@chipmobilesdk/rn-payment 0.6.0 → 0.7.0

package/lib/commonjs/index.js

@@ -0,0 +1,266 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "BACKOFF_ATTEMPT_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.BACKOFF_ATTEMPT_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "BACKOFF_MAX_DELAY_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.BACKOFF_MAX_DELAY_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "CONNECT_TIMEOUT_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.CONNECT_TIMEOUT_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_CONNECT_TIMEOUT_MS", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_CONNECT_TIMEOUT_MS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_DEVELOPER_MESSAGES", {
+  enumerable: true,
+  get: function () {
+    return _messageKeys.DEFAULT_DEVELOPER_MESSAGES;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_FINALIZE_ATTEMPT_TIMEOUT_MS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_FINALIZE_BACKOFF", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_FINALIZE_BACKOFF;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_FOREGROUND_SYNC_MIN_INTERVAL_MS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_MESSAGES", {
+  enumerable: true,
+  get: function () {
+    return _messageKeys.DEFAULT_MESSAGES;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_PRODUCT_CACHE_TTL_MS", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_PRODUCT_CACHE_TTL_MS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_PRODUCT_QUERY_TIMEOUT_MS", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_PRODUCT_QUERY_TIMEOUT_MS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_PURCHASE_LAUNCH_TIMEOUT_MS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_RECONNECT_BACKOFF", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_RECONNECT_BACKOFF;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_STALE_AFTER_MS", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_STALE_AFTER_MS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_SYNC_TIMEOUT_MS", {
+  enumerable: true,
+  get: function () {
+    return _timers.DEFAULT_SYNC_TIMEOUT_MS;
+  }
+});
+Object.defineProperty(exports, "DEFAULT_USER_MESSAGES", {
+  enumerable: true,
+  get: function () {
+    return _messageKeys.DEFAULT_USER_MESSAGES;
+  }
+});
+Object.defineProperty(exports, "DEVELOPER_MESSAGE_KEYS", {
+  enumerable: true,
+  get: function () {
+    return _messageKeys.DEVELOPER_MESSAGE_KEYS;
+  }
+});
+Object.defineProperty(exports, "FINALIZE_ATTEMPT_TIMEOUT_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.FINALIZE_ATTEMPT_TIMEOUT_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.FOREGROUND_SYNC_MIN_INTERVAL_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "PAYMENT_ERROR_CODES", {
+  enumerable: true,
+  get: function () {
+    return _errors.PAYMENT_ERROR_CODES;
+  }
+});
+Object.defineProperty(exports, "PRODUCT_CACHE_TTL_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.PRODUCT_CACHE_TTL_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "PRODUCT_QUERY_TIMEOUT_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.PRODUCT_QUERY_TIMEOUT_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "PURCHASE_LAUNCH_TIMEOUT_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.PURCHASE_LAUNCH_TIMEOUT_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "PaymentConfigError", {
+  enumerable: true,
+  get: function () {
+    return _errors.PaymentConfigError;
+  }
+});
+Object.defineProperty(exports, "PaymentError", {
+  enumerable: true,
+  get: function () {
+    return _errors.PaymentError;
+  }
+});
+Object.defineProperty(exports, "PaymentProvider", {
+  enumerable: true,
+  get: function () {
+    return _PaymentProvider.PaymentProvider;
+  }
+});
+Object.defineProperty(exports, "STALE_AFTER_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.STALE_AFTER_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "SYNC_TIMEOUT_BOUNDS", {
+  enumerable: true,
+  get: function () {
+    return _timers.SYNC_TIMEOUT_BOUNDS;
+  }
+});
+Object.defineProperty(exports, "USER_MESSAGE_KEYS", {
+  enumerable: true,
+  get: function () {
+    return _messageKeys.USER_MESSAGE_KEYS;
+  }
+});
+Object.defineProperty(exports, "createEngine", {
+  enumerable: true,
+  get: function () {
+    return _engine.createEngine;
+  }
+});
+Object.defineProperty(exports, "createStoreProvider", {
+  enumerable: true,
+  get: function () {
+    return _createStoreProvider.createStoreProvider;
+  }
+});
+Object.defineProperty(exports, "isUserMessageKey", {
+  enumerable: true,
+  get: function () {
+    return _messageKeys.isUserMessageKey;
+  }
+});
+Object.defineProperty(exports, "paymentMessages", {
+  enumerable: true,
+  get: function () {
+    return _messageKeys.paymentMessages;
+  }
+});
+Object.defineProperty(exports, "syncOnForeground", {
+  enumerable: true,
+  get: function () {
+    return _foreground.syncOnForeground;
+  }
+});
+Object.defineProperty(exports, "useEntitlement", {
+  enumerable: true,
+  get: function () {
