@chipmobilesdk/rn-payment 0.6.0 → 0.7.0

package/lib/typescript/module/config/types.d.ts

@@ -0,0 +1,326 @@
+/**
+ * Public configuration and catalog types.
+ *
+ * Nothing here names Google Play Billing, `react-native-iap`, or any store
+ * concept (FR-002). Apps speak in **product keys** and **entitlement keys** they
+ * chose themselves; store product identifiers appear only inside catalog
+ * configuration, never in app logic (FR-003).
+ */
+/** An app-chosen logical entitlement, e.g. `no_ads`. What business logic asks about. */
+export type EntitlementKey = string;
+/** An app-chosen logical product, e.g. `premium_yearly`. Never a store identifier. */
+export type ProductKey = string;
+/**
+ * How a product behaves once bought.
+ *
+ * `one_time_permanent` — bought once, kept forever.
+ * `one_time_consumable` — bought, used up by the app, buyable again (FR-043).
+ * `subscription` — recurring, with its own lifecycle (FR-048).
+ */
+export type ProductType = 'one_time_permanent' | 'one_time_consumable' | 'subscription';
+/** Store identifiers per platform. iOS is optional and additive (FR-007). */
+export interface StoreProductIds {
+    android?: string;
+    ios?: string;
+}
+/** One product the app sells, and what it unlocks. */
+export interface CatalogEntry {
+    productKey: ProductKey;
+    productType: ProductType;
+    storeProductIds: StoreProductIds;
+    /** Entitlement keys this product confers. Many-to-many is supported (FR-010). */
+    grants: EntitlementKey[];
+}
+/** Separately configurable, and the basis of the production-transaction guard. */
+export type Environment = 'development' | 'test' | 'production';
+/**
+ * Entitlement policy for a subscription whose renewal payment failed.
+ *
+ * Kept configurable because it is a business decision, not a technical constant
+ * (FR-049). See `entitlements/policy.ts` for the defaults and why.
+ */
+export type LapsePolicy = 'grant' | 'withhold';
+/** What to do when a configured validation hook cannot be reached (FR-072). */
+export type ValidationUnavailablePolicy = 'grant_and_queue' | 'withhold';
+/** Returned by every subscribe call. Idempotent and safe to call twice (FR-006). */
+export type Unsubscribe = () => void;
+export interface TimeoutConfig {
+    connectMs?: number;
+    productQueryMs?: number;
+    syncMs?: number;
+    /** Covers opening the store surface only. Time the user spends in it is not counted (FR-035). */
+    purchaseLaunchMs?: number;
+    /** Bounds each acknowledge or consume call; a timed-out attempt is retried. */
+    finalizeAttemptMs?: number;
+    /**
+     * Bounds the app's `validateTransaction` hook. A hook that does not answer in
+     * time is treated as unavailable, exactly like one that throws (FR-072b).
+     * Added in 0.3.2.
+     */
+    validateMs?: number;
+}
+export interface RetryConfig {
+    reconnect?: BackoffConfig;
+    finalize?: BackoffConfig;
+}
+export interface BackoffConfig {
+    initialDelayMs?: number;
+    maxDelayMs?: number;
+    factor?: number;
+    /** Attempts per session. Finalize is resumed next session rather than abandoned (FR-045). */
+    maxAttempts?: number;
+    jitter?: boolean;
+}
+/** What the app's backend is asked to decide about (FR-069). */
+export interface ValidationCandidate {
+    productKey: ProductKey;
+    productType: ProductType;
+    /** Opaque verification material for the backend. Never logged (FR-074). */
+    verificationPayload: string;
+    /** Ties this decision to one purchase cycle in the event stream (FR-076). */
+    correlationId: string;
+    /**
+     * The store's identifier for this transaction (Play's order id). Not a secret,
+     * and the only handle a backend has on re-validation, where
+     * `verificationPayload` is empty because it is never persisted. Added in 0.3.2.
