@stardeck-customer-apps/testing 0.8.0 → 0.10.0

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 import * as _stardeck_customer_apps_payments_sdk from '@stardeck-customer-apps/payments-sdk';
 import * as next_server from 'next/server';
 import { PGlite } from '@electric-sql/pglite';
+import { T as TestDataStoreInput } from './data-store-manifest-Zwgcv0DJ.js';
+export { S as STARDECK_DATA_STORES_ENV, a as TestDataStoreManifestEntry, b as buildTestDataStoreManifest } from './data-store-manifest-Zwgcv0DJ.js';
 
 type RouteHandler<Req extends Request = Request, P = Record<string, string | string[]>> = (request: Req, context: {
     params: Promise<P>;
@@ -131,6 +133,53 @@ interface CapturedCheckout {
     metadata?: Record<string, string>;
     createdAt: Date;
 }
+/** Simulated Bolt+ connection as returned by the control-plane store API. */
+interface SimBoltConnection {
+    id: string;
+    projectId: string;
+    beamConnectionId: string;
+    displayName: string | null;
+    pairingCode: string;
+    status: string;
+    isSandbox: boolean;
+    environments: Array<"sandbox" | "preview" | "production">;
+    createdAt: string;
+    updatedAt: string;
+}
+type SimBoltIntentStoredStatus = "PENDING" | "PAID" | "FAILED" | "CANCELED";
+type SimBoltIntentStatus = SimBoltIntentStoredStatus | "EXPIRED";
+/**
+ * Stored Bolt+ intent. `EXPIRED` is never written — derive it from
+ * `expiresAt` on read, matching the real control plane.
+ */
+type SimBoltPaymentMethod = _stardeck_customer_apps_payments_sdk.BeamBoltPaymentMethod;
+/** Bolt intent as returned by list/get helpers (timestamps ISO; nullables are null). */
+interface SimBoltIntentRecord {
+    id: string;
+    beamIntentId: string;
+    boltConnectionId: string;
+    amount: number;
+    currency: string;
+    paymentMethodType: SimBoltPaymentMethod;
+    referenceId: string | null;
+    internalNote: string | null;
+    status: SimBoltIntentStatus;
+    isVirtual: boolean;
+    environment: "sandbox" | "preview" | "production";
+    expiresAt: string;
+    settledAt: string | null;
+    chargeId: string | null;
+    failureReason: string | null;
+    createdAt: string;
+}
+interface SimBoltCharge {
+    id: string;
+    status: "SUCCEEDED" | "FAILED" | "PENDING";
+    amount?: number;
+    currency?: string;
+    sourceId?: string;
+    createdAt?: string;
+}
 interface TestPayments {
     get checkouts(): CapturedCheckout[];
     latest(): CapturedCheckout | undefined;
@@ -153,6 +202,30 @@ interface TestPayments {
         path?: string;
         deploymentSecret?: string;
     }): Promise<Response>;
+    /**
+     * Mark a PENDING bolt intent PAID and record a SUCCEEDED charge. Does not
+     * deliver a webhook — call `deliverBeamEvent` with `charge.succeeded` (reuse
+     * the existing signing path) after approving, the same way `markPaid` pairs
+     * with `deliverStripeEvent` / `deliverBeamEvent`.
+     */
+    approveBoltIntent(intentId: string, options?: {
+        chargeId?: string;
+    }): SimBoltCharge;
+    /**
+     * Mark a PENDING bolt intent FAILED and record a FAILED charge.
+     * Delivers no webhook: Beam's catalog has no charge-failure event for bolt
+     * payments, and the real product notifies the app of nothing on decline.
+     */
+    declineBoltIntent(intentId: string, options?: {
+        failureReason?: string;
+    }): SimBoltCharge;
+    /**
+     * Backdate `expiresAt` so the intent derives as EXPIRED on the next read.
+     * Delivers no webhook: Beam does not notify apps when a bolt intent expires.
