@chipmobilesdk/rn-payment 0.5.0 → 0.7.0

package/lib/commonjs/config/validate.js

@@ -0,0 +1,181 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.assertEnvironmentSafe = assertEnvironmentSafe;
+exports.mayCreateRealTransaction = mayCreateRealTransaction;
+exports.validateConfig = validateConfig;
+var _errors = require("../diagnostics/errors.js");
+var _timers = require("../core/timers.js");
+/**
+ * Catalog validation (FR-011).
+ *
+ * Runs at `configure`, before any connection is opened, so a bad catalog fails
+ * at configuration time rather than at the moment a user taps Buy. Every failure
+ * **names the offending entry** — "invalid catalog" alone is useless in an app
+ * with thirty products.
+ *
+ * All problems are collected rather than thrown one at a time, so a developer
+ * fixes the catalog in one pass instead of rerunning to find the next fault.
+ */
+
+const PRODUCT_TYPES = ['one_time_permanent', 'one_time_consumable', 'subscription'];
+
+/** The platform whose store identifiers a catalog must supply. */
+
+/**
+ * A validated, indexed catalog plus every resolved policy value.
+ *
+ * Produced once so the hot paths never re-derive it, and so `getEntitlement` can
+ * stay a synchronous in-memory read (PERF-001).
+ */
+
+function validateConfig(config, platform = 'android') {
+  const problems = [];
+  const offenders = [];
+  const entries = new Map();
+  const grants = new Map();
+  const sources = new Map();
+  const byStoreId = new Map();
+  if (config.catalog.length === 0) {
+    problems.push('catalog is empty');
+    offenders.push('catalog');
+  }
+  for (const entry of config.catalog) {
+    const key = entry.productKey;
+    if (!key || key.trim() === '') {
+      problems.push('a catalog entry has an empty productKey');
+      offenders.push('(empty productKey)');
+      continue;
+    }
+    if (entries.has(key)) {
+      problems.push(`duplicate productKey "${key}"`);
+      offenders.push(key);
+      continue;
+    }
+    if (!PRODUCT_TYPES.includes(entry.productType)) {
+      problems.push(`productKey "${key}" has invalid productType "${String(entry.productType)}"`);
+      offenders.push(key);
+    }
+    const storeId = entry.storeProductIds[platform];
+    if (!storeId || storeId.trim() === '') {
+      problems.push(`productKey "${key}" is missing a store product id for platform "${platform}"`);
+      offenders.push(key);
+    } else {
+      const existing = byStoreId.get(storeId);
+      if (existing !== undefined) {
+        // Two product keys pointing at one store id would make a store callback
+        // ambiguous, so the wrong entitlement could be granted.
+        problems.push(`store product id "${storeId}" is used by both "${existing}" and "${key}"`);
+        offenders.push(key);
+      } else {
+        byStoreId.set(storeId, key);
+      }
+    }
+    if (!Array.isArray(entry.grants) || entry.grants.length === 0) {
+      problems.push(`productKey "${key}" grants no entitlement`);
+      offenders.push(key);
+    }
+    entries.set(key, entry);
+    grants.set(key, [...(entry.grants ?? [])]);
+    for (const entitlement of entry.grants ?? []) {
+      const list = sources.get(entitlement);
+      if (list) {
+        list.push(key);
+      } else {
+        sources.set(entitlement, [key]);
+      }
+    }
+  }
+
+  // An entitlement the app intends to query but no product can grant is almost
+  // always a typo, and it would otherwise sit at `not_entitled` forever with no
+  // indication why.
+  for (const entitlement of config.entitlements) {
+    if (!sources.has(entitlement)) {
+      problems.push(`entitlement "${entitlement}" is declared but no catalog product grants it`);
+      offenders.push(entitlement);
+    }
+  }
+
+  // A product granting something the app never declared is the mirror problem:
+  // harmless at runtime, but a strong signal of a rename half-applied.
+  const declared = new Set(config.entitlements);
+  for (const entitlement of sources.keys()) {
+    if (!declared.has(entitlement)) {
+      problems.push(`entitlement "${entitlement}" is granted by a product but not declared in config.entitlements`);
+      offenders.push(entitlement);
+    }
+  }
+  if (problems.length > 0) {
+    throw new _errors.PaymentConfigError({
+      code: 'PAYMENT_INVALID_CATALOG',
+      message: `Payment catalog is invalid: ${problems.join('; ')}`,
+      operation: 'configure',
+      offenders: [...new Set(offenders)]
+    });
+  }
+  return {
+    entries,
+    grants,
+    sources: new Map([...sources].map(([k, v]) => [k, [...v]])),
+    byStoreId,
+    entitlementKeys: [...config.entitlements],
+    platform,
+    enabled: config.enabled ?? true,
+    gracePolicy: config.gracePolicy ?? 'grant',
+    holdPolicy: config.holdPolicy ?? 'withhold',
+    staleAfterMs: (0, _timers.resolveStaleAfterMs)(config.staleAfterMs),
+    productCacheTtlMs: (0, _timers.resolveProductCacheTtlMs)(config.productCacheTtlMs),
+    foregroundSyncMinIntervalMs: (0, _timers.resolveForegroundSyncMinIntervalMs)(config.foregroundSyncMinIntervalMs),
+    timeouts: (0, _timers.resolveTimeouts)(config.timeouts),
+    retry: (0, _timers.resolveRetry)(config.retry),
+    onValidationUnavailable: config.onValidationUnavailable ?? 'grant_and_queue'
+  };
+}
+
+/**
+ * The fail-closed environment guard (FR-015).
+ *
+ * Separate from catalog validation because it is not about the catalog's shape
+ * but about whether this binary is allowed to move real money at all. Checked
+ * before connecting, and it refuses rather than warns: a non-production build
+ * that declares `production` is one tap away from charging a real card, and
+ * continuing silently is exactly the failure this package exists to prevent.
+ */
+function assertEnvironmentSafe(config) {
+  if (config.allowStoreTestPurchases === true && config.environment !== 'test') {
+    throw new _errors.PaymentConfigError({
+      code: 'PAYMENT_INVALID_CONFIG',
+      message: `allowStoreTestPurchases is only accepted with environment "test", not ` + `"${config.environment}": it exists for license testers, not for real users.`,
+      operation: 'configure',
+      offenders: ['allowStoreTestPurchases']
+    });
+  }
+  if (config.environment === 'production' && !config.isProductionBuild) {
+    throw new _errors.PaymentConfigError({
+      code: 'PAYMENT_PRODUCTION_CONFIG_IN_NON_PRODUCTION_BUILD',
+      message: 'environment is "production" but isProductionBuild is false. Refusing to ' + 'initialize: a non-production build must not be able to create a real ' + 'transaction.',
+      operation: 'configure',
+      offenders: ['environment']
+    });
+  }
+}
+
+/**
+ * Whether this configuration may hand a purchase to a real store (FR-014).