+     */
+    transactionId: string;
+    /** Which store issued the transaction, so a backend picks the right API. Added in 0.3.2. */
+    platform: 'android' | 'ios';
+}
+export interface ValidationDecision {
+    approved: boolean;
+    /** Optional app-supplied reason, surfaced as a distinguishable outcome (FR-071). */
+    reason?: string;
+}
+export type ValidationHook = (candidate: ValidationCandidate) => Promise<ValidationDecision>;
+/** Diagnostics sink. Deliberately not tied to any analytics vendor (FR-080). */
+export interface LoggerAdapter {
+    debug?(message: string, meta?: Record<string, unknown>): void;
+    warn?(message: string, meta?: Record<string, unknown>): void;
+    error?(message: string, meta?: Record<string, unknown>): void;
+}
+export interface PaymentConfig {
+    catalog: CatalogEntry[];
+    /** Entitlement keys the app intends to query. Used for orphan detection (FR-011). */
+    entitlements: EntitlementKey[];
+    environment: Environment;
+    /**
+     * Whether the running binary is a production build.
+     *
+     * Supplied by the app because only the app knows how it was built. Drives the
+     * fail-closed guard: a non-production build declaring `production` must not
+     * proceed (FR-015).
+     */
+    isProductionBuild: boolean;
+    /**
+     * Lets a non-production build complete purchases through the real store, so a
+     * Play license tester can buy on a debug build (PAY-16). Accepted only with
+     * `environment: 'test'`; any other environment rejects it at startup. License
+     * testers are not charged; any other account on the device would be, so keep
+     * it out of builds that reach real users.
+     */
+    allowStoreTestPurchases?: boolean;
+    /**
+     * Global sell switch. When false, purchases report `disabled` but entitlements
+     * already held stay readable — turning off selling is not the same as taking
+     * away what someone bought (FR-012).
+     */
+    enabled?: boolean;
+    gracePolicy?: LapsePolicy;
+    holdPolicy?: LapsePolicy;
+    staleAfterMs?: number;
+    productCacheTtlMs?: number;
+    foregroundSyncMinIntervalMs?: number;
+    timeouts?: TimeoutConfig;
+    retry?: RetryConfig;
+    /**
+     * Opaque cache-partition key (FR-057a).
+     *
+     * Not a user identifier: the package never interprets it, transmits it, or
+     * attaches it to a transaction. Changing it makes the previous snapshot
+     * unreadable, so a second app-account user cannot inherit the first one's
+     * entitlements even if the app forgets to call `clearLocalData`.
+     */
+    scopeToken?: string;
+    validateTransaction?: ValidationHook;
+    onValidationUnavailable?: ValidationUnavailablePolicy;
+    logger?: LoggerAdapter;
+}
+/** Opaque handle for a transaction. Exposes no raw store record (FR-051). */
+export interface TransactionRef {
+    readonly transactionId: string;
+    readonly productKey: ProductKey;
+}
+export interface PurchaseOptions {
+    /**
+     * The app's obfuscated account identifier, passed straight through to the
+     * store for fraud prevention. Never generated, inferred, or persisted by the
+     * package (FR-034), and distinct from `scopeToken`.
+     */
+    obfuscatedAccountId?: string;
+    /** Which pricing option to buy, for a subscription with several offers. */
+    offerKey?: string;
+}
+/**
+ * Every way a purchase can end (FR-005).
+ *
+ * A discriminated union rather than a boolean plus an error, because the app has
+ * to tell these apart: `user_cancelled` is a normal outcome to stay quiet about,
+ * `pending` means wait, `already_owned` means re-sync, and `store_error` means
+ * show something. Collapsing them is how apps end up reporting a cancellation as
+ * a failure.
+ */
+export type PurchaseResult = {
+    kind: 'success';
+    productKey: ProductKey;
+    transaction: TransactionRef;
+}
+/** Money has not arrived. No entitlement is granted (FR-037). */
+ | {
+    kind: 'pending';
+    productKey: ProductKey;
+    transaction: TransactionRef;
+}
+/** Normal, not an error. Must never be recorded as a technical failure (FR-032). */
+ | {
+    kind: 'user_cancelled';
+    productKey: ProductKey;
+}
+/** Triggers a re-sync: this is how a reinstall repairs itself (FR-033). */
+ | {
+    kind: 'already_owned';
+    productKey: ProductKey;
+} | {
+    kind: 'ineligible';
+    productKey: ProductKey;
+} | {
+    kind: 'unknown_product';
+    productKey: ProductKey;
+} | {
+    kind: 'product_unavailable_in_region';
+    productKey: ProductKey;
+}
+/** Global sell switch is off (FR-012). */
+ | {
+    kind: 'disabled';
+} | {
+    kind: 'not_ready';
+    status: PaymentStatusKind;
+} | {
+    kind: 'unsupported';
+}
+/** A second purchase while one is open. Refused, never queued (FR-031). */
+ | {
+    kind: 'purchase_in_progress';
+}
+/** Refused because this build may not create a production transaction (FR-014). */
+ | {
+    kind: 'environment_blocked';
+    productKey: ProductKey;
+    environment: Environment;
+}
+/** The app's backend said no (FR-071). Distinguishable from a network failure. */
+ | {
+    kind: 'validation_rejected';
+    productKey: ProductKey;
+    reason?: string;
+} | {
+    kind: 'timeout';
+    productKey: ProductKey;
+} | {
+    kind: 'network_error';
+    productKey: ProductKey;
+} | {
+    kind: 'store_error';
+    productKey: ProductKey;
+    code: string;
+};
+/**
+ * A purchase whose money has not arrived yet (FR-101), added in 0.2.0.
