@chipmobilesdk/rn-payment 0.5.0 → 0.7.0

package/lib/typescript/module/persistence/snapshot.d.ts

@@ -0,0 +1,106 @@
+/**
+ * The persisted snapshot: schema, versioning, and migration.
+ *
+ * What is stored here is **exhaustively** what the package keeps on the device,
+ * and the README repeats this list so an app owner can complete a Data safety
+ * declaration accurately (FR-056, POL-002).
+ *
+ * Deliberately absent: payment details, card data, billing address, user
+ * identity, raw receipts, verification payloads, and backend tokens.
+ */
+import type { ProductKey, ProductType } from '../config/types.js';
+/**
+ * 2 since 0.6.0: the never-written `entitlements` map and `finalized` state are
+ * gone (PAY-12). Entitlements are always derived from purchases, never stored.
+ */
+export declare const SNAPSHOT_SCHEMA_VERSION = 2;
+/** Where a transaction stands with the store. */
+export type PersistedPurchaseState = 'pending' | 'purchased' | 'consumed' | 'revoked';
+/**
+ * Where a transaction stands in the finalization queue.
+ *
+ * `queued` is the load-bearing value: it is written **before** the store call is
+ * attempted, so an app killed mid-finalize leaves a recoverable record rather
+ * than a paid purchase that Google will auto-refund (FR-041, FR-042).
+ */
+export type PersistedFinalizeState = 'not_required' | 'queued' | 'in_flight' | 'done' | 'failed';
+/** Whether the app's backend has ruled on this transaction (FR-072a). */
+export type PersistedValidationState = 'not_required' | 'approved' | 'rejected' | 'queued_for_revalidation';
+export interface PersistedPurchase {
+    transactionId: string;
+    productKey: ProductKey;
+    productType: ProductType;
+    token: string;
+    state: PersistedPurchaseState;
+    purchasedAt: number;
+    finalizeState: PersistedFinalizeState;
+    /** Attempts consumed. Carried across sessions so retry stays bounded per session. */
+    attempts: number;
+    validationState: PersistedValidationState;
+    expiresAt?: number;
+    willAutoRenew?: boolean;
+}
+export interface PersistedSnapshot {
+    schemaVersion: number;
+    /** Opaque partition key. Stored only to scope this record (FR-057a). */
+    scopeToken?: string;
+    purchases: PersistedPurchase[];
+    lastSyncedAt?: number;
+}
+export declare function emptySnapshot(scopeToken?: string): PersistedSnapshot;
+/**
+ * A migration from one schema version to the next.
+ *
+ * Kept as an ordered chain rather than a switch so each step stays small and
+ * independently testable, and so a device several versions behind is carried
+ * forward one hop at a time (NFR-009).
+ */
+export interface SnapshotMigration {
+    from: number;
+    to: number;
+    migrate(input: Record<string, unknown>): Record<string, unknown>;
+}
+/** Registered migrations, one hop each. */
+export declare const SNAPSHOT_MIGRATIONS: readonly SnapshotMigration[];
+export type MigrationOutcome = {
+    ok: true;
+    snapshot: PersistedSnapshot;
+    migrated: boolean;
+}
+/**
+ * Unreadable records are discarded, not repaired.
+ *
+ * Safe because discarding yields `unknown`, never a false `not_entitled`
+ * (FR-055a), and the next sync rebuilds from the store — the authoritative
+ * source anyway. Guessing at a corrupt record risks granting or withholding
+ * wrongly, which is worse than a short `unknown` window.
+ */
+ | {
+    ok: false;
+    reason: 'unreadable' | 'unsupported_version';
+};
+export declare function migrateSnapshot(raw: unknown): MigrationOutcome;
+/**
+ * Decides a purchase's finalization state from the store's view plus what we
+ * already knew.
+ *
+ * Shared by the sync path and the purchase path so they cannot drift — and they
+ * must not, because a disagreement here is how a paid transaction goes
+ * unacknowledged and gets auto-refunded three days later.
+ *
+ * The subtle case is a **pending purchase that settles**. Its record was written
+ * with `not_required`, which was correct while the money had not arrived. Once the
+ * store reports it `purchased`, that value must be re-evaluated rather than
+ * preserved — otherwise the transaction is never queued, never acknowledged, and
+ * Google revokes it. Progress is preserved only for a transaction that was
+ * already in the queue.
+ */
+export declare function resolveFinalizeState(incoming: {
+    state: 'purchased' | 'pending' | 'unspecified';
+    isAcknowledged: boolean;
+}, existing: {
+    finalizeState: PersistedFinalizeState;
+} | undefined): PersistedFinalizeState;
+/** Transactions still owed a finalize call, drained at startup and on foreground (FR-042). */
+export declare function pendingFinalizations(snapshot: PersistedSnapshot): PersistedPurchase[];
+//# sourceMappingURL=snapshot.d.ts.map

