@entitlehub/sdk 0.1.2 → 0.1.3

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to `@entitlehub/sdk`. Adheres to [Semantic Versioning](https://semver.org/).
 
+## 0.1.3 — 2026-07-18
+
+### Added
+- `reportPurchase` accepts `stripeSubscriptionId` — EntitleHub validates the subscription against
+  your Stripe secret key (active/trialing → granted, current period end as the expiry).
+
 ## 0.1.2 — 2026-07-18
 
 ### Changed

package/dist/index.cjs

@@ -1 +1 @@
-"use strict";var d=Object.defineProperty;var C=Object.getOwnPropertyDescriptor;var k=Object.getOwnPropertyNames;var E=Object.prototype.hasOwnProperty;var x=(n,e)=>{for(var t in e)d(n,t,{get:e[t],enumerable:!0})},v=(n,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of k(e))!E.call(n,i)&&i!==t&&d(n,i,{get:()=>e[i],enumerable:!(r=C(e,i))||r.enumerable});return n};var O=n=>v(d({},"__esModule",{value:!0}),n);var T={};x(T,{CustomerInfo:()=>a,EntitleHub:()=>l,EntitleHubError:()=>s,EntitleHubServer:()=>f});module.exports=O(T);var a=class{constructor(e){this.appUserId=e.app_user_id,this.entitlements=e.active_entitlements??[];let t={};for(let r of this.entitlements)t[r.entitlement]=r;this.active=t}isActive(e){return!!this.active[e]}get activeEntitlementIds(){return Object.keys(this.active)}expirationDate(e){let t=this.active[e];if(t)return t.expires_at?new Date(t.expires_at):null}};var s=class extends Error{constructor(e,t,r="error"){super(e),this.name="EntitleHubError",this.status=t,this.code=r}},P=n=>new Promise(e=>setTimeout(e,n));async function c(n,e,t,r){let i=n.fetchImpl??globalThis.fetch;if(!i)throw new s("No fetch implementation available. On Node <18, pass fetchImpl.",0,"no_fetch");let h=`${n.baseUrl.replace(/\/$/,"")}${t}`,y=e==="GET"?n.retries??2:0,m;for(let u=0;u<=y;u++){let b=new AbortController,g=n.timeoutMs?setTimeout(()=>b.abort(),n.timeoutMs):void 0;try{let o=await i(h,{method:e,headers:{Authorization:`Bearer ${n.apiKey}`,...r?{"Content-Type":"application/json"}:{}},body:r?JSON.stringify(r):void 0,signal:b.signal}),I=await o.text(),p=I?_(I):{};if(!o.ok){let w=`HTTP ${o.status}`;throw p&&typeof p=="object"&&"error"in p&&(w=String(p.error)),new s(w,o.status,o.status===401||o.status===403?"auth":"http")}return p}catch(o){if(m=o,o instanceof s)throw o;u<y&&await P(250*(u+1))}finally{g&&clearTimeout(g)}}throw new s(`Network request failed: ${String(m?.message??m)}`,0,"network")}function _(n){try{return JSON.parse(n)}catch{return{}}}var l=class{constructor(e){this.listeners=new Set;if(!e.apiKey)throw new s("apiKey is required.",0,"config");if(!e.appUserId)throw new s("appUserId is required.",0,"config");if(e.apiKey.startsWith("sk_"))throw new s("Never use a secret (sk_) key in the client SDK \u2014 use your publishable (pk_) key.",0,"config");this.appUserId=e.appUserId,this.cacheTtlMs=e.cacheTtlMs??5*6e4,this.http={baseUrl:e.baseUrl??"https://entitlehub.com/v1",apiKey:e.apiKey,fetchImpl:e.fetchImpl,timeoutMs:15e3}}get currentAppUserId(){return this.appUserId}async logIn(e){return this.appUserId=e,this.cached=void 0,this.getCustomerInfo({fetchPolicy:"network-only"})}logOut(){this.cached=void 0}async getCustomerInfo(e={}){if((e.fetchPolicy??"cache-first")==="cache-first"&&this.cached&&Date.now()-this.cached.at<this.cacheTtlMs)return