+    return _hooks.useEntitlement;
+  }
+});
+Object.defineProperty(exports, "useEntitlements", {
+  enumerable: true,
+  get: function () {
+    return _hooks.useEntitlements;
+  }
+});
+Object.defineProperty(exports, "usePaymentEngine", {
+  enumerable: true,
+  get: function () {
+    return _PaymentProvider.usePaymentEngine;
+  }
+});
+Object.defineProperty(exports, "usePaymentStatus", {
+  enumerable: true,
+  get: function () {
+    return _hooks.usePaymentStatus;
+  }
+});
+Object.defineProperty(exports, "usePendingPurchases", {
+  enumerable: true,
+  get: function () {
+    return _hooks.usePendingPurchases;
+  }
+});
+Object.defineProperty(exports, "useProducts", {
+  enumerable: true,
+  get: function () {
+    return _hooks.useProducts;
+  }
+});
+Object.defineProperty(exports, "usePurchase", {
+  enumerable: true,
+  get: function () {
+    return _hooks.usePurchase;
+  }
+});
+Object.defineProperty(exports, "useSync", {
+  enumerable: true,
+  get: function () {
+    return _hooks.useSync;
+  }
+});
+var _timers = require("./core/timers.js");
+var _createStoreProvider = require("./adapter/createStoreProvider.js");
+var _engine = require("./engine/engine.js");
+var _foreground = require("./engine/foreground.js");
+var _PaymentProvider = require("./react/PaymentProvider.js");
+var _hooks = require("./react/hooks.js");
+var _errors = require("./diagnostics/errors.js");
+var _messageKeys = require("./diagnostics/messageKeys.js");
+//# sourceMappingURL=index.js.map

package/lib/commonjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_timers","require","_createStoreProvider","_engine","_foreground","_PaymentProvider","_hooks","_errors","_messageKeys"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4DA,IAAAA,OAAA,GAAAC,OAAA;AAiDA,IAAAC,oBAAA,GAAAD,OAAA;AAIA,IAAAE,OAAA,GAAAF,OAAA;AASA,IAAAG,WAAA,GAAAH,OAAA;AAGA,IAAAI,gBAAA,GAAAJ,OAAA;AAEA,IAAAK,MAAA,GAAAL,OAAA;AAYA,IAAAM,OAAA,GAAAN,OAAA;AAYA,IAAAO,YAAA,GAAAP,OAAA","ignoreList":[]}

package/lib/commonjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/lib/commonjs/persistence/mmkv-store.js

@@ -0,0 +1,149 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createMemorySnapshotStore = createMemorySnapshotStore;
+exports.createSnapshotStore = createSnapshotStore;
+var _rnCore = require("@chipmobilesdk/rn-core");
+var _snapshot = require("./snapshot.js");
+/**
+ * MMKV-backed snapshot store.
+ *
+ * Every MMKV import is confined to this file, so the rest of the package stays
+ * testable without a native module.
+ *
+ * MMKV is chosen because it is **synchronous**, which is what lets
+ * `getEntitlement` be an in-memory read with no I/O on render paths (PERF-001).
+ * An async store would force either an async entitlement read or a hidden
+ * hydration race on every call.
+ *
+ * Records are partitioned by cache-scope token (FR-057a). The token is a
+ * partition key and nothing more: never interpreted, never transmitted, never
+ * attached to a transaction.
+ */
+
+const INSTANCE_ID = 'chipmobilesdk.payment';
+const KEY_PREFIX = 'snapshot';
+const mmkv = (0, _rnCore.lazyPeer)('react-native-mmkv', () => {
+  // Inside `try`, so Metro bundles an app that leaves this optional peer out.
+  try {
+    return require('react-native-mmkv');
+  } catch (cause) {
+    throw cause;
+  }
+});
+function scopeKey(scopeToken) {
+  // An explicit sentinel rather than an empty segment, so the unscoped record
+  // can never collide with a scope whose token happens to be empty.
+  return `${KEY_PREFIX}:${scopeToken ?? '__default__'}`;
+}
+
+/**
+ * Opens the MMKV instance through v4's `createMMKV`.
+ *
+ * Up to 0.2.0 this called `new MMKV()`, the v3 constructor. In v4 — the only
+ * major the peer range allows — `MMKV` is a type, not a value, so the call threw
+ * and the store fell back to memory on every device: entitlements read `unknown`
+ * after each cold start, and a pending purchase was forgotten after an app kill.
+ * Tests could not see it, because the test double still exported a v3 class.
+ */
+function resolveBacking() {
+  // rn-core's port: MMKV when it opens, otherwise memory with `durable: false`.
+  const port = (0, _rnCore.openDurable)(() => mmkv.require(peer => new Error(`${peer} is not installed`)).createMMKV({
+    id: INSTANCE_ID
+  }));
+  return {
+    backing: {
+      getString: key => port.getString(key),
+      set: (key, value) => port.set(key, value),
+      remove: key => port.remove(key),
+      clearAll: () => port.clearAll(),
+      getAllKeys: () => port.keys()
+    },
+    durable: port.durable
+  };
+}
+
+/**
+ * Creates the store.
+ *
+ * The memory fallback is a **documented degradation**, not a silent one: without
+ * MMKV the snapshot does not survive a cold start, so entitlements read `unknown`
+ * until the first sync. That is safe by construction — `unknown`, never
+ * `not_entitled` (FR-047) — and FR-059's startup sync repairs it. `isDurable()`
+ * lets the engine warn, so the condition is visible rather than mysterious.
