@bitmagic/cli 0.1.83-dev.1 → 0.1.83-dev.3

package/dist/ios/record-validate.js

@@ -1,101 +1,3 @@
-/**
- * §4e/f of docs/ios-export-design.md: boot the staged payload the way the app will run it —
- * headless system Chrome as an iPhone, `?platform=mobile` — in two modes, once per renderer a
- * device can boot (`ios build` runs each mode on WebGPU and on WebGL).
- *
- *  - `record`: remote requests are allowed through and every one on a non-denylisted host is
- *    reported as a miss for the caller to vendor. This is the empirical net under the static
- *    collector: whatever the running game actually fetches, however the URL was constructed.
- *  - `offline`: every remote request is aborted. The run must still pass `classifyVerifyRun`
- *    (the same "did the game render" verdict verify and the publish smoke check use) with zero
- *    remote asset requests — that is the design's acceptance criterion for "no internet needed".
- *
- * Denylisted endpoints are the online-only features the engine already degrades without
- * (game-server, play-auth, play sessions, fonts, analytics) — aborted in BOTH passes so the
- * record run observes the same world the device will.
- */
-import * as fs from 'fs';
-import * as path from 'path';
-import { browserLaunchPlan } from '../browser-gl.js';
-import { runHeadlessCheck } from '../verify/browser.js';
-import { DEFAULT_START_INTERACTION } from '../verify/start.js';
-import { classifyVerifyRun } from '../verify/classify.js';
-import { mobileContextOptions } from '../verify/device.js';
-import { startPayloadServer } from './local-server.js';
-/** Long enough for a forged level's worth of local loads; adaptive settle exits earlier. */
-export const PACKAGED_CHECK_SETTLE_MS = 25_000;
-/**
- * Online-only endpoints the packaged game may talk to when a network exists, and must live
- * without when one does not. Never vendored, aborted during both passes.
- */
-export function isOnlineOnlyUrl(url) {
-    let parsed;
-    try {
-        parsed = new URL(url);
-    }
-    catch {
-        return false;
-    }
-    const host = parsed.hostname;
-    return (host.includes('game-server')
-        || parsed.pathname.endsWith('/play-auth.html')
-        || host === 'fonts.googleapis.com'
-        || host === 'fonts.gstatic.com'
-        || host === 'esm.sh'
-        || host === 'esm.run'
-        || host.endsWith('.sentry.io')
-        || host.endsWith('google-analytics.com')
-        || host.endsWith('googletagmanager.com')
-        // Local dev services (api-server 3002, game-server 1666, agent 4111, lid relay 8765) —
-        // NOT the payload server, whose exact origin is allowed before this predicate runs.
-        || host === 'localhost'
-        || host === '127.0.0.1');
-}
-export async function runPackagedCheck(options) {
-    fs.mkdirSync(options.artifactDir, { recursive: true });
-    const consolePath = path.join(options.artifactDir, 'console.log');
-    const screenshotPath = path.join(options.artifactDir, 'screenshot.png');
-    const server = await startPayloadServer(options.payloadDir);
-    const misses = new Set();
-    const routes = async (context) => {
-        await context.route('**/*', (route) => {
-            const url = route.request().url();
-            if (url.startsWith(server.origin)) {
-                void route.continue();
-                return;
-            }
-            if (isOnlineOnlyUrl(url)) {
-                void route.abort('internetdisconnected');
-                return;
-            }
-            misses.add(url);
-            if (options.mode === 'record')
-                void route.continue();
-            else
-                void route.abort('internetdisconnected');
-        });
-    };
-    try {
-        const observations = await runHeadlessCheck({
-            url: `${server.origin}/index.html?platform=mobile&renderer=${options.renderer}`,
-            screenshotPath,
-            consolePath,
-            settleMs: options.settleMs ?? PACKAGED_CHECK_SETTLE_MS,
-            startInteraction: DEFAULT_START_INTERACTION,
-            launch: browserLaunchPlan(process.env, options.renderer),
-            requestedRenderer: options.renderer,
-            device: mobileContextOptions(options.orientation ?? 'portrait'),
-            routes,
-        });
-        return {
-            result: classifyVerifyRun(observations),
-            misses: [...misses],
-            consolePath,
-            screenshotPath,
-        };
-    }
-    finally {
-        await server.close();
-    }
-}
+// Compatibility entry point for the iOS packager.