+ *
+ * One entry per product key, whatever number of pending transactions the store
+ * reports for it. Carries no transaction id, token, or store object (FR-051) —
+ * enough to render "payment pending" and to withhold Buy, nothing to act on.
+ */
+export interface PendingPurchase {
+    readonly productKey: ProductKey;
+    /** When the store reports the purchase was made, in epoch milliseconds. Earliest if several. */
+    readonly since: number;
+}
+/**
+ * The pending set, with how far it can be trusted (FR-101, FR-103).
+ *
+ * Read `status` first. `unknown` follows the entitlement rule exactly: never
+ * synced, or synced longer ago than `staleAfterMs`. Under `unknown`, `purchases`
+ * still lists what the last good sync saw, but an empty list there does **not**
+ * mean "nothing is pending" — the same reason an `unknown` entitlement is not
+ * `not_entitled`.
+ */
+export interface PendingPurchasesState {
+    readonly status: 'known' | 'unknown';
+    readonly purchases: readonly PendingPurchase[];
+    /** True once the snapshot is older than `staleAfterMs`; `status` is then `unknown`. */
+    readonly isStale: boolean;
+}
+/**
+ * How a pending purchase ended (FR-102).
+ *
+ * `settled` — the money arrived; an entitlement grant, if the product confers one,
+ * follows. `expired` — the store reported that the pending window ran out.
+ * `cancelled` — it ended without payment for any other reason, **including when
+ * the store gives none**: Play simply stops reporting a declined or abandoned
+ * pending purchase, so on Android every unpaid end is `cancelled`.
+ */
+export type PendingResolution = 'settled' | 'cancelled' | 'expired';
+/** Outcome of finalizing or consuming a transaction (FR-044). */
+export type FinalizeResult = {
+    kind: 'finalized';
+}
+/** Already done. Idempotent by design, so this is a success, not an error. */
+ | {
+    kind: 'already_finalized';
+} | {
+    kind: 'unknown_transaction';
+}
+/** Queued for bounded retry; the condition stays observable (FR-045). */
+ | {
+    kind: 'retry_scheduled';
+    attempts: number;
+} | {
+    kind: 'failed';
+    code: string;
+};
+/** A paid transaction not yet settled with the store, surfaced so it is not swallowed. */
+export interface UnfinalizedSummary {
+    productKey: ProductKey;
+    transactionId: string;
+    attempts: number;
+    purchasedAt: number;
+}
+/** Observable package status (FR-019). */
+export type PaymentStatusKind = 'not_started' | 'connecting' | 'ready' | 'disabled' | 'unavailable' | 'failed';
+/** Why selling is impossible here, kept distinguishable so apps can tell users why (FR-021). */
+export type UnavailableReason = 'no_billing_service' | 'billing_service_outdated' | 'platform_unsupported';
+/**
+ * A purchase the package refused because it could have been a real charge
+ * outside production (FR-014).
+ *
+ * Exposed in status rather than only logged so an automated test can assert the
+ * block happened, which is the difference between a guarantee and a hope.