+ *
+ * True in a production build configured for production, and in a `test`
+ * environment that opted in with `allowStoreTestPurchases` (PAY-16). False
+ * everywhere else. The engine records each refusal in observable status so a
+ * test can assert the block happened — the difference between a guarantee and a
+ * hope.
+ */
+function mayCreateRealTransaction(config) {
+  if (config.environment === 'test' && config.allowStoreTestPurchases === true) {
+    return true;
+  }
+  return config.environment === 'production' && config.isProductionBuild;
+}
+//# sourceMappingURL=validate.js.map

package/lib/commonjs/config/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_errors","require","_timers","PRODUCT_TYPES","validateConfig","config","platform","problems","offenders","entries","Map","grants","sources","byStoreId","catalog","length","push","entry","key","productKey","trim","has","includes","productType","String","storeId","storeProductIds","existing","get","undefined","set","Array","isArray","entitlement","list","entitlements","declared","Set","keys","PaymentConfigError","code","message","join","operation","map","k","v","entitlementKeys","enabled","gracePolicy","holdPolicy","staleAfterMs","resolveStaleAfterMs","productCacheTtlMs","resolveProductCacheTtlMs","foregroundSyncMinIntervalMs","resolveForegroundSyncMinIntervalMs","timeouts","resolveTimeouts","retry","resolveRetry","onValidationUnavailable","assertEnvironmentSafe","allowStoreTestPurchases","environment","isProductionBuild","mayCreateRealTransaction"],"sourceRoot":"../../../src","sources":["config/validate.ts"],"mappings":";;;;;;;;AAYA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAsBA,MAAME,aAAqC,GAAG,CAC7C,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,CACd;;AAED;;AAGA;AACA;AACA;AACA;AACA;AACA;;AAsBO,SAASC,cAAcA,CAC7BC,MAAqB,EACrBC,QAAwB,GAAG,SAAS,EACnB;EACjB,MAAMC,QAAkB,GAAG,EAAE;EAC7B,MAAMC,SAAmB,GAAG,EAAE;EAE9B,MAAMC,OAAO,GAAG,IAAIC,GAAG,CAA2B,CAAC;EACnD,MAAMC,MAAM,GAAG,IAAID,GAAG,CAAwC,CAAC;EAC/D,MAAME,OAAO,GAAG,IAAIF,GAAG,CAA+B,CAAC;EACvD,MAAMG,SAAS,GAAG,IAAIH,GAAG,CAAqB,CAAC;EAE/C,IAAIL,MAAM,CAACS,OAAO,CAACC,MAAM,KAAK,CAAC,EAAE;IAChCR,QAAQ,CAACS,IAAI,CAAC,kBAAkB,CAAC;IACjCR,SAAS,CAACQ,IAAI,CAAC,SAAS,CAAC;EAC1B;EAEA,KAAK,MAAMC,KAAK,IAAIZ,MAAM,CAACS,OAAO,EAAE;IACnC,MAAMI,GAAG,GAAGD,KAAK,CAACE,UAAU;IAE5B,IAAI,CAACD,GAAG,IAAIA,GAAG,CAACE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;MAC9Bb,QAAQ,CAACS,IAAI,CAAC,yCAAyC,CAAC;MACxDR,SAAS,CAACQ,IAAI,CAAC,oBAAoB,CAAC;MACpC;IACD;IAEA,IAAIP,OAAO,CAACY,GAAG,CAACH,GAAG,CAAC,EAAE;MACrBX,QAAQ,CAACS,IAAI,CAAC,yBAAyBE,GAAG,GAAG,CAAC;MAC9CV,SAAS,CAACQ,IAAI,CAACE,GAAG,CAAC;MACnB;IACD;IAEA,IAAI,CAACf,aAAa,CAACmB,QAAQ,CAACL,KAAK,CAACM,WAAW,CAAC,EAAE;MAC/ChB,QAAQ,CAACS,IAAI,CAAC,eAAeE,GAAG,8BAA8BM,MAAM,CAACP,KAAK,CAACM,WAAW,CAAC,GAAG,CAAC;MAC3Ff,SAAS,CAACQ,IAAI,CAACE,GAAG,CAAC;IACpB;IAEA,MAAMO,OAAO,GAAGR,KAAK,CAACS,eAAe,CAACpB,QAAQ,CAAC;IAC/C,IAAI,CAACmB,OAAO,IAAIA,OAAO,CAACL,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;MACtCb,QAAQ,CAACS,IAAI,CAAC,eAAeE,GAAG,iDAAiDZ,QAAQ,GAAG,CAAC;MAC7FE,SAAS,CAACQ,IAAI,CAACE,GAAG,CAAC;IACpB,CAAC,MAAM;MACN,MAAMS,QAAQ,GAAGd,SAAS,CAACe,GAAG,CAACH,OAAO,CAAC;MACvC,IAAIE,QAAQ,KAAKE,SAAS,EAAE;QAC3B;QACA;QACAtB,QAAQ,CAACS,IAAI,CAAC,qBAAqBS,OAAO,sBAAsBE,QAAQ,UAAUT,GAAG,GAAG,CAAC;QACzFV,SAAS,CAACQ,IAAI,CAACE,GAAG,CAAC;MACpB,CAAC,MAAM;QACNL,SAAS,CAACiB,GAAG,CAACL,OAAO,EAAEP,GAAG,CAAC;MAC5B;IACD;IAEA,IAAI,CAACa,KAAK,CAACC,OAAO,CAACf,KAAK,CAACN,MAAM,CAAC,IAAIM,KAAK,CAACN,MAAM,CAACI,MAAM,KAAK,CAAC,EAAE;MAC9DR,QAAQ,CAACS,IAAI,CAAC,eAAeE,GAAG,yBAAyB,CAAC;MAC1DV,SAAS,CAACQ,IAAI,CAACE,GAAG,CAAC;IACpB;IAEAT,OAAO,CAACqB,GAAG,CAACZ,GAAG,EAAED,KAAK,CAAC;IACvBN,MAAM,CAACmB,GAAG,CAACZ,GAAG,EAAE,CAAC,IAAID,KAAK,CAACN,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAE1C,KAAK,MAAMsB,WAAW,IAAIhB,KAAK,CAACN,MAAM,IAAI,EAAE,EAAE;MAC7C,MAAMuB,IAAI,GAAGtB,OAAO,CAACgB,GAAG,CAACK,WAAW,CAAC;MACrC,IAAIC,IAAI,EAAE;QACTA,IAAI,CAAClB,IAAI,CAACE,GAAG,CAAC;MACf,CAAC,MAAM;QACNN,OAAO,CAACkB,GAAG,CAACG,WAAW,EAAE,CAACf,GAAG,CAAC,CAAC;MAChC;IACD;EACD;;EAEA;EACA;EACA;EACA,KAAK,MAAMe,WAAW,IAAI5B,MAAM,CAAC8B,YAAY,EAAE;IAC9C,IAAI,CAACvB,OAAO,CAACS,GAAG,CAACY,WAAW,CAAC,EAAE;MAC9B1B,QAAQ,CAACS,IAAI,CAAC,gBAAgBiB,WAAW,gDAAgD,CAAC;MAC1FzB,SAAS,CAACQ,IAAI,CAACiB,WAAW,CAAC;IAC5B;EACD;;EAEA;EACA;EACA,MAAMG,QAAQ,GAAG,IAAIC,GAAG,CAAChC,MAAM,CAAC8B,YAAY,CAAC;EAC7C,KAAK,MAAMF,WAAW,IAAIrB,OAAO,CAAC0B,IAAI,CAAC,CAAC,EAAE;IACzC,IAAI,CAACF,QAAQ,CAACf,GAAG,CAACY,WAAW,CAAC,EAAE;MAC/B1B,QAAQ,CAACS,IAAI,CACZ,gBAAgBiB,WAAW,mEAC5B,CAAC;MACDzB,SAAS,CAACQ,IAAI,CAACiB,WAAW,CAAC;IAC5B;EACD;EAEA,IAAI1B,QAAQ,CAACQ,MAAM,GAAG,CAAC,EAAE;IACxB,MAAM,IAAIwB,0BAAkB,CAAC;MAC5BC,IAAI,EAAE,yBAAyB;MAC/BC,OAAO,EAAE,+BAA+BlC,QAAQ,CAACmC,IAAI,CAAC,IAAI,CAAC,EAAE;MAC7DC,SAAS,EAAE,WAAW;MACtBnC,SAAS,EAAE,CAAC,GAAG,IAAI6B,GAAG,CAAC7B,SAAS,CAAC;IAClC,CAAC,CAAC;EACH;EAEA,OAAO;IACNC,OAAO;IACPE,MAAM;IACNC,OAAO,EAAE,IAAIF,GAAG,CAAC,CAAC,GAAGE,OAAO,CAAC,CAACgC,GAAG,CAAC,CAAC,CAACC,CAAC,EAAEC,CAAC,CAAC,KAAK,CAACD,CAAC,EAAE,CAAC,GAAGC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3DjC,SAAS;IACTkC,eAAe,EAAE,CAAC,GAAG1C,MAAM,CAAC8B,YAAY,CAAC;IACzC7B,QAAQ;IACR0C,OAAO,EAAE3C,MAAM,CAAC2C,OAAO,IAAI,IAAI;IAC/BC,WAAW,EAAE5C,MAAM,CAAC4C,WAAW,IAAI,OAAO;IAC1CC,UAAU,EAAE7C,MAAM,CAAC6C,UAAU,IAAI,UAAU;IAC3CC,YAAY,EAAE,IAAAC,2BAAmB,EAAC/C,MAAM,CAAC8C,YAAY,CAAC;IACtDE,iBAAiB,EAAE,IAAAC,gCAAwB,EAACjD,MAAM,CAACgD,iBAAiB,CAAC;IACrEE,2BAA2B,EAAE,IAAAC,0CAAkC,EAC9DnD,MAAM,CAACkD,2BACR,CAAC;IACDE,QAAQ,EAAE,IAAAC,uBAAe,EAACrD,MAAM,CAACoD,QAAQ,CAAC;IAC1CE,KAAK,EAAE,IAAAC,oBAAY,EAACvD,MAAM,CAACsD,KAAK,CAAC;IACjCE,uBAAuB,EAAExD,MAAM,CAACwD,uBAAuB,IAAI;EAC5D,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,qBAAqBA,CAACzD,MAAqB,EAAQ;EAClE,IAAIA,MAAM,CAAC0D,uBAAuB,KAAK,IAAI,IAAI1D,MAAM,CAAC2D,WAAW,KAAK,MAAM,EAAE;IAC7E,MAAM,IAAIzB,0BAAkB,CAAC;MAC5BC,IAAI,EAAE,wBAAwB;MAC9BC,OAAO,EACN,wEAAwE,GACxE,IAAIpC,MAAM,CAAC2D,WAAW,uDAAuD;MAC9ErB,SAAS,EAAE,WAAW;MACtBnC,SAAS,EAAE,CAAC,yBAAyB;IACtC,CAAC,CAAC;EACH;EACA,IAAIH,MAAM,CAAC2D,WAAW,KAAK,YAAY,IAAI,CAAC3D,MAAM,CAAC4D,iBAAiB,EAAE;IACrE,MAAM,IAAI1B,0BAAkB,CAAC;MAC5BC,IAAI,EAAE,mDAAmD;MACzDC,OAAO,EACN,0EAA0E,GAC1E,uEAAuE,GACvE,cAAc;MACfE,SAAS,EAAE,WAAW;MACtBnC,SAAS,EAAE,CAAC,aAAa;IAC1B,CAAC,CAAC;EACH;AACD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS0D,wBAAwBA,CAAC7D,MAAqB,EAAW;EACxE,IAAIA,MAAM,CAAC2D,WAAW,KAAK,MAAM,IAAI3D,MAAM,CAAC0D,uBAAuB,KAAK,IAAI,EAAE;IAC7E,OAAO,IAAI;EACZ;EACA,OAAO1D,MAAM,CAAC2D,WAAW,KAAK,YAAY,IAAI3D,MAAM,CAAC4D,iBAAiB;AACvE","ignoreList":[]}

package/lib/commonjs/core/mutex.js

@@ -0,0 +1,31 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "createExclusive", {
+  enumerable: true,
+  get: function () {
+    return _rnCore.createExclusive;
+  }
+});
+Object.defineProperty(exports, "createRateLimiter", {
+  enumerable: true,
+  get: function () {
+    return _rnCore.createRateLimiter;
+  }
+});
+Object.defineProperty(exports, "createSingleFlight", {
+  enumerable: true,
+  get: function () {
+    return _rnCore.createSingleFlight;
+  }
+});
+Object.defineProperty(exports, "withTimeout", {
+  enumerable: true,
+  get: function () {
+    return _rnCore.withTimeout;
+  }
+});
+var _rnCore = require("@chipmobilesdk/rn-core");
+//# sourceMappingURL=mutex.js.map

package/lib/commonjs/core/mutex.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_rnCore","require"],"sourceRoot":"../../../src","sources":["core/mutex.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,IAAAA,OAAA,GAAAC,OAAA","ignoreList":[]}

package/lib/commonjs/core/retry.js

@@ -0,0 +1,37 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.backoffDelayMs = backoffDelayMs;
+var _rnCore = require("@chipmobilesdk/rn-core");
+/**
+ * Bounded backoff.
+ *
+ * "Bounded" is the whole point (FR-020, FR-045): an unbounded reconnect loop
+ * against a billing service that is down drains battery and hammers a system
+ * service, and an unbounded finalize loop hides a real failure behind noise.
+ *
+ * Delay computation is pure and separated from waiting so tests can assert the
+ * schedule without burning real time.
+ */
+
+/**
+ * Delay before `attempt` (1-based), capped and optionally jittered.
+ *
+ * Jitter is full jitter over [0, capped]: several devices that lost the billing
+ * connection at the same moment should not retry in lockstep.