this.cached.info;let r=await c(this.http,"GET",`/subscribers/${encodeURIComponent(this.appUserId)}`),i=new a(r);this.cached={info:i,at:Date.now()};for(let h of this.listeners)try{h(i)}catch{}return i}async isEntitled(e){return(await this.getCustomerInfo()).isActive(e)}async checkEntitlement(e,t={}){return c(this.http,"POST","/check",{app_user_id:this.appUserId,entitlement:e,sandbox:!!t.sandbox})}async getOfferings(){return c(this.http,"GET","/offerings")}addCustomerInfoUpdateListener(e){return this.listeners.add(e),()=>this.listeners.delete(e)}};var f=class{constructor(e){if(!e.apiKey)throw new s("apiKey is required.",0,"config");if(!e.apiKey.startsWith("sk_"))throw new s("EntitleHubServer needs a secret (sk_) key. For client reads, use the EntitleHub class with a pk_ key.",0,"config");this.http={baseUrl:e.baseUrl??"https://entitlehub.com/v1",apiKey:e.apiKey,fetchImpl:e.fetchImpl,timeoutMs:15e3}}async reportPurchase(e,t){let r=await c(this.http,"POST",`/subscribers/${encodeURIComponent(e)}/purchases`,{store:t.store,store_product_id:t.storeProductId,is_sandbox:!!t.isSandbox,transaction_id:t.transactionId??"",purchase_token:t.purchaseToken??"",is_subscription:!!t.isSubscription,signed_transaction:t.signedTransaction??""});return new a(r)}async grantEntitlement(e,t,r={}){let i=await c(this.http,"POST",`/subscribers/${encodeURIComponent(e)}/grant`,{entitlement:t,duration_days:r.durationDays??0,is_sandbox:!!r.isSandbox});return new a(i)}async getCustomerInfo(e){let t=await c(this.http,"GET",`/subscribers/${encodeURIComponent(e)}`);return new a(t)}async check(e,t,r={}){return c(this.http,"POST","/check",{app_user_id:e,entitlement:t,sandbox:!!r.sandbox})}};0&&(module.exports={CustomerInfo,EntitleHub,EntitleHubError,EntitleHubServer});
+"use strict";var d=Object.defineProperty;var C=Object.getOwnPropertyDescriptor;var k=Object.getOwnPropertyNames;var E=Object.prototype.hasOwnProperty;var x=(n,t)=>{for(var e in t)d(n,e,{get:t[e],enumerable:!0})},v=(n,t,e,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of k(t))!E.call(n,i)&&i!==e&&d(n,i,{get:()=>t[i],enumerable:!(r=C(t,i))||r.enumerable});return n};var _=n=>v(d({},"__esModule",{value:!0}),n);var T={};x(T,{CustomerInfo:()=>a,EntitleHub:()=>l,EntitleHubError:()=>s,EntitleHubServer:()=>f});module.exports=_(T);var a=class{constructor(t){this.appUserId=t.app_user_id,this.entitlements=t.active_entitlements??[];let e={};for(let r of this.entitlements)e[r.entitlement]=r;this.active=e}isActive(t){return!!this.active[t]}get activeEntitlementIds(){return Object.keys(this.active)}expirationDate(t){let e=this.active[t];if(e)return e.expires_at?new Date(e.expires_at):null}};var s=class extends Error{constructor(t,e,r="error"){super(t),this.name="EntitleHubError",this.status=e,this.code=r}},O=n=>new Promise(t=>setTimeout(t,n));async function c(n,t,e,r){let i=n.fetchImpl??globalThis.fetch;if(!i)throw new s("No fetch implementation available. On Node <18, pass fetchImpl.",0,"no_fetch");let h=`${n.baseUrl.replace(/\/$/,"")}${e}`,y=t==="GET"?n.retries??2:0,m;for(let u=0;u<=y;u++){let b=new AbortController,g=n.timeoutMs?setTimeout(()=>b.abort(),n.timeoutMs):void 0;try{let o=await i(h,{method:t,headers:{Authorization:`Bearer ${n.apiKey}`,...r?