@mrrocket/sdk 0.12.0 → 0.14.0

package/dist/proxy.d.ts

@@ -1,5 +1,6 @@
 import { type CockpitConfig } from "./core.js";
 export { getCockpitConfig } from "./server.js";
+export { type SecurityOptions, reportSuspiciousRequest, watchRequest } from "./security.js";
 /** What `request.cookies` (Next's `RequestCookies`) offers: read, and set so that the page of this request sees the id. */
 interface IncomingCookies {
     get(name: string): {

package/dist/proxy.js

@@ -1,6 +1,7 @@
 // src/proxy.ts
 import { ID_COOKIE, PREVIEW_PARAM, newDistinctId, parsePreview, redirectFor } from "./core.js";
 import { getCockpitConfig } from "./server.js";
+import { reportSuspiciousRequest, watchRequest } from "./security.js";
 var withCockpitId = (incoming, outgoing) => {
   if (incoming.get(ID_COOKIE)) return;
   const id = newDistinctId();
@@ -20,6 +21,8 @@ var experimentRedirect = (request, config, options = {}) => {
 export {
   experimentRedirect,
   getCockpitConfig,
+  reportSuspiciousRequest,
+  watchRequest,
   withCockpitId
 };
 //# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/proxy.ts"],"sourcesContent":["import { type CockpitConfig, ID_COOKIE, PREVIEW_PARAM, newDistinctId, parsePreview, redirectFor } from \"./core\";\n\nexport { getCockpitConfig } from \"./server\";\n\n/** What `request.cookies` (Next's `RequestCookies`) offers: read, and set so that the page of this request sees the id. */\ninterface IncomingCookies {\n    get(name: string): { value: string } | undefined;\n    set(name: string, value: string): unknown;\n}\n\n/** What `response.cookies` (Next's `ResponseCookies`) offers: set with options. */\ninterface OutgoingCookies {\n    set(name: string, value: string, options?: { path?: string; maxAge?: number; sameSite?: \"lax\" | \"strict\" | \"none\" }): unknown;\n}\n\n/**\n * For `proxy.ts`: gives a first-time visitor their `ck_id` before the page renders, so the server already assigns\n * the variant they will keep. It writes a cookie, so only use it with `consent=\"cookies\"` and only once the visitor\n * agreed; in the default cookieless mode leave it out.\n *\n *   export function proxy(request: NextRequest) {\n *       const response = NextResponse.next();\n *       withCockpitId(request.cookies, response.cookies);\n *       return response;\n *   }\n */\nexport const withCockpitId = (incoming: IncomingCookies, outgoing: OutgoingCookies) => {\n    if (incoming.get(ID_COOKIE)) return;\n    const id = newDistinctId();\n    incoming.set(ID_COOKIE, id);\n    outgoing.set(ID_COOKIE, id, { path: \"/\", maxAge: 60 * 60 * 24 * 365, sameSite: \"lax\" });\n};\n\n/**\n * For `proxy.ts`: where to send this request, or null to render it. Page redirects set in MRRocket (Landing pages ›\n * Redirect) and redirect tests (Experiments) answer before the page renders, so nobody sees the old page flash. The\n * page the visitor lands on records the test's exposure (`<CockpitProvider>` reads `ck_x` there); control renders as\n * usual and the provider records it.\n *\n * A running test needs a stable visitor id to keep each person in one variant: the `ck_id` cookie (consent \"cookies\",\n * with `withCockpitId` before this), or your signed-in user id as `distinctId`. Without either, the test is left to the\n * browser (the provider redirects after the first paint); page redirects and shipped winners still answer here.\n *\n *   import { NextResponse, type NextRequest } from \"next/server\";\n *   import { experimentRedirect, getCockpitConfig } from \"@mrrocket/sdk/next/proxy\";\n *\n *   export async function proxy(request: NextRequest) {\n *       const to = experimentRedirect(request, await getCockpitConfig({ timeoutMs: 800 }));\n *       return to ? NextResponse.redirect(to, 307) : NextResponse.next();\n *   }\n *   export const config = { matcher: [\"/pricing\", \"/old-pricing\"] };\n *\n * Keep the matcher to the pages with a redirect or a test: each matched request waits for the config (at most\n * `timeoutMs`; MRRocket unreachable means no redirect).\n */\nexport const experimentRedirect = (\n    request: { url: string; cookies?: { get(name: string): { value: string } | undefined } },\n    config: CockpitConfig | null,\n    options: { distinctId?: string } = {},\n): string | null => {\n    const id = options.distinctId ?? request.cookies?.get(ID_COOKIE)?.value ?? null;\n    let preview = {};\n    try {\n        preview = parsePreview(new URL(request.url).searchParams.get(PREVIEW_PARAM));\n    } catch {\n        return null;\n    }\n    return redirectFor(config, request.url, id, preview)?.to ?? null;\n};\n"],"mappings":";AAAA,SAA6B,WAAW,eAAe,eAAe,cAAc,mBAAmB;AAEvG,SAAS,wBAAwB;AAwB1B,IAAM,gBAAgB,CAAC,UAA2B,aAA8B;AACnF,MAAI,SAAS,IAAI,SAAS,EAAG;AAC7B,QAAM,KAAK,cAAc;AACzB,WAAS,IAAI,WAAW,EAAE;AAC1B,WAAS,IAAI,WAAW,IAAI,EAAE,MAAM,KAAK,QAAQ,KAAK,KAAK,KAAK,KAAK,UAAU,MAAM,CAAC;AAC1F;AAwBO,IAAM,qBAAqB,CAC9B,SACA,QACA,UAAmC,CAAC,MACpB;AAChB,QAAM,KAAK,QAAQ,cAAc,QAAQ,SAAS,IAAI,SAAS,GAAG,SAAS;AAC3E,MAAI,UAAU,CAAC;AACf,MAAI;AACA,cAAU,aAAa,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,aAAa,CAAC;AAAA,EAC/E,QAAQ;AACJ,WAAO;AAAA,EACX;AACA,SAAO,YAAY,QAAQ,QAAQ,KAAK,IAAI,OAAO,GAAG,MAAM;AAChE;","names":[]}
