Ground Stripe simulation contracts in real test-mode lifecycles

const checkout = await adapter.observeCheckout();
expectCheckoutSnapshot(checkout.created);
expect(checkout.retrieved).toEqual(checkout.created);
expect(checkout.retrievedAfterExpiry.status).toBe("expired");

const card = await adapter.observeCardLifecycle();
expect(card.payment.status).toBe("succeeded");
expect(card.replayedPaymentId).toBe(card.payment.id);
expect(card.refund.paymentIntentId).toBe(card.payment.id);
expect(card.decline.code).toBe("card_declined");
expect(card.authenticationRequired.code).toBe("authentication_required");

const subscription = await adapter.observeSubscriptionLifecycle();
expectPaidInvoice(subscription.initial, "subscription_create");
expectPaidInvoice(subscription.renewal, "subscription_cycle");
expect(subscription.renewalEvent.type).toBe("invoice.paid");

try {
  await runAssertions(adapter);
} catch (error) {
  contractError = error;
}
try {
  await adapter.cleanup();
} catch (error) {
  cleanupError = error;
}

if (!/^(sk|rk)_test_/.test(secretKey)) {
  throw new Error("Stripe sandbox contract requires a test-mode key");
}
const account = await stripe.accounts.retrieve();
if (account.id !== expectedAccountId) {
  throw new Error(`Stripe sandbox account mismatch`);
}
if (!account.charges_enabled) {
  throw new Error(`Stripe sandbox account is not enabled for charges`);
}

if (this.#providerWrites + count > MAX_PROVIDER_WRITES) {
  throw new Error(`Stripe sandbox write budget exceeded`);
}
this.#providerWrites += count;

return `sauna-contract-${this.#runId}-${operation}`;

for (const paymentIntentId of this.#paymentIntentsToCancel) {
  const paymentIntent = await this.#stripe.paymentIntents.cancel(
    paymentIntentId,
    { cancellation_reason: "abandoned" },
    { idempotencyKey: this.#idempotencyKey(`cancel-failed-${paymentIntentId}`) },
  );
  if (paymentIntent.status !== "canceled") throw new Error(/* state */);
}
for (const paymentIntentId of this.#paymentIntentsToRefund) {
  const refund = await refundStripePaymentIntent(/* stable key */);
  if (refund.status !== "succeeded") throw new Error(/* state */);
}
// Expire Sessions, delete clocks and customers, archive prices and products.
if (errors.length > 0) {
  throw new AggregateError(errors, "Stripe sandbox cleanup failed");
}

on:
  schedule:
    - cron: "30 8 * * *"
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: stripe-provider-contract
  cancel-in-progress: false

jobs:
  stripe-contract:
    timeout-minutes: 10
    environment: provider-contracts
    steps:
      - name: Run bounded Stripe contract
        env:
          STRIPE_SECRET_KEY: ${{ secrets.STRIPE_SANDBOX_SECRET_KEY }}
          STRIPE_SANDBOX_ACCOUNT_ID: ${{ secrets.STRIPE_SANDBOX_ACCOUNT_ID }}
        run: bun run test:sim:stripe-contract