@chipmobilesdk/rn-payment 0.6.0 → 0.7.0

package/lib/typescript/commonjs/core/timers.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Timeout, retry, and cache policy.
+ *
+ * Defaults and bounds live here rather than at each call site so there is one
+ * place to read what the package will wait for, and so consumers can read the
+ * values they are bound by instead of discovering them from a timeout in
+ * production.
+ *
+ * Out-of-band values are a configuration error rather than being silently
+ * clamped: quietly turning a 1-second timeout into 3 seconds would tell the app
+ * it configured something it did not.
+ */
+import type { BackoffConfig, RetryConfig, TimeoutConfig } from '../config/types';
+/** Local IPC to Play Services. Slower than this means unavailable, not busy. */
+export declare const DEFAULT_CONNECT_TIMEOUT_MS = 10000;
+/** A network round trip; a paywall that hangs longer should show its error state. */
+export declare const DEFAULT_PRODUCT_QUERY_TIMEOUT_MS = 15000;
+/** Runs at startup, so it must not hold the first render hostage. */
+export declare const DEFAULT_SYNC_TIMEOUT_MS = 20000;
+/**
+ * Covers opening the store surface only.
+ *
+ * Time the user spends *inside* the store's own UI is deliberately excluded
+ * (FR-035): a user reading the terms, switching to their banking app for an OTP,
+ * or simply hesitating must never have their purchase cancelled by our clock.
+ */
+export declare const DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS = 30000;
+/** Per finalize attempt, not per transaction — the queue owns overall persistence. */
+export declare const DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS = 15000;
+/** The app's backend hook. A user is waiting on a purchase result behind it. */
+export declare const DEFAULT_VALIDATE_TIMEOUT_MS = 15000;
+/**
+ * The ceiling on a purchase flow whose outcome includes the user's own time in
+ * the store UI, so is otherwise untimed (FR-035). Not a timeout on the user: it
+ * exists only so a binding that never answers cannot hold the purchase lock for
+ * the rest of the session. A purchase that completes later still arrives through
+ * the store update channel and is granted then.
+ */
+export declare const PURCHASE_FLOW_CEILING_MS: number;
+export declare const CONNECT_TIMEOUT_BOUNDS: {
+    readonly min: 3000;
+    readonly max: 60000;
+};
+export declare const PRODUCT_QUERY_TIMEOUT_BOUNDS: {
+    readonly min: 3000;
+    readonly max: 60000;
+};
+export declare const SYNC_TIMEOUT_BOUNDS: {
+    readonly min: 5000;
+    readonly max: 120000;
+};
+export declare const PURCHASE_LAUNCH_TIMEOUT_BOUNDS: {
+    readonly min: 5000;
+    readonly max: 120000;
+};
+export declare const FINALIZE_ATTEMPT_TIMEOUT_BOUNDS: {
+    readonly min: 3000;
+    readonly max: 60000;
+};
+export declare const VALIDATE_TIMEOUT_BOUNDS: {
+    readonly min: 3000;
+    readonly max: 120000;
+};
+/**
+ * Prices and offer eligibility are shown at the moment of purchase, so a short
+ * TTL with on-demand refresh beats a long one (FR-029).
+ */
+export declare const DEFAULT_PRODUCT_CACHE_TTL_MS = 900000;
+export declare const PRODUCT_CACHE_TTL_BOUNDS: {
+    readonly min: 60000;
+    readonly max: 86400000;
+};
+/**
+ * How long a successful sync keeps entitlements trustworthy offline: **7 days**.
+ *
+ * Fixed by the specification (FR-055) after weighing both failure directions.
+ * The realistic offline cases — travel, poor coverage, a device left unused —
+ * resolve within days. Seven days covers a holiday without connectivity while
+ * bounding how long a refunded entitlement can outlive its refund to one week.
+ *
+ * Past this the entitlement becomes `unknown`, never `not_entitled` (FR-055a):
+ * the package stops asserting rather than telling a paying customer they did not
+ * pay.
+ */
+export declare const DEFAULT_STALE_AFTER_MS = 604800000;
+export declare const STALE_AFTER_BOUNDS: {
+    readonly min: 3600000;
+    readonly max: 7776000000;
+};
+/** Keeps rapid app switching from becoming a request storm (PERF-002). */
+export declare const DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS = 60000;
+export declare const FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS: {
+    readonly min: 0;
+    readonly max: 3600000;
+};
+/** Bounded so a dropped billing connection cannot become a retry storm (FR-020). */
+export declare const DEFAULT_RECONNECT_BACKOFF: Required<BackoffConfig>;
+/**
+ * Finalize retry.
+ *
+ * Bounded **per session** but never permanently abandoned: Google auto-refunds
+ * an unacknowledged purchase after three days, so exhausting this session's
+ * attempts must leave the transaction queued for the next launch, not dropped
+ * (FR-045).
+ */
+export declare const DEFAULT_FINALIZE_BACKOFF: Required<BackoffConfig>;
+export declare const BACKOFF_MAX_DELAY_BOUNDS: {
+    readonly min: 5000;
+    readonly max: 600000;
+};
+export declare const BACKOFF_ATTEMPT_BOUNDS: {
+    readonly min: 1;
+    readonly max: 10;
+};
+/** A first retry sooner than this is a storm; later than this, the user has given up. */
+export declare const BACKOFF_INITIAL_DELAY_BOUNDS: {
+    readonly min: 100;
+    readonly max: 60000;
+};
+/** 1 is a constant delay; 0 or below would retry at once, forever (CORE-05). */
+export declare const BACKOFF_FACTOR_BOUNDS: {
+    readonly min: 1;
+    readonly max: 10;
+};
+export interface ResolvedTimeouts {
+    connectMs: number;
+    productQueryMs: number;
+    syncMs: number;
+    purchaseLaunchMs: number;
+    finalizeAttemptMs: number;
+    validateMs: number;
+}
+export declare function resolveTimeouts(config?: TimeoutConfig): ResolvedTimeouts;
+export interface ResolvedRetry {
+    reconnect: Required<BackoffConfig>;
+    finalize: Required<BackoffConfig>;
+}
+export declare function resolveRetry(config?: RetryConfig): ResolvedRetry;
+export declare function resolveStaleAfterMs(value?: number): number;
+export declare function resolveProductCacheTtlMs(value?: number): number;
+export declare function resolveForegroundSyncMinIntervalMs(value?: number): number;
+//# sourceMappingURL=timers.d.ts.map