+{"version":3,"sources":["../src/proxy.ts"],"sourcesContent":["import { type CockpitConfig, ID_COOKIE, PREVIEW_PARAM, newDistinctId, parsePreview, redirectFor } from \"./core\";\n\nexport { getCockpitConfig } from \"./server\";\nexport { type SecurityOptions, reportSuspiciousRequest, watchRequest } from \"./security\";\n\n/** What `request.cookies` (Next's `RequestCookies`) offers: read, and set so that the page of this request sees the id. */\ninterface IncomingCookies {\n    get(name: string): { value: string } | undefined;\n    set(name: string, value: string): unknown;\n}\n\n/** What `response.cookies` (Next's `ResponseCookies`) offers: set with options. */\ninterface OutgoingCookies {\n    set(name: string, value: string, options?: { path?: string; maxAge?: number; sameSite?: \"lax\" | \"strict\" | \"none\" }): unknown;\n}\n\n/**\n * For `proxy.ts`: gives a first-time visitor their `ck_id` before the page renders, so the server already assigns\n * the variant they will keep. It writes a cookie, so only use it with `consent=\"cookies\"` and only once the visitor\n * agreed; in the default cookieless mode leave it out.\n *\n *   export function proxy(request: NextRequest) {\n *       const response = NextResponse.next();\n *       withCockpitId(request.cookies, response.cookies);\n *       return response;\n *   }\n */\nexport const withCockpitId = (incoming: IncomingCookies, outgoing: OutgoingCookies) => {\n    if (incoming.get(ID_COOKIE)) return;\n    const id = newDistinctId();\n    incoming.set(ID_COOKIE, id);\n    outgoing.set(ID_COOKIE, id, { path: \"/\", maxAge: 60 * 60 * 24 * 365, sameSite: \"lax\" });\n};\n\n/**\n * For `proxy.ts`: where to send this request, or null to render it. Page redirects set in MRRocket (Landing pages ›\n * Redirect) and redirect tests (Experiments) answer before the page renders, so nobody sees the old page flash. The\n * page the visitor lands on records the test's exposure (`<CockpitProvider>` reads `ck_x` there); control renders as\n * usual and the provider records it.\n *\n * A running test needs a stable visitor id to keep each person in one variant: the `ck_id` cookie (consent \"cookies\",\n * with `withCockpitId` before this), or your signed-in user id as `distinctId`. Without either, the test is left to the\n * browser (the provider redirects after the first paint); page redirects and shipped winners still answer here.\n *\n *   import { NextResponse, type NextRequest } from \"next/server\";\n *   import { experimentRedirect, getCockpitConfig } from \"@mrrocket/sdk/next/proxy\";\n *\n *   export async function proxy(request: NextRequest) {\n *       const to = experimentRedirect(request, await getCockpitConfig({ timeoutMs: 800 }));\n *       return to ? NextResponse.redirect(to, 307) : NextResponse.next();\n *   }\n *   export const config = { matcher: [\"/pricing\", \"/old-pricing\"] };\n *\n * Keep the matcher to the pages with a redirect or a test: each matched request waits for the config (at most\n * `timeoutMs`; MRRocket unreachable means no redirect).\n */\nexport const experimentRedirect = (\n    request: { url: string; cookies?: { get(name: string): { value: string } | undefined } },\n    config: CockpitConfig | null,\n    options: { distinctId?: string } = {},\n): string | null => {\n    const id = options.distinctId ?? request.cookies?.get(ID_COOKIE)?.value ?? null;\n    let preview = {};\n    try {\n        preview = parsePreview(new URL(request.url).searchParams.get(PREVIEW_PARAM));\n    } catch {\n        return null;\n    }\n    return redirectFor(config, request.url, id, preview)?.to ?? null;\n};\n"],"mappings":";AAAA,SAA6B,WAAW,eAAe,eAAe,cAAc,mBAAmB;AAEvG,SAAS,wBAAwB;AACjC,SAA+B,yBAAyB,oBAAoB;AAwBrE,IAAM,gBAAgB,CAAC,UAA2B,aAA8B;AACnF,MAAI,SAAS,IAAI,SAAS,EAAG;AAC7B,QAAM,KAAK,cAAc;AACzB,WAAS,IAAI,WAAW,EAAE;AAC1B,WAAS,IAAI,WAAW,IAAI,EAAE,MAAM,KAAK,QAAQ,KAAK,KAAK,KAAK,KAAK,UAAU,MAAM,CAAC;AAC1F;AAwBO,IAAM,qBAAqB,CAC9B,SACA,QACA,UAAmC,CAAC,MACpB;AAChB,QAAM,KAAK,QAAQ,cAAc,QAAQ,SAAS,IAAI,SAAS,GAAG,SAAS;AAC3E,MAAI,UAAU,CAAC;AACf,MAAI;AACA,cAAU,aAAa,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,aAAa,CAAC;AAAA,EAC/E,QAAQ;AACJ,WAAO;AAAA,EACX;AACA,SAAO,YAAY,QAAQ,QAAQ,KAAK,IAAI,OAAO,GAAG,MAAM;AAChE;","names":[]}