+ */
+function createSnapshotStore(injected) {
+  const {
+    backing,
+    durable
+  } = injected ?? resolveBacking();
+  return {
+    load(scopeToken) {
+      const raw = backing.getString(scopeKey(scopeToken));
+      if (raw === undefined) {
+        return (0, _snapshot.emptySnapshot)(scopeToken);
+      }
+      let parsed;
+      try {
+        parsed = JSON.parse(raw);
+      } catch {
+        // Corrupt JSON is discarded rather than repaired: the store is the
+        // authoritative source and the next sync rebuilds from it.
+        return (0, _snapshot.emptySnapshot)(scopeToken);
+      }
+      const outcome = (0, _snapshot.migrateSnapshot)(parsed);
+      if (!outcome.ok) {
+        return (0, _snapshot.emptySnapshot)(scopeToken);
+      }
+
+      // A record whose stored token disagrees with the requested scope must not
+      // be served: that is precisely the account-switch inheritance FR-057a
+      // exists to prevent.
+      if (outcome.snapshot.scopeToken !== scopeToken) {
+        return (0, _snapshot.emptySnapshot)(scopeToken);
+      }
+      return outcome.snapshot;
+    },
+    save(snapshot) {
+      try {
+        backing.set(scopeKey(snapshot.scopeToken), JSON.stringify(snapshot));
+        return true;
+      } catch {
+        // A failed write must never take down a purchase flow. The in-memory
+        // state stays correct for this session and the next sync re-derives it;
+        // the engine reports it (PAY-13).
+        return false;
+      }
+    },
+    clearAll() {
+      try {
+        for (const key of backing.getAllKeys()) {
+          if (key.startsWith(`${KEY_PREFIX}:`)) {
+            backing.remove(key);
+          }
+        }
+      } catch {
+        // Best effort; a failure here must not throw into a logout flow.
+      }
+    },
+    isDurable: () => durable
+  };
+}
+
+/** Test seam for driving the store without the native module. */
+function createMemorySnapshotStore() {
+  const memory = (0, _rnCore.createMemoryKeyValue)();
+  return createSnapshotStore({
+    backing: {
+      getString: key => memory.getString(key),
+      set: (key, value) => memory.set(key, value),
+      remove: key => memory.remove(key),
+      clearAll: () => memory.clearAll(),
+      getAllKeys: () => memory.keys()
+    },
+    durable: false
+  });
+}
+//# sourceMappingURL=mmkv-store.js.map

package/lib/commonjs/persistence/mmkv-store.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_rnCore","require","_snapshot","INSTANCE_ID","KEY_PREFIX","mmkv","lazyPeer","cause","scopeKey","scopeToken","resolveBacking","port","openDurable","peer","Error","createMMKV","id","backing","getString","key","set","value","remove","clearAll","getAllKeys","keys","durable","createSnapshotStore","injected","load","raw","undefined","emptySnapshot","parsed","JSON","parse","outcome","migrateSnapshot","ok","snapshot","save","stringify","startsWith","isDurable","createMemorySnapshotStore","memory","createMemoryKeyValue"],"sourceRoot":"../../../src","sources":["persistence/mmkv-store.ts"],"mappings":";;;;;;;AAgBA,IAAAA,OAAA,GAAAC,OAAA;AAEA,IAAAC,SAAA,GAAAD,OAAA;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,MAAME,WAAW,