tapimo 0.0.2 → 0.2.0

package/src/apps/{webhooks.test.ts → data/routes/webhooks.test.ts}

@@ -1,11 +1,11 @@
-import { Store, Webhooks as Core } from 'cadent'
-
-import * as Tidx from '../internal/Tidx.js'
-import * as Viem from '../internal/Viem.js'
-import * as TestApp from '../../test/App.js'
-import * as Mppx from '../../test/Mppx.js'
-import * as Runtime from '../../test/runtime.js'
-import * as Tempo from '../../test/Tempo.js'
+import { type Db, Webhooks as Core } from 'tapimo'
+
+import * as Tidx from '../../../internal/Tidx.js'
+import * as Viem from '../../../internal/Viem.js'
+import * as TestApp from '../../../../test/App.js'
+import * as Mppx from '../../../../test/Mppx.js'
+import * as Runtime from '../../../../test/runtime.js'
+import * as Tempo from '../../../../test/Tempo.js'
 import * as Webhooks from './webhooks.js'
 
 /** API key with both webhook scopes, owned by `org_test`. */
@@ -14,7 +14,7 @@ const writer = {
   orgId: 'org_test',
   scopes: ['webhooks:read', 'webhooks:write'],
   token: 'secret_writer',
-} satisfies TestApp.source.Key
+} satisfies TestApp.kvStore.Key
 
 /** API key with read-only webhook scope, owned by `org_test`. */
 const reader = {
@@ -22,7 +22,7 @@ const reader = {
   orgId: 'org_test',
   scopes: ['webhooks:read'],
   token: 'secret_reader',
-} satisfies TestApp.source.Key
+} satisfies TestApp.kvStore.Key
 
 /** API key in a different org, used to prove owner isolation. */
 const other = {
@@ -30,13 +30,12 @@ const other = {
   orgId: 'org_other',
   scopes: ['webhooks:read', 'webhooks:write'],
   token: 'secret_other',
-} satisfies TestApp.source.Key
+} satisfies TestApp.kvStore.Key
 
-/** Creates a webhooks-enabled test client backed by an in-memory state store. */
-function client(keys: readonly TestApp.source.Key[] = [writer, reader, other]) {
+/** Creates a webhooks-enabled test client backed by an in-memory state db. */
+function client(keys: readonly TestApp.kvStore.Key[] = [writer, reader, other]) {
   return TestApp.client({
-    auth: { source: TestApp.source({ keys }) },
-    webhook: { store: Store.memory() },
+    auth: { keys },
   })
 }
 
@@ -52,7 +51,7 @@ const validBody = {
 } as const
 
 describe('feature gate', () => {
-  test('returns 404 when no state store is configured', async () => {
+  test('returns 404 when webhooks are disabled', async () => {
     // Routes stay mounted for a stable schema, but the resource is disabled.
     // `event-types` requires `data:read`, so seed a key that holds it to reach
     // the feature gate rather than tripping the scope check first.
@@ -61,8 +60,8 @@ describe('feature gate', () => {
       orgId: 'org_test',
       scopes: ['data:read'],
       token: 'secret_data_reader',
-    } satisfies TestApp.source.Key
-    const disabled = TestApp.client({ auth: { source: TestApp.source({ keys: [dataReader] }) } })
+    } satisfies TestApp.kvStore.Key
+    const disabled = TestApp.client({ auth: { keys: [dataReader] }, webhook: false })
     const response = await disabled.v1.webhooks['event-types'].$get({}, as(dataReader))
 
     expect(response.status).toMatchInlineSnapshot(`404`)
@@ -97,7 +96,7 @@ describe('access matrix', () => {
       orgId: 'org_test',
       scopes: ['data:read'],
       token: 'secret_noscope',
-    } satisfies TestApp.source.Key
+    } satisfies TestApp.kvStore.Key
     const response = await client([noScope]).v1.webhooks.$get({ query: {} }, as(noScope))
     const body = (await response.json()) as { error?: { code?: string } }
 
