@chipmobilesdk/rn-payment 0.6.0 → 0.7.0

package/lib/module/engine/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["PaymentError","productKeyForStoreId","createRateLimiter","createSingleFlight","withTimeout","resolveFinalizeState","toPersistedRecord","resolved","purchase","productKey","existing","transactionId","productType","entries","get","token","state","purchasedAt","finalizeState","attempts","validationState","expiresAt","willAutoRenew","toPersisted","purchases","known","records","storeProductId","has","find","p","push","purchasedIds","Set","filter","map","createSync","settle","provider","now","syncFlight","settleFlight","foregroundLimiter","foregroundSyncMinIntervalMs","querySnapshot","trigger","owned","queryOwned","timeouts","syncMs","code","message","operation","retryable","before","snapshot","after","revokedCount","id","length","restoredCount","hasSynced","commit","lastSyncedAt","emit","type","ok","error","paymentError","sync","disposed","enabled","tryAcquire","outcome","run"],"sourceRoot":"../../../src","sources":["engine/sync.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA,SAASA,YAAY,QAAQ,0BAAuB;AAEpD,SAASC,oBAAoB,QAAQ,4BAAyB;AAC9D,SAASC,iBAAiB,EAAEC,kBAAkB,EAAEC,WAAW,QAAQ,kBAAe;AAClF,SAASC,oBAAoB,QAAgC,4BAAyB;AAMtF;AACA,OAAO,SAASC,iBAAiBA,CAChCC,QAAwB,EACxBC,QAA0B,EAC1BC,UAAsB,EACtBC,QAAuC,EACnB;EACpB,OAAO;IACNC,aAAa,EAAEH,QAAQ,CAACG,aAAa;IACrCF,UAAU;IACVG,WAAW,EAAEL,QAAQ,CAACM,OAAO,CAACC,GAAG,CAACL,UAAU,CAAC,EAAEG,WAAW,IAAI,oBAAoB;IAClFG,KAAK,EAAEP,QAAQ,CAACO,KAAK;IACrBC,KAAK,EAAER,QAAQ,CAACQ,KAAK,KAAK,SAAS,GAAG,SAAS,GAAG,WAAW;IAC7DC,WAAW,EAAET,QAAQ,CAACS,WAAW;IACjC;IACA;IACAC,aAAa,EAAEb,oBAAoB,CAACG,QAAQ,EAAEE,QAAQ,CAAC;IACvDS,QAAQ,EAAET,QAAQ,EAAES,QAAQ,IAAI,CAAC;IACjCC,eAAe,EAAEV,QAAQ,EAAEU,eAAe,IAAI,cAAc;IAC5DC,SAAS,EAAEb,QAAQ,CAACa,SAAS;IAC7BC,aAAa,EAAEd,QAAQ,CAACc;EACzB,CAAC;AACF;;AAEA;AACA,SAASC,WAAWA,CACnBhB,QAAwB,EACxBiB,SAAsC,EACtCC,KAAmC,EACb;EACtB,MAAMC,OAA4B,GAAG,EAAE;EACvC,KAAK,MAAMlB,QAAQ,IAAIgB,SAAS,EAAE;IACjC;IACA;IACA,MAAMf,UAAU,GAAGR,oBAAoB,CAACM,QAAQ,EAAEC,QAAQ,CAACmB,cAAc,CAAC;IAC1E,IAAI,CAAClB,UAAU,IAAI,CAACF,QAAQ,CAACM,OAAO,CAACe,GAAG,CAACnB,UAAU,CAAC,EAAE;MACrD;IACD;IACA,MAAMC,QAAQ,GAAGe,KAAK,CAACI,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACnB,aAAa,KAAKH,QAAQ,CAACG,aAAa,CAAC;IAC5E,IAAIH,QAAQ,CAACQ,KAAK,KAAK,aAAa,EAAE;MACrC;MACA;MACA,IAAIN,QAAQ,EAAE;QACbgB,OAAO,CAACK,IAAI,CAACrB,QAAQ,CAAC;MACvB;MACA;IACD;IACAgB,OAAO,CAACK,IAAI,CAACzB,iBAAiB,CAACC,QAAQ,EAAEC,QAAQ,EAAEC,UAAU,EAAEC,QAAQ,CAAC,CAAC;EAC1E;EACA,OAAOgB,OAAO;AACf;AAEA,SAASM,YAAYA,CAACN,OAAqC,EAAe;EACzE,OAAO,IAAIO,GAAG,CAACP,OAAO,CAACQ,MAAM,CAACJ,CAAC,IAAIA,CAAC,CAACd,KAAK,KAAK,WAAW,CAAC,CAACmB,GAAG,CAACL,CAAC,IAAIA,CAAC,CAACnB,aAAa,CAAC,CAAC;AACvF;AAMA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASyB,UAAUA,CAACpB,KAAkB,EAAEqB,MAA2B,EAAQ;EACjF,MAAM;IAAE9B,QAAQ;IAAE+B,QAAQ;IAAEC;EAAI,CAAC,GAAGvB,KAAK;EACzC,MAAMwB,UAAU,GAAGrC,kBAAkB,CAAc,CAAC;EACpD,MAAMsC,YAAY,GAAGtC,kBAAkB,CAAO,CAAC;EAC/C,MAAMuC,iBAAiB,GAAGxC,iBAAiB,CAACK,QAAQ,CAACoC,2BAA2B,EAAEJ,GAAG,CAAC;EAEtF,eAAeK,aAAaA,CAACC,OAAoB,EAAwB;IACxE,IAAI;MACH,MAAMC,KAAK,GAAG,MAAM1C,WAAW,CAC9BkC,QAAQ,CAACS,UAAU,CAAC,CAAC,EACrBxC,QAAQ,CAACyC,QAAQ,CAACC,MAAM,EACxB,MACC,IAAIjD,YAAY,CAAC;QAChBkD,IAAI,EAAE,iBAAiB;QACvBC,OAAO,EAAE,gCAAgC;QACzCC,SAAS,EAAE,MAAM;QACjBC,SAAS,EAAE;MACZ,CAAC,CACH,CAAC;MACD,MAAMC,MAAM,GAAGtB,YAAY,CAAChB,KAAK,CAACuC,QAAQ,CAAC/B,SAAS,CAAC;MACrD,MAAME,OAAO,GAAGH,WAAW,CAAChB,QAAQ,EAAEuC,KAAK,EAAE9B,KAAK,CAACuC,QAAQ,CAAC/B,SAAS,CAAC;MACtE,MAAMgC,KAAK,GAAGxB,YAAY,CAACN,OAAO,CAAC;MACnC;MACA;MACA,MAAM+B,YAAY,GAAG,CAAC,GAAGH,MAAM,CAAC,CAACpB,MAAM,CAACwB,EAAE,IAAI,CAACF,KAAK,CAAC5B,GAAG,CAAC8B,EAAE,CAAC,CAAC,CAACC,MAAM;MACpE,MAAMC,aAAa,GAAG,CAAC,GAAGJ,KAAK,CAAC,CAACtB,MAAM,CAACwB,EAAE,IAAI,CAACJ,MAAM,CAAC1B,GAAG,CAAC8B,EAAE,CAAC,CAAC,CAACC,MAAM;MAErE3C,KAAK,CAAC6C,SAAS,GAAG,IAAI;MACtB7C,KAAK,CAAC8C,MAAM,CAAC;QAAE,GAAG9C,KAAK,CAACuC,QAAQ;QAAE/B,SAAS,EAAEE,OAAO;QAAEqC,YAAY,EAAExB,GAAG,CAAC;MAAE,CAAC,CAAC;MAC5EvB,KAAK,CAACgD,IAAI,CAAC;QAAEC,IAAI,EAAE,gBAAgB;QAAEL,aAAa;QAAEH,YAAY;QAAEZ;MAAQ,CAAC,CAAC;MAC5E,OAAO;QAAEqB,EAAE,EAAE,IAAI;QAAEN,aAAa;QAAEH;MAAa,CAAC;IACjD,CAAC,CAAC,OAAOU,KAAK,EAAE;MACf,MAAMC,YAAY,GACjBD,KAAK,YAAYnE,YAAY,GAC1BmE,KAAK,GACL,IAAInE,YAAY,CAAC;QACjBkD,IAAI,EAAE,qBAAqB;QAC3BC,OAAO,EAAE,aAAa;QACtBC,SAAS,EAAE,MAAM;QACjBC,SAAS,EAAE;MACZ,CAAC,CAAC;MACL;MACA;MACArC,KAAK,CAACgD,IAAI,CAAC;QAAEC,IAAI,EAAE,gBAAgB;QAAEf,IAAI,EAAEkB,YAAY,CAAClB,IAAI;QAAEE,SAAS,EAAE;MAAO,CAAC,CAAC;MAClF,OAAO;QAAEc,EAAE,EAAE,KAAK;QAAEC,KAAK,EAAEC;MAAa,CAAC;IAC1C;EACD;EAEA,OAAO;IACN,MAAMC,IAAIA,CAACxB,OAAO,GAAG,QAAQ,EAAE;MAC9B,IAAI7B,KAAK,CAACsD,QAAQ,IAAI,CAAC/D,QAAQ,CAACgE,OAAO,EAAE;QACxC,OAAO;UACNL,EAAE,EAAE,KAAK;UACTC,KAAK,EAAE,IAAInE,YAAY,CAAC;YACvBkD,IAAI,EAAE,kBAAkB;YACxBC,OAAO,EAAE,uBAAuB;YAChCC,SAAS,EAAE;UACZ,CAAC;QACF,CAAC;MACF;MACA;MACA;MACA,IAAIP,OAAO,KAAK,YAAY,IAAI,CAACH,iBAAiB,CAAC8B,UAAU,CAAC,CAAC,EAAE;QAChE,OAAO;UAAEN,EAAE,EAAE,IAAI;UAAEN,aAAa,EAAE,CAAC;UAAEH,YAAY,EAAE;QAAE,CAAC;MACvD;MACA;MACA,MAAMgB,OAAO,GAAG,MAAMjC,UAAU,CAACkC,GAAG,CAAC,MAAM9B,aAAa,CAACC,OAAO,CAAC,CAAC;MAClE,IAAI4B,OAAO,CAACP,EAAE,EAAE;QACf,MAAMzB,YAAY,CAACiC,GAAG,CAACrC,MAAM,CAAC;MAC/B;MACA,OAAOoC,OAAO;IACf;EACD,CAAC;AACF","ignoreList":[]}

