@chipmobilesdk/rn-payment 0.6.0 → 0.7.0

package/lib/typescript/commonjs/adapter/port.d.ts

@@ -0,0 +1,184 @@
+/**
+ * The provider port — **private**, never exported from `src/index.ts`.
+ *
+ * This is the boundary between the platform-neutral engine and a store-specific
+ * adapter. It exists to make three things true:
+ *
+ * 1. No store type reaches the public surface, because only the adapter ever
+ *    sees one (FR-002).
+ * 2. An iOS adapter can be added by implementing this interface, changing no
+ *    consumer call (FR-007).
+ * 3. The fake store is a drop-in replacement, so every outcome and ordering is
+ *    testable with no device, network, or store account (NFR-007).
+ *
+ * `Provider*` types are the port's **own** normalized shapes, not the binding's.
+ * The adapter translates; nothing above it sees a `react-native-iap` value.
+ */
+import type { ProductType, Unsubscribe } from '../config/types';
+/** A store's own product identifier. Confined to configuration and this layer. */
+export type StoreProductId = string;
+/** Opaque handle the store uses to identify a transaction for finalization. */
+export type ProviderToken = string;
+export type ProviderPurchaseState = 'purchased' | 'pending' | 'unspecified';
+export interface ProviderOffer {
+    offerKey: string;
+    billingPeriod: string;
+    formattedPrice: string;
+    priceAmountMicros: number;
+    currencyCode: string;
+    trialPeriod?: string;
+    introductoryPrice?: {
+        formattedPrice: string;
+        period: string;
+        cycles: number;
+    };
+    /** As the **store** determined it. Never computed locally (FR-026). */
+    isEligible: boolean;
+}
+export interface ProviderProduct {
+    storeProductId: StoreProductId;
+    productType: ProductType;
+    title: string;
+    description: string;
+    formattedPrice: string;
+    currencyCode: string;
+    priceAmountMicros: number;
+    offers: ProviderOffer[];
+}
+export interface ProviderPurchase {
+    storeProductId: StoreProductId;
+    transactionId: string;
+    token: ProviderToken;
+    state: ProviderPurchaseState;
+    purchasedAt: number;
+    isAcknowledged: boolean;
+    /** Subscription-only, and only where the platform supplies it. */
+    expiresAt?: number;
+    willAutoRenew?: boolean;
+    /**
+     * Opaque material for the app's backend. Passed to the validation hook and
+     * **never** logged or put in an event (FR-074).
+     */
+    verificationPayload?: string;
+}
+export type ProviderFailureReason = 'user_cancelled' | 'already_owned' | 'ineligible' | 'unknown_product' | 'product_unavailable_in_region' | 'not_ready' | 'network_error' | 'timeout' | 'store_error';
+export type ProviderConnectOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    reason: 'no_billing_service' | 'billing_service_outdated' | 'platform_unsupported' | 'store_error';
+    retryable: boolean;
+};
+export type ProviderPurchaseOutcome = {
+    ok: true;
+    purchase: ProviderPurchase;
+} | {
+    ok: false;
+    reason: ProviderFailureReason;
+    detail?: string;
+};
+export type ProviderPriceChangeOutcome = {
+    ok: true;
+    confirmed: boolean;
+} | {
+    ok: false;
+    reason: ProviderFailureReason;
+};
+export interface ProviderPurchaseRequest {
+    storeProductId: StoreProductId;
+    productType: ProductType;
+    offerKey?: string;
+    /** App-supplied, passed straight through. Never generated or stored (FR-034). */
+    obfuscatedAccountId?: string;
+    /**
+     * Plan change: the token of the active subscription being replaced. The store
+     * migrates *that* purchase rather than creating a second one (FR-065).
+     */
+    replacePurchaseToken?: ProviderToken;
+    /** Plan change: the store product id of the subscription being replaced. */
+    replaceStoreProductId?: StoreProductId;
+    prorationMode?: string;
+}
+/**
+ * What the platform can actually do.
