@chipmobilesdk/rn-payment 0.5.0 → 0.7.0

package/lib/commonjs/engine/state.js

@@ -0,0 +1,201 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createEngineState = createEngineState;
+var _rnCore = require("@chipmobilesdk/rn-core");
+var _errors = require("../diagnostics/errors.js");
+var _events = require("../diagnostics/events.js");
+var _aggregate = require("../entitlements/aggregate.js");
+var _snapshot = require("../persistence/snapshot.js");
+var _pending = require("./pending.js");
+/**
+ * The engine's state and the one way it changes (PAY-10).
+ *
+ * Status, the persisted snapshot, entitlements and pending purchases live here
+ * with the listeners that hear about them. Every change goes through `commit`
+ * (the snapshot) or `setStatus`, so diffing and emission are written once:
+ * an entitlement is granted or revoked exactly once however many sources it has
+ * (FR-079), a renewal that changes nothing emits nothing (FR-068), and an
+ * unchanged map is the same object (PERF-03).
+ */
+
+function createEngineState(config, resolved, provider, store, now) {
+  // A listener that throws is a consumer bug, so it goes to the app's own logger
+  // rather than back into the event stream (FR-080, FR-081).
+  const emitter = (0, _events.createEmitter)((error, event) => {
+    config.logger?.error?.('payment event listener threw', {
+      eventType: event.type,
+      reason: (0, _errors.redact)(error)
+    });
+  });
+  const listenerOptions = {
+    onListenerError: error => config.logger?.error?.('payment listener threw', {
+      reason: (0, _errors.redact)(error)
+    })
+  };
+
+  /**
+   * Why an entitlement that was held is held no more, from what its sources left
+   * behind (PAY-12): a backend rejection, a consumed item, an expired
+   * subscription — or, when the store simply stopped reporting it, a refund.
+   */
+  function revokeReason(sources) {
+    const records = state.snapshot.purchases.filter(record => sources.includes(record.productKey));
+    if (records.some(record => record.validationState === 'rejected')) {
+      return 'validation_rejected';
+    }
+    if (records.some(record => record.state === 'consumed')) {
+      return 'consumed';
+    }
+    const at = now();
+    if (records.some(record => record.expiresAt !== undefined && record.expiresAt <= at)) {
+      return 'expired';
+    }
+    return 'revoked_by_store';
+  }
+  function publishPending(next) {
+    // Diffed: a sync that changes nothing is the common case, and an app
+    // rendering "payment pending" has no use for a re-render that says the same.
+    if ((0, _pending.samePending)(state.pending, next)) {
+      return;
+    }
+    state.pending = next;
+    state.pendingListeners.notify(next);
+  }
+  function recompute() {
+    if (state.disposed) {
+      return;
+    }
+    const previous = state.entitlements;
+    state.entitlements = (0, _aggregate.shareUnchanged)(previous, (0, _aggregate.aggregate)({
+      config: resolved,
+      snapshot: state.snapshot,
+      hasSynced: state.hasSynced,
+      reportsGraceAndHoldDistinctly: provider.capabilities().reportsGraceAndHoldDistinctly,
+      now: now()
+    }));
+    for (const change of (0, _aggregate.diffEntitlements)(previous, state.entitlements)) {
+      if (change.next === 'entitled') {
+        state.emit({
+          type: 'entitlement_granted',
+          entitlementKey: change.key,
+          sources: change.sources
+        });
+      } else if (change.previous === 'entitled') {
+        state.emit({
+          type: 'entitlement_revoked',
+          entitlementKey: change.key,
+          reason: revokeReason(previous[change.key]?.sources ?? [])
+        });
+      }
+    }
+    if (state.entitlements !== previous) {
+      state.entitlementListeners.notify(state.entitlements);
+    }
+    publishPending((0, _pending.derivePending)({
+      config: resolved,
+      snapshot: state.snapshot,
+      hasSynced: state.hasSynced,
+      now: now()
+    }));
+  }
+  const state = {
+    config,
+    resolved,
+    provider,
+    store,
+    now,
+    emitter,
+    statusListeners: (0, _rnCore.createListenerSet)(listenerOptions),
+    entitlementListeners: (0, _rnCore.createListenerSet)(listenerOptions),
+    pendingListeners: (0, _rnCore.createListenerSet)(listenerOptions),
+    disposed: false,
+    hasSynced: false,
+    snapshot: (0, _snapshot.emptySnapshot)(config.scopeToken),
+    entitlements: (0, _aggregate.initialEntitlements)(resolved),
+    status: {
+      kind: resolved.enabled ? 'not_started' : 'disabled',
+      blockedOperations: []
+    },
+    pending: _pending.UNKNOWN_PENDING,
+    emit(event) {
+      emitter.emit({
+        ...event,
+        timestamp: event.timestamp ?? now()
+      });
+    },
+    setStatus(next) {
+      if (state.disposed) {
+        return;
+      }
+      state.status = {
+        ...state.status,
+        ...next
+      };
+      state.emit({
+        type: 'initialization',
+        status: state.status.kind,
+        unavailableReason: state.status.unavailableReason,
+        retryable: state.status.retryable
+      });
+      state.statusListeners.notify(state.status);
+    },
+    commit(next) {
+      // Read before the swap: a transition is "pending before, not pending now",
+      // and only the commit sees both sides (FR-104).
+      const ended = (0, _pending.pendingTransitions)(state.snapshot, next, resolved, transactionId => provider.pendingEndReason?.(transactionId));
+      state.snapshot = next;
+      if (store.save(next) === false) {
+        // The write-intent-first guarantee (FR-042) did not hold for this write.
+        // Said out loud: the app learns its finalize queue may not survive a kill.
+        state.emit({
+          type: 'internal_error',
+          code: 'PAYMENT_STORAGE_UNAVAILABLE',
+          operation: 'persist'
+        });
+      }
+      // Before `recompute`, so `settled` precedes the `entitlement_granted` it
+      // causes (FR-102).