package/lib/module/entitlements/aggregate.js

@@ -0,0 +1,204 @@
+"use strict";
+
+/**
+ * Entitlement aggregation — the package's primary output.
+ *
+ * Everything else exists to make this one answer correct. The most damaging
+ * defect class in a payment SDK lives here: collapsing "not yet synced" into "not
+ * entitled" makes a paying user watch ads flash on cold start or see a purchased
+ * feature sit locked.
+ *
+ * Two rules do most of the work:
+ *
+ * - **A pending purchase is never a source** (FR-037). Enforced here, in
+ *   aggregation, rather than at each call site, so no future code path can grant
+ *   on money that has not arrived.
+ * - **Uncertainty resolves to `unknown`, never `not_entitled`** (FR-047,
+ *   FR-055a). Never synced, stale, or scope-changed all mean "we do not know",
+ *   and the package says so rather than asserting the user did not pay.
+ */
+
+import { shallowEqual } from '@chipmobilesdk/rn-core';
+import { entitlementsFor } from "./mapping.js";
+import { deriveRenewalState, grantsUnderPolicy, hasExpired } from "./policy.js";
+/** A purchase that currently confers its entitlements. */
+function isValidSource(purchase, input) {
+  // Only a purchase the store confirmed grants. Pending money is not money, and a
+  // state this version does not know is no basis for a grant either (PAY-13).
+  if (purchase.state !== 'purchased') {
+    return false;
+  }
+  // A backend that said no is final (FR-071). A queued re-validation still
+  // grants, which is the documented `grant_and_queue` fallback (FR-072).
+  if (purchase.validationState === 'rejected') {
+    return false;
+  }
+  if (purchase.productType === 'subscription') {
+    if (hasExpired(purchase.expiresAt, input.now)) {
+      return false;
+    }
+    const renewalState = deriveRenewalState({
+      expiresAt: purchase.expiresAt,
+      willAutoRenew: purchase.willAutoRenew,
+      reportsGraceAndHoldDistinctly: input.reportsGraceAndHoldDistinctly
+    });
+    return grantsUnderPolicy(renewalState, {
+      gracePolicy: input.config.gracePolicy,
+      holdPolicy: input.config.holdPolicy
+    });
+  }
+
+  // A consumable that has not been consumed yet is owned, but it must never
+  // become a permanent entitlement — consumption flips it to `consumed` above.
+  return true;
+}
+function subscriptionDetailFor(purchases, input) {
+  const subs = purchases.filter(p => p.productType === 'subscription');
+  if (subs.length === 0) {
+    return undefined;
+  }
+
+  // Where several subscriptions grant one entitlement, the one running longest
+  // is what the user experiences, so report that one.
+  const furthest = subs.reduce((best, candidate) => {
+    const bestAt = best.expiresAt ?? Number.MAX_SAFE_INTEGER;
+    const candidateAt = candidate.expiresAt ?? Number.MAX_SAFE_INTEGER;
+    return candidateAt > bestAt ? candidate : best;
+  });
+  const renewalState = deriveRenewalState({
+    expiresAt: furthest.expiresAt,
+    willAutoRenew: furthest.willAutoRenew,
+    reportsGraceAndHoldDistinctly: input.reportsGraceAndHoldDistinctly
+  });
+  return {
+    expiresAt: furthest.expiresAt,
+    willAutoRenew: furthest.willAutoRenew === true,
+    isCancelledButValid: renewalState === 'cancelled_valid',
+    renewalState
+  };
+}
+
+/**
+ * Computes the full entitlement map.
+ *
+ * Pure and synchronous by design: it runs on render paths, so it must never
+ * touch I/O (PERF-001). The engine calls it after any state change and caches the
+ * result.
+ */
+/**
+ * How far the snapshot can be trusted right now.
+ *
+ * Shared by entitlements and the pending set (FR-103) so the two can never
+ * disagree about whether the package knows anything — a paywall that showed
+ * "not entitled" next to "nothing pending" from one stale snapshot would offer
+ * Buy to a user whose payment is in flight.
+ */
+export function snapshotCertainty(input) {
+  const {
+    config,
+    snapshot,
+    hasSynced,
+    now
+  } = input;
+  const isStale = snapshot.lastSyncedAt !== undefined && now - snapshot.lastSyncedAt > config.staleAfterMs;
+
+  // Both roads lead to `unknown`, never to a confident "no". Never having synced
+  // and having synced too long ago are the same epistemic state: we cannot
+  // currently support a claim either way.
+  return {
+    isStale,
+    undetermined: !hasSynced || isStale
+  };
+}
+export function aggregate(input) {
+  const {
+    config,
+    snapshot
+  } = input;
+  const {
+    isStale,
+    undetermined
+  } = snapshotCertainty(input);
+  const valid = snapshot.purchases.filter(p => isValidSource(p, input));
+  const result = {};
+  for (const key of config.entitlementKeys) {
+    const granting = valid.filter(p => entitlementsFor(config, p.productKey).includes(key));
+    const sources = [...new Set(granting.map(p => p.productKey))];
+    result[key] = {
+      key,
+      // An entitlement stays valid while at least one source remains (FR-052).
+      status: undetermined ? 'unknown' : sources.length > 0 ? 'entitled' : 'not_entitled',
+      sources,
+      subscription: subscriptionDetailFor(granting, input),
+      lastSyncedAt: snapshot.lastSyncedAt,
+      isStale
+    };
+  }
+  return result;
+}
+
+/** The initial map, before anything is known. Every key starts at `unknown` (FR-047). */
+export function initialEntitlements(config) {
+  const result = {};
+  for (const key of config.entitlementKeys) {
+    result[key] = {
+      key,
+      status: 'unknown',
+      sources: [],
+      lastSyncedAt: undefined,
+      isStale: false
+    };
+  }
+  return result;
+}
+/**
+ * Diffs two maps to produce change signals.
+ *
+ * Emitting from a diff rather than from grant call sites is what makes the
+ * exactly-once guarantees structural (FR-079): a successful subscription renewal
+ * changes no status, so it produces no event and cannot double-signal (FR-068);
+ * and an entitlement with three sources fires once on transition, not once per
+ * source.
+ */
+export function diffEntitlements(previous, next) {
+  const changes = [];
+  for (const key of Object.keys(next)) {
+    const before = previous[key]?.status ?? 'unknown';
+    const after = next[key].status;
+    if (before !== after) {
+      changes.push({
+        key,
+        previous: before,
+        next: after,
+        sources: next[key].sources
+      });
+    }
+  }
+  return changes;
+}
+function sameEntitlement(a, b) {
+  return a.status === b.status && a.isStale === b.isStale && a.lastSyncedAt === b.lastSyncedAt && a.sources.length === b.sources.length && a.sources.every((source, index) => source === b.sources[index]) && shallowEqual(a.subscription, b.subscription);
+}
+
+/**
+ * `next`, with every entitlement that did not change replaced by the object it
+ * replaces, and `previous` itself when nothing changed (PERF-03, PAY-08). A hook
+ * selecting one entitlement then sees the same object and does not re-render.
+ */
+export function shareUnchanged(previous, next) {
+  const keys = Object.keys(next);
+  let changed = keys.length !== Object.keys(previous).length;
+  const shared = {};
+  for (const key of keys) {
+    const before = previous[key];
+    const after = next[key];
+    if (before && sameEntitlement(before, after)) {
+      shared[key] = before;
+    } else {
+      shared[key] = after;
+      changed = true;
+    }
+  }
+  return changed ? shared : previous;
+}
+//# sourceMappingURL=aggregate.js.map