package/lib/typescript/commonjs/core/timers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timers.d.ts","sourceRoot":"","sources":["../../../../src/core/timers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEjF,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,qFAAqF;AACrF,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC,QAAS,CAAC;AACzD,sFAAsF;AACtF,eAAO,MAAM,mCAAmC,QAAS,CAAC;AAC1D,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAClD;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,QAAc,CAAC;AAEpD,eAAO,MAAM,sBAAsB;;;CAAuC,CAAC;AAC3E,eAAO,MAAM,4BAA4B;;;CAAuC,CAAC;AACjF,eAAO,MAAM,mBAAmB;;;CAAwC,CAAC;AACzE,eAAO,MAAM,8BAA8B;;;CAGjC,CAAC;AACX,eAAO,MAAM,+BAA+B;;;CAGlC,CAAC;AACX,eAAO,MAAM,uBAAuB;;;CAAwC,CAAC;AAE7E;;;GAGG;AACH,eAAO,MAAM,4BAA4B,SAAU,CAAC;AACpD,eAAO,MAAM,wBAAwB;;;CAA4C,CAAC;AAElF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,YAAc,CAAC;AAClD,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,0EAA0E;AAC1E,eAAO,MAAM,uCAAuC,QAAS,CAAC;AAC9D,eAAO,MAAM,mCAAmC;;;CAGtC,CAAC;AAEX,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,aAAa,CAM7D,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,aAAa,CAM5D,CAAC;AAEF,eAAO,MAAM,wBAAwB;;;CAAwC,CAAC;AAC9E,eAAO,MAAM,sBAAsB;;;CAA+B,CAAC;AACnE,yFAAyF;AACzF,eAAO,MAAM,4BAA4B;;;CAAqC,CAAC;AAC/E,gFAAgF;AAChF,eAAO,MAAM,qBAAqB;;;CAA+B,CAAC;AAwBlE,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,gBAAgB,CAuCxE;AA+CD,MAAM,WAAW,aAAa;IAC7B,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACnC,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;CAClC;AAED,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAKhE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAO/D;AAED,wBAAgB,kCAAkC,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAOzE"}

package/lib/typescript/commonjs/diagnostics/errors.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Normalized public errors.
+ *
+ * Error codes are **public API**: renaming one is a breaking change (FR-078,
+ * LIB-008). They are the vocabulary an app branches on, so they must outlive any
+ * internal refactor and must never leak a store's own code.
+ */
+import { SdkError } from '@chipmobilesdk/rn-core';
+export declare const PAYMENT_ERROR_CODES: readonly ["PAYMENT_NOT_CONFIGURED", "PAYMENT_INVALID_CATALOG", "PAYMENT_NOT_READY", "PAYMENT_DISABLED", "PAYMENT_UNAVAILABLE", "PAYMENT_UNSUPPORTED_PLATFORM", "PAYMENT_ENVIRONMENT_BLOCKED", "PAYMENT_PRODUCTION_CONFIG_IN_NON_PRODUCTION_BUILD", "PAYMENT_PURCHASE_IN_PROGRESS", "PAYMENT_USER_CANCELLED", "PAYMENT_PENDING", "PAYMENT_ALREADY_OWNED", "PAYMENT_INELIGIBLE", "PAYMENT_UNKNOWN_PRODUCT", "PAYMENT_PRODUCT_UNAVAILABLE_IN_REGION", "PAYMENT_TIMEOUT", "PAYMENT_NETWORK_ERROR", "PAYMENT_STORE_ERROR", "PAYMENT_FINALIZE_FAILED", "PAYMENT_VALIDATION_REJECTED", "PAYMENT_VALIDATION_UNAVAILABLE", "PAYMENT_STORAGE_UNAVAILABLE", "PAYMENT_NOT_CONSUMABLE", "PAYMENT_INVALID_CONFIG"];
+export type PaymentErrorCode = (typeof PAYMENT_ERROR_CODES)[number];
+/** Which operation produced an error. Part of the public error shape (FR-078). */
+export type PaymentOperation = 'configure' | 'initialize' | 'getProducts' | 'purchase' | 'finalize' | 'consume' | 'sync' | 'restore' | 'changePlan' | 'validate' | 'persist';
+/** The package's error; an `SdkError` (`@chipmobilesdk/rn-core`) with `pkg: 'rn-payment'`. */
+export declare class PaymentError extends SdkError<PaymentErrorCode> {
+    readonly operation: PaymentOperation;
+    /** Redacted where appropriate — never a raw receipt, token, or store object (FR-074). */
+    readonly cause?: string;
+    constructor(init: {
+        code: PaymentErrorCode;
+        message: string;
+        operation: PaymentOperation;
+        retryable?: boolean;
+        cause?: string;
+    });
+}
+/**
+ * A configuration problem the app can act on.
+ *
+ * Separate from `PaymentError` because configuration faults are developer-facing
+ * and must never be shown to an end user — the message-key map keeps that
+ * separation explicit (FR-085).
+ */
+export declare class PaymentConfigError extends PaymentError {
+    /** The offending catalog entries or entitlement keys, named (FR-011). */
+    readonly offenders: string[];
+    constructor(init: {
+        code: PaymentErrorCode;
+        message: string;
+        operation: PaymentOperation;
+        offenders?: string[];
+    });
+}
+/**
+ * Strips anything that must never reach a log or event.
+ *
+ * Applied at the boundary rather than trusted to call sites: a single forgotten
+ * interpolation is how receipts end up in logs (NFR-006).
+ *
+ * Identifier-only: what survives is what code defined, never what data carried.
+ * A `PaymentError` keeps its code and an `Error` its class name; every message
+ * and every string is dropped, because a store or consumer message can embed a
+ * purchase token or an account id and nothing here can tell which.
+ */
+export declare function redact(value: unknown): string;
+//# sourceMappingURL=errors.d.ts.map