+      for (const transition of ended) {
+        state.emit({
+          type: 'purchase_pending_resolved',
+          productKey: transition.productKey,
+          outcome: transition.outcome
+        });
+      }
+      recompute();
+    },
+    hydrate() {
+      state.snapshot = store.load(config.scopeToken);
+      // A record with `lastSyncedAt` was written by a sync that succeeded, so it
+      // is a basis for asserting entitlement — and the only one a build with
+      // selling disabled will ever have (FR-012, FR-053).
+      if (state.snapshot.lastSyncedAt !== undefined) {
+        state.hasSynced = true;
+      }
+      if (!store.isDurable()) {
+        state.emit({
+          type: 'config_warning',
+          detail: 'Local storage unavailable; entitlements will not survive restart'
+        });
+      }
+      recompute();
+    },
+    forget() {
+      store.clearAll();
+      state.snapshot = (0, _snapshot.emptySnapshot)(config.scopeToken);
+      state.hasSynced = false;
+      // Back to `unknown`, not `not_entitled`: after a logout there is no basis
+      // for either claim until the next sync.
+      state.entitlements = (0, _aggregate.initialEntitlements)(resolved);
+      state.entitlementListeners.notify(state.entitlements);
+      // No `purchase_pending_resolved`: the records were discarded locally, not
+      // ended at the store.
+      publishPending(_pending.UNKNOWN_PENDING);
+    }
+  };
+  return state;
+}
+//# sourceMappingURL=state.js.map

package/lib/commonjs/engine/state.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_rnCore","require","_errors","_events","_aggregate","_snapshot","_pending","createEngineState","config","resolved","provider","store","now","emitter","createEmitter","error","event","logger","eventType","type","reason","redact","listenerOptions","onListenerError","revokeReason","sources","records","state","snapshot","purchases","filter","record","includes","productKey","some","validationState","at","expiresAt","undefined","publishPending","next","samePending","pending","pendingListeners","notify","recompute","disposed","previous","entitlements","shareUnchanged","aggregate","hasSynced","reportsGraceAndHoldDistinctly","capabilities","change","diffEntitlements","emit","entitlementKey","key","entitlementListeners","derivePending","statusListeners","createListenerSet","emptySnapshot","scopeToken","initialEntitlements","status","kind","enabled","blockedOperations","UNKNOWN_PENDING","timestamp","setStatus","unavailableReason","retryable","commit","ended","pendingTransitions","transactionId","pendingEndReason","save","code","operation","transition","outcome","hydrate","load","lastSyncedAt","isDurable","detail","forget","clearAll"],"sourceRoot":"../../../src","sources":["engine/state.ts"],"mappings":";;;;;;AAUA,IAAAA,OAAA,GAAAC,OAAA;AAKA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAMA,IAAAG,UAAA,GAAAH,OAAA;AAQA,IAAAI,SAAA,GAAAJ,OAAA;AACA,IAAAK,QAAA,GAAAL,OAAA;AA/BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAuDO,SAASM,iBAAiBA,CAChCC,MAAqB,EACrBC,QAAwB,EACxBC,QAAsB,EACtBC,KAAoB,EACpBC,GAAiB,EACH;EACd;EACA;EACA,MAAMC,OAAO,GAAG,IAAAC,qBAAa,EAAC,CAACC,KAAK,EAAEC,KAAK,KAAK;IAC/CR,MAAM,CAACS,MAAM,EAAEF,KAAK,GAAG,8BAA8B,EAAE;MACtDG,SAAS,EAAEF,KAAK,CAACG,IAAI;MACrBC,MAAM,EAAE,IAAAC,cAAM,EAACN,KAAK;IACrB,CAAC,CAAC;EACH,CAAC,CAAC;EACF,MAAMO,eAAe,GAAG;IACvBC,eAAe,EAAGR,KAAc,IAC/BP,MAAM,CAACS,MAAM,EAAEF,KAAK,GAAG,wBAAwB,EAAE;MAAEK,MAAM,EAAE,IAAAC,cAAM,EAACN,KAAK;IAAE,CAAC;EAC5E,CAAC;;EAED;AACD;AACA;AACA;AACA;EACC,SAASS,YAAYA,CAACC,OAA0B,EAAgB;IAC/D,MAAMC,OAAO,GAAGC,KAAK,CAACC,QAAQ,CAACC,SAAS,CAACC,MAAM,CAACC,MAAM,IAAIN,OAAO,CAACO,QAAQ,CAACD,MAAM,CAACE,UAAU,CAAC,CAAC;IAC9F,IAAIP,OAAO,CAACQ,IAAI,CAACH,MAAM