+export * from '../package/packaged-check.js';
 //# sourceMappingURL=record-validate.js.map

package/dist/ios/record-validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"record-validate.js","sourceRoot":"","sources":["../../src/ios/record-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAuB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAqB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;WACzB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;WAC3C,IAAI,KAAK,sBAAsB;WAC/B,IAAI,KAAK,mBAAmB;WAC5B,IAAI,KAAK,QAAQ;WACjB,IAAI,KAAK,SAAS;WAClB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;WAC3B,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;WACrC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACxC,uFAAuF;QACvF,oFAAoF;WACjF,IAAI,KAAK,WAAW;WACpB,IAAI,KAAK,WAAW,CACxB,CAAC;AACJ,CAAC;AA0BD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA6B;IAClE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,MAAM,MAAM,GAAG,KAAK,EAAE,OAAuB,EAAiB,EAAE;QAC9D,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACpC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,KAAK,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;;gBAChD,KAAK,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC;YAC1C,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,wCAAwC,OAAO,CAAC,QAAQ,EAAE;YAC/E,cAAc;YACd,WAAW;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,wBAAwB;YACtD,gBAAgB,EAAE,yBAAyB;YAC3C,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC;YACxD,iBAAiB,EAAE,OAAO,CAAC,QAAQ;YACnC,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC;YAC/D,MAAM;SACP,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,iBAAiB,CAAC,YAAY,CAAC;YACvC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;YACnB,WAAW;YACX,cAAc;SACf,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"record-validate.js","sourceRoot":"","sources":["../../src/ios/record-validate.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,cAAc,8BAA8B,CAAC"}

package/dist/ios/store-bridge.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The shell's App Store bridge (§13 of docs/ios-export-design.md): StoreKit 2 behind one
+ * `WKScriptMessageHandlerWithReply`, so the page's `postMessage` returns a promise and no request
+ * ids are needed. The engine side is `game/src/engine/store/NativeStoreBackend.ts`; the message
+ * shapes below are the contract between them, so change both or neither.
+ *
+ * Ops (page → app, each answered once):
+ *   status      { canMakePayments }
+ *   products    { ids }                      → { products, missing }
+ *   purchase    { productId, quantity?, appAccountToken? }
+ *                                            → { status: purchased | pending | cancelled | unverified | failed, transaction?, reason? }
+ *   unfinished  {}                           → { transactions }
+ *   finish      { transactionId }            → { finished }
+ * Event (app → page): a `bmstore:transaction` window event whenever StoreKit delivers a purchase
+ * outside a purchase() call. It carries nothing; the page answers it by asking for `unfinished`,
+ * so a page that was not listening yet loses nothing.
+ *
+ * A verified purchase is never finished here. The engine records the credit first and then asks
+ * for `finish`; until then StoreKit keeps re-delivering the transaction, which is what makes an
+ * app killed between payment and crediting safe.
+ *
+ * Same literal rules as xcode-template.ts: no Swift `\(...)` interpolation, no backticks.