package/lib/typescript/commonjs/diagnostics/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/diagnostics/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAY,QAAQ,EAAkB,MAAM,wBAAwB,CAAC;AAI5E,eAAO,MAAM,mBAAmB,sqBA8BtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GACzB,WAAW,GACX,YAAY,GACZ,aAAa,GACb,UAAU,GACV,UAAU,GACV,SAAS,GACT,MAAM,GACN,SAAS,GACT,YAAY,GACZ,UAAU,GACV,SAAS,CAAC;AAEb,8FAA8F;AAC9F,qBAAa,YAAa,SAAQ,QAAQ,CAAC,gBAAgB,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,yFAAyF;IACzF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE;QACjB,IAAI,EAAE,gBAAgB,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,gBAAgB,CAAC;QAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KACf;CAUD;AAED;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,YAAY;IACnD,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;gBAEjB,IAAI,EAAE;QACjB,IAAI,EAAE,gBAAgB,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,gBAAgB,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB;CAKD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAK7C"}

package/lib/typescript/commonjs/diagnostics/events.d.ts

@@ -0,0 +1,158 @@
+/**
+ * Typed events and the emitter.
+ *
+ * The bar is FR-077: the event stream **alone** must be enough to reconstruct a
+ * transaction's full lifecycle, so that "the user says they paid but has no
+ * entitlement" can be investigated from logs without a reproduction.
+ *
+ * Forbidden in every payload, without exception (FR-076, FR-074): store objects,
+ * raw receipts, verification payloads, backend tokens, payment details, the
+ * obfuscated account identifier, and the cache-scope token.
+ */
+import { redact, type PaymentErrorCode, type PaymentOperation } from './errors';
+import type { EntitlementKey, Environment, PendingResolution, ProductKey, Unsubscribe, UnavailableReason, PaymentStatusKind } from '../config/types';
+export type PaymentEventType = 'initialization' | 'connection_changed' | 'products_queried' | 'purchase_started' | 'purchase_succeeded' | 'purchase_cancelled' | 'purchase_pending' | 'purchase_pending_resolved' | 'purchase_failed' | 'transaction_finalized' | 'transaction_consumed' | 'finalize_retry_scheduled' | 'sync_completed' | 'entitlement_granted' | 'entitlement_revoked' | 'validation_decided' | 'validation_unavailable' | 'environment_blocked' | 'config_warning' | 'internal_error';
+interface BaseEvent {
+    timestamp: number;
+    /** Ties one purchase cycle together end to end. Absent for lifecycle events. */
+    correlationId?: string;
+}
+export type SyncTrigger = 'initialize' | 'foreground' | 'manual' | 'already_owned';
+export type PaymentEvent = BaseEvent & ({
+    type: 'initialization';
+    status: PaymentStatusKind;
+    unavailableReason?: UnavailableReason;
+    retryable?: boolean;
+} | {
+    type: 'connection_changed';
+    connected: boolean;
+    reason?: string;
+    attempt?: number;
+} | {
+    type: 'products_queried';
+    productKeys: ProductKey[];
+    found: number;
+    missing: ProductKey[];
+    fromCache: boolean;
+} | {
+    type: 'purchase_started';
+    productKey: ProductKey;
+} | {
+    type: 'purchase_succeeded';
+    productKey: ProductKey;
+} | {
+    type: 'purchase_cancelled';
+    productKey: ProductKey;
+} | {
+    type: 'purchase_pending';
+    productKey: ProductKey;
+} | {
+    type: 'purchase_pending_resolved';
+    productKey: ProductKey;
+    outcome: PendingResolution;
+} | {
+    type: 'purchase_failed';
+    productKey: ProductKey;
+    code: PaymentErrorCode;
+    retryable: boolean;
+} | {
+    type: 'transaction_finalized';
+    productKey: ProductKey;
+    attempts: number;
+} | {