+     */
+    expireBoltIntent(intentId: string): void;
+    listBoltIntents(): SimBoltIntentRecord[];
+    getBoltIntent(intentId: string): SimBoltIntentRecord | undefined;
     clear(): void;
     get count(): number;
 }
@@ -366,6 +439,13 @@ interface TestEdge {
     get count(): number;
 }
 interface TestAppOptions {
+    /** Data stores exposed through the production-shaped STARDECK_DATA_STORES manifest. */
+    dataStores?: TestDataStoreInput[];
+    /**
+     * Force the legacy single-store DATA_STORE_URL on or off. By default it is
+     * present only for the zero-config manifest, and omitted once a manifest is configured.
+     */
+    legacyDataStoreUrl?: boolean;
     /**
      * Path to the schema.sql snapshot generated by
      * `npx stardeck-data-store generate-types` (relative to the project root).
@@ -446,6 +526,7 @@ declare function parseWorkflowName(describeTitle: string): string | null;
 
 declare const CONTROL_PLANE_TEST_URL = "https://control-plane.stardeck.test";
 declare const DATA_STORE_TEST_HOST = "db.stardeck.test";
+declare const DATA_STORE_TEST_URL = "postgresql://test:test@db.stardeck.test/main";
 declare const STORAGE_TEST_URL = "https://storage.stardeck.test";
 declare const STORAGE_TEST_HOST = "storage.stardeck.test";
 declare const TEST_ENV_DEFAULTS: {
@@ -454,10 +535,9 @@ declare const TEST_ENV_DEFAULTS: {
     readonly ORGANIZATION_ID: "00000000-0000-4000-8000-00000000000a";
     readonly PROJECT_ID: "00000000-0000-4000-8000-00000000000b";
     readonly DEPLOYMENT_ID: "00000000-0000-4000-8000-00000000000c";
-    readonly DATA_STORE_URL: "postgresql://test:test@db.stardeck.test/main";
     readonly STORAGE_URL: "https://storage.stardeck.test";
 };
 /** Default location of the DDL snapshot written by `generate-types`. */
 declare const DEFAULT_SCHEMA_PATH = "./src/generated/data-store-schema.sql";
 
-export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };
+export { type BindingInfo, CONTROL_PLANE_TEST_URL, type CallRouteOptions, type CapturedCheckout, type CapturedDisplay, type CapturedEmail, type CapturedIdentity, type CapturedIdentityLink, type CapturedMessage, type CapturedPrint, type CapturedTestPrint, type CapturedUpload, DATA_STORE_TEST_HOST, DATA_STORE_TEST_URL, DEFAULT_SCHEMA_PATH, type DeviceInfo, type PeripheralInfo, STORAGE_TEST_HOST, STORAGE_TEST_URL, type SessionTokens, type SimBoltCharge, type SimBoltConnection, type SimBoltIntentRecord, type SimBoltIntentStatus, TEST_ENV_DEFAULTS, type TestApp, type TestAppOptions, TestDataStoreInput, type TestDirectory, type TestEdge, type TestInbox, type TestMessages, type TestPayments, type TestStorage, type TestUser, WORKFLOW_NAME_PREFIX, callRoute, createTestApp, describeWorkflow, parseWorkflowName };

package/dist/index.js

@@ -32,11 +32,14 @@ var index_exports = {};
 __export(index_exports, {
   CONTROL_PLANE_TEST_URL: () => CONTROL_PLANE_TEST_URL,
   DATA_STORE_TEST_HOST: () => DATA_STORE_TEST_HOST,
+  DATA_STORE_TEST_URL: () => DATA_STORE_TEST_URL,
   DEFAULT_SCHEMA_PATH: () => DEFAULT_SCHEMA_PATH,
+  STARDECK_DATA_STORES_ENV: () => STARDECK_DATA_STORES_ENV,
   STORAGE_TEST_HOST: () => STORAGE_TEST_HOST,
   STORAGE_TEST_URL: () => STORAGE_TEST_URL,
   TEST_ENV_DEFAULTS: () => TEST_ENV_DEFAULTS,
   WORKFLOW_NAME_PREFIX: () => WORKFLOW_NAME_PREFIX,
+  buildTestDataStoreManifest: () => buildTestDataStoreManifest,
   callRoute: () => callRoute,
   createTestApp: () => createTestApp,
   describeWorkflow: () => describeWorkflow,
@@ -93,6 +96,7 @@ function globalSingleton(key, create) {
 // src/state.ts
 var state = globalSingleton("state", () => ({
   db: null,
+  lastHarnessDataStoreManifest: null,
   currentUser: null,
   sessions: /* @__PURE__ */ new Map(),
   refreshSessions: /* @__PURE__ */ new Map(),