+ */
+export declare const STORE_HANDLER_NAME = "bmStore";
+export declare const STORE_TRANSACTION_EVENT = "bmstore:transaction";
+export declare const STORE_BRIDGE_SWIFT = "import Foundation\nimport StoreKit\nimport WebKit\n\n/// App Store purchases for the game page. See the ops table in the CLI's store-bridge.ts.\nfinal class StoreBridge: NSObject, WKScriptMessageHandlerWithReply {\n    static let handlerName = \"bmStore\"\n    static let transactionEvent = \"bmstore:transaction\"\n\n    weak var webView: WKWebView?\n    private var updatesTask: Task<Void, Never>?\n    /// Verified, not yet finished transactions, by id \u2014 so finish never has to search.\n    private var pending: [UInt64: Transaction] = [:]\n\n    deinit {\n        updatesTask?.cancel()\n    }\n\n    /// Listen for purchases that complete outside a purchase() call: Ask to Buy approvals,\n    /// payment-method fixes, a purchase interrupted by the app being killed. Apple's guidance is\n    /// to start this at launch, before any purchase, or such transactions can be missed.\n    @MainActor\n    func start() {\n        updatesTask = Task { [weak self] in\n            for await result in Transaction.updates {\n                self?.received(result)\n            }\n        }\n    }\n\n    @MainActor\n    private func received(_ result: VerificationResult<Transaction>) {\n        guard case .verified(let transaction) = result else { return }\n        pending[transaction.id] = transaction\n        let script = \"window.dispatchEvent(new CustomEvent('\" + Self.transactionEvent + \"'))\"\n        webView?.evaluateJavaScript(script, completionHandler: nil)\n    }\n\n    func userContentController(\n        _ userContentController: WKUserContentController,\n        didReceive message: WKScriptMessage,\n        replyHandler: @escaping (Any?, String?) -> Void\n    ) {\n        guard let body = message.body as? [String: Any], let op = body[\"op\"] as? String else {\n            replyHandler(nil, \"A store request needs an op.\")\n            return\n        }\n        Task { @MainActor in\n            do {\n                let reply = try await self.handle(op: op, body: body)\n                replyHandler(reply, nil)\n            } catch {\n                replyHandler(nil, String(describing: error))\n            }\n        }\n    }\n\n    @MainActor\n    private func handle(op: String, body: [String: Any]) async throws -> Any {\n        switch op {\n        case \"status\":\n            return [\"canMakePayments\": AppStore.canMakePayments]\n        case \"products\":\n            let ids = (body[\"ids\"] as? [String]) ?? []\n            let products = try await Product.products(for: ids)\n            let found = Set(products.map { $0.id })\n            return [\n                \"products\": products.map { Self.productInfo($0) },\n                \"missing\": ids.filter { !found.contains($0) },\n            ]\n        case \"purchase\":\n            return try await purchase(body)\n        case \"unfinished\":\n            var transactions: [[String: Any]] = []\n            for await result in Transaction.unfinished {\n                guard case .verified(let transaction) = result else { continue }\n                pending[transaction.id] = transaction\n                transactions.append(Self.transactionInfo(transaction, jws: result.jwsRepresentation))\n            }\n            return [\"transactions\": transactions]\n        case \"finish\":\n            guard let text = body[\"transactionId\"] as? String, let id = UInt64(text) else {\n                throw StoreBridgeError.badRequest(\"finish needs a transactionId string\")\n            }\n            return [\"finished\": await finish(id)]\n        default:\n            throw StoreBridgeError.badRequest(\"Unknown store op \" + op)\n        }\n    }\n\n    @MainActor\n    private func purchase(_ body: [String: Any]) async throws -> Any {\n        guard let productId = body[\"productId\"] as? String else {\n            throw StoreBridgeError.badRequest(\"purchase needs a productId\")\n        }\n        guard let product = try await Product.products(for: [productId]).first else {\n            return [\n                \"status\": \"failed\",\n                \"reason\": \"The App Store did not return the product \" + productId + \".