purchasekit 0.2.1

data/app/javascript/controllers/purchasekit/paywall_controller.js

@@ -0,0 +1,121 @@
+import { BridgeComponent } from "@hotwired/hotwire-native-bridge"
+
+export default class extends BridgeComponent {
+  static component = "paywall"
+  static targets = ["planRadio", "price", "submitButton", "response", "environment"]
+
+  connect() {
+    super.connect()
+    this.#fetchPrices()
+  }
+
+  responseTargetConnected(element) {
+    const correlationId = element.dataset.correlationId
+    const productIds = this.#productIds(element)
+    const relativeUrl = element.dataset.xcodeCompletionUrl
+    const xcodeCompletionUrl = relativeUrl ? `${window.location.origin}${relativeUrl}` : null
+    const successPath = element.dataset.successPath
+
+    element.remove()
+    this.#disableForm()
+    this.#triggerNativePurchase(productIds, correlationId, xcodeCompletionUrl, successPath)
+  }
+
+  restore(event) {
+    event.preventDefault()
+    this.send("restore")
+  }
+
+  #triggerNativePurchase(productIds, correlationId, xcodeCompletionUrl, successPath) {
+    this.send("purchase", { ...productIds, correlationId, xcodeCompletionUrl }, message => {
+      const { status, error } = message.data
+
+      if (error) {
+        console.error(error)
+        alert(`Purchase error: ${error}`)
+        this.#enableForm()
+        return
+      }
+
+      if (status == "cancelled") {
+        this.#enableForm()
+        return
+      }
+
+      // On success, redirect to success path after a short delay
+      // to allow the completion callback to finish processing
+      if (status == "success" && successPath) {
+        setTimeout(() => {
+          window.Turbo.visit(successPath)
+        }, 500)
+      }
+    })
+  }
+
+  #fetchPrices() {
+    const products = this.priceTargets.map(el => this.#productIds(el))
+
+    this.send("prices", { products }, message => {
+      const { prices, environment, error } = message.data
+
+      if (error) {
+        console.error(error)
+        return
+      }
+
+      if (prices) {
+        this.#setPrices(prices)
+        this.#setEnvironment(environment)
+        this.#enableForm()
+      }
+    })
+  }
+
+  #setEnvironment(environment) {
+    if (this.hasEnvironmentTarget && environment) {
+      this.environmentTarget.value = environment
+    }
+  }
+
+  #setPrices(prices) {
+    this.priceTargets.forEach(el => {
+      const { appleStoreProductId, googleStoreProductId } = this.#productIds(el)
+      const price = prices[appleStoreProductId] || prices[googleStoreProductId]
+
+      if (price) {
+        el.textContent = price
+      } else {
+        console.error(`No price found for product.`)
+      }
+    })
+  }
+
+  #productIds(element) {
+    return {
+      appleStoreProductId: element.dataset.appleStoreProductId,
+      googleStoreProductId: element.dataset.googleStoreProductId
+    }
+  }
+
+  #enableForm() {
+    this.planRadioTargets.forEach(radio => radio.disabled = false)
+    if (this.hasSubmitButtonTarget) {
+      this.submitButtonTarget.disabled = false
+      if (this.#originalButtonText) {
+        this.submitButtonTarget.innerHTML = this.#originalButtonText
+      }
+    }
+  }
+
+  #disableForm() {
+    this.planRadioTargets.forEach(radio => radio.disabled = true)
+    if (this.hasSubmitButtonTarget) {
+      this.#originalButtonText = this.submitButtonTarget.innerHTML
+      this.submitButtonTarget.disabled = true
+      const processingText = this.submitButtonTarget.dataset.processingText || "Processing..."
+      this.submitButtonTarget.innerHTML = processingText
+    }
+  }
+
+  #originalButtonText = null
+}

