@entitlehub/sdk 0.1.0

package/README.md

@@ -0,0 +1,110 @@
+# @entitlehub/sdk
+
+One entitlement API across **App Store, Google Play, Stripe, and web** — for browsers, React Native, Expo, and Node. Stop checking raw product IDs; ask *"what is this user entitled to right now?"*
+
+```bash
+npm install @entitlehub/sdk
+```
+
+Zero dependencies. Uses the global `fetch` (Node 18+, all modern browsers, React Native, Expo).
+
+## Client (in your app) — publishable key
+
+Reads only. Safe to ship in your app. **Never put a secret (`sk_`) key here.**
+
+```ts
+import { EntitleHub } from "@entitlehub/sdk";
+
+const eh = new EntitleHub({
+  apiKey: "pk_live_…",     // your publishable key
+  appUserId: user.id,      // your own stable user id
+});
+
+const info = await eh.getCustomerInfo();
+if (info.isActive("pro")) {
+  unlockProFeatures();
+}
+
+// full detail when you need it
+const pro = info.active["pro"];
+// → { entitlement: "pro", status: "active", store: "app_store", expires_at, will_renew, … }
+```
+
+### React / React Native
+
+```tsx
+const eh = new EntitleHub({ apiKey: "pk_live_…", appUserId: user.id });
+
+useEffect(() => {
+  const unsub = eh.addCustomerInfoUpdateListener((info) => setPro(info.isActive("pro")));
+  eh.getCustomerInfo();               // triggers the listener
+  return unsub;
+}, []);
+```
+
+### After your own login / logout
+
+```ts
+await eh.logIn(newUserId);   // switches user, refreshes, clears cache
+eh.logOut();                 // forget cached info
+```
+
+### API (client)
+
+| Method | Returns | Notes |
+|---|---|---|
+| `getCustomerInfo({ fetchPolicy })` | `CustomerInfo` | `cache-first` (default) or `network-only`. Cached `cacheTtlMs` (5 min default). |
+| `isEntitled(id)` | `boolean` | Convenience over cached info. |
+| `checkEntitlement(id)` | `CheckResult` | Always hits the server; includes a `reason` when inactive. |
+| `getOfferings()` | `Offerings` | Entitlements + products, for building a paywall. |
+| `addCustomerInfoUpdateListener(fn)` | `() => void` | Returns an unsubscribe. |
+
+## Server (in your backend) — secret key
+
+Report purchases and grant entitlements. **Server only.**
+
+```ts
+import { EntitleHubServer } from "@entitlehub/sdk";
+
+const eh = new EntitleHubServer({ apiKey: process.env.ENTITLEHUB_SECRET_KEY! });
+
+// After the store purchase is confirmed on-device, report it from your server:
+const info = await eh.reportPurchase(userId, {
+  store: "app_store",
+  storeProductId: "pro_monthly",
+});
+info.isActive("pro"); // → true
+
+// Grant directly (promo / comp / support), no purchase:
+await eh.grantEntitlement(userId, "pro", { durationDays: 30 });
+```
+
+| Method | Returns |
+|---|---|
+| `reportPurchase(userId, { store, storeProductId, isSandbox?, transactionId? })` | `CustomerInfo` |
+| `grantEntitlement(userId, id, { durationDays?, isSandbox? })` | `CustomerInfo` |
+| `getCustomerInfo(userId)` / `check(userId, id)` | `CustomerInfo` / `CheckResult` |
+
+## Already have an IAP setup?
+
+Keep making the actual store purchase with your existing IAP flow (StoreKit / Play Billing /
+`expo-iap` / `react-native-iap`), then `reportPurchase(...)` from your server and read entitlements
+with `getCustomerInfo()`. See the full guide at [entitlehub.com/docs](https://entitlehub.com).
+
+## Errors
+
+Every failure throws an `EntitleHubError` with `.status` and `.code` (`auth` | `http` | `network` | `config`).