\",\n            ]\n        }\n        var options: Set<Product.PurchaseOption> = []\n        if let quantity = body[\"quantity\"] as? Int, quantity > 1 {\n            options.insert(.quantity(quantity))\n        }\n        if let token = body[\"appAccountToken\"] as? String, let uuid = UUID(uuidString: token) {\n            options.insert(.appAccountToken(uuid))\n        }\n        let result = try await product.purchase(options: options)\n        switch result {\n        case .success(let verification):\n            switch verification {\n            case .verified(let transaction):\n                pending[transaction.id] = transaction\n                return [\n                    \"status\": \"purchased\",\n                    \"transaction\": Self.transactionInfo(transaction, jws: verification.jwsRepresentation),\n                ]\n            case .unverified(_, let error):\n                return [\"status\": \"unverified\", \"reason\": String(describing: error)]\n            }\n        case .userCancelled:\n            return [\"status\": \"cancelled\"]\n        case .pending:\n            return [\"status\": \"pending\"]\n        @unknown default:\n            return [\"status\": \"failed\", \"reason\": \"StoreKit returned an unknown purchase result.\"]\n        }\n    }\n\n    @MainActor\n    private func finish(_ id: UInt64) async -> Bool {\n        if let transaction = pending.removeValue(forKey: id) {\n            await transaction.finish()\n            return true\n        }\n        for await result in Transaction.unfinished {\n            if case .verified(let transaction) = result, transaction.id == id {\n                await transaction.finish()\n                return true\n            }\n        }\n        return false\n    }\n\n    private static func typeName(_ type: Product.ProductType) -> String {\n        if type == .consumable { return \"consumable\" }\n        if type == .nonConsumable { return \"nonConsumable\" }\n        if type == .autoRenewable { return \"autoRenewable\" }\n        if type == .nonRenewable { return \"nonRenewable\" }\n        return \"other\"\n    }\n\n    private static func productInfo(_ product: Product) -> [String: Any] {\n        return [\n            \"id\": product.id,\n            \"type\": typeName(product.type),\n            \"displayName\": product.displayName,\n            \"description\": product.description,\n            \"displayPrice\": product.displayPrice,\n            \"price\": NSDecimalNumber(decimal: product.price).doubleValue,\n            \"currencyCode\": product.priceFormatStyle.currencyCode,\n        ]\n    }\n\n    /// Ids go to the page as strings: a transaction id is a UInt64 and need not fit a double.\n    private static func transactionInfo(_ transaction: Transaction, jws: String) -> [String: Any] {\n        var info: [String: Any] = [\n            \"transactionId\": String(transaction.id),\n            \"originalTransactionId\": String(transaction.originalID),\n            \"productId\": transaction.productID,\n            \"productType\": typeName(transaction.productType),\n            \"quantity\": transaction.purchasedQuantity,\n            \"purchaseDate\": transaction.purchaseDate.timeIntervalSince1970 * 1000,\n            \"revoked\": transaction.revocationDate != nil,\n            \"jws\": jws,\n        ]\n        if #available(iOS 16.0, *) {\n            info[\"environment\"] = transaction.environment.rawValue\n        }\n        if let token = transaction.appAccountToken {\n            info[\"appAccountToken\"] = token.uuidString\n        }\n        return info\n    }\n}\n\nenum StoreBridgeError: Error, CustomStringConvertible {\n    case badRequest(String)\n\n    var description: String {\n        switch self {\n        case .badRequest(let message):\n            return message\n        }\n    }\n}\n";

package/dist/ios/store-bridge.js

@@ -0,0 +1,224 @@
+/**
+ * The shell's App Store bridge (§13 of docs/ios-export-design.md): StoreKit 2 behind one
+ * `WKScriptMessageHandlerWithReply`, so the page's `postMessage` returns a promise and no request
+ * ids are needed. The engine side is `game/src/engine/store/NativeStoreBackend.ts`; the message
+ * shapes below are the contract between them, so change both or neither.
+ *
+ * Ops (page → app, each answered once):
+ *   status      { canMakePayments }
+ *   products    { ids }                      → { products, missing }
+ *   purchase    { productId, quantity?, appAccountToken? }
+ *                                            → { status: purchased | pending | cancelled | unverified | failed, transaction?, reason? }
+ *   unfinished  {}                           → { transactions }
+ *   finish      { transactionId }            → { finished }
+ * Event (app → page): a `bmstore:transaction` window event whenever StoreKit delivers a purchase
+ * outside a purchase() call. It carries nothing; the page answers it by asking for `unfinished`,
+ * so a page that was not listening yet loses nothing.