package/lib/typescript/module/persistence/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../../../src/persistence/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAiB,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,iDAAiD;AACjD,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,cAAc,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEjG,yEAAyE;AACzE,MAAM,MAAM,wBAAwB,GACnC,cAAc,GAAG,UAAU,GAAG,UAAU,GAAG,yBAAyB,CAAC;AAEtE,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,sBAAsB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,sBAAsB,CAAC;IACtC,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,wBAAwB,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAOpE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjE;AAED,2CAA2C;AAC3C,eAAO,MAAM,mBAAmB,EAAE,SAAS,iBAAiB,EAsB3D,CAAC;AAEF,MAAM,MAAM,gBAAgB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AAC9D;;;;;;;GAOG;GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,qBAAqB,CAAA;CAAE,CAAC;AAE/D,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAgC9D;AAgGD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CACnC,QAAQ,EAAE;IAAE,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,aAAa,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,EACrF,QAAQ,EAAE;IAAE,aAAa,EAAE,sBAAsB,CAAA;CAAE,GAAG,SAAS,GAC7D,sBAAsB,CAoBxB;AAED,8FAA8F;AAC9F,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,iBAAiB,EAAE,CAQrF"}

package/lib/typescript/module/react/PaymentProvider.d.ts

@@ -0,0 +1,57 @@
+/**
+ * React integration.
+ *
+ * The provider owns the engine's lifecycle so an app does not have to remember to
+ * clean up. It renders nothing of its own — no paywall, no price table, no
+ * button. Every surface belongs to the app (UX-001).
+ */
+import React, { type PropsWithChildren } from 'react';
+import { type EngineDeps, type PaymentEngine } from '../engine/engine.js';
+import type { PaymentConfig } from '../config/types.js';
+interface OwnedEngineProps {
+    config: PaymentConfig;
+    /**
+     * The store provider and storage. Usually `{ provider: createStoreProvider() }`;
+     * a test or the demo app supplies the fake store here.
+     */
+    deps: EngineDeps;
+    /**
+     * When this changes, the provider builds a new engine. Defaults to
+     * `config.scopeToken`, so switching accounts gets a fresh one. `config` and
+     * `deps` themselves are read when an engine is built and may be inline objects:
+     * a new object on every render no longer reconnects to the store (PAY-07).
+     */
+    engineKey?: string;
+    engine?: undefined;
+}
+interface ExternalEngineProps {
+    /**
+     * An engine the app created and owns. The provider shares it with the tree and
+     * neither initializes nor cleans it up.
+     */
+    engine: PaymentEngine;
+    config?: undefined;
+    deps?: undefined;
+    engineKey?: undefined;
+}
+export type PaymentProviderProps = (OwnedEngineProps | ExternalEngineProps) & {
+    /** Skip automatic initialization when the app wants to control the moment. */
+    autoInitialize?: boolean;
+    /**
+     * Call `handleForeground()` each time the app returns from the background, through
+     * rn-core's shared lifecycle port. Off by default: what counts as a foreground
+     * return is the app's decision (FR-059).
+     */
+    syncOnForeground?: boolean;
+};
+export declare function PaymentProvider(props: PropsWithChildren<PaymentProviderProps>): React.ReactElement;
+/**
+ * The engine from context.
+ *
+ * Throws when used outside a provider, deliberately: returning null would push a
+ * null check into every consumer and let a genuine wiring mistake read as "no
+ * entitlement" — the exact conflation this package exists to prevent.
+ */
+export declare function usePaymentEngine(): PaymentEngine;
+export {};
+//# sourceMappingURL=PaymentProvider.d.ts.map