+    type: 'transaction_consumed';
+    productKey: ProductKey;
+} | {
+    type: 'finalize_retry_scheduled';
+    productKey: ProductKey;
+    attempt: number;
+    delayMs: number;
+} | {
+    type: 'sync_completed';
+    restoredCount: number;
+    revokedCount: number;
+    trigger: SyncTrigger;
+} | {
+    type: 'entitlement_granted';
+    entitlementKey: EntitlementKey;
+    sources: ProductKey[];
+} | {
+    type: 'entitlement_revoked';
+    entitlementKey: EntitlementKey;
+    reason: 'expired' | 'revoked_by_store' | 'validation_rejected' | 'consumed';
+} | {
+    type: 'validation_decided';
+    productKey: ProductKey;
+    decision: 'approved' | 'rejected';
+} | {
+    type: 'validation_unavailable';
+    productKey: ProductKey;
+    fallback: 'grant_and_queue' | 'withhold';
+} | {
+    type: 'environment_blocked';
+    productKey: ProductKey;
+    environment: Environment;
+} | {
+    type: 'config_warning';
+    detail: string;
+} | {
+    type: 'internal_error';
+    code: PaymentErrorCode;
+    operation: PaymentOperation;
+});
+export type PaymentEventListener = (event: PaymentEvent) => void;
+/**
+ * A `PaymentEvent` with the timestamp left to the emitter.
+ *
+ * Distributive on purpose: a plain `Omit<PaymentEvent, 'timestamp'>` collapses the
+ * discriminated union into one object type with only the shared keys, which would
+ * reject every variant-specific field. `T extends unknown` forces the mapping to
+ * apply per member and keeps the union discriminated.
+ */
+type WithOptionalTimestamp<T> = T extends unknown ? Omit<T, 'timestamp'> & {
+    timestamp?: number;
+} : never;
+export type PaymentEventInput = WithOptionalTimestamp<PaymentEvent>;
+export interface PaymentEmitter {
+    emit(event: PaymentEvent): void;
+    subscribe(listener: PaymentEventListener): Unsubscribe;
+    /** Disarms permanently. After this nothing is emitted (FR-082). */
+    dispose(): void;
+    listenerCount(): number;
+    disposed(): boolean;
+}
+/**
+ * Creates the emitter.
+ *
+ * Two properties are deliberate:
+ *
+ * 1. **A throwing listener cannot break anything** (FR-081). Each listener is
+ *    invoked defensively, the throw is handed to `onListenerError`, and delivery
+ *    continues to the remaining listeners. One app's broken analytics callback
+ *    must not stop the package granting an entitlement or stop another listener
+ *    hearing about it.
+ *
+ *    The failure is **not** re-emitted as an event, deliberately. A consumer's own
+ *    bug is not a payment-lifecycle event, and reporting it through the channel
+ *    that just failed would both invite recursion and double event traffic for
+ *    every event while that listener stays broken. It goes to the logger instead.
+ *
+ * 2. **After `dispose`, nothing is emitted** (FR-082). A store callback can
+ *    arrive after cleanup; it must be dropped silently rather than reach a
+ *    listener whose component is gone.
+ */
+export declare function createEmitter(onListenerError?: (error: unknown, event: PaymentEvent) => void): PaymentEmitter;
+/**
+ * Fields that must never appear in an event payload.
+ *
+ * Used by `__tests__/diagnostics.test.ts` to walk every emitted event across the
+ * whole suite. Enumerating the ban here rather than in the test keeps the rule
+ * next to the type it constrains.
+ */
+export declare const FORBIDDEN_EVENT_FIELDS: readonly string[];
+/** Correlation ids tie one purchase cycle together; no user data goes into them. */
+export declare function createCorrelationId(counter: {
+    next: number;
+}, prefix?: string): string;
+export { redact };
+//# sourceMappingURL=events.d.ts.map