,IAAIA,MAAM,CAACI,eAAe,KAAK,UAAU,CAAC,EAAE;MAClE,OAAO,qBAAqB;IAC7B;IACA,IAAIT,OAAO,CAACQ,IAAI,CAACH,MAAM,IAAIA,MAAM,CAACJ,KAAK,KAAK,UAAU,CAAC,EAAE;MACxD,OAAO,UAAU;IAClB;IACA,MAAMS,EAAE,GAAGxB,GAAG,CAAC,CAAC;IAChB,IAAIc,OAAO,CAACQ,IAAI,CAACH,MAAM,IAAIA,MAAM,CAACM,SAAS,KAAKC,SAAS,IAAIP,MAAM,CAACM,SAAS,IAAID,EAAE,CAAC,EAAE;MACrF,OAAO,SAAS;IACjB;IACA,OAAO,kBAAkB;EAC1B;EAEA,SAASG,cAAcA,CAACC,IAA2B,EAAQ;IAC1D;IACA;IACA,IAAI,IAAAC,oBAAW,EAACd,KAAK,CAACe,OAAO,EAAEF,IAAI,CAAC,EAAE;MACrC;IACD;IACAb,KAAK,CAACe,OAAO,GAAGF,IAAI;IACpBb,KAAK,CAACgB,gBAAgB,CAACC,MAAM,CAACJ,IAAI,CAAC;EACpC;EAEA,SAASK,SAASA,CAAA,EAAS;IAC1B,IAAIlB,KAAK,CAACmB,QAAQ,EAAE;MACnB;IACD;IACA,MAAMC,QAAQ,GAAGpB,KAAK,CAACqB,YAAY;IACnCrB,KAAK,CAACqB,YAAY,GAAG,IAAAC,yBAAc,EAClCF,QAAQ,EACR,IAAAG,oBAAS,EAAC;MACT1C,MAAM,EAAEC,QAAQ;MAChBmB,QAAQ,EAAED,KAAK,CAACC,QAAQ;MACxBuB,SAAS,EAAExB,KAAK,CAACwB,SAAS;MAC1BC,6BAA6B,EAAE1C,QAAQ,CAAC2C,YAAY,CAAC,CAAC,CAACD,6BAA6B;MACpFxC,GAAG,EAAEA,GAAG,CAAC;IACV,CAAC,CACF,CAAC;IACD,KAAK,MAAM0C,MAAM,IAAI,IAAAC,2BAAgB,EAACR,QAAQ,EAAEpB,KAAK,CAACqB,YAAY,CAAC,EAAE;MACpE,IAAIM,MAAM,CAACd,IAAI,KAAK,UAAU,EAAE;QAC/Bb,KAAK,CAAC6B,IAAI,CAAC;UACVrC,IAAI,EAAE,qBAAqB;UAC3BsC,cAAc,EAAEH,MAAM,CAACI,GAAG;UAC1BjC,OAAO,EAAE6B,MAAM,CAAC7B;QACjB,CAAC,CAAC;MACH,CAAC,MAAM,IAAI6B,MAAM,CAACP,QAAQ,KAAK,UAAU,EAAE;QAC1CpB,KAAK,CAAC6B,IAAI,CAAC;UACVrC,IAAI,EAAE,qBAAqB;UAC3BsC,cAAc,EAAEH,MAAM,CAACI,GAAG;UAC1BtC,MAAM,EAAEI,YAAY,CAACuB,QAAQ,CAACO,MAAM,CAACI,GAAG,CAAC,EAAEjC,OAAO,IAAI,EAAE;QACzD,CAAC,CAAC;MACH;IACD;IACA,IAAIE,KAAK,CAACqB,YAAY,KAAKD,QAAQ,EAAE;MACpCpB,KAAK,CAACgC,oBAAoB,CAACf,MAAM,CAACjB,KAAK,CAACqB,YAAY,CAAC;IACtD;IACAT,cAAc,CACb,IAAAqB,sBAAa,EAAC;MACbpD,MAAM,EAAEC,QAAQ;MAChBmB,QAAQ,EAAED,KAAK,CAACC,QAAQ;MACxBuB,SAAS,EAAExB,KAAK,CAACwB,SAAS;MAC1BvC,GAAG,EAAEA,GAAG,CAAC;IACV,CAAC,CACF,CAAC;EACF;EAEA,MAAMe,KAAkB,GAAG;IAC1BnB,MAAM;IACNC,QAAQ;IACRC,QAAQ;IACRC,KAAK;IACLC,GAAG;IACHC,OAAO;IACPgD,eAAe,EAAE,IAAAC,yBAAiB,EAAkBxC,eAAe,CAAC;IACpEqC,oBAAoB,EAAE,IAAAG,yBAAiB,EAAmBxC,eAAe,CAAC;IAC1EqB,gBAAgB,EAAE,IAAAmB,yBAAiB,EAA0BxC,eAAe,CAAC;IAE7EwB,QAAQ,EAAE,KAAK;IACfK,SAAS,EAAE,KAAK;IAChBvB,QAAQ,EAAE,IAAAmC,uBAAa,EAACvD,MAAM,CAACwD,UAAU,CAAC;IAC1ChB,YAAY,EAAE,IAAAiB,8BAAmB,EAACxD,QAAQ,CAAC;IAC3CyD,MAAM,EAAE;MAAEC,IAAI,EAAE1D,QAAQ,CAAC2D,OAAO,GAAG,aAAa,GAAG,UAAU;MAAEC,iBAAiB,EAAE;IAAG,CAAC;IACtF3B,OAAO,EAAE4B,wBAAe;IAExBd,IAAIA,CAACxC,KAAK,EAAE;MACXH,OAAO,CAAC2C,IAAI,CAAC;QAAE,GAAGxC,KAAK;QAAEuD,SAAS,EAAEvD,KAAK,CAACuD,SAAS,IAAI3D,GAAG,CAAC;MAAE,CAAiB,CAAC;IAChF,CAAC;IAED4D,SAASA,CAAChC,IAAI,EAAE;MACf,IAAIb,KAAK,CAACmB,QAAQ,EAAE;QACnB;MACD;MACAnB,KAAK,CAACuC,MAAM,GAAG;QAAE,GAAGvC,KAAK,CAACuC,MAAM;QAAE,GAAG1B;MAAK,CAAC;MAC3Cb,KAAK,CAAC6B,IAAI,CAAC;QACVrC,IAAI,EAAE,gBAAgB;QACtB+C,MAAM,EAAEvC,KAAK,CAACuC,MAAM,CAACC,IAAI;QACzBM,iBAAiB,EAAE9C,KAAK,CAACuC,MAAM,CAACO,iBAAiB;QACjDC,SAAS,EAAE/C,KAAK,CAACuC,MAAM,CAACQ;MACzB,CAAC,CAAC;MACF/C,KAAK,CAACkC,eAAe,CAACjB,MAAM,CAACjB,KAAK,CAACuC,MAAM,CAAC;IAC3C,CAAC;IAEDS,MAAMA,CAACnC,IAAI,EAAE;MACZ;MACA;MACA,MAAMoC,KAAK,GAAG,IAAAC,2BAAkB,EAAClD,KAAK,CAACC,QAAQ,EAAEY,IAAI,EAAE/B,QAAQ,EAAEqE,aAAa,IAC7EpE,QAAQ,CAACqE,gBAAgB,GAAGD,aAAa,CAC1C,CAAC;MACDnD,KAAK,CAACC,QAAQ,GAAGY,IAAI;MACrB,IAAI7B,KAAK,CAACqE,IAAI,CAACxC,IAAI,CAAC,KAAK,KAAK,EAAE;QAC/B;QACA;QACAb,KAAK,CAAC6B,IAAI,CAAC;UACVrC,IAAI,EAAE,gBAAgB;UACtB8D,IAAI,EAAE,6BAA6B;UACnCC,SAAS,EAAE;QACZ,CAAC,CAAC;MACH;MACA;MACA;MACA,KAAK,MAAMC,UAAU,IAAIP,KAAK,EAAE;QAC/BjD,KAAK,CAAC6B,IAAI,CAAC;UACVrC,IAAI,EAAE,2BAA2B;UACjCc,UAAU,EAAEkD,UAAU,CAAClD,UAAU;UACjCmD,OAAO,EAAED,UAAU,CAACC;QACrB,CAAC,CAAC;MACH;MACAvC,SAAS,CAAC,CAAC;IACZ,CAAC;IAEDwC,OAAOA,CAAA,EAAG;MACT1D,KAAK,CAACC,QAAQ,GAAGjB,KAAK,CAAC2E,IAAI,CAAC9E,MAAM,CAACwD,UAAU,CAAC;MAC9C;MACA;MACA;MACA,IAAIrC,KAAK,CAACC,QAAQ,CAAC2D,YAAY,KAAKjD,SAAS,EAAE;QAC9CX,KAAK,CAACwB,SAAS,GAAG,IAAI;MACvB;MACA,IAAI,CAACxC,KAAK,CAAC6E,SAAS,CAAC,CAAC,EAAE;QACvB7D,KAAK,CAAC6B,IAAI,CAAC;UACVrC,IAAI,EAAE,gBAAgB;UACtBsE,MAAM,EAAE;QACT,CAAC,CAAC;MACH;MACA5C,SAAS,CAAC,CAAC;IACZ,CAAC;IAED6C,MAAMA,CAAA,EAAG;MACR/E,KAAK,CAACgF,QAAQ,CAAC,CAAC;MAChBhE,KAAK,CAACC,QAAQ,GAAG,IAAAmC,uBAAa,EAACvD,MAAM,CAACwD,UAAU,CAAC;MACjDrC,KAAK,CAACwB,SAAS,GAAG,KAAK;MACvB;MACA;MACAxB,KAAK,CAACqB,YAAY,GAAG,IAAAiB,8BAAmB,EAACxD,QAAQ,CAAC;MAClDkB,KAAK,CAACgC,oBAAoB,CAACf,MAAM,CAACjB,KAAK,CAACqB,YAAY,CAAC;MACrD;MACA;MACAT,cAAc,CAAC+B,wBAAe,CAAC;IAChC;EACD,CAAC;EACD,OAAO3C,KAAK;AACb","ignoreList":[]}

package/lib/commonjs/engine/subscriptions.js

@@ -0,0 +1,122 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createSubscriptions = createSubscriptions;
+var _mapping = require("../entitlements/mapping.js");
+/**
+ * Subscription plan changes and the route to the store's management screen (US12).
+ *
+ * Two platform rules drive this module:
+ *
+ * - **Proration is the app's decision, inside what the store permits** (FR-065).
+ *   Whether a user who upgrades gets charged immediately, keeps their remaining
+ *   time, or starts a fresh period is a product and pricing choice, so the
+ *   package forwards it rather than picking.
+ * - **Cancellation belongs to the store.** Platforms forbid an app presenting its
+ *   own cancellation screen, so this module offers only a route to the store's
+ *   (FR-066) — there is deliberately no self-built alternative anywhere in the
+ *   package.
+ */
+
+/**
+ * How already-paid time is handled when a plan changes.
+ *
+ * Named for the user-visible effect rather than mirroring a store's enum, so the
+ * same vocabulary will map onto StoreKit later (FR-004).
+ */
+
+/** Store-specific replacement codes stay here, behind the neutral vocabulary above. */
+const PRORATION_CODES = {
+  immediate_with_time_proration: 'WITH_TIME_PRORATION',
+  immediate_and_charge_full_price: 'CHARGE_FULL_PRICE',
+  immediate_and_charge_prorated_price: 'CHARGE_PRORATED_PRICE',
+  deferred: 'DEFERRED'
+};
+function createSubscriptions(deps) {
+  const {
+    resolved
+  } = deps;
+  return {
+    async changePlan(fromProductKey, toProductKey, mode, options) {
+      if (!deps.provider.capabilities().supportsPlanChange) {
+        return {
+          kind: 'unsupported'
+        };
+      }
+      const target = resolved.entries.get(toProductKey);
+      if (!target) {
+        return {
+          kind: 'unknown_product',
+          productKey: toProductKey
+        };
+      }
+      if (!resolved.entries.has(fromProductKey)) {
+        return {
+          kind: 'unknown_product',
+          productKey: fromProductKey
+        };
+      }
+
+      // The store needs the *token* of the subscription being replaced, not its
+      // product id — that is how it knows which active purchase to migrate, and
+      // it is why a plan change needs a live local record rather than just two
+      // product keys.
+      const active = deps.snapshot().purchases.find(p => p.productKey === fromProductKey && p.productType === 'subscription' && p.state === 'purchased');
+      if (!active) {
+        // No subscription to replace. Treated as a plain purchase would be
+        // surprising — the caller asked to *change* something that is not there,
+        // which almost always means its own state is stale.
+        return {
+          kind: 'already_owned',
+          productKey: fromProductKey
+        };
+      }
+
+      // Routed through the normal purchase flow on purpose: a plan change is a
+      // purchase, so it must inherit the single-flight lock, the environment
+      // guard, validation, and the finalization queue rather than reimplementing
+      // any of them.