data/app/javascript/controllers/purchasekit_pay/paywall_controller.js

@@ -0,0 +1,112 @@
+import { BridgeComponent } from "@hotwired/hotwire-native-bridge"
+
+export default class extends BridgeComponent {
+  static component = "paywall"
+  static targets = ["planRadio", "price", "submitButton", "response", "environment"]
+
+  connect() {
+    super.connect()
+    this.#fetchPrices()
+  }
+
+  responseTargetConnected(element) {
+    const correlationId = element.dataset.correlationId
+    const productIds = this.#productIds(element)
+    const xcodeCompletionUrl = element.dataset.xcodeCompletionUrl
+
+    element.remove()
+    this.#disableForm()
+    this.#triggerNativePurchase(productIds, correlationId, xcodeCompletionUrl)
+  }
+
+  restore(event) {
+    event.preventDefault()
+    this.send("restore")
+  }
+
+  #triggerNativePurchase(productIds, correlationId, xcodeCompletionUrl) {
+    this.send("purchase", { ...productIds, correlationId, xcodeCompletionUrl }, message => {
+      const { status, error } = message.data
+
+      if (error) {
+        console.error(error)
+        alert(`Purchase error: ${error}`)
+        this.#enableForm()
+      }
+
+      if (status == "cancelled") {
+        this.#enableForm()
+      }
+
+      // On success, keep showing processing state.
+      // Turbo Stream will update the UI when webhook completes.
+    })
+  }
+
+  #fetchPrices() {
+    const products = this.priceTargets.map(el => this.#productIds(el))
+
+    this.send("prices", { products }, message => {
+      const { prices, environment, error } = message.data
+
+      if (error) {
+        console.error(error)
+        return
+      }
+
+      if (prices) {
+        this.#setPrices(prices)
+        this.#setEnvironment(environment)
+        this.#enableForm()
+      }
+    })
+  }
+
+  #setEnvironment(environment) {
+    if (this.hasEnvironmentTarget && environment) {
+      this.environmentTarget.value = environment
+    }
+  }
+
+  #setPrices(prices) {
+    this.priceTargets.forEach(el => {
+      const { appleStoreProductId, googleStoreProductId } = this.#productIds(el)
+      const price = prices[appleStoreProductId] || prices[googleStoreProductId]
+
+      if (price) {
+        el.textContent = price
+      } else {
+        console.error(`No price found for product.`)
+      }
+    })
+  }
+
+  #productIds(element) {
+    return {
+      appleStoreProductId: element.dataset.appleStoreProductId,
+      googleStoreProductId: element.dataset.googleStoreProductId
+    }
+  }
+
+  #enableForm() {
+    this.planRadioTargets.forEach(radio => radio.disabled = false)
+    if (this.hasSubmitButtonTarget) {
+      this.submitButtonTarget.disabled = false
+      if (this.#originalButtonText) {
+        this.submitButtonTarget.innerHTML = this.#originalButtonText
+      }
+    }
+  }
+
+  #disableForm() {
+    this.planRadioTargets.forEach(radio => radio.disabled = true)
+    if (this.hasSubmitButtonTarget) {
+      this.#originalButtonText = this.submitButtonTarget.innerHTML
+      this.submitButtonTarget.disabled = true
+      const processingText = this.submitButtonTarget.dataset.processingText || "Processing..."
+      this.submitButtonTarget.innerHTML = processingText
+    }
+  }
+
+  #originalButtonText = null
+}

data/app/javascript/purchasekit/turbo_actions.js

@@ -0,0 +1,4 @@
+// Custom Turbo Stream action for redirects after subscription events.
+Turbo.StreamActions.redirect = function() {
+  Turbo.visit(this.getAttribute("url"), {action: "replace"})
+}

data/app/javascript/purchasekit_pay/turbo_actions.js

@@ -0,0 +1,4 @@
+// Custom Turbo Stream action for redirects after new subscription.
+Turbo.StreamActions.redirect = function() {
+  Turbo.visit(this.getAttribute("url"), {action: "replace"})
+}

data/app/models/pay/purchasekit/charge.rb

@@ -0,0 +1,9 @@
+module Pay
+  module Purchasekit
+    class Charge < Pay::Charge
+      def refund!(amount = nil)
+        raise Pay::Purchasekit::Error, "Refunds must be processed through App Store Connect or Google Play Console."
+      end
+    end
+  end
+end

data/app/models/pay/purchasekit/customer.rb

@@ -0,0 +1,22 @@
+module Pay
+  module Purchasekit
+    class Customer < Pay::Customer
+      # Use base class name for dom_id to keep stream names consistent
+      def self.model_name
+        Pay::Customer.model_name
+      end
+
+      def charge(amount, options = {})
+        raise Pay::Purchasekit::Error, "One-time charges not supported. Use in-app purchases."
+      end
+
+      def subscribe(name: Pay.default_product_name, plan: Pay.default_plan_name, **options)
+        raise Pay::Purchasekit::Error, "Subscriptions must be initiated through the native app."
+      end
+
+      def add_payment_method(payment_method_id, default: false)
+        raise Pay::Purchasekit::Error, "Payment methods managed by App Store or Google Play."
+      end
+    end
+  end
+end