package/lib/typescript/module/react/PaymentProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaymentProvider.d.ts","sourceRoot":"","sources":["../../../../src/react/PaymentProvider.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,EAMb,KAAK,iBAAiB,EACtB,MAAM,OAAO,CAAC;AACf,OAAO,EAAgB,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAkB,CAAC;AAErF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAiB,CAAC;AAIrD,UAAU,gBAAgB;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB;;;OAGG;IACH,IAAI,EAAE,UAAU,CAAC;IACjB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,UAAU,mBAAmB;IAC5B;;;OAGG;IACH,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,gBAAgB,GAAG,mBAAmB,CAAC,GAAG;IAC7E,8EAA8E;IAC9E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,wBAAgB,eAAe,CAC9B,KAAK,EAAE,iBAAiB,CAAC,oBAAoB,CAAC,GAC5C,KAAK,CAAC,YAAY,CAyDpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAShD"}

package/lib/typescript/module/react/hooks.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Hooks over the engine.
+ *
+ * Each subscribes on mount and unsubscribes on unmount, so repeated mount/unmount
+ * leaves no duplicate subscription and no surviving listener (FR-006, PERF-002).
+ *
+ * Reads are synchronous: the engine holds entitlements in memory, so a hook never
+ * returns a loading placeholder for an entitlement it already knows (PERF-001).
+ */
+import type { EntitlementKey, FinalizeResult, PaymentStatus, PendingPurchasesState, ProductKey, PurchaseOptions, PurchaseResult, TransactionRef } from '../config/types.js';
+import type { EntitlementMap, EntitlementState } from '../entitlements/aggregate.js';
+import type { PaymentError } from '../diagnostics/errors.js';
+import type { MissingProduct, ProductInfo } from '../engine/products.js';
+import type { RestoreOutcome, SyncOutcome } from '../engine/engine.js';
+/**
+ * One entitlement, re-rendering only when that one changes.
+ *
+ * The returned `status` is `unknown` until the first sync completes. That is the
+ * point: an app must be able to tell "not yet known" from "not entitled" so a
+ * paying user never sees the unpaid experience flash (FR-047).
+ */
+export declare function useEntitlement(key: EntitlementKey): EntitlementState;
+/** Every entitlement at once, for a screen that shows overall plan state. */
+export declare function useEntitlements(): EntitlementMap;
+/**
+ * Pending purchases, in this session or an earlier one (FR-101). Added in 0.2.0.
+ *
+ * Pass product keys to narrow it to the products one screen sells. Read
+ * `status` before the list: under `unknown`, an empty list is not "nothing
+ * pending", and a Buy button shown on it could charge a user twice.
+ */
+export declare function usePendingPurchases(productKeys?: readonly string[]): PendingPurchasesState;
+/** Package status, so an app can tell "cannot sell here" from "not paid" (FR-022). */
+export declare function usePaymentStatus(): PaymentStatus;
+export interface UsePurchaseResult {
+    purchase: (productKey: ProductKey, options?: PurchaseOptions) => Promise<PurchaseResult>;
+    consume: (ref: TransactionRef) => Promise<FinalizeResult>;
+    isPurchasing: boolean;
+    /** The last outcome, so a screen can render cancellation differently from failure. */
+    lastResult: PurchaseResult | undefined;
+}
+/**
+ * Starting a purchase.
+ *
+ * `lastResult` is the full typed union rather than a boolean, because a screen has
+ * to treat `user_cancelled` differently from `store_error` — showing an error
+ * banner to someone who simply changed their mind is the most common paywall bug.
+ */
+export declare function usePurchase(): UsePurchaseResult;
+export interface UseProductsResult {
+    products: ProductInfo[];
+    /** Reported so a paywall explains an absent row instead of rendering a blank. */
+    missing: MissingProduct[];
+    isLoading: boolean;
+    error: PaymentError | undefined;
+    refresh: () => Promise<void>;
+}
+/**
+ * Store-supplied product information for a paywall.
+ *
+ * Every price here is already formatted by the store for the user's locale. An app
+ * must render `formattedPrice` and never build its own string from
+ * `priceAmountMicros` — that field exists for sorting and comparison only
+ * (FR-028).
+ */
+export declare function useProducts(productKeys: readonly string[]): UseProductsResult;
+export interface UseSyncResult {
+    sync: () => Promise<SyncOutcome>;
+    restore: () => Promise<RestoreOutcome>;
+    isSyncing: boolean;
+    lastSyncedAt: number | undefined;
+}
+/**
+ * Sync and restore, for a "Restore purchases" control.
+ *
+ * `restore`'s outcome distinguishes "restored" from "nothing found", so the app
+ * can avoid telling a user their purchases came back when none existed (FR-061).
+ */
+export declare function useSync(): UseSyncResult;
+//# sourceMappingURL=hooks.d.ts.map