GAAG,uBAAuB;AAC3C,MAAMC,UAAU,GAAG,UAAU;AAE7B,MAAMC,IAAI,GAAG,IAAAC,gBAAQ,EAAC,mBAAmB,EAAE,MAAM;EAChD;EACA,IAAI;IACH,OAAOL,OAAO,CAAC,mBAAmB,CAAC;EACpC,CAAC,CAAC,OAAOM,KAAK,EAAE;IACf,MAAMA,KAAK;EACZ;AACD,CAAC,CAAC;AAeF,SAASC,QAAQA,CAACC,UAAmB,EAAU;EAC9C;EACA;EACA,OAAO,GAAGL,UAAU,IAAIK,UAAU,IAAI,aAAa,EAAE;AACtD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,cAAcA,CAAA,EAA4C;EAClE;EACA,MAAMC,IAAI,GAAG,IAAAC,mBAAW,EAAC,MACxBP,IAAI,CAACJ,OAAO,CAACY,IAAI,IAAI,IAAIC,KAAK,CAAC,GAAGD,IAAI,mBAAmB,CAAC,CAAC,CAACE,UAAU,CAAC;IAAEC,EAAE,EAAEb;EAAY,CAAC,CAC3F,CAAC;EACD,OAAO;IACNc,OAAO,EAAE;MACRC,SAAS,EAAEC,GAAG,IAAIR,IAAI,CAACO,SAAS,CAACC,GAAG,CAAC;MACrCC,GAAG,EAAEA,CAACD,GAAG,EAAEE,KAAK,KAAKV,IAAI,CAACS,GAAG,CAACD,GAAG,EAAEE,KAAK,CAAC;MACzCC,MAAM,EAAEH,GAAG,IAAIR,IAAI,CAACW,MAAM,CAACH,GAAG,CAAC;MAC/BI,QAAQ,EAAEA,CAAA,KAAMZ,IAAI,CAACY,QAAQ,CAAC,CAAC;MAC/BC,UAAU,EAAEA,CAAA,KAAMb,IAAI,CAACc,IAAI,CAAC;IAC7B,CAAC;IACDC,OAAO,EAAEf,IAAI,CAACe;EACf,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAACC,QAGnC,EAAiB;EACjB,MAAM;IAAEX,OAAO;IAAES;EAAQ,CAAC,GAAGE,QAAQ,IAAIlB,cAAc,CAAC,CAAC;EAEzD,OAAO;IACNmB,IAAIA,CAACpB,UAAmB,EAAqB;MAC5C,MAAMqB,GAAG,GAAGb,OAAO,CAACC,SAAS,CAACV,QAAQ,CAACC,UAAU,CAAC,CAAC;MACnD,IAAIqB,GAAG,KAAKC,SAAS,EAAE;QACtB,OAAO,IAAAC,uBAAa,EAACvB,UAAU,CAAC;MACjC;MAEA,IAAIwB,MAAe;MACnB,IAAI;QACHA,MAAM,GAAGC,IAAI,CAACC,KAAK,CAACL,GAAG,CAAC;MACzB,CAAC,CAAC,MAAM;QACP;QACA;QACA,OAAO,IAAAE,uBAAa,EAACvB,UAAU,CAAC;MACjC;MAEA,MAAM2B,OAAO,GAAG,IAAAC,yBAAe,EAACJ,MAAM,CAAC;MACvC,IAAI,CAACG,OAAO,CAACE,EAAE,EAAE;QAChB,OAAO,IAAAN,uBAAa,EAACvB,UAAU,CAAC;MACjC;;MAEA;MACA;MACA;MACA,IAAI2B,OAAO,CAACG,QAAQ,CAAC9B,UAAU,KAAKA,UAAU,EAAE;QAC/C,OAAO,IAAAuB,uBAAa,EAACvB,UAAU,CAAC;MACjC;MAEA,OAAO2B,OAAO,CAACG,QAAQ;IACxB,CAAC;IAEDC,IAAIA,CAACD,QAA2B,EAAW;MAC1C,IAAI;QACHtB,OAAO,CAACG,GAAG,CAACZ,QAAQ,CAAC+B,QAAQ,CAAC9B,UAAU,CAAC,EAAEyB,IAAI,CAACO,SAAS,CAACF,QAAQ,CAAC,CAAC;QACpE,OAAO,IAAI;MACZ,CAAC,CAAC,MAAM;QACP;QACA;QACA;QACA,OAAO,KAAK;MACb;IACD,CAAC;IAEDhB,QAAQA,CAAA,EAAS;MAChB,IAAI;QACH,KAAK,MAAMJ,GAAG,IAAIF,OAAO,CAACO,UAAU,CAAC,CAAC,EAAE;UACvC,IAAIL,GAAG,CAACuB,UAAU,CAAC,GAAGtC,UAAU,GAAG,CAAC,EAAE;YACrCa,OAAO,CAACK,MAAM,CAACH,GAAG,CAAC;UACpB;QACD;MACD,CAAC,CAAC,MAAM;QACP;MAAA;IAEF,CAAC;IAEDwB,SAAS,EAAEA,CAAA,KAAMjB;EAClB,CAAC;AACF;;AAEA;AACO,SAASkB,yBAAyBA,CAAA,EAAkB;EAC1D,MAAMC,MAAM,GAAG,IAAAC,4BAAoB,EAAC,CAAC;EACrC,OAAOnB,mBAAmB,CAAC;IAC1BV,OAAO,EAAE;MACRC,SAAS,EAAEC,GAAG,IAAI0B,MAAM,CAAC3B,SAAS,CAACC,GAAG,CAAC;MACvCC,GAAG,EAAEA,CAACD,GAAG,EAAEE,KAAK,KAAKwB,MAAM,CAACzB,GAAG,CAACD,GAAG,EAAEE,KAAK,CAAC;MAC3CC,MAAM,EAAEH,GAAG,IAAI0B,MAAM,CAACvB,MAAM,CAACH,GAAG,CAAC;MACjCI,QAAQ,EAAEA,CAAA,KAAMsB,MAAM,CAACtB,QAAQ,CAAC,CAAC;MACjCC,UAAU,EAAEA,CAAA,KAAMqB,MAAM,CAACpB,IAAI,CAAC;IAC/B,CAAC;IACDC,OAAO,EAAE;EACV,CAAC,CAAC;AACH","ignoreList":[]}

package/lib/commonjs/persistence/snapshot.js

@@ -0,0 +1,229 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SNAPSHOT_SCHEMA_VERSION = exports.SNAPSHOT_MIGRATIONS = void 0;
+exports.emptySnapshot = emptySnapshot;
+exports.migrateSnapshot = migrateSnapshot;
+exports.pendingFinalizations = pendingFinalizations;
+exports.resolveFinalizeState = resolveFinalizeState;
+/**
+ * The persisted snapshot: schema, versioning, and migration.