package/lib/module/entitlements/aggregate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["shallowEqual","entitlementsFor","deriveRenewalState","grantsUnderPolicy","hasExpired","isValidSource","purchase","input","state","validationState","productType","expiresAt","now","renewalState","willAutoRenew","reportsGraceAndHoldDistinctly","gracePolicy","config","holdPolicy","subscriptionDetailFor","purchases","subs","filter","p","length","undefined","furthest","reduce","best","candidate","bestAt","Number","MAX_SAFE_INTEGER","candidateAt","isCancelledButValid","snapshotCertainty","snapshot","hasSynced","isStale","lastSyncedAt","staleAfterMs","undetermined","aggregate","valid","result","key","entitlementKeys","granting","productKey","includes","sources","Set","map","status","subscription","initialEntitlements","diffEntitlements","previous","next","changes","Object","keys","before","after","push","sameEntitlement","a","b","every","source","index","shareUnchanged","changed","shared"],"sourceRoot":"../../../src","sources":["entitlements/aggregate.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,QAAQ,wBAAwB;AAIrD,SAASC,eAAe,QAAQ,cAAW;AAC3C,SAASC,kBAAkB,EAAEC,iBAAiB,EAAEC,UAAU,QAA2B,aAAU;AAiC/F;AACA,SAASC,aAAaA,CAACC,QAA2B,EAAEC,KAAqB,EAAW;EACnF;EACA;EACA,IAAID,QAAQ,CAACE,KAAK,KAAK,WAAW,EAAE;IACnC,OAAO,KAAK;EACb;EACA;EACA;EACA,IAAIF,QAAQ,CAACG,eAAe,KAAK,UAAU,EAAE;IAC5C,OAAO,KAAK;EACb;EAEA,IAAIH,QAAQ,CAACI,WAAW,KAAK,cAAc,EAAE;IAC5C,IAAIN,UAAU,CAACE,QAAQ,CAACK,SAAS,EAAEJ,KAAK,CAACK,GAAG,CAAC,EAAE;MAC9C,OAAO,KAAK;IACb;IACA,MAAMC,YAAY,GAAGX,kBAAkB,CAAC;MACvCS,SAAS,EAAEL,QAAQ,CAACK,SAAS;MAC7BG,aAAa,EAAER,QAAQ,CAACQ,aAAa;MACrCC,6BAA6B,EAAER,KAAK,CAACQ;IACtC,CAAC,CAAC;IACF,OAAOZ,iBAAiB,CAACU,YAAY,EAAE;MACtCG,WAAW,EAAET,KAAK,CAACU,MAAM,CAACD,WAAW;MACrCE,UAAU,EAAEX,KAAK,CAACU,MAAM,CAACC;IAC1B,CAAC,CAAC;EACH;;EAEA;EACA;EACA,OAAO,IAAI;AACZ;AAEA,SAASC,qBAAqBA,CAC7BC,SAA8B,EAC9Bb,KAAqB,EACY;EACjC,MAAMc,IAAI,GAAGD,SAAS,CAACE,MAAM,CAACC,CAAC,IAAIA,CAAC,CAACb,WAAW,KAAK,cAAc,CAAC;EACpE,IAAIW,IAAI,CAACG,MAAM,KAAK,CAAC,EAAE;IACtB,OAAOC,SAAS;EACjB;;EAEA;EACA;EACA,MAAMC,QAAQ,GAAGL,IAAI,CAACM,MAAM,CAAC,CAACC,IAAI,EAAEC,SAAS,KAAK;IACjD,MAAMC,MAAM,GAAGF,IAAI,CAACjB,SAAS,IAAIoB,MAAM,CAACC,gBAAgB;IACxD,MAAMC,WAAW,GAAGJ,SAAS,CAAClB,SAAS,IAAIoB,MAAM,CAACC,gBAAgB;IAClE,OAAOC,WAAW,GAAGH,MAAM,GAAGD,SAAS,GAAGD,IAAI;EAC/C,CAAC,CAAC;EAEF,MAAMf,YAAY,GAAGX,kBAAkB,CAAC;IACvCS,SAAS,EAAEe,QAAQ,CAACf,SAAS;IAC7BG,aAAa,EAAEY,QAAQ,CAACZ,aAAa;IACrCC,6BAA6B,EAAER,KAAK,CAACQ;EACtC,CAAC,CAAC;EAEF,OAAO;IACNJ,SAAS,EAAEe,QAAQ,CAACf,SAAS;IAC7BG,aAAa,EAAEY,QAAQ,CAACZ,aAAa,KAAK,IAAI;IAC9CoB,mBAAmB,EAAErB,YAAY,KAAK,iBAAiB;IACvDA;EACD,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASsB,iBAAiBA,CAAC5B,KAKjC,EAA+C;EAC/C,MAAM;IAAEU,MAAM;IAAEmB,QAAQ;IAAEC,SAAS;IAAEzB;EAAI,CAAC,GAAGL,KAAK;EAClD,MAAM+B,OAAO,GACZF,QAAQ,CAACG,YAAY,KAAKd,SAAS,IAAIb,GAAG,GAAGwB,QAAQ,CAACG,YAAY,GAAGtB,MAAM,CAACuB,YAAY;;EAEzF;EACA;EACA;EACA,OAAO;IAAEF,OAAO;IAAEG,YAAY,EAAE,CAACJ,SAAS,IAAIC;EAAQ,CAAC;AACxD;AAEA,OAAO,SAASI,SAASA,CAACnC,KAAqB,EAAkB;EAChE,MAAM;IAAEU,MAAM;IAAEmB;EAAS,CAAC,GAAG7B,KAAK;EAClC,MAAM;IAAE+B,OAAO;IAAEG;EAAa,CAAC,GAAGN,iBAAiB,CAAC5B,KAAK,CAAC;EAE1D,MAAMoC,KAAK,GAAGP,QAAQ,CAAChB,SAAS,CAACE,MAAM,CAACC,CAAC,IAAIlB,aAAa,CAACkB,CAAC,EAAEhB,KAAK,CAAC,CAAC;EAErE,MAAMqC,MAAsB,GAAG,CAAC,CAAC;EACjC,KAAK,MAAMC,GAAG,IAAI5B,MAAM,CAAC6B,eAAe,EAAE;IACzC,MAAMC,QAAQ,GAAGJ,KAAK,CAACrB,MAAM,CAACC,CAAC,IAAItB,eAAe,CAACgB,MAAM,EAAEM,CAAC,CAACyB,UAAU,CAAC,CAACC,QAAQ,CAACJ,GAAG,CAAC,CAAC;IACvF,MAAMK,OAAO,GAAG,CAAC,GAAG,IAAIC,GAAG,CAACJ,QAAQ,CAACK,GAAG,CAAC7B,CAAC,IAAIA,CAAC,CAACyB,UAAU,CAAC,CAAC,CAAC;IAE7DJ,MAAM,CAACC,GAAG,CAAC,GAAG;MACbA,GAAG;MACH;MACAQ,MAAM,EAAEZ,YAAY,GAAG,SAAS,GAAGS,OAAO,CAAC1B,MAAM,GAAG,CAAC,GAAG,UAAU,GAAG,cAAc;MACnF0B,OAAO;MACPI,YAAY,EAAEnC,qBAAqB,CAAC4B,QAAQ,EAAExC,KAAK,CAAC;MACpDgC,YAAY,EAAEH,QAAQ,CAACG,YAAY;MACnCD;IACD,CAAC;EACF;EAEA,OAAOM,MAAM;AACd;;AAEA;AACA,OAAO,SAASW,mBAAmBA,CAACtC,MAAsB,EAAkB;EAC3E,MAAM2B,MAAsB,GAAG,CAAC,CAAC;EACjC,KAAK,MAAMC,GAAG,IAAI5B,MAAM,CAAC6B,eAAe,EAAE;IACzCF,MAAM,CAACC,GAAG,CAAC,GAAG;MACbA,GAAG;MACHQ,MAAM,EAAE,SAAS;MACjBH,OAAO,EAAE,EAAE;MACXX,YAAY,EAAEd,SAAS;MACvBa,OAAO,EAAE;IACV,CAAC;EACF;EACA,OAAOM,MAAM;AACd;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASY,gBAAgBA,CAC/BC,QAAwB,EACxBC,IAAoB,EACE;EACtB,MAAMC,OAA4B,GAAG,EAAE;EACvC,KAAK,MAAMd,GAAG,IAAIe,MAAM,CAACC,IAAI,CAACH,IAAI,CAAC,EAAE;IACpC,MAAMI,MAAM,GAAGL,QAAQ,CAACZ,GAAG,CAAC,EAAEQ,MAAM,IAAI,SAAS;IACjD,MAAMU,KAAK,GAAGL,IAAI,CAACb,GAAG,CAAC,CAACQ,MAAM;IAC9B,IAAIS,MAAM,KAAKC,KAAK,EAAE;MACrBJ,OAAO,CAACK,IAAI,CAAC;QACZnB,GAAG;QACHY,QAAQ,EAAEK,MAAM;QAChBJ,IAAI,EAAEK,KAAK;QACXb,OAAO,EAAEQ,IAAI,CAACb,GAAG,CAAC,CAACK;MACpB,CAAC,CAAC;IACH;EACD;EACA,OAAOS,OAAO;AACf;AAEA,SAASM,eAAeA,CAACC,CAAmB,EAAEC,CAAmB,EAAW;EAC3E,OACCD,CAAC,CAACb,MAAM,KAAKc,CAAC,CAACd,MAAM,IACrBa,CAAC,CAAC5B,OAAO,KAAK6B,CAAC,CAAC7B,OAAO,IACvB4B,CAAC,CAAC3B,YAAY,KAAK4B,CAAC,CAAC5B,YAAY,IACjC2B,CAAC,CAAChB,OAAO,CAAC1B,MAAM,KAAK2C,CAAC,CAACjB,OAAO,CAAC1B,MAAM,IACrC0C,CAAC,CAAChB,OAAO,CAACkB,KAAK,CAAC,CAACC,MAAM,EAAEC,KAAK,KAAKD,MAAM,KAAKF,CAAC,CAACjB,OAAO,CAACoB,KAAK,CAAC,CAAC,IAC/DtE,YAAY,CAACkE,CAAC,CAACZ,YAAY,EAAEa,CAAC,CAACb,YAAY,CAAC;AAE9C;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASiB,cAAcA,CAACd,QAAwB,EAAEC,IAAoB,EAAkB;EAC9F,MAAMG,IAAI,GAAGD,MAAM,CAACC,IAAI,CAACH,IAAI,CAAC;EAC9B,IAAIc,OAAO,GAAGX,IAAI,CAACrC,MAAM,KAAKoC,MAAM,CAACC,IAAI,CAACJ,QAAQ,CAAC,CAACjC,MAAM;EAC1D,MAAMiD,MAAsB,GAAG,CAAC,CAAC;EACjC,KAAK,MAAM5B,GAAG,IAAIgB,IAAI,EAAE;IACvB,MAAMC,MAAM,GAAGL,QAAQ,CAACZ,GAAG,CAAC;IAC5B,MAAMkB,KAAK,GAAGL,IAAI,CAACb,GAAG,CAAE;IACxB,IAAIiB,MAAM,IAAIG,eAAe,CAACH,MAAM,EAAEC,KAAK,CAAC,EAAE;MAC7CU,MAAM,CAAC5B,GAAG,CAAC,GAAGiB,MAAM;IACrB,CAAC,MAAM;MACNW,MAAM,CAAC5B,GAAG,CAAC,GAAGkB,KAAK;MACnBS,OAAO,GAAG,IAAI;IACf;EACD;EACA,OAAOA,OAAO,GAAGC,MAAM,GAAGhB,QAAQ;AACnC","ignoreList":[]}