+ */
+function backoffDelayMs(attempt, config, random = Math.random) {
+  return (0, _rnCore.computeBackoff)(attempt, toSpec(config), random);
+}
+function toSpec(config) {
+  return {
+    initialDelayMs: config.initialDelayMs,
+    maxDelayMs: config.maxDelayMs,
+    factor: config.factor,
+    jitter: config.jitter ? 'full' : 'none',
+    maxAttempts: config.maxAttempts
+  };
+}
+//# sourceMappingURL=retry.js.map

package/lib/commonjs/core/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_rnCore","require","backoffDelayMs","attempt","config","random","Math","computeBackoff","toSpec","initialDelayMs","maxDelayMs","factor","jitter","maxAttempts"],"sourceRoot":"../../../src","sources":["core/retry.ts"],"mappings":";;;;;;AAWA,IAAAA,OAAA,GAAAC,OAAA;AAXA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,cAAcA,CAC7BC,OAAe,EACfC,MAA+B,EAC/BC,MAAoB,GAAGC,IAAI,CAACD,MAAM,EACzB;EACT,OAAO,IAAAE,sBAAc,EAACJ,OAAO,EAAEK,MAAM,CAACJ,MAAM,CAAC,EAAEC,MAAM,CAAC;AACvD;AAEA,SAASG,MAAMA,CAACJ,MAA+B,EAAE;EAChD,OAAO;IACNK,cAAc,EAAEL,MAAM,CAACK,cAAc;IACrCC,UAAU,EAAEN,MAAM,CAACM,UAAU;IAC7BC,MAAM,EAAEP,MAAM,CAACO,MAAM;IACrBC,MAAM,EAAER,MAAM,CAACQ,MAAM,GAAI,MAAM,GAAc,MAAgB;IAC7DC,WAAW,EAAET,MAAM,CAACS;EACrB,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/core/timers.js

@@ -0,0 +1,207 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.VALIDATE_TIMEOUT_BOUNDS = exports.SYNC_TIMEOUT_BOUNDS = exports.STALE_AFTER_BOUNDS = exports.PURCHASE_LAUNCH_TIMEOUT_BOUNDS = exports.PURCHASE_FLOW_CEILING_MS = exports.PRODUCT_QUERY_TIMEOUT_BOUNDS = exports.PRODUCT_CACHE_TTL_BOUNDS = exports.FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS = exports.FINALIZE_ATTEMPT_TIMEOUT_BOUNDS = exports.DEFAULT_VALIDATE_TIMEOUT_MS = exports.DEFAULT_SYNC_TIMEOUT_MS = exports.DEFAULT_STALE_AFTER_MS = exports.DEFAULT_RECONNECT_BACKOFF = exports.DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS = exports.DEFAULT_PRODUCT_QUERY_TIMEOUT_MS = exports.DEFAULT_PRODUCT_CACHE_TTL_MS = exports.DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS = exports.DEFAULT_FINALIZE_BACKOFF = exports.DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS = exports.DEFAULT_CONNECT_TIMEOUT_MS = exports.CONNECT_TIMEOUT_BOUNDS = exports.BACKOFF_MAX_DELAY_BOUNDS = exports.BACKOFF_INITIAL_DELAY_BOUNDS = exports.BACKOFF_FACTOR_BOUNDS = exports.BACKOFF_ATTEMPT_BOUNDS = void 0;
+exports.resolveForegroundSyncMinIntervalMs = resolveForegroundSyncMinIntervalMs;
+exports.resolveProductCacheTtlMs = resolveProductCacheTtlMs;
+exports.resolveRetry = resolveRetry;
+exports.resolveStaleAfterMs = resolveStaleAfterMs;
+exports.resolveTimeouts = resolveTimeouts;
+var _rnCore = require("@chipmobilesdk/rn-core");
+var _errors = require("../diagnostics/errors.js");
+/**
+ * Timeout, retry, and cache policy.
+ *
+ * Defaults and bounds live here rather than at each call site so there is one
+ * place to read what the package will wait for, and so consumers can read the
+ * values they are bound by instead of discovering them from a timeout in
+ * production.
+ *
+ * Out-of-band values are a configuration error rather than being silently
+ * clamped: quietly turning a 1-second timeout into 3 seconds would tell the app
+ * it configured something it did not.
+ */
+
+/** Local IPC to Play Services. Slower than this means unavailable, not busy. */
+const DEFAULT_CONNECT_TIMEOUT_MS = exports.DEFAULT_CONNECT_TIMEOUT_MS = 10_000;
+/** A network round trip; a paywall that hangs longer should show its error state. */
+const DEFAULT_PRODUCT_QUERY_TIMEOUT_MS = exports.DEFAULT_PRODUCT_QUERY_TIMEOUT_MS = 15_000;
+/** Runs at startup, so it must not hold the first render hostage. */
+const DEFAULT_SYNC_TIMEOUT_MS = exports.DEFAULT_SYNC_TIMEOUT_MS = 20_000;
+/**
+ * Covers opening the store surface only.
+ *
+ * Time the user spends *inside* the store's own UI is deliberately excluded
+ * (FR-035): a user reading the terms, switching to their banking app for an OTP,
+ * or simply hesitating must never have their purchase cancelled by our clock.
+ */
+const DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS = exports.DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS = 30_000;
+/** Per finalize attempt, not per transaction — the queue owns overall persistence. */
+const DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS = exports.DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS = 15_000;
+/** The app's backend hook. A user is waiting on a purchase result behind it. */
+const DEFAULT_VALIDATE_TIMEOUT_MS = exports.DEFAULT_VALIDATE_TIMEOUT_MS = 15_000;
+/**
+ * The ceiling on a purchase flow whose outcome includes the user's own time in
+ * the store UI, so is otherwise untimed (FR-035). Not a timeout on the user: it
+ * exists only so a binding that never answers cannot hold the purchase lock for
+ * the rest of the session. A purchase that completes later still arrives through
+ * the store update channel and is granted then.
+ */
+const PURCHASE_FLOW_CEILING_MS = exports.PURCHASE_FLOW_CEILING_MS = 10 * 60_000;
+const CONNECT_TIMEOUT_BOUNDS = exports.CONNECT_TIMEOUT_BOUNDS = {
+  min: 3_000,
+  max: 60_000
+};
+const PRODUCT_QUERY_TIMEOUT_BOUNDS = exports.PRODUCT_QUERY_TIMEOUT_BOUNDS = {
+  min: 3_000,
+  max: 60_000
+};
+const SYNC_TIMEOUT_BOUNDS = exports.SYNC_TIMEOUT_BOUNDS = {
+  min: 5_000,
+  max: 120_000
+};
+const PURCHASE_LAUNCH_TIMEOUT_BOUNDS = exports.PURCHASE_LAUNCH_TIMEOUT_BOUNDS = {
+  min: 5_000,
+  max: 120_000
+};
+const FINALIZE_ATTEMPT_TIMEOUT_BOUNDS = exports.FINALIZE_ATTEMPT_TIMEOUT_BOUNDS = {
+  min: 3_000,
+  max: 60_000
+};
+const VALIDATE_TIMEOUT_BOUNDS = exports.VALIDATE_TIMEOUT_BOUNDS = {
+  min: 3_000,
+  max: 120_000
+};
+
+/**
+ * Prices and offer eligibility are shown at the moment of purchase, so a short
+ * TTL with on-demand refresh beats a long one (FR-029).