+ */
+export interface BlockedOperation {
+    productKey: ProductKey;
+    environment: Environment;
+    at: number;
+}
+export interface PaymentStatus {
+    kind: PaymentStatusKind;
+    unavailableReason?: UnavailableReason;
+    /** Whether retrying initialization could plausibly help (FR-024). */
+    retryable?: boolean;
+    /** Reconnect attempts made in this session, so a retry storm is visible (FR-020). */
+    reconnectAttempts?: number;
+    blockedOperations: BlockedOperation[];
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/module/config/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,wFAAwF;AACxF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,sFAAsF;AACtF,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,oBAAoB,GAAG,qBAAqB,GAAG,cAAc,CAAC;AAExF,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,iFAAiF;IACjF,MAAM,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,kFAAkF;AAClF,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,MAAM,GAAG,YAAY,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC;AAE/C,+EAA+E;AAC/E,MAAM,MAAM,2BAA2B,GAAG,iBAAiB,GAAG,UAAU,CAAC;AAEzE,oFAAoF;AACpF,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC,MAAM,WAAW,aAAa;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC3B,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,QAAQ,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,2EAA2E;IAC3E,mBAAmB,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,4FAA4F;IAC5F,QAAQ,EAAE,SAAS,GAAG,KAAK,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,mBAAmB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAE7F,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC7B,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9D,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,qFAAqF;IACrF,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB;;;;;;OAMG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,WAAW,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,cAAc,CAAC;IACrC,uBAAuB,CAAC,EAAE,2BAA2B,CAAC;IACtD,MAAM,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC/B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,cAAc,CAAA;CAAE;AAC1E,iEAAiE;GAC/D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,cAAc,CAAA;CAAE;AAC1E,oFAAoF;GAClF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE;AACpD,2EAA2E;GACzE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,+BAA+B,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE;AACnE,0CAA0C;GACxC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE;AACzB,2EAA2E;GACzE;IAAE,IAAI,EAAE,sBAAsB,CAAA;CAAE;AAClC,mFAAmF;GACjF;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE;AACnF,kFAAkF;GAChF;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEpE,iEAAiE;AACjE,MAAM,MAAM,cAAc,GACvB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE;AACvB,8EAA8E;GAC5E;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,qBAAqB,CAAA;CAAE;AACjC,yEAAyE;GACvE;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,0FAA0F;AAC1F,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,0CAA0C;AAC1C,MAAM,MAAM,iBAAiB,GAC5B,aAAa,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEhF,gGAAgG;AAChG,MAAM,MAAM,iBAAiB,GAC5B,oBAAoB,GAAG,0BAA0B,GAAG,sBAAsB,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,iBAAiB,CAAC;IACxB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;CACtC"}

package/lib/typescript/module/config/validate.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Catalog validation (FR-011).
+ *
+ * Runs at `configure`, before any connection is opened, so a bad catalog fails
+ * at configuration time rather than at the moment a user taps Buy. Every failure
+ * **names the offending entry** — "invalid catalog" alone is useless in an app
+ * with thirty products.
+ *
+ * All problems are collected rather than thrown one at a time, so a developer
+ * fixes the catalog in one pass instead of rerunning to find the next fault.
+ */
+import { type ResolvedRetry, type ResolvedTimeouts } from '../core/timers.js';
+import type { CatalogEntry, EntitlementKey, LapsePolicy, PaymentConfig, ProductKey, ValidationUnavailablePolicy } from './types.js';
+/** The platform whose store identifiers a catalog must supply. */
+export type TargetPlatform = 'android' | 'ios';
+/**
+ * A validated, indexed catalog plus every resolved policy value.
+ *
+ * Produced once so the hot paths never re-derive it, and so `getEntitlement` can
+ * stay a synchronous in-memory read (PERF-001).
+ */
+export interface ResolvedConfig {
+    readonly entries: ReadonlyMap<ProductKey, CatalogEntry>;
+    /** productKey → entitlement keys it grants. */
+    readonly grants: ReadonlyMap<ProductKey, readonly EntitlementKey[]>;
+    /** entitlementKey → product keys that can grant it (FR-051, FR-052). */
+    readonly sources: ReadonlyMap<EntitlementKey, readonly ProductKey[]>;
+    /** storeProductId → productKey, for translating store callbacks back (FR-003). */
+    readonly byStoreId: ReadonlyMap<string, ProductKey>;
+    readonly entitlementKeys: readonly EntitlementKey[];
+    readonly platform: TargetPlatform;
+    readonly enabled: boolean;
+    readonly gracePolicy: LapsePolicy;
+    readonly holdPolicy: LapsePolicy;
+    readonly staleAfterMs: number;
+    readonly productCacheTtlMs: number;
+    readonly foregroundSyncMinIntervalMs: number;
+    readonly timeouts: ResolvedTimeouts;
+    readonly retry: ResolvedRetry;
+    readonly onValidationUnavailable: ValidationUnavailablePolicy;
+}
+export declare function validateConfig(config: PaymentConfig, platform?: TargetPlatform): ResolvedConfig;
+/**
+ * The fail-closed environment guard (FR-015).