@@ -142,7 +141,7 @@ describe('access matrix', () => {
       orgId: 'org_test',
       scopes: ['data:read'],
       token: 'secret_data_reader',
-    } satisfies TestApp.source.Key
+    } satisfies TestApp.kvStore.Key
     const response = await client([dataReader]).v1.webhooks['event-types'].$get({}, as(dataReader))
 
     expect(response.status).toMatchInlineSnapshot(`200`)
@@ -272,8 +271,8 @@ describe('owner isolation', () => {
 describe('subscription limits', () => {
   test('rejects creation past the configured per-owner cap with 403 limit_exceeded', async () => {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer, other] }) },
-      webhook: { maxPerOwner: 2, store: Store.memory() },
+      auth: { keys: [writer, other] },
+      webhook: { maxPerOwner: 2 },
     })
 
     // Fill the writer's quota.
@@ -317,20 +316,20 @@ describe('delivery log', () => {
   }
 
   /** Seeds a subscription owned by `writer` plus `count` delivery rows. */
-  async function seed(store: ReturnType<typeof Store.memory>, count: number) {
+  async function seed(db: Db.Db, count: number) {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer, reader, other] }) },
-      webhook: { store },
+      auth: { keys: [writer, reader, other] },
+      db,
     })
     const created = await app.v1.webhooks.$post({ json: validBody }, as(writer))
     const { id } = await TestApp.json(created, Webhooks.schema.createWebhook.Response)
-    for (let n = 1; n <= count; n++) await Core.recordDelivery(store, row(id, n))
+    for (let n = 1; n <= count; n++) await Core.recordDelivery(db, row(id, n))
     return { app, id }
   }
 
   test('lists a subscription deliveries newest-first', async () => {
-    const store = Store.memory()
-    const { app, id } = await seed(store, 3)
+    const db = TestApp.database()
+    const { app, id } = await seed(db, 3)
 
     const response = await app.v1.webhooks[':id{wh_[A-Za-z0-9_-]+}'].deliveries.$get(
       { param: { id }, query: {} },
@@ -349,8 +348,8 @@ describe('delivery log', () => {
   })
 
   test('embeds the exact delivery total via include=totalCount', async () => {
-    const store = Store.memory()
-    const { app, id } = await seed(store, 8)
+    const db = TestApp.database()
+    const { app, id } = await seed(db, 8)
 
     const response = await app.v1.webhooks[':id{wh_[A-Za-z0-9_-]+}'].deliveries.$get(
       { param: { id }, query: { include: 'totalCount', limit: '5' } },
@@ -372,8 +371,8 @@ describe('delivery log', () => {
   })
 
   test('paginates with cursor and limit', async () => {
-    const store = Store.memory()
-    const { app, id } = await seed(store, 6)
+    const db = TestApp.database()
+    const { app, id } = await seed(db, 6)
 
     const first = await app.v1.webhooks[':id{wh_[A-Za-z0-9_-]+}'].deliveries.$get(
       { param: { id }, query: { limit: '5' } },
@@ -397,8 +396,8 @@ describe('delivery log', () => {
   })
 
   test('serves a positional page via `page` (deterministic in-memory slice)', async () => {
-    const store = Store.memory()
-    const { app, id } = await seed(store, 6)
+    const db = TestApp.database()
+    const { app, id } = await seed(db, 6)
 
     const response = await app.v1.webhooks[':id{wh_[A-Za-z0-9_-]+}'].deliveries.$get(
       { param: { id }, query: { limit: '5', page: '2' } },
@@ -411,8 +410,8 @@ describe('delivery log', () => {
   })
 
   test('rejects `page` combined with `cursor`', async () => {
-    const store = Store.memory()
-    const { app, id } = await seed(store, 6)
+    const db = TestApp.database()
+    const { app, id } = await seed(db, 6)
 
     const first = await app.v1.webhooks[':id{wh_[A-Za-z0-9_-]+}'].deliveries.$get(
       { param: { id }, query: { limit: '5' } },
@@ -428,8 +427,8 @@ describe('delivery log', () => {
   })
 
   test('a read-only key can list deliveries', async () => {
-    const store = Store.memory()
-    const { app, id } = await seed(store, 1)
+    const db = TestApp.database()
+    const { app, id } = await seed(db, 1)
 