package/dist/react-native/index.d.cts

@@ -414,6 +414,116 @@ interface FlowsController {
     };
 }
 
+/**
+ * Paywalls with several pages (SDK 0.14.0): what MRRocket's config serves under `paywalls` (one per placement, built
+ * in MRRocket › Conversion › Paywalls) and a small controller that walks the person through its pages, page after page,
+ * until the last one hands the chosen plan to the app. No DOM and no React: the web renderer (`mountPaywall` in
+ * flows-ui.ts, loaded only when a paywall opens) and the React Native one (native/flows-view.ts) draw `view()` and
+ * call the actions.
+ *
+ * MRRocket never takes a payment. The last page's button calls the app's `onPurchase(plan)`, which buys through the
+ * app's own store code (StoreKit or Play through RevenueCat or Adapty, or Stripe Checkout on the web); only when it
+ * resolves is the purchase recorded. It throwing keeps the paywall open with an error, resolving `false` (the person
+ * closed the store sheet) keeps it open without one.
+ *
+ * A running test on the paywall (`experiment`) gives each person their variant's pages, by the same stable hash as
+ * every other test (`assign`), and records `$exposure` when the paywall opens. What it records, as normal events under
+ * the SDK's analytics consent:
+ * - `$paywall` `{paywall, placement, variant, page, index, action: "page"}` the first time each page shows in a run,
+ *   so MRRocket shows how many reach page 2 and 3;
+ * - `{action: "purchased", plan}` after `onPurchase` went through (a test's purchase goal counts it), and
+ *   `{action: "closed", index}` when the person closed it.
+ */
+
+/** One page of a paywall. Plans pages list the plans and buy; the others say why and go on. */
+interface PaywallPage {
+    id: string;
+    /** "benefits": a list of what the person gets; "proof": quotes of happy customers; "plans": the plans and the buy button. */
+    kind: "benefits" | "proof" | "plans";
+    title: string;
+    body?: string;
+    /** Benefits: one line each. */
+    items?: string[];
+    /** Proof: what customers said, and who. */
+    quotes?: {
+        text: string;
+        by?: string;
+    }[];
+    /** The button: "Continue" on the way, the buy button on the plans page ("Start free trial"). */
+    button?: string;
+}
+/** A plan the paywall offers. `id` is what the app buys: the store product id or the Stripe price, as set in MRRocket. */
+interface PaywallPlan {
+    id: string;
+    name: string;
+    /** As shown ("€59.99 / year"). The app's own store prices win when it passes `plans`. */
+    price: string;
+    /** A line under it ("€5 a month", "7 days free"). */
+    note?: string;
+}
+/** A published paywall as the config serves it. */
+interface PaywallConfig {
+    id: string;
+    /** The placement's key (`onboarding_end`), what the app opens: `paywall.open("onboarding_end")`. */
+    placement: string;
+    /** The running test on it, a key of `experiments`; each of its variants has pages under `variants`. */
+    experiment?: string;
+    /** Control (the live paywall) first. */
+    variants: {
+        id: VariantId;
+        pages: PaywallPage[];
+    }[];
+    plans: PaywallPlan[];
+    /** The plan picked before the person picks one. */
+    highlight?: string;
+}
+interface PaywallResult {
+    /**
+     * "purchased": `onPurchase` went through; "chosen": the person picked a plan and there is no `onPurchase`, so the app
+     * buys it now (the store's purchase still counts for a test through RevenueCat or Adapty); "closed": the person
+     * closed it (or there was no paywall).
+     */
+    outcome: "purchased" | "chosen" | "closed";
+    plan?: PaywallPlan;
+    paywall?: string;
+    variant?: VariantId;
+    /** The page the person was on, from 0. */
+    index: number;
+}
+interface PaywallOptions {
+    /**
+     * Buy the plan in your code (RevenueCat `purchasePackage`, Adapty `makePurchase`, Stripe Checkout). Throwing keeps
+     * the paywall open with an error; `false` keeps it open without one (the person cancelled the store sheet).
+     */
+    onPurchase?: (plan: PaywallPlan) => unknown;
+    /** Your store's plans with their local prices, by the same ids; they replace what MRRocket has for them. */
+    plans?: PaywallPlan[];
+    onClose?: (result: PaywallResult) => void;
+}
+interface PaywallView {
+    paywall: PaywallConfig;
+    variant: VariantId;
+    page: PaywallPage;
+    index: number;
+    total: number;
+    last: boolean;
+    plans: PaywallPlan[];
+    /** The picked plan's id. */
+    plan?: string;
+    busy: boolean;
+    error?: string;
+}
+interface PaywallHost {
+    /** Opens the paywall of a placement; resolves when it is bought or closed (at once with "closed" when there is none). */
+    open(placement: string, options?: PaywallOptions): Promise<PaywallResult>;
+    view(): PaywallView | null;
+    subscribe(listener: () => void): () => void;
+    next(): void;
+    back(): void;
+    pick(planId: string): void;
+    close(): void;
+}
+
 /**
  * The part of the SDK that runs anywhere: experiment config, variant assignment, preview links and event shapes.
  * No React, no browser APIs, so the server helper, the proxy helper and the client share it.
@@ -421,7 +531,7 @@ interface FlowsController {
 