+
+```ts
+import { EntitleHubError } from "@entitlehub/sdk";
+try { await eh.getCustomerInfo(); }
+catch (e) { if (e instanceof EntitleHubError && e.code === "auth") relogin(); }
+```
+
+## Self-hosting
+
+Point the SDK at your own EntitleHub with `baseUrl`:
+
+```ts
+new EntitleHub({ apiKey, appUserId, baseUrl: "https://entitlements.yourco.com/v1" });
+```

package/dist/index.cjs

@@ -0,0 +1 @@
+"use strict";var d=Object.defineProperty;var C=Object.getOwnPropertyDescriptor;var k=Object.getOwnPropertyNames;var E=Object.prototype.hasOwnProperty;var x=(n,e)=>{for(var t in e)d(n,t,{get:e[t],enumerable:!0})},v=(n,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of k(e))!E.call(n,i)&&i!==t&&d(n,i,{get:()=>e[i],enumerable:!(r=C(e,i))||r.enumerable});return n};var O=n=>v(d({},"__esModule",{value:!0}),n);var T={};x(T,{CustomerInfo:()=>a,EntitleHub:()=>l,EntitleHubError:()=>s,EntitleHubServer:()=>f});module.exports=O(T);var a=class{constructor(e){this.appUserId=e.app_user_id,this.entitlements=e.active_entitlements??[];let t={};for(let r of this.entitlements)t[r.entitlement]=r;this.active=t}isActive(e){return!!this.active[e]}get activeEntitlementIds(){return Object.keys(this.active)}expirationDate(e){let t=this.active[e];if(t)return t.expires_at?new Date(t.expires_at):null}};var s=class extends Error{constructor(e,t,r="error"){super(e),this.name="EntitleHubError",this.status=t,this.code=r}},P=n=>new Promise(e=>setTimeout(e,n));async function c(n,e,t,r){let i=n.fetchImpl??globalThis.fetch;if(!i)throw new s("No fetch implementation available. On Node <18, pass fetchImpl.",0,"no_fetch");let h=`${n.baseUrl.replace(/\/$/,"")}${t}`,y=e==="GET"?n.retries??2:0,m;for(let u=0;u<=y;u++){let b=new AbortController,g=n.timeoutMs?setTimeout(()=>b.abort(),n.timeoutMs):void 0;try{let o=await i(h,{method:e,headers:{Authorization:`Bearer ${n.apiKey}`,...r?{"Content-Type":"application/json"}:{}},body:r?JSON.stringify(r):void 0,signal:b.signal}),I=await o.text(),p=I?_(I):{};if(!o.ok){let w=`HTTP ${o.status}`;throw p&&typeof p=="object"&&"error"in p&&(w=String(p.error)),new s(w,o.status,o.status===401||o.status===403?"auth":"http")}return p}catch(o){if(m=o,o instanceof s)throw o;u<y&&await P(250*(u+1))}finally{g&&clearTimeout(g)}}throw new s(`Network request failed: ${String(m?.message??m)}`,0,"network")}function _(n){try{return JSON.parse(n)}catch{return{}}}var l=class{constructor(e){this.listeners=new Set;if(!e.apiKey)throw new s("apiKey is required.",0,"config");if(!e.appUserId)throw new s("appUserId is required.",0,"config");if(e.apiKey.startsWith("sk_"))throw new s("Never use a secret (sk_) key in the client SDK \u2014 use your publishable (pk_) key.",0,"config");this.appUserId=e.appUserId,this.cacheTtlMs=e.cacheTtlMs??5*6e4,this.http={baseUrl:e.baseUrl??"https://entitlehub.com/v1",apiKey:e.apiKey,fetchImpl:e.fetchImpl,timeoutMs:15e3}}get currentAppUserId(){return this.appUserId}async logIn(e){return this.appUserId=e,this.cached=void 0,this.getCustomerInfo({fetchPolicy:"network-only"})}logOut(){this.cached=void 0}async getCustomerInfo(e={}){if((e.fetchPolicy??"cache-first")==="cache-first"&&this.cached&&Date.now()-this.cached.at<this.cacheTtlMs)return this.cached.info;let r=await c(this.http,"GET",`/subscribers/${encodeURIComponent(this.appUserId)}`),i=new a(r);this.cached={info:i,at:Date.now()};for(let h of this.listeners)try{h(i)}catch{}return i}async isEntitled(e){return(await this.getCustomerInfo()).isActive(e)}async checkEntitlement(e,t={}){return