+ *
+ * Separate from catalog validation because it is not about the catalog's shape
+ * but about whether this binary is allowed to move real money at all. Checked
+ * before connecting, and it refuses rather than warns: a non-production build
+ * that declares `production` is one tap away from charging a real card, and
+ * continuing silently is exactly the failure this package exists to prevent.
+ */
+export declare function assertEnvironmentSafe(config: PaymentConfig): void;
+/**
+ * Whether this configuration may hand a purchase to a real store (FR-014).
+ *
+ * True in a production build configured for production, and in a `test`
+ * environment that opted in with `allowStoreTestPurchases` (PAY-16). False
+ * everywhere else. The engine records each refusal in observable status so a
+ * test can assert the block happened — the difference between a guarantee and a
+ * hope.
+ */
+export declare function mayCreateRealTransaction(config: PaymentConfig): boolean;
+//# sourceMappingURL=validate.d.ts.map

package/lib/typescript/module/config/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../../src/config/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAMN,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,MAAM,mBAAgB,CAAC;AACxB,OAAO,KAAK,EACX,YAAY,EACZ,cAAc,EACd,WAAW,EACX,aAAa,EACb,UAAU,EAEV,2BAA2B,EAC3B,MAAM,YAAS,CAAC;AAQjB,kEAAkE;AAClE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,KAAK,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACxD,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC,CAAC;IACpE,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,cAAc,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC;IACrE,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpD,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;CAC9D;AAED,wBAAgB,cAAc,CAC7B,MAAM,EAAE,aAAa,EACrB,QAAQ,GAAE,cAA0B,GAClC,cAAc,CAsHhB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAsBjE;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAKvE"}

package/lib/typescript/module/core/mutex.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Concurrency primitives.
+ *
+ * These are what make three of the specification's guarantees structurally true
+ * rather than hoped for: concurrent initialization opens exactly one connection
+ * (FR-018), concurrent syncs make exactly one store request (FR-063), and a
+ * second purchase while one is open is refused rather than queued (FR-031).
+ *
+ * The distinction between the two primitives matters. `singleFlight` **joins**
+ * concurrent callers onto one operation — correct for init and sync, where every
+ * caller wants the same answer. `exclusive` **refuses** the second caller —
+ * correct for purchase, where joining would silently give two callers one
+ * transaction, and queueing would open a store surface the user no longer
+ * expects.
+ */
+export { createExclusive, createRateLimiter, createSingleFlight, withTimeout, type ExclusiveOutcome, } from '@chipmobilesdk/rn-core';
+//# sourceMappingURL=mutex.d.ts.map

package/lib/typescript/module/core/mutex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutex.d.ts","sourceRoot":"","sources":["../../../../src/core/mutex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EACN,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,KAAK,gBAAgB,GACrB,MAAM,wBAAwB,CAAC"}

package/lib/typescript/module/core/retry.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Bounded backoff.
+ *
+ * "Bounded" is the whole point (FR-020, FR-045): an unbounded reconnect loop
+ * against a billing service that is down drains battery and hammers a system
+ * service, and an unbounded finalize loop hides a real failure behind noise.
+ *
+ * Delay computation is pure and separated from waiting so tests can assert the
+ * schedule without burning real time.
+ */
+import type { BackoffConfig } from '../config/types.js';
+/**
+ * Delay before `attempt` (1-based), capped and optionally jittered.
+ *
+ * Jitter is full jitter over [0, capped]: several devices that lost the billing
+ * connection at the same moment should not retry in lockstep.
+ */
+export declare function backoffDelayMs(attempt: number, config: Required<BackoffConfig>, random?: () => number): number;
+//# sourceMappingURL=retry.d.ts.map

package/lib/typescript/module/core/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../../../src/core/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAiB,CAAC;AAErD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC7B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC/B,MAAM,GAAE,MAAM,MAAoB,GAChC,MAAM,CAER"}

package/lib/typescript/module/core/timers.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Timeout, retry, and cache policy.
+ *
+ * Defaults and bounds live here rather than at each call site so there is one
+ * place to read what the package will wait for, and so consumers can read the
+ * values they are bound by instead of discovering them from a timeout in
+ * production.