+ *
+ * A verified purchase is never finished here. The engine records the credit first and then asks
+ * for `finish`; until then StoreKit keeps re-delivering the transaction, which is what makes an
+ * app killed between payment and crediting safe.
+ *
+ * Same literal rules as xcode-template.ts: no Swift `\(...)` interpolation, no backticks.
+ */
+export const STORE_HANDLER_NAME = 'bmStore';
+export const STORE_TRANSACTION_EVENT = 'bmstore:transaction';
+export const STORE_BRIDGE_SWIFT = `import Foundation
+import StoreKit
+import WebKit
+
+/// App Store purchases for the game page. See the ops table in the CLI's store-bridge.ts.
+final class StoreBridge: NSObject, WKScriptMessageHandlerWithReply {
+    static let handlerName = "${STORE_HANDLER_NAME}"
+    static let transactionEvent = "${STORE_TRANSACTION_EVENT}"
+
+    weak var webView: WKWebView?
+    private var updatesTask: Task<Void, Never>?
+    /// Verified, not yet finished transactions, by id — so finish never has to search.
+    private var pending: [UInt64: Transaction] = [:]
+
+    deinit {
+        updatesTask?.cancel()
+    }
+
+    /// Listen for purchases that complete outside a purchase() call: Ask to Buy approvals,
+    /// payment-method fixes, a purchase interrupted by the app being killed. Apple's guidance is
+    /// to start this at launch, before any purchase, or such transactions can be missed.
+    @MainActor
+    func start() {
+        updatesTask = Task { [weak self] in
+            for await result in Transaction.updates {
+                self?.received(result)
+            }
+        }
+    }
+
+    @MainActor
+    private func received(_ result: VerificationResult<Transaction>) {
+        guard case .verified(let transaction) = result else { return }
+        pending[transaction.id] = transaction
+        let script = "window.dispatchEvent(new CustomEvent('" + Self.transactionEvent + "'))"
+        webView?.evaluateJavaScript(script, completionHandler: nil)
+    }
+
+    func userContentController(
+        _ userContentController: WKUserContentController,
+        didReceive message: WKScriptMessage,
+        replyHandler: @escaping (Any?, String?) -> Void
+    ) {
+        guard let body = message.body as? [String: Any], let op = body["op"] as? String else {
+            replyHandler(nil, "A store request needs an op.")
+            return
+        }
+        Task { @MainActor in
+            do {
+                let reply = try await self.handle(op: op, body: body)
+                replyHandler(reply, nil)
+            } catch {
+                replyHandler(nil, String(describing: error))
+            }
+        }
+    }
+
+    @MainActor
+    private func handle(op: String, body: [String: Any]) async throws -> Any {
+        switch op {
+        case "status":
+            return ["canMakePayments": AppStore.canMakePayments]
+        case "products":
+            let ids = (body["ids"] as? [String]) ?? []
+            let products = try await Product.products(for: ids)
+            let found = Set(products.map { $0.id })
+            return [
+                "products": products.map { Self.productInfo($0) },
+                "missing": ids.filter { !found.contains($0) },
+            ]
+        case "purchase":
+            return try await purchase(body)
+        case "unfinished":
+            var transactions: [[String: Any]] = []
+            for await result in Transaction.unfinished {
+                guard case .verified(let transaction) = result else { continue }
+                pending[transaction.id] = transaction
+                transactions.append(Self.transactionInfo(transaction, jws: result.jwsRepresentation))
+            }
+            return ["transactions": transactions]
+        case "finish":
+            guard let text = body["transactionId"] as? String, let id = UInt64(text) else {
+                throw StoreBridgeError.badRequest("finish needs a transactionId string")
+            }
+            return ["finished": await finish(id)]
+        default:
+            throw StoreBridgeError.badRequest("Unknown store op " + op)
+        }
+    }
+
+    @MainActor
+    private func purchase(_ body: [String: Any]) async throws -> Any {
+        guard let productId = body["productId"] as? String else {
+            throw StoreBridgeError.badRequest("purchase needs a productId")
+        }
+        guard let product = try await Product.products(for: [productId]).first else {
+            return [
+                "status": "failed",
+                "reason": "The App Store did not return the product " + productId + ".",
+            ]
+        }
+        var options: Set<Product.PurchaseOption> = []
+        if let quantity = body["quantity"] as? Int, quantity > 1 {
+            options.insert(.quantity(quantity))
+        }
+        if let token = body["appAccountToken"] as? String, let uuid = UUID(uuidString: token) {