+ *
+ * What is stored here is **exhaustively** what the package keeps on the device,
+ * and the README repeats this list so an app owner can complete a Data safety
+ * declaration accurately (FR-056, POL-002).
+ *
+ * Deliberately absent: payment details, card data, billing address, user
+ * identity, raw receipts, verification payloads, and backend tokens.
+ */
+
+/**
+ * 2 since 0.6.0: the never-written `entitlements` map and `finalized` state are
+ * gone (PAY-12). Entitlements are always derived from purchases, never stored.
+ */
+const SNAPSHOT_SCHEMA_VERSION = exports.SNAPSHOT_SCHEMA_VERSION = 2;
+
+/** Where a transaction stands with the store. */
+
+/**
+ * Where a transaction stands in the finalization queue.
+ *
+ * `queued` is the load-bearing value: it is written **before** the store call is
+ * attempted, so an app killed mid-finalize leaves a recoverable record rather
+ * than a paid purchase that Google will auto-refund (FR-041, FR-042).
+ */
+
+/** Whether the app's backend has ruled on this transaction (FR-072a). */
+
+function emptySnapshot(scopeToken) {
+  return {
+    schemaVersion: SNAPSHOT_SCHEMA_VERSION,
+    scopeToken,
+    purchases: [],
+    lastSyncedAt: undefined
+  };
+}
+
+/**
+ * A migration from one schema version to the next.
+ *
+ * Kept as an ordered chain rather than a switch so each step stays small and
+ * independently testable, and so a device several versions behind is carried
+ * forward one hop at a time (NFR-009).
+ */
+
+/** Registered migrations, one hop each. */
+const SNAPSHOT_MIGRATIONS = exports.SNAPSHOT_MIGRATIONS = [{
+  // v1 stored an `entitlements` map nothing ever wrote to, and a `finalized`
+  // purchase state nothing ever set (PAY-12). Both go; a `finalized` record,
+  // should one exist, is a purchased one whose finalize progress is kept.
+  from: 1,
+  to: 2,
+  migrate(input) {
+    const rest = {
+      ...input
+    };
+    delete rest.entitlements;
+    const purchases = Array.isArray(rest.purchases) ? rest.purchases.map(record => typeof record === 'object' && record !== null && record.state === 'finalized' ? {
+      ...record,
+      state: 'purchased'
+    } : record) : rest.purchases;
+    return {
+      ...rest,
+      schemaVersion: 2,
+      purchases
+    };
+  }
+}];
+function migrateSnapshot(raw) {
+  if (typeof raw !== 'object' || raw === null) {
+    return {
+      ok: false,
+      reason: 'unreadable'
+    };
+  }
+  let working = {
+    ...raw
+  };
+  const version = working.schemaVersion;
+  if (typeof version !== 'number' || !Number.isInteger(version) || version < 1) {
+    return {
+      ok: false,
+      reason: 'unreadable'
+    };
+  }
+  if (version > SNAPSHOT_SCHEMA_VERSION) {
+    // A newer app version wrote this. Downgrading cannot know what was added,
+    // so refuse rather than silently drop fields.
+    return {
+      ok: false,
+      reason: 'unsupported_version'
+    };
+  }
+  let current = version;
+  let migrated = false;
+  while (current < SNAPSHOT_SCHEMA_VERSION) {
+    const step = SNAPSHOT_MIGRATIONS.find(m => m.from === current);
+    if (!step) {
+      return {
+        ok: false,
+        reason: 'unsupported_version'
+      };
+    }
+    working = step.migrate(working);
+    current = step.to;
+    migrated = true;
+  }
+  const snapshot = coerceSnapshot(working);
+  return snapshot ? {
+    ok: true,
+    snapshot,
+    migrated
+  } : {
+    ok: false,
+    reason: 'unreadable'
+  };
+}
+
+/**
+ * Validates shape after migration.
+ *
+ * Runs even on a non-migrated record because the bytes came off a device where
+ * anything could have happened to them — a partial write, a rooted user, a
+ * truncated file.
+ */
+function coerceSnapshot(input) {
+  const purchases = input.purchases;
+  if (!Array.isArray(purchases)) {
+    return null;
+  }
+  const lastSyncedAt = typeof input.lastSyncedAt === 'number' ? input.lastSyncedAt : undefined;
+  const scopeToken = typeof input.scopeToken === 'string' ? input.scopeToken : undefined;
+  return {
+    schemaVersion: SNAPSHOT_SCHEMA_VERSION,
+    scopeToken,
+    // Record by record: one damaged entry is dropped, not trusted and not
+    // allowed to discard the rest (PAY-13). A dropped record comes back with the
+    // next sync, if the store still reports it.