data/app/models/pay/purchasekit/subscription.rb

@@ -0,0 +1,33 @@
+module Pay
+  module Purchasekit
+    class Subscription < Pay::Subscription
+      def cancel(**options)
+        raise Pay::Purchasekit::Error, "Cancel through App Store or Google Play."
+      end
+
+      def cancel_now!(**options)
+        raise Pay::Purchasekit::Error, "Cancel through App Store or Google Play."
+      end
+
+      def resume
+        raise Pay::Purchasekit::Error, "Resume through App Store or Google Play."
+      end
+
+      def swap(plan, **options)
+        raise Pay::Purchasekit::Error, "Change plans through App Store or Google Play."
+      end
+
+      def change_quantity(quantity, **options)
+        raise Pay::Purchasekit::Error, "Quantity changes not supported for in-app purchases."
+      end
+
+      def paused?
+        false
+      end
+
+      def pause(**options)
+        raise Pay::Purchasekit::Error, "Pause through App Store or Google Play."
+      end
+    end
+  end
+end

data/app/views/purchase_kit/pay/purchases/_subscription_required.html.erb

@@ -0,0 +1,3 @@
+<div id="purchasekit_paywall" class="purchasekit-error">
+  <p><%= message %></p>
+</div>

data/app/views/purchase_kit/pay/purchases/create.turbo_stream.erb

@@ -0,0 +1,8 @@
+<%= turbo_stream.append "purchasekit_paywall" do %>
+  <div data-purchasekit-pay--paywall-target="response"
+       data-correlation-id="<%= @intent.uuid %>"
+       data-apple-store-product-id="<%= @intent.product.apple_product_id %>"
+       data-google-store-product-id="<%= @intent.product.google_product_id %>"
+       data-xcode-completion-url="<%= @xcode_completion_url %>">
+  </div>
+<% end %>

data/app/views/purchase_kit/purchases/_intent.html.erb

@@ -0,0 +1,7 @@
+<div data-purchasekit--paywall-target="response"
+     data-correlation-id="<%= intent.uuid %>"
+     data-apple-store-product-id="<%= intent.product.apple_product_id %>"
+     data-google-store-product-id="<%= intent.product.google_product_id %>"
+     data-xcode-completion-url="<%= intent.xcode_completion_url %>"
+     data-success-path="<%= intent.success_path %>">
+</div>

data/config/importmap.rb

@@ -0,0 +1,3 @@
+pin "@hotwired/hotwire-native-bridge", to: "https://cdn.jsdelivr.net/npm/@hotwired/hotwire-native-bridge@1.2.2/dist/hotwire-native-bridge.js"
+pin_all_from PurchaseKit::Engine.root.join("app/javascript/controllers/purchasekit"), under: "controllers/purchasekit"
+pin_all_from PurchaseKit::Engine.root.join("app/javascript/purchasekit"), under: "purchasekit"

data/config/routes.rb

@@ -0,0 +1,7 @@
+PurchaseKit::Engine.routes.draw do
+  resource :webhooks, only: :create
+  resources :purchases, only: :create
+
+  # Demo mode only - Xcode StoreKit testing completion endpoint
+  post "purchase/completions/:id", to: "purchase/completions#create"
+end

data/lib/pay/purchasekit.rb

@@ -0,0 +1,25 @@
+module Pay
+  module Purchasekit
+    class Error < Pay::Error
+    end
+
+    module_function
+
+    def enabled?
+      true
+    end
+
+    def setup
+      # No setup required
+    end
+
+    def configure_webhooks
+      Pay::Webhooks.configure do |events|
+        events.subscribe "purchasekit.subscription.created", PurchaseKit::Pay::Webhooks::SubscriptionCreated.new
+        events.subscribe "purchasekit.subscription.updated", PurchaseKit::Pay::Webhooks::SubscriptionUpdated.new
+        events.subscribe "purchasekit.subscription.canceled", PurchaseKit::Pay::Webhooks::SubscriptionCanceled.new
+        events.subscribe "purchasekit.subscription.expired", PurchaseKit::Pay::Webhooks::SubscriptionExpired.new
+      end
+    end
+  end
+end