+ *
+ * This is how honest degradation is enforced rather than left to good intentions.
+ * `reportsGraceAndHoldDistinctly` is `false` on Android, because client-side Play
+ * Billing genuinely cannot separate the two: a grace-period subscription is still
+ * returned as active, and one in account hold stops being returned at all, making
+ * it indistinguishable from expired, cancelled, or refunded.
+ *
+ * The entitlement layer reads this flag and reports `indeterminate` instead of
+ * fabricating a distinction from `willAutoRenew` — which cannot separate grace
+ * from cancelled-but-valid either. Claiming otherwise would breach FR-058.
+ */
+export interface ProviderCapabilities {
+    supportsSubscriptions: boolean;
+    supportsPlanChange: boolean;
+    supportsPriceChangeConfirmation: boolean;
+    reportsGraceAndHoldDistinctly: boolean;
+    /** Externally-initiated purchases: false on Android, true for a future iOS adapter. */
+    supportsExternalTransactions: boolean;
+    /**
+     * Whether this adapter can move real money.
+     *
+     * `true` for the store adapter, `false` for the fake store. This is what lets
+     * FR-014's block be precise: the engine refuses a purchase when the
+     * environment may not create a production transaction **and** the provider is
+     * one that actually would. Without it the guard would either block the test
+     * suite — which must be able to buy things — or wave real purchases through in
+     * a development build.
+     */
+    createsRealTransactions: boolean;
+    /**
+     * Whether `launchPurchase` settles only once the user has left the store's
+     * purchase surface.
+     *
+     * `true` for the Play adapter: the binding gives no "surface opened" signal and
+     * reports the outcome only when the flow ends, so the time the user spends in
+     * Play is inside the call. The engine then does not apply its launch timeout,
+     * which would otherwise cancel a user still choosing a payment method (FR-035).
+     * The binding always ends the flow with a result or an error, so the call
+     * cannot hang. `false` for the fake store, whose launch returns at once.
+     */
+    purchaseOutcomeIncludesStoreTime: boolean;
+}
+export interface ProviderPort {
+    connect(): Promise<ProviderConnectOutcome>;
+    disconnect(): Promise<void>;
+    /**
+     * Reports a **real** disconnect.
+     *
+     * The engine must never infer connectivity from an unrelated call failing.
+     * The upstream binding historically left its `connected` flag true after a
+     * disconnect and had a `reconnect()` that could report success without
+     * rebuilding anything (openiap#408), so detection belongs here, behind a
+     * contract test.
+     */
+    observeConnection(listener: (connected: boolean, reason?: string) => void): Unsubscribe;
+    queryProducts(storeProductIds: StoreProductId[], productType: ProductType): Promise<ProviderProduct[]>;
+    /** Owned and pending purchases. Pending ones are **flagged, never filtered** (FR-037). */
+    queryOwned(): Promise<ProviderPurchase[]>;
+    launchPurchase(request: ProviderPurchaseRequest): Promise<ProviderPurchaseOutcome>;
+    /** Store-initiated updates, including a pending purchase settling later (FR-039). */
+    observePurchases(listener: (purchase: ProviderPurchase) => void): Unsubscribe;
+    /**
+     * Why a pending purchase the store has stopped reporting ended, if the store
+     * says (FR-102). Optional, and synchronous because it is asked about a
+     * transaction the store already dropped, not fetched.
+     *
+     * Play gives no reason — a declined or abandoned pending purchase simply
+     * vanishes from `queryOwned` — so the Android adapter leaves this out and the
+     * engine reports `cancelled`. It is never inferred from age: guessing the
+     * store's pending window would be inventing a fact.