+      return deps.purchase(toProductKey, {
+        ...options,
+        replaceProductKey: fromProductKey,
+        prorationMode: PRORATION_CODES[mode]
+      });
+    },
+    async openManagement(productKey) {
+      const storeProductId = productKey ? (0, _mapping.storeIdForProductKey)(resolved, productKey) : undefined;
+      // No-ops rather than throwing where the platform has no such screen: this
+      // is wired to a button, and a button that crashes is worse than one that
+      // does nothing on a platform that cannot honour it.
+      await deps.provider.openSubscriptionManagement(storeProductId);
+    },
+    async confirmPriceChange(productKey) {
+      if (!deps.provider.capabilities().supportsPriceChangeConfirmation) {
+        return {
+          kind: 'unsupported'
+        };
+      }
+      const storeProductId = (0, _mapping.storeIdForProductKey)(resolved, productKey);
+      if (!storeProductId) {
+        return {
+          kind: 'failed',
+          code: 'PAYMENT_UNKNOWN_PRODUCT'
+        };
+      }
+      const outcome = await deps.provider.confirmPriceChange(storeProductId);
+      if (!outcome.ok) {
+        return {
+          kind: 'failed',
+          code: 'PAYMENT_STORE_ERROR'
+        };
+      }
+      return outcome.confirmed ? {
+        kind: 'confirmed'
+      } : {
+        kind: 'dismissed'
+      };
+    }
+  };
+}
+//# sourceMappingURL=subscriptions.js.map

package/lib/commonjs/engine/subscriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_mapping","require","PRORATION_CODES","immediate_with_time_proration","immediate_and_charge_full_price","immediate_and_charge_prorated_price","deferred","createSubscriptions","deps","resolved","changePlan","fromProductKey","toProductKey","mode","options","provider","capabilities","supportsPlanChange","kind","target","entries","get","productKey","has","active","snapshot","purchases","find","p","productType","state","purchase","replaceProductKey","prorationMode","openManagement","storeProductId","storeIdForProductKey","undefined","openSubscriptionManagement","confirmPriceChange","supportsPriceChangeConfirmation","code","outcome","ok","confirmed"],"sourceRoot":"../../../src","sources":["engine/subscriptions.ts"],"mappings":";;;;;;AAkBA,IAAAA,QAAA,GAAAC,OAAA;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAQA;AACA;AACA;AACA;AACA;AACA;;AAWA;AACA,MAAMC,eAA8C,GAAG;EACtDC,6BAA6B,EAAE,qBAAqB;EACpDC,+BAA+B,EAAE,mBAAmB;EACpDC,mCAAmC,EAAE,uBAAuB;EAC5DC,QAAQ,EAAE;AACX,CAAC;AA8BM,SAASC,mBAAmBA,CAACC,IAAuB,EAAiB;EAC3E,MAAM;IAAEC;EAAS,CAAC,GAAGD,IAAI;EAEzB,OAAO;IACN,MAAME,UAAUA,CAACC,cAAc,EAAEC,YAAY,EAAEC,IAAI,EAAEC,OAAO,EAA2B;MACtF,IAAI,CAACN,IAAI,CAACO,QAAQ,CAACC,YAAY,CAAC,CAAC,CAACC,kBAAkB,EAAE;QACrD,OAAO;UAAEC,IAAI,EAAE;QAAc,CAAC;MAC/B;MAEA,MAAMC,MAAM,GAAGV,QAAQ,CAACW,OAAO,CAACC,GAAG,CAACT,YAAY,CAAC;MACjD,IAAI,CAACO,MAAM,EAAE;QACZ,OAAO;UAAED,IAAI,EAAE,iBAAiB;UAAEI,UAAU,EAAEV;QAAa,CAAC;MAC7D;MACA,IAAI,CAACH,QAAQ,CAACW,OAAO,CAACG,GAAG,CAACZ,cAAc,CAAC,EAAE;QAC1C,OAAO;UAAEO,IAAI,EAAE,iBAAiB;UAAEI,UAAU,EAAEX;QAAe,CAAC;MAC/D;;MAEA;MACA;MACA;MACA;MACA,MAAMa,MAAM,GAAGhB,IAAI,CACjBiB,QAAQ,CAAC,CAAC,CACVC,SAAS,CAACC,IAAI,CACdC,CAAC,IACAA,CAAC,CAACN,UAAU,KAAKX,cAAc,IAC/BiB,CAAC,CAACC,WAAW,KAAK,cAAc,IAChCD,CAAC,CAACE,KAAK,KAAK,WACd,CAAC;MAEF,IAAI,CAACN,MAAM,EAAE;QACZ;QACA;QACA;QACA,OAAO;UAAEN,IAAI,EAAE,eAAe;UAAEI,UAAU,EAAEX;QAAe,CAAC;MAC7D;;MAEA;MACA;MACA;MACA;MACA,OAAOH,IAAI,CAACuB,QAAQ,CAACnB,YAAY,EAAE;QAClC,GAAGE,OAAO;QACVkB,iBAAiB,EAAErB,cAAc;QACjCsB,aAAa,EAAE/B,eAAe,CAACW,IAAI;MACpC,CAAC,CAAC;IACH,CAAC;IAED,MAAMqB,cAAcA,CAACZ,UAAuB,EAAiB;MAC5D,MAAMa,cAAc,GAAGb,UAAU,GAAG,IAAAc,6BAAoB,EAAC3B,QAAQ,EAAEa,UAAU,CAAC,GAAGe,SAAS;MAC1F;MACA;MACA;MACA,MAAM7B,IAAI,CAACO,QAAQ,CAACuB,0BAA0B,CAACH,cAAc,CAAC;IAC/D,CAAC;IAED,MAAMI,kBAAkBA,CAACjB,UAAU,EAA8B;MAChE,IAAI,CAACd,IAAI,CAACO,QAAQ,CAACC,YAAY,CAAC,CAAC,CAACwB,+BAA+B,EAAE;QAClE,OAAO;UAAEtB,IAAI,EAAE;QAAc,CAAC;MAC/B;MACA,MAAMiB,cAAc,GAAG,IAAAC,6BAAoB,EAAC3B,QAAQ,EAAEa,UAAU,CAAC;MACjE,IAAI,CAACa,cAAc,EAAE;QACpB,OAAO;UAAEjB,IAAI,EAAE,QAAQ;UAAEuB,IAAI,EAAE;QAA0B,CAAC;MAC3D;MAEA,MAAMC,OAAO,GAAG,MAAMlC,IAAI,CAACO,QAAQ,CAACwB,kBAAkB,CAACJ,cAAc,CAAC;MACtE,IAAI,CAACO,OAAO,CAACC,EAAE,EAAE;QAChB,OAAO;UAAEzB,IAAI,EAAE,QAAQ;UAAEuB,IAAI,EAAE;QAAsB,CAAC;MACvD;MACA,OAAOC,OAAO,CAACE,SAAS,GAAG;QAAE1B,IAAI,EAAE;MAAY,CAAC,GAAG;QAAEA,IAAI,EAAE;MAAY,CAAC;IACzE;EACD,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/engine/sync.js

@@ -0,0 +1,163 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createSync = createSync;
+exports.toPersistedRecord = toPersistedRecord;
+var _errors = require("../diagnostics/errors.js");
+var _mapping = require("../entitlements/mapping.js");
+var _mutex = require("../core/mutex.js");
+var _snapshot = require("../persistence/snapshot.js");
+/**
+ * Syncing with the store, and the one translation from a store purchase to a
+ * persisted record (PAY-10).