{"Content-Type":"application/json"}:{}},body:r?JSON.stringify(r):void 0,signal:b.signal}),I=await o.text(),p=I?P(I):{};if(!o.ok){let w=`HTTP ${o.status}`;throw p&&typeof p=="object"&&"error"in p&&(w=String(p.error)),new s(w,o.status,o.status===401||o.status===403?"auth":"http")}return p}catch(o){if(m=o,o instanceof s)throw o;u<y&&await O(250*(u+1))}finally{g&&clearTimeout(g)}}throw new s(`Network request failed: ${String(m?.message??m)}`,0,"network")}function P(n){try{return JSON.parse(n)}catch{return{}}}var l=class{constructor(t){this.listeners=new Set;if(!t.apiKey)throw new s("apiKey is required.",0,"config");if(!t.appUserId)throw new s("appUserId is required.",0,"config");if(t.apiKey.startsWith("sk_"))throw new s("Never use a secret (sk_) key in the client SDK \u2014 use your publishable (pk_) key.",0,"config");this.appUserId=t.appUserId,this.cacheTtlMs=t.cacheTtlMs??5*6e4,this.http={baseUrl:t.baseUrl??"https://entitlehub.com/v1",apiKey:t.apiKey,fetchImpl:t.fetchImpl,timeoutMs:15e3}}get currentAppUserId(){return this.appUserId}async logIn(t){return this.appUserId=t,this.cached=void 0,this.getCustomerInfo({fetchPolicy:"network-only"})}logOut(){this.cached=void 0}async getCustomerInfo(t={}){if((t.fetchPolicy??"cache-first")==="cache-first"&&this.cached&&Date.now()-this.cached.at<this.cacheTtlMs)return this.cached.info;let r=await c(this.http,"GET",`/subscribers/${encodeURIComponent(this.appUserId)}`),i=new a(r);this.cached={info:i,at:Date.now()};for(let h of this.listeners)try{h(i)}catch{}return i}async isEntitled(t){return(await this.getCustomerInfo()).isActive(t)}async checkEntitlement(t,e={}){return c(this.http,"POST","/check",{app_user_id:this.appUserId,entitlement:t,sandbox:!!e.sandbox})}async getOfferings(){return c(this.http,"GET","/offerings")}addCustomerInfoUpdateListener(t){return this.listeners.add(t),()=>this.listeners.delete(t)}};var f=class{constructor(t){if(!t.apiKey)throw new s("apiKey is required.",0,"config");if(!t.apiKey.startsWith("sk_"))throw new s("EntitleHubServer needs a secret (sk_) key. For client reads, use the EntitleHub class with a pk_ key.",0,"config");this.http={baseUrl:t.baseUrl??"https://entitlehub.com/v1",apiKey:t.apiKey,fetchImpl:t.fetchImpl,timeoutMs:15e3}}async reportPurchase(t,e){let r=await c(this.http,"POST",`/subscribers/${encodeURIComponent(t)}/purchases`,{store:e.store,store_product_id:e.storeProductId,is_sandbox:!!e.isSandbox,transaction_id:e.transactionId??"",purchase_token:e.purchaseToken??"",is_subscription:!!e.isSubscription,signed_transaction:e.signedTransaction??"",stripe_subscription_id:e.stripeSubscriptionId??""});return new a(r)}async grantEntitlement(t,e,r={}){let i=await c(this.http,"POST",`/subscribers/${encodeURIComponent(t)}/grant`,{entitlement:e,duration_days:r.durationDays??0,is_sandbox:!!r.isSandbox});return new a(i)}async getCustomerInfo(t){let e=await c(this.http,"GET",`/subscribers/${encodeURIComponent(t)}`);return new a(e)}async check(t,e,r={}){return c(this.http,"POST","/check",{app_user_id:t,entitlement:e,sandbox:!!r.sandbox})}};0&&(module.exports={CustomerInfo,EntitleHub,EntitleHubError,EntitleHubServer});