package/lib/module/entitlements/mapping.js

@@ -0,0 +1,35 @@
+"use strict";
+
+/**
+ * Product ↔ entitlement indexing.
+ *
+ * The relation is many-to-many (FR-010): monthly, yearly, and lifetime products
+ * may all grant `no_ads`, and one bundle product may grant several entitlements.
+ *
+ * Both directions are indexed once at configure time. The reverse direction is
+ * what makes two requirements cheap on hot paths: naming which product currently
+ * grants an entitlement (FR-051), and keeping an entitlement valid while *any*
+ * source remains (FR-052).
+ */
+
+/** Entitlements a product confers. Empty for an unknown key rather than throwing. */
+export function entitlementsFor(config, productKey) {
+  return config.grants.get(productKey) ?? [];
+}
+
+/**
+ * Translates a store product id back to the app's own product key.
+ *
+ * Needed because store callbacks and `queryOwned` speak in store ids, while
+ * everything above the adapter speaks in product keys (FR-003). Returns
+ * `undefined` for an id absent from the catalog — which happens legitimately when
+ * a user owns something from a build whose catalog has since changed, so it must
+ * be handled rather than treated as impossible.
+ */
+export function productKeyForStoreId(config, storeProductId) {
+  return config.byStoreId.get(storeProductId);
+}
+export function storeIdForProductKey(config, productKey) {
+  return config.entries.get(productKey)?.storeProductIds[config.platform];
+}
+//# sourceMappingURL=mapping.js.map

package/lib/module/entitlements/mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["entitlementsFor","config","productKey","grants","get","productKeyForStoreId","storeProductId","byStoreId","storeIdForProductKey","entries","storeProductIds","platform"],"sourceRoot":"../../../src","sources":["entitlements/mapping.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA;AACA,OAAO,SAASA,eAAeA,CAC9BC,MAAsB,EACtBC,UAAsB,EACM;EAC5B,OAAOD,MAAM,CAACE,MAAM,CAACC,GAAG,CAACF,UAAU,CAAC,IAAI,EAAE;AAC3C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASG,oBAAoBA,CACnCJ,MAAsB,EACtBK,cAAsB,EACG;EACzB,OAAOL,MAAM,CAACM,SAAS,CAACH,GAAG,CAACE,cAAc,CAAC;AAC5C;AAEA,OAAO,SAASE,oBAAoBA,CACnCP,MAAsB,EACtBC,UAAsB,EACD;EACrB,OAAOD,MAAM,CAACQ,OAAO,CAACL,GAAG,CAACF,UAAU,CAAC,EAAEQ,eAAe,CAACT,MAAM,CAACU,QAAQ,CAAC;AACxE","ignoreList":[]}

package/lib/module/entitlements/policy.js

@@ -0,0 +1,104 @@
+"use strict";
+
+/**
+ * Grace and hold entitlement policy.
+ *
+ * This is a **business decision, not a technical constant** (FR-049), so it is
+ * configurable with documented defaults.
+ *
+ * ## The defaults, and why
+ *
+ * `gracePolicy: 'grant'` — a grace period means the store is still retrying a
+ * payment method that failed for reasons usually outside the user's control: an
+ * expired card, a bank decline, a temporary hold. Revoking immediately punishes a
+ * paying customer for a billing hiccup they may not know about yet.
+ *
+ * `holdPolicy: 'withhold'` — account hold means the store has given up retrying.
+ * The subscription is effectively unpaid, and continuing to serve paid features
+ * indefinitely is giving away the product.
+ *
+ * ## What Android can actually tell us
+ *
+ * Client-side Play Billing **cannot** separate grace from hold: a grace-period
+ * subscription is still returned as active, and one in account hold stops being
+ * returned at all — indistinguishable from expired, cancelled, or refunded.
+ *
+ * Fortunately the platform's own behavior matches the defaults above. Play keeps
+ * returning a grace-period purchase, so the entitlement holds. Play stops
+ * returning a held one, so it lapses at the next sync. **The default policy is
+ * therefore correct with no backend at all.**
+ *
+ * What is *not* achievable client-side is a non-default policy — withholding
+ * during grace, or granting during hold — because that needs the state the client
+ * cannot see. Such an app supplies it through the validation hook (FR-069). This
+ * limitation is documented rather than papered over (FR-058).
+ */
+
+/**
+ * A subscription's renewal state as far as the package can honestly tell.
+ *
+ * `indeterminate` is not a failure — it is the truthful answer when the platform
+ * reports a subscription as active but cannot say whether that is a healthy
+ * renewal, a cancelled-but-still-paid period, or a grace period.
+ */
+
+/**
+ * Derives the renewal state without inventing information.
+ *
+ * The temptation is to read `willAutoRenew === false` as "grace period", but that
+ * same value is what a deliberate cancellation looks like. Guessing would mean
+ * showing "there's a problem with your payment method" to someone who simply
+ * chose not to renew — so when the provider cannot distinguish, neither do we.
+ */
+export function deriveRenewalState(facts) {
+  if (facts.reportsGraceAndHoldDistinctly && facts.providerRenewalState) {
+    switch (facts.providerRenewalState) {
+      case 'grace':
+        return 'grace';
+      case 'hold':
+        return 'hold';
+      case 'active':
+        return facts.willAutoRenew === false ? 'cancelled_valid' : 'active';
+    }
+  }
+  if (facts.willAutoRenew === false) {
+    // Still inside a paid period with auto-renew off. Genuinely ambiguous
+    // between "cancelled" and "in grace", so report the one that is certainly
+    // true — the period is paid for — and let the app decide how to present it.
+    return 'cancelled_valid';
+  }
+  if (facts.willAutoRenew === true) {
+    return 'active';
+  }
+  return 'indeterminate';
+}
+
+/**
+ * Whether a subscription in this state should confer its entitlement.
+ *
+ * `hold` reaching this function at all requires a provider that reports it,
+ * which Android does not. On Android a held subscription simply stops being
+ * returned, so it never becomes a source and the entitlement lapses — the same
+ * result the `withhold` default expresses.
+ */
+export function grantsUnderPolicy(state, policy) {
+  switch (state) {
+    case 'active':
+    case 'cancelled_valid':
+      return true;
+    case 'grace':
+      return policy.gracePolicy === 'grant';
+    case 'hold':
+      return policy.holdPolicy === 'grant';
+    case 'indeterminate':
+      // The store is still reporting the purchase as owned. Withholding here
+      // would revoke from a paying user because of our own uncertainty.
+      return true;
+  }
+}
+
+/** True once a subscription's paid period has genuinely elapsed (FR-048). */
+export function hasExpired(expiresAt, now) {
+  return expiresAt !== undefined && expiresAt <= now;
+}
+//# sourceMappingURL=policy.js.map