+     */
+    pendingEndReason?(transactionId: string): 'cancelled' | 'expired' | undefined;
+    /** Must be safe to call for an already-finalized transaction (FR-044). */
+    acknowledge(token: ProviderToken): Promise<void>;
+    /** Must be safe to call twice; the item is granted once (FR-044). */
+    consume(token: ProviderToken): Promise<void>;
+    openSubscriptionManagement(storeProductId?: StoreProductId): Promise<void>;
+    confirmPriceChange(storeProductId: StoreProductId): Promise<ProviderPriceChangeOutcome>;
+    capabilities(): ProviderCapabilities;
+}
+//# sourceMappingURL=port.d.ts.map

package/lib/typescript/commonjs/adapter/port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.d.ts","sourceRoot":"","sources":["../../../../src/adapter/port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEhE,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,+EAA+E;AAC/E,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,CAAC;AAE5E,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KACf,CAAC;IACF,uEAAuE;IACvE,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,qBAAqB,GAC9B,gBAAgB,GAChB,eAAe,GACf,YAAY,GACZ,iBAAiB,GACjB,+BAA+B,GAC/B,WAAW,GACX,eAAe,GACf,SAAS,GACT,aAAa,CAAC;AAEjB,MAAM,MAAM,sBAAsB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IACA,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACL,oBAAoB,GAAG,0BAA0B,GAAG,sBAAsB,GAAG,aAAa,CAAC;IAC5F,SAAS,EAAE,OAAO,CAAC;CAClB,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE,MAAM,MAAM,0BAA0B,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAEjF,MAAM,WAAW,uBAAuB;IACvC,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,aAAa,CAAC;IACrC,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,cAAc,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,oBAAoB;IACpC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,+BAA+B,EAAE,OAAO,CAAC;IACzC,6BAA6B,EAAE,OAAO,CAAC;IACvC,uFAAuF;IACvF,4BAA4B,EAAE,OAAO,CAAC;IACtC;;;;;;;;;OASG;IACH,uBAAuB,EAAE,OAAO,CAAC;IACjC;;;;;;;;;;OAUG;IACH,gCAAgC,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,YAAY;IAC5B,OAAO,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC3C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;;;;;;;OAQG;IACH,iBAAiB,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,WAAW,CAAC;IAExF,aAAa,CACZ,eAAe,EAAE,cAAc,EAAE,EACjC,WAAW,EAAE,WAAW,GACtB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAE9B,0FAA0F;IAC1F,UAAU,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE1C,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEnF,qFAAqF;IACrF,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAAG,WAAW,CAAC;IAE9E;;;;;;;;;OASG;IACH,gBAAgB,CAAC,CAAC,aAAa,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IAE9E,0EAA0E;IAC1E,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,qEAAqE;IACrE,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7C,0BAA0B,CAAC,cAAc,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,kBAAkB,CAAC,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAExF,YAAY,IAAI,oBAAoB,CAAC;CACrC"}

package/lib/typescript/commonjs/config/types.d.ts

@@ -0,0 +1,326 @@
+/**
+ * Public configuration and catalog types.
+ *
+ * Nothing here names Google Play Billing, `react-native-iap`, or any store
+ * concept (FR-002). Apps speak in **product keys** and **entitlement keys** they
+ * chose themselves; store product identifiers appear only inside catalog
+ * configuration, never in app logic (FR-003).
+ */
+/** An app-chosen logical entitlement, e.g. `no_ads`. What business logic asks about. */
+export type EntitlementKey = string;
+/** An app-chosen logical product, e.g. `premium_yearly`. Never a store identifier. */
+export type ProductKey = string;
+/**
+ * How a product behaves once bought.
+ *
+ * `one_time_permanent` — bought once, kept forever.
+ * `one_time_consumable` — bought, used up by the app, buyable again (FR-043).
+ * `subscription` — recurring, with its own lifecycle (FR-048).
+ */
+export type ProductType = 'one_time_permanent' | 'one_time_consumable' | 'subscription';
+/** Store identifiers per platform. iOS is optional and additive (FR-007). */
+export interface StoreProductIds {
+    android?: string;
+    ios?: string;
+}
+/** One product the app sells, and what it unlocks. */
+export interface CatalogEntry {
+    productKey: ProductKey;
+    productType: ProductType;
+    storeProductIds: StoreProductIds;
+    /** Entitlement keys this product confers. Many-to-many is supported (FR-010). */
+    grants: EntitlementKey[];
+}
+/** Separately configurable, and the basis of the production-transaction guard. */
+export type Environment = 'development' | 'test' | 'production';
+/**
+ * Entitlement policy for a subscription whose renewal payment failed.