@@ -105,6 +109,13 @@ var state = globalSingleton("state", () => ({
   sessionStatuses: /* @__PURE__ */ new Map(),
   paymentLinks: /* @__PURE__ */ new Map(),
   products: [],
+  boltConnections: /* @__PURE__ */ new Map(),
+  boltUsedPairingCodes: /* @__PURE__ */ new Set(),
+  boltConnectionCounter: 0,
+  boltIntents: /* @__PURE__ */ new Map(),
+  boltIntentCounter: 0,
+  boltCharges: [],
+  boltChargeCounter: 0,
   uploads: [],
   uploadCounter: 0,
   storageFiles: /* @__PURE__ */ new Map(),
@@ -134,6 +145,7 @@ function requireDb() {
 var TEST_DOMAIN_SUFFIX = ".stardeck.test";
 var CONTROL_PLANE_TEST_URL = "https://control-plane.stardeck.test";
 var DATA_STORE_TEST_HOST = "db.stardeck.test";
+var DATA_STORE_TEST_URL = `postgresql://test:test@${DATA_STORE_TEST_HOST}/main`;
 var STORAGE_TEST_URL = "https://storage.stardeck.test";
 var STORAGE_TEST_HOST = "storage.stardeck.test";
 var TEST_ENV_DEFAULTS = {
@@ -142,7 +154,6 @@ var TEST_ENV_DEFAULTS = {
   ORGANIZATION_ID: "00000000-0000-4000-8000-00000000000a",
   PROJECT_ID: "00000000-0000-4000-8000-00000000000b",
   DEPLOYMENT_ID: "00000000-0000-4000-8000-00000000000c",
-  DATA_STORE_URL: `postgresql://test:test@${DATA_STORE_TEST_HOST}/main`,
   STORAGE_URL: STORAGE_TEST_URL
 };
 var DEFAULT_TEST_USER = {
@@ -1242,8 +1253,31 @@ function signEventDelivery(secret, context, rawBody) {
 }
 
 // src/simulator/payments.ts
-function payErr(error, status = 400, code) {
-  return json(code ? { error, code } : { error }, status);
+var BEAM_BOLT_PAYMENT_METHODS = [
+  "CARD",
+  "CARD_INSTALLMENTS",
+  "QR_PROMPT_PAY",
+  "ALIPAY",
+  "ALIPAY_PLUS",
+  "LINE_PAY",
+  "SHOPEE_PAY",
+  "TRUE_MONEY",
+  "WECHAT_PAY",
+  "SPAY_LATER"
+];
+var BEAM_BOLT_INTENT_STATUSES = ["PENDING", "PAID", "FAILED", "CANCELED", "EXPIRED"];
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function payErr(error, status = 400, code, details) {
+  const body = { error };
+  if (code) body.code = code;
+  if (details !== void 0) body.details = details;
+  return json(body, status);
+}
+function isBoltPaymentMethod(value) {
+  return typeof value === "string" && BEAM_BOLT_PAYMENT_METHODS.includes(value);
+}
+function isBoltIntentStatus(value) {
+  return BEAM_BOLT_INTENT_STATUSES.includes(value);
 }
 function nextCheckoutId() {
   state.checkoutCounter += 1;
@@ -1253,6 +1287,18 @@ function nextPaymentLinkId() {
   state.checkoutCounter += 1;
   return `plink_test_${state.checkoutCounter}`;
 }
+function nextBoltConnectionId() {
+  state.boltConnectionCounter += 1;
+  return `boltc_${state.boltConnectionCounter}`;
+}
+function nextBoltIntentId() {
+  state.boltIntentCounter += 1;
+  return `bolti_${state.boltIntentCounter}`;
+}
+function nextBoltChargeId() {
+  state.boltChargeCounter += 1;
+  return `chrg_${state.boltChargeCounter}`;
+}
 function seedStripeSession(id, body) {
   const lineItems = body.lineItems ?? [];
   let amountTotal = null;
@@ -1296,6 +1342,58 @@ function seedBeamLink(id, body, merchantId) {
     collectDeliveryAddress: body.collectDeliveryAddress === true
   });
 }
+function deriveBoltIntentStatus(storedStatus, expiresAt, now3 = /* @__PURE__ */ new Date()) {
+  if (storedStatus !== "PENDING") return storedStatus;
+  return expiresAt.getTime() <= now3.getTime() ? "EXPIRED" : "PENDING";
+}
+function toBoltIntentRecord(intent, now3 = /* @__PURE__ */ new Date()) {
+  return {
+    id: intent.id,
+    beamIntentId: intent.beamIntentId,
+    boltConnectionId: intent.boltConnectionId,
+    amount: intent.amount,
+    currency: intent.currency,
+    paymentMethodType: intent.paymentMethodType,
+    referenceId: intent.referenceId,
+    internalNote: intent.internalNote,
+    status: deriveBoltIntentStatus(intent.status, intent.expiresAt, now3),
+    isVirtual: intent.isVirtual,
+    environment: intent.environment,