package/dist/index.d.cts

@@ -72,6 +72,11 @@ interface PurchaseInput {
      * `storeProductId`, so a client can't forge a purchase.
      */
     signedTransaction?: string;
+    /**
+     * Stripe subscription id. When set, EntitleHub validates it against the project's Stripe
+     * secret key (active/trialing → granted, with the current period end as the expiry).
+     */
+    stripeSubscriptionId?: string;
 }
 
 /**
@@ -169,6 +174,7 @@ declare class EntitleHubServer {
      * Three modes (pick one):
      *   • Google (validated): { store:"play", storeProductId, purchaseToken, isSubscription }
      *   • Apple (validated):  { signedTransaction }   — store/product are read from the JWS
+     *   • Stripe (validated): { stripeSubscriptionId } — validated via your Stripe secret key
      *   • Trusted server-report: { store, storeProductId } — no store validation; only when you've
      *     already validated the receipt elsewhere.
      */

package/dist/index.d.ts

@@ -72,6 +72,11 @@ interface PurchaseInput {
      * `storeProductId`, so a client can't forge a purchase.
      */
     signedTransaction?: string;
+    /**
+     * Stripe subscription id. When set, EntitleHub validates it against the project's Stripe
+     * secret key (active/trialing → granted, with the current period end as the expiry).
+     */
+    stripeSubscriptionId?: string;
 }
 
 /**
@@ -169,6 +174,7 @@ declare class EntitleHubServer {
      * Three modes (pick one):
      *   • Google (validated): { store:"play", storeProductId, purchaseToken, isSubscription }
      *   • Apple (validated):  { signedTransaction }   — store/product are read from the JWS
+     *   • Stripe (validated): { stripeSubscriptionId } — validated via your Stripe secret key
      *   • Trusted server-report: { store, storeProductId } — no store validation; only when you've
      *     already validated the receipt elsewhere.
      */