package/lib/typescript/commonjs/diagnostics/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../src/diagnostics/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAYH,OAAO,EAAE,MAAM,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAChF,OAAO,KAAK,EACX,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,gBAAgB,GACzB,gBAAgB,GAChB,oBAAoB,GACpB,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,GACpB,kBAAkB,GAGlB,2BAA2B,GAC3B,iBAAiB,GACjB,uBAAuB,GACvB,sBAAsB,GACtB,0BAA0B,GAC1B,gBAAgB,GAChB,qBAAqB,GACrB,qBAAqB,GACrB,oBAAoB,GACpB,wBAAwB,GACxB,qBAAqB,GACrB,gBAAgB,GAChB,gBAAgB,CAAC;AAEpB,UAAU,SAAS;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,eAAe,CAAC;AAEnF,MAAM,MAAM,YAAY,GAAG,SAAS,GACnC,CACG;IACA,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,SAAS,CAAC,EAAE,OAAO,CAAC;CACnB,GACD;IACA,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IACA,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;CAClB,GACD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACpD;IACA,IAAI,EAAE,2BAA2B,CAAC;IAClC,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,EAAE,iBAAiB,CAAC;CAC1B,GACD;IACA,IAAI,EAAE,iBAAiB,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CAClB,GACD;IACA,IAAI,EAAE,uBAAuB,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACxD;IACA,IAAI,EAAE,0BAA0B,CAAC;IACjC,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACf,GACD;IACA,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;CACpB,GACD;IACA,IAAI,EAAE,qBAAqB,CAAC;IAC5B,cAAc,EAAE,cAAc,CAAC;IAC/B,OAAO,EAAE,UAAU,EAAE,CAAC;CACrB,GACD;IACA,IAAI,EAAE,qBAAqB,CAAC;IAC5B,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,SAAS,GAAG,kBAAkB,GAAG,qBAAqB,GAAG,UAAU,CAAC;CAC3E,GACD;IACA,IAAI,EAAE,oBAAoB,CAAC;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAC;CACjC,GACD;IACA,IAAI,EAAE,wBAAwB,CAAC;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,iBAAiB,GAAG,UAAU,CAAC;CACxC,GACD;IACA,IAAI,EAAE,qBAAqB,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;CACxB,GACD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1C;IACA,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,gBAAgB,CAAC;CAC3B,CACH,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;AAEjE;;;;;;;GAOG;AACH,KAAK,qBAAqB,CAAC,CAAC,IAAI,CAAC,SAAS,OAAO,GAC9C,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,KAAK,CAAC;AAET,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC9B,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,QAAQ,EAAE,oBAAoB,GAAG,WAAW,CAAC;IACvD,mEAAmE;IACnE,OAAO,IAAI,IAAI,CAAC;IAChB,aAAa,IAAI,MAAM,CAAC;IACxB,QAAQ,IAAI,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAC5B,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,GAC7D,cAAc,CAuDhB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EASnD,CAAC;AAEF,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,SAAO,GAAG,MAAM,CAIpF;AAED,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/lib/typescript/commonjs/diagnostics/messageKeys.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Stable, localizable message keys with English default copy (FR-084, FR-085).
+ *
+ * The package takes no i18n runtime dependency: consuming apps map these keys to
+ * localized strings through whatever i18n system they already run. This is plain
+ * data, and the package never resolves or renders it.
+ *
+ * Message keys are **public API**: renaming one is a breaking change, on the
+ * same footing as an error code (FR-078).
+ *
+ * User-actionable copy and developer/configuration copy are kept in separate
+ * maps so an app cannot accidentally show "Payment catalog is invalid" to a
+ * customer — a configuration fault is a developer's problem, not a user's.
+ */
+export interface PaymentUserMessageMap {
+    'payment.state.pending': string;
+    'payment.state.alreadyOwned': string;
+    'payment.action.restore': string;
+    'payment.restore.succeeded': string;
+    'payment.restore.nothingFound': string;
+    'payment.error.cancelled': string;
+    'payment.error.network': string;
+    'payment.error.unavailable': string;
+    'payment.error.disabled': string;
+    'payment.subscription.grace': string;
+    'payment.subscription.hold': string;
+}
+/** Copy for developers and operators. **Never** surfaced to an end user. */
+export interface PaymentDeveloperMessageMap {
+    'payment.config.invalidCatalog': string;
+    'payment.config.missingStoreId': string;
+    'payment.config.productionInNonProductionBuild': string;
+    'payment.config.storageUnavailable': string;
+    'payment.config.environmentBlocked': string;
+}
+export type PaymentMessageMap = PaymentUserMessageMap & PaymentDeveloperMessageMap;
+export type PaymentUserMessageKey = keyof PaymentUserMessageMap;
+export type PaymentDeveloperMessageKey = keyof PaymentDeveloperMessageMap;
+export type PaymentMessageKey = keyof PaymentMessageMap;
+export declare const DEFAULT_USER_MESSAGES: PaymentUserMessageMap;
+export declare const DEFAULT_DEVELOPER_MESSAGES: PaymentDeveloperMessageMap;
+/**
+ * The catalog as an rn-core message set. Register `paymentMessages.user` with
+ * rn-i18n to translate it like app copy; the developer copy stays out of bundles.
+ */
+export declare const paymentMessages: import("@chipmobilesdk/rn-core").MessageSet<PaymentUserMessageMap, PaymentDeveloperMessageMap>;
+export declare const DEFAULT_MESSAGES: PaymentMessageMap;
+/** Every user-actionable key, for an app building its translation resource. */
+export declare const USER_MESSAGE_KEYS: PaymentUserMessageKey[];
+/** Every developer-facing key, so an app can exclude them from user-visible bundles. */
+export declare const DEVELOPER_MESSAGE_KEYS: PaymentDeveloperMessageKey[];
+/** True for keys safe to show an end user. Lets an app assert that at its boundary. */
+export declare function isUserMessageKey(key: PaymentMessageKey): key is PaymentUserMessageKey;
+//# sourceMappingURL=messageKeys.d.ts.map