 type VariantId = string;
 /** This build of the SDK. Sent with the config request so MRRocket knows what the site runs (error tracking, flags). */
-declare const SDK_VERSION = "0.12.0";
+declare const SDK_VERSION = "0.14.0";
 /** One variant of an experiment. `changes` replaces texts that the page marks with `<Text id>`. */
 interface VariantConfig {
     id: VariantId;
@@ -478,6 +588,8 @@ interface CockpitConfig {
     messages?: boolean;
     /** Page redirects set in MRRocket; the SDK sends visitors on before the page shows (`redirectFor`). SDK 0.7.0+. */
     redirects?: RedirectConfig[];
+    /** Published paywalls with their pages, per placement (MRRocket › Conversion › Paywalls), for `paywall.open()`. SDK 0.14.0+. */
+    paywalls?: PaywallConfig[];
 }
 /** One condition of a flag's audience, on a property of the person (`identify(id, props)`), the id or the page. */
 interface FlagCondition {
@@ -668,6 +780,14 @@ interface MRRocketClient {
     openCancelFlow(options?: CancelFlowOptions): Promise<CancelFlowResult>;
     /** Starts an onboarding flow now (the first live one without an id). False when there is none. */
     startOnboarding(id?: string): boolean;
+    /**
+     * Shows the paywall of a placement built in MRRocket › Paywalls page by page (drawn by `<MRRocketProvider>`). Its
+     * last page hands the chosen plan to `onPurchase`, where your code buys it (RevenueCat, Adapty, StoreKit, Play);
+     * MRRocket never takes a payment. Pass your store's `plans` to show their local prices.
+     */
+    openPaywall(placement: string, options?: PaywallOptions): Promise<PaywallResult>;
+    /** The open paywall for a renderer (the provider's, or your own). */
+    paywall: PaywallHost;
     /**
      * Push notifications from your Lifecycle journeys for the signed-in person (call `identify` first). Asks the
      * permission (unless `ask: false`), gets the Expo push token and sends it to MRRocket. Needs `expo-notifications`.
@@ -720,8 +840,9 @@ interface NativeAppearance {
     theme?: "light" | "dark" | "auto";
     accent?: string;
 }
-declare const MRRocketFlows: ({ flows, appearance }: {
+declare const MRRocketFlows: ({ flows, paywall, appearance }: {
     flows: FlowsController;
+    paywall?: PaywallHost;
     appearance?: NativeAppearance;
 }) => react.FunctionComponentElement<Record<string, unknown>> | null;
 
@@ -891,6 +1012,16 @@ declare const usePush: () => {
     register: MRRocketClient["registerForPush"];
     unregister: MRRocketClient["unregisterForPush"];
 };
+/**
+ * The paywalls built in MRRocket › Paywalls, page by page; the provider draws them. The last page hands the chosen plan
+ * to `onPurchase`, where your code buys it. MRRocket never takes a payment.
+ *
+ *     const paywall = usePaywall();
+ *     paywall.open("onboarding_end", { plans: storePlans, onPurchase: (plan) => Purchases.purchasePackage(packages[plan.id]) });
+ */
+declare const usePaywall: () => {
+    open: MRRocketClient["openPaywall"];
+};
 /** Starts an onboarding flow now (the first live one without an id), whatever its trigger. */
 declare const useOnboarding: () => {
     start: (id?: string) => boolean;
@@ -929,4 +1060,4 @@ declare const useExpoRouterTracking: () => void;
  */
 declare const useNavigationTracking: () => (state: unknown) => void;
 
-export { type AppContext, type CancelFlowConfig, type CancelFlowOptions, type CancelFlowResult, type CancelOffer, type ChatMessage, type ChatThread, type CockpitConfig, type FeedbackPost, type FlagConfig, type FlowView, type InAppMessage, type KeyValueStorage, type MRRocketClient, MRRocketFeedback, MRRocketFlows, MRRocketMask, MRRocketMessenger, type MRRocketOptions, MRRocketProvider, type MRRocketProviderProps, MRRocketSurveys, type NativeAppearance, type NativeConsent, type NativeFeedbackOptions, type NativeMessengerOptions, type NativePushResult, type NativePushStatus, type OnboardingFlow, type OnboardingStep, type RegisterForPushOptions, SDK_VERSION, type SurveyDefinition, type VariantId, activeRouteName, createMRRocket, getMRRocket, useCancelFlow, useExpoRouterTracking, useFeedback, useFlag, useFlagVariant, useMRRocket, useMessenger, useNavigationTracking, useOnboarding, usePush, useText, useVariant };
+export { type AppContext, type CancelFlowConfig, type CancelFlowOptions, type CancelFlowResult, type CancelOffer, type ChatMessage, type ChatThread, type CockpitConfig, type FeedbackPost, type FlagConfig, type FlowView, type InAppMessage, type KeyValueStorage, type MRRocketClient, MRRocketFeedback, MRRocketFlows, MRRocketMask, MRRocketMessenger, type MRRocketOptions, MRRocketProvider, type MRRocketProviderProps, MRRocketSurveys, type NativeAppearance, type NativeConsent, type NativeFeedbackOptions, type NativeMessengerOptions, type NativePushResult, type NativePushStatus, type OnboardingFlow, type OnboardingStep, type PaywallConfig, type PaywallOptions, type PaywallPage, type PaywallPlan, type PaywallResult, type RegisterForPushOptions, SDK_VERSION, type SurveyDefinition, type VariantId, activeRouteName, createMRRocket, getMRRocket, useCancelFlow, useExpoRouterTracking, useFeedback, useFlag, useFlagVariant, useMRRocket, useMessenger, useNavigationTracking, useOnboarding, usePaywall, usePush, useText, useVariant };