package/lib/typescript/module/react/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../../../src/react/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EACX,cAAc,EACd,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,MAAM,oBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,8BAA2B,CAAC;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,uBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAkB,CAAC;AAEpE;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,gBAAgB,CASpE;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,IAAI,cAAc,CAGhD;AAWD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,qBAAqB,CAe1F;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,IAAI,aAAa,CAGhD;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACzF,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1D,YAAY,EAAE,OAAO,CAAC;IACtB,sFAAsF;IACtF,UAAU,EAAE,cAAc,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,iBAAiB,CAyB/C;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,iFAAiF;IACjF,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,YAAY,GAAG,SAAS,CAAC;IAChC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,iBAAiB,CAoD7E;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,IAAI,aAAa,CA4BvC"}

package/lib/typescript/module/testing/conformance.d.ts

@@ -0,0 +1,41 @@
+/**
+ * What any `ProviderPort` must do (IOS-12, PAY-13).
+ *
+ * The same checks run against the fake store and against the Play adapter over a
+ * simulated binding (or the real one, from a demo screen on a device), so a test
+ * that drives the fake proves something about the device path. Each check builds
+ * its own port over the same small store, through a harness.
+ */
+import { type Check, type ConformanceReport } from '@chipmobilesdk/rn-core/testing';
+import type { ProviderPort } from '../adapter/port.js';
+import type { ProductType } from '../config/types.js';
+export interface StoreProductSpec {
+    readonly storeProductId: string;
+    readonly productType: ProductType;
+    /** As the store formats it; the port must pass it through untouched. */
+    readonly formattedPrice: string;
+}
+export interface OwnedPurchaseSpec {
+    readonly storeProductId: string;
+    readonly token: string;
+    readonly state: 'purchased' | 'pending';
+}
+export interface StoreScenario {
+    readonly products: readonly StoreProductSpec[];
+    readonly owned: readonly OwnedPurchaseSpec[];
+}
+export interface ProviderSubject {
+    readonly port: ProviderPort;
+    /** How the next purchase flow the user starts ends. */
+    nextPurchaseEnds(outcome: 'bought' | 'cancelled'): void;
+    /** The billing service goes away underneath the app. */
+    dropService(): void;
+}
+export interface ProviderHarness {
+    create(scenario: StoreScenario): ProviderSubject;
+}
+/** The store every check runs against. */
+export declare const CONFORMANCE_STORE: StoreScenario;
+export declare const providerPortChecks: readonly Check<ProviderHarness>[];
+export declare function runProviderPortConformance(harness: ProviderHarness): Promise<ConformanceReport>;
+//# sourceMappingURL=conformance.d.ts.map