data/lib/purchasekit/api_client.rb

@@ -0,0 +1,43 @@
+require "httparty"
+
+module PurchaseKit
+  # HTTP client for the PurchaseKit SaaS API.
+  #
+  # Used internally by Product and Purchase::Intent to communicate
+  # with the PurchaseKit backend.
+  #
+  class ApiClient
+    def get(path)
+      request(:get, path)
+    end
+
+    def post(path, body = {})
+      request(:post, path, body)
+    end
+
+    private
+
+    def request(method, path, body = nil)
+      options = {headers: headers}
+      options[:body] = body.to_json if body
+
+      HTTParty.public_send(method, url(path), options)
+    end
+
+    def url(path)
+      "#{config.base_api_url}/apps/#{config.app_id}#{path}"
+    end
+
+    def headers
+      {
+        "Authorization" => "Bearer #{config.api_key}",
+        "Accept" => "application/json",
+        "Content-Type" => "application/json"
+      }
+    end
+
+    def config
+      PurchaseKit.config
+    end
+  end
+end

data/lib/purchasekit/configuration.rb

@@ -0,0 +1,51 @@
+module PurchaseKit
+  class Configuration
+    attr_accessor :api_key, :api_url, :app_id, :webhook_secret
+    attr_accessor :demo_mode, :demo_products
+
+    def initialize
+      @api_url = "https://purchasekit.dev"
+      @demo_mode = false
+      @demo_products = {}
+      @event_handlers = Hash.new { |h, k| h[k] = [] }
+    end
+
+    def demo_mode?
+      @demo_mode
+    end
+
+    def base_api_url
+      "#{api_url}/api/v1"
+    end
+
+    # Register a callback for an event type.
+    #
+    # Available events:
+    # - :subscription_created
+    # - :subscription_updated
+    # - :subscription_canceled
+    # - :subscription_expired
+    #
+    # Example:
+    #   PurchaseKit.configure do |config|
+    #     config.on(:subscription_created) do |event|
+    #       user = User.find(event.customer_id)
+    #       user.update!(subscribed: true)
+    #     end
+    #   end
+    #
+    def on(event_type, &block)
+      @event_handlers[event_type.to_sym] << block
+    end
+
+    # Get handlers for an event type (internal use)
+    def handlers_for(event_type)
+      @event_handlers[event_type.to_sym]
+    end
+
+    # Check if any handlers are registered for an event type
+    def listening?(event_type)
+      @event_handlers[event_type.to_sym].any?
+    end
+  end
+end

data/lib/purchasekit/engine.rb

@@ -0,0 +1,38 @@
+module PurchaseKit
+  class Engine < ::Rails::Engine
+    isolate_namespace PurchaseKit
+
+    initializer "purchasekit.helpers" do
+      ActiveSupport.on_load(:action_controller_base) do
+        helper PurchaseKit::PaywallHelper
+      end
+    end
+
+    initializer "purchasekit.importmap", before: "importmap" do |app|
+      if app.config.respond_to?(:importmap)
+        app.config.importmap.paths << Engine.root.join("config/importmap.rb")
+        app.config.importmap.cache_sweepers << Engine.root.join("app/javascript")
+      end
+    end
+
+    initializer "purchasekit.assets" do |app|
+      if app.config.respond_to?(:assets) && app.config.assets.respond_to?(:paths)
+        app.config.assets.paths << Engine.root.join("app/javascript")
+        app.config.assets.precompile += %w[purchasekit/manifest.js]
+      end
+    end
+
+    # Pay gem integration (only when Pay is available)
+    initializer "purchasekit.pay_processor", before: :load_config_initializers do
+      if PurchaseKit.pay_enabled?
+        ::Pay.enabled_processors << :purchasekit unless ::Pay.enabled_processors.include?(:purchasekit)
+      end
+    end
+
+    initializer "purchasekit.pay_webhooks", after: :load_config_initializers do
+      if PurchaseKit.pay_enabled?
+        ::Pay::Purchasekit.configure_webhooks
+      end
+    end
+  end
+end

data/lib/purchasekit/error.rb

@@ -0,0 +1,19 @@
+module PurchaseKit
+  # Base error class for all PurchaseKit errors
+  class Error < StandardError
+  end
+
+  # Raised when a resource is not found (404)
+  class NotFoundError < Error
+  end
+
+  # Raised when a PurchaseKit subscription is required (402)
+  # This happens when trying to create purchase intents in production
+  # without an active PurchaseKit subscription
+  class SubscriptionRequiredError < Error
+  end
+
+  # Raised when webhook signature verification fails
+  class SignatureVerificationError < Error
+  end
+end