c(this.http,"POST","/check",{app_user_id:this.appUserId,entitlement:e,sandbox:!!t.sandbox})}async getOfferings(){return c(this.http,"GET","/offerings")}addCustomerInfoUpdateListener(e){return this.listeners.add(e),()=>this.listeners.delete(e)}};var f=class{constructor(e){if(!e.apiKey)throw new s("apiKey is required.",0,"config");if(!e.apiKey.startsWith("sk_"))throw new s("EntitleHubServer needs a secret (sk_) key. For client reads, use the EntitleHub class with a pk_ key.",0,"config");this.http={baseUrl:e.baseUrl??"https://entitlehub.com/v1",apiKey:e.apiKey,fetchImpl:e.fetchImpl,timeoutMs:15e3}}async reportPurchase(e,t){let r=await c(this.http,"POST",`/subscribers/${encodeURIComponent(e)}/purchases`,{store:t.store,store_product_id:t.storeProductId,is_sandbox:!!t.isSandbox,transaction_id:t.transactionId??"",purchase_token:t.purchaseToken??"",is_subscription:!!t.isSubscription,signed_transaction:t.signedTransaction??""});return new a(r)}async grantEntitlement(e,t,r={}){let i=await c(this.http,"POST",`/subscribers/${encodeURIComponent(e)}/grant`,{entitlement:t,duration_days:r.durationDays??0,is_sandbox:!!r.isSandbox});return new a(i)}async getCustomerInfo(e){let t=await c(this.http,"GET",`/subscribers/${encodeURIComponent(e)}`);return new a(t)}async check(e,t,r={}){return c(this.http,"POST","/check",{app_user_id:e,entitlement:t,sandbox:!!r.sandbox})}};0&&(module.exports={CustomerInfo,EntitleHub,EntitleHubError,EntitleHubServer});

package/dist/index.d.cts

@@ -0,0 +1,195 @@
+type Store = "app_store" | "play" | "stripe" | "web" | "amazon";
+type EntitlementStatus = "active" | "trial" | "grace" | "expired" | "revoked";
+/** One entitlement a subscriber currently holds (from GET /v1/subscribers/{id}). */
+interface ActiveEntitlement {
+    entitlement: string;
+    status: EntitlementStatus | string;
+    store: Store | string;
+    product: string;
+    expires_at: string | null;
+    will_renew: boolean;
+    since: string | null;
+}
+/** Raw customer payload from the API. */
+interface CustomerInfoResponse {
+    app_user_id: string;
+    active_entitlements: ActiveEntitlement[];
+}
+/** Result of POST /v1/check for a single entitlement. */
+interface CheckResult {
+    app_user_id: string;
+    entitlement: string;
+    active: boolean;
+    status?: string;
+    store?: string;
+    product?: string;
+    expires_at?: string;
+    will_renew: boolean;
+    since?: string;
+    /** When inactive, why: unknown_entitlement | unknown_subscriber | no_active_grant. */
+    reason?: string;
+}
+interface OfferingEntitlement {
+    id: string;
+    key: string;
+    name: string;
+    description: string;
+    active_count: number;
+    product_count: number;
+    stores: Store[];
+}
+interface OfferingProduct {
+    id: string;
+    store: Store;
+    store_product_id: string;
+    type: "subscription" | "non_consumable" | "consumable" | string;
+    duration: string;
+    display_name: string;
+    price_micros: number;
+    currency: string;
+    entitlements: string[];
+}
+interface Offerings {
+    entitlements: OfferingEntitlement[];
+    products: OfferingProduct[];
+}
+interface PurchaseInput {
+    store: Store;
+    storeProductId: string;
+    isSandbox?: boolean;
+    transactionId?: string;
+    /**
+     * Google Play purchase token. When set, EntitleHub validates it against the project's
+     * Play service account before granting (the authenticated expiry wins). Pair with
+     * `isSubscription` for auto-renewable products.