+ *
+ * Kept configurable because it is a business decision, not a technical constant
+ * (FR-049). See `entitlements/policy.ts` for the defaults and why.
+ */
+export type LapsePolicy = 'grant' | 'withhold';
+/** What to do when a configured validation hook cannot be reached (FR-072). */
+export type ValidationUnavailablePolicy = 'grant_and_queue' | 'withhold';
+/** Returned by every subscribe call. Idempotent and safe to call twice (FR-006). */
+export type Unsubscribe = () => void;
+export interface TimeoutConfig {
+    connectMs?: number;
+    productQueryMs?: number;
+    syncMs?: number;
+    /** Covers opening the store surface only. Time the user spends in it is not counted (FR-035). */
+    purchaseLaunchMs?: number;
+    /** Bounds each acknowledge or consume call; a timed-out attempt is retried. */
+    finalizeAttemptMs?: number;
+    /**
+     * Bounds the app's `validateTransaction` hook. A hook that does not answer in
+     * time is treated as unavailable, exactly like one that throws (FR-072b).
+     * Added in 0.3.2.
+     */
+    validateMs?: number;
+}
+export interface RetryConfig {
+    reconnect?: BackoffConfig;
+    finalize?: BackoffConfig;
+}
+export interface BackoffConfig {
+    initialDelayMs?: number;
+    maxDelayMs?: number;
+    factor?: number;
+    /** Attempts per session. Finalize is resumed next session rather than abandoned (FR-045). */
+    maxAttempts?: number;
+    jitter?: boolean;
+}
+/** What the app's backend is asked to decide about (FR-069). */
+export interface ValidationCandidate {
+    productKey: ProductKey;
+    productType: ProductType;
+    /** Opaque verification material for the backend. Never logged (FR-074). */
+    verificationPayload: string;
+    /** Ties this decision to one purchase cycle in the event stream (FR-076). */
+    correlationId: string;
+    /**
+     * The store's identifier for this transaction (Play's order id). Not a secret,
+     * and the only handle a backend has on re-validation, where
+     * `verificationPayload` is empty because it is never persisted. Added in 0.3.2.
+     */
+    transactionId: string;
+    /** Which store issued the transaction, so a backend picks the right API. Added in 0.3.2. */
+    platform: 'android' | 'ios';
+}
+export interface ValidationDecision {
+    approved: boolean;
+    /** Optional app-supplied reason, surfaced as a distinguishable outcome (FR-071). */
+    reason?: string;
+}
+export type ValidationHook = (candidate: ValidationCandidate) => Promise<ValidationDecision>;
+/** Diagnostics sink. Deliberately not tied to any analytics vendor (FR-080). */
+export interface LoggerAdapter {
+    debug?(message: string, meta?: Record<string, unknown>): void;
+    warn?(message: string, meta?: Record<string, unknown>): void;
+    error?(message: string, meta?: Record<string, unknown>): void;
+}
+export interface PaymentConfig {
+    catalog: CatalogEntry[];
+    /** Entitlement keys the app intends to query. Used for orphan detection (FR-011). */
+    entitlements: EntitlementKey[];
+    environment: Environment;
+    /**
+     * Whether the running binary is a production build.
+     *
+     * Supplied by the app because only the app knows how it was built. Drives the
+     * fail-closed guard: a non-production build declaring `production` must not
+     * proceed (FR-015).
+     */
+    isProductionBuild: boolean;
+    /**
+     * Lets a non-production build complete purchases through the real store, so a
+     * Play license tester can buy on a debug build (PAY-16). Accepted only with
+     * `environment: 'test'`; any other environment rejects it at startup. License
+     * testers are not charged; any other account on the device would be, so keep
+     * it out of builds that reach real users.