     const response = await app.v1.webhooks[':id{wh_[A-Za-z0-9_-]+}'].deliveries.$get(
       { param: { id }, query: {} },
@@ -439,8 +438,8 @@ describe('delivery log', () => {
   })
 
   test('a different org cannot read another org deliveries', async () => {
-    const store = Store.memory()
-    const { app, id } = await seed(store, 1)
+    const db = TestApp.database()
+    const { app, id } = await seed(db, 1)
 
     const response = await app.v1.webhooks[':id{wh_[A-Za-z0-9_-]+}'].deliveries.$get(
       { param: { id }, query: {} },
@@ -491,8 +490,7 @@ describe('SSRF protection', () => {
 describe('subscription context', () => {
   test('round-trips context through create and read', async () => {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const context = {
       description: 'Notify #ops when a large USDC transfer settles.',
@@ -523,8 +521,7 @@ describe('subscription context', () => {
 
   test('clears context with an explicit null patch', async () => {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const created = await app.v1.webhooks.$post(
       {
@@ -548,8 +545,7 @@ describe('subscription context', () => {
 
   test('rejects metadata that exceeds the entry limit', async () => {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const metadata = Object.fromEntries(Array.from({ length: 21 }, (_, i) => [`key${i}`, 'value']))
     const created = await app.v1.webhooks.$post(
@@ -569,8 +565,7 @@ describe('subscription context', () => {
 describe('slack destination', () => {
   test('creates a subscription with a slack incoming-webhook URL', async () => {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const created = await app.v1.webhooks.$post(
       {
@@ -596,8 +591,7 @@ describe('slack destination', () => {
 
   test('rejects a slack destination whose host is not hooks.slack.com', async () => {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const response = await app.v1.webhooks.$post(
       {
@@ -618,8 +612,7 @@ describe('slack destination', () => {
 describe('betterstack destination', () => {
   test('creates a subscription with a Better Stack source', async () => {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const created = await app.v1.webhooks.$post(
       {
@@ -647,8 +640,7 @@ describe('betterstack destination', () => {
 
   test('rejects a Better Stack destination whose host is not betterstackdata.com', async () => {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const response = await app.v1.webhooks.$post(
       {
@@ -678,8 +670,7 @@ describe('ping', () => {
   /** Seeds a webhooks-enabled client with a subscription owned by `writer`. */
   async function seed() {
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer, reader, other] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer, reader, other] },
     })
     const created = await app.v1.webhooks.$post({ json: validBody }, as(writer))
     const { id } = await TestApp.json(created, Webhooks.schema.createWebhook.Response)
@@ -775,14 +766,14 @@ describe('retry delivery', () => {
 
   /** Seeds a webhooks client with a subscription plus one logged delivery to replay. */
   async function seed() {
-    const store = Store.memory()
+    const db = TestApp.database()
     const app = TestApp.client({
-      auth: { source: TestApp.source({ keys: [writer, reader, other] }) },
-      webhook: { store },
+      auth: { keys: [writer, reader, other] },
+      db,
     })
     const created = await app.v1.webhooks.$post({ json: validBody }, as(writer))
     const { id } = await TestApp.json(created, Webhooks.schema.createWebhook.Response)
-    await Core.recordDelivery(store, {
+    await Core.recordDelivery(db, {
       attempt: 1,
       createdAt: new Date(1_700_000_000_000).toISOString(),
       envelope: {
@@ -799,11 +790,11 @@ describe('retry delivery', () => {
       status: 'failed',
       subscriptionId: id,
     })
-    return { app, id, store }
+    return { app, id, db }
   }
 
   test('replays the stored envelope and records a new attempt', async () => {
-    const { app, id, store } = await seed()
+    const { app, id, db } = await seed()
     vi.spyOn(globalThis, 'fetch').mockResolvedValue(new Response(null, { status: 200 }))
 
     const response = await app.v1.webhooks[':id{wh_[A-Za-z0-9_-]+}'].deliveries[
@@ -815,7 +806,7 @@ describe('retry delivery', () => {
     expect(body.eventId).toMatchInlineSnapshot(`"evt_seed"`)
 