package/lib/typescript/module/testing/conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../../../src/testing/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAGN,KAAK,KAAK,EACV,KAAK,iBAAiB,EACtB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAiB,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,wEAAwE;IACxE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,uDAAuD;IACvD,gBAAgB,CAAC,OAAO,EAAE,QAAQ,GAAG,WAAW,GAAG,IAAI,CAAC;IACxD,wDAAwD;IACxD,WAAW,IAAI,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC/B,MAAM,CAAC,QAAQ,EAAE,aAAa,GAAG,eAAe,CAAC;CACjD;AAED,0CAA0C;AAC1C,eAAO,MAAM,iBAAiB,EAAE,aAiB/B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,SAAS,KAAK,CAAC,eAAe,CAAC,EAgG/D,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAE/F"}

package/lib/typescript/module/testing/fakeStore.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Fake store — a full `ProviderPort` implementation for automated tests.
+ *
+ * Lives behind `@chipmobilesdk/rn-payment/testing` so test doubles cannot reach a
+ * production bundle.
+ *
+ * Nearly every requirement in this package concerns a rare ordering or failure
+ * path — a pending purchase settling two sessions later, an app killed between
+ * payment and acknowledgement, a billing connection dropping mid-sync. None of
+ * those are reachable on a real device on demand, so this is what makes them
+ * testable at all (NFR-007, SC-008).
+ */
+import type { ProviderCapabilities, ProviderConnectOutcome, ProviderFailureReason, ProviderPort, ProviderProduct, ProviderPurchase, ProviderToken, StoreProductId } from '../adapter/port.js';
+export interface FakeStoreOptions {
+    /** Fails `connect` until `setConnectOutcome` says otherwise. */
+    connectOutcome?: ProviderConnectOutcome;
+    capabilities?: Partial<ProviderCapabilities>;
+    products?: ProviderProduct[];
+    owned?: ProviderPurchase[];
+    /**
+     * `'android-16.7'` mirrors the Play binding the real adapter wraps: a launched
+     * purchase is also delivered through `observePurchases`, so the engine sees it
+     * twice, and capabilities match Android's. The default delivers it once, which
+     * is simpler but hides any double-settle on the device path.
+     */
+    mode?: 'default' | 'android-16.7';
+}
+export interface FakeStore extends ProviderPort {
+    /** Next `launchPurchase` succeeds and yields this purchase. */
+    scriptPurchaseSuccess(overrides?: Partial<ProviderPurchase>): void;
+    /** Next `launchPurchase` fails with this reason — cancellation included (FR-032). */
+    scriptPurchaseFailure(reason: ProviderFailureReason): void;
+    /** Next `launchPurchase` returns a purchase in the pending state (FR-037). */
+    scriptPurchasePending(overrides?: Partial<ProviderPurchase>): void;
+    setOwned(purchases: ProviderPurchase[]): void;
+    /** Push a purchase through `observePurchases`, as a settling pending one does. */
+    pushPurchaseUpdate(purchase: ProviderPurchase): void;
+    /** Stop reporting a transaction as valid — a refund or revocation (FR-064). */
+    revoke(transactionId: string): void;
+    /** The money arrives: the owned record turns `purchased` (FR-039). */
+    settlePending(transactionId: string): void;
+    /** The payment is declined or abandoned: the store stops reporting it (FR-040). */
+    cancelPending(transactionId: string): void;
+    /**
+     * The pending window runs out. Reported through `pendingEndReason`, which a
+     * store that knows implements — Play does not, so on device this is
+     * indistinguishable from `cancelPending` (FR-102).
+     */
+    expirePending(transactionId: string): void;
+    setProducts(products: ProviderProduct[]): void;
+    setConnectOutcome(outcome: ProviderConnectOutcome): void;
+    /** Drop the connection, as the billing service does (FR-020). */
+    dropConnection(reason?: string): void;
+    restoreConnection(): void;
+    /** Make `acknowledge`/`consume` fail, to exercise bounded retry (FR-045). */
+    setFinalizeFailure(failing: boolean): void;
+    acknowledged(): ProviderToken[];
+    consumed(): ProviderToken[];
+    connectCount(): number;
+    launchCount(): number;
+    queryOwnedCount(): number;
+    disconnectCount(): number;
+    subscriptionManagementOpenedFor(): (StoreProductId | undefined)[];
+    reset(): void;
+}
+/** A purchase with sensible defaults, so tests state only what they care about. */
+export declare function makePurchase(overrides?: Partial<ProviderPurchase>): ProviderPurchase;
+export declare function createFakeStore(options?: FakeStoreOptions): FakeStore;
+//# sourceMappingURL=fakeStore.d.ts.map