+     */
+    allowStoreTestPurchases?: boolean;
+    /**
+     * Global sell switch. When false, purchases report `disabled` but entitlements
+     * already held stay readable — turning off selling is not the same as taking
+     * away what someone bought (FR-012).
+     */
+    enabled?: boolean;
+    gracePolicy?: LapsePolicy;
+    holdPolicy?: LapsePolicy;
+    staleAfterMs?: number;
+    productCacheTtlMs?: number;
+    foregroundSyncMinIntervalMs?: number;
+    timeouts?: TimeoutConfig;
+    retry?: RetryConfig;
+    /**
+     * Opaque cache-partition key (FR-057a).
+     *
+     * Not a user identifier: the package never interprets it, transmits it, or
+     * attaches it to a transaction. Changing it makes the previous snapshot
+     * unreadable, so a second app-account user cannot inherit the first one's
+     * entitlements even if the app forgets to call `clearLocalData`.
+     */
+    scopeToken?: string;
+    validateTransaction?: ValidationHook;
+    onValidationUnavailable?: ValidationUnavailablePolicy;
+    logger?: LoggerAdapter;
+}
+/** Opaque handle for a transaction. Exposes no raw store record (FR-051). */
+export interface TransactionRef {
+    readonly transactionId: string;
+    readonly productKey: ProductKey;
+}
+export interface PurchaseOptions {
+    /**
+     * The app's obfuscated account identifier, passed straight through to the
+     * store for fraud prevention. Never generated, inferred, or persisted by the
+     * package (FR-034), and distinct from `scopeToken`.
+     */
+    obfuscatedAccountId?: string;
+    /** Which pricing option to buy, for a subscription with several offers. */
+    offerKey?: string;
+}
+/**
+ * Every way a purchase can end (FR-005).
+ *
+ * A discriminated union rather than a boolean plus an error, because the app has
+ * to tell these apart: `user_cancelled` is a normal outcome to stay quiet about,
+ * `pending` means wait, `already_owned` means re-sync, and `store_error` means
+ * show something. Collapsing them is how apps end up reporting a cancellation as
+ * a failure.
+ */
+export type PurchaseResult = {
+    kind: 'success';
+    productKey: ProductKey;
+    transaction: TransactionRef;
+}
+/** Money has not arrived. No entitlement is granted (FR-037). */
+ | {
+    kind: 'pending';
+    productKey: ProductKey;
+    transaction: TransactionRef;
+}
+/** Normal, not an error. Must never be recorded as a technical failure (FR-032). */
+ | {
+    kind: 'user_cancelled';
+    productKey: ProductKey;
+}
+/** Triggers a re-sync: this is how a reinstall repairs itself (FR-033). */
+ | {
+    kind: 'already_owned';
+    productKey: ProductKey;
+} | {
+    kind: 'ineligible';
+    productKey: ProductKey;
+} | {
+    kind: 'unknown_product';
+    productKey: ProductKey;
+} | {
+    kind: 'product_unavailable_in_region';
+    productKey: ProductKey;
+}
+/** Global sell switch is off (FR-012). */
+ | {
+    kind: 'disabled';
+} | {
+    kind: 'not_ready';
+    status: PaymentStatusKind;
+} | {
+    kind: 'unsupported';
+}
+/** A second purchase while one is open. Refused, never queued (FR-031). */
+ | {
+    kind: 'purchase_in_progress';
+}
+/** Refused because this build may not create a production transaction (FR-014). */
+ | {
+    kind: 'environment_blocked';
+    productKey: ProductKey;
+    environment: Environment;
+}
+/** The app's backend said no (FR-071). Distinguishable from a network failure. */
+ | {
+    kind: 'validation_rejected';
+    productKey: ProductKey;
+    reason?: string;
+} | {
+    kind: 'timeout';
+    productKey: ProductKey;
+} | {
+    kind: 'network_error';
+    productKey: ProductKey;
+} | {
+    kind: 'store_error';
+    productKey: ProductKey;
+    code: string;
+};
+/**
+ * A purchase whose money has not arrived yet (FR-101), added in 0.2.0.