+     */
+    purchaseToken?: string;
+    /** Google Play: true for an auto-renewable subscription, false/omit for a one-time product. */
+    isSubscription?: boolean;
+    /**
+     * Apple StoreKit 2 signed transaction (JWS). When set, EntitleHub verifies it against
+     * Apple's root CA; the authenticated product id / environment override `store` /
+     * `storeProductId`, so a client can't forge a purchase.
+     */
+    signedTransaction?: string;
+}
+
+/**
+ * Ergonomic wrapper around a subscriber's active entitlements — the object your UI reads.
+ *
+ *   const info = await eh.getCustomerInfo();
+ *   if (info.isActive("pro")) showProFeatures();
+ *   const ent = info.active["pro"];         // full detail (expiry, store, willRenew)
+ */
+declare class CustomerInfo {
+    readonly appUserId: string;
+    /** Active entitlements keyed by identifier. */
+    readonly active: Readonly<Record<string, ActiveEntitlement>>;
+    /** Raw list, in case you want to iterate. */
+    readonly entitlements: readonly ActiveEntitlement[];
+    constructor(raw: CustomerInfoResponse);
+    /** True if the subscriber currently holds this entitlement. */
+    isActive(entitlementId: string): boolean;
+    /** All active entitlement identifiers. */
+    get activeEntitlementIds(): string[];
+    /** Expiry for an entitlement (null = lifetime, undefined = not held). */
+    expirationDate(entitlementId: string): Date | null | undefined;
+}
+
+interface EntitleHubOptions {
+    /** Your publishable key (pk_live_… / pk_test_…). Client-safe. */
+    apiKey: string;
+    /** The user this device is acting as (your own stable user id). */
+    appUserId: string;
+    /** Override the API base (defaults to https://entitlehub.com/v1). */
+    baseUrl?: string;
+    /** Custom fetch (Node <18, tests). Defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    /** How long a cached CustomerInfo is considered fresh, ms (default 5 min). */
+    cacheTtlMs?: number;
+}
+type CustomerInfoListener = (info: CustomerInfo) => void;
+type FetchPolicy = "cache-first" | "network-only";
+/**
+ * The client-side EntitleHub SDK — configure once, then ask "what is this user entitled to?".
+ * Safe for browsers, React Native, and Expo (publishable key only; never ship a secret key).
+ *
+ *   const eh = new EntitleHub({ apiKey: "pk_live_…", appUserId: user.id });
+ *   const info = await eh.getCustomerInfo();
+ *   if (info.isActive("pro")) unlockPro();
+ */
+declare class EntitleHub {
+    private http;
+    private appUserId;
+    private cacheTtlMs;
+    private cached?;
+    private listeners;
+    constructor(opts: EntitleHubOptions);
+    /** The current app user id. */
+    get currentAppUserId(): string;
+    /** Switch the acting user (e.g. after your own login). Clears the cache. */
+    logIn(appUserId: string): Promise<CustomerInfo>;
+    /** Forget the cached user's info. Pair with your own logout. */
+    logOut(): void;
+    /** The subscriber's active entitlements. Cached for `cacheTtlMs`; pass network-only to force a refresh. */
+    getCustomerInfo(opts?: {
+        fetchPolicy?: FetchPolicy;
+    }): Promise<CustomerInfo>;
+    /** Convenience: is this user entitled right now? Uses cached CustomerInfo. */
+    isEntitled(entitlementId: string): Promise<boolean>;
+    /** Authoritative single-entitlement check (always hits the server; includes the reason when inactive). */
+    checkEntitlement(entitlementId: string, opts?: {
+        sandbox?: boolean;
+    }): Promise<CheckResult>;
+    /** The project's entitlements + products — for building a paywall. */
+    getOfferings(): Promise<Offerings>;
+    /** Subscribe to CustomerInfo refreshes. Returns an unsubscribe function. */
+    addCustomerInfoUpdateListener(listener: CustomerInfoListener): () => void;
+}
+
+interface EntitleHubServerOptions {
+    /** Your secret key (sk_live_… / sk_test_…). SERVER ONLY — never ship this to a client. */
+    apiKey: string;
+    baseUrl?: string;
+    fetchImpl?: typeof fetch;
+}
+/**
+ * The server-side EntitleHub SDK — report purchases and grant entitlements from your backend.