package/dist/react-native/index.d.ts

@@ -414,6 +414,116 @@ interface FlowsController {
     };
 }
 
+/**
+ * Paywalls with several pages (SDK 0.14.0): what MRRocket's config serves under `paywalls` (one per placement, built
+ * in MRRocket › Conversion › Paywalls) and a small controller that walks the person through its pages, page after page,
+ * until the last one hands the chosen plan to the app. No DOM and no React: the web renderer (`mountPaywall` in
+ * flows-ui.ts, loaded only when a paywall opens) and the React Native one (native/flows-view.ts) draw `view()` and
+ * call the actions.
+ *
+ * MRRocket never takes a payment. The last page's button calls the app's `onPurchase(plan)`, which buys through the
+ * app's own store code (StoreKit or Play through RevenueCat or Adapty, or Stripe Checkout on the web); only when it
+ * resolves is the purchase recorded. It throwing keeps the paywall open with an error, resolving `false` (the person
+ * closed the store sheet) keeps it open without one.
+ *
+ * A running test on the paywall (`experiment`) gives each person their variant's pages, by the same stable hash as
+ * every other test (`assign`), and records `$exposure` when the paywall opens. What it records, as normal events under
+ * the SDK's analytics consent:
+ * - `$paywall` `{paywall, placement, variant, page, index, action: "page"}` the first time each page shows in a run,
+ *   so MRRocket shows how many reach page 2 and 3;
+ * - `{action: "purchased", plan}` after `onPurchase` went through (a test's purchase goal counts it), and
+ *   `{action: "closed", index}` when the person closed it.
+ */
+
+/** One page of a paywall. Plans pages list the plans and buy; the others say why and go on. */
+interface PaywallPage {
+    id: string;
+    /** "benefits": a list of what the person gets; "proof": quotes of happy customers; "plans": the plans and the buy button. */
+    kind: "benefits" | "proof" | "plans";
+    title: string;
+    body?: string;
+    /** Benefits: one line each. */
+    items?: string[];
+    /** Proof: what customers said, and who. */
+    quotes?: {
+        text: string;
+        by?: string;
+    }[];
+    /** The button: "Continue" on the way, the buy button on the plans page ("Start free trial"). */
+    button?: string;
+}
+/** A plan the paywall offers. `id` is what the app buys: the store product id or the Stripe price, as set in MRRocket. */
+interface PaywallPlan {
+    id: string;
+    name: string;
+    /** As shown ("€59.99 / year"). The app's own store prices win when it passes `plans`. */
+    price: string;
+    /** A line under it ("€5 a month", "7 days free"). */
+    note?: string;
+}
+/** A published paywall as the config serves it. */
+interface PaywallConfig {
+    id: string;
+    /** The placement's key (`onboarding_end`), what the app opens: `paywall.open("onboarding_end")`. */
+    placement: string;
+    /** The running test on it, a key of `experiments`; each of its variants has pages under `variants`. */
+    experiment?: string;
+    /** Control (the live paywall) first. */
+    variants: {
+        id: VariantId;
+        pages: PaywallPage[];
+    }[];
+    plans: PaywallPlan[];
+    /** The plan picked before the person picks one. */
+    highlight?: string;
+}
+interface PaywallResult {
+    /**
+     * "purchased": `onPurchase` went through; "chosen": the person picked a plan and there is no `onPurchase`, so the app
+     * buys it now (the store's purchase still counts for a test through RevenueCat or Adapty); "closed": the person
+     * closed it (or there was no paywall).
+     */
+    outcome: "purchased" | "chosen" | "closed";
+    plan?: PaywallPlan;
+    paywall?: string;
+    variant?: VariantId;
+    /** The page the person was on, from 0. */
+    index: number;
+}
+interface PaywallOptions {