     // A new attempt was appended alongside the seeded row.
-    expect(await Core.listDeliveries(store, id)).toHaveLength(2)
+    expect(await Core.listDeliveries(db, id)).toHaveLength(2)
   })
 
   test('a failed replay reports the error', async () => {
@@ -867,7 +858,7 @@ describe('retry delivery', () => {
 
 describe('OpenAPI visibility', () => {
   test('hides webhook routes when the feature is disabled', async () => {
-    const app = TestApp.create({ auth: { source: TestApp.source({ keys: [writer] }) } })
+    const app = TestApp.create({ auth: { keys: [writer] }, webhook: false })
     const body = (await (await app.request('/openapi.json')).json()) as { paths: object }
 
     // OpenAPI paths include App.create's mounted `/v1` prefix; the webhook
@@ -877,8 +868,7 @@ describe('OpenAPI visibility', () => {
 
   test('documents webhook routes when the feature is enabled', async () => {
     const app = TestApp.create({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const body = (await (await app.request('/openapi.json')).json()) as { paths: object }
     const paths = Object.keys(body.paths)
@@ -898,7 +888,7 @@ describe('OpenAPI visibility', () => {
   })
 
   test('omits the outbound `webhooks` section when the feature is disabled', async () => {
-    const app = TestApp.create({ auth: { source: TestApp.source({ keys: [writer] }) } })
+    const app = TestApp.create({ auth: { keys: [writer] }, webhook: false })
     const body = (await (await app.request('/openapi.json')).json()) as { webhooks?: object }
 
     expect(body.webhooks).toMatchInlineSnapshot(`undefined`)
@@ -906,8 +896,7 @@ describe('OpenAPI visibility', () => {
 
   test('documents the outbound delivery envelope under OAS `webhooks` when enabled', async () => {
     const app = TestApp.create({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const body = (await (await app.request('/openapi.json')).json()) as {
       webhooks?: {
@@ -946,8 +935,7 @@ describe('OpenAPI visibility', () => {
 
   test('documents per-event-type filters on the create body', async () => {
     const app = TestApp.create({
-      auth: { source: TestApp.source({ keys: [writer] }) },
-      webhook: { store: Store.memory() },
+      auth: { keys: [writer] },
     })
     const body = (await (await app.request('/openapi.json')).json()) as {
       paths: {
@@ -1050,7 +1038,7 @@ describe('OpenAPI visibility', () => {
 describe('envelope schema', () => {
   /** A `transfer` subscription used to build representative envelopes. */
   async function transferSubscription() {
-    const store = Store.memory()
+    const db = TestApp.database()
     return Core.buildEnvelope({
       blockNumber: 100,
       createdAt: new Date('2026-01-01T00:00:00.000Z'),
@@ -1064,7 +1052,7 @@ describe('envelope schema', () => {
         transactionHash: '0x33333333333333333333333333333333333333333333333333333333333333aa',
       },
       logIndex: 0,
-      subscription: await Core.createSubscription(store, {
+      subscription: await Core.createSubscription(db, {
         chainId: 42431,
         eventType: 'token:transfer',
         owner: { orgId: 'org_test', type: 'api_key' },
@@ -1080,8 +1068,8 @@ describe('envelope schema', () => {
   })
 
   test('round-trips a ping envelope', async () => {
-    const store = Store.memory()
-    const subscription = await Core.createSubscription(store, {
+    const db = TestApp.database()
+    const subscription = await Core.createSubscription(db, {
       chainId: 42431,
       eventType: 'token:transfer',
       owner: { orgId: 'org_test', type: 'api_key' },
@@ -1110,7 +1098,7 @@ describe('envelope schema', () => {
 describe('MPP access (disabled for now — API-key-only)', () => {
   test('rejects an MPP payer with 401, offering no payment challenge', async () => {
     const app = TestApp.create({
-      auth: { source: TestApp.source({ keys: [] }) },
+      auth: { keys: [] },
       mpp: {
         charge: {
           chainId: Tempo.chain.id,
@@ -1121,7 +1109,6 @@ describe('MPP access (disabled for now — API-key-only)', () => {
         },
         secretKey: 'secret_test_key_0123456789abcdef',
       },
-      webhook: { store: Store.memory() },
     })
 