+ */
+const DEFAULT_PRODUCT_CACHE_TTL_MS = exports.DEFAULT_PRODUCT_CACHE_TTL_MS = 900_000;
+const PRODUCT_CACHE_TTL_BOUNDS = exports.PRODUCT_CACHE_TTL_BOUNDS = {
+  min: 60_000,
+  max: 86_400_000
+};
+
+/**
+ * How long a successful sync keeps entitlements trustworthy offline: **7 days**.
+ *
+ * Fixed by the specification (FR-055) after weighing both failure directions.
+ * The realistic offline cases — travel, poor coverage, a device left unused —
+ * resolve within days. Seven days covers a holiday without connectivity while
+ * bounding how long a refunded entitlement can outlive its refund to one week.
+ *
+ * Past this the entitlement becomes `unknown`, never `not_entitled` (FR-055a):
+ * the package stops asserting rather than telling a paying customer they did not
+ * pay.
+ */
+const DEFAULT_STALE_AFTER_MS = exports.DEFAULT_STALE_AFTER_MS = 604_800_000;
+const STALE_AFTER_BOUNDS = exports.STALE_AFTER_BOUNDS = {
+  min: 3_600_000,
+  max: 7_776_000_000
+};
+
+/** Keeps rapid app switching from becoming a request storm (PERF-002). */
+const DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS = exports.DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS = 60_000;
+const FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS = exports.FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS = {
+  min: 0,
+  max: 3_600_000
+};
+
+/** Bounded so a dropped billing connection cannot become a retry storm (FR-020). */
+const DEFAULT_RECONNECT_BACKOFF = exports.DEFAULT_RECONNECT_BACKOFF = {
+  initialDelayMs: 1_000,
+  maxDelayMs: 30_000,
+  factor: 2,
+  maxAttempts: 5,
+  jitter: true
+};
+
+/**
+ * Finalize retry.
+ *
+ * Bounded **per session** but never permanently abandoned: Google auto-refunds
+ * an unacknowledged purchase after three days, so exhausting this session's
+ * attempts must leave the transaction queued for the next launch, not dropped
+ * (FR-045).
+ */
+const DEFAULT_FINALIZE_BACKOFF = exports.DEFAULT_FINALIZE_BACKOFF = {
+  initialDelayMs: 2_000,
+  maxDelayMs: 60_000,
+  factor: 2,
+  maxAttempts: 5,
+  jitter: true
+};
+const BACKOFF_MAX_DELAY_BOUNDS = exports.BACKOFF_MAX_DELAY_BOUNDS = {
+  min: 5_000,
+  max: 600_000
+};
+const BACKOFF_ATTEMPT_BOUNDS = exports.BACKOFF_ATTEMPT_BOUNDS = {
+  min: 1,
+  max: 10
+};
+/** A first retry sooner than this is a storm; later than this, the user has given up. */
+const BACKOFF_INITIAL_DELAY_BOUNDS = exports.BACKOFF_INITIAL_DELAY_BOUNDS = {
+  min: 100,
+  max: 60_000
+};
+/** 1 is a constant delay; 0 or below would retry at once, forever (CORE-05). */
+const BACKOFF_FACTOR_BOUNDS = exports.BACKOFF_FACTOR_BOUNDS = {
+  min: 1,
+  max: 10
+};
+function invalidConfig(label) {
+  return message => new _errors.PaymentConfigError({
+    code: 'PAYMENT_INVALID_CONFIG',
+    message,
+    operation: 'configure',
+    offenders: [label]
+  });
+}
+function requireInBounds(label, value, fallback, bounds, unit = 'ms') {
+  return value === undefined ? fallback : (0, _rnCore.checkRange)(label, value, bounds, invalidConfig(label), unit);
+}
+function resolveTimeouts(config) {
+  return {
+    connectMs: requireInBounds('timeouts.connectMs', config?.connectMs, DEFAULT_CONNECT_TIMEOUT_MS, CONNECT_TIMEOUT_BOUNDS),
+    productQueryMs: requireInBounds('timeouts.productQueryMs', config?.productQueryMs, DEFAULT_PRODUCT_QUERY_TIMEOUT_MS, PRODUCT_QUERY_TIMEOUT_BOUNDS),
+    syncMs: requireInBounds('timeouts.syncMs', config?.syncMs, DEFAULT_SYNC_TIMEOUT_MS, SYNC_TIMEOUT_BOUNDS),
+    purchaseLaunchMs: requireInBounds('timeouts.purchaseLaunchMs', config?.purchaseLaunchMs, DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS, PURCHASE_LAUNCH_TIMEOUT_BOUNDS),
+    finalizeAttemptMs: requireInBounds('timeouts.finalizeAttemptMs', config?.finalizeAttemptMs, DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS, FINALIZE_ATTEMPT_TIMEOUT_BOUNDS),
+    validateMs: requireInBounds('timeouts.validateMs', config?.validateMs, DEFAULT_VALIDATE_TIMEOUT_MS, VALIDATE_TIMEOUT_BOUNDS)
+  };
+}
+function resolveBackoff(label, config, fallback) {
+  const maxDelayMs = requireInBounds(`${label}.maxDelayMs`, config?.maxDelayMs, fallback.maxDelayMs, BACKOFF_MAX_DELAY_BOUNDS);