+            options.insert(.appAccountToken(uuid))
+        }
+        let result = try await product.purchase(options: options)
+        switch result {
+        case .success(let verification):
+            switch verification {
+            case .verified(let transaction):
+                pending[transaction.id] = transaction
+                return [
+                    "status": "purchased",
+                    "transaction": Self.transactionInfo(transaction, jws: verification.jwsRepresentation),
+                ]
+            case .unverified(_, let error):
+                return ["status": "unverified", "reason": String(describing: error)]
+            }
+        case .userCancelled:
+            return ["status": "cancelled"]
+        case .pending:
+            return ["status": "pending"]
+        @unknown default:
+            return ["status": "failed", "reason": "StoreKit returned an unknown purchase result."]
+        }
+    }
+
+    @MainActor
+    private func finish(_ id: UInt64) async -> Bool {
+        if let transaction = pending.removeValue(forKey: id) {
+            await transaction.finish()
+            return true
+        }
+        for await result in Transaction.unfinished {
+            if case .verified(let transaction) = result, transaction.id == id {
+                await transaction.finish()
+                return true
+            }
+        }
+        return false
+    }
+
+    private static func typeName(_ type: Product.ProductType) -> String {
+        if type == .consumable { return "consumable" }
+        if type == .nonConsumable { return "nonConsumable" }
+        if type == .autoRenewable { return "autoRenewable" }
+        if type == .nonRenewable { return "nonRenewable" }
+        return "other"
+    }
+
+    private static func productInfo(_ product: Product) -> [String: Any] {
+        return [
+            "id": product.id,
+            "type": typeName(product.type),
+            "displayName": product.displayName,
+            "description": product.description,
+            "displayPrice": product.displayPrice,
+            "price": NSDecimalNumber(decimal: product.price).doubleValue,
+            "currencyCode": product.priceFormatStyle.currencyCode,
+        ]
+    }
+
+    /// Ids go to the page as strings: a transaction id is a UInt64 and need not fit a double.
+    private static func transactionInfo(_ transaction: Transaction, jws: String) -> [String: Any] {
+        var info: [String: Any] = [
+            "transactionId": String(transaction.id),
+            "originalTransactionId": String(transaction.originalID),
+            "productId": transaction.productID,
+            "productType": typeName(transaction.productType),
+            "quantity": transaction.purchasedQuantity,
+            "purchaseDate": transaction.purchaseDate.timeIntervalSince1970 * 1000,
+            "revoked": transaction.revocationDate != nil,
+            "jws": jws,
+        ]
+        if #available(iOS 16.0, *) {
+            info["environment"] = transaction.environment.rawValue
+        }
+        if let token = transaction.appAccountToken {
+            info["appAccountToken"] = token.uuidString
+        }
+        return info
+    }
+}
+
+enum StoreBridgeError: Error, CustomStringConvertible {
+    case badRequest(String)
+
+    var description: String {
+        switch self {
+        case .badRequest(let message):
+            return message
+        }
+    }
+}
+`;
+//# sourceMappingURL=store-bridge.js.map

package/dist/ios/store-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-bridge.js","sourceRoot":"","sources":["../../src/ios/store-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;gCAMF,kBAAkB;qCACb,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8L3D,CAAC"}

package/dist/ios/storekit-config.d.ts

@@ -0,0 +1,15 @@
+export interface StoreKitProductInput {
+    id: string;
+    /** Test price, e.g. "0.99". Defaults to 0.99. */
+    price?: string;
+    /** Test display name. Defaults to the id. */
+    name?: string;
+}
+export interface StoreKitUpsertResult {
+    created: boolean;
+    added: string[];
+    alreadyListed: string[];
+}
+export declare function validateProductId(id: string): void;
+/** Add the consumables the file does not list yet; create the file when there is none. */
+export declare function upsertStoreKitConsumables(filePath: string, products: readonly StoreKitProductInput[]): StoreKitUpsertResult;

package/dist/ios/storekit-config.js

@@ -0,0 +1,106 @@
+/**
+ * `ios/StoreKit.storekit` — Xcode's local StoreKit test catalogue (§13 of
+ * docs/ios-export-design.md). With it, a run started from Xcode answers products and purchases
+ * from this file instead of the App Store, so a shop can be exercised in the Simulator before the
+ * creator has set anything up in App Store Connect.