+    expiresAt: intent.expiresAt.toISOString(),
+    settledAt: intent.settledAt ? intent.settledAt.toISOString() : null,
+    chargeId: intent.chargeId,
+    failureReason: intent.failureReason,
+    createdAt: intent.createdAt.toISOString()
+  };
+}
+function findBoltConnection(connectionId) {
+  return state.boltConnections.get(connectionId) ?? [...state.boltConnections.values()].find((c) => c.beamConnectionId === connectionId);
+}
+function findBoltIntent(intentId) {
+  return state.boltIntents.get(intentId) ?? [...state.boltIntents.values()].find((i) => i.beamIntentId === intentId);
+}
+function requirePendingBoltIntent(intentId) {
+  const intent = findBoltIntent(intentId);
+  if (!intent) {
+    throw new Error(`[stardeck-testing] Unknown bolt intent id: ${intentId}`);
+  }
+  const derived = deriveBoltIntentStatus(intent.status, intent.expiresAt);
+  if (derived !== "PENDING") {
+    throw new Error(`[stardeck-testing] Bolt intent ${intentId} is ${derived}, expected PENDING`);
+  }
+  return intent;
+}
+function storedStatusesForFilter(statuses) {
+  const stored = /* @__PURE__ */ new Set();
+  for (const status of statuses) {
+    if (status === "EXPIRED" || status === "PENDING") {
+      stored.add("PENDING");
+    } else {
+      stored.add(status);
+    }
+  }
+  return [...stored];
+}
 async function deliverEvent(envelope, handler, options) {
   const rawBody = JSON.stringify(envelope);
   const secret = options?.deploymentSecret ?? TEST_ENV_DEFAULTS.DEPLOYMENT_SECRET;
@@ -1318,9 +1416,219 @@ async function deliverEvent(envelope, handler, options) {
 }
 async function handlePaymentsRequest(request, url) {
   const pathname = url.pathname;
-  if (/\/bolt-connections/.test(pathname) || /\/bolt-intents/.test(pathname) || /\/charges(\/|$)/.test(pathname) || /\/billing-portal$/.test(pathname)) {
+  if (/\/billing-portal$/.test(pathname)) {
     return payErr("Not found", 404, "NOT_FOUND");
   }
+  const boltConnectionsMatch = pathname.match(
+    /^\/api\/store\/beam\/([^/]+)\/bolt-connections(?:\/([^/]+))?$/
+  );
+  if (boltConnectionsMatch) {
+    const connectionId = boltConnectionsMatch[2];
+    if (!connectionId && request.method === "POST") {
+      const body = await readJsonBody(request);
+      const pairingCode = body.pairingCode ? String(body.pairingCode) : "";
+      if (!pairingCode) {
+        return payErr("pairingCode is required", 400);
+      }
+      if (state.boltUsedPairingCodes.has(pairingCode)) {
+        return payErr("Pairing code has already been used", 400, "PAIRING_CODE_USED");
+      }
+      const id = nextBoltConnectionId();
+      const now3 = (/* @__PURE__ */ new Date()).toISOString();
+      const environments = Array.isArray(body.environments) ? body.environments.map(String) : ["sandbox"];
+      const isSandbox = environments.some((e) => e === "sandbox" || e === "preview");
+      const connection = {
+        id,
+        projectId: TEST_ENV_DEFAULTS.PROJECT_ID,
+        beamConnectionId: id,
+        displayName: body.displayName != null ? String(body.displayName) : null,
+        pairingCode,
+        status: "ACTIVE",
+        isSandbox,
+        environments,
+        createdAt: now3,
+        updatedAt: now3
+      };
+      state.boltUsedPairingCodes.add(pairingCode);
+      state.boltConnections.set(id, connection);
+      return json({ connection });
+    }
+    if (!connectionId && request.method === "GET") {
+      return json({ connections: [...state.boltConnections.values()] });
+    }
+    if (connectionId && request.method === "GET") {
+      const connection = findBoltConnection(connectionId);
+      if (!connection) return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      return json({ connection });
+    }
+    if (connectionId && request.method === "DELETE") {