+  const maxAttempts = requireInBounds(`${label}.maxAttempts`, config?.maxAttempts, fallback.maxAttempts, BACKOFF_ATTEMPT_BOUNDS, '');
+  const initialDelayMs = requireInBounds(`${label}.initialDelayMs`, config?.initialDelayMs, fallback.initialDelayMs, BACKOFF_INITIAL_DELAY_BOUNDS);
+  const factor = requireInBounds(`${label}.factor`, config?.factor, fallback.factor, BACKOFF_FACTOR_BOUNDS, '');
+  if (initialDelayMs > maxDelayMs) {
+    throw invalidConfig(`${label}.initialDelayMs`)(`${label}.initialDelayMs (${initialDelayMs}ms) exceeds ${label}.maxDelayMs (${maxDelayMs}ms)`);
+  }
+  return {
+    initialDelayMs,
+    maxDelayMs,
+    factor,
+    maxAttempts,
+    jitter: config?.jitter ?? fallback.jitter
+  };
+}
+function resolveRetry(config) {
+  return {
+    reconnect: resolveBackoff('retry.reconnect', config?.reconnect, DEFAULT_RECONNECT_BACKOFF),
+    finalize: resolveBackoff('retry.finalize', config?.finalize, DEFAULT_FINALIZE_BACKOFF)
+  };
+}
+function resolveStaleAfterMs(value) {
+  return requireInBounds('staleAfterMs', value, DEFAULT_STALE_AFTER_MS, STALE_AFTER_BOUNDS);
+}
+function resolveProductCacheTtlMs(value) {
+  return requireInBounds('productCacheTtlMs', value, DEFAULT_PRODUCT_CACHE_TTL_MS, PRODUCT_CACHE_TTL_BOUNDS);
+}
+function resolveForegroundSyncMinIntervalMs(value) {
+  return requireInBounds('foregroundSyncMinIntervalMs', value, DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS, FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS);
+}
+//# sourceMappingURL=timers.js.map

package/lib/commonjs/core/timers.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_rnCore","require","_errors","DEFAULT_CONNECT_TIMEOUT_MS","exports","DEFAULT_PRODUCT_QUERY_TIMEOUT_MS","DEFAULT_SYNC_TIMEOUT_MS","DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS","DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS","DEFAULT_VALIDATE_TIMEOUT_MS","PURCHASE_FLOW_CEILING_MS","CONNECT_TIMEOUT_BOUNDS","min","max","PRODUCT_QUERY_TIMEOUT_BOUNDS","SYNC_TIMEOUT_BOUNDS","PURCHASE_LAUNCH_TIMEOUT_BOUNDS","FINALIZE_ATTEMPT_TIMEOUT_BOUNDS","VALIDATE_TIMEOUT_BOUNDS","DEFAULT_PRODUCT_CACHE_TTL_MS","PRODUCT_CACHE_TTL_BOUNDS","DEFAULT_STALE_AFTER_MS","STALE_AFTER_BOUNDS","DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS","FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS","DEFAULT_RECONNECT_BACKOFF","initialDelayMs","maxDelayMs","factor","maxAttempts","jitter","DEFAULT_FINALIZE_BACKOFF","BACKOFF_MAX_DELAY_BOUNDS","BACKOFF_ATTEMPT_BOUNDS","BACKOFF_INITIAL_DELAY_BOUNDS","BACKOFF_FACTOR_BOUNDS","invalidConfig","label","message","PaymentConfigError","code","operation","offenders","requireInBounds","value","fallback","bounds","unit","undefined","checkRange","resolveTimeouts","config","connectMs","productQueryMs","syncMs","purchaseLaunchMs","finalizeAttemptMs","validateMs","resolveBackoff","resolveRetry","reconnect","finalize","resolveStaleAfterMs","resolveProductCacheTtlMs","resolveForegroundSyncMinIntervalMs"],"sourceRoot":"../../../src","sources":["core/timers.ts"],"mappings":";;;;;;;;;;;AAaA,IAAAA,OAAA,GAAAC,OAAA;AAEA,IAAAC,OAAA,GAAAD,OAAA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACO,MAAME,0BAA0B,GAAAC,OAAA,CAAAD,0BAAA,GAAG,MAAM;AAChD;AACO,MAAME,gCAAgC,GAAAD,OAAA,CAAAC,gCAAA,GAAG,MAAM;AACtD;AACO,MAAMC,uBAAuB,GAAAF,OAAA,CAAAE,uBAAA,GAAG,MAAM;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMC,kCAAkC,GAAAH,OAAA,CAAAG,kCAAA,GAAG,MAAM;AACxD;AACO,MAAMC,mCAAmC,GAAAJ,OAAA,CAAAI,mCAAA,GAAG,MAAM;AACzD;AACO,MAAMC,2BAA2B,GAAAL,OAAA,CAAAK,2BAAA,GAAG,MAAM;AACjD;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMC,wBAAwB,GAAAN,OAAA,CAAAM,wBAAA,GAAG,EAAE,GAAG,MAAM;AAE5C,MAAMC,sBAAsB,GAAAP,OAAA,CAAAO,sBAAA,GAAG;EAAEC,GAAG,EAAE,KAAK;EAAEC,GAAG,EAAE;AAAO,CAAU;AACnE,MAAMC,4BAA4B,GAAAV,OAAA,CAAAU,4BAAA,GAAG;EAAEF,GAAG,EAAE,KAAK;EAAEC,GAAG,EAAE;AAAO,CAAU;AACzE,MAAME,mBAAmB,GAAAX,OAAA,CAAAW,mBAAA,GAAG;EAAEH,GAAG,EAAE,KAAK;EAAEC,GAAG,EAAE;AAAQ,CAAU;AACjE,MAAMG,8BAA8B,GAAAZ,OAAA,CAAAY,8BAAA,GAAG;EAC7CJ,GAAG,EAAE,KAAK;EACVC,GAAG,EAAE;AACN,CAAU;AACH,MAAMI,+BAA+B,GAAAb,OAAA,CAAAa,+BAAA,GAAG;EAC9CL,GAAG,EAAE,KAAK;EACVC,GAAG,EAAE;AACN,CAAU;AACH,MAAMK,uBAAuB,GAAAd,OAAA,CAAAc,uBAAA,GAAG;EAAEN,GAAG,EAAE,KAAK;EAAEC,GAAG,EAAE;AAAQ,CAAU;;AAE5E;AACA;AACA;AACA;AACO,MAAMM,4BAA4B,GAAAf,OAAA,CAAAe,4BAAA,GAAG,OAAO;AAC5C,MAAMC,wBAAwB,GAAAhB,OAAA,CAAAgB,wBAAA,GAAG;EAAER,GAAG,EAAE,MAAM;EAAEC,GAAG,EAAE;AAAW,CAAU;;AAEjF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMQ,sBAAsB,GAAAjB,OAAA,CAAAiB,sBAAA,GAAG,WAAW;AAC1C,MAAMC,kBAAkB,GAAAlB,OAAA,CAAAkB,kBAAA,GAAG;EACjCV,GAAG,EAAE,SAAS;EACdC,GAAG,EAAE;AACN,CAAU;;AAEV;AACO,MAAMU,uCAAuC,GAAAnB,OAAA,CAAAmB,uCAAA,GAAG,MAAM;AACtD,MAAMC,mCAAmC,GAAApB,OAAA,CAAAoB,mCAAA,GAAG;EAClDZ,GAAG,EAAE,CAAC;EACNC,GAAG,EAAE;AACN,CAAU;;AAEV;AACO,MAAMY,yBAAkD,GAAArB,OAAA,CAAAqB,yBAAA,GAAG;EACjEC,cAAc,EAAE,KAAK;EACrBC,UAAU,EAAE,MAAM;EAClBC,MAAM,EAAE,CAAC;EACTC,WAAW,EAAE,CAAC;EACdC,MAAM,EAAE;AACT,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMC,wBAAiD,GAAA3B,OAAA,CAAA2B,wBAAA,GAAG;EAChEL,cAAc,EAAE,KAAK;EACrBC,UAAU,EAAE,MAAM;EAClBC,MAAM,EAAE,CAAC;EACTC,WAAW,EAAE,CAAC;EACdC,MAAM,EAAE;AACT,CAAC;AAEM,MAAME,wBAAwB,GAAA5B,OAAA,CAAA4B,wBAAA,GAAG;EAAEpB,GAAG,EAAE,KAAK;EAAEC,GAAG,EAAE;AAAQ,CAAU;AACtE,MAAMoB,sBAAsB,GAAA7B,OAAA,CAAA6B,sBAAA,GAAG;EAAErB,GAAG,EAAE,CAAC;EAAEC,GAAG,EAAE;AAAG,CAAU;AAClE;AACO,MAAMqB,4BAA4B,GAAA9B,OAAA,CAAA8B,4BAAA,GAAG;EAAEtB,GAAG,EAAE,GAAG;EAAEC,GAAG,EAAE;AAAO,CAAU;AAC9E;AACO,MAAMsB,qBAAqB,GAAA/B,OAAA,CAAA+B,qBAAA,GAAG;EAAEvB,GAAG,EAAE,CAAC;EAAEC,GAAG,EAAE;AAAG,CAAU;AAEjE,SAASuB,aAAaA,CAACC,KAAa,EAAE;EACrC,OAAQC,OAAe,IACtB,IAAIC,0BAAkB,CAAC;IACtBC,IAAI,EAAE,wBAAwB;IAC9BF,OAAO;IACPG,SAAS,EAAE,WAAW;IACtBC,SAAS,EAAE,CAACL,KAAK;EAClB,CAAC,CAAC;AACJ;AAEA,SAASM,eAAeA,CACvBN,KAAa,EACbO,KAAyB,EACzBC,QAAgB,EAChBC,MAAa,EACbC,IAAI,GAAG,IAAI,EACF;EACT,OAAOH,KAAK,KAAKI,SAAS,GACvBH,QAAQ,GACR,IAAAI,kBAAU,EAACZ,KAAK,EAAEO,KAAK,EAAEE,MAAM,EAAEV,aAAa,CAACC,KAAK,CAAC,EAAEU,IAAI,CAAC;AAChE;AAWO,SAASG,eAAeA,CAACC,MAAsB,EAAoB;EACzE,OAAO;IACNC,SAAS,EAAET,eAAe,CACzB,oBAAoB,EACpBQ,MAAM,EAAEC,SAAS,EACjBjD,0BAA0B,EAC1BQ,sBACD,CAAC;IACD0C,cAAc,EAAEV,eAAe,CAC9B,yBAAyB,EACzBQ,MAAM,EAAEE,cAAc,EACtBhD,gCAAgC,EAChCS,4BACD,CAAC;IACDwC,MAAM,EAAEX,eAAe,CACtB,iBAAiB,EACjBQ,MAAM,EAAEG,MAAM,EACdhD,uBAAuB,EACvBS,mBACD,CAAC;IACDwC,gBAAgB,EAAEZ,eAAe,CAChC,2BAA2B,EAC3BQ,MAAM,EAAEI,gBAAgB,EACxBhD,kCAAkC,EAClCS,8BACD,CAAC;IACDwC,iBAAiB,EAAEb,eAAe,CACjC,4BAA4B,EAC5BQ,MAAM,EAAEK,iBAAiB,EACzBhD,mCAAmC,EACnCS,+BACD,CAAC;IACDwC,UAAU,EAAEd,eAAe,CAC1B,qBAAqB,EACrBQ,MAAM,EAAEM,UAAU,EAClBhD,2BAA2B,EAC3BS,uBACD;EACD,CAAC;AACF;AAEA,SAASwC,cAAcA,CACtBrB,KAAa,EACbc,MAAiC,EACjCN,QAAiC,EACP;EAC1B,MAAMlB,UAAU,GAAGgB,eAAe,CACjC,GAAGN,KAAK,aAAa,EACrBc,MAAM,EAAExB,UAAU,EAClBkB,QAAQ,CAAClB,UAAU,EACnBK,wBACD,CAAC;EACD,MAAMH,WAAW,GAAGc,eAAe,CAClC,GAAGN,KAAK,cAAc,EACtBc,MAAM,EAAEtB,WAAW,EACnBgB,QAAQ,CAAChB,WAAW,EACpBI,sBAAsB,EACtB,EACD,CAAC;EACD,MAAMP,cAAc,GAAGiB,eAAe,CACrC,GAAGN,KAAK,iBAAiB,EACzBc,MAAM,EAAEzB,cAAc,EACtBmB,QAAQ,CAACnB,cAAc,EACvBQ,4BACD,CAAC;EACD,MAAMN,MAAM,GAAGe,eAAe,CAC7B,GAAGN,KAAK,SAAS,EACjBc,MAAM,EAAEvB,MAAM,EACdiB,QAAQ,CAACjB,MAAM,EACfO,qBAAqB,EACrB,EACD,CAAC;EACD,IAAIT,cAAc,GAAGC,UAAU,EAAE;IAChC,MAAMS,aAAa,CAAC,GAAGC,KAAK,iBAAiB,CAAC,CAC7C,GAAGA,KAAK,oBAAoBX,cAAc,eAAeW,KAAK,gBAAgBV,UAAU,KACzF,CAAC;EACF;EACA,OAAO;IACND,cAAc;IACdC,UAAU;IACVC,MAAM;IACNC,WAAW;IACXC,MAAM,EAAEqB,MAAM,EAAErB,MAAM,IAAIe,QAAQ,CAACf;EACpC,CAAC;AACF;AAOO,SAAS6B,YAAYA,CAACR,MAAoB,EAAiB;EACjE,OAAO;IACNS,SAAS,EAAEF,cAAc,CAAC,iBAAiB,EAAEP,MAAM,EAAES,SAAS,EAAEnC,yBAAyB,CAAC;IAC1FoC,QAAQ,EAAEH,cAAc,CAAC,gBAAgB,EAAEP,MAAM,EAAEU,QAAQ,EAAE9B,wBAAwB;EACtF,CAAC;AACF;AAEO,SAAS+B,mBAAmBA,CAAClB,KAAc,EAAU;EAC3D,OAAOD,eAAe,CAAC,cAAc,EAAEC,KAAK,EAAEvB,sBAAsB,EAAEC,kBAAkB,CAAC;AAC1F;AAEO,SAASyC,wBAAwBA,CAACnB,KAAc,EAAU;EAChE,OAAOD,eAAe,CACrB,mBAAmB,EACnBC,KAAK,EACLzB,4BAA4B,EAC5BC,wBACD,CAAC;AACF;AAEO,SAAS4C,kCAAkCA,CAACpB,KAAc,EAAU;EAC1E,OAAOD,eAAe,CACrB,6BAA6B,EAC7BC,KAAK,EACLrB,uCAAuC,EACvCC,mCACD,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/diagnostics/errors.js

@@ -0,0 +1,83 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PaymentError = exports.PaymentConfigError = exports.PAYMENT_ERROR_CODES = void 0;
+exports.redact = redact;
+var _rnCore = require("@chipmobilesdk/rn-core");
+/**
+ * Normalized public errors.
+ *
+ * Error codes are **public API**: renaming one is a breaking change (FR-078,
+ * LIB-008). They are the vocabulary an app branches on, so they must outlive any
+ * internal refactor and must never leak a store's own code.