+ *
+ * The purchase flow and sync both build records here, so they cannot disagree
+ * about what a transaction still owes: a disagreement is how a paid purchase
+ * goes unacknowledged and is refunded three days later.
+ */
+
+/** The persisted record for one store purchase, keeping what we already knew about it. */
+function toPersistedRecord(resolved, purchase, productKey, existing) {
+  return {
+    transactionId: purchase.transactionId,
+    productKey,
+    productType: resolved.entries.get(productKey)?.productType ?? 'one_time_permanent',
+    token: purchase.token,
+    state: purchase.state === 'pending' ? 'pending' : 'purchased',
+    purchasedAt: purchase.purchasedAt,
+    // Finalize progress survives: a sync must never reset a queued
+    // acknowledgement and lose the paid transaction.
+    finalizeState: (0, _snapshot.resolveFinalizeState)(purchase, existing),
+    attempts: existing?.attempts ?? 0,
+    validationState: existing?.validationState ?? 'not_required',
+    expiresAt: purchase.expiresAt,
+    willAutoRenew: purchase.willAutoRenew
+  };
+}
+
+/** Store purchases as records, dropping products this catalog does not know. */
+function toPersisted(resolved, purchases, known) {
+  const records = [];
+  for (const purchase of purchases) {
+    // Legitimately possible: a user owns something from a build whose catalog
+    // has since changed. Ignored rather than treated as impossible.
+    const productKey = (0, _mapping.productKeyForStoreId)(resolved, purchase.storeProductId);
+    if (!productKey || !resolved.entries.has(productKey)) {
+      continue;
+    }
+    const existing = known.find(p => p.transactionId === purchase.transactionId);
+    if (purchase.state === 'unspecified') {
+      // No basis for granting, finalizing or ending anything: a new transaction
+      // waits until the store says what it is, a known one keeps what we knew.
+      if (existing) {
+        records.push(existing);
+      }
+      continue;
+    }
+    records.push(toPersistedRecord(resolved, purchase, productKey, existing));
+  }
+  return records;
+}
+function purchasedIds(records) {
+  return new Set(records.filter(p => p.state === 'purchased').map(p => p.transactionId));
+}
+/**
+ * `settle` runs after every successful sync, outside the sync flight: the finalize
+ * drain and backend revalidation (FR-039, FR-042, FR-072a). Inside the flight, one
+ * store call or hook that never answered held it, and every later sync joined
+ * that stuck promise for the rest of the session.
+ */
+function createSync(state, settle) {
+  const {
+    resolved,
+    provider,
+    now
+  } = state;
+  const syncFlight = (0, _mutex.createSingleFlight)();
+  const settleFlight = (0, _mutex.createSingleFlight)();
+  const foregroundLimiter = (0, _mutex.createRateLimiter)(resolved.foregroundSyncMinIntervalMs, now);
+  async function querySnapshot(trigger) {
+    try {
+      const owned = await (0, _mutex.withTimeout)(provider.queryOwned(), resolved.timeouts.syncMs, () => new _errors.PaymentError({
+        code: 'PAYMENT_TIMEOUT',
+        message: 'Syncing entitlements timed out',
+        operation: 'sync',
+        retryable: true
+      }));
+      const before = purchasedIds(state.snapshot.purchases);
+      const records = toPersisted(resolved, owned, state.snapshot.purchases);
+      const after = purchasedIds(records);
+      // A transaction the store no longer reports is revoked — a refund. The
+      // cache must not resurrect it (FR-064, FR-055).
+      const revokedCount = [...before].filter(id => !after.has(id)).length;
+      const restoredCount = [...after].filter(id => !before.has(id)).length;
+      state.hasSynced = true;
+      state.commit({
+        ...state.snapshot,
+        purchases: records,
+        lastSyncedAt: now()
+      });
+      state.emit({
+        type: 'sync_completed',
+        restoredCount,
+        revokedCount,
+        trigger
+      });
+      return {
+        ok: true,
+        restoredCount,
+        revokedCount
+      };
+    } catch (error) {
+      const paymentError = error instanceof _errors.PaymentError ? error : new _errors.PaymentError({
+        code: 'PAYMENT_STORE_ERROR',
+        message: 'Sync failed',
+        operation: 'sync',
+        retryable: true
+      });
+      // A failed sync leaves the previous snapshot in place, so offline
+      // entitlements survive rather than being wiped (FR-053).