+      const connection = findBoltConnection(connectionId);
+      if (!connection) return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      state.boltConnections.delete(connection.id);
+      return json({ success: true });
+    }
+  }
+  const boltIntentsMatch = pathname.match(
+    /^\/api\/store\/beam\/([^/]+)\/bolt-intents(?:\/([^/]+))?$/
+  );
+  if (boltIntentsMatch) {
+    const intentId = boltIntentsMatch[2];
+    if (!intentId && request.method === "POST") {
+      const body = await readJsonBody(request);
+      const issues = [];
+      if (typeof body.amount !== "number" || !Number.isInteger(body.amount) || body.amount < 1) {
+        issues.push({
+          path: ["amount"],
+          message: "Number must be greater than 0",
+          code: "too_small"
+        });
+      }
+      const boltConnectionIdRaw = body.boltConnectionId;
+      if (typeof boltConnectionIdRaw !== "string" || boltConnectionIdRaw.length < 1) {
+        issues.push({
+          path: ["boltConnectionId"],
+          message: "String must contain at least 1 character(s)",
+          code: "too_small"
+        });
+      }
+      const paymentMethod = body.paymentMethod;
+      if (!paymentMethod || typeof paymentMethod !== "object") {
+        issues.push({
+          path: ["paymentMethod"],
+          message: "Required",
+          code: "invalid_type"
+        });
+      } else if (!isBoltPaymentMethod(paymentMethod.paymentMethodType)) {
+        issues.push({
+          path: ["paymentMethod", "paymentMethodType"],
+          message: "Invalid enum value",
+          code: "invalid_enum_value"
+        });
+      }
+      if (typeof body.expiryDurationInSec !== "number" || !Number.isInteger(body.expiryDurationInSec) || body.expiryDurationInSec < 90 || body.expiryDurationInSec > 600) {
+        issues.push({
+          path: ["expiryDurationInSec"],
+          message: "Number must be between 90 and 600",
+          code: "too_small"
+        });
+      }
+      if (typeof body.deploymentId !== "string" || !UUID_RE.test(body.deploymentId)) {
+        issues.push({
+          path: ["deploymentId"],
+          message: "Invalid uuid",
+          code: "invalid_string"
+        });
+      }
+      if (issues.length > 0) {
+        return payErr("Invalid request body", 400, void 0, issues);
+      }
+      const boltConnectionId = String(body.boltConnectionId);
+      if (!findBoltConnection(boltConnectionId)) {
+        return payErr("Bolt connection not found", 404, "NOT_FOUND");
+      }
+      const paymentMethodType = body.paymentMethod.paymentMethodType;
+      const amount = body.amount;
+      const currency = String(body.currency ?? "THB");
+      const expiryDurationInSec = body.expiryDurationInSec;
+      const id = nextBoltIntentId();
+      const now3 = /* @__PURE__ */ new Date();
+      const intent = {
+        id,
+        beamIntentId: id,
+        boltConnectionId,
+        amount,
+        currency,
+        paymentMethodType,
+        referenceId: body.referenceId != null ? String(body.referenceId) : null,
+        internalNote: body.internalNote != null ? String(body.internalNote) : null,
+        status: "PENDING",
+        isVirtual: false,
+        environment: "sandbox",
+        expiresAt: new Date(now3.getTime() + expiryDurationInSec * 1e3),
+        settledAt: null,
+        chargeId: null,
+        failureReason: null,
+        createdAt: now3
+      };
+      state.boltIntents.set(id, intent);
+      return json({
+        id,
+        status: "PENDING",
+        amount,
+        currency,
+        createdAt: now3.toISOString()
+      });
+    }
+    if (!intentId && request.method === "GET") {
+      const deploymentId = url.searchParams.get("deploymentId");
+      if (!deploymentId) {