+ *
+ * The file is the creator's: `bitmagic ios storekit` only ever ADDS consumables it does not
+ * already list, and everything else (prices, names, other product types edited in Xcode) is kept
+ * verbatim. Prices and names here are test values; the real ones come from App Store Connect.
+ */
+import { createHash } from 'crypto';
+import * as fs from 'fs';
+import * as path from 'path';
+import { CliError } from '../errors.js';
+/** Apple's rule for a product id: letters, digits, underscores and periods. */
+const PRODUCT_ID = /^[A-Za-z0-9._]+$/;
+/** Stable 8-hex ids, so regenerating the same product writes the same file. */
+function internalId(seed) {
+    return createHash('sha256').update(seed).digest('hex').slice(0, 8).toUpperCase();
+}
+function emptyCatalogue(seed) {
+    return {
+        identifier: internalId(`catalogue:${seed}`),
+        nonRenewingSubscriptions: [],
+        products: [],
+        settings: {
+            _failTransactionsEnabled: false,
+            _locale: 'en_US',
+            _storefront: 'USA',
+        },
+        subscriptionGroups: [],
+        version: { major: 2, minor: 0 },
+    };
+}
+function consumable(input) {
+    const name = input.name ?? input.id;
+    return {
+        displayPrice: input.price ?? '0.99',
+        familyShareable: false,
+        internalID: internalId(`product:${input.id}`),
+        localizations: [{ description: name, displayName: name, locale: 'en_US' }],
+        productID: input.id,
+        referenceName: name,
+        type: 'Consumable',
+    };
+}
+export function validateProductId(id) {
+    if (!PRODUCT_ID.test(id)) {
+        throw new CliError(`"${id}" is not a valid App Store product id: use letters, digits, underscores and periods `
+            + '(e.g. gems_100 or com.studio.game.gems100).', 2);
+    }
+}
+function validatePrice(price) {
+    if (!/^\d+(\.\d{1,2})?$/.test(price)) {
+        throw new CliError(`--price must be a plain amount such as 0.99, not "${price}".`, 2);
+    }
+}
+/** Add the consumables the file does not list yet; create the file when there is none. */
+export function upsertStoreKitConsumables(filePath, products) {
+    for (const product of products) {
+        validateProductId(product.id);
+        if (product.price !== undefined)
+            validatePrice(product.price);
+    }
+    const created = !fs.existsSync(filePath);
+    let catalogue;
+    if (created) {
+        catalogue = emptyCatalogue(products.map((p) => p.id).join(','));
+    }
+    else {
+        let parsed;
+        try {
+            parsed = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
+        }
+        catch (err) {
+            throw new CliError(`${filePath} is not valid JSON (${err.message}). Fix or delete it.`, 3);
+        }
+        if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+            throw new CliError(`${filePath} is not a StoreKit configuration file. Fix or delete it.`, 3);
+        }
+        catalogue = parsed;
+    }
+    const list = Array.isArray(catalogue.products) ? catalogue.products : [];
+    const listed = new Set(list.flatMap((entry) => {
+        const id = entry?.productID;
+        return typeof id === 'string' ? [id] : [];
+    }));
+    const added = [];
+    const alreadyListed = [];
+    for (const product of products) {
+        if (listed.has(product.id)) {
+            alreadyListed.push(product.id);
+            continue;
+        }
+        list.push(consumable(product));
+        listed.add(product.id);
+        added.push(product.id);
+    }
+    catalogue.products = list;
+    if (created || added.length > 0) {
+        fs.mkdirSync(path.dirname(filePath), { recursive: true });