+ * Keep this on your server; it uses a secret key.
+ *
+ *   const eh = new EntitleHubServer({ apiKey: process.env.ENTITLEHUB_SECRET_KEY! });
+ *   await eh.reportPurchase(userId, { store: "app_store", storeProductId: "pro_monthly" });
+ */
+declare class EntitleHubServer {
+    private http;
+    constructor(opts: EntitleHubServerOptions);
+    /**
+     * Report a completed store purchase → writes the mapped entitlement grant(s). Returns updated info.
+     *
+     * Three modes (pick one):
+     *   • Google (validated): { store:"play", storeProductId, purchaseToken, isSubscription }
+     *   • Apple (validated):  { signedTransaction }   — store/product are read from the JWS
+     *   • Trusted server-report: { store, storeProductId } — no store validation; only when you've
+     *     already validated the receipt elsewhere.
+     */
+    reportPurchase(appUserId: string, purchase: PurchaseInput): Promise<CustomerInfo>;
+    /** Grant an entitlement directly (promo / comp / support), no store purchase. */
+    grantEntitlement(appUserId: string, entitlementId: string, opts?: {
+        durationDays?: number;
+        isSandbox?: boolean;
+    }): Promise<CustomerInfo>;
+    /** Read a subscriber's active entitlements. */
+    getCustomerInfo(appUserId: string): Promise<CustomerInfo>;
+    /** Authoritative single-entitlement check. */
+    check(appUserId: string, entitlementId: string, opts?: {
+        sandbox?: boolean;
+    }): Promise<CheckResult>;
+}
+
+declare class EntitleHubError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(message: string, status: number, code?: string);
+}
+
+export { type ActiveEntitlement, type CheckResult, CustomerInfo, type CustomerInfoListener, type CustomerInfoResponse, EntitleHub, EntitleHubError, type EntitleHubOptions, EntitleHubServer, type EntitleHubServerOptions, type EntitlementStatus, type FetchPolicy, type OfferingEntitlement, type OfferingProduct, type Offerings, type PurchaseInput, type Store };

package/dist/index.d.ts

@@ -0,0 +1,195 @@
+type Store = "app_store" | "play" | "stripe" | "web" | "amazon";
+type EntitlementStatus = "active" | "trial" | "grace" | "expired" | "revoked";
+/** One entitlement a subscriber currently holds (from GET /v1/subscribers/{id}). */
+interface ActiveEntitlement {
+    entitlement: string;
+    status: EntitlementStatus | string;
+    store: Store | string;
+    product: string;
+    expires_at: string | null;
+    will_renew: boolean;
+    since: string | null;
+}
+/** Raw customer payload from the API. */
+interface CustomerInfoResponse {
+    app_user_id: string;
+    active_entitlements: ActiveEntitlement[];
+}
+/** Result of POST /v1/check for a single entitlement. */
+interface CheckResult {
+    app_user_id: string;
+    entitlement: string;
+    active: boolean;
+    status?: string;
+    store?: string;
+    product?: string;
+    expires_at?: string;
+    will_renew: boolean;
+    since?: string;
+    /** When inactive, why: unknown_entitlement | unknown_subscriber | no_active_grant. */
+    reason?: string;
+}
+interface OfferingEntitlement {
+    id: string;
+    key: string;
+    name: string;
+    description: string;
+    active_count: number;
+    product_count: number;
+    stores: Store[];
+}
+interface OfferingProduct {
+    id: string;
+    store: Store;
+    store_product_id: string;
+    type: "subscription" | "non_consumable" | "consumable" | string;
+    duration: string;
+    display_name: string;
+    price_micros: number;
+    currency: string;
+    entitlements: string[];
+}
+interface Offerings {
+    entitlements: OfferingEntitlement[];
+    products: OfferingProduct[];
+}
+interface PurchaseInput {
+    store: Store;
+    storeProductId: string;
+    isSandbox?: boolean;
+    transactionId?: string;
+    /**
+     * Google Play purchase token. When set, EntitleHub validates it against the project's
+     * Play service account before granting (the authenticated expiry wins). Pair with
+     * `isSubscription` for auto-renewable products.