+        return payErr("Missing deploymentId parameter", 400);
+      }
+      const now3 = /* @__PURE__ */ new Date();
+      const statusParam = url.searchParams.get("status");
+      let requestedStatuses;
+      if (statusParam) {
+        const parts = statusParam.split(",").map((s) => s.trim()).filter(Boolean);
+        const parsed = [];
+        for (const part of parts) {
+          if (!isBoltIntentStatus(part)) {
+            return payErr(`Invalid status: ${part}`, 400);
+          }
+          parsed.push(part);
+        }
+        requestedStatuses = parsed;
+      }
+      const boltConnectionId = url.searchParams.get("boltConnectionId") ?? void 0;
+      const limitParam = url.searchParams.get("limit");
+      let limit = 50;
+      if (limitParam !== null) {
+        const trimmed = limitParam.trim();
+        if (!/^\d+$/.test(trimmed)) {
+          return payErr("limit must be an integer between 1 and 100", 400);
+        }
+        const parsed = Number.parseInt(trimmed, 10);
+        if (!Number.isInteger(parsed) || parsed < 1 || parsed > 100) {
+          return payErr("limit must be an integer between 1 and 100", 400);
+        }
+        limit = parsed;
+      }
+      let intents = [...state.boltIntents.values()];
+      if (boltConnectionId) {
+        intents = intents.filter((i) => i.boltConnectionId === boltConnectionId);
+      }
+      if (requestedStatuses && requestedStatuses.length > 0) {
+        const storedWanted = new Set(storedStatusesForFilter(requestedStatuses));
+        intents = intents.filter((i) => storedWanted.has(i.status));
+      }
+      let records = intents.map((i) => toBoltIntentRecord(i, now3));
+      if (requestedStatuses && requestedStatuses.length > 0) {
+        const wanted = new Set(requestedStatuses);
+        records = records.filter((r) => wanted.has(r.status));
+      }
+      records = records.slice(0, limit);
+      return json({ intents: records });
+    }
+    if (intentId && request.method === "DELETE") {
+      const intent = findBoltIntent(intentId);
+      if (!intent) return payErr("Bolt intent not found", 404, "NOT_FOUND");
+      const derived = deriveBoltIntentStatus(intent.status, intent.expiresAt);
+      if (derived !== "PENDING") {
+        return payErr(`Bolt intent is ${derived}, only PENDING intents can be canceled`, 409);
+      }
+      intent.status = "CANCELED";
+      intent.settledAt = /* @__PURE__ */ new Date();
+      return json({ success: true });
+    }
+  }
+  const chargesMatch = pathname.match(/^\/api\/store\/beam\/([^/]+)\/charges$/);
+  if (chargesMatch && request.method === "GET") {
+    const sourceId = url.searchParams.get("sourceId");
+    if (!sourceId) {
+      return payErr("Missing sourceId parameter", 400);
+    }
+    const charges = state.boltCharges.filter((c) => c.sourceId === sourceId);
+    return json({ charges });
+  }
   const beamProductsMatch = pathname.match(
     /^\/api\/store\/beam\/([^/]+)\/payment-links(?:\/([^/]+))?$/
   );
@@ -1455,12 +1763,70 @@ function createPayments() {
       };
       return deliverEvent(envelope, handler, options);
     },
+    approveBoltIntent(intentId, options) {
+      const intent = requirePendingBoltIntent(intentId);
+      const chargeId = options?.chargeId ?? nextBoltChargeId();
+      const charge = {
+        id: chargeId,
+        status: "SUCCEEDED",
+        amount: intent.amount,
+        currency: intent.currency,
+        sourceId: intent.beamIntentId,
+        createdAt: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      intent.status = "PAID";
+      intent.chargeId = chargeId;
+      intent.settledAt = /* @__PURE__ */ new Date();
+      state.boltCharges.push(charge);
+      return charge;
+    },
+    // No webhook on decline: Beam has no charge-failure event for bolt payments.