     // The paid lane is disabled on webhook routes, so no `402` challenge is
@@ -1182,8 +1169,8 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   // followed by its fee payment. Filtering on it makes the scan deterministic.
   const windowSender = '0xe7687128b0a808c2831ff94d4f7b2fb35c65af38'
 
-  async function createTransferSubscription(store: ReturnType<typeof Store.memory>) {
-    return Core.createSubscription(store, {
+  async function createTransferSubscription(db: Db.Db) {
+    return Core.createSubscription(db, {
       chainId: 42431,
       eventType: 'token:transfer',
       filters: { sender: windowSender },
@@ -1193,12 +1180,12 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   }
 
   test('dispatches a signed envelope per row and advances the cursor', async () => {
-    const store = Store.memory()
-    const subscription = await createTransferSubscription(store)
+    const db = TestApp.database()
+    const subscription = await createTransferSubscription(db)
     // Anchor the subscription just below the pinned window so the poller scans
     // it this tick (a brand-new subscription anchors at head and skips its first
     // tick).
-    await Core.setCursor(store, subscription.id, windowCursor)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     const dispatched: Webhooks.poll.Dispatchable[] = []
     const result = await Webhooks.poll({
@@ -1210,7 +1197,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['token:transfer'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1245,7 +1232,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
     `)
 
     // Cursor advanced to the last dispatched row `(1000002, 1)`.
-    expect(decodeCursor(await Core.getCursor(store, subscription.id))).toMatchInlineSnapshot(`
+    expect(decodeCursor(await Core.getCursor(db, subscription.id))).toMatchInlineSnapshot(`
       [
         1000002,
         1,
@@ -1254,9 +1241,9 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('pauses the cursor at the last success when dispatch fails', async () => {
-    const store = Store.memory()
-    const subscription = await createTransferSubscription(store)
-    await Core.setCursor(store, subscription.id, windowCursor)
+    const db = TestApp.database()
+    const subscription = await createTransferSubscription(db)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     let calls = 0
     const result = await Webhooks.poll({
@@ -1266,7 +1253,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['token:transfer'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1275,7 +1262,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
 
     // Cursor stops at the first (successful) row `(1000002, 0)`, so the failed
     // one re-runs on the next tick (at-least-once).
-    expect(decodeCursor(await Core.getCursor(store, subscription.id))).toMatchInlineSnapshot(`
+    expect(decodeCursor(await Core.getCursor(db, subscription.id))).toMatchInlineSnapshot(`
       [
         1000002,
         0,
@@ -1284,9 +1271,9 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('does not advance the cursor when the first row fails', async () => {
-    const store = Store.memory()
-    const subscription = await createTransferSubscription(store)
-    await Core.setCursor(store, subscription.id, windowCursor)
+    const db = TestApp.database()
+    const subscription = await createTransferSubscription(db)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     const result = await Webhooks.poll({
       chainId: 42431,
@@ -1294,7 +1281,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['token:transfer'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1302,7 +1289,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
     expect(result.failed).toMatchInlineSnapshot(`1`)
     // Nothing accepted → cursor untouched at the window anchor, so the row
     // retries next tick.
-    expect(decodeCursor(await Core.getCursor(store, subscription.id))).toMatchInlineSnapshot(`
+    expect(decodeCursor(await Core.getCursor(db, subscription.id))).toMatchInlineSnapshot(`
       [
         999999,
         2147483647,
@@ -1311,8 +1298,8 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('anchors a first-seen subscription at the confirmed head without backfilling', async () => {
-    const store = Store.memory()
-    const subscription = await createTransferSubscription(store)
+    const db = TestApp.database()
+    const subscription = await createTransferSubscription(db)
 