+ *
+ * Out-of-band values are a configuration error rather than being silently
+ * clamped: quietly turning a 1-second timeout into 3 seconds would tell the app
+ * it configured something it did not.
+ */
+import type { BackoffConfig, RetryConfig, TimeoutConfig } from '../config/types.js';
+/** Local IPC to Play Services. Slower than this means unavailable, not busy. */
+export declare const DEFAULT_CONNECT_TIMEOUT_MS = 10000;
+/** A network round trip; a paywall that hangs longer should show its error state. */
+export declare const DEFAULT_PRODUCT_QUERY_TIMEOUT_MS = 15000;
+/** Runs at startup, so it must not hold the first render hostage. */
+export declare const DEFAULT_SYNC_TIMEOUT_MS = 20000;
+/**
+ * Covers opening the store surface only.
+ *
+ * Time the user spends *inside* the store's own UI is deliberately excluded
+ * (FR-035): a user reading the terms, switching to their banking app for an OTP,
+ * or simply hesitating must never have their purchase cancelled by our clock.
+ */
+export declare const DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS = 30000;
+/** Per finalize attempt, not per transaction — the queue owns overall persistence. */
+export declare const DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS = 15000;
+/** The app's backend hook. A user is waiting on a purchase result behind it. */
+export declare const DEFAULT_VALIDATE_TIMEOUT_MS = 15000;
+/**
+ * The ceiling on a purchase flow whose outcome includes the user's own time in
+ * the store UI, so is otherwise untimed (FR-035). Not a timeout on the user: it
+ * exists only so a binding that never answers cannot hold the purchase lock for
+ * the rest of the session. A purchase that completes later still arrives through
+ * the store update channel and is granted then.
+ */
+export declare const PURCHASE_FLOW_CEILING_MS: number;
+export declare const CONNECT_TIMEOUT_BOUNDS: {
+    readonly min: 3000;
+    readonly max: 60000;
+};
+export declare const PRODUCT_QUERY_TIMEOUT_BOUNDS: {
+    readonly min: 3000;
+    readonly max: 60000;
+};
+export declare const SYNC_TIMEOUT_BOUNDS: {
+    readonly min: 5000;
+    readonly max: 120000;
+};
+export declare const PURCHASE_LAUNCH_TIMEOUT_BOUNDS: {
+    readonly min: 5000;
+    readonly max: 120000;
+};
+export declare const FINALIZE_ATTEMPT_TIMEOUT_BOUNDS: {
+    readonly min: 3000;
+    readonly max: 60000;
+};
+export declare const VALIDATE_TIMEOUT_BOUNDS: {
+    readonly min: 3000;
+    readonly max: 120000;
+};
+/**
+ * Prices and offer eligibility are shown at the moment of purchase, so a short
+ * TTL with on-demand refresh beats a long one (FR-029).
+ */
+export declare const DEFAULT_PRODUCT_CACHE_TTL_MS = 900000;
+export declare const PRODUCT_CACHE_TTL_BOUNDS: {
+    readonly min: 60000;
+    readonly max: 86400000;
+};
+/**
+ * How long a successful sync keeps entitlements trustworthy offline: **7 days**.
+ *
+ * Fixed by the specification (FR-055) after weighing both failure directions.
+ * The realistic offline cases — travel, poor coverage, a device left unused —
+ * resolve within days. Seven days covers a holiday without connectivity while
+ * bounding how long a refunded entitlement can outlive its refund to one week.
+ *
+ * Past this the entitlement becomes `unknown`, never `not_entitled` (FR-055a):
+ * the package stops asserting rather than telling a paying customer they did not
+ * pay.
+ */
+export declare const DEFAULT_STALE_AFTER_MS = 604800000;
+export declare const STALE_AFTER_BOUNDS: {
+    readonly min: 3600000;
+    readonly max: 7776000000;
+};
+/** Keeps rapid app switching from becoming a request storm (PERF-002). */
+export declare const DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS = 60000;
+export declare const FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS: {
+    readonly min: 0;
+    readonly max: 3600000;
+};
+/** Bounded so a dropped billing connection cannot become a retry storm (FR-020). */
+export declare const DEFAULT_RECONNECT_BACKOFF: Required<BackoffConfig>;
+/**
+ * Finalize retry.