package/lib/typescript/module/testing/fakeStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fakeStore.d.ts","sourceRoot":"","sources":["../../../../src/testing/fakeStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EACX,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,YAAY,EAEZ,eAAe,EACf,gBAAgB,EAGhB,aAAa,EACb,cAAc,EACd,MAAM,oBAAiB,CAAC;AAGzB,MAAM,WAAW,gBAAgB;IAChC,gEAAgE;IAChE,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,YAAY,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC3B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,SAAU,SAAQ,YAAY;IAE9C,+DAA+D;IAC/D,qBAAqB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;IACnE,qFAAqF;IACrF,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3D,8EAA8E;IAC9E,qBAAqB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;IAGnE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAC9C,kFAAkF;IAClF,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACrD,+EAA+E;IAC/E,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAMpC,sEAAsE;IACtE,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,mFAAmF;IACnF,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C;;;;OAIG;IACH,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,WAAW,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAG/C,iBAAiB,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACzD,iEAAiE;IACjE,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iBAAiB,IAAI,IAAI,CAAC;IAG1B,6EAA6E;IAC7E,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAG3C,YAAY,IAAI,aAAa,EAAE,CAAC;IAChC,QAAQ,IAAI,aAAa,EAAE,CAAC;IAC5B,YAAY,IAAI,MAAM,CAAC;IACvB,WAAW,IAAI,MAAM,CAAC;IACtB,eAAe,IAAI,MAAM,CAAC;IAC1B,eAAe,IAAI,MAAM,CAAC;IAC1B,+BAA+B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC,EAAE,CAAC;IAClE,KAAK,IAAI,IAAI,CAAC;CACd;AAoBD,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,SAAS,GAAE,OAAO,CAAC,gBAAgB,CAAM,GAAG,gBAAgB,CAaxF;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,SAAS,CAmOzE"}

package/lib/typescript/module/testing/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `@chipmobilesdk/rn-payment/testing` — test doubles.
+ *
+ * A separate entrypoint so the fake store cannot reach a production bundle
+ * (LIB-003). Nothing here is part of the package's public runtime contract.
+ */
+export { createFakeStore, makePurchase } from './fakeStore.js';
+export type { FakeStore, FakeStoreOptions } from './fakeStore.js';
+export { createMemorySnapshotStore } from '../persistence/mmkv-store.js';
+export { CONFORMANCE_STORE, providerPortChecks, runProviderPortConformance } from './conformance.js';
+export type { OwnedPurchaseSpec, ProviderHarness, ProviderSubject, StoreProductSpec, StoreScenario, } from './conformance.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAa,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,gBAAa,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA2B,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,kBAAe,CAAC;AAClG,YAAY,EACX,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,aAAa,GACb,MAAM,kBAAe,CAAC"}