package/dist/index.js

@@ -1 +1 @@
-var o=class{constructor(e){this.appUserId=e.app_user_id,this.entitlements=e.active_entitlements??[];let t={};for(let n of this.entitlements)t[n.entitlement]=n;this.active=t}isActive(e){return!!this.active[e]}get activeEntitlementIds(){return Object.keys(this.active)}expirationDate(e){let t=this.active[e];if(t)return t.expires_at?new Date(t.expires_at):null}};var s=class extends Error{constructor(e,t,n="error"){super(e),this.name="EntitleHubError",this.status=t,this.code=n}},w=r=>new Promise(e=>setTimeout(e,r));async function a(r,e,t,n){let c=r.fetchImpl??globalThis.fetch;if(!c)throw new s("No fetch implementation available. On Node <18, pass fetchImpl.",0,"no_fetch");let l=`${r.baseUrl.replace(/\/$/,"")}${t}`,d=e==="GET"?r.retries??2:0,f;for(let u=0;u<=d;u++){let y=new AbortController,b=r.timeoutMs?setTimeout(()=>y.abort(),r.timeoutMs):void 0;try{let i=await c(l,{method:e,headers:{Authorization:`Bearer ${r.apiKey}`,...n?{"Content-Type":"application/json"}:{}},body:n?JSON.stringify(n):void 0,signal:y.signal}),g=await i.text(),p=g?C(g):{};if(!i.ok){let I=`HTTP ${i.status}`;throw p&&typeof p=="object"&&"error"in p&&(I=String(p.error)),new s(I,i.status,i.status===401||i.status===403?"auth":"http")}return p}catch(i){if(f=i,i instanceof s)throw i;u<d&&await w(250*(u+1))}finally{b&&clearTimeout(b)}}throw new s(`Network request failed: ${String(f?.message??f)}`,0,"network")}function C(r){try{return JSON.parse(r)}catch{return{}}}var h=class{constructor(e){this.listeners=new Set;if(!e.apiKey)throw new s("apiKey is required.",0,"config");if(!e.appUserId)throw new s("appUserId is required.",0,"config");if(e.apiKey.startsWith("sk_"))throw new s("Never use a secret (sk_) key in the client SDK \u2014 use your publishable (pk_) key.",0,"config");this.appUserId=e.appUserId,this.cacheTtlMs=e.cacheTtlMs??5*6e4,this.http={baseUrl:e.baseUrl??"https://entitlehub.com/v1",apiKey:e.apiKey,fetchImpl:e.fetchImpl,timeoutMs:15e3}}get currentAppUserId(){return this.appUserId}async logIn(e){return this.appUserId=e,this.cached=void 0,this.getCustomerInfo({fetchPolicy:"network-only"})}logOut(){this.cached=void 0}async getCustomerInfo(e={}){if((e.fetchPolicy??"cache-first")==="cache-first"&&this.cached&&Date.now()-this.cached.at<this.cacheTtlMs)return this.cached.info;let n=await a(this.http,"GET",`/subscribers/${encodeURIComponent(this.appUserId)}`),c=new o(n);this.cached={info:c,at:Date.now()};for(let l of this.listeners)try{l(c)}catch{}return c}async isEntitled(e){return(await this.getCustomerInfo()).isActive(e)}async checkEntitlement(e,t={}){return a(this.http,"POST","/check",{app_user_id:this.appUserId,entitlement:e,sandbox:!!t.sandbox})}async getOfferings(){return a(this.http,"GET","/offerings")}addCustomerInfoUpdateListener(e){return this.listeners.add(e),()=>this.listeners.delete(e)}};var m=class{constructor(e){if(!e.apiKey)throw new s("apiKey is required.",0,"config");if(!e.apiKey.startsWith("sk_"))throw new s("EntitleHubServer needs a secret (sk_) key. For client reads, use the EntitleHub class with a pk_ key.",0,"config");this.http={baseUrl:e.baseUrl??"https://entitlehub.com/v1",apiKey:e.apiKey,fetchImpl:e.fetchImpl,timeoutMs:15e3}}async reportPurchase(e,t){let n=await a(this.http,"POST",`/subscribers/${encodeURIComponent(e)}/purchases`,{store:t.store,store_product_id:t.storeProductId,is_sandbox:!!t.isSandbox,transaction_id:t.transactionId??"",purchase_token:t.purchaseToken??"",is_subscription:!!t.isSubscription,signed_transaction:t.signedTransaction??""});return new o(n)}async grantEntitlement(e,t,n={}){let c=await a(this.http,"POST",`/subscribers/${encodeURIComponent(e)}/grant`,{entitlement:t,duration_days:n.durationDays??0,is_sandbox:!!n.isSandbox});return new o(c)}async getCustomerInfo(e){let t=await a(this.http,"GET",`/subscribers/${encodeURIComponent(e)}`);return new o(t)}async check(e,t,n={}){return a(this.http,"POST","/check",{app_user_id:e,entitlement:t,sandbox:!!n.sandbox})}};export{o as CustomerInfo,h as EntitleHub,s as EntitleHubError,m as EntitleHubServer};