+ *
+ * Bounded **per session** but never permanently abandoned: Google auto-refunds
+ * an unacknowledged purchase after three days, so exhausting this session's
+ * attempts must leave the transaction queued for the next launch, not dropped
+ * (FR-045).
+ */
+export declare const DEFAULT_FINALIZE_BACKOFF: Required<BackoffConfig>;
+export declare const BACKOFF_MAX_DELAY_BOUNDS: {
+    readonly min: 5000;
+    readonly max: 600000;
+};
+export declare const BACKOFF_ATTEMPT_BOUNDS: {
+    readonly min: 1;
+    readonly max: 10;
+};
+/** A first retry sooner than this is a storm; later than this, the user has given up. */
+export declare const BACKOFF_INITIAL_DELAY_BOUNDS: {
+    readonly min: 100;
+    readonly max: 60000;
+};
+/** 1 is a constant delay; 0 or below would retry at once, forever (CORE-05). */
+export declare const BACKOFF_FACTOR_BOUNDS: {
+    readonly min: 1;
+    readonly max: 10;
+};
+export interface ResolvedTimeouts {
+    connectMs: number;
+    productQueryMs: number;
+    syncMs: number;
+    purchaseLaunchMs: number;
+    finalizeAttemptMs: number;
+    validateMs: number;
+}
+export declare function resolveTimeouts(config?: TimeoutConfig): ResolvedTimeouts;
+export interface ResolvedRetry {
+    reconnect: Required<BackoffConfig>;
+    finalize: Required<BackoffConfig>;
+}
+export declare function resolveRetry(config?: RetryConfig): ResolvedRetry;
+export declare function resolveStaleAfterMs(value?: number): number;
+export declare function resolveProductCacheTtlMs(value?: number): number;
+export declare function resolveForegroundSyncMinIntervalMs(value?: number): number;
+//# sourceMappingURL=timers.d.ts.map

package/lib/typescript/module/core/timers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timers.d.ts","sourceRoot":"","sources":["../../../../src/core/timers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,oBAAiB,CAAC;AAEjF,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,qFAAqF;AACrF,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC,QAAS,CAAC;AACzD,sFAAsF;AACtF,eAAO,MAAM,mCAAmC,QAAS,CAAC;AAC1D,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAClD;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,QAAc,CAAC;AAEpD,eAAO,MAAM,sBAAsB;;;CAAuC,CAAC;AAC3E,eAAO,MAAM,4BAA4B;;;CAAuC,CAAC;AACjF,eAAO,MAAM,mBAAmB;;;CAAwC,CAAC;AACzE,eAAO,MAAM,8BAA8B;;;CAGjC,CAAC;AACX,eAAO,MAAM,+BAA+B;;;CAGlC,CAAC;AACX,eAAO,MAAM,uBAAuB;;;CAAwC,CAAC;AAE7E;;;GAGG;AACH,eAAO,MAAM,4BAA4B,SAAU,CAAC;AACpD,eAAO,MAAM,wBAAwB;;;CAA4C,CAAC;AAElF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,YAAc,CAAC;AAClD,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,0EAA0E;AAC1E,eAAO,MAAM,uCAAuC,QAAS,CAAC;AAC9D,eAAO,MAAM,mCAAmC;;;CAGtC,CAAC;AAEX,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,aAAa,CAM7D,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,aAAa,CAM5D,CAAC;AAEF,eAAO,MAAM,wBAAwB;;;CAAwC,CAAC;AAC9E,eAAO,MAAM,sBAAsB;;;CAA+B,CAAC;AACnE,yFAAyF;AACzF,eAAO,MAAM,4BAA4B;;;CAAqC,CAAC;AAC/E,gFAAgF;AAChF,eAAO,MAAM,qBAAqB;;;CAA+B,CAAC;AAwBlE,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,gBAAgB,CAuCxE;AA+CD,MAAM,WAAW,aAAa;IAC7B,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACnC,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;CAClC;AAED,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAKhE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAO/D;AAED,wBAAgB,kCAAkC,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAOzE"}

package/lib/typescript/module/diagnostics/errors.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Normalized public errors.
+ *
+ * Error codes are **public API**: renaming one is a breaking change (FR-078,
+ * LIB-008). They are the vocabulary an app branches on, so they must outlive any
+ * internal refactor and must never leak a store's own code.