data/lib/purchasekit/events.rb

@@ -0,0 +1,112 @@
+module PurchaseKit
+  module Events
+    TYPES = %i[
+      subscription_created
+      subscription_updated
+      subscription_canceled
+      subscription_expired
+    ].freeze
+
+    class << self
+      # Publish an event to all registered handlers.
+      #
+      # Also publishes via ActiveSupport::Notifications for additional flexibility.
+      #
+      # @param type [Symbol] Event type (e.g., :subscription_created)
+      # @param payload [Hash] Event payload from the webhook
+      # @return [Event] The published event
+      #
+      def publish(type, payload)
+        event = Event.new(type: type, payload: payload)
+
+        # Call registered block handlers
+        PurchaseKit.config.handlers_for(type).each do |handler|
+          handler.call(event)
+        end
+
+        # Also publish via ActiveSupport::Notifications for subscribers
+        ActiveSupport::Notifications.instrument("purchasekit.#{type}", event: event)
+
+        event
+      end
+    end
+
+    # Represents a subscription event from Apple or Google.
+    #
+    # Events are normalized by the PurchaseKit SaaS before being sent
+    # to your application, so you get a consistent interface regardless
+    # of which store the purchase came from.
+    #
+    class Event
+      attr_reader :type, :payload
+
+      def initialize(type:, payload:)
+        @type = type.to_sym
+        @payload = payload.is_a?(Hash) ? payload.with_indifferent_access : payload
+      end
+
+      # The customer ID you passed when creating the purchase intent.
+      # Use this to look up the user in your database.
+      def customer_id
+        payload[:customer_id]
+      end
+
+      # The unique subscription ID from the store.
+      # Apple: originalTransactionId
+      # Google: purchaseToken
+      def subscription_id
+        payload[:subscription_id]
+      end
+
+      # Which store the purchase came from: "apple" or "google"
+      def store
+        payload[:store]
+      end
+
+      # The store-specific product ID (e.g., "com.example.pro.annual")
+      def store_product_id
+        payload[:store_product_id]
+      end
+
+      # The subscription name you configured in PurchaseKit
+      def subscription_name
+        payload[:subscription_name]
+      end
+
+      # Current status: "active", "canceled", "expired", etc.
+      def status
+        payload[:status]
+      end
+
+      # When the current billing period started
+      def current_period_start
+        parse_time(payload[:current_period_start])
+      end
+
+      # When the current billing period ends
+      def current_period_end
+        parse_time(payload[:current_period_end])
+      end
+
+      # When the subscription will end (for canceled subscriptions)
+      def ends_at
+        parse_time(payload[:ends_at])
+      end
+
+      # The success path you passed when creating the purchase intent.
+      # Use this for redirecting after purchase completion.
+      def success_path
+        payload[:success_path]
+      end
+
+      private
+
+      def parse_time(value)
+        return nil if value.blank?
+        Time.zone.parse(value)
+      rescue
+        Time.parse(value) rescue nil
+      end
+    end
+  end
+end

data/lib/purchasekit/pay/configuration.rb

@@ -0,0 +1,42 @@
+module PurchaseKit
+  module Pay
+    class Configuration
+      attr_accessor :api_key, :api_url, :app_id, :webhook_secret
+      attr_accessor :demo_mode, :demo_products
+
+      def initialize
+        @api_url = "https://purchasekit.dev"
+        @demo_mode = false
+        @demo_products = {}
+      end
+
+      def demo_mode?
+        @demo_mode
+      end
+
+      def base_api_url
+        "#{api_url}/api/v1"
+      end
+
+      def xcode_completion_url(intent_uuid:, host: nil)
+        if demo_mode?
+          PurchaseKit::Pay::Engine.routes.url_helpers.purchase_intent_completions_url(intent_uuid: intent_uuid, host: host)
+        else
+          "#{base_api_url}/purchase/intents/#{intent_uuid}/completions"
+        end
+      end
+    end
+
+    class << self
+      attr_writer :config
+
+      def config
+        @config ||= Configuration.new
+      end
+
+      def configure
+        yield(config)
+      end
+    end
+  end
+end