+    purchases: purchases.flatMap(record => {
+      const valid = coercePurchase(record);
+      return valid ? [valid] : [];
+    }),
+    lastSyncedAt
+  };
+}
+const PURCHASE_STATES = new Set(['pending', 'purchased', 'consumed', 'revoked']);
+const FINALIZE_STATES = new Set(['not_required', 'queued', 'in_flight', 'done', 'failed']);
+const VALIDATION_STATES = new Set(['not_required', 'approved', 'rejected', 'queued_for_revalidation']);
+const PRODUCT_TYPES = new Set(['one_time_permanent', 'one_time_consumable', 'subscription']);
+
+/** A persisted purchase with every field checked, or null when any is wrong. */
+function coercePurchase(input) {
+  if (typeof input !== 'object' || input === null) {
+    return null;
+  }
+  const record = input;
+  const text = value => typeof value === 'string' && value !== '';
+  const count = value => typeof value === 'number' && Number.isFinite(value) && value >= 0;
+  if (!text(record.transactionId) || !text(record.productKey) || !text(record.token) || !PRODUCT_TYPES.has(record.productType) || !PURCHASE_STATES.has(record.state) || !FINALIZE_STATES.has(record.finalizeState) || !VALIDATION_STATES.has(record.validationState) || !count(record.purchasedAt) || !count(record.attempts) || record.expiresAt !== undefined && !count(record.expiresAt) || record.willAutoRenew !== undefined && typeof record.willAutoRenew !== 'boolean') {
+    return null;
+  }
+  return {
+    transactionId: record.transactionId,
+    productKey: record.productKey,
+    productType: record.productType,
+    token: record.token,
+    state: record.state,
+    purchasedAt: record.purchasedAt,
+    finalizeState: record.finalizeState,
+    attempts: record.attempts,
+    validationState: record.validationState,
+    expiresAt: record.expiresAt,
+    willAutoRenew: record.willAutoRenew
+  };
+}
+
+/**
+ * Decides a purchase's finalization state from the store's view plus what we
+ * already knew.
+ *
+ * Shared by the sync path and the purchase path so they cannot drift — and they
+ * must not, because a disagreement here is how a paid transaction goes
+ * unacknowledged and gets auto-refunded three days later.
+ *
+ * The subtle case is a **pending purchase that settles**. Its record was written
+ * with `not_required`, which was correct while the money had not arrived. Once the
+ * store reports it `purchased`, that value must be re-evaluated rather than
+ * preserved — otherwise the transaction is never queued, never acknowledged, and
+ * Google revokes it. Progress is preserved only for a transaction that was
+ * already in the queue.
+ */
+function resolveFinalizeState(incoming, existing) {
+  if (incoming.state === 'pending') {
+    // Nothing to settle: there is no entitlement to report as delivered.
+    return 'not_required';
+  }
+
+  // Already settled at the store, whatever we thought locally.
+  if (incoming.isAcknowledged) {
+    return 'done';
+  }
+
+  // Genuine in-queue progress is preserved, so a sync cannot reset an attempt
+  // count or lose an in-flight finalize.
+  if (existing && existing.finalizeState !== 'not_required' && existing.finalizeState !== 'done') {
+    return existing.finalizeState;
+  }
+
+  // Covers both a brand-new purchase and a previously-pending one that just