package/lib/module/entitlements/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["deriveRenewalState","facts","reportsGraceAndHoldDistinctly","providerRenewalState","willAutoRenew","grantsUnderPolicy","state","policy","gracePolicy","holdPolicy","hasExpired","expiresAt","now","undefined"],"sourceRoot":"../../../src","sources":["entitlements/policy.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;;AAiBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASA,kBAAkBA,CAACC,KAAwB,EAAgB;EAC1E,IAAIA,KAAK,CAACC,6BAA6B,IAAID,KAAK,CAACE,oBAAoB,EAAE;IACtE,QAAQF,KAAK,CAACE,oBAAoB;MACjC,KAAK,OAAO;QACX,OAAO,OAAO;MACf,KAAK,MAAM;QACV,OAAO,MAAM;MACd,KAAK,QAAQ;QACZ,OAAOF,KAAK,CAACG,aAAa,KAAK,KAAK,GAAG,iBAAiB,GAAG,QAAQ;IACrE;EACD;EAEA,IAAIH,KAAK,CAACG,aAAa,KAAK,KAAK,EAAE;IAClC;IACA;IACA;IACA,OAAO,iBAAiB;EACzB;EAEA,IAAIH,KAAK,CAACG,aAAa,KAAK,IAAI,EAAE;IACjC,OAAO,QAAQ;EAChB;EAEA,OAAO,eAAe;AACvB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAACC,KAAmB,EAAEC,MAAyB,EAAW;EAC1F,QAAQD,KAAK;IACZ,KAAK,QAAQ;IACb,KAAK,iBAAiB;MACrB,OAAO,IAAI;IACZ,KAAK,OAAO;MACX,OAAOC,MAAM,CAACC,WAAW,KAAK,OAAO;IACtC,KAAK,MAAM;MACV,OAAOD,MAAM,CAACE,UAAU,KAAK,OAAO;IACrC,KAAK,eAAe;MACnB;MACA;MACA,OAAO,IAAI;EACb;AACD;;AAEA;AACA,OAAO,SAASC,UAAUA,CAACC,SAA6B,EAAEC,GAAW,EAAW;EAC/E,OAAOD,SAAS,KAAKE,SAAS,IAAIF,SAAS,IAAIC,GAAG;AACnD","ignoreList":[]}

package/lib/module/index.js

@@ -0,0 +1,59 @@
+"use strict";
+
+/**
+ * `@chipmobilesdk/rn-payment` — reusable in-app payment and entitlement
+ * capability for ChipMobileSdk-family React Native apps.
+ *
+ * This is the public entrypoint (LIB-003). Modules under `config/`, `core/`,
+ * `engine/`, `entitlements/`, `persistence/`, `adapter/`, `diagnostics/`, and
+ * `react/` are private; import them only through this file. The fake store lives
+ * behind `@chipmobilesdk/rn-payment/testing` so test doubles cannot reach a
+ * production bundle.
+ *
+ * Nothing exported here names Google, Play Billing, or `react-native-iap`
+ * (FR-002). `src/__tests__/public-api.test.ts` asserts that mechanically.
+ *
+ * The package owns **capability**: a safe, consistent way to sell, finalize,
+ * restore, and report entitlements. The consuming app owns **policy** — what is
+ * sold, at what price, on which screen, at which moment, what each entitlement
+ * unlocks, and how generous the grace policy is. There is no product identifier,
+ * no screen name, and no business rule in this package (FR-016).
+ *
+ * The one output that matters most is the **entitlement key**: an app-chosen key
+ * such as `no_ads`. Business logic asks about entitlement keys and never about
+ * store product identifiers, product types, or which store sold the thing.
+ */
+
+// --- Configuration and catalog ---------------------------------------------
+
+// --- Policy defaults and bounds --------------------------------------------
+// Exported so a consumer can read the values it is bound by rather than
+// discovering them from a timeout in production.
+export { BACKOFF_ATTEMPT_BOUNDS, BACKOFF_MAX_DELAY_BOUNDS, CONNECT_TIMEOUT_BOUNDS, DEFAULT_CONNECT_TIMEOUT_MS, DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS, DEFAULT_FINALIZE_BACKOFF, DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS, DEFAULT_PRODUCT_CACHE_TTL_MS, DEFAULT_PRODUCT_QUERY_TIMEOUT_MS, DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS, DEFAULT_RECONNECT_BACKOFF, DEFAULT_STALE_AFTER_MS, DEFAULT_SYNC_TIMEOUT_MS, FINALIZE_ATTEMPT_TIMEOUT_BOUNDS, FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS, PRODUCT_CACHE_TTL_BOUNDS, PRODUCT_QUERY_TIMEOUT_BOUNDS, PURCHASE_LAUNCH_TIMEOUT_BOUNDS, STALE_AFTER_BOUNDS, SYNC_TIMEOUT_BOUNDS } from "./core/timers.js";
+
+// --- Products, pricing, and offers -----------------------------------------
+
+// --- Subscriptions ---------------------------------------------------------
+
+// --- Entitlements ----------------------------------------------------------
+
+// --- Store provider --------------------------------------------------------
+// Named for the concept, not the store: the same call returns the StoreKit
+// adapter once iOS exists, so no consumer line changes (FR-004, FR-007). On a
+// platform with no adapter it returns a stub that reports `unavailable` rather
+// than throwing, so a host app still starts and runs (FR-021, FR-023).
+export { createStoreProvider } from "./adapter/createStoreProvider.js";
+// --- Engine ----------------------------------------------------------------
+export { createEngine } from "./engine/engine.js";
+export { syncOnForeground } from "./engine/foreground.js";
+
+// --- React -----------------------------------------------------------------
+export { PaymentProvider, usePaymentEngine } from "./react/PaymentProvider.js";
+export { useEntitlement, useEntitlements, usePaymentStatus, usePendingPurchases, useProducts, usePurchase, useSync } from "./react/hooks.js";
+// --- Diagnostics -----------------------------------------------------------
+export { PaymentConfigError, PaymentError, PAYMENT_ERROR_CODES } from "./diagnostics/errors.js";
+// --- Localizable copy ------------------------------------------------------
+// Keys and English defaults only. The package takes no i18n dependency and
+// resolves nothing itself; apps map these through their own i18n (FR-085).
+export { DEFAULT_DEVELOPER_MESSAGES, DEFAULT_MESSAGES, paymentMessages, DEFAULT_USER_MESSAGES, DEVELOPER_MESSAGE_KEYS, USER_MESSAGE_KEYS, isUserMessageKey } from "./diagnostics/messageKeys.js";
+//# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["BACKOFF_ATTEMPT_BOUNDS","BACKOFF_MAX_DELAY_BOUNDS","CONNECT_TIMEOUT_BOUNDS","DEFAULT_CONNECT_TIMEOUT_MS","DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS","DEFAULT_FINALIZE_BACKOFF","DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS","DEFAULT_PRODUCT_CACHE_TTL_MS","DEFAULT_PRODUCT_QUERY_TIMEOUT_MS","DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS","DEFAULT_RECONNECT_BACKOFF","DEFAULT_STALE_AFTER_MS","DEFAULT_SYNC_TIMEOUT_MS","FINALIZE_ATTEMPT_TIMEOUT_BOUNDS","FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS","PRODUCT_CACHE_TTL_BOUNDS","PRODUCT_QUERY_TIMEOUT_BOUNDS","PURCHASE_LAUNCH_TIMEOUT_BOUNDS","STALE_AFTER_BOUNDS","SYNC_TIMEOUT_BOUNDS","createStoreProvider","createEngine","syncOnForeground","PaymentProvider","usePaymentEngine","useEntitlement","useEntitlements","usePaymentStatus","usePendingPurchases","useProducts","usePurchase","useSync","PaymentConfigError","PaymentError","PAYMENT_ERROR_CODES","DEFAULT_DEVELOPER_MESSAGES","DEFAULT_MESSAGES","paymentMessages","DEFAULT_USER_MESSAGES","DEVELOPER_MESSAGE_KEYS","USER_MESSAGE_KEYS","isUserMessageKey"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAiCA;AACA;AACA;AACA,SACCA,sBAAsB,EACtBC,wBAAwB,EACxBC,sBAAsB,EACtBC,0BAA0B,EAC1BC,mCAAmC,EACnCC,wBAAwB,EACxBC,uCAAuC,EACvCC,4BAA4B,EAC5BC,gCAAgC,EAChCC,kCAAkC,EAClCC,yBAAyB,EACzBC,sBAAsB,EACtBC,uBAAuB,EACvBC,+BAA+B,EAC/BC,mCAAmC,EACnCC,wBAAwB,EACxBC,4BAA4B,EAC5BC,8BAA8B,EAC9BC,kBAAkB,EAClBC,mBAAmB,QACb,kBAAe;;AAEtB;;AASA;;AAGA;;AASA;AACA;AACA;AACA;AACA;AACA,SAASC,mBAAmB,QAAQ,kCAA+B;AAGnE;AACA,SAASC,YAAY,QAAQ,oBAAiB;AAS9C,SAASC,gBAAgB,QAAQ,wBAAqB;;AAEtD;AACA,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,4BAAyB;AAE3E,SACCC,cAAc,EACdC,eAAe,EACfC,gBAAgB,EAChBC,mBAAmB,EACnBC,WAAW,EACXC,WAAW,EACXC,OAAO,QACD,kBAAe;AAGtB;AACA,SAASC,kBAAkB,EAAEC,YAAY,EAAEC,mBAAmB,QAAQ,yBAAsB;AAS5F;AACA;AACA;AACA,SACCC,0BAA0B,EAC1BC,gBAAgB,EAChBC,eAAe,EACfC,qBAAqB,EACrBC,sBAAsB,EACtBC,iBAAiB,EACjBC,gBAAgB,QACV,8BAA2B","ignoreList":[]}