+      state.emit({
+        type: 'internal_error',
+        code: paymentError.code,
+        operation: 'sync'
+      });
+      return {
+        ok: false,
+        error: paymentError
+      };
+    }
+  }
+  return {
+    async sync(trigger = 'manual') {
+      if (state.disposed || !resolved.enabled) {
+        return {
+          ok: false,
+          error: new _errors.PaymentError({
+            code: 'PAYMENT_DISABLED',
+            message: 'Payments are disabled',
+            operation: 'sync'
+          })
+        };
+      }
+      // Rejected rather than deferred: the next foreground event tries again,
+      // whereas queueing would fire a burst once the interval elapsed (PERF-002).
+      if (trigger === 'foreground' && !foregroundLimiter.tryAcquire()) {
+        return {
+          ok: true,
+          restoredCount: 0,
+          revokedCount: 0
+        };
+      }
+      // Concurrent callers join one flight: one store request (FR-063).
+      const outcome = await syncFlight.run(() => querySnapshot(trigger));
+      if (outcome.ok) {
+        await settleFlight.run(settle);
+      }
+      return outcome;
+    }
+  };
+}
+//# sourceMappingURL=sync.js.map

package/lib/commonjs/engine/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_errors","require","_mapping","_mutex","_snapshot","toPersistedRecord","resolved","purchase","productKey","existing","transactionId","productType","entries","get","token","state","purchasedAt","finalizeState","resolveFinalizeState","attempts","validationState","expiresAt","willAutoRenew","toPersisted","purchases","known","records","productKeyForStoreId","storeProductId","has","find","p","push","purchasedIds","Set","filter","map","createSync","settle","provider","now","syncFlight","createSingleFlight","settleFlight","foregroundLimiter","createRateLimiter","foregroundSyncMinIntervalMs","querySnapshot","trigger","owned","withTimeout","queryOwned","timeouts","syncMs","PaymentError","code","message","operation","retryable","before","snapshot","after","revokedCount","id","length","restoredCount","hasSynced","commit","lastSyncedAt","emit","type","ok","error","paymentError","sync","disposed","enabled","tryAcquire","outcome","run"],"sourceRoot":"../../../src","sources":["engine/sync.ts"],"mappings":";;;;;;;AAWA,IAAAA,OAAA,GAAAC,OAAA;AAEA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,MAAA,GAAAF,OAAA;AACA,IAAAG,SAAA,GAAAH,OAAA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAcA;AACO,SAASI,iBAAiBA,CAChCC,QAAwB,EACxBC,QAA0B,EAC1BC,UAAsB,EACtBC,QAAuC,EACnB;EACpB,OAAO;IACNC,aAAa,EAAEH,QAAQ,CAACG,aAAa;IACrCF,UAAU;IACVG,WAAW,EAAEL,QAAQ,CAACM,OAAO,CAACC,GAAG,CAACL,UAAU,CAAC,EAAEG,WAAW,IAAI,oBAAoB;IAClFG,KAAK,EAAEP,QAAQ,CAACO,KAAK;IACrBC,KAAK,EAAER,QAAQ,CAACQ,KAAK,KAAK,SAAS,GAAG,SAAS,GAAG,WAAW;IAC7DC,WAAW,EAAET,QAAQ,CAACS,WAAW;IACjC;IACA;IACAC,aAAa,EAAE,IAAAC,8BAAoB,EAACX,QAAQ,EAAEE,QAAQ,CAAC;IACvDU,QAAQ,EAAEV,QAAQ,EAAEU,QAAQ,IAAI,CAAC;IACjCC,eAAe,EAAEX,QAAQ,EAAEW,eAAe,IAAI,cAAc;IAC5DC,SAAS,EAAEd,QAAQ,CAACc,SAAS;IAC7BC,aAAa,EAAEf,QAAQ,CAACe;EACzB,CAAC;AACF;;AAEA;AACA,SAASC,WAAWA,CACnBjB,QAAwB,EACxBkB,SAAsC,EACtCC,KAAmC,EACb;EACtB,MAAMC,OAA4B,GAAG,EAAE;EACvC,KAAK,MAAMnB,QAAQ,IAAIiB,SAAS,EAAE;IACjC;IACA;IACA,MAAMhB,UAAU,GAAG,IAAAmB,6BAAoB,EAACrB,QAAQ,EAAEC,QAAQ,CAACqB,cAAc,CAAC;IAC1E,IAAI,CAACpB,UAAU,IAAI,CAACF,QAAQ,CAACM,OAAO,CAACiB,GAAG,CAACrB,UAAU,CAAC,EAAE;MACrD;IACD;IACA,MAAMC,QAAQ,GAAGgB,KAAK,CAACK,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACrB,aAAa,KAAKH,QAAQ,CAACG,aAAa,CAAC;IAC5E,IAAIH,QAAQ,CAACQ,KAAK,KAAK,aAAa,EAAE;MACrC;MACA;MACA,IAAIN,QAAQ,EAAE;QACbiB,OAAO,CAACM,IAAI,CAACvB,QAAQ,CAAC;MACvB;MACA;IACD;IACAiB,OAAO,CAACM,IAAI,CAAC3B,iBAAiB,CAACC,QAAQ,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,QAAQ,CAAC,CAAC;EAC1E;EACA,OAAOiB,OAAO;AACf;AAEA,SAASO,YAAYA,CAACP,OAAqC,EAAe;EACzE,OAAO,IAAIQ,GAAG,CAACR,OAAO,CAACS,MAAM,CAACJ,CAAC,IAAIA,CAAC,CAAChB,KAAK,KAAK,WAAW,CAAC,CAACqB,GAAG,CAACL,CAAC,IAAIA,CAAC,CAACrB,aAAa,CAAC,CAAC;AACvF;AAMA;AACA;AACA;AACA;AACA;AACA;AACO,SAAS2B,UAAUA,CAACtB,KAAkB,EAAEuB,MAA2B,EAAQ;EACjF,MAAM;IAAEhC,QAAQ;IAAEiC,QAAQ;IAAEC;EAAI,CAAC,GAAGzB,KAAK;EACzC,MAAM0B,UAAU,GAAG,IAAAC,yBAAkB,EAAc,CAAC;EACpD,MAAMC,YAAY,GAAG,IAAAD,yBAAkB,EAAO,CAAC;EAC/C,MAAME,iBAAiB,GAAG,IAAAC,wBAAiB,EAACvC,QAAQ,CAACwC,2BAA2B,EAAEN,GAAG,CAAC;EAEtF,eAAeO,aAAaA,CAACC,OAAoB,EAAwB;IACxE,IAAI;MACH,MAAMC,KAAK,GAAG,MAAM,IAAAC,kBAAW,EAC9BX,QAAQ,CAACY,UAAU,CAAC,CAAC,EACrB7C,QAAQ,CAAC8C,QAAQ,CAACC,MAAM,EACxB,MACC,IAAIC,oBAAY,CAAC;QAChBC,IAAI,EAAE,iBAAiB;QACvBC,OAAO,EAAE,gCAAgC;QACzCC,SAAS,EAAE,MAAM;QACjBC,SAAS,EAAE;MACZ,CAAC,CACH,CAAC;MACD,MAAMC,MAAM,GAAG1B,YAAY,CAAClB,KAAK,CAAC6C,QAAQ,CAACpC,SAAS,CAAC;MACrD,MAAME,OAAO,GAAGH,WAAW,CAACjB,QAAQ,EAAE2C,KAAK,EAAElC,KAAK,CAAC6C,QAAQ,CAACpC,SAAS,CAAC;MACtE,MAAMqC,KAAK,GAAG5B,YAAY,CAACP,OAAO,CAAC;MACnC;MACA;MACA,MAAMoC,YAAY,GAAG,CAAC,GAAGH,MAAM,CAAC,CAACxB,MAAM,CAAC4B,EAAE,IAAI,CAACF,KAAK,CAAChC,GAAG,CAACkC,EAAE,CAAC,CAAC,CAACC,MAAM;MACpE,MAAMC,aAAa,GAAG,CAAC,GAAGJ,KAAK,CAAC,CAAC1B,MAAM,CAAC4B,EAAE,IAAI,CAACJ,MAAM,CAAC9B,GAAG,CAACkC,EAAE,CAAC,CAAC,CAACC,MAAM;MAErEjD,KAAK,CAACmD,SAAS,GAAG,IAAI;MACtBnD,KAAK,CAACoD,MAAM,CAAC;QAAE,GAAGpD,KAAK,CAAC6C,QAAQ;QAAEpC,SAAS,EAAEE,OAAO;QAAE0C,YAAY,EAAE5B,GAAG,CAAC;MAAE,CAAC,CAAC;MAC5EzB,KAAK,CAACsD,IAAI,CAAC;QAAEC,IAAI,EAAE,gBAAgB;QAAEL,aAAa;QAAEH,YAAY;QAAEd;MAAQ,CAAC,CAAC;MAC5E,OAAO;QAAEuB,EAAE,EAAE,IAAI;QAAEN,aAAa;QAAEH;MAAa,CAAC;IACjD,CAAC,CAAC,OAAOU,KAAK,EAAE;MACf,MAAMC,YAAY,GACjBD,KAAK,YAAYlB,oBAAY,GAC1BkB,KAAK,GACL,IAAIlB,oBAAY,CAAC;QACjBC,IAAI,EAAE,qBAAqB;QAC3BC,OAAO,EAAE,aAAa;QACtBC,SAAS,EAAE,MAAM;QACjBC,SAAS,EAAE;MACZ,CAAC,CAAC;MACL;MACA;MACA3C,KAAK,CAACsD,IAAI,CAAC;QAAEC,IAAI,EAAE,gBAAgB;QAAEf,IAAI,EAAEkB,YAAY,CAAClB,IAAI;QAAEE,SAAS,EAAE;MAAO,CAAC,CAAC;MAClF,OAAO;QAAEc,EAAE,EAAE,KAAK;QAAEC,KAAK,EAAEC;MAAa,CAAC;IAC1C;EACD;EAEA,OAAO;IACN,MAAMC,IAAIA,CAAC1B,OAAO,GAAG,QAAQ,EAAE;MAC9B,IAAIjC,KAAK,CAAC4D,QAAQ,IAAI,CAACrE,QAAQ,CAACsE,OAAO,EAAE;QACxC,OAAO;UACNL,EAAE,EAAE,KAAK;UACTC,KAAK,EAAE,IAAIlB,oBAAY,CAAC;YACvBC,IAAI,EAAE,kBAAkB;YACxBC,OAAO,EAAE,uBAAuB;YAChCC,SAAS,EAAE;UACZ,CAAC;QACF,CAAC;MACF;MACA;MACA;MACA,IAAIT,OAAO,KAAK,YAAY,IAAI,CAACJ,iBAAiB,CAACiC,UAAU,CAAC,CAAC,EAAE;QAChE,OAAO;UAAEN,EAAE,EAAE,IAAI;UAAEN,aAAa,EAAE,CAAC;UAAEH,YAAY,EAAE;QAAE,CAAC;MACvD;MACA;MACA,MAAMgB,OAAO,GAAG,MAAMrC,UAAU,CAACsC,GAAG,CAAC,MAAMhC,aAAa,CAACC,OAAO,CAAC,CAAC;MAClE,IAAI8B,OAAO,CAACP,EAAE,EAAE;QACf,MAAM5B,YAAY,CAACoC,GAAG,CAACzC,MAAM,CAAC;MAC/B;MACA,OAAOwC,OAAO;IACf;EACD,CAAC;AACF","ignoreList":[]}