+  // settled. Either way it is now owed a finalize call.
+  return 'queued';
+}
+
+/** Transactions still owed a finalize call, drained at startup and on foreground (FR-042). */
+function pendingFinalizations(snapshot) {
+  return snapshot.purchases.filter(p => (p.finalizeState === 'queued' || p.finalizeState === 'in_flight' || p.finalizeState === 'failed') && p.state !== 'revoked');
+}
+//# sourceMappingURL=snapshot.js.map

package/lib/commonjs/persistence/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["SNAPSHOT_SCHEMA_VERSION","exports","emptySnapshot","scopeToken","schemaVersion","purchases","lastSyncedAt","undefined","SNAPSHOT_MIGRATIONS","from","to","migrate","input","rest","entitlements","Array","isArray","map","record","state","migrateSnapshot","raw","ok","reason","working","version","Number","isInteger","current","migrated","step","find","m","snapshot","coerceSnapshot","flatMap","valid","coercePurchase","PURCHASE_STATES","Set","FINALIZE_STATES","VALIDATION_STATES","PRODUCT_TYPES","text","value","count","isFinite","transactionId","productKey","token","has","productType","finalizeState","validationState","purchasedAt","attempts","expiresAt","willAutoRenew","resolveFinalizeState","incoming","existing","isAcknowledged","pendingFinalizations","filter","p"],"sourceRoot":"../../../src","sources":["persistence/snapshot.ts"],"mappings":";;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACO,MAAMA,uBAAuB,GAAAC,OAAA,CAAAD,uBAAA,GAAG,CAAC;;AAExC;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA;;AA2BO,SAASE,aAAaA,CAACC,UAAmB,EAAqB;EACrE,OAAO;IACNC,aAAa,EAAEJ,uBAAuB;IACtCG,UAAU;IACVE,SAAS,EAAE,EAAE;IACbC,YAAY,EAAEC;EACf,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACO,MAAMC,mBAAiD,GAAAP,OAAA,CAAAO,mBAAA,GAAG,CAChE;EACC;EACA;EACA;EACAC,IAAI,EAAE,CAAC;EACPC,EAAE,EAAE,CAAC;EACLC,OAAOA,CAACC,KAAK,EAAE;IACd,MAAMC,IAAI,GAAG;MAAE,GAAGD;IAAM,CAAC;IACzB,OAAOC,IAAI,CAACC,YAAY;IACxB,MAAMT,SAAS,GAAGU,KAAK,CAACC,OAAO,CAACH,IAAI,CAACR,SAAS,CAAC,GAC5CQ,IAAI,CAACR,SAAS,CAACY,GAAG,CAACC,MAAM,IACzB,OAAOA,MAAM,KAAK,QAAQ,IAC1BA,MAAM,KAAK,IAAI,IACdA,MAAM,CAAyBC,KAAK,KAAK,WAAW,GAClD;MAAE,GAAID,MAAiB;MAAEC,KAAK,EAAE;IAAY,CAAC,GAC7CD,MACJ,CAAC,GACAL,IAAI,CAACR,SAAS;IACjB,OAAO;MAAE,GAAGQ,IAAI;MAAET,aAAa,EAAE,CAAC;MAAEC;IAAU,CAAC;EAChD;AACD,CAAC,CACD;AAcM,SAASe,eAAeA,CAACC,GAAY,EAAoB;EAC/D,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAIA,GAAG,KAAK,IAAI,EAAE;IAC5C,OAAO;MAAEC,EAAE,EAAE,KAAK;MAAEC,MAAM,EAAE;IAAa,CAAC;EAC3C;EAEA,IAAIC,OAAO,GAAG;IAAE,GAAIH;EAAgC,CAAC;EACrD,MAAMI,OAAO,GAAGD,OAAO,CAACpB,aAAa;EAErC,IAAI,OAAOqB,OAAO,KAAK,QAAQ,IAAI,CAACC,MAAM,CAACC,SAAS,CAACF,OAAO,CAAC,IAAIA,OAAO,GAAG,CAAC,EAAE;IAC7E,OAAO;MAAEH,EAAE,EAAE,KAAK;MAAEC,MAAM,EAAE;IAAa,CAAC;EAC3C;EAEA,IAAIE,OAAO,GAAGzB,uBAAuB,EAAE;IACtC;IACA;IACA,OAAO;MAAEsB,EAAE,EAAE,KAAK;MAAEC,MAAM,EAAE;IAAsB,CAAC;EACpD;EAEA,IAAIK,OAAO,GAAGH,OAAO;EACrB,IAAII,QAAQ,GAAG,KAAK;EACpB,OAAOD,OAAO,GAAG5B,uBAAuB,EAAE;IACzC,MAAM8B,IAAI,GAAGtB,mBAAmB,CAACuB,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACvB,IAAI,KAAKmB,OAAO,CAAC;IAC9D,IAAI,CAACE,IAAI,EAAE;MACV,OAAO;QAAER,EAAE,EAAE,KAAK;QAAEC,MAAM,EAAE;MAAsB,CAAC;IACpD;IACAC,OAAO,GAAGM,IAAI,CAACnB,OAAO,CAACa,OAAO,CAAC;IAC/BI,OAAO,GAAGE,IAAI,CAACpB,EAAE;IACjBmB,QAAQ,GAAG,IAAI;EAChB;EAEA,MAAMI,QAAQ,GAAGC,cAAc,CAACV,OAAO,CAAC;EACxC,OAAOS,QAAQ,GAAG;IAAEX,EAAE,EAAE,IAAI;IAAEW,QAAQ;IAAEJ;EAAS,CAAC,GAAG;IAAEP,EAAE,EAAE,KAAK;IAAEC,MAAM,EAAE;EAAa,CAAC;AACzF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASW,cAAcA,CAACtB,KAA8B,EAA4B;EACjF,MAAMP,SAAS,GAAGO,KAAK,CAACP,SAAS;EACjC,IAAI,CAACU,KAAK,CAACC,OAAO,CAACX,SAAS,CAAC,EAAE;IAC9B,OAAO,IAAI;EACZ;EAEA,MAAMC,YAAY,GAAG,OAAOM,KAAK,CAACN,YAAY,KAAK,QAAQ,GAAGM,KAAK,CAACN,YAAY,GAAGC,SAAS;EAC5F,MAAMJ,UAAU,GAAG,OAAOS,KAAK,CAACT,UAAU,KAAK,QAAQ,GAAGS,KAAK,CAACT,UAAU,GAAGI,SAAS;EAEtF,OAAO;IACNH,aAAa,EAAEJ,uBAAuB;IACtCG,UAAU;IACV;IACA;IACA;IACAE,SAAS,EAAEA,SAAS,CAAC8B,OAAO,CAACjB,MAAM,IAAI;MACtC,MAAMkB,KAAK,GAAGC,cAAc,CAACnB,MAAM,CAAC;MACpC,OAAOkB,KAAK,GAAG,CAACA,KAAK,CAAC,GAAG,EAAE;IAC5B,CAAC,CAAC;IACF9B;EACD,CAAC;AACF;AAEA,MAAMgC,eAAoC,GAAG,IAAIC,GAAG,CAAC,CACpD,SAAS,EACT,WAAW,EACX,UAAU,EACV,SAAS,CACT,CAAC;AACF,MAAMC,eAAoC,GAAG,IAAID,GAAG,CAAC,CACpD,cAAc,EACd,QAAQ,EACR,WAAW,EACX,MAAM,EACN,QAAQ,CACR,CAAC;AACF,MAAME,iBAAsC,GAAG,IAAIF,GAAG,CAAC,CACtD,cAAc,EACd,UAAU,EACV,UAAU,EACV,yBAAyB,CACzB,CAAC;AACF,MAAMG,aAAkC,GAAG,IAAIH,GAAG,CAAC,CAClD,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,CACd,CAAC;;AAEF;AACA,SAASF,cAAcA,CAACzB,KAAc,EAA4B;EACjE,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,EAAE;IAChD,OAAO,IAAI;EACZ;EACA,MAAMM,MAAM,GAAGN,KAAgC;EAC/C,MAAM+B,IAAI,GAAIC,KAAc,IAAsB,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,EAAE;EAC3F,MAAMC,KAAK,GAAID,KAAc,IAC5B,OAAOA,KAAK,KAAK,QAAQ,IAAIlB,MAAM,CAACoB,QAAQ,CAACF,KAAK,CAAC,IAAIA,KAAK,IAAI,CAAC;EAClE,IACC,CAACD,IAAI,CAACzB,MAAM,CAAC6B,aAAa,CAAC,IAC3B,CAACJ,IAAI,CAACzB,MAAM,CAAC8B,UAAU,CAAC,IACxB,CAACL,IAAI,CAACzB,MAAM,CAAC+B,KAAK,CAAC,IACnB,CAACP,aAAa,CAACQ,GAAG,CAAChC,MAAM,CAACiC,WAAqB,CAAC,IAChD,CAACb,eAAe,CAACY,GAAG,CAAChC,MAAM,CAACC,KAAe,CAAC,IAC5C,CAACqB,eAAe,CAACU,GAAG,CAAChC,MAAM,CAACkC,aAAuB,CAAC,IACpD,CAACX,iBAAiB,CAACS,GAAG,CAAChC,MAAM,CAACmC,eAAyB,CAAC,IACxD,CAACR,KAAK,CAAC3B,MAAM,CAACoC,WAAW,CAAC,IAC1B,CAACT,KAAK,CAAC3B,MAAM,CAACqC,QAAQ,CAAC,IACtBrC,MAAM,CAACsC,SAAS,KAAKjD,SAAS,IAAI,CAACsC,KAAK,CAAC3B,MAAM,CAACsC,SAAS,CAAE,IAC3DtC,MAAM,CAACuC,aAAa,KAAKlD,SAAS,IAAI,OAAOW,MAAM,CAACuC,aAAa,KAAK,SAAU,EAChF;IACD,OAAO,IAAI;EACZ;EACA,OAAO;IACNV,aAAa,EAAE7B,MAAM,CAAC6B,aAAa;IACnCC,UAAU,EAAE9B,MAAM,CAAC8B,UAAU;IAC7BG,WAAW,EAAEjC,MAAM,CAACiC,WAA+C;IACnEF,KAAK,EAAE/B,MAAM,CAAC+B,KAAK;IACnB9B,KAAK,EAAED,MAAM,CAACC,KAA+B;IAC7CmC,WAAW,EAAEpC,MAAM,CAACoC,WAAW;IAC/BF,aAAa,EAAElC,MAAM,CAACkC,aAAuC;IAC7DG,QAAQ,EAAErC,MAAM,CAACqC,QAAQ;IACzBF,eAAe,EAAEnC,MAAM,CAACmC,eAA2C;IACnEG,SAAS,EAAEtC,MAAM,CAACsC,SAA+B;IACjDC,aAAa,EAAEvC,MAAM,CAACuC;EACvB,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,oBAAoBA,CACnCC,QAAqF,EACrFC,QAA+D,EACtC;EACzB,IAAID,QAAQ,CAACxC,KAAK,KAAK,SAAS,EAAE;IACjC;IACA,OAAO,cAAc;EACtB;;EAEA;EACA,IAAIwC,QAAQ,CAACE,cAAc,EAAE;IAC5B,OAAO,MAAM;EACd;;EAEA;EACA;EACA,IAAID,QAAQ,IAAIA,QAAQ,CAACR,aAAa,KAAK,cAAc,IAAIQ,QAAQ,CAACR,aAAa,KAAK,MAAM,EAAE;IAC/F,OAAOQ,QAAQ,CAACR,aAAa;EAC9B;;EAEA;EACA;EACA,OAAO,QAAQ;AAChB;;AAEA;AACO,SAASU,oBAAoBA,CAAC7B,QAA2B,EAAuB;EACtF,OAAOA,QAAQ,CAAC5B,SAAS,CAAC0D,MAAM,CAC/BC,CAAC,IACA,CAACA,CAAC,CAACZ,aAAa,KAAK,QAAQ,IAC5BY,CAAC,CAACZ,aAAa,KAAK,WAAW,IAC/BY,CAAC,CAACZ,aAAa,KAAK,QAAQ,KAC7BY,CAAC,CAAC7C,KAAK,KAAK,SACd,CAAC;AACF","ignoreList":[]}