package/package.json

@@ -1,21 +1,35 @@
 {
 	"name": "@chipmobilesdk/rn-payment",
-	"version": "0.5.0",
+	"version": "0.7.0",
 	"private": false,
 	"license": "UNLICENSED",
 	"description": "Reusable in-app payment and entitlement capability for ChipMobileSdk React Native apps",
-	"main": "src/index.ts",
-	"types": "src/index.ts",
+	"source": "./src/index.ts",
+	"main": "./lib/commonjs/index.js",
+	"module": "./lib/module/index.js",
+	"types": "./lib/typescript/commonjs/index.d.ts",
 	"exports": {
 		".": {
-			"types": "./src/index.ts",
-			"react-native": "./src/index.ts",
-			"default": "./src/index.ts"
+			"chipmobilesdk-source": "./src/index.ts",
+			"import": {
+				"types": "./lib/typescript/module/index.d.ts",
+				"default": "./lib/module/index.js"
+			},
+			"require": {
+				"types": "./lib/typescript/commonjs/index.d.ts",
+				"default": "./lib/commonjs/index.js"
+			}
 		},
 		"./testing": {
-			"types": "./src/testing/index.ts",
-			"react-native": "./src/testing/index.ts",
-			"default": "./src/testing/index.ts"
+			"chipmobilesdk-source": "./src/testing/index.ts",
+			"import": {
+				"types": "./lib/typescript/module/testing/index.d.ts",
+				"default": "./lib/module/testing/index.js"
+			},
+			"require": {
+				"types": "./lib/typescript/commonjs/testing/index.d.ts",
+				"default": "./lib/commonjs/testing/index.js"
+			}
 		}
 	},
 	"files": [
@@ -23,21 +37,24 @@
 		"!src/**/__tests__",
 		"skills",
 		"README.md",
-		"CHANGELOG.md"
+		"CHANGELOG.md",
+		"lib"
 	],
 	"sideEffects": false,
 	"scripts": {
+		"build": "bob build",
 		"typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.test.json",
-		"pack:check": "npm pack --dry-run"
+		"pack:check": "npm pack --dry-run",
+		"prepack": "npm run build"
 	},
 	"dependencies": {
-		"@chipmobilesdk/rn-core": "^0.1.0"
+		"@chipmobilesdk/rn-core": "^0.2.0"
 	},
 	"peerDependencies": {
 		"react": ">=19",
 		"react-native": ">=0.85",
 		"react-native-iap": ">=16.7.3 <17",
-		"react-native-mmkv": ">=4.0.0 <5"
+		"react-native-mmkv": "^4.0.0"
 	},
 	"keywords": [
 		"react-native",
@@ -48,5 +65,24 @@
 	"publishConfig": {
 		"access": "public",
 		"registry": "https://registry.npmjs.org/"
+	},
+	"react-native-builder-bob": {
+		"source": "src",
+		"output": "lib",
+		"targets": [
+			[
+				"commonjs",
+				{
+					"esm": true
+				}
+			],
+			[
+				"module",
+				{
+					"esm": true
+				}
+			],
+			"typescript"
+		]
 	}
 }

package/skills/sdk-rn-payment/SKILL.md

@@ -68,10 +68,10 @@ rule: a chargeable purchase is permitted only when `environment: 'production'` *
 `PAYMENT_PRODUCTION_CONFIG_IN_NON_PRODUCTION_BUILD` at construction and never connects.
 
 Consequence worth knowing before you plan device testing: **licence-tester purchases are
-real Play transactions**, so verifying them needs a release-configuration build
-(`isProductionBuild: !__DEV__`, `environment: 'production'`) installed from a Play track.
-Debug builds are structurally unable to reach the store. Drive every behaviour that is
-not "does Play accept this" through the fake store instead. See
+real Play transactions**. A debug build reaches the store only with `environment: 'test'`
+and `allowStoreTestPurchases: true` (licence testers are not charged; anyone else would
+be); otherwise it gets `environment_blocked`. Drive every behaviour that is not "does
+Play accept this" through the fake store instead. See
 `## Environments and the production guard`.
 
 Unlike `@chipmobilesdk/rn-ads`, there is **no test-id substitution**: Play has no test