+ */
+
+const identifiers = (0, _rnCore.createRedactor)();
+const PAYMENT_ERROR_CODES = exports.PAYMENT_ERROR_CODES = ['PAYMENT_NOT_CONFIGURED', 'PAYMENT_INVALID_CATALOG', 'PAYMENT_NOT_READY', 'PAYMENT_DISABLED', 'PAYMENT_UNAVAILABLE', 'PAYMENT_UNSUPPORTED_PLATFORM', 'PAYMENT_ENVIRONMENT_BLOCKED', 'PAYMENT_PRODUCTION_CONFIG_IN_NON_PRODUCTION_BUILD', 'PAYMENT_PURCHASE_IN_PROGRESS', 'PAYMENT_USER_CANCELLED', 'PAYMENT_PENDING', 'PAYMENT_ALREADY_OWNED', 'PAYMENT_INELIGIBLE', 'PAYMENT_UNKNOWN_PRODUCT', 'PAYMENT_PRODUCT_UNAVAILABLE_IN_REGION', 'PAYMENT_TIMEOUT', 'PAYMENT_NETWORK_ERROR', 'PAYMENT_STORE_ERROR', 'PAYMENT_FINALIZE_FAILED', 'PAYMENT_VALIDATION_REJECTED', 'PAYMENT_VALIDATION_UNAVAILABLE', 'PAYMENT_STORAGE_UNAVAILABLE', /** `consume` on a transaction that is not a consumable, added in 0.3.2. */
+'PAYMENT_NOT_CONSUMABLE',
+/**
+ * A timeout, backoff or interval outside its bounds, added in 0.5.0. These
+ * used to be reported as `PAYMENT_INVALID_CATALOG`, which is about products.
+ */
+'PAYMENT_INVALID_CONFIG'];
+
+/** Which operation produced an error. Part of the public error shape (FR-078). */
+
+/** The package's error; an `SdkError` (`@chipmobilesdk/rn-core`) with `pkg: 'rn-payment'`. */
+class PaymentError extends _rnCore.SdkError {
+  /** Redacted where appropriate — never a raw receipt, token, or store object (FR-074). */
+
+  constructor(init) {
+    super('rn-payment', init.code, {
+      message: init.message,
+      retryable: init.retryable ?? false,
+      redactedCause: init.cause
+    });
+    this.name = 'PaymentError';
+    this.operation = init.operation;
+    this.cause = init.cause;
+  }
+}
+
+/**
+ * A configuration problem the app can act on.
+ *
+ * Separate from `PaymentError` because configuration faults are developer-facing
+ * and must never be shown to an end user — the message-key map keeps that
+ * separation explicit (FR-085).
+ */
+exports.PaymentError = PaymentError;
+class PaymentConfigError extends PaymentError {
+  /** The offending catalog entries or entitlement keys, named (FR-011). */
+
+  constructor(init) {
+    super({
+      ...init,
+      retryable: false
+    });
+    this.name = 'PaymentConfigError';
+    this.offenders = init.offenders ?? [];
+  }
+}
+
+/**
+ * Strips anything that must never reach a log or event.
+ *
+ * Applied at the boundary rather than trusted to call sites: a single forgotten
+ * interpolation is how receipts end up in logs (NFR-006).
+ *
+ * Identifier-only: what survives is what code defined, never what data carried.
+ * A `PaymentError` keeps its code and an `Error` its class name; every message
+ * and every string is dropped, because a store or consumer message can embed a
+ * purchase token or an account id and nothing here can tell which.
+ */
+exports.PaymentConfigError = PaymentConfigError;
+function redact(value) {
+  // An SDK error reduces to its code and any other Error to its class name
+  // (rn-core's identifier-only redactor). Strings never survive here, not even
+  // a leading constant: a store message is free text from a payments SDK.
+  return value instanceof Error ? identifiers.text(value) : _rnCore.REDACTED;
+}
+//# sourceMappingURL=errors.js.map

package/lib/commonjs/diagnostics/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_rnCore","require","identifiers","createRedactor","PAYMENT_ERROR_CODES","exports","PaymentError","SdkError","constructor","init","code","message","retryable","redactedCause","cause","name","operation","PaymentConfigError","offenders","redact","value","Error","text","REDACTED"],"sourceRoot":"../../../src","sources":["diagnostics/errors.ts"],"mappings":";;;;;;;AAQA,IAAAA,OAAA,GAAAC,OAAA;AARA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,MAAMC,WAAW,GAAG,IAAAC,sBAAc,EAAC,CAAC;AAE7B,MAAMC,mBAAmB,GAAAC,OAAA,CAAAD,mBAAA,GAAG,CAClC,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,8BAA8B,EAC9B,6BAA6B,EAC7B,mDAAmD,EACnD,8BAA8B,EAC9B,wBAAwB,EACxB,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,uCAAuC,EACvC,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,gCAAgC,EAChC,6BAA6B,EAC7B;AACA,wBAAwB;AACxB;AACD;AACA;AACA;AACC,wBAAwB,CACf;;AAIV;;AAcA;AACO,MAAME,YAAY,SAASC,gBAAQ,CAAmB;EAE5D;;EAGAC,WAAWA,CAACC,IAMX,EAAE;IACF,KAAK,CAAC,YAAY,EAAEA,IAAI,CAACC,IAAI,EAAE;MAC9BC,OAAO,EAAEF,IAAI,CAACE,OAAO;MACrBC,SAAS,EAAEH,IAAI,CAACG,SAAS,IAAI,KAAK;MAClCC,aAAa,EAAEJ,IAAI,CAACK;IACrB,CAAC,CAAC;IACF,IAAI,CAACC,IAAI,GAAG,cAAc;IAC1B,IAAI,CAACC,SAAS,GAAGP,IAAI,CAACO,SAAS;IAC/B,IAAI,CAACF,KAAK,GAAGL,IAAI,CAACK,KAAK;EACxB;AACD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AANAT,OAAA,CAAAC,YAAA,GAAAA,YAAA;AAOO,MAAMW,kBAAkB,SAASX,YAAY,CAAC;EACpD;;EAGAE,WAAWA,CAACC,IAKX,EAAE;IACF,KAAK,CAAC;MAAE,GAAGA,IAAI;MAAEG,SAAS,EAAE;IAAM,CAAC,CAAC;IACpC,IAAI,CAACG,IAAI,GAAG,oBAAoB;IAChC,IAAI,CAACG,SAAS,GAAGT,IAAI,CAACS,SAAS,IAAI,EAAE;EACtC;AACD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAVAb,OAAA,CAAAY,kBAAA,GAAAA,kBAAA;AAWO,SAASE,MAAMA,CAACC,KAAc,EAAU;EAC9C;EACA;EACA;EACA,OAAOA,KAAK,YAAYC,KAAK,GAAGnB,WAAW,CAACoB,IAAI,CAACF,KAAK,CAAC,GAAGG,gBAAQ;AACnE","ignoreList":[]}