+        fs.writeFileSync(filePath, `${JSON.stringify(catalogue, null, 2)}\n`);
+    }
+    return { created, added, alreadyListed };
+}
+//# sourceMappingURL=storekit-config.js.map

package/dist/ios/storekit-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storekit-config.js","sourceRoot":"","sources":["../../src/ios/storekit-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,+EAA+E;AAC/E,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAgBtC,+EAA+E;AAC/E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;QAC3C,wBAAwB,EAAE,EAAE;QAC5B,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE;YACR,wBAAwB,EAAE,KAAK;YAC/B,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,KAAK;SACnB;QACD,kBAAkB,EAAE,EAAE;QACtB,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAA2B;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;IACpC,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,KAAK,IAAI,MAAM;QACnC,eAAe,EAAE,KAAK;QACtB,UAAU,EAAE,UAAU,CAAC,WAAW,KAAK,CAAC,EAAE,EAAE,CAAC;QAC7C,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC1E,SAAS,EAAE,KAAK,CAAC,EAAE;QACnB,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,YAAY;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAChB,IAAI,EAAE,sFAAsF;cACxF,6CAA6C,EACjD,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CAAC,qDAAqD,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,QAAyC;IAEzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,SAAkC,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACZ,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,QAAQ,CAAC,GAAG,QAAQ,uBAAwB,GAAa,CAAC,OAAO,sBAAsB,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,QAAQ,CAAC,GAAG,QAAQ,0DAA0D,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC;QACD,SAAS,GAAG,MAAiC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,SAAS,CAAC,QAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,MAAM,EAAE,GAAI,KAAwC,EAAE,SAAS,CAAC;QAChE,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC;IAE1B,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAC3C,CAAC"}

package/dist/ios/xcode-template.d.ts

@@ -1,11 +1,20 @@
 import type { IosAppConfig } from './app-config.js';
+import { type NativeOverrides } from './native-overrides.js';
 export declare const TARGET_NAME = "Game";
 export declare const PAYLOAD_DIR_NAME = "GamePayload";
 export declare const URL_SCHEME = "bmapp";
 /** The Info.plist orientation array for the project's declaration (§6). */
 export declare function orientationValues(orientation: 'portrait' | 'landscape' | undefined): string[];
 /**
- * Write the whole project (everything except the payload contents and the icon PNG, which have
- * their own producers). Existing files are overwritten — the project is CLI-owned.
+ * The hook creator Swift (ios/Sources/) plugs into, and the list of adopters this build found.
+ * Generated because Swift has no static registration: the CLI scans the creator's files for
+ * classes adopting the protocol (native-overrides.ts) and lists them here. Each needs an init
+ * that takes no arguments; one that lacks it fails the build with Swift's own error, naming it.
  */
-export declare function stampXcodeProject(projectDir: string, config: IosAppConfig): void;
+export declare function nativeExtensionsSwift(classNames: readonly string[]): string;
+/**
+ * Write the whole project (everything except the payload contents, the icon PNG and the
+ * creator's own files, which have their own producers). Existing files are overwritten — the
+ * project is CLI-owned. `overrides` describes what `copyNativeOverrides` puts in it.
+ */
+export declare function stampXcodeProject(projectDir: string, config: IosAppConfig, overrides?: NativeOverrides): void;