package/lib/typescript/commonjs/diagnostics/messageKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageKeys.d.ts","sourceRoot":"","sources":["../../../../src/diagnostics/messageKeys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,MAAM,WAAW,qBAAqB;IACrC,uBAAuB,EAAE,MAAM,CAAC;IAChC,4BAA4B,EAAE,MAAM,CAAC;IACrC,wBAAwB,EAAE,MAAM,CAAC;IACjC,2BAA2B,EAAE,MAAM,CAAC;IACpC,8BAA8B,EAAE,MAAM,CAAC;IACvC,yBAAyB,EAAE,MAAM,CAAC;IAClC,uBAAuB,EAAE,MAAM,CAAC;IAChC,2BAA2B,EAAE,MAAM,CAAC;IACpC,wBAAwB,EAAE,MAAM,CAAC;IACjC,4BAA4B,EAAE,MAAM,CAAC;IACrC,2BAA2B,EAAE,MAAM,CAAC;CACpC;AAED,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IAC1C,+BAA+B,EAAE,MAAM,CAAC;IACxC,+BAA+B,EAAE,MAAM,CAAC;IACxC,+CAA+C,EAAE,MAAM,CAAC;IACxD,mCAAmC,EAAE,MAAM,CAAC;IAC5C,mCAAmC,EAAE,MAAM,CAAC;CAC5C;AAED,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,GAAG,0BAA0B,CAAC;AAEnF,MAAM,MAAM,qBAAqB,GAAG,MAAM,qBAAqB,CAAC;AAChE,MAAM,MAAM,0BAA0B,GAAG,MAAM,0BAA0B,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,CAAC;AAExD,eAAO,MAAM,qBAAqB,EAAE,qBAYnC,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,0BASxC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe,gGAG1B,CAAC;AAEH,eAAO,MAAM,gBAAgB,EAAE,iBAA4C,CAAC;AAE5E,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,EAA+B,qBAAqB,EAAE,CAAC;AAErF,wFAAwF;AACxF,eAAO,MAAM,sBAAsB,EAAoC,0BAA0B,EAAE,CAAC;AAEpG,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,iBAAiB,GAAG,GAAG,IAAI,qBAAqB,CAErF"}

package/lib/typescript/commonjs/engine/connection.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The billing connection: connecting, watching it, and reconnecting with bounded
+ * backoff (FR-018 – FR-024, PAY-10).
+ *
+ * A reconnect is always a full teardown-then-connect cycle. The upstream
+ * binding's own `reconnect()` has reported success without rebuilding anything
+ * (openiap#408), so no shortcut is trusted here.
+ */
+import type { ProviderPurchase } from '../adapter/port';
+import { PaymentError } from '../diagnostics/errors';
+import type { EngineState } from './state';
+export type InitOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    error: PaymentError;
+};
+export interface Connection {
+    /** Connects and attaches the watchers; status follows the outcome. */
+    connect(): Promise<InitOutcome>;
+    /**
+     * A fresh reconnect budget and one immediate attempt, when an earlier budget
+     * ran out: a foreground return is when the network the app lost is usually
+     * back.
+     */
+    recover(): Promise<void>;
+    dispose(): void;
+}
+export declare function createConnection(state: EngineState, onPurchase: (purchase: ProviderPurchase) => void): Connection;
+//# sourceMappingURL=connection.d.ts.map

package/lib/typescript/commonjs/engine/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../../../src/engine/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAIxD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,UAAU;IAC1B,sEAAsE;IACtE,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAChC;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,IAAI,CAAC;CAChB;AAED,wBAAgB,gBAAgB,CAC/B,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAC9C,UAAU,CAiKZ"}