package/lib/module/package.json

@@ -0,0 +1 @@
+{"type":"module"}

package/lib/module/persistence/mmkv-store.js

@@ -0,0 +1,144 @@
+"use strict";
+
+/**
+ * MMKV-backed snapshot store.
+ *
+ * Every MMKV import is confined to this file, so the rest of the package stays
+ * testable without a native module.
+ *
+ * MMKV is chosen because it is **synchronous**, which is what lets
+ * `getEntitlement` be an in-memory read with no I/O on render paths (PERF-001).
+ * An async store would force either an async entitlement read or a hidden
+ * hydration race on every call.
+ *
+ * Records are partitioned by cache-scope token (FR-057a). The token is a
+ * partition key and nothing more: never interpreted, never transmitted, never
+ * attached to a transaction.
+ */
+
+import { createMemoryKeyValue, lazyPeer, openDurable } from '@chipmobilesdk/rn-core';
+import { emptySnapshot, migrateSnapshot } from "./snapshot.js";
+const INSTANCE_ID = 'chipmobilesdk.payment';
+const KEY_PREFIX = 'snapshot';
+const mmkv = lazyPeer('react-native-mmkv', () => {
+  // Inside `try`, so Metro bundles an app that leaves this optional peer out.
+  try {
+    return require('react-native-mmkv');
+  } catch (cause) {
+    throw cause;
+  }
+});
+function scopeKey(scopeToken) {
+  // An explicit sentinel rather than an empty segment, so the unscoped record
+  // can never collide with a scope whose token happens to be empty.
+  return `${KEY_PREFIX}:${scopeToken ?? '__default__'}`;
+}
+
+/**
+ * Opens the MMKV instance through v4's `createMMKV`.
+ *
+ * Up to 0.2.0 this called `new MMKV()`, the v3 constructor. In v4 — the only
+ * major the peer range allows — `MMKV` is a type, not a value, so the call threw
+ * and the store fell back to memory on every device: entitlements read `unknown`
+ * after each cold start, and a pending purchase was forgotten after an app kill.
+ * Tests could not see it, because the test double still exported a v3 class.
+ */
+function resolveBacking() {
+  // rn-core's port: MMKV when it opens, otherwise memory with `durable: false`.
+  const port = openDurable(() => mmkv.require(peer => new Error(`${peer} is not installed`)).createMMKV({
+    id: INSTANCE_ID
+  }));
+  return {
+    backing: {
+      getString: key => port.getString(key),
+      set: (key, value) => port.set(key, value),
+      remove: key => port.remove(key),
+      clearAll: () => port.clearAll(),
+      getAllKeys: () => port.keys()
+    },
+    durable: port.durable
+  };
+}
+
+/**
+ * Creates the store.
+ *
+ * The memory fallback is a **documented degradation**, not a silent one: without
+ * MMKV the snapshot does not survive a cold start, so entitlements read `unknown`
+ * until the first sync. That is safe by construction — `unknown`, never
+ * `not_entitled` (FR-047) — and FR-059's startup sync repairs it. `isDurable()`
+ * lets the engine warn, so the condition is visible rather than mysterious.
+ */
+export function createSnapshotStore(injected) {
+  const {
+    backing,
+    durable
+  } = injected ?? resolveBacking();
+  return {
+    load(scopeToken) {
+      const raw = backing.getString(scopeKey(scopeToken));
+      if (raw === undefined) {
+        return emptySnapshot(scopeToken);
+      }
+      let parsed;
+      try {
+        parsed = JSON.parse(raw);
+      } catch {
+        // Corrupt JSON is discarded rather than repaired: the store is the
+        // authoritative source and the next sync rebuilds from it.
+        return emptySnapshot(scopeToken);
+      }
+      const outcome = migrateSnapshot(parsed);
+      if (!outcome.ok) {
+        return emptySnapshot(scopeToken);
+      }
+
+      // A record whose stored token disagrees with the requested scope must not
+      // be served: that is precisely the account-switch inheritance FR-057a
+      // exists to prevent.
+      if (outcome.snapshot.scopeToken !== scopeToken) {
+        return emptySnapshot(scopeToken);
+      }
+      return outcome.snapshot;
+    },
+    save(snapshot) {
+      try {
+        backing.set(scopeKey(snapshot.scopeToken), JSON.stringify(snapshot));
+        return true;
+      } catch {
+        // A failed write must never take down a purchase flow. The in-memory
+        // state stays correct for this session and the next sync re-derives it;
+        // the engine reports it (PAY-13).
+        return false;
+      }
+    },
+    clearAll() {
+      try {
+        for (const key of backing.getAllKeys()) {
+          if (key.startsWith(`${KEY_PREFIX}:`)) {
+            backing.remove(key);
+          }
+        }
+      } catch {
+        // Best effort; a failure here must not throw into a logout flow.
+      }
+    },
+    isDurable: () => durable
+  };
+}
+
+/** Test seam for driving the store without the native module. */
+export function createMemorySnapshotStore() {
+  const memory = createMemoryKeyValue();
+  return createSnapshotStore({
+    backing: {
+      getString: key => memory.getString(key),
+      set: (key, value) => memory.set(key, value),
+      remove: key => memory.remove(key),
+      clearAll: () => memory.clearAll(),
+      getAllKeys: () => memory.keys()
+    },
+    durable: false
+  });
+}
+//# sourceMappingURL=mmkv-store.js.map