+ */
+import { SdkError } from '@chipmobilesdk/rn-core';
+export declare const PAYMENT_ERROR_CODES: readonly ["PAYMENT_NOT_CONFIGURED", "PAYMENT_INVALID_CATALOG", "PAYMENT_NOT_READY", "PAYMENT_DISABLED", "PAYMENT_UNAVAILABLE", "PAYMENT_UNSUPPORTED_PLATFORM", "PAYMENT_ENVIRONMENT_BLOCKED", "PAYMENT_PRODUCTION_CONFIG_IN_NON_PRODUCTION_BUILD", "PAYMENT_PURCHASE_IN_PROGRESS", "PAYMENT_USER_CANCELLED", "PAYMENT_PENDING", "PAYMENT_ALREADY_OWNED", "PAYMENT_INELIGIBLE", "PAYMENT_UNKNOWN_PRODUCT", "PAYMENT_PRODUCT_UNAVAILABLE_IN_REGION", "PAYMENT_TIMEOUT", "PAYMENT_NETWORK_ERROR", "PAYMENT_STORE_ERROR", "PAYMENT_FINALIZE_FAILED", "PAYMENT_VALIDATION_REJECTED", "PAYMENT_VALIDATION_UNAVAILABLE", "PAYMENT_STORAGE_UNAVAILABLE", "PAYMENT_NOT_CONSUMABLE", "PAYMENT_INVALID_CONFIG"];
+export type PaymentErrorCode = (typeof PAYMENT_ERROR_CODES)[number];
+/** Which operation produced an error. Part of the public error shape (FR-078). */
+export type PaymentOperation = 'configure' | 'initialize' | 'getProducts' | 'purchase' | 'finalize' | 'consume' | 'sync' | 'restore' | 'changePlan' | 'validate' | 'persist';
+/** The package's error; an `SdkError` (`@chipmobilesdk/rn-core`) with `pkg: 'rn-payment'`. */
+export declare class PaymentError extends SdkError<PaymentErrorCode> {
+    readonly operation: PaymentOperation;
+    /** Redacted where appropriate — never a raw receipt, token, or store object (FR-074). */
+    readonly cause?: string;
+    constructor(init: {
+        code: PaymentErrorCode;
+        message: string;
+        operation: PaymentOperation;
+        retryable?: boolean;
+        cause?: string;
+    });
+}
+/**
+ * A configuration problem the app can act on.
+ *
+ * Separate from `PaymentError` because configuration faults are developer-facing
+ * and must never be shown to an end user — the message-key map keeps that
+ * separation explicit (FR-085).
+ */
+export declare class PaymentConfigError extends PaymentError {
+    /** The offending catalog entries or entitlement keys, named (FR-011). */
+    readonly offenders: string[];
+    constructor(init: {
+        code: PaymentErrorCode;
+        message: string;
+        operation: PaymentOperation;
+        offenders?: string[];
+    });
+}
+/**
+ * Strips anything that must never reach a log or event.
+ *
+ * Applied at the boundary rather than trusted to call sites: a single forgotten
+ * interpolation is how receipts end up in logs (NFR-006).
+ *
+ * Identifier-only: what survives is what code defined, never what data carried.
+ * A `PaymentError` keeps its code and an `Error` its class name; every message
+ * and every string is dropped, because a store or consumer message can embed a
+ * purchase token or an account id and nothing here can tell which.
+ */
+export declare function redact(value: unknown): string;
+//# sourceMappingURL=errors.d.ts.map

package/lib/typescript/module/diagnostics/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/diagnostics/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAY,QAAQ,EAAkB,MAAM,wBAAwB,CAAC;AAI5E,eAAO,MAAM,mBAAmB,sqBA8BtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GACzB,WAAW,GACX,YAAY,GACZ,aAAa,GACb,UAAU,GACV,UAAU,GACV,SAAS,GACT,MAAM,GACN,SAAS,GACT,YAAY,GACZ,UAAU,GACV,SAAS,CAAC;AAEb,8FAA8F;AAC9F,qBAAa,YAAa,SAAQ,QAAQ,CAAC,gBAAgB,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,yFAAyF;IACzF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE;QACjB,IAAI,EAAE,gBAAgB,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,gBAAgB,CAAC;QAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;KACf;CAUD;AAED;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,YAAY;IACnD,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;gBAEjB,IAAI,EAAE;QACjB,IAAI,EAAE,gBAAgB,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,gBAAgB,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB;CAKD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAK7C"}