+ *
+ * One entry per product key, whatever number of pending transactions the store
+ * reports for it. Carries no transaction id, token, or store object (FR-051) —
+ * enough to render "payment pending" and to withhold Buy, nothing to act on.
+ */
+export interface PendingPurchase {
+    readonly productKey: ProductKey;
+    /** When the store reports the purchase was made, in epoch milliseconds. Earliest if several. */
+    readonly since: number;
+}
+/**
+ * The pending set, with how far it can be trusted (FR-101, FR-103).
+ *
+ * Read `status` first. `unknown` follows the entitlement rule exactly: never
+ * synced, or synced longer ago than `staleAfterMs`. Under `unknown`, `purchases`
+ * still lists what the last good sync saw, but an empty list there does **not**
+ * mean "nothing is pending" — the same reason an `unknown` entitlement is not
+ * `not_entitled`.
+ */
+export interface PendingPurchasesState {
+    readonly status: 'known' | 'unknown';
+    readonly purchases: readonly PendingPurchase[];
+    /** True once the snapshot is older than `staleAfterMs`; `status` is then `unknown`. */
+    readonly isStale: boolean;
+}
+/**
+ * How a pending purchase ended (FR-102).
+ *
+ * `settled` — the money arrived; an entitlement grant, if the product confers one,
+ * follows. `expired` — the store reported that the pending window ran out.
+ * `cancelled` — it ended without payment for any other reason, **including when
+ * the store gives none**: Play simply stops reporting a declined or abandoned
+ * pending purchase, so on Android every unpaid end is `cancelled`.
+ */
+export type PendingResolution = 'settled' | 'cancelled' | 'expired';
+/** Outcome of finalizing or consuming a transaction (FR-044). */
+export type FinalizeResult = {
+    kind: 'finalized';
+}
+/** Already done. Idempotent by design, so this is a success, not an error. */
+ | {
+    kind: 'already_finalized';
+} | {
+    kind: 'unknown_transaction';
+}
+/** Queued for bounded retry; the condition stays observable (FR-045). */
+ | {
+    kind: 'retry_scheduled';
+    attempts: number;
+} | {
+    kind: 'failed';
+    code: string;
+};
+/** A paid transaction not yet settled with the store, surfaced so it is not swallowed. */
+export interface UnfinalizedSummary {
+    productKey: ProductKey;
+    transactionId: string;
+    attempts: number;
+    purchasedAt: number;
+}
+/** Observable package status (FR-019). */
+export type PaymentStatusKind = 'not_started' | 'connecting' | 'ready' | 'disabled' | 'unavailable' | 'failed';
+/** Why selling is impossible here, kept distinguishable so apps can tell users why (FR-021). */
+export type UnavailableReason = 'no_billing_service' | 'billing_service_outdated' | 'platform_unsupported';
+/**
+ * A purchase the package refused because it could have been a real charge
+ * outside production (FR-014).
+ *
+ * Exposed in status rather than only logged so an automated test can assert the
+ * block happened, which is the difference between a guarantee and a hope.