+    declineBoltIntent(intentId, options) {
+      const intent = requirePendingBoltIntent(intentId);
+      const chargeId = nextBoltChargeId();
+      const failureReason = options?.failureReason ?? "declined";
+      const charge = {
+        id: chargeId,
+        status: "FAILED",
+        amount: intent.amount,
+        currency: intent.currency,
+        sourceId: intent.beamIntentId,
+        createdAt: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      intent.status = "FAILED";
+      intent.chargeId = chargeId;
+      intent.failureReason = failureReason;
+      intent.settledAt = /* @__PURE__ */ new Date();
+      state.boltCharges.push(charge);
+      return charge;
+    },
+    // No webhook on expire: Beam does not notify apps when a bolt intent expires.
+    expireBoltIntent(intentId) {
+      const intent = requirePendingBoltIntent(intentId);
+      intent.expiresAt = new Date(Date.now() - 1e3);
+    },
+    listBoltIntents() {
+      const now3 = /* @__PURE__ */ new Date();
+      return [...state.boltIntents.values()].map((i) => toBoltIntentRecord(i, now3));
+    },
+    getBoltIntent(intentId) {
+      const intent = findBoltIntent(intentId);
+      if (!intent) return void 0;
+      return toBoltIntentRecord(intent);
+    },
     clear() {
       state.checkouts = [];
       state.checkoutCounter = 0;
       state.sessionStatuses.clear();
       state.paymentLinks.clear();
       state.products = [];
+      state.boltConnections.clear();
+      state.boltUsedPairingCodes.clear();
+      state.boltConnectionCounter = 0;
+      state.boltIntents.clear();
+      state.boltIntentCounter = 0;
+      state.boltCharges = [];
+      state.boltChargeCounter = 0;
     },
     get count() {
       return state.checkouts.length;
@@ -2241,11 +2607,89 @@ function uninstallFetchRouter() {
   }
 }
 
+// src/data-store-manifest.ts
+var STARDECK_DATA_STORES_ENV = "STARDECK_DATA_STORES";
+function dataStoreSlug(name) {
+  const slug = name.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+  return slug || "store";
+}
+function buildTestDataStoreManifest(inputs = [{}]) {
+  const takenSlugs = /* @__PURE__ */ new Set();
+  const takenBindingKeys = /* @__PURE__ */ new Set();
+  const takenIds = /* @__PURE__ */ new Set();
+  return inputs.map((input, index) => {
+    for (const field of ["bindingKey", "slug", "name"]) {
+      if (input[field] === "") {
+        throw new Error(`[stardeck-testing] dataStores[${index}].${field} cannot be empty.`);
+      }
+    }
+    let slug;
+    if (input.slug !== void 0) {
+      slug = input.slug;
+      if (takenSlugs.has(slug)) {
+        throw new Error(`[stardeck-testing] dataStores[${index}].slug must be unique.`);
+      }
+    } else {
+      const base = input.name !== void 0 ? dataStoreSlug(input.name) : index === 0 ? "main" : null;
+      if (base === null) {
+        throw new Error(
+          `[stardeck-testing] dataStores[${index}] requires a slug or name. Only the first entry defaults to the "main" slug.`