+     */
+    purchaseToken?: string;
+    /** Google Play: true for an auto-renewable subscription, false/omit for a one-time product. */
+    isSubscription?: boolean;
+    /**
+     * Apple StoreKit 2 signed transaction (JWS). When set, EntitleHub verifies it against
+     * Apple's root CA; the authenticated product id / environment override `store` /
+     * `storeProductId`, so a client can't forge a purchase.
+     */
+    signedTransaction?: string;
+}
+
+/**
+ * Ergonomic wrapper around a subscriber's active entitlements — the object your UI reads.
+ *
+ *   const info = await eh.getCustomerInfo();
+ *   if (info.isActive("pro")) showProFeatures();
+ *   const ent = info.active["pro"];         // full detail (expiry, store, willRenew)
+ */
+declare class CustomerInfo {
+    readonly appUserId: string;
+    /** Active entitlements keyed by identifier. */
+    readonly active: Readonly<Record<string, ActiveEntitlement>>;
+    /** Raw list, in case you want to iterate. */
+    readonly entitlements: readonly ActiveEntitlement[];
+    constructor(raw: CustomerInfoResponse);
+    /** True if the subscriber currently holds this entitlement. */
+    isActive(entitlementId: string): boolean;
+    /** All active entitlement identifiers. */
+    get activeEntitlementIds(): string[];
+    /** Expiry for an entitlement (null = lifetime, undefined = not held). */
+    expirationDate(entitlementId: string): Date | null | undefined;
+}
+
+interface EntitleHubOptions {
+    /** Your publishable key (pk_live_… / pk_test_…). Client-safe. */
+    apiKey: string;
+    /** The user this device is acting as (your own stable user id). */
+    appUserId: string;
+    /** Override the API base (defaults to https://entitlehub.com/v1). */
+    baseUrl?: string;
+    /** Custom fetch (Node <18, tests). Defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    /** How long a cached CustomerInfo is considered fresh, ms (default 5 min). */
+    cacheTtlMs?: number;
+}
+type CustomerInfoListener = (info: CustomerInfo) => void;
+type FetchPolicy = "cache-first" | "network-only";
+/**
+ * The client-side EntitleHub SDK — configure once, then ask "what is this user entitled to?".
+ * Safe for browsers, React Native, and Expo (publishable key only; never ship a secret key).
+ *
+ *   const eh = new EntitleHub({ apiKey: "pk_live_…", appUserId: user.id });
+ *   const info = await eh.getCustomerInfo();
+ *   if (info.isActive("pro")) unlockPro();
+ */
+declare class EntitleHub {
+    private http;
+    private appUserId;
+    private cacheTtlMs;
+    private cached?;
+    private listeners;
+    constructor(opts: EntitleHubOptions);
+    /** The current app user id. */
+    get currentAppUserId(): string;
+    /** Switch the acting user (e.g. after your own login). Clears the cache. */
+    logIn(appUserId: string): Promise<CustomerInfo>;
+    /** Forget the cached user's info. Pair with your own logout. */
+    logOut(): void;
+    /** The subscriber's active entitlements. Cached for `cacheTtlMs`; pass network-only to force a refresh. */
+    getCustomerInfo(opts?: {
+        fetchPolicy?: FetchPolicy;
+    }): Promise<CustomerInfo>;
+    /** Convenience: is this user entitled right now? Uses cached CustomerInfo. */
+    isEntitled(entitlementId: string): Promise<boolean>;
+    /** Authoritative single-entitlement check (always hits the server; includes the reason when inactive). */
+    checkEntitlement(entitlementId: string, opts?: {
+        sandbox?: boolean;
+    }): Promise<CheckResult>;
+    /** The project's entitlements + products — for building a paywall. */
+    getOfferings(): Promise<Offerings>;
+    /** Subscribe to CustomerInfo refreshes. Returns an unsubscribe function. */
+    addCustomerInfoUpdateListener(listener: CustomerInfoListener): () => void;
+}
+
+interface EntitleHubServerOptions {
+    /** Your secret key (sk_live_… / sk_test_…). SERVER ONLY — never ship this to a client. */
+    apiKey: string;
+    baseUrl?: string;
+    fetchImpl?: typeof fetch;
+}
+/**
+ * The server-side EntitleHub SDK — report purchases and grant entitlements from your backend.