+ */
+export interface BlockedOperation {
+    productKey: ProductKey;
+    environment: Environment;
+    at: number;
+}
+export interface PaymentStatus {
+    kind: PaymentStatusKind;
+    unavailableReason?: UnavailableReason;
+    /** Whether retrying initialization could plausibly help (FR-024). */
+    retryable?: boolean;
+    /** Reconnect attempts made in this session, so a retry storm is visible (FR-020). */
+    reconnectAttempts?: number;
+    blockedOperations: BlockedOperation[];
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/commonjs/config/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,wFAAwF;AACxF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,sFAAsF;AACtF,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,oBAAoB,GAAG,qBAAqB,GAAG,cAAc,CAAC;AAExF,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,iFAAiF;IACjF,MAAM,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,kFAAkF;AAClF,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,MAAM,GAAG,YAAY,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC;AAE/C,+EAA+E;AAC/E,MAAM,MAAM,2BAA2B,GAAG,iBAAiB,GAAG,UAAU,CAAC;AAEzE,oFAAoF;AACpF,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC,MAAM,WAAW,aAAa;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC3B,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,QAAQ,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,2EAA2E;IAC3E,mBAAmB,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,4FAA4F;IAC5F,QAAQ,EAAE,SAAS,GAAG,KAAK,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,mBAAmB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAE7F,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC7B,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9D,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,qFAAqF;IACrF,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB;;;;;;OAMG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,WAAW,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,cAAc,CAAC;IACrC,uBAAuB,CAAC,EAAE,2BAA2B,CAAC;IACtD,MAAM,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC/B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,cAAc,CAAA;CAAE;AAC1E,iEAAiE;GAC/D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,cAAc,CAAA;CAAE;AAC1E,oFAAoF;GAClF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE;AACpD,2EAA2E;GACzE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,+BAA+B,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE;AACnE,0CAA0C;GACxC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE;AACzB,2EAA2E;GACzE;IAAE,IAAI,EAAE,sBAAsB,CAAA;CAAE;AAClC,mFAAmF;GACjF;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE;AACnF,kFAAkF;GAChF;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEpE,iEAAiE;AACjE,MAAM,MAAM,cAAc,GACvB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE;AACvB,8EAA8E;GAC5E;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,qBAAqB,CAAA;CAAE;AACjC,yEAAyE;GACvE;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,0FAA0F;AAC1F,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,0CAA0C;AAC1C,MAAM,MAAM,iBAAiB,GAC5B,aAAa,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEhF,gGAAgG;AAChG,MAAM,MAAM,iBAAiB,GAC5B,oBAAoB,GAAG,0BAA0B,GAAG,sBAAsB,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,iBAAiB,CAAC;IACxB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;CACtC"}

package/lib/typescript/commonjs/config/validate.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Catalog validation (FR-011).
+ *
+ * Runs at `configure`, before any connection is opened, so a bad catalog fails
+ * at configuration time rather than at the moment a user taps Buy. Every failure
+ * **names the offending entry** — "invalid catalog" alone is useless in an app
+ * with thirty products.
+ *
+ * All problems are collected rather than thrown one at a time, so a developer
+ * fixes the catalog in one pass instead of rerunning to find the next fault.
+ */
+import { type ResolvedRetry, type ResolvedTimeouts } from '../core/timers';
+import type { CatalogEntry, EntitlementKey, LapsePolicy, PaymentConfig, ProductKey, ValidationUnavailablePolicy } from './types';
+/** The platform whose store identifiers a catalog must supply. */
+export type TargetPlatform = 'android' | 'ios';
+/**
+ * A validated, indexed catalog plus every resolved policy value.
+ *
+ * Produced once so the hot paths never re-derive it, and so `getEntitlement` can
+ * stay a synchronous in-memory read (PERF-001).
+ */
+export interface ResolvedConfig {
+    readonly entries: ReadonlyMap<ProductKey, CatalogEntry>;
+    /** productKey → entitlement keys it grants. */
+    readonly grants: ReadonlyMap<ProductKey, readonly EntitlementKey[]>;
+    /** entitlementKey → product keys that can grant it (FR-051, FR-052). */
+    readonly sources: ReadonlyMap<EntitlementKey, readonly ProductKey[]>;
+    /** storeProductId → productKey, for translating store callbacks back (FR-003). */
+    readonly byStoreId: ReadonlyMap<string, ProductKey>;
+    readonly entitlementKeys: readonly EntitlementKey[];
+    readonly platform: TargetPlatform;
+    readonly enabled: boolean;
+    readonly gracePolicy: LapsePolicy;
+    readonly holdPolicy: LapsePolicy;
+    readonly staleAfterMs: number;
+    readonly productCacheTtlMs: number;
+    readonly foregroundSyncMinIntervalMs: number;
+    readonly timeouts: ResolvedTimeouts;
+    readonly retry: ResolvedRetry;
+    readonly onValidationUnavailable: ValidationUnavailablePolicy;
+}
+export declare function validateConfig(config: PaymentConfig, platform?: TargetPlatform): ResolvedConfig;
+/**
+ * The fail-closed environment guard (FR-015).
