParam) {
+        const parts = statusParam.split(",").map((s) => s.trim()).filter(Boolean);
+        const parsed = [];
+        for (const part of parts) {
+          if (!isBoltIntentStatus(part)) {
+            return payErr(`Invalid status: ${part}`, 400);
+          }
+          parsed.push(part);
+        }
+        requestedStatuses = parsed;
+      }
+      const boltConnectionId = url.searchParams.get("boltConnectionId") ?? void 0;
+      const limitParam = url.searchParams.get("limit");
+      let limit = 50;
+      if (limitParam !== null) {
+        const trimmed = limitParam.trim();
+        if (!/^\d+$/.test(trimmed)) {
+          return payErr("limit must be an integer between 1 and 100", 400);
+        }
+        const parsed = Number.parseInt(trimmed, 10);
+        if (!Number.isInteger(parsed) || parsed < 1 || parsed > 100) {
+          return payErr("limit must be an integer between 1 and 100", 400);
+        }
+        limit = parsed;
+      }
+      let intents = [...state.boltIntents.values()];
+      if (boltConnectionId) {
+        intents = intents.filter((i) => i.boltConnectionId === boltConnectionId);
+      }
+      if (requestedStatuses && requestedStatuses.length > 0) {
+        const storedWanted = new Set(storedStatusesForFilter(requestedStatuses));
+        intents = intents.filter((i) => storedWanted.has(i.status));
+      }
+      let records = intents.map((i) => toBoltIntentRecord(i, now3));
+      if (requestedStatuses && requestedStatuses.length > 0) {
+        const wanted = new Set(requestedStatuses);
+        records = records.filter((r) => wanted.has(r.status));
+      }
+      records = records.slice(0, limit);
+      return json({ intents: records });
+    }
+    if (intentId && request.method === "DELETE") {
+      const intent = findBoltIntent(intentId);
+      if (!intent) return payErr("Bolt intent not found", 404, "NOT_FOUND");
+      const derived = deriveBoltIntentStatus(intent.status, intent.expiresAt);
+      if (derived !== "PENDING") {
+        return payErr(`Bolt intent is ${derived}, only PENDING intents can be canceled`, 409);
+      }
+      intent.status = "CANCELED";
+      intent.settledAt = /* @__PURE__ */ new Date();
+      return json({ success: true });
+    }
+  }
+  const chargesMatch = pathname.match(/^\/api\/store\/beam\/([^/]+)\/charges$/);
+  if (chargesMatch && request.method === "GET") {
+    const sourceId = url.searchParams.get("sourceId");
+    if (!sourceId) {
+      return payErr("Missing sourceId parameter", 400);
+    }
+    const charges = state.boltCharges.filter((c) => c.sourceId === sourceId);
+    return json({ charges });
+  }
   const beamProductsMatch = pathname.match(
     /^\/api\/store\/beam\/([^/]+)\/payment-links(?:\/([^/]+))?$/
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/testing",
-  "version": "0.7.1",
+  "version": "0.9.0",
   "description": "Vitest test harness for Stardeck customer apps — in-process Postgres (PGlite) plus a control-plane simulator so the real Stardeck SDKs run unmodified in tests",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -102,7 +102,7 @@
     "@types/node": "^24.10.1",
     "kysely": "^0.27.0",
     "kysely-neon": "^2.0.0",
-    "next": "^16.2.12",
+    "next": "^16.3.0",
     "tsup": "^8.0.0",
     "typescript": "^5.0.0",
     "typescript-eslint": "^8.0.0",