+    /**
+     * Buy the plan in your code (RevenueCat `purchasePackage`, Adapty `makePurchase`, Stripe Checkout). Throwing keeps
+     * the paywall open with an error; `false` keeps it open without one (the person cancelled the store sheet).
+     */
+    onPurchase?: (plan: PaywallPlan) => unknown;
+    /** Your store's plans with their local prices, by the same ids; they replace what MRRocket has for them. */
+    plans?: PaywallPlan[];
+    onClose?: (result: PaywallResult) => void;
+}
+interface PaywallView {
+    paywall: PaywallConfig;
+    variant: VariantId;
+    page: PaywallPage;
+    index: number;
+    total: number;
+    last: boolean;
+    plans: PaywallPlan[];
+    /** The picked plan's id. */
+    plan?: string;
+    busy: boolean;
+    error?: string;
+}
+interface PaywallHost {
+    /** Opens the paywall of a placement; resolves when it is bought or closed (at once with "closed" when there is none). */
+    open(placement: string, options?: PaywallOptions): Promise<PaywallResult>;
+    view(): PaywallView | null;
+    subscribe(listener: () => void): () => void;
+    next(): void;
+    back(): void;
+    pick(planId: string): void;
+    close(): void;
+}
+
 /**
  * The part of the SDK that runs anywhere: experiment config, variant assignment, preview links and event shapes.
  * No React, no browser APIs, so the server helper, the proxy helper and the client share it.
@@ -421,7 +531,7 @@ interface FlowsController {
 
 type VariantId = string;
 /** This build of the SDK. Sent with the config request so MRRocket knows what the site runs (error tracking, flags). */
-declare const SDK_VERSION = "0.12.0";
+declare const SDK_VERSION = "0.14.0";
 /** One variant of an experiment. `changes` replaces texts that the page marks with `<Text id>`. */
 interface VariantConfig {
     id: VariantId;
@@ -478,6 +588,8 @@ interface CockpitConfig {
     messages?: boolean;
     /** Page redirects set in MRRocket; the SDK sends visitors on before the page shows (`redirectFor`). SDK 0.7.0+. */
     redirects?: RedirectConfig[];
+    /** Published paywalls with their pages, per placement (MRRocket › Conversion › Paywalls), for `paywall.open()`. SDK 0.14.0+. */
+    paywalls?: PaywallConfig[];
 }
 /** One condition of a flag's audience, on a property of the person (`identify(id, props)`), the id or the page. */
 interface FlagCondition {
@@ -668,6 +780,14 @@ interface MRRocketClient {
     openCancelFlow(options?: CancelFlowOptions): Promise<CancelFlowResult>;
     /** Starts an onboarding flow now (the first live one without an id). False when there is none. */
     startOnboarding(id?: string): boolean;
+    /**
+     * Shows the paywall of a placement built in MRRocket › Paywalls page by page (drawn by `<MRRocketProvider>`). Its
+     * last page hands the chosen plan to `onPurchase`, where your code buys it (RevenueCat, Adapty, StoreKit, Play);
+     * MRRocket never takes a payment. Pass your store's `plans` to show their local prices.
+     */
+    openPaywall(placement: string, options?: PaywallOptions): Promise<PaywallResult>;
+    /** The open paywall for a renderer (the provider's, or your own). */
+    paywall: PaywallHost;
     /**
      * Push notifications from your Lifecycle journeys for the signed-in person (call `identify` first). Asks the
      * permission (unless `ask: false`), gets the Expo push token and sends it to MRRocket. Needs `expo-notifications`.
@@ -720,8 +840,9 @@ interface NativeAppearance {
     theme?: "light" | "dark" | "auto";
     accent?: string;
 }
-declare const MRRocketFlows: ({ flows, appearance }: {
+declare const MRRocketFlows: ({ flows, paywall, appearance }: {
     flows: FlowsController;
+    paywall?: PaywallHost;
     appearance?: NativeAppearance;
 }) => react.FunctionComponentElement<Record<string, unknown>> | null;
 