+ *
+ * Separate from catalog validation because it is not about the catalog's shape
+ * but about whether this binary is allowed to move real money at all. Checked
+ * before connecting, and it refuses rather than warns: a non-production build
+ * that declares `production` is one tap away from charging a real card, and
+ * continuing silently is exactly the failure this package exists to prevent.
+ */
+export declare function assertEnvironmentSafe(config: PaymentConfig): void;
+/**
+ * Whether this configuration may hand a purchase to a real store (FR-014).
+ *
+ * True in a production build configured for production, and in a `test`
+ * environment that opted in with `allowStoreTestPurchases` (PAY-16). False
+ * everywhere else. The engine records each refusal in observable status so a
+ * test can assert the block happened — the difference between a guarantee and a
+ * hope.
+ */
+export declare function mayCreateRealTransaction(config: PaymentConfig): boolean;
+//# sourceMappingURL=validate.d.ts.map

package/lib/typescript/commonjs/config/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../../src/config/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAMN,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACX,YAAY,EACZ,cAAc,EACd,WAAW,EACX,aAAa,EACb,UAAU,EAEV,2BAA2B,EAC3B,MAAM,SAAS,CAAC;AAQjB,kEAAkE;AAClE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,KAAK,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACxD,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC,CAAC;IACpE,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,cAAc,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC;IACrE,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpD,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;CAC9D;AAED,wBAAgB,cAAc,CAC7B,MAAM,EAAE,aAAa,EACrB,QAAQ,GAAE,cAA0B,GAClC,cAAc,CAsHhB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAsBjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAKvE"}

package/lib/typescript/commonjs/core/mutex.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Concurrency primitives.
+ *
+ * These are what make three of the specification's guarantees structurally true
+ * rather than hoped for: concurrent initialization opens exactly one connection
+ * (FR-018), concurrent syncs make exactly one store request (FR-063), and a
+ * second purchase while one is open is refused rather than queued (FR-031).
+ *
+ * The distinction between the two primitives matters. `singleFlight` **joins**
+ * concurrent callers onto one operation — correct for init and sync, where every
+ * caller wants the same answer. `exclusive` **refuses** the second caller —
+ * correct for purchase, where joining would silently give two callers one
+ * transaction, and queueing would open a store surface the user no longer
+ * expects.
+ */
+export { createExclusive, createRateLimiter, createSingleFlight, withTimeout, type ExclusiveOutcome, } from '@chipmobilesdk/rn-core';
+//# sourceMappingURL=mutex.d.ts.map

package/lib/typescript/commonjs/core/mutex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutex.d.ts","sourceRoot":"","sources":["../../../../src/core/mutex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EACN,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,KAAK,gBAAgB,GACrB,MAAM,wBAAwB,CAAC"}

package/lib/typescript/commonjs/core/retry.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Bounded backoff.
+ *
+ * "Bounded" is the whole point (FR-020, FR-045): an unbounded reconnect loop
+ * against a billing service that is down drains battery and hammers a system
+ * service, and an unbounded finalize loop hides a real failure behind noise.
+ *
+ * Delay computation is pure and separated from waiting so tests can assert the
+ * schedule without burning real time.
+ */
+import type { BackoffConfig } from '../config/types';
+/**
+ * Delay before `attempt` (1-based), capped and optionally jittered.
+ *
+ * Jitter is full jitter over [0, capped]: several devices that lost the billing
+ * connection at the same moment should not retry in lockstep.
+ */
+export declare function backoffDelayMs(attempt: number, config: Required<BackoffConfig>, random?: () => number): number;
+//# sourceMappingURL=retry.d.ts.map

package/lib/typescript/commonjs/core/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../../../src/core/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC7B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC/B,MAAM,GAAE,MAAM,MAAoB,GAChC,MAAM,CAER"}