     const dispatched: Webhooks.poll.Dispatchable[] = []
     const result = await Webhooks.poll({
@@ -1324,7 +1311,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['token:transfer'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       // Rows exist in history, but a brand-new subscription must not replay them.
       tidx: realTidx,
     })
@@ -1333,7 +1320,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
     // the head of the confirmed window (`windowHead - confirmations` = 1000002).
     expect(result.scanned).toMatchInlineSnapshot(`0`)
     expect(dispatched).toHaveLength(0)
-    expect(decodeCursor(await Core.getCursor(store, subscription.id))).toMatchInlineSnapshot(`
+    expect(decodeCursor(await Core.getCursor(db, subscription.id))).toMatchInlineSnapshot(`
       [
         1000002,
         2147483647,
@@ -1342,12 +1329,12 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('advances to the end of the confirmed window on an empty scan', async () => {
-    const store = Store.memory()
-    const subscription = await createTransferSubscription(store)
+    const db = TestApp.database()
+    const subscription = await createTransferSubscription(db)
     // Anchor just past the window's only matching block (1000002) and confirm up
     // to block 1000004 — a range `windowSender` has no transfers in, so the scan
     // is genuinely empty.
-    await Core.setCursor(store, subscription.id, encodeCursor([windowTo, endOfBlockIndex]))
+    await Core.setCursor(db, subscription.id, encodeCursor([windowTo, endOfBlockIndex]))
 
     const result = await Webhooks.poll({
       chainId: 42431,
@@ -1355,7 +1342,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['token:transfer'],
       headBlockNumber: windowTo + 4,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1363,7 +1350,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
 
     // No rows, clean scan: cursor jumps past the end of the confirmed window
     // (`headBlockNumber - confirmations` = block 1000004) so it is not rescanned.
-    expect(decodeCursor(await Core.getCursor(store, subscription.id))).toMatchInlineSnapshot(`
+    expect(decodeCursor(await Core.getCursor(db, subscription.id))).toMatchInlineSnapshot(`
       [
         1000004,
         2147483647,
@@ -1381,15 +1368,15 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   const windowSenderTopic = `0x${'0'.repeat(24)}${windowSender.slice(2)}`
 
   test('log:emitted decodes args from a signature-matched event view', async () => {
-    const store = Store.memory()
-    const subscription = await Core.createSubscription(store, {
+    const db = TestApp.database()
+    const subscription = await Core.createSubscription(db, {
       chainId: 42431,
       eventType: 'log:emitted',
       filters: { signature: transferSignature, args: { from: windowSender } },
       owner: { orgId: 'org_test', type: 'api_key' },
       destination: { type: 'url', url: 'https://hooks.example.com/x' },
     })
-    await Core.setCursor(store, subscription.id, windowCursor)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     const dispatched: Webhooks.poll.Dispatchable[] = []
     const result = await Webhooks.poll({
@@ -1401,7 +1388,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['log:emitted'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1435,15 +1422,15 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('log:emitted scans raw logs by topic when no signature is given', async () => {
-    const store = Store.memory()
-    const subscription = await Core.createSubscription(store, {
+    const db = TestApp.database()
+    const subscription = await Core.createSubscription(db, {
       chainId: 42431,
       eventType: 'log:emitted',
       filters: { topic0: transferSelector, topic1: windowSenderTopic },
       owner: { orgId: 'org_test', type: 'api_key' },
       destination: { type: 'url', url: 'https://hooks.example.com/x' },
     })
-    await Core.setCursor(store, subscription.id, windowCursor)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     const dispatched: Webhooks.poll.Dispatchable[] = []
     const result = await Webhooks.poll({
@@ -1455,7 +1442,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['log:emitted'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1479,8 +1466,8 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('block:created scans new blocks and resolves transaction counts', async () => {
-    const store = Store.memory()
-    const subscription = await Core.createSubscription(store, {
+    const db = TestApp.database()
+    const subscription = await Core.createSubscription(db, {
       chainId: 42431,
       eventType: 'block:created',
       // Pin to a single block so the heartbeat feed is deterministic.
@@ -1488,7 +1475,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       owner: { orgId: 'org_test', type: 'api_key' },
       destination: { type: 'url', url: 'https://hooks.example.com/x' },
     })
-    await Core.setCursor(store, subscription.id, windowCursor)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     const dispatched: Webhooks.poll.Dispatchable[] = []
     const result = await Webhooks.poll({
@@ -1500,7 +1487,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['block:created'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1519,7 +1506,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
     `)
     // The window scanner advances to the end of the fully-scanned block so the
     // next tick resumes at the following block.
-    expect(decodeCursor(await Core.getCursor(store, subscription.id))).toMatchInlineSnapshot(`
+    expect(decodeCursor(await Core.getCursor(db, subscription.id))).toMatchInlineSnapshot(`
       [
         1000002,
         2147483647,
@@ -1528,8 +1515,8 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('transaction:included filters on txs columns and inner calls', async () => {
-    const store = Store.memory()
-    const subscription = await Core.createSubscription(store, {
+    const db = TestApp.database()
+    const subscription = await Core.createSubscription(db, {
       chainId: 42431,
       eventType: 'transaction:included',
       // `from` + an `input` selector (ERC20 `transfer` = 0xa9059cbb) pins the
@@ -1538,7 +1525,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       owner: { orgId: 'org_test', type: 'api_key' },
       destination: { type: 'url', url: 'https://hooks.example.com/x' },
     })
-    await Core.setCursor(store, subscription.id, windowCursor)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     const dispatched: Webhooks.poll.Dispatchable[] = []
     const result = await Webhooks.poll({
@@ -1550,7 +1537,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['transaction:included'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1563,15 +1550,15 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('transaction:included routes a status filter through receipts', async () => {
-    const store = Store.memory()
-    const subscription = await Core.createSubscription(store, {
+    const db = TestApp.database()
+    const subscription = await Core.createSubscription(db, {
       chainId: 42431,
       eventType: 'transaction:included',
       filters: { from: windowSender, status: 'success' },
       owner: { orgId: 'org_test', type: 'api_key' },
       destination: { type: 'url', url: 'https://hooks.example.com/x' },
     })
-    await Core.setCursor(store, subscription.id, windowCursor)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     const result = await Webhooks.poll({
       chainId: 42431,
@@ -1579,7 +1566,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['transaction:included'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1588,8 +1575,8 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   })
 