+var o=class{constructor(t){this.appUserId=t.app_user_id,this.entitlements=t.active_entitlements??[];let e={};for(let n of this.entitlements)e[n.entitlement]=n;this.active=e}isActive(t){return!!this.active[t]}get activeEntitlementIds(){return Object.keys(this.active)}expirationDate(t){let e=this.active[t];if(e)return e.expires_at?new Date(e.expires_at):null}};var s=class extends Error{constructor(t,e,n="error"){super(t),this.name="EntitleHubError",this.status=e,this.code=n}},w=r=>new Promise(t=>setTimeout(t,r));async function a(r,t,e,n){let c=r.fetchImpl??globalThis.fetch;if(!c)throw new s("No fetch implementation available. On Node <18, pass fetchImpl.",0,"no_fetch");let l=`${r.baseUrl.replace(/\/$/,"")}${e}`,d=t==="GET"?r.retries??2:0,f;for(let u=0;u<=d;u++){let y=new AbortController,b=r.timeoutMs?setTimeout(()=>y.abort(),r.timeoutMs):void 0;try{let i=await c(l,{method:t,headers:{Authorization:`Bearer ${r.apiKey}`,...n?{"Content-Type":"application/json"}:{}},body:n?JSON.stringify(n):void 0,signal:y.signal}),g=await i.text(),p=g?C(g):{};if(!i.ok){let I=`HTTP ${i.status}`;throw p&&typeof p=="object"&&"error"in p&&(I=String(p.error)),new s(I,i.status,i.status===401||i.status===403?"auth":"http")}return p}catch(i){if(f=i,i instanceof s)throw i;u<d&&await w(250*(u+1))}finally{b&&clearTimeout(b)}}throw new s(`Network request failed: ${String(f?.message??f)}`,0,"network")}function C(r){try{return JSON.parse(r)}catch{return{}}}var h=class{constructor(t){this.listeners=new Set;if(!t.apiKey)throw new s("apiKey is required.",0,"config");if(!t.appUserId)throw new s("appUserId is required.",0,"config");if(t.apiKey.startsWith("sk_"))throw new s("Never use a secret (sk_) key in the client SDK \u2014 use your publishable (pk_) key.",0,"config");this.appUserId=t.appUserId,this.cacheTtlMs=t.cacheTtlMs??5*6e4,this.http={baseUrl:t.baseUrl??"https://entitlehub.com/v1",apiKey:t.apiKey,fetchImpl:t.fetchImpl,timeoutMs:15e3}}get currentAppUserId(){return this.appUserId}async logIn(t){return this.appUserId=t,this.cached=void 0,this.getCustomerInfo({fetchPolicy:"network-only"})}logOut(){this.cached=void 0}async getCustomerInfo(t={}){if((t.fetchPolicy??"cache-first")==="cache-first"&&this.cached&&Date.now()-this.cached.at<this.cacheTtlMs)return this.cached.info;let n=await a(this.http,"GET",`/subscribers/${encodeURIComponent(this.appUserId)}`),c=new o(n);this.cached={info:c,at:Date.now()};for(let l of this.listeners)try{l(c)}catch{}return c}async isEntitled(t){return(await this.getCustomerInfo()).isActive(t)}async checkEntitlement(t,e={}){return a(this.http,"POST","/check",{app_user_id:this.appUserId,entitlement:t,sandbox:!!e.sandbox})}async getOfferings(){return a(this.http,"GET","/offerings")}addCustomerInfoUpdateListener(t){return this.listeners.add(t),()=>this.listeners.delete(t)}};var m=class{constructor(t){if(!t.apiKey)throw new s("apiKey is required.",0,"config");if(!t.apiKey.startsWith("sk_"))throw new s("EntitleHubServer needs a secret (sk_) key. For client reads, use the EntitleHub class with a pk_ key.",0,"config");this.http={baseUrl:t.baseUrl??"https://entitlehub.com/v1",apiKey:t.apiKey,fetchImpl:t.fetchImpl,timeoutMs:15e3}}async reportPurchase(t,e){let n=await a(this.http,"POST",`/subscribers/${encodeURIComponent(t)}/purchases`,{store:e.store,store_product_id:e.storeProductId,is_sandbox:!!e.isSandbox,transaction_id:e.transactionId??"",purchase_token:e.purchaseToken??"",is_subscription:!!e.isSubscription,signed_transaction:e.signedTransaction??"",stripe_subscription_id:e.stripeSubscriptionId??""});return new o(n)}async grantEntitlement(t,e,n={}){let c=await a(this.http,"POST",`/subscribers/${encodeURIComponent(t)}/grant`,{entitlement:e,duration_days:n.durationDays??0,is_sandbox:!!n.isSandbox});return new o(c)}async getCustomerInfo(t){let e=await a(this.http,"GET",`/subscribers/${encodeURIComponent(t)}`);return new o(e)}async check(t,e,n={}){return a(this.http,"POST","/check",{app_user_id:t,entitlement:e,sandbox:!!n.sandbox})}};export{o as CustomerInfo,h as EntitleHub,s as EntitleHubError,m as EntitleHubServer};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entitlehub/sdk",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "EntitleHub SDK — one entitlement API across App Store, Google Play, Stripe, and web. Works in browsers, React Native, Expo, and Node.",
   "keywords": [
     "entitlehub",