package/lib/typescript/commonjs/engine/engine.d.ts

@@ -0,0 +1,93 @@
+/**
+ * The engine: status, initialization, entitlement reads, and sync.
+ *
+ * Owns the concurrency guarantees that make three requirements structurally true
+ * rather than hoped for — one connection under concurrent init (FR-018), one
+ * store request under concurrent sync (FR-063), and a rate-limited foreground
+ * sync (PERF-002).
+ *
+ * It never imports a store type. The only thing it talks to is `ProviderPort`,
+ * which is what keeps the binding replaceable and iOS additive (FR-002, FR-007).
+ *
+ * This file composes (PAY-10): state and its publication live in `state.ts`, the
+ * connection in `connection.ts`, sync in `sync.ts`, and the internals tests reach
+ * for in `internals.ts`, off the public type (PAY-11).
+ */
+import type { ProviderPort } from '../adapter/port';
+import { type TargetPlatform } from '../config/validate';
+import type { EntitlementKey, FinalizeResult, PaymentConfig, PaymentStatus, PendingPurchasesState, ProductKey, PurchaseOptions, PurchaseResult, TransactionRef, UnfinalizedSummary, Unsubscribe } from '../config/types';
+import { PaymentError } from '../diagnostics/errors';
+import { type PaymentEventListener, type SyncTrigger } from '../diagnostics/events';
+import type { EntitlementMap, EntitlementState } from '../entitlements/aggregate';
+import { type SnapshotStore } from '../persistence/mmkv-store';
+import { type InitOutcome } from './connection';
+import { type ProductQueryResult } from './products';
+import { type PriceChangeResult, type ProrationMode } from './subscriptions';
+import { type SyncOutcome } from './sync';
+export type { SyncOutcome } from './sync';
+export type { InitOutcome } from './connection';
+export type RestoreOutcome = {
+    ok: true;
+    restored: true;
+    entitlements: EntitlementKey[];
+}
+/** Distinct from a failure so an app never shows a false success (FR-061). */
+ | {
+    ok: true;
+    restored: false;
+} | {
+    ok: false;
+    error: PaymentError;
+};
+export interface EngineDeps {
+    /** Injected so the fake store is a drop-in replacement (NFR-007). */
+    provider: ProviderPort;
+    snapshotStore?: SnapshotStore;
+    platform?: TargetPlatform;
+    now?: () => number;
+}
+export interface PaymentEngine {
+    initialize(): Promise<InitOutcome>;
+    cleanup(): void;
+    getStatus(): PaymentStatus;
+    subscribeStatus(listener: (status: PaymentStatus) => void): Unsubscribe;
+    getEntitlement(key: EntitlementKey): EntitlementState;
+    getAllEntitlements(): EntitlementMap;
+    subscribeEntitlements(listener: (entitlements: EntitlementMap) => void): Unsubscribe;
+    /**
+     * Purchases whose money has not arrived, in this session or an earlier one
+     * (FR-101). Synchronous and in-memory, like `getEntitlement`. Added in 0.2.0.
+     */
+    getPendingPurchases(): PendingPurchasesState;
+    /** Pushed only when the set, its status, or its staleness changes (FR-101). */
+    subscribePendingPurchases(listener: (pending: PendingPurchasesState) => void): Unsubscribe;
+    sync(trigger?: SyncTrigger): Promise<SyncOutcome>;
+    restore(): Promise<RestoreOutcome>;
+    getLastSyncedAt(): number | undefined;
+    clearLocalData(): Promise<void>;
+    subscribeEvents(listener: PaymentEventListener): Unsubscribe;
+    purchase(productKey: ProductKey, options?: PurchaseOptions): Promise<PurchaseResult>;
+    /** App-triggered consumption of a consumable (FR-043). */
+    consume(ref: TransactionRef): Promise<FinalizeResult>;
+    /** Paid-but-unsettled transactions, so the condition is observable (FR-045). */
+    getUnfinalized(): UnfinalizedSummary[];
+    getProducts(productKeys: ProductKey[]): Promise<ProductQueryResult>;
+    refreshProducts(productKeys: ProductKey[]): Promise<ProductQueryResult>;
+    changePlan(fromProductKey: ProductKey, toProductKey: ProductKey, mode: ProrationMode, options?: PurchaseOptions): Promise<PurchaseResult>;
+    /** Opens the **store's** management screen; never a self-built one (FR-066). */
+    openSubscriptionManagement(productKey?: ProductKey): Promise<void>;
+    confirmPriceChange(productKey: ProductKey): Promise<PriceChangeResult>;
+    /**
+     * Call when the app returns to the foreground (FR-059).
+     *
+     * Left to the app rather than subscribing to `AppState` internally: the package
+     * must not decide what "foreground" means for a host that may be backgrounded
+     * by its own modal, a biometric prompt, or the store's purchase sheet. The
+     * engine rate-limits it regardless (PERF-002).
+     */
+    handleForeground(): Promise<void>;
+}
+/** How many refused operations `status.blockedOperations` keeps. */
+export declare const MAX_BLOCKED_OPERATIONS = 20;
+export declare function createEngine(config: PaymentConfig, deps: EngineDeps): PaymentEngine;
+//# sourceMappingURL=engine.d.ts.map

package/lib/typescript/commonjs/engine/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../../src/engine/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAIN,KAAK,cAAc,EACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAEX,cAAc,EACd,cAAc,EACd,aAAa,EACb,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAEN,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAGlE,OAAO,EAAkB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGrE,OAAO,EAAuB,KAAK,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEtD,YAAY,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,MAAM,cAAc,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,cAAc,EAAE,CAAA;CAAE;AAC9D,8EAA8E;GAC5E;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,UAAU;IAC1B,qEAAqE;IACrE,QAAQ,EAAE,YAAY,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC7B,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,OAAO,IAAI,IAAI,CAAC;IAEhB,SAAS,IAAI,aAAa,CAAC;IAC3B,eAAe,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,WAAW,CAAC;IAExE,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,gBAAgB,CAAC;IACtD,kBAAkB,IAAI,cAAc,CAAC;IACrC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,cAAc,KAAK,IAAI,GAAG,WAAW,CAAC;IAErF;;;OAGG;IACH,mBAAmB,IAAI,qBAAqB,CAAC;IAC7C,+EAA+E;IAC/E,yBAAyB,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,IAAI,GAAG,WAAW,CAAC;IAE3F,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACnC,eAAe,IAAI,MAAM,GAAG,SAAS,CAAC;IACtC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC,eAAe,CAAC,QAAQ,EAAE,oBAAoB,GAAG,WAAW,CAAC;IAG7D,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrF,0DAA0D;IAC1D,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACtD,gFAAgF;IAChF,cAAc,IAAI,kBAAkB,EAAE,CAAC;IAGvC,WAAW,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpE,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAGxE,UAAU,CACT,cAAc,EAAE,UAAU,EAC1B,YAAY,EAAE,UAAU,EACxB,IAAI,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,gFAAgF;IAChF,0BAA0B,CAAC,UAAU,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAGvE;;;;;;;OAOG;IACH,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,GAAG,aAAa,CA+NnF"}