   test('transaction:included embeds the receipt when includeReceipt is set', async () => {
-    const store = Store.memory()
-    const subscription = await Core.createSubscription(store, {
+    const db = TestApp.database()
+    const subscription = await Core.createSubscription(db, {
       chainId: 42431,
       eventType: 'transaction:included',
       // No receipt-touching filter — `includeReceipt` alone must trigger the
@@ -1598,7 +1585,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       owner: { orgId: 'org_test', type: 'api_key' },
       destination: { type: 'url', url: 'https://hooks.example.com/x' },
     })
-    await Core.setCursor(store, subscription.id, windowCursor)
+    await Core.setCursor(db, subscription.id, windowCursor)
 
     const dispatched: Webhooks.poll.Dispatchable[] = []
     const result = await Webhooks.poll({
@@ -1610,7 +1597,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       eventTypes: ['transaction:included'],
       headBlockNumber: windowHead,
       client,
-      store,
+      db,
       tidx: realTidx,
     })
 
@@ -1634,9 +1621,9 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
     })
 
     test('delivers a verifiable signed envelope and records success', async () => {
-      const store = Store.memory()
-      const subscription = await createTransferSubscription(store)
-      await Core.setCursor(store, subscription.id, windowCursor)
+      const db = TestApp.database()
+      const subscription = await createTransferSubscription(db)
+      await Core.setCursor(db, subscription.id, windowCursor)
 
       // Real TIDX queries also go through `globalThis.fetch`, so the mock passes
       // non-webhook requests through to the real network and only captures the
@@ -1663,7 +1650,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
         eventTypes: ['token:transfer'],
         headBlockNumber: windowHead,
         client,
-        store,
+        db,
         tidx: realTidx,
       })
 
@@ -1687,16 +1674,16 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       expect((envelope.data as { blockNumber: number }).blockNumber).toBe(windowTo)
 