package/lib/module/persistence/mmkv-store.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createMemoryKeyValue","lazyPeer","openDurable","emptySnapshot","migrateSnapshot","INSTANCE_ID","KEY_PREFIX","mmkv","require","cause","scopeKey","scopeToken","resolveBacking","port","peer","Error","createMMKV","id","backing","getString","key","set","value","remove","clearAll","getAllKeys","keys","durable","createSnapshotStore","injected","load","raw","undefined","parsed","JSON","parse","outcome","ok","snapshot","save","stringify","startsWith","isDurable","createMemorySnapshotStore","memory"],"sourceRoot":"../../../src","sources":["persistence/mmkv-store.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,oBAAoB,EAAEC,QAAQ,EAAEC,WAAW,QAAuB,wBAAwB;AAEnG,SAASC,aAAa,EAAEC,eAAe,QAAgC,eAAY;AAEnF,MAAMC,WAAW,GAAG,uBAAuB;AAC3C,MAAMC,UAAU,GAAG,UAAU;AAE7B,MAAMC,IAAI,GAAGN,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAChD;EACA,IAAI;IACH,OAAOO,OAAO,CAAC,mBAAmB,CAAC;EACpC,CAAC,CAAC,OAAOC,KAAK,EAAE;IACf,MAAMA,KAAK;EACZ;AACD,CAAC,CAAC;AAeF,SAASC,QAAQA,CAACC,UAAmB,EAAU;EAC9C;EACA;EACA,OAAO,GAAGL,UAAU,IAAIK,UAAU,IAAI,aAAa,EAAE;AACtD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,cAAcA,CAAA,EAA4C;EAClE;EACA,MAAMC,IAAI,GAAGX,WAAW,CAAC,MACxBK,IAAI,CAACC,OAAO,CAACM,IAAI,IAAI,IAAIC,KAAK,CAAC,GAAGD,IAAI,mBAAmB,CAAC,CAAC,CAACE,UAAU,CAAC;IAAEC,EAAE,EAAEZ;EAAY,CAAC,CAC3F,CAAC;EACD,OAAO;IACNa,OAAO,EAAE;MACRC,SAAS,EAAEC,GAAG,IAAIP,IAAI,CAACM,SAAS,CAACC,GAAG,CAAC;MACrCC,GAAG,EAAEA,CAACD,GAAG,EAAEE,KAAK,KAAKT,IAAI,CAACQ,GAAG,CAACD,GAAG,EAAEE,KAAK,CAAC;MACzCC,MAAM,EAAEH,GAAG,IAAIP,IAAI,CAACU,MAAM,CAACH,GAAG,CAAC;MAC/BI,QAAQ,EAAEA,CAAA,KAAMX,IAAI,CAACW,QAAQ,CAAC,CAAC;MAC/BC,UAAU,EAAEA,CAAA,KAAMZ,IAAI,CAACa,IAAI,CAAC;IAC7B,CAAC;IACDC,OAAO,EAAEd,IAAI,CAACc;EACf,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,mBAAmBA,CAACC,QAGnC,EAAiB;EACjB,MAAM;IAAEX,OAAO;IAAES;EAAQ,CAAC,GAAGE,QAAQ,IAAIjB,cAAc,CAAC,CAAC;EAEzD,OAAO;IACNkB,IAAIA,CAACnB,UAAmB,EAAqB;MAC5C,MAAMoB,GAAG,GAAGb,OAAO,CAACC,SAAS,CAACT,QAAQ,CAACC,UAAU,CAAC,CAAC;MACnD,IAAIoB,GAAG,KAAKC,SAAS,EAAE;QACtB,OAAO7B,aAAa,CAACQ,UAAU,CAAC;MACjC;MAEA,IAAIsB,MAAe;MACnB,IAAI;QACHA,MAAM,GAAGC,IAAI,CAACC,KAAK,CAACJ,GAAG,CAAC;MACzB,CAAC,CAAC,MAAM;QACP;QACA;QACA,OAAO5B,aAAa,CAACQ,UAAU,CAAC;MACjC;MAEA,MAAMyB,OAAO,GAAGhC,eAAe,CAAC6B,MAAM,CAAC;MACvC,IAAI,CAACG,OAAO,CAACC,EAAE,EAAE;QAChB,OAAOlC,aAAa,CAACQ,UAAU,CAAC;MACjC;;MAEA;MACA;MACA;MACA,IAAIyB,OAAO,CAACE,QAAQ,CAAC3B,UAAU,KAAKA,UAAU,EAAE;QAC/C,OAAOR,aAAa,CAACQ,UAAU,CAAC;MACjC;MAEA,OAAOyB,OAAO,CAACE,QAAQ;IACxB,CAAC;IAEDC,IAAIA,CAACD,QAA2B,EAAW;MAC1C,IAAI;QACHpB,OAAO,CAACG,GAAG,CAACX,QAAQ,CAAC4B,QAAQ,CAAC3B,UAAU,CAAC,EAAEuB,IAAI,CAACM,SAAS,CAACF,QAAQ,CAAC,CAAC;QACpE,OAAO,IAAI;MACZ,CAAC,CAAC,MAAM;QACP;QACA;QACA;QACA,OAAO,KAAK;MACb;IACD,CAAC;IAEDd,QAAQA,CAAA,EAAS;MAChB,IAAI;QACH,KAAK,MAAMJ,GAAG,IAAIF,OAAO,CAACO,UAAU,CAAC,CAAC,EAAE;UACvC,IAAIL,GAAG,CAACqB,UAAU,CAAC,GAAGnC,UAAU,GAAG,CAAC,EAAE;YACrCY,OAAO,CAACK,MAAM,CAACH,GAAG,CAAC;UACpB;QACD;MACD,CAAC,CAAC,MAAM;QACP;MAAA;IAEF,CAAC;IAEDsB,SAAS,EAAEA,CAAA,KAAMf;EAClB,CAAC;AACF;;AAEA;AACA,OAAO,SAASgB,yBAAyBA,CAAA,EAAkB;EAC1D,MAAMC,MAAM,GAAG5C,oBAAoB,CAAC,CAAC;EACrC,OAAO4B,mBAAmB,CAAC;IAC1BV,OAAO,EAAE;MACRC,SAAS,EAAEC,GAAG,IAAIwB,MAAM,CAACzB,SAAS,CAACC,GAAG,CAAC;MACvCC,GAAG,EAAEA,CAACD,GAAG,EAAEE,KAAK,KAAKsB,MAAM,CAACvB,GAAG,CAACD,GAAG,EAAEE,KAAK,CAAC;MAC3CC,MAAM,EAAEH,GAAG,IAAIwB,MAAM,CAACrB,MAAM,CAACH,GAAG,CAAC;MACjCI,QAAQ,EAAEA,CAAA,KAAMoB,MAAM,CAACpB,QAAQ,CAAC,CAAC;MACjCC,UAAU,EAAEA,CAAA,KAAMmB,MAAM,CAAClB,IAAI,CAAC;IAC/B,CAAC;IACDC,OAAO,EAAE;EACV,CAAC,CAAC;AACH","ignoreList":[]}