+        );
+      }
+      slug = base;
+      let suffix = 2;
+      while (takenSlugs.has(slug)) {
+        slug = `${base}_${suffix}`;
+        suffix++;
+      }
+    }
+    const id = input.id ?? `00000000-0000-4000-8000-${String(index + 1).padStart(12, "0")}`;
+    if (takenIds.has(id)) {
+      throw new Error(`[stardeck-testing] dataStores[${index}].id must be unique.`);
+    }
+    if (input.bindingKey !== void 0 && takenBindingKeys.has(input.bindingKey)) {
+      throw new Error(`[stardeck-testing] dataStores[${index}].bindingKey must be unique.`);
+    }
+    takenSlugs.add(slug);
+    takenIds.add(id);
+    if (input.bindingKey !== void 0) takenBindingKeys.add(input.bindingKey);
+    const storeType = input.storeType ?? "database";
+    return {
+      id,
+      name: input.name ?? slug,
+      slug,
+      storeType,
+      accessLevel: input.accessLevel ?? "admin",
+      ...storeType === "database" ? { url: input.url ?? DATA_STORE_TEST_URL } : {},
+      ...input.bindingKey ? { bindingKey: input.bindingKey } : {}
+    };
+  });
+}
+
 // src/test-app.ts
-function applyTestEnv() {
+function applyTestEnv(options) {
   for (const [key, value] of Object.entries(TEST_ENV_DEFAULTS)) {
     process.env[key] = value;
   }
+  let manifestAdopted = true;
+  if (options.dataStores !== void 0) {
+    const manifest = JSON.stringify(buildTestDataStoreManifest(options.dataStores));
+    process.env[STARDECK_DATA_STORES_ENV] = manifest;
+    state.lastHarnessDataStoreManifest = manifest;
+  } else {
+    const currentManifest = process.env[STARDECK_DATA_STORES_ENV];
+    if (!currentManifest || currentManifest === state.lastHarnessDataStoreManifest) {
+      const manifest = JSON.stringify(buildTestDataStoreManifest());
+      process.env[STARDECK_DATA_STORES_ENV] = manifest;
+      state.lastHarnessDataStoreManifest = manifest;
+      manifestAdopted = false;
+    }
+  }
+  if (options.legacyDataStoreUrl === true || !manifestAdopted && options.legacyDataStoreUrl === void 0) {
+    process.env.DATA_STORE_URL = DATA_STORE_TEST_URL;
+  } else {
+    delete process.env.DATA_STORE_URL;
+  }
   delete process.env.DISABLE_AUTH;
   delete process.env.NEXT_PUBLIC_DISABLE_AUTH;
   delete process.env.SANDBOX_MODE;
@@ -2278,7 +2722,7 @@ async function createTestApp(options = {}) {
       "[stardeck-testing] A test app is already active in this test file. Call `app.close()` first, or share one app per file."
     );
   }
-  applyTestEnv();
+  applyTestEnv(options);
   state.allowNetwork = options.allowNetwork ?? false;
   installFetchRouter();
   const db = await createPgliteDatabase();
@@ -2380,11 +2824,14 @@ function parseWorkflowName(describeTitle) {
 0 && (module.exports = {
   CONTROL_PLANE_TEST_URL,
   DATA_STORE_TEST_HOST,
+  DATA_STORE_TEST_URL,
   DEFAULT_SCHEMA_PATH,
+  STARDECK_DATA_STORES_ENV,
   STORAGE_TEST_HOST,
   STORAGE_TEST_URL,
   TEST_ENV_DEFAULTS,
   WORKFLOW_NAME_PREFIX,
+  buildTestDataStoreManifest,
   callRoute,
   createTestApp,
   describeWorkflow,