+ * Keep this on your server; it uses a secret key.
+ *
+ *   const eh = new EntitleHubServer({ apiKey: process.env.ENTITLEHUB_SECRET_KEY! });
+ *   await eh.reportPurchase(userId, { store: "app_store", storeProductId: "pro_monthly" });
+ */
+declare class EntitleHubServer {
+    private http;
+    constructor(opts: EntitleHubServerOptions);
+    /**
+     * Report a completed store purchase → writes the mapped entitlement grant(s). Returns updated info.
+     *
+     * Three modes (pick one):
+     *   • Google (validated): { store:"play", storeProductId, purchaseToken, isSubscription }
+     *   • Apple (validated):  { signedTransaction }   — store/product are read from the JWS
+     *   • Trusted server-report: { store, storeProductId } — no store validation; only when you've
+     *     already validated the receipt elsewhere.
+     */
+    reportPurchase(appUserId: string, purchase: PurchaseInput): Promise<CustomerInfo>;
+    /** Grant an entitlement directly (promo / comp / support), no store purchase. */
+    grantEntitlement(appUserId: string, entitlementId: string, opts?: {
+        durationDays?: number;
+        isSandbox?: boolean;
+    }): Promise<CustomerInfo>;
+    /** Read a subscriber's active entitlements. */
+    getCustomerInfo(appUserId: string): Promise<CustomerInfo>;
+    /** Authoritative single-entitlement check. */
+    check(appUserId: string, entitlementId: string, opts?: {
+        sandbox?: boolean;
+    }): Promise<CheckResult>;
+}
+
+declare class EntitleHubError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(message: string, status: number, code?: string);
+}
+
+export { type ActiveEntitlement, type CheckResult, CustomerInfo, type CustomerInfoListener, type CustomerInfoResponse, EntitleHub, EntitleHubError, type EntitleHubOptions, EntitleHubServer, type EntitleHubServerOptions, type EntitlementStatus, type FetchPolicy, type OfferingEntitlement, type OfferingProduct, type Offerings, type PurchaseInput, type Store };

package/dist/index.js

@@ -0,0 +1 @@
+var o=class{constructor(e){this.appUserId=e.app_user_id,this.entitlements=e.active_entitlements??[];let t={};for(let n of this.entitlements)t[n.entitlement]=n;this.active=t}isActive(e){return!!this.active[e]}get activeEntitlementIds(){return Object.keys(this.active)}expirationDate(e){let t=this.active[e];if(t)return t.expires_at?new Date(t.expires_at):null}};var s=class extends Error{constructor(e,t,n="error"){super(e),this.name="EntitleHubError",this.status=t,this.code=n}},w=r=>new Promise(e=>setTimeout(e,r));async function a(r,e,t,n){let c=r.fetchImpl??globalThis.fetch;if(!c)throw new s("No fetch implementation available. On Node <18, pass fetchImpl.",0,"no_fetch");let l=`${r.baseUrl.replace(/\/$/,"")}${t}`,d=e==="GET"?r.retries??2:0,f;for(let u=0;u<=d;u++){let y=new AbortController,b=r.timeoutMs?setTimeout(()=>y.abort(),r.timeoutMs):void 0;try{let i=await c(l,{method:e,headers:{Authorization:`Bearer ${r.apiKey}`,...n?{"Content-Type":"application/json"}:{}},body:n?JSON.stringify(n):void 0,signal:y.signal}),g=await i.text(),p=g?C(g):{};if(!i.ok){let I=`HTTP ${i.status}`;throw p&&typeof p=="object"&&"error"in p&&(I=String(p.error)),new s(I,i.status,i.status===401||i.status===403?"auth":"http")}return p}catch(i){if(f=i,i instanceof s)throw i;u<d&&await w(250*(u+1))}finally{b&&clearTimeout(b)}}throw new s(`Network request failed: ${String(f?.message??f)}`,0,"network")}function C(r){try{return JSON.parse(r)}catch{return{}}}var