package/lib/typescript/commonjs/engine/finalize.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The finalization queue — the package's hardest invariant (FR-041, FR-042).
+ *
+ * Google auto-refunds and revokes a purchase that is not acknowledged within
+ * **three days**. So finalization cannot be a step the app might forget, and it
+ * cannot live only in memory: the failure case FR-042 names is the app being
+ * force-killed in the instant between payment and acknowledgement.
+ *
+ * The ordering that makes this work is: **write the intent, then call the store.**
+ * A crash before the write means the purchase is still owned and the next sync
+ * re-queues it from `queryOwned`. A crash after the write means the queue has a
+ * record and the next startup drains it. There is no window where a paid
+ * transaction is forgotten.
+ *
+ * Consumption stays app-triggered (FR-043), because only the app knows whether
+ * the item was actually banked in its own data.
+ */
+import type { FinalizeResult, TransactionRef, UnfinalizedSummary } from '../config/types';
+import type { ProviderPort } from '../adapter/port';
+import type { ResolvedRetry } from '../core/timers';
+import { type PersistedSnapshot } from '../persistence/snapshot';
+import type { PaymentEventInput } from '../diagnostics/events';
+export interface FinalizerDeps {
+    provider: ProviderPort;
+    retry: ResolvedRetry;
+    /** `timeouts.finalizeAttemptMs`: one acknowledge or consume call may take no longer. */
+    attemptTimeoutMs: number;
+    snapshot: () => PersistedSnapshot;
+    commit: (next: PersistedSnapshot) => void;
+    emit: (event: PaymentEventInput) => void;
+    now: () => number;
+    disposed: () => boolean;
+    /** Injected so a test can run the retry schedule without waiting it out. */
+    setTimeoutFn?: (fn: () => void, ms: number) => FinalizeTimerHandle;
+    clearTimeoutFn?: (handle: FinalizeTimerHandle) => void;
+}
+/** A Node `Timeout` and a browser numeric id are both valid here. */
+type FinalizeTimerHandle = ReturnType<typeof setTimeout> | number;
+export interface Finalizer {
+    /** Records the intent to finalize, then attempts it. Safe to call repeatedly. */
+    enqueue(transactionId: string): Promise<FinalizeResult>;
+    /** Drains every outstanding finalization. Runs at startup and on foreground. */
+    drain(): Promise<void>;
+    /** App-triggered consumption of a consumable (FR-043). */
+    consume(ref: TransactionRef): Promise<FinalizeResult>;
+    /** Paid-but-unsettled transactions, so the condition is observable (FR-045). */
+    unfinalized(): UnfinalizedSummary[];
+    /** Cancels pending retries. Idempotent, called from cleanup. */
+    dispose(): void;
+}
+export declare function createFinalizer(deps: FinalizerDeps): Finalizer;
+export {};
+//# sourceMappingURL=finalize.d.ts.map

package/lib/typescript/commonjs/engine/finalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalize.d.ts","sourceRoot":"","sources":["../../../../src/engine/finalize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EACX,cAAc,EAEd,cAAc,EACd,kBAAkB,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIpD,OAAO,EAGN,KAAK,iBAAiB,EACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,YAAY,CAAC;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,iBAAiB,CAAC;IAClC,MAAM,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC1C,IAAI,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACzC,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,mBAAmB,CAAC;IACnE,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;CACvD;AAED,qEAAqE;AACrE,KAAK,mBAAmB,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,MAAM,CAAC;AAElE,MAAM,WAAW,SAAS;IACzB,iFAAiF;IACjF,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,gFAAgF;IAChF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,0DAA0D;IAC1D,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACtD,gFAAgF;IAChF,WAAW,IAAI,kBAAkB,EAAE,CAAC;IACpC,gEAAgE;IAChE,OAAO,IAAI,IAAI,CAAC;CAChB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,CAmR9D"}

package/lib/typescript/commonjs/engine/foreground.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Opt-in foreground sync over rn-core's shared lifecycle port (PERF-07, FR-059).
+ *
+ * `handleForeground()` stays the app's to call: the engine does not decide what a
+ * foreground return is. An app that is happy with "back from the background" calls
+ * this once instead of wiring `AppState` itself, and shares the one native
+ * subscription every package uses. A trip through `inactive` alone (a biometric
+ * prompt, iOS Control Center) is not a return. On Android the Play purchase sheet
+ * does send the app to the background, so a purchase is followed by a sync; the
+ * engine's foreground rate limit keeps that to one request per interval.
+ */
+import { type AppLifecyclePort, type Unsubscribe } from '@chipmobilesdk/rn-core';
+import type { PaymentEngine } from './engine';
+export declare function syncOnForeground(engine: Pick<PaymentEngine, 'handleForeground'>, lifecycle?: AppLifecyclePort): Unsubscribe;
+//# sourceMappingURL=foreground.d.ts.map

package/lib/typescript/commonjs/engine/foreground.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foreground.d.ts","sourceRoot":"","sources":["../../../../src/engine/foreground.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAGN,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAC/C,SAAS,GAAE,gBAAiC,GAC1C,WAAW,CAKb"}