@@ -891,6 +1012,16 @@ declare const usePush: () => {
     register: MRRocketClient["registerForPush"];
     unregister: MRRocketClient["unregisterForPush"];
 };
+/**
+ * The paywalls built in MRRocket › Paywalls, page by page; the provider draws them. The last page hands the chosen plan
+ * to `onPurchase`, where your code buys it. MRRocket never takes a payment.
+ *
+ *     const paywall = usePaywall();
+ *     paywall.open("onboarding_end", { plans: storePlans, onPurchase: (plan) => Purchases.purchasePackage(packages[plan.id]) });
+ */
+declare const usePaywall: () => {
+    open: MRRocketClient["openPaywall"];
+};
 /** Starts an onboarding flow now (the first live one without an id), whatever its trigger. */
 declare const useOnboarding: () => {
     start: (id?: string) => boolean;
@@ -929,4 +1060,4 @@ declare const useExpoRouterTracking: () => void;
  */
 declare const useNavigationTracking: () => (state: unknown) => void;
 
-export { type AppContext, type CancelFlowConfig, type CancelFlowOptions, type CancelFlowResult, type CancelOffer, type ChatMessage, type ChatThread, type CockpitConfig, type FeedbackPost, type FlagConfig, type FlowView, type InAppMessage, type KeyValueStorage, type MRRocketClient, MRRocketFeedback, MRRocketFlows, MRRocketMask, MRRocketMessenger, type MRRocketOptions, MRRocketProvider, type MRRocketProviderProps, MRRocketSurveys, type NativeAppearance, type NativeConsent, type NativeFeedbackOptions, type NativeMessengerOptions, type NativePushResult, type NativePushStatus, type OnboardingFlow, type OnboardingStep, type RegisterForPushOptions, SDK_VERSION, type SurveyDefinition, type VariantId, activeRouteName, createMRRocket, getMRRocket, useCancelFlow, useExpoRouterTracking, useFeedback, useFlag, useFlagVariant, useMRRocket, useMessenger, useNavigationTracking, useOnboarding, usePush, useText, useVariant };
+export { type AppContext, type CancelFlowConfig, type CancelFlowOptions, type CancelFlowResult, type CancelOffer, type ChatMessage, type ChatThread, type CockpitConfig, type FeedbackPost, type FlagConfig, type FlowView, type InAppMessage, type KeyValueStorage, type MRRocketClient, MRRocketFeedback, MRRocketFlows, MRRocketMask, MRRocketMessenger, type MRRocketOptions, MRRocketProvider, type MRRocketProviderProps, MRRocketSurveys, type NativeAppearance, type NativeConsent, type NativeFeedbackOptions, type NativeMessengerOptions, type NativePushResult, type NativePushStatus, type OnboardingFlow, type OnboardingStep, type PaywallConfig, type PaywallOptions, type PaywallPage, type PaywallPlan, type PaywallResult, type RegisterForPushOptions, SDK_VERSION, type SurveyDefinition, type VariantId, activeRouteName, createMRRocket, getMRRocket, useCancelFlow, useExpoRouterTracking, useFeedback, useFlag, useFlagVariant, useMRRocket, useMessenger, useNavigationTracking, useOnboarding, usePaywall, usePush, useText, useVariant };