h=class{constructor(e){this.listeners=new Set;if(!e.apiKey)throw new s("apiKey is required.",0,"config");if(!e.appUserId)throw new s("appUserId is required.",0,"config");if(e.apiKey.startsWith("sk_"))throw new s("Never use a secret (sk_) key in the client SDK \u2014 use your publishable (pk_) key.",0,"config");this.appUserId=e.appUserId,this.cacheTtlMs=e.cacheTtlMs??5*6e4,this.http={baseUrl:e.baseUrl??"https://entitlehub.com/v1",apiKey:e.apiKey,fetchImpl:e.fetchImpl,timeoutMs:15e3}}get currentAppUserId(){return this.appUserId}async logIn(e){return this.appUserId=e,this.cached=void 0,this.getCustomerInfo({fetchPolicy:"network-only"})}logOut(){this.cached=void 0}async getCustomerInfo(e={}){if((e.fetchPolicy??"cache-first")==="cache-first"&&this.cached&&Date.now()-this.cached.at<this.cacheTtlMs)return this.cached.info;let n=await a(this.http,"GET",`/subscribers/${encodeURIComponent(this.appUserId)}`),c=new o(n);this.cached={info:c,at:Date.now()};for(let l of this.listeners)try{l(c)}catch{}return c}async isEntitled(e){return(await this.getCustomerInfo()).isActive(e)}async checkEntitlement(e,t={}){return a(this.http,"POST","/check",{app_user_id:this.appUserId,entitlement:e,sandbox:!!t.sandbox})}async getOfferings(){return a(this.http,"GET","/offerings")}addCustomerInfoUpdateListener(e){return this.listeners.add(e),()=>this.listeners.delete(e)}};var m=class{constructor(e){if(!e.apiKey)throw new s("apiKey is required.",0,"config");if(!e.apiKey.startsWith("sk_"))throw new s("EntitleHubServer needs a secret (sk_) key. For client reads, use the EntitleHub class with a pk_ key.",0,"config");this.http={baseUrl:e.baseUrl??"https://entitlehub.com/v1",apiKey:e.apiKey,fetchImpl:e.fetchImpl,timeoutMs:15e3}}async reportPurchase(e,t){let n=await a(this.http,"POST",`/subscribers/${encodeURIComponent(e)}/purchases`,{store:t.store,store_product_id:t.storeProductId,is_sandbox:!!t.isSandbox,transaction_id:t.transactionId??"",purchase_token:t.purchaseToken??"",is_subscription:!!t.isSubscription,signed_transaction:t.signedTransaction??""});return new o(n)}async grantEntitlement(e,t,n={}){let c=await a(this.http,"POST",`/subscribers/${encodeURIComponent(e)}/grant`,{entitlement:t,duration_days:n.durationDays??0,is_sandbox:!!n.isSandbox});return new o(c)}async getCustomerInfo(e){let t=await a(this.http,"GET",`/subscribers/${encodeURIComponent(e)}`);return new o(t)}async check(e,t,n={}){return a(this.http,"POST","/check",{app_user_id:e,entitlement:t,sandbox:!!n.sandbox})}};export{o as CustomerInfo,h as EntitleHub,s as EntitleHubError,m as EntitleHubServer};

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@entitlehub/sdk",
+  "version": "0.1.0",
+  "description": "EntitleHub SDK — one entitlement API across App Store, Google Play, Stripe, and web. Works in browsers, React Native, Expo, and Node.",
+  "keywords": [
+    "entitlehub",
+    "entitlements",
+    "in-app-purchase",
+    "subscriptions",
+    "storekit",
+    "play-billing",
+    "stripe"
+  ],
+  "homepage": "https://entitlehub.com",
+  "repository": { "type": "git", "url": "git+https://github.com/DanCue44/EntitleHub.git", "directory": "sdk" },
+  "license": "MIT",
+  "publishConfig": { "access": "public" },
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup src/index.ts --format esm,cjs --dts --clean --minify",
+    "typecheck": "tsc --noEmit",
+    "test": "node --test",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "devDependencies": {
+    "tsup": "^8.0.0",
+    "typescript": "^5.9.3"
+  }
+}