       // Success resets the failure counter, stamps lastDeliveryAt, stays active.
-      const after = await Core.getSubscription(store, subscription.owner, subscription.id)
+      const after = await Core.getSubscription(db, subscription.owner, subscription.id)
       expect(after?.status).toBe('active')
       expect(after?.failureCount).toBe(0)
       expect(after?.lastDeliveryAt).toBeDefined()
     })
 
     test('pauses on a failed delivery and re-delivers on the next tick', async () => {
-      const store = Store.memory()
-      const subscription = await createTransferSubscription(store)
-      await Core.setCursor(store, subscription.id, windowCursor)
+      const db = TestApp.database()
+      const subscription = await createTransferSubscription(db)
+      await Core.setCursor(db, subscription.id, windowCursor)
 
       const realFetch = globalThis.fetch.bind(globalThis)
       let attempts = 0
@@ -1715,7 +1702,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
           eventTypes: ['token:transfer'],
           headBlockNumber: windowHead,
           client,
-          store,
+          db,
           tidx: realTidx,
         })
 
@@ -1723,7 +1710,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       expect(first.failed).toBe(1)
       expect(first.dispatched).toBe(0)
       // Cursor paused at the prior position so the row re-delivers next tick.
-      expect(decodeCursor(await Core.getCursor(store, subscription.id))).toEqual([
+      expect(decodeCursor(await Core.getCursor(db, subscription.id))).toEqual([
         windowFrom - 1,
         endOfBlockIndex,
       ])
@@ -1732,13 +1719,13 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       expect(second.dispatched).toBe(1)
       expect(attempts).toBe(2)
       // Now advanced past the redelivered row (the first row in block 1000002).
-      expect(decodeCursor(await Core.getCursor(store, subscription.id))).toEqual([windowTo, 0])
+      expect(decodeCursor(await Core.getCursor(db, subscription.id))).toEqual([windowTo, 0])
     })
 
     test('auto-disables a subscription after sustained failures', async () => {
-      const store = Store.memory()
-      const subscription = await createTransferSubscription(store)
-      await Core.setCursor(store, subscription.id, windowCursor)
+      const db = TestApp.database()
+      const subscription = await createTransferSubscription(db)
+      await Core.setCursor(db, subscription.id, windowCursor)
 
       // Real TIDX queries pass through; only the webhook delivery fails (500).
       const realFetch = globalThis.fetch.bind(globalThis)
@@ -1756,7 +1743,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
           eventTypes: ['token:transfer'],
           headBlockNumber: windowHead,
           client,
-          store,
+          db,
           tidx: realTidx,
         })
 
@@ -1764,7 +1751,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       // subscription auto-disables and drops out of the poller's active index.
       for (let i = 0; i < Core.maxFailures; i++) await tick()
 
-      const disabled = await Core.getSubscription(store, subscription.owner, subscription.id)
+      const disabled = await Core.getSubscription(db, subscription.owner, subscription.id)
       expect(disabled?.status).toBe('disabled')
       expect(disabled?.failureCount).toBe(Core.maxFailures)
 
@@ -1781,10 +1768,10 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
   // proves the route-issued secret and id line up with what is delivered/logged.
   describe('end-to-end (routes + poller)', () => {
     test('create → poll → signed delivery → deliveries route records success', async () => {
-      const store = Store.memory()
+      const db = TestApp.database()
       const app = TestApp.client({
-        auth: { source: TestApp.source({ keys: [writer] }) },
-        webhook: { store },
+        auth: { keys: [writer] },
+        db,
       })
 
       // 1. Create through the route; capture the one-time signing secret + id.
@@ -1799,7 +1786,7 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
       // Anchor the cursor just below the window so the poller scans this tick (a
       // brand-new subscription anchors at the confirmed head and skips its first
       // tick).
-      await Core.setCursor(store, id, windowCursor)
+      await Core.setCursor(db, id, windowCursor)
 
       // 2. A local delivery sink that captures the request and acks 200, injected
       // via `deliverAndRecord`'s `fetch` option (the SSRF guard blocks loopback,
@@ -1821,11 +1808,11 @@ describe.skipIf(Runtime.get().mode === 'localnet')('poll', () => {
         batchSize: 1,
         chainId: 42431,
         dispatch: ({ envelope, subscription }) =>
-          Core.deliverAndRecord(store, subscription, envelope, { fetch }),
+          Core.deliverAndRecord(db, subscription, envelope, { fetch }),
         eventTypes: ['token:transfer'],
         headBlockNumber: windowHead,
         client,
-        store,
+        db,
         tidx: realTidx,
       